UCS 5.2-7 has been released

UCS - Univention Corporate Server
1

UCS 5.2-7 has been released.

With Univention Corporate Server 5.2-7, the FIXME patchlevel release for Univention Corporate Server (UCS) is now available.

UCS 5.2-7 provides several feature improvements and extensions, new properties as well as various improvements and bugfixes. Here is an overview of the most important changes:

  • New RADIUS authentication helper: WLAN authentication with username and password through the Nubus RADIUS service uses an authentication helper plugin internally. This helper has caused high CPU consumption in large environments. A rewrite of the helper module in Rust reduces CPU consumption and increases the number of authentications that each UCS installation can process. For more information, see Bug 59042.
  • New Guardian backend based on Cerbos: The Nubus Authorization Service, called Guardian, now uses the open source solution Cerbos as its backend. It replaces the Open Policy Agent (OPA) backend. Cerbos includes features that Guardian needs to make authorization decisions. More information about the authorization decisions will become available in the Univention public blog shortly after this release. Besides the Cerbos backend, the Authorization Service is now available as a component of UCS, packaged as a Debian package that contains a container. This simplifies setup and maintenance compared with the former Docker Compose-based App Center app.
  • Improved handling of password hashes and optional removal of weaker hashes: In preparation for the removal of weaker password hashes, UCS 5.2-7 integrates several improvements. UDM now has more configuration options to define which hashing algorithms to use during password storage. These options let you remove weaker hashes that are still stored for compatibility reasons. The Active Directory Connection now supports more configurations in which Active Directory is configured with reduced encryption types.
  • Keycloak Metrics: The Keycloak app now lets you activate the integrated “Metrics Endpoint” in Keycloak. Administrators can get detailed information about Keycloak usage and events in their Prometheus and Grafana dashboards. For more information, see Metrics monitoring in the Univention Keycloak app documentation.
  • Education Classes support in the Microsoft 365 Connector: The Microsoft 365 Connector now lets you activate “educational classes” in Microsoft 365. Administrators of Nubus or UCS@school can decide which groups to activate automatically, so that they don’t need to administer the feature manually in Microsoft 365. For more information, see Education Classes in the UCS Manual.

Notes about the release, download and documentation can be found at the following resources:

Questions can be asked at Univention Help in the UCS category.