Certification (UVCP)

Description:

The candidates should be in a position to perform a UCS installation interactively and profile-based, perform proper configuration of the individual components and analyse and resolve any installation problems. (Weighting: 3)

Most important knowledge areas:

• Testing of UCS compatibility of a system
• Configuration of basic settings (e.g., LDAP base, computer name, DNS domain name)
• Configuration of the network properties (routing, IP configuration, DNS, DHCP, Bridging, Bonding, VLANs)
• Knowledge of the possible software selection for the individual system roles
• Partitioning of the hard drives of a system with and without LVM
• Analysis of installation problems using the log files

List of important details, directories, configuration registry variables and applications:
Univention Installer
grub/append, grub/timeout, grub/gfxmode
UCR: interfaces/ethX/address, interfaces/ethX/broadcast, interfaces/ethX/netmask, interfaces/ethX/network, interfaces/ethX/ipv6/acceptRA
UCR: domainname, gateway, hostname
UCR: kernel/modules
UCR: nameserver/external, nameserver1
UCR: dns/forwarder1

Description:

The candidates should be familiar with the different system role components of a UCS domain and their joining procedures and be in a position to analyse and resolve any problems which occur. (Weighting: 7)

Most important knowledge areas:

• Properties and particularities of the individual system roles
• Joining of UCS systems in a domain
• Joining of Microsoft Windows systems in a domain
• Upgrading of domain controller backup to domain controller master
• Analysis of domain joining problems and resolution of any error situations
• Administration of the UCS license
• Execution of a domain join in Active Directory domains
• Time synchronisation in UCS domains

List of important details, directories, configuration registry variables and applications:

Univention Management Console
univention-join
/var/log/univention/join.log
$HOME/.univention-server-join
/var/log/samba/*
univention-license-check
univention-license-import
univention-backup2master
UCR: server/role
/usr/lib/univention-install
univention-run-join-scripts
LDAP-Container: cn=univention,cn=license

Description: 

The candidates should be in a position to master the basics of the OpenLDAP directory service and the UCS-specific expansions based on it and to design and realise the structure of a directory (including the employment of ACLs and the configuration of indices. In addition, the candidates should be in a position to analyse and correct error situations. (Weighting: 7)

Most important knowledge areas:

• Basic LDAP terms (e.g., schemas, DNs, object classes, attributes, OID)
• Planning and structuring of directories (OUs and containers)
• Listener/notifier replication
• Expansion and replication of LDAP schemas
• Knowledge of the LDAP tools
• Configuration and optimisation of the OpenLDAP service (ACLs, indices)
• Capability of troubleshooting and analysing replication problems

List of important details, directories, configuration registry variables and applications:

ldapsearch, ldapmodify, ldapdelete, slapcat, slapadd, ldapmodrdn
univention-ldapsearch
OpenLDAP
Univention Directory Listener
Univention Directory Notifier
Univention Directory Logger
/etc/ldap/slapd.conf
/var/log/syslog
/var/lib/univention-ldap/notify/transaction
/var/lib/univention-directory-listener/notifier_id
/var/log/univention/listener.log
/var/log/univention/notifier.log
univention-directory-listener-ctrl
/var/lib/univention-ldap/schema.conf
/var/lib/univention-ldap-replication/failed.ldif
UCR: ldap/base, ldap/cachesize, ldap/debug/level, ldap/hostdn, ldap/index/approx
UCR: ldap/index/eq, ldap/index/pres, ldap/index/sub, ldap/master
UCR: ldap/server/ip, ldap/server/name, ldap/server/type
UCR: ldap/acl/read/anonymous, ldap/idletimeout, ldap/server/port
UCR: listener/debug/level, notifier/debug/level
/etc/ldap.secret

Description:

The candidates should be in a position to use the domain management of the Univention Management Console (and the command line frontend Univention Directory Manager) efficiently to change domain-wide configurations and to adapt and expand the domain management. (Weighting: 4)

Most important knowledge areas:

• Use of web-based domain management in the Univention Management Console (navigation in the LDAP tree, wizards, settings, user templates)
• Creation of policy-based configuration
• Expansion of Univention Management Console/domain management with expanded attributes
• Use of command line frontend of domain management (Univention Directory Manager)

List of important details, directories, configuration registry variables and applications:

Univention Management Console
univention-directory-manager (udm)
univention-policy-result
/var/log/univention/management-console-server.log
/var/log/univention/management-console-web.log
/var/log/univention/management-console-module-udm.log
LDAP-Container: cn=univention
UCR: umc/module/debug/level, umc/server/debug/level

