Backgrounds
Univention Summit 2021: transferring a proven format to the web
The Univention Summit looks back on a 13-year tradition as a place of exchange and discussion around the topics of digital sovereignty and sovereign IT infrastructures. This year, for the first time, it had to be purely digital. This article looks back at the challenge of translating such an event, with all its interactivity and […]
IT expenses and Covid-19: learnings for companies
Throughout the Covid-19 crisis, the IT requirements in many companies, organizations and governments have fundamentally changed as has the awareness for IT. For many organizations, it saw the widespread adoption of remote working policies. Often, these changes were required to be implemented overnight, when government- issued stay-at-home-orders created a new reality. Here is the take […]
Let’s take the Corona crisis as an opportunity
The Corona crisis has had a huge impact on our society. Office workers had to start working remotely, medical professionals had countless double shifts and delivery companies went into over drive. Winners and losers everywhere – Amazon grew turnover by 25% in the second quarter of 2020, the cloud computing department of Microsoft saw a […]
Digital Sovereignty is an Indispensable Prerequisite for the Resilience of Our IT Systems – First Lessons from the Corona Crisis
We are in the transition to a “new normal”. However it will look different from the normality before the corona pandemic. Step by step areas of life are being ramped up that until recently were in an unprecedented exceptional situation. This involved a lot of stresses, but it has also brought new and valuable insights […]
Two Standards But One Common Single Sign-on – Integration of SAML and OpenID Connect
The integration of Kopano Konnect in the single sign-on network of Univention Corporate Server is an additional option for users to access a range of various applications that are integrated in UCS via a single, initial login using their user name and password. The two authentication standards SAML (Security Assertion Markup Language) and OpenID Connect […]
Synchronize Password Hashes between MS Active Directory and UCS
Version 4.4-4 of Univention Corporate Server (UCS) comes with some cool new features, one of them being the new AD Connector app. It makes the synchronization of password hashes between a Microsoft Active Directory domain and a UCS domain significantly more secure and less error-prone. While previous versions could only synchronize NTLM hashes, the AD […]
Setting up an Automatic Account Lockout after Failed Login Attempts
By default, UCS users can enter the password incorrectly any number of times without being locked out by the system. In order to make brute force attacks to crack passwords more difficult, admins can set up an automatic lockout that prevents an account from being accessed after a user-defined number of failed attempts. Univention Corporate […]
Brief Introduction: What is a Linux Derivative?
Univention Corporate Server (UCS) and Univention Corporate Server @ school (UCS@school) are Debian derivatives, i.e. operating systems derived from the Linux distribution Debian GNU/Linux. So, what exactly is Linux, what is a Linux distribution, and what does derivative mean? Read on to find out more about these terms and the connection between UCS and Debian […]
Brief Introduction: SAML- a secure, comfortable web access
SAML – meaning „Security Assertion Markup Language“ – is a standard which enables a Single Sign-On (SSO). Users only log in once and are able to use other programs and services automatically. UCS supports SSO with SAML as well. That‘s why users get not only a central identity by using SAML but also a central […]
UCS: How to set up LDAP Replication
The central element of every identity management system is usually a directory service, a repository that stores and manages information like user profiles and access privileges, and network resources. Univention Corporate Server (UCS) uses OpenLDAP for this task. If the directory service is down, many other services are no longer available. In this article we […]