UCS 2.4 - Univention

2.2 UCS system roles
The DC backup is as such a backup copy of the DC master. If the DC master should collapse completely,
running the univention-backup2master command allows the DC backup can take over the role of
the DC master permanently in a very short time. This is only necessary if changes are to be made to the
LDAP directory or new certificates are to be given, as these tasks can only be fulfilled by a DC master.
2.2.3 Domain controller slave
Each domain controller slave (DC slave for short) contains a replicated copy of the entire LDAP directory,
which cannot be changed as all write accesses occur on the DC master. The copy can either contain the
entire directory or be limited to the files required by a location through selective replication.
The DC slave only stores a copy of its own and the public SSL certificate of the root CA.
A DC slave system cannot be promoted to a DC master.
2.2.4 Member server
Member servers are members of a LDAP domain and offer services such as file storage for the domain.
Member servers do not contain a copy of the LDAP directory.
It only stores a copy of its own and the public SSL certificate of the root CA.
2.2.5 Base system
A base system is an independent system. It is not a member of a domain and does not maintain trust
relationships with other servers or domains.
A base system is thus suitable for services which are operated outside of the trust context of the domain,
such as a web server or a firewall.
The services of a base system cannot be configured over the UCS management system. However, it is
possible to configure DNS and DHCP settings for base systems via the Univention Management System
as long as the base system is entered as an IP managed client in the directory service. (See Chapter
4.5.4).
2.2.6 Managed client
A managed client is a PC with a Linux desktop which is a member of the UCS domain. As standard it saves
the passwords of the last three different users temporarily so that these three users can log in without the
need for a network connection to a domain controller. Applications are run locally on the client. These two
factors render it largely independent of server systems.
17