Certification (UVCP)

With the “Univention Certified Professional (UVCP), LPI-198”, the Linux Professional Institute (LPI) and Univention are offering an additional qualification to the LPI certification LPIC-1. The certificate is aimed at system engineers and administrators who can use it to prove extensive knowledge of Linux basics and in-depth knowledge in the field of the Linux distribution UCS.

The exam is offered in conjunction with Univention training sessions and at Open Source events and trade fairs. You can register online at the LPI website.

Before the exam commences, all candidates for the “Univention Certified Professional” certification must present a valid piece of identification with a photo and a valid LPI identification number, which can be requested at this address. Further information on the UVCP exam from the Linux Professional Institute can be found at the LPI website.

LPI_Logo-Print_Colour

Examination contents

The candidate for the certification of Univention Certified Professional can:

  • perform a UCS installation interactively and profile-based, perform proper configuration of the individual components and analyse and resolve any installation problems
  • differentiate between the different system role components of a UCS domain and work with them
  • manage the users and user groups via the UCS management system
  • plan and realise the OpenLDAP directory service, the UCS-specific expansions based on it and the structure of a directory
  • change, adapt and expand the domain-wide configurations efficiently via the Univention Management Console
  • configure local computer and installation statuses and perform a backup
  • manage the DNS and DHCP service, employ package filters and firewalls, operate a web proxy and realise network monitoring via Nagios
  • configure and operate an e-mail service with the UCS mail service
  • operate central software distribution
  • operate file and print service for Windows and Linux systems
  • configure Linux desktops on Linux workstations, notebooks and thin clients and integrate Windows systems in the UCS domain
  • construct and manage a virtualization infrastructure with UCS Virtual Machine Manager (UVMM)
  • integrate Unix implementations from other manufacturers in the UCS domain.

Detailled educational objectives

Conception, planning and installation
Management
Service management
Mounting of other systems

Conception, planning and installation

Description:

The candidates should be in a position to perform a UCS installation interactively and profile-based, perform proper configuration of the individual components and analyse and resolve any installation problems. (Weighting: 3)

Most important knowledge areas:

  • Testing of UCS compatibility of a system
  • Configuration of basic settings (e.g., LDAP base, computer name, DNS domain name)
  • Configuration of the network properties (routing, IP configuration, DNS, DHCP, Bridging, Bonding, VLANs)
  • Knowledge of the possible software selection for the individual system roles
  • Partitioning of the hard drives of a system with and without LVM
  • Analysis of installation problems using the log files

List of important details, directories, configuration registry variables and applications:
Univention Installer
grub/append, grub/timeout, grub/gfxmode
UCR: interfaces/ethX/address, interfaces/ethX/broadcast, interfaces/ethX/netmask, interfaces/ethX/network, interfaces/ethX/ipv6/acceptRA
UCR: domainname, gateway, hostname
UCR: kernel/modules
UCR: nameserver/external, nameserver1
UCR: dns/forwarder1

Description:

The candidates should be familiar with the different system role components of a UCS domain and their joining procedures and be in a position to analyse and resolve any problems which occur. (Weighting: 7)

Most important knowledge areas:

  • Properties and particularities of the individual system roles
  • Joining of UCS systems in a domain
  • Joining of Microsoft Windows systems in a domain
  • Upgrading of domain controller backup to domain controller master
  • Analysis of domain joining problems and resolution of any error situations
  • Administration of the UCS license
  • Execution of a domain join in Active Directory domains
  • Time synchronisation in UCS domains

List of important details, directories, configuration registry variables and applications:

Univention Management Console
univention-join
/var/log/univention/join.log
$HOME/.univention-server-join
/var/log/samba/*
univention-license-check
univention-license-import
univention-backup2master
UCR: server/role
/usr/lib/univention-install
univention-run-join-scripts
LDAP-Container: cn=univention,cn=license

Description: 

The candidates should be in a position to master the basics of the OpenLDAP directory service and the UCS-specific expansions based on it and to design and realise the structure of a directory (including the employment of ACLs and the configuration of indices. In addition, the candidates should be in a position to analyse and correct error situations. (Weighting: 7)

Most important knowledge areas:

  • Basic LDAP terms (e.g., schemas, DNs, object classes, attributes, OID)
  • Planning and structuring of directories (OUs and containers)
  • Listener/notifier replication
  • Expansion and replication of LDAP schemas
  • Knowledge of the LDAP tools
  • Configuration and optimisation of the OpenLDAP service (ACLs, indices)
  • Capability of troubleshooting and analysing replication problems

List of important details, directories, configuration registry variables and applications:

ldapsearch, ldapmodify, ldapdelete, slapcat, slapadd, ldapmodrdn
univention-ldapsearch
OpenLDAP
Univention Directory Listener
Univention Directory Notifier
Univention Directory Logger
/etc/ldap/slapd.conf
/var/log/syslog
/var/lib/univention-ldap/notify/transaction
/var/lib/univention-directory-listener/notifier_id
/var/log/univention/listener.log
/var/log/univention/notifier.log
univention-directory-listener-ctrl
/var/lib/univention-ldap/schema.conf
/var/lib/univention-ldap-replication/failed.ldif
UCR: ldap/base, ldap/cachesize, ldap/debug/level, ldap/hostdn, ldap/index/approx
UCR: ldap/index/eq, ldap/index/pres, ldap/index/sub, ldap/master
UCR: ldap/server/ip, ldap/server/name, ldap/server/type
UCR: ldap/acl/read/anonymous, ldap/idletimeout, ldap/server/port
UCR: listener/debug/level, notifier/debug/level
/etc/ldap.secret

