When configuring an OpenLDAP system for integration with PAM and NSS the /etc/nsswitch.conf file needs to be modified. Which of the following parameters completes this line from the /etc/nsswitch.conf file?
passwD. files _________
A. pam
B. ldap
C. pam_nss
D. pam_ldap
E. none
What are benefits of using Single Sign-On (SSO)? (Select THREE correct answers.)
A. Reduce IT costs due to lower number of IT help desk calls about passwords.
B. Reduce time spent re-entering passwords for the same identity.
C. Reduce number of passwords to remember.
D. Reduce password complexity.
E. Reduce number of services used by users.
CIFS relies upon which port for direct hosting without requiring NetBIOS?
A. 139
B. 443
C. 137
D. 445
What is stored in the secrets.tdb database file?
A. The password of the Samba user Administrator.
B. The password of the Samba user root.
C. Starting with Samba3 this file is no longer used.
D. The SID of the local machine.
Which parameter in smb.conf defines the directory containing secrets.tdb?
A. passdb dir
B. private dir
C. secrets dir
D. samba dir
What is true about the [homes] section in smb.conf?
A. It is a template used for all home directories of users on the Samba server.
B. Users can access their home directory only by accessing the share with the name homes.
C. It is a template used for all user created shares on the Samba server.
D. The maximum number of homes shares per used can be limited using the parameter usershare max homes.
Which of the following options can be used to limit access to a share? (Select TWO correct answers)
A. untrusted users
B. write list
C. valid users
D. valid groups
E. accept list
Which of the following Samba VFS modules can be used to store Windows ACLs?
A. vfs_acl_proxy
B. vfs_acl_fake
C. vfs_acl_tdb
D. vfs_acl_xattr
E. vfs_acl_ramdisc
What is true about the Samba configuration options create mask?
A. Each permission bit that is set (1) in create mask cannot be set on a file created by Samba even if the client requests it to be set.
B. Each permission bit that is cleared (0) in create mask is only set on a file created by Samba if the client explicitly sets the bit.
C. Each permission bit that is set (1) in create mask is always set on a file created by Samba regardless of the permissions set by the client.
D. Each permission bit that is cleared (0) in create mask is always cleared on a file created by Samba even if the client explicit sets the bit.
How is the user user01 from DOMA granted the right to manage printers on a Samba print server?
A. net ads rights 'DOMA\user01' +SePrintOperatorPrivilege
B. net -S server -U domadmin rpc rights grant 'DOMA\user01' SePrintOperatorPrivilege
C. pdbedit --user=user01 -I=DOMA --policies=SePrintOperatorPrivilege
D. pdbedit DOMA\user01 +PrintOperator
E. cupsaddsmb DOMA\user01 +PrintOperator
A Samba server is configured to use the OpenLDAP password backend. The root DN for the LDAP directory is defined in slapd.conf. In order to define an alternative account used by the Samba administrator, which steps are necessary? (Select THREE correct answers.)
A. Make sure the password for the new administrative account matches the UNIX root password.
B. Add a new Samba administrative account to the LDAP directory.
C. Make certain that the ldap admin option in smb.conf does not point to the LDAP root DN.
D. Map the Samba administrator account to the domain administrator.
E. Change the access attributes in slapd.conf.
What has to be done in order to make sure the Samba password is kept in sync when a user changes his Linux password?
A. Samba and Unix passwords can only be kept in sync when Samba uses the passwdsam password backend which reads the password from /etc/passwd and, when used, does not require further configuration.
B. /usr/bin/passwd should be replaced by a symlink to /usr/bin/smbpasswd.
C. In /etc/nsswitch.conf, the samba service should be added to passwd and shadow before the file service.
D. pam_smbpass.so should be added to the password type of the appropriate PAM configuration.
E. Winbindd must be running on the Linux server in order to replicate the password changes back to Samba.
Which of the following are true when considering NetBIOS browsing? (Choose THREE correct answers)
A. Servers and workstations register their presence to the network.
B. One or more machines on the network collate the local announcements.
C. It is not possible to share NetBIOS name information across subnets.
D. Elections are held to determine the roles of certain servers.
E. Currently, only Microsoft Windows servers can initiate an election.
Which file stores the global Kerberos configuration needed for OpenLDAP integration with Active Directory and Kerberos? (Specify only the file name without any path.)
The ________ parameter in smb.conf limits the maximum number of jobs allowed in a Samba printer queue at any given moment.