nerdexam
Linux_Foundation

LFCS · Question #322

What are the requirements for configuring a Samba file server to work in Active Directory mode? (Choose THREE correct answers.)

The correct answer is A. Join a domain using the command: net ads join B. Specify a realm in the smb.conf file. C. Synchronize time with the realm server. Configuring a Samba file server to operate in Active Directory mode requires joining the domain, specifying the Kerberos realm, and ensuring time synchronization for authentication.

Submitted by yousef_jo· Apr 18, 2026Service Configuration

Question

What are the requirements for configuring a Samba file server to work in Active Directory mode? (Choose THREE correct answers.)

Options

  • AJoin a domain using the command: net ads join
  • BSpecify a realm in the smb.conf file.
  • CSynchronize time with the realm server.
  • DUse Winbind in the ADS mode with this command: winbindd -krb5
  • ECreate an administrator account with the pdbedit command.

How the community answered

(46 responses)
  • A
    89% (41)
  • D
    7% (3)
  • E
    4% (2)

Why each option

Configuring a Samba file server to operate in Active Directory mode requires joining the domain, specifying the Kerberos realm, and ensuring time synchronization for authentication.

AJoin a domain using the command: net ads joinCorrect

The `net ads join` command is essential to create and configure the Samba server's machine account in Active Directory, allowing it to become a member of the domain.

BSpecify a realm in the smb.conf file.Correct

The `realm` parameter in `smb.conf` specifies the Kerberos realm that Samba should use for authentication against Active Directory, which is critical for successful domain operations.

CSynchronize time with the realm server.Correct

Accurate time synchronization between the Samba server and the Active Directory domain controllers is a fundamental requirement for Kerberos authentication to prevent authentication failures due to time skew.

DUse Winbind in the ADS mode with this command: winbindd -krb5

While Winbind is used for user/group resolution in ADS mode, the `-krb5` option is not a standard or necessary command-line argument for configuring Winbind for Active Directory integration; Winbind handles Kerberos automatically when properly configured via `smb.conf`.

ECreate an administrator account with the pdbedit command.

The `pdbedit` command manages Samba's local user database (`smbpasswd`). In Active Directory mode, user accounts are authenticated and managed by Active Directory itself, not locally created via `pdbedit` on the Samba server.

Concept tested: Samba Active Directory domain membership requirements

Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html

Topics

#Samba#Active Directory#File Server#Service Configuration

Community Discussion

No community discussion yet for this question.

Full LFCS Practice