Management

Description:

The candidates should be in a position to use the domain management of the Univention Management Console (and the command line frontend Univention Directory Manager) efficiently to change domain-wide configurations and to adapt and expand the domain management. (Weighting: 4)

Most important knowledge areas:

  • Use of web-based domain management in the Univention Management Console (navigation in the LDAP tree, wizards, settings, user templates)
  • Creation of policy-based configuration
  • Expansion of Univention Management Console/domain management with expanded attributes
  • Use of command line frontend of domain management (Univention Directory Manager)

List of important details, directories, configuration registry variables and applications:

Univention Management Console
univention-directory-manager (udm)
univention-policy-result
/var/log/univention/management-console-server.log
/var/log/univention/management-console-web.log
/var/log/univention/management-console-module-udm.log
LDAP-Container: cn=univention
UCR: umc/module/debug/level, umc/server/debug/level

Description:

The candidates should be aware of the different authentication possibilities within a UCS domain and be in a position to manage the users and user groups via the UCS management system. (Weighting: 5)

Most important knowledge areas:

  • Creation and management of users and the corresponding account properties
  • Creation and management of groups and the corresponding account properties, assignment of users, groups and computers to groups
  • Knowledge of typical account management procedures such as the blocking of users and resetting of passwords
  • Tools of the Kerberos authentication
  • Knowledge of different password changing procedures
  • Specifications concerning password quality (e.g., expiry date, minimum length, history)
  • Analysis of log-in errors in UCS and Microsoft Windows
  • Compilation of reports about user information

List of important details, directories, configuration registry variables and applications:

Univention Management Console
Univention Directory Reports
kinit, kpasswd, kdestroy
passwd
/var/log/auth.log
/etc/univention/directory/reports
/var/log/syslog
/etc/pam.d/
UCR: kerberos/adminserver, kerberos/kdc, kerberos/realm
UCR: auth/DIENST/group/GRUPPENNAME
LDAP-Container: cn=univention,cn=templates

Description:

The candidates should be in a position to configure local computer configuration properties, perform a backup of data and define the selection of installed software. (Weighting: 6)

Most important knowledge areas:

  • Knowledge of package and release care possibilities
  • Administration of SSL certificates
  • Administration of configuration properties via Univention Configuration Registry, use and expansion of templates
  • Subsequent alteration of system properties via the UMC module Basic settings
  • Knowledge of the file system Hierarchy Standard

List of important details, directories, configuration registry variables and applications:

Univention Management Console
NSCD
univention-config-registry (ucr)
/etc/univention/templates
/etc/univention/ssl
univention-certificate
univention-upgrade
univention-install
/etc/machine.secret
apt-cache
UMC-Modul Basiseinstellungen
UCR: ssl/common, ssl/country, ssl/default/days, ssl/email, ssl/locality, ssl/organization
UCR: ssl/organizationalunit, ssl/state, ssl/validity/check, ssl/validity/days, ssl/validity/warning
UCR: auth/DIENST/group/GRUPPENNAME
UCR: kernel/modules

Description:

The candidates should be in a position to configure and operate central software distribution. (Weighting: 3)

Most important knowledge areas:

  • Installation and setup of the software monitor
  • Setup and operation of software repositories
  • Installation of errata and release updates
  • Configuration of systems via package care policies

List of important details, directories, configuration registry variables and applications:

Univention Software Monitor
univention-repository-[addpackage|removepackage|sync|merge]
univention-install
univention-upgrade
dpkg
/etc/apt/sources.list.d
apt-cache
UCR: pkgdb/scan
UCR: update/secure_apt
UCR: repository/online/maintained, repository/online/unmaintained, repository/online/server
UCR: local/repository, repository/mirror

Description:

The candidates should be in a position to manage virtual machines in the web interface UVMM and the command line and to analyse and resolve any problems. (Weighting: 3)

Most important knowledge areas:

  • Construction and operation of a virtualization infrastructure with UCS and the virtualization technology KVM (virtualization servers, storage pools, configuration of UVMM)
  • virtio support drivers for Microsoft Windows
  • Use of the Univention Virtual Machine Manager
  • Knowledge of how virtualization information is saved in the LDAP directory and in libvirt XML files
  • Problem analysis and error resolution
  • Management of external cloud instances in UVMM

List of important details, directories, configuration registry variables and applications:

Univention Virtual Machine Manager
virsh
UCR: uvmm/pool/default/path

Service management

Description:

The candidates should be in a position to manage the DNS and DHCP service, master the UCS-specific means for configuration of packet filters and firewalls, be able to configure the operation of a web proxy and realise network monitoring with Nagios. (Weighting: 4)

