Which option in smb.conf defines the domain of which the server is a member?
In smb.conf, the realm option specifies the Kerberos realm for the Active Directory of which the server is a member. This option is crucial for integrating the Samba server into an AD environment.
Samba smb.conf man page - realm
Which command creates a consistent copy of LDB files?
Consistent Copy of LDB Files:
C . ldbbackup: The ldbbackup command is used to create a consistent copy of LDB files. LDB files are used by Samba to store data in a database format. The ldbbackup utility ensures that the data is copied in a consistent state, which is crucial for backup and recovery processes.
Samba documentation on ldbbackup
General LDB management guides
How is the Global Catalog of an Active Directory domain accessed?
Global Catalog: The Global Catalog is a distributed data repository that contains a searchable, partial representation of every object in every domain in a multi-domain Active Directory forest.
Access Method: It is accessed through LDAP queries to specific ports:
Port 3268: For plain text (unencrypted) LDAP queries.
Port 3269: For LDAP queries encrypted with TLS.
Other Options:
GCS SMB share, GCS records, SRV records, CN=GC in LDAP: These do not provide the correct method to access the Global Catalog.
Which of the following statements is true about raw printing with Samba?
Client-Side Rendering: In Samba, raw printing means that the client machine renders the print job, which includes converting it to a printer-ready format.
Transmission to Printer: This rendered print job is then sent to the Samba server without further processing or alteration. Samba acts merely as a pass-through, sending the job directly to the printer.
Advantages: This method offloads the rendering process from the server to the client, which can be beneficial in environments with diverse printer types and models, reducing the processing load on the server.
Conclusion: Thus, the correct answer is that printing jobs are rendered on the client and passed on to the printer by Samba.
Samba Printing Documentation
Which of the following TCP ports is used to provide the SMB protocol without NetBIOS?
The SMB protocol (Server Message Block) is used for providing shared access to files and printers.
Historically, SMB ran on top of NetBIOS over TCP/IP using port 139.
SMB can also run directly over TCP/IP without the NetBIOS layer, which uses port 445.
Therefore, TCP port 445 is used to provide the SMB protocol without NetBIOS.
Official IANA port numbers: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml
Which of the following FSMO roles exist? (Choose two.)
Flexible Single Master Operations (FSMO) roles, also known as operations master roles, are specialized domain controller tasks in an Active Directory environment. The FSMO roles include:
C . PDC Emulator
The Primary Domain Controller (PDC) Emulator is responsible for synchronizing time and managing password changes.
D . RID Master
The Relative ID (RID) Master allocates blocks of RIDs to each domain controller in the domain.
Which of the following statements about automount in a FreeIPA domain are true? (Choose two.)
Automounting in a FreeIPA domain involves several key aspects:
Base Configuration File (/etc/auto.master): The auto.master file is the main configuration file for the automounter. It contains the master map which defines mount points and their corresponding maps. This file is crucial for setting up automount points.
Example entry in /etc/auto.master:
plaintext
Copy code
/home /etc/auto.home
SSSD Requirement: In a FreeIPA domain, automount requires the System Security Services Daemon (SSSD) to be installed and configured on each client. SSSD is used to retrieve automount maps from the FreeIPA server, enabling the automount feature to function correctly.
Example configuration in /etc/sssd/sssd.conf:
[sssd] services = nss, pam, autofs config_file_version = 2 domains = example.com [domain/example.com] autofs_provider = ipa ipa_server = _srv_
Automount Configuration
FreeIPA SSSD Integration
Which of the following commands sets up Samba 4 as an Active Domain Directory Controller for a new domain?
samba-tool domain provision: This command sets up Samba 4 as an Active Directory Domain Controller.
Process:
Run samba-tool domain provision to start the setup.
Follow the prompts to specify the domain name, administrator password, and other required information.
Outcome: This command initializes the Samba server as a new domain controller for a new domain, configuring the necessary services and databases.
Samba Active Directory Domain Controller
Which of the following statements is true regarding Samba 4?
Samba 4 Features: Samba 4 introduces major enhancements over Samba 3, including the ability to function as an Active Directory (AD) Domain Controller.
Capability as AD Controller:
Samba 4 includes support for AD protocols, allowing it to manage domain users and computers similar to a Windows AD server.
Incorrect Statements Clarified:
Samba 4 is a significant update with new features.
Windows clients can connect to Samba 4 servers.
Samba 4 does not include a proprietary file system called sambafs.
Samba 4 can integrate with existing AD domains.
Samba Wiki - Samba4
Which of the following smb.conf options turns a regular file share into a DFS share?
DFS (Distributed File System): This allows for the organization of shared files on multiple servers in a distributed file system.
msdfs root = yes: This option in the Samba configuration file (smb.conf) enables a share to be a DFS root. This means the share can provide access to multiple other shares possibly located on different servers, creating a single point of access.
Functionality: When enabled, users accessing this DFS root can be redirected transparently to the actual location of the shared files, which might be spread across different servers.
Setup: To configure a DFS root, add msdfs root = yes to the specific share definition in smb.conf.
Samba DFS Configuration