Description:

The candidates should be aware of the different authentication possibilities within a UCS domain and be in a position to manage the users and user groups via the UCS management system. (Weighting: 5)

Most important knowledge areas:

• Creation and management of users and the corresponding account properties
• Creation and management of groups and the corresponding account properties, assignment of users, groups and computers to groups
• Knowledge of typical account management procedures such as the blocking of users and resetting of passwords
• Tools of the Kerberos authentication
• Knowledge of different password changing procedures
• Specifications concerning password quality (e.g., expiry date, minimum length, history)
• Analysis of log-in errors in UCS and Microsoft Windows
• Compilation of reports about user information

List of important details, directories, configuration registry variables and applications:

Univention Management Console
Univention Directory Reports
kinit, kpasswd, kdestroy
passwd
/var/log/auth.log
/etc/univention/directory/reports
/var/log/syslog
/etc/pam.d/
UCR: kerberos/adminserver, kerberos/kdc, kerberos/realm
UCR: auth/DIENST/group/GRUPPENNAME
LDAP-Container: cn=univention,cn=templates

Description:

The candidates should be in a position to configure local computer configuration properties, perform a backup of data and define the selection of installed software. (Weighting: 6)

Most important knowledge areas:

• Knowledge of package and release care possibilities
• Administration of SSL certificates
• Administration of configuration properties via Univention Configuration Registry, use and expansion of templates
• Subsequent alteration of system properties via the UMC module Basic settings
• Knowledge of the file system Hierarchy Standard

List of important details, directories, configuration registry variables and applications:

Univention Management Console
NSCD
univention-config-registry (ucr)
/etc/univention/templates
/etc/univention/ssl
univention-certificate
univention-upgrade
univention-install
/etc/machine.secret
apt-cache
UMC-Modul Basiseinstellungen
UCR: ssl/common, ssl/country, ssl/default/days, ssl/email, ssl/locality, ssl/organization
UCR: ssl/organizationalunit, ssl/state, ssl/validity/check, ssl/validity/days, ssl/validity/warning
UCR: auth/DIENST/group/GRUPPENNAME
UCR: kernel/modules

Description:

The candidates should be in a position to configure and operate central software distribution. (Weighting: 3)

Most important knowledge areas:

• Installation and setup of the software monitor
• Setup and operation of software repositories
• Installation of errata and release updates
• Configuration of systems via package care policies

List of important details, directories, configuration registry variables and applications:

Univention Software Monitor
univention-repository-[addpackage|removepackage|sync|merge]
univention-install
univention-upgrade
dpkg
/etc/apt/sources.list.d
apt-cache
UCR: pkgdb/scan
UCR: update/secure_apt
UCR: repository/online/maintained, repository/online/unmaintained, repository/online/server
UCR: local/repository, repository/mirror

Description:

The candidates should be in a position to manage virtual machines in the web interface UVMM and the command line and to analyse and resolve any problems. (Weighting: 3)

Most important knowledge areas:

• Construction and operation of a virtualization infrastructure with UCS and the virtualization technology KVM (virtualization servers, storage pools, configuration of UVMM)
• virtio support drivers for Microsoft Windows
• Use of the Univention Virtual Machine Manager
• Knowledge of how virtualization information is saved in the LDAP directory and in libvirt XML files
• Problem analysis and error resolution
• Management of external cloud instances in UVMM

List of important details, directories, configuration registry variables and applications:

Univention Virtual Machine Manager
virsh
UCR: uvmm/pool/default/path

Description:

The candidates should be in a position to manage the DNS and DHCP service, master the UCS-specific means for configuration of packet filters and firewalls, be able to configure the operation of a web proxy and realise network monitoring with Nagios. (Weighting: 4)

Most important knowledge areas:

• Configuration of the DNS service and the DNS proxy and error analysis
• Configuration of the DHCP service and set up of pools and subnetworks
• Configuration of packet filter rules via univention-firewall
• Setup and operation of a web proxy (transparently and with filter possibilities)
• Configuration of network monitoring, mounting of computer systems and monitoring plugins

List of important details, directories, configuration registry variables and applications:

