LFCS · Question #322
What are the requirements for configuring a Samba file server to work in Active Directory mode? (Choose THREE correct answers.)
The correct answer is A. Join a domain using the command: net ads join B. Specify a realm in the smb.conf file. C. Synchronize time with the realm server. Configuring a Samba file server to operate in Active Directory mode requires joining the domain, specifying the Kerberos realm, and ensuring time synchronization for authentication.
Question
Options
- AJoin a domain using the command: net ads join
- BSpecify a realm in the smb.conf file.
- CSynchronize time with the realm server.
- DUse Winbind in the ADS mode with this command: winbindd -krb5
- ECreate an administrator account with the pdbedit command.
How the community answered
(46 responses)- A89% (41)
- D7% (3)
- E4% (2)
Why each option
Configuring a Samba file server to operate in Active Directory mode requires joining the domain, specifying the Kerberos realm, and ensuring time synchronization for authentication.
The `net ads join` command is essential to create and configure the Samba server's machine account in Active Directory, allowing it to become a member of the domain.
The `realm` parameter in `smb.conf` specifies the Kerberos realm that Samba should use for authentication against Active Directory, which is critical for successful domain operations.
Accurate time synchronization between the Samba server and the Active Directory domain controllers is a fundamental requirement for Kerberos authentication to prevent authentication failures due to time skew.
While Winbind is used for user/group resolution in ADS mode, the `-krb5` option is not a standard or necessary command-line argument for configuring Winbind for Active Directory integration; Winbind handles Kerberos automatically when properly configured via `smb.conf`.
The `pdbedit` command manages Samba's local user database (`smbpasswd`). In Active Directory mode, user accounts are authenticated and managed by Active Directory itself, not locally created via `pdbedit` on the Samba server.
Concept tested: Samba Active Directory domain membership requirements
Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html
Topics
Community Discussion
No community discussion yet for this question.