Several tools can check the health status of an installed UCS system. The following sections give a first overview about these tools and commands:
Join status
A new installed UCS system has to be joined successfully:
root@master:~# univention-check-join-status
Joined successfully
root@master:~#
Univention Config Registry
Use UCR to check the version status:
root@master:~# ucr search version/version version/patchlevel version/errata
version/erratalevel: 144
version/patchlevel: 2
version/version: 3.2
root@master:~#
Package status
Are there any problems regarding the package system?
root@master:~# dpkg --audit
root@master:~#
This shouldn’t return anything. It will show affected packages in case of inconsistent package status.
Kerberos
Is a Kerberos authentification possible?
root@master:~# kinit Administrator
Administrator@DOMAIN.TEST's Password:
root@master:~# klist
Administrator@DOMAIN.TEST's Password: Credentials cache:
Principal: Administrator@DOMAIN.TEST
Issued Expires Principal
Jul 9 11:05:02 2014 Jul 9 21:04:59 2014 krbtgt/DOMAIN.TEST@DOMAIN.TEST
root@master:~#
A ticket was successfully issued on 09.07.2014 at 11:05:02 for Administrator and will be expiring on the same day at 21:04:49.
LDAP
Is a LDAP connection possible? Can the LDAP base object be found?
root@master:~# univention-ldapsearch -s base -LLL dn
dn: dc=domain,dc=test
root@master:~#
Samba
Is the samba server responding? Can shared files be accessed?
root@master:~# smbclient -UAdministrator //$(ucr get hostname)/sysvol -c quit
Enter Administrator's password:
Domain=[MEMBER] OS=[Unix] Server=[Samba 4.1.0-Debian]
root@master:~#
This is an example - at least no error should be printed.
System messages
Are there any obvious problems in syslog?
root@master:~# grep "oom|segfault" /var/log/syslog
root@master:~#
This should return nothing.
In case of trouble or uncertainty, feel free to get in touch with your supporter and hand over these initial checks.