Checking Your UCS License
To verify your UCS license, follow these steps:
1. Check License Status
Use the command univention-license-check to examine the status of your license. This command provides a summary of your license details.
univention-license-check
Base DN: dc=ucs5schoolhejne,dc=intranet
Checking searchpath... OK
Checking basedn ... OK
Checking enddate ... OK
Checking signature ... OK
Users: 14 of unlimited... OK
Servers: 7 of unlimited... OK
Managed Clients: 5 of unlimited... OK
Corporate Clients: 0 of unlimited... OK
Hint
You can deactivate users; they are then not counted in the license count. However, the users are still available in the management system, they just can no longer log in.
This is permitted under the terms and conditions of the license.
2. Retrieve All Objects
To receive a list of all objects linked to your license, utilize the --list-dns option with univention-license-check.
univention-license-check --list-dns
Base DN: dc=ucs5schoolhejne,dc=intranet
Checking searchpath... OK
Checking basedn ... OK
Checking enddate ... OK
Checking signature ... OK
Users: 14 of unlimited... OK
uid=Administrator,cn=users,dc=ucs5schoolhejne,dc=intranet
uid=http-proxy-schoolhejne0,cn=users,dc=ucs5schoolhejne,dc=intranet
uid=http-proxy-schoolhejne1,cn=users,dc=ucs5schoolhejne,dc=intranet
uid=http-proxy-dejneschool2,cn=users,dc=ucs5schoolhejne,dc=intranet
uid=http-proxy-mejneschool2,cn=users,dc=ucs5schoolhejne,dc=intranet
uid=oxadmin,cn=users,dc=ucs5schoolhejne,dc=intranet
uid=http-proxy-ucs5schule,cn=users,dc=ucs5schoolhejne,dc=intranet
uid=http-proxy-hejneschool2,cn=users,dc=ucs5schoolhejne,dc=intranet
uid=adol,cn=schueler,cn=users,ou=mejneschool2,dc=ucs5schoolhejne,dc=intranet
uid=enpal,cn=schueler,cn=users,ou=mejneschool2,dc=ucs5schoolhejne,dc=intranet
uid=diakan,cn=schueler,cn=users,ou=mejneschool2,dc=ucs5schoolhejne,dc=intranet
uid=kamel,cn=lehrer,cn=users,ou=mejneschool2,dc=ucs5schoolhejne,dc=intranet
uid=nidan,cn=schueler,cn=users,ou=dejneschool2,dc=ucs5schoolhejne,dc=intranet
uid=ikol,cn=users,dc=ucs5schoolhejne,dc=intranet
0 Systemaccounts are ignored.
Servers: 7 of unlimited... OK
cn=dc0,cn=dc,cn=computers,dc=ucs5schoolhejne,dc=intranet
cn=ucs5back,cn=dc,cn=computers,dc=ucs5schoolhejne,dc=intranet
cn=hejneschool2,cn=dc,cn=server,cn=computers,ou=hejneschool2,dc=ucs5schoolhejne,dc=intranet
cn=ucs5repl,cn=dc,cn=computers,dc=ucs5schoolhejne,dc=intranet
cn=mejneschool2,cn=dc,cn=server,cn=computers,ou=mejneschool2,dc=ucs5schoolhejne,dc=intranet
cn=dejneschool2,cn=dc,cn=server,cn=computers,ou=dejneschool2,dc=ucs5schoolhejne,dc=intranet
cn=ucs5mail,cn=memberserver,cn=computers,dc=ucs5schoolhejne,dc=intranet
Managed Clients: 5 of unlimited... OK
cn=ubu,cn=computers,dc=ucs5schoolhejne,dc=intranet
cn=WIN10-CLIENT-02,cn=computers,ou=mejneschool2,dc=ucs5schoolhejne,dc=intranet
cn=WIN10-CLIENT-03,cn=computers,ou=mejneschool2,dc=ucs5schoolhejne,dc=intranet
cn=WIN10-CLIENT-01,cn=computers,ou=mejneschool2,dc=ucs5schoolhejne,dc=intranet
cn=WIN11-CLIENT-05,cn=computers,ou=mejneschool2,dc=ucs5schoolhejne,dc=intranet
Corporate Clients: 0 of unlimited... OK
3. Access Detailed License Information
