Skip to main content

Useful CLI Commands Univention Corporate Server

Useful CLI command line troubleshooting tools

The following is a list of CLI commands used for administering the Univention Corporate Server (UCS)

UCS Show Commands

Command Description
ucr get server/role Show the server role
ucr get domainname Show Domainname
ucr get windows/domain Show WIndows Domain

Samba Show Commands

Command Description
samba-tool drs showrepl To get an overview of the current drs replication status you can use this command at every UCS Samba 4 DC which is joined to the domain.
root@master:~# univention-s4search cn=master msDS-KeyVersionNumber

root@backup:~# univention-s4search cn=master msDS-KeyVersionNumber

For a given user, computer, or built-in account, this attribute specifies the Kerberos version number of the current key for that account.
Therefore it can be used to compare the replication status of systems:systems.

 

The values have to be equal - otherweise the replication seems to be broken. If a system uses another value in comparison to the master, then it has to be rejoined or you first try to replicate just the Server account.

 

Example:

root@master:~# univention-s4search cn=master msDS-KeyVersionNumber
dn: CN=MASTER,OU=Domain Controllers,DC=test,DC=domain
msDS-KeyVersionNumber: 7
root@backup:~# univention-s4search cn=master msDS-KeyVersionNumber
dn: CN=MASTER,OU=Domain Controllers,DC=test,DC=domain
msDS-KeyVersionNumber: 1

Back to top