Most important knowledge areas:

  • Configuration of the DNS service and the DNS proxy and error analysis
  • Configuration of the DHCP service and set up of pools and subnetworks
  • Configuration of packet filter rules via univention-firewall
  • Setup and operation of a web proxy (transparently and with filter possibilities)
  • Configuration of network monitoring, mounting of computer systems and monitoring plugins

List of important details, directories, configuration registry variables and applications:

Univention Management Console
Univention Firewall
host
Bind
ISC DHCP
NSCD
univention-bind
univention-nagios-server
univention-nagios-client
dhclient
/var/log/daemon.log
Squid, Dansguardian
iptables
nmap
/var/log/syslog
UCR: nagios/client/allowedhosts, nagios/client/allowedhosts, nagios/server/authenticate
UCR: dns/backend
UCR: squid/allowfrom, squid/contentscan, squid/httpport, squid/ldapauth, squid/virusscan, squid/transparentproxy

Description:

The candidates should be in a position to set up and configure a UCS-based mail service and to analyse and resolve errors. (Weighting: 3)

Most important knowledge areas:

  • Setup and configuration of a mail service (SMTP, POP, IMAP)
  • Setup and configuration of a malware filter (ClamAV and mounting of external scanners)
  • Setup and configuration of a spam filter (user-specific and system-wide, training of filters)
  • Administration of mail domains, mailing lists and mail groups
  • Setup of configuration of mail quotas

List of important details, directories, configuration registry variables and applications:

Univention Management Console
Cyrus
Postfix
Horde
ClamAV
univention-mail-postfix
univention-mail-server
univention-horde4
spamassassin
freshclam
UCR: mail/alias/postmaster, mail/alias/root, mail/relay, mail/archivefolder
UCR: mail/relayhost, mail/hosteddomains
UCR: mail/antispam/requiredhits, mail/antispam/rules/autoupdate, mail/antispam/learndaily
UCR: mail/antivir/scanner, mail/antivir
UCR: mail/cyrus/imap/quotawarnkb, mail/cyrus/imap/quotawarnpercent

Description:

The candidates should be in a position to set up a print service which is provided for Windows and Linux systems, optionally with the use of print quotas. (Weighting: 2)

Most important knowledge areas:

  • Setup of a print service provided to Windows and Linux clients
  • Configuration of printer/printer groups and access rights
  • Management of printer drivers/PPDs
  • Administration of quotas
  • Error analysis

List of important details, directories, configuration registry variables and applications:

Univention Management Console
Cups
univention-printserver
pykota
univention-printquota
repykota, dumpykota, pykotme, edpykota
UCR: cups/server, cups/systemgroup
/var/log/cups/

Description:

The candidates should be in a position to configure file servers for Windows and Linux clients, manage the shares saved on them and set up quotas. (Weighting: 4)

Most important knowledge areas:

  • Provision of file services with NFS
  • Provision of file services with Samba
  • Configuration of ACLs
  • Configuration of CIFS shares for MS-DFS
  • Setup of configuration of file system quotas

List of important details, directories, configuration registry variables and applications:

Univention Management Console
Samba
NFS
/etc/fstab
/etc/samba/smb.conf
/var/log/samba/log.smbd
getfacl, setfacl
UCR: samba/enable-msdfs, nfs/ports

Integration of other systems

Description:

The candidates should be in a position to integrate domain-compatible Windows systems in the UCS domain, construct a UCS environment with AD functionality with Samba and analyse and resolve any problems. (Weighting: 7)

Most important knowledge areas:

  • Setup and configuration of WINS
  • Synchronisation with Active Directory via Univention AD Connector
  • Operation of Winbind
  • Management of the SYSVOL share
  • Error analysis
  • Group policies
  • Setup of an Active Directoy compatible domain with Samba
  • Knowledge of architecture and integration of Samba 4 in UCS
  • Migration of an Active Directory domain using Univention AD Takeover

List of important details, directories, configuration registry variables and applications:

Univention Management Console
Samba
univention-samba
univention-samba4
univention-s4-connector
smbclient
smbcontrol
samba-tool
Univention AD Connector
univention-connector-list-rejected
univention-adsearch, univention-s4search
/var/log/samba/log.smbd
/var/log/samba/log.nmbd
/var/log/univention/connector.log
/etc/univention/connector/ad/mapping
pdbedit
UCR: windows/domain, windows/wins-server, windows/wins-support
UCR: samba/debug/level, samba4/debug/level, samba4/service/nmbd
UCR: samba/logonscript
UCR: connector/ad/ldap/ssl, connector/ad/mapping/group/language, connector/ad/poll/sleep
gpresult

Description:

The candidates should be in a position to integrate Unix implementations from other manufacturers in addition to UCS systems. (Weighting: 1)

Most important knowledge areas:

  • Connection of external LDAP directories via syncrepl
  • Connecting of external systems via Kerberos
  • Connection of external systems as LDAP client
  • Integration of external systems as IP managed client

List of important details, directories, configuration registry variables and applications:

Univention Management Console
libnss-ldap
syncrepl
/etc/resolv.conf