300-300 LPIC-3: Mixed Environments - Exam 300 - version 3.0 Questions and Answers

The net command is used to administer Samba and Windows servers. The subcommand ads is used in conjunction with the join command to join a Samba server to an Active Directory domain. The correct subcommand that fits the pattern net ___ join is ads .

References:

Samba net command man page

pdbedit: This Samba command is used to manage the user accounts stored in the Samba password database.

-v: The verbose option provides detailed information.

-u candidate: Specifies the user for which to display the information.

Other Commands:

smbpasswd, net sam show, samba-tool user list, getent smbpasswd: These commands do not provide the same comprehensive information and status flags as pdbedit .

References

Samba pdbedit Documentation

The effective permissions of a file created with the permissions 777 can be calculated considering the create mask and force create mode .

create mask = 711 implies that the permission bits are ANDed with 0711, i.e., only the owner can read, write, and execute.

force create mode = 750 implies that certain permission bits are always set, specifically 0750, i.e., read, write, and execute for the owner, and read and execute for the group.

The create mask reduces the permissions to 0711, and then force create mode adds the 0750 mask to the result.

Original permission: 777 AND with create mask (711) : 711 OR with force create mode (750) : 751

Thus, the effective permission is 751 .

References:

Samba smb.conf man page - create mask

Consistent Copy of LDB Files :

C. ldbbackup : The ldbbackup command is used to create a consistent copy of LDB files. LDB files are used by Samba to store data in a database format. The ldbbackup utility ensures that the data is copied in a consistent state, which is crucial for backup and recovery processes.

References :

Samba documentation on ldbbackup

General LDB management guides

The smbclient command is used to access shared resources on a server running the SMB/CIFS protocol. To authenticate using an existing Kerberos token, the -k option is used. This instructs smbclient to use Kerberos for authentication, assuming that the user already has a valid Kerberos ticket (usually obtained via the kinit command).

Example:

smbclient //server/share -k

References

smbclient man page

Kerberos Authentication with Samba

samba-tool drs: This set of commands is used to manage directory replication in an Active Directory domain. DRS stands for Directory Replication Service.

Functionality: It provides various subcommands to monitor, manage, and troubleshoot replication issues.

Other Commands:

samba-tool repl, directory, domain, sync: These do not specifically manage directory replication in the same way as samba-tool drs .

References

Samba DRS Command Documentation

In a Samba configuration file, variables can be used to represent dynamic values.

The %D variable represents the domain of the current user.

This variable can be used in various configuration directives to customize the behavior of Samba services based on the user's domain.

References

Samba variables documentation: https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html

Samba 4 Features: Samba 4 introduces major enhancements over Samba 3, including the ability to function as an Active Directory (AD) Domain Controller.

Capability as AD Controller:

Samba 4 includes support for AD protocols, allowing it to manage domain users and computers similar to a Windows AD server.

Incorrect Statements Clarified:

Samba 4 is a significant update with new features.

Windows clients can connect to Samba 4 servers.

Samba 4 does not include a proprietary file system called sambafs.

Samba 4 can integrate with existing AD domains.

References:

Samba Wiki - Samba4

path Option: This parameter in smb.conf specifies the directory on the server where the shared data is stored.

Usage: Within a share definition, the path option points to the actual location on the filesystem that Samba will share.

Example Configuration:

[example_share] path = /srv/ samba/share

Importance: Defining the correct path is crucial for ensuring that the share points to the intended directory with the appropriate data and permissions.

References

Samba smb.conf man page

Samba is a suite of programs that allows SMB/CIFS clients to interact with file and print services on a Linux/UNIX server.

smbd is the Samba daemon responsible for handling SMB/CIFS requests.

The smbcontrol utility is used to send messages to running Samba daemons.

The correct way to terminate all running instances of the Samba daemon handling SMB shares is to send a shutdown message to smbd using the command smbcontrol smbd shutdown .

This command ensures that only the smbd processes, which are responsible for handling SMB shares, are terminated without affecting other Samba components like nmbd (NetBIOS name server daemon).

References

Samba documentation: https://www.samba.org/samba/docs/current/man-html/smbcontrol.1.html

In FreeIPA, ID views allow administrators to override default POSIX attributes for users and groups. This feature is useful when integrating with other identity management systems, enabling specific attribute values to be used on a per-host basis. This way, different POSIX attributes can be set for the same user or group in different contexts.

References

FreeIPA: ID Views

FreeIPA Documentation

force directory mode = 0555: This setting in Samba forces the permissions of any newly created directories to be 0555 regardless of what the client requests.

Client Request: If a client creates a directory with permissions 0750, Samba will override this and set the directory's permissions to 0555.

Permissions Breakdown:

0 : No permissions for owner.

5 : Read and execute permissions for the group.

5 : Read and execute permissions for others.

Enforcement: Samba applies this mode strictly to ensure consistency and security as defined by the administrator.

References

Samba Force Directory Mode Documentation