ONLYOFFICE Docs: brand new name and big updates for spreadsheets

ONLYOFFICE Docs V6.0

ONLYOFFICE is a collaborative office suite for working with text documents, spreadsheets and presentations in UCS. It is combined with Nextcloud, ownCloud, or Seafile and installed from Univention App Center casually (Docker-based) or as a pre-configured virtual appliance. You can also integrate it in UCS LDAP to manage all users.
In this article I’d like to tell you about the latest major update that brings a new name for ONLYOFFICE online editors as well as long-awaited features for spreadsheets.

Cloud Office: Open Source is the better solution

These days, a modern workflow includes fast coordination processes in teams that should also function independently of time and location. For this type of collaboration, it is essential that all team members can edit documents together without conflicts due to different file versions or endless and tiring comment loops. In this article I’d like to show you two examples which represent open source alternatives to cloud office solutions from known software giants.

IT expenses and Covid-19: learnings for companies

Dark server room with red covid-19 badge

Throughout the Covid-19 crisis, the IT requirements in many companies, organizations and governments have fundamentally changed as has the awareness for IT. For many organizations, it saw the widespread adoption of remote working policies. Often, these changes were required to be implemented overnight, when government- issued stay-at-home-orders created a new reality. Here is the take from our partners and customers on how efficiency gains, system integration and task delegation have changed their IT environment.

Create an SSO Login for Applications to Groups

SSO mit SAML für UCS-Gruppen
Since the introduction of single sign-on support in Univention Corporate Server (UCS) via Secure Authentication Markup Language (SAML), an administrator can assign a user within the user object to those applications, called service providers in the SAML context, he or she can log in to via single sign-on. As for administrators in organizations with many users, this assignment can be time-consuming.

Two Standards But One Common Single Sign-on – Integration of SAML and OpenID Connect

The integration of Kopano Konnect in the single sign-on network of Univention Corporate Server is an additional option for users to access a range of various applications that are integrated in UCS via a single, initial login using their user name and password.
The two authentication standards SAML (Security Assertion Markup Language) and OpenID Connect have already been available to UCS users for some time. So far, however, these two technologies have been two separated worlds. If some of the web services used SAML and others OpenID Connect for the authentication against UCS’ identity management, users were forced to log in twice in those environments with multiple services. With the support of the Kopano team, we were able to release an extension of the app “OpenID Connect ID” in the App Center. This is integrating the two standards with each other and thus allows a single authentication process by the end user.
I would like to briefly explain how a single sign-on generally works with UCS. Then I explain the interaction of Kerberos, SAML, and OpenID Connect and show you which functions the new implementation of Kopano Konnect offers to UCS users.

Setting up an Automatic Account Lockout after Failed Login Attempts

By default, UCS users can enter the password incorrectly any number of times without being locked out by the system. In order to make brute force attacks to crack passwords more difficult, admins can set up an automatic lockout that prevents an account from being accessed after a user-defined number of failed attempts.

Univention Corporate Server offers several methods for authentication and authorization. In this blog article I will show you how to log failed login attempts to the system via PAM stack, OpenLDAP and Samba respectively and how you as an admin can set a limit for the number of unsuccessful logins.

Digital Offers for Schools: with Nextcloud, itslearning and Co. through the Corona Crisis – Interview City of Wolfsburg

Mr. Ostendorf, how many schools, students and teachers do you supervise in Wolfsburg?
Being an urban district, our area of responsibility includes 37 schools at 43 different locations. About 1,500 teachers teach a total of 17,000 students at these schools.

Which digital offers are you already using?
We usually have local school server solutions at our schools. We are using iServ at three vocational schools, Logodidact mostly at secondary schools and we still have the MNSPro solution at primary and a few secondary schools. A pilot project was launched four years ago with a council decision. The aim is to test a concept for the implementation of a cross-school solution that is centrally operated and maintained by the school authorities. With the support of the system house Linet Services GmbH that is located in Braunschweig we implemented an identity management system based on UCS@school at six pilot schools with around 5,000 users in 2017. The digital identities of the teachers and students are stored centrally in the identity management system and each user has a uniform user name and password. With these, the users have secure and controlled access via RADIUS to the school WiFi, which is distributed uniformly to all pilot schools. Docked to the IDM of UCS@school we also operate the learning management solution itslearning.

Interview with Malte Clemens: Digital Offers for Schools, City of Hannover

How many schools with how many students and teachers do you supervise?

99 schools, approx.47,000 students, approx. 5,000 teachers

Which digital offers are you already using? How do you deploy them?

The state capital of Hanover (LHH) supports the schools in their administrative tasks, such as the maintenance and software equipment of the school secretariats’ computers.
There has never been a comprehensive central IT offering for the classes. By this, a large number of individual solutions have emerged in schools in recent years. The hardware procurement was carried out by the LHH and for the support the schools received an IT budget.

Practical Use of the REST API Using the Example of EGroupware

The Univention Directory Manager (UDM) enables access to content in the LDAP directory service, for example viewing, editing, deleting, and moving of objects (users, groups, computers, printers, shares, etc.).
The UDM can be accessed and controlled via both the web interface and the command line. In UCS 4.4-2, a third option has now also been added: the REST API. This interface connects applications with the UCS directory service via HTTPS and supports the maintenance of the user properties or computer objects of the connected systems.
This article begins by explaining the technical background of the REST API and its implementation in UCS.
During the implementation of the REST API, an exciting exchange took place between Univention and the developers at EGroupware GmbH in Kaiserslautern, Germany. As a result, EGroupware became the first solution to employ the new interface in the Univention App Center. In the second section of the article, Ralf Becker from EGroupware explains the implementation of the new API and the advantages it offers providers of third-party applications.