LFCS · Question #129
Which are common procedures to implement Samba with LDAP? (Choose TWO correct answers.)
The correct answer is A. Include the Samba schema into OpenLDAP. B. Configure Samba password backend to point to OpenLDAP server. Implementing Samba with LDAP commonly involves including the Samba schema into OpenLDAP and configuring Samba to use OpenLDAP as its password backend.
Question
Options
- AInclude the Samba schema into OpenLDAP.
- BConfigure Samba password backend to point to OpenLDAP server.
- CCompile OpenLDAP with support to Samba authentication.
- DInclude OpenLDAP core schema files into Samba configuration directory.
How the community answered
(61 responses)- A77% (47)
- C7% (4)
- D16% (10)
Why each option
Implementing Samba with LDAP commonly involves including the Samba schema into OpenLDAP and configuring Samba to use OpenLDAP as its password backend.
For Samba to store its specific user and machine account attributes (like SIDs, password hashes) within the OpenLDAP directory, the Samba schema definitions must be added to the OpenLDAP server's configuration, effectively extending the directory's object classes and attributes.
To centralize user management, Samba must be configured (typically in `smb.conf` using directives like `passdb backend = ldapsam`) to use the OpenLDAP server as its backend for authenticating users and retrieving their account information.
OpenLDAP is a directory server and does not need to be compiled with specific "Samba authentication support"; it provides a generic LDAP interface that Samba (the client) uses for authentication and directory services.
OpenLDAP core schema files are managed and loaded by the OpenLDAP server itself; Samba communicates with the LDAP server via the LDAP protocol and does not directly include or process OpenLDAP's schema files in its own configuration directory.
Concept tested: Samba-LDAP integration procedures
Source: https://wiki.samba.org/index.php/Samba_and_LDAP_setup
Topics
Community Discussion
No community discussion yet for this question.