LFCS Question #121: Real Exam Question with Answer & Explanation

Question

To avoid having to add a machine trust account to a PDC for each Windows client in the domain (using the useradd command), a directive can be used in the Samba configuration file. Select the option below that shows the best solution for this situation.

Options

• Aname resolve order = <correct order>
• Bmachine map = /etc/samba/machines
• Cadd machine script
• Dlogon script
• Eread only = no

Explanation

To automate the creation of machine trust accounts for Windows clients in a Samba domain, the add machine script directive is used in the Samba configuration.

Common mistakes.

• A. name resolve order defines the sequence in which Samba attempts to resolve NetBIOS names to IP addresses, which is unrelated to machine trust account creation.
• B. machine map is not a standard Samba directive for automatically adding machine trust accounts; there is no direct equivalent or common usage for this purpose as described.
• D. A logon script is executed on the client machine upon user login and is used for client-side configuration, not server-side machine account provisioning.
• E. read only = no sets a share to be writable, which has no bearing on the automatic creation of machine trust accounts for domain membership.

Concept tested. Samba machine trust account automation

Reference. https://www.samba.org/samba/docs/current/manpages-3/smb.conf.5.html

No community discussion yet for this question.