Problem:UCS Dashboard alerts - UNIVENTION_KPASSWDD fired


If you get an fired alert for UNIVENTION_KPASSWDD in your UCS Dashboard / Grafana and use on the same system Samba, may you run into a bug.
Bug 56286

Screenshot from 2023-07-07 11-59-54

Root Cause

kpasswdd doesn't run on UCS nodes that serve Samba/AD

Environment & Informations

UCS: 5.0-6 errata915
Installed: admin-dashboard=3.0 prometheus-alertmanager=1.0 prometheus-node-exporter=2.0.1 samba4=4.16 4.4/prometheus=2.35.0-5


  • Frontend: Appcenter App UCS-Dashboard (Grafana)
  • Backend: Appcenter App UCS-Dashboard Database (Prometheus)
  • Clients: Appcenter App UCS-Dashboard Client (Prometheus Node-Exporter)
  • Backend: Appcenter App Prometheus Alertmanager



univention-app install prometheus

univention-app install prometheus-node-exporter

univention-app install admin-dashboard

univention-app install prometheus-alertmanager


univention-app install prometheus-node-exporter

Solution 1

Take a look at the alert object and notice the assignedHosts entries

udm monitoring/alert list --filter cn=UNIVENTION_KPASSWDD

You can remove those assignedHosts entries with udm. For example:

udm monitoring/alert modify --dn cn=UNIVENTION_KPASSWDD,cn=monitoring,$(ucr get ldap/base) --remove assignedHosts=cn=primary,cn=dc,cn=computers,$(ucr get ldap/base)

Solution 2

Bildschirmfoto vom 2024-02-27 16-34-48

Bildschirmfoto vom 2024-02-27 16-35-05

Bildschirmfoto vom 2024-02-27 16-35-16

Bildschirmfoto vom 2024-02-27 16-35-42

Bildschirmfoto vom 2024-02-27 16-35-54

Solution 3

Bildschirmfoto vom 2024-02-27 16-56-37

Bildschirmfoto vom 2024-02-27 16-57-08

Bildschirmfoto vom 2024-02-27 16-57-24

Bildschirmfoto vom 2024-02-27 16-57-41

Bildschirmfoto vom 2024-02-27 16-57-59

1 Like