# Univention

Univention Corporate Server (UCS)  
https://www.univention.com

# Design

# Operation

# Useful CLI Commands Univention Corporate Server

### Useful CLI command line troubleshooting tools

The following is a list of CLI commands used for administering the Univention Corporate Server (UCS)


#### UCS Show Commands

<table border="1" cellpadding="4" cellspacing="0" frame="border" id="bkmrk-command-description-" rules="all" summary=""><thead align="left"><tr id="bkmrk-command-description"><th class="cellrowborder" id="bkmrk-command" valign="top" width="40.48582995951418%">Command</th><th class="cellrowborder" id="bkmrk-description" valign="top" width="59.51417004048584%">Description</th></tr></thead><tbody><tr><td>**ucr get server/role**</td><td>Show the server role</td></tr><tr><td>**ucr get domainname**</td><td>Show Domainname</td></tr><tr><td>**ucr get windows/domain**</td><td>Show WIndows Domain</td></tr></tbody></table>

#### UCS Edit Commands

<table border="1" cellpadding="4" cellspacing="0" frame="border" id="bkmrk-command-description--1" rules="all" summary=""><thead align="left"><tr id="bkmrk-command-description-1"><th class="cellrowborder" id="bkmrk-command-1" valign="top" width="40.48582995951418%">Command</th><th class="cellrowborder" id="bkmrk-description-1" valign="top" width="59.51417004048584%">Description</th></tr></thead><tbody><tr><td>**/usr/share/univention-samba4/scripts/purge\_s4\_computer.py <span class="hljs-comment">--computername=backupdomaincontroller</span>**</td><td>Uninstallation of Backup Domain Controller, see here: [https://docs.software-univention.de/ext-windows/latest/en/#ext-win-s4-deinstall](https://docs.software-univention.de/ext-windows/latest/en/#ext-win-s4-deinstall)</td></tr></tbody></table>

#### Samba Show Commands

For Samba 4 Troubleshooting check this article: [https://help.univention.com/t/samba-4-troubleshooting/32](https://help.univention.com/t/samba-4-troubleshooting/32)

<table border="1" cellpadding="4" cellspacing="0" frame="border" id="bkmrk-command-description--2" rules="all" summary=""><thead align="left"><tr id="bkmrk-command-description-2"><th class="cellrowborder" id="bkmrk-command-2" valign="top" width="40.48582995951418%">Command</th><th class="cellrowborder" id="bkmrk-description-2" valign="top" width="59.51417004048584%">Description</th></tr></thead><tbody><tr><td>**samba-tool drs showrepl**</td><td>To get an overview of the current drs replication status you can use this command at every UCS Samba 4 DC which is joined to the domain.</td></tr><tr><td>**root@master:~# univention-s4search cn=master msDS-KeyVersionNumber  
  
root@backup:~# univention-s4search cn=master msDS-KeyVersionNumber**</td><td>For a given user, computer, or built-in account, this attribute specifies the Kerberos version number of the current key for that account.  
Therefore it can be used to compare the replication status of systems.

The values have to be equal - otherweise the replication seems to be broken. If a system uses another value in comparison to the master, then it has to be rejoined or you first try to replicate just the Server account.

Example:

```
root@master:~# univention-s4search cn=master msDS-KeyVersionNumber
dn: CN=MASTER,OU=Domain Controllers,DC=test,DC=domain
msDS-KeyVersionNumber: 7
root@backup:~# univention-s4search cn=master msDS-KeyVersionNumber
dn: CN=MASTER,OU=Domain Controllers,DC=test,DC=domain
msDS-KeyVersionNumber: 1
```

</td></tr><tr><td>**samba-tool dbcheck <span class="hljs-comment">--cross-ncs</span>**</td><td>This checks the database of samba4. Samba saves its date not just in one database,but it slits it up in 5 partitions.

To check al partitions and not just the basic one you need to add the parameter `--cross-ncs`

</td></tr><tr><td>**samba-tool dbcheck --cross-ncs --fix --<span class="hljs-literal">yes</span>**</td><td>To fix upcomming issues you can use `--fix` and `--yes` if you do not want to be asked for approval each error or warning.

</td></tr><tr><td>**/usr/share/univention-samba4/scripts/check\_essential\_samba4\_dns\_records.sh**</td><td>For a complete overview of the relevant dns records.

</td></tr></tbody></table>

# Troubleshooting

# Links & Tools

# Links

- <span class="wikiexternallink">[Cool Solution: Create LDAP search user](https://wiki.univention.de/index.php?title=Cool_Solution_-_LDAP_search_user)</span>