Univention Management Console
Univention Firewall
host
Bind
ISC DHCP
NSCD
univention-bind
univention-nagios-server
univention-nagios-client
dhclient
/var/log/daemon.log
Squid, Dansguardian
iptables
nmap
/var/log/syslog
UCR: nagios/client/allowedhosts, nagios/client/allowedhosts, nagios/server/authenticate
UCR: dns/backend
UCR: squid/allowfrom, squid/contentscan, squid/httpport, squid/ldapauth, squid/virusscan, squid/transparentproxy

Description:

The candidates should be in a position to set up and configure a UCS-based mail service and to analyse and resolve errors. (Weighting: 3)

Most important knowledge areas:

• Setup and configuration of a mail service (SMTP, POP, IMAP)
• Setup and configuration of a malware filter (ClamAV and mounting of external scanners)
• Setup and configuration of a spam filter (user-specific and system-wide, training of filters)
• Administration of mail domains, mailing lists and mail groups
• Setup of configuration of mail quotas

List of important details, directories, configuration registry variables and applications:

Univention Management Console
Cyrus
Postfix
Horde
ClamAV
univention-mail-postfix
univention-mail-server
univention-horde4
spamassassin
freshclam
UCR: mail/alias/postmaster, mail/alias/root, mail/relay, mail/archivefolder
UCR: mail/relayhost, mail/hosteddomains
UCR: mail/antispam/requiredhits, mail/antispam/rules/autoupdate, mail/antispam/learndaily
UCR: mail/antivir/scanner, mail/antivir
UCR: mail/cyrus/imap/quotawarnkb, mail/cyrus/imap/quotawarnpercent

Description:

The candidates should be in a position to set up a print service which is provided for Windows and Linux systems, optionally with the use of print quotas. (Weighting: 2)

Most important knowledge areas:

• Setup of a print service provided to Windows and Linux clients
• Configuration of printer/printer groups and access rights
• Management of printer drivers/PPDs
• Administration of quotas
• Error analysis

List of important details, directories, configuration registry variables and applications:

Univention Management Console
Cups
univention-printserver
pykota
univention-printquota
repykota, dumpykota, pykotme, edpykota
UCR: cups/server, cups/systemgroup
/var/log/cups/

Description:

The candidates should be in a position to configure file servers for Windows and Linux clients, manage the shares saved on them and set up quotas. (Weighting: 4)

Most important knowledge areas:

• Provision of file services with NFS
• Provision of file services with Samba
• Configuration of ACLs
• Configuration of CIFS shares for MS-DFS
• Setup of configuration of file system quotas

List of important details, directories, configuration registry variables and applications:

Univention Management Console
Samba
NFS
/etc/fstab
/etc/samba/smb.conf
/var/log/samba/log.smbd
getfacl, setfacl
UCR: samba/enable-msdfs, nfs/ports

Description:

The candidates should be in a position to integrate domain-compatible Windows systems in the UCS domain, construct a UCS environment with AD functionality with Samba and analyse and resolve any problems. (Weighting: 7)

Most important knowledge areas:

• Setup and configuration of WINS
• Synchronisation with Active Directory via Univention AD Connector
• Operation of Winbind
• Management of the SYSVOL share
• Error analysis
• Group policies
• Setup of an Active Directoy compatible domain with Samba
• Knowledge of architecture and integration of Samba 4 in UCS
• Migration of an Active Directory domain using Univention AD Takeover

List of important details, directories, configuration registry variables and applications:

Univention Management Console
Samba
univention-samba
univention-samba4
univention-s4-connector
smbclient
smbcontrol
samba-tool
Univention AD Connector
univention-connector-list-rejected
univention-adsearch, univention-s4search
/var/log/samba/log.smbd
/var/log/samba/log.nmbd
/var/log/univention/connector.log
/etc/univention/connector/ad/mapping
pdbedit
UCR: windows/domain, windows/wins-server, windows/wins-support
UCR: samba/debug/level, samba4/debug/level, samba4/service/nmbd
UCR: samba/logonscript
UCR: connector/ad/ldap/ssl, connector/ad/mapping/group/language, connector/ad/poll/sleep
gpresult

Description:

The candidates should be in a position to integrate Unix implementations from other manufacturers in addition to UCS systems. (Weighting: 1)

Most important knowledge areas:

• Connection of external LDAP directories via syncrepl
• Connecting of external systems via Kerberos
• Connection of external systems as LDAP client
• Integration of external systems as IP managed client

List of important details, directories, configuration registry variables and applications:

Univention Management Console
libnss-ldap
syncrepl
/etc/resolv.conf