Univention Corporate Server
 | |
 Overview page of the Univention Management Console, the web-based management interface of UCS | |
| Developer | Univention GmbH |
|---|---|
| Written in | Python (mainly) |
| OS family | Linux |
| Working state | Current |
| Latest release | 4.1-3[1] / August 9, 2016 |
| Update method | APT (several front-ends available) |
| Package manager | dpkg |
| Platforms | i386, AMD64 |
| License | AGPL |
| Official website | UCS |
Univention Corporate Server (UCS) is a server operating system derived from Debian GNU/Linux with an integrated management system for the central and cross-platform administration of servers, services, clients, desktops and users as well as virtualized computers operated in UCS. In addition to the operation of local, virtual instances, UCS can also be operated in OpenStack-based, Microsoft Azure-based and Amazon EC2-based cloud environments.[2] Via the integration of the open source software Samba 4, Univention also supports the functions provided in many companies by Microsoft Active Directory for the administration of computers operated with Microsoft Windows.[3][4] UCS-based components and UCS-certified, established third party products can be installed and integrated via the Univention App Center. UCS provides all App Center applications with a runtime environment and services for the operation including a central, consistent management of the apps. Docker containers can also be run on UCS systems and several of the apps available in the App Center are Docker-based.[5]
Univention is a member of the Open Source Business Alliance and supports the creation of the Open Source Business Alliance open source software stacks.
History
The impulse for the development of UCS, which began in 2002, was the lack of a standardised Linux server operating system offering companies and organisations an alternative to Microsoft’s domain concept with the proprietary directory service Active Directory. Comparable Linux solutions (e.g., from SUSE and Red Hat) did not offer an integrated, cross-system user and computer management system, with the result that corresponding solutions had to be configured and maintained individually.
Important early driving forces for the development of UCS were initially the Oldenburgische Landesbank and the department of the Bremen Senator for Education and Science, until the product was ready for market launch at the end of 2004. Since then, in addition to new versions, a number of software solutions based on the main product UCS have also been launched.
UCS is predominantly employed in the German-speaking world by companies and public organisations from a wide range of sectors and fields, among others by the regional government authority of the federal state Brandenburg. In 2005, Univention began to market UCS also in other German-speaking countries. Today, UCS is used in many European countries and also outside of Europe, for example, in Australia, Nigeria and the USA where Univention established a subsidiary in 2013.
Licenses and Editions
UCS is open-source software; the proprietary developments of Univention GmbH included in UCS were published under the GNU GPL until Version 2.3.[6] With the launch of Version 2.4, the company switched to GNU AGPL.[7] There are also a range of software appliances based on UCS (e.g., in the groupware, desktop and IT service management fields).
Since April 21, 2015 UCS is freely available to companies in form of the UCS Core Edition, which replaced the previous „free for personal use" license. This Core Edition is a fully featured version and differs from the fee-based edition only in terms of product liability and support.[8]
Structure and components
Univention Corporate Server is based on the Linux distribution Debian GNU/Linux. There are numerous open source applications integrated in UCS, for example Samba, the authentication service Kerberos, the virtualization software KVM, Nagios for the monitoring of servers and services and the backup solution Bacula.[9] The core and important unique selling point of UCS is the central administration tool "Univention Management Console", which allows the cross-system and cross-location management of IT infrastructures. UCS uses the directory service OpenLDAP to save data for identity and system management.
The administration tools are operated via the web-based applications and command-line interfaces. Thanks to the integrated administration service UCS Virtual Machine Manager (UVMM), the administration tools also allow the central administration of virtualized servers and clients, hard drives, CDROM and DVD images as well as the physical systems on which they are operated.[7]
The manufacturer goes to great lengths to guarantee possibilities for the integration of UCS in existing IT environments via the use of open standards and supplied connectors. In this way, the integrated tool Active Directory Connection[10] allows the bidirectional synchronisation of the Microsoft directory service Active Directory and the directory service used in UCS, OpenLDAP. In addition, UCS offers various interfaces for manufacturers of application software enabling them to integrate their applications in the UCS management system.
Since UCS 3.1,[11] UCS provides with "Univention App Center" an own graphic management component for the installation and deinstallation of UCS components and UCS-certified third-party appliances. The Univention App Center includes, beside Univention solutions, for example, the Open Source groupware solutions Zarafa, Kolab and Open-Xchange, the backup solution SEP sesam, the document management system agorum®core, the customer management solution SugarCRM and the dropbox alternative ownCloud. Since its initial release, the Univention App Center is permanently expanding with UCS-certified products.
Application areas of the products in the Univention App Center
The products and UCS-components which are available in the Univention App Center serve a variety of application areas. For the following application fields, among others, are solutions available:[12]
Access management
The UCS-integrated SAML app provides a Single_sign-on identity provider for UCS based on the Security Assertion Markup Language (SAML) protocol and the SimpleSAMLphp software framework. With help of the identity provider, a single sign-on functionality for third party web services and applications (e.g., Google Apps, Salesforce.com etc.) can be realized while the authentication is done at the identity provider itself. The user management is done via UCS where users are individually activated for particular web services. In addition, the authentication process can be extended by a second factor (2-factor authentication) via privacyIDEA from the App Center.
Active Directory-compatible services
With the component Active Directory-compatible Domain Controller based on Samba 4, UCS can be used as an Active Directory domain controller for Windows systems including file, printer and network services.
