Problem
If you get an fired alert for UNIVENTION_KPASSWDD in your UCS Dashboard / Grafana and use on the same system Samba, may you run into a bug.
Bug 56286
Root Cause
kpasswdd doesn't run on UCS nodes that serve Samba/AD
Environment & Informations
UCS: 5.0-x
Installed: admin-dashboard=3.0 prometheus-alertmanager=1.0 prometheus-node-exporter=2.0.1 prometheus=2.35.0-5
The app UCS Dashboard can be installed from the Univention App Center on a server in the domain. The installation is only supported on the system roles Primary Directory Node, Backup Directory Node or Replica Directory Node. The apps UCS Dashboard Database and UCS Dashboard Client are automatically installed on the same system.
15.1. UCS Dashboard — Univention Corporate Server - Manual for users and administrators
UCS DASHBOARD COMPONENTS
- Frontend: Appcenter App UCS-Dashboard (Grafana)
- Backend: Appcenter App UCS-Dashboard Database (Prometheus)
- Clients: Appcenter App UCS-Dashboard Client (Prometheus Node-Exporter)
- Backend: Appcenter App Prometheus Alertmanager
INSTALLATION
Master/Backup/Slave:
univention-app install prometheus
univention-app install prometheus-node-exporter
univention-app install admin-dashboard
univention-app install prometheus-alertmanager
Backup/Slave/Member:
univention-app install prometheus-node-exporter
Solution 1
Take a look at the alert object and notice the assignedHosts entries
udm monitoring/alert list --filter cn=UNIVENTION_KPASSWDD
You can remove those assignedHosts entries with udm. For example:
udm monitoring/alert modify --dn cn=UNIVENTION_KPASSWDD,cn=monitoring,$(ucr get ldap/base) --remove assignedHosts=cn=primary,cn=dc,cn=computers,$(ucr get ldap/base)