For more comprehensive insights such as license type and expiration date, execute the following command:
univention-ldapsearch -LLL -b cn=admin,cn=license,cn=univention,$(ucr get ldap/base)
dn: cn=admin,cn=license,cn=univention,dc=ucs5schoolhejne,dc=intranet
cn: admin
objectClass: top
objectClass: univentionLicense
objectClass: univentionObject
univentionLicenseBaseDN: UCS Core Edition
univentionLicenseCorporateClients: unlimited
univentionLicenseEndDate: unlimited
univentionLicenseKeyID: 08804af4-673d-4a86-bf11-acfdb3dae9ca
univentionLicenseManagedClients: unlimited
univentionLicenseModule: admin
univentionLicensePremiumSupport: 0
univentionLicenseServers: unlimited
univentionLicenseSignature: upquVTxpfTlVUGkisJMRhgj62fYyV8gOOwYfrodjxFzjc9X5lIFaxsgt/ZZXT2mxGgRUGotBBCF/jGyVRiBn7Ix28WOcL925if0IW8GaR6MbvidA+qd1OHs/3LasZrGZGGusQFtxyDI1BdbcRvgDCWM3FmJA9j+rNZpufmy7hYog6ZpBDhunrb4
bIGUmLTrPZUE/MgfSoNhvO3Mp/WOl3FHaFKxuKm0WTNTDhA1irlhv408A3jGkawHztOmo3dQ4SJLEPKmwC06fuligAsauIgDmPW5L0M9Y2LGbanSKRAanBVm0xzwIhfv3JzABIDcjQQX7f+zouAFhLeTc9rxM+A==
univentionLicenseSupport: 0
univentionLicenseType: UCS
univentionLicenseUsers: unlimited
univentionLicenseVersion: 2
univentionLicenseVirtualDesktopClients: 0
univentionLicenseVirtualDesktopUsers: 0
univentionObjectType: settings/license
4. License cannot be retrieved/activated
Could be an DNS issue, this should return some lines of connections status and a Return Code of 303.
—8<—
< HTTP/1.1 303 See Other
—>8—
curl -v https://license.univention.de/
* Trying 85.184.250.151...
* TCP_NODELAY set
* Connected to license.univention.de (85.184.250.151) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: none
CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
* subject: CN=license.univention.de
* start date: Dec 27 00:00:00 2023 GMT
* expire date: Jan 26 23:59:59 2025 GMT
* subjectAltName: host "license.univention.de" matched cert's "license.univention.de"
* issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=Thawte TLS RSA CA G1
* SSL certificate verify ok.
> GET / HTTP/1.1
> Host: license.univention.de
> User-Agent: curl/7.64.0
> Accept: */*
>
< HTTP/1.1 303 See Other
< Date: Thu, 01 Aug 2024 13:03:27 GMT
< Server: gunicorn/19.6.0
< Location: /shop/00424/
< Via: 1.1 license2.univention.de
< Content-Length: 0
<
* Connection #0 to host license.univention.de left intact
5. The activation of UCS failed. Please re-try to perform the the activation again via the user menu in the top right.
If the message “The activation of UCS failed. Please re-try to perform the the activation again via the user menu in the top right” is displayed in UMC, it is possible that SSL access to the license server has failed. In my case, the SSL certificate of the license server was not yet valid (old snapshot of my VM).
6. License not synchronized
If there are problems with the listener-notifier synchronization, the license may not be entered in UCR. As a result, the source list is not generated correctly or even fails. The license ID must be identical in both places:
ucr get uuid/license
f92b5f97-d5dd-4f6d-87e6-7a5490e0fb7c
udm settings/license list | sed -ne 's/.*keyID: //p'
f92b5f97-d5dd-4f6d-87e6-7a5490e0fb7c