If Microsoft Windows and Linux environments are to be operated in parallel, the component UCS Active Directory Connection brings together the domain managed by Univention Corporate Server and an existing Active Directory. Thus, UCS can become a member of the domain and operate as a platform. Alternatively, UCS runs in parallel to an AD, for example to establish a migration path. In both cases it creates an automatic synchronisation between Microsoft Active Directory and Univention Corporate Server including passwords, group definitions and other directory service objects. Active Directory Connection avoids double, demanding, complex and error-prone administration.
If the aim is to replace Microsoft domain controllers completely by UCS which also includes the parallel switching-off of all Active Directory domain controllers, the UCS-component Active Directory Takeover allows the migration of objects from a native Active Directory domain controller to a UCS Samba/AD domain controller.
Client management
With Univention Corporate Client (UCC), the App Center offers an efficiently manageable operating system for PCs, notebooks and thin clients in companies and institutions. The software's desktop environment contains an Ubuntu-based desktop environment optimized for business use. It provides integrated management procedures for users, clients, desktops and permissions, thus avoiding the deployment of different, non-compatible management tools. UCC serves as a platform for the access to remote desktop solutions and virtualised desktops as well as to browser- or terminal server-based applications.
Data backup
With SEP Sesam and Bareos, the App Center offers two well-known solutions for backup, archiving and recovery of all established operating systems, virtualization solutions, applications, databases and files.
Integration of Microsoft Office 365 and Google Apps for Work
The user management for the cloud services Office 365 and Google Apps can be integrated into UCS via the tools Microsoft Office 365 and Google Apps for Work. Users can thus be managed locally instead of in the cloud. And with the single sign-on system integrated in UCS, users don't need another password to access these two cloud services.
Mail and groupware
UCS mailservices assumes the role of a complete mail server. It is based on Postfix for sending mails via SMTP and on Cyrus for the provision of mail boxes via IMAP and POP3. Virus checks via the scanner ClamAV and spam detection via SpamAssassin are integrated. Shared IMAP folders and mailing lists can be configured in the Univention Management Console.
In addition, the Univention App Center offers an integration of the established groupware solutions Open-Xchange, Zarafa, Kolab and Tine 2.0.
For mailserver protection and antivirus demands, the Univention App Center also offers the Kaspersky Security app for Linux Mail Server by Kaspersky Lab with an integration to the UCS administration interface.
Monitoring
With Icinga and Nagios, the App Center offers two well-known solutions for system and network monitoring. In addition to the default Nagios plugins, UCS provides specific Nagios plugins, e.g., for the monitoring of domain replication.
Network and intranet management
The DHCP server in the App Center is a service for the dynamic IP management for IPv4 networks. It is flexibly configurable and administrates even large networks reliably. During the configuration, you have the possibility to decide whether the IP addresses should be assigned dynamically or fixed. By specifying the MAC address, systems can be assigned a fixed IP address and this allows you to rule out third-party systems.
The proxy server Squid receives inquiries about internet contents and verifies whether these contents are already available in a local cache. Answering times for the users and the transfer volume via the internet access can be reduced. In addition, it also allows the control and administration of the access to Internet contents. For example, it can be specified which users or user groups can access which websites and which they can’t.
Printer management
UCS offers a print server on the basis of the software CUPS (Common UNIX Printing System) with which complex printer environments can be established. PPD drivers for most printer models are supplied.
Virtualization
With UCS Virtual Machine Manager (UVMM), the App Center offers a standard component in the UCS administration system managing virtualized IT infrastructures for different virtualization technologies like KVM. Since UCS 4.0, UVMM can also manage virtual machines on cloud platforms, which are based on OpenStack and Amazon EC2.[13]
With the app KVM virtualization server, the App Center provides a hypervisor for the virtualization of systems using KVM. Multiple KVM nodes in the environment can be managed with UCS Virtual Machine Manager.
External links
References
- ^ "Univention Corporate Server 4.1-3 Released with Active Directory Enhancements".
- ^ "Distribution Release: Univention Corporate Server 4.0". Distrowatch.com. Distrowatch.com. 20 November 2014. Retrieved 24 November 2014.
- ^ "Univention Corporate Server 3.0 released". h-online.com. Heise Media UK Ltd. 12 December 2011. Archived from the original on 14 January 2012. Retrieved 16 January 2012.
- ^ "Univention Provides Active Directory Path to Linux". thevarguy.com. 3 October 2014. Retrieved 19 January 2015.
- ^ "UCS 4.0-2 released". univention.com. 12 May 2015. Retrieved 13 May 2015.
- ^ "Software migration guide of the German Federal Ministry of the Interior, p. 34 ff" (PDF). cio.bund.de. German Federal Ministry of the Interior. 1 April 2008. Retrieved 9 May 2012.
- ^ a b "Univention Corporate Server 2.4 includes integrated virtualisation tool". h-online.com. Heise Media UK Ltd. 1 September 2010. Archived from the original on 11 April 2012. Retrieved 9 May 2012.
- ^ "Univention Announces New Pricing and Licensing for Univention". Virtual-Strategy.com. Cloud Strategy L.L.C. 21 April 2015. Retrieved 22 April 2015.
- ^ "Univention Corporate Server 3 released". h-online.com. Heise Media UK Ltd. 12 December 2011. Archived from the original on 27 April 2012. Retrieved 9 May 2012.
- ^ "Active Directory Connection in Univention App Center".
- ^ "Univention Corporate Server 3.1 with Active Directory functionality". h-online.com. Heise Media UK Ltd. 13 December 2011. Archived from the original on 14 December 2012. Retrieved 17 December 2012.
- ^ "Univention App Center".
- ^ "Univention Corporate Server - New in version 4.0". Softpedia.com. Softpedia.com. 20 November 2014. Retrieved 24 November 2014.