Description Johannes Kenkel 2018-02-21 15:39:59 CET

Regarding the UMC system diagnostic and a related Blog article: <<https://www.univention.com/2018/02/module-system-diagnostic-your-problem-solving-assistant-in-ucs/#comments>> Moritz Bunkus indicated the following feature requests:

• Being able to run the same checks from the CLI (e.g. for easier access during remote upgrades, but also for integrating into monitoring solutions such as Nagios)
• DNS checks for server name resolution discrepancies: in the forum i often stumble across user setups where the UCS servers resolve e.g. the DC Master's host name correctly, but a client machine doesn't, and where it turns out that the external resolver (e.g. a FritzBox) resolves that name to the public, external IP address. Verifying that all nameservers configured via UCR and the ones handed out via DHCP serve the same addresses for at least the DC Master would be nice.
• Samba Kerberos vs. network interfaces: I had a couple of clients who had configured Samba to only listen on certain network interfaces (e.g. eth0 but not lo). This can lead to the Kerberos KDC not being reachable, especially when /etc/krb5.conf is configured to use 127.0.0.1. While there is a check for that already, its error messages are somewhat misleading. This could be vastly improved.
• Regarding a CLI mode & integration into monitoring solutions: it would be nice to be able to deactivate or skip certain checks. For example, we have one customer with host names with underscores, and he's perfectly fine with them — but the check always emits a warning.