Uninstall last UCC server

Linux Clients
#1

Hi,

can I safely remove the UCC instance? The UCC schema will be still available?

Can I safely convert the host accounts (maybe via LDIF) to the Ubuntu type or have I delete and recreate them?

Cheers,
SirTux

#2

Hey,

assuming you want to use Univention’s domain join mechanism for Ubuntu clients I highly suggest you remove the existing computer objects (or you use new names for the Ubuntu machines). During the join process a new computer object is created automatically, and having an object of a different type present sounds like a recipe for subtle or very obvious breakage.

I have to admit I don’t understand the question. What “UCSS instance” are you talking about? An LDAP object, a package…?

LDAP Schema extensions usually stay installed and available even if you remove the package that included the extension in the first place. The attributes themselves are definitely not removed from the LDAP objects. This is both good and bad; good insofar as no information is lost, and bad as dumping the LDAP directory and restoring it somewhere else (e.g. a newly join DC Backup) may lead to errors due to unknown attribute names unless you install the same schema extension there, too.

#3

The last installation of UCC integration packages on an UCS.

As you said the removal of the packages was unproblematic.

#4

Finally I’ve converted it to type “Ubuntu” via LDIF file:

dn: cn=ucc-client,cn=computers,dc=top2,dc=top1
changetype: modify
delete: univentionCorporateClientCurrentBootImage
-
delete: univentionCorporateClientBootVariant
-
delete: univentionCorporateClientBootRepartitioning
-
delete: univentionCorporateClientBootParameter
-
delete: univentionCorporateClientBootImage
-
delete: univentionCorporateClientDedicatedImageServer
-
delete: objectClass
objectClass: univentionCorporateClient
-
add: objectClass
objectClass: univentionUbuntuClient
-
replace: univentionObjectType
univentionObjectType: computers/ubuntu

The template has to be adjusted. It can be applied via

ldapmodify -h $(ucr get ldap/master) -p $(ucr get ldap/master/port) -D cn=admin,$(ucr get ldap/base) -y /etc/ldap.secret -f remove-ucc.ldif
Mastodon