UCS 2.4 - Univention

16 Frequently asked questions
Contents
16.1 How do I replace the DC master with a DC backup? . . . . . . . . . . . . . . . . . . . . . . 301
16.2 How can I install Microsoft TrueType fonts subsequently? . . . . . . . . . . . . . . . . . . . 302
16.3 How does a user change his password? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 303
16.3.1 On a Linux workstation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 303
16.3.2 On a Windows workstation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 303
16.3.3 When logging on . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 303
16.3.4 Via Univention Directory Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . 303
16.4 How is the password for root changed? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 303
16.5 What criteria must a password satisfy? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 304
16.6 Individual websites cannot be accessed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 304
16.7 Thin clients experience log-in problems in a domain spread over several locations . . . . . 305
16.8 How do I change the Univention Directory Manager timeout? . . . . . . . . . . . . . . . . . 305
16.9 Why are NFS shares not mounted during boot-up? . . . . . . . . . . . . . . . . . . . . . . . 305
16.10What does ”No DB server name found.” mean? . . . . . . . . . . . . . . . . . . . . . . . . . 306
16.11Computer name and network settings in Windows XP Prof. . . . . . . . . . . . . . . . . . . 306
16.12Avoiding double log-ins on Windows terminal servers . . . . . . . . . . . . . . . . . . . . . . 307
Further documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 309
16.1 How do I replace the DC master with a DC backup?
To promote a DC backup to a DC master, the command
/usr/lib/univention-ldap/univention-backup2master
must be executed on the DC backup.
Attention:
There can only be one DC master within a LDAP domain. The script can only be run if the original DC
master is not available.
The script switches off replication on the former DC backup. It activates the WINS service, configures the
system as a Kerberos admin server and changes the LDAP server to write mode. The OpenLDAP, Samba,
Kerberos, Univention Directory Listener and Univention Directory Notifier services are then restarted.
Samba then works as the primary domain controller (PDC).
Then the script replaces the former DC master with the former DC backup in the DNS service record for
the Kerberos admin. The _domaincontroller_master._tcp DNS service record is also transferred to the
previous DC backup. In so far as the former DC master was entered in the DNS alias records for univention
301