LFCS Question #322: Real Exam Question with Answer & Explanation

Question

What are the requirements for configuring a Samba file server to work in Active Directory mode? (Choose THREE correct answers.)

Options

• AJoin a domain using the command: net ads join
• BSpecify a realm in the smb.conf file.
• CSynchronize time with the realm server.
• DUse Winbind in the ADS mode with this command: winbindd -krb5
• ECreate an administrator account with the pdbedit command.

Explanation

Configuring a Samba file server to operate in Active Directory mode requires joining the domain, specifying the Kerberos realm, and ensuring time synchronization for authentication.

Common mistakes.

• D. While Winbind is used for user/group resolution in ADS mode, the -krb5 option is not a standard or necessary command-line argument for configuring Winbind for Active Directory integration; Winbind handles Kerberos automatically when properly configured via smb.conf.
• E. The pdbedit command manages Samba's local user database (smbpasswd). In Active Directory mode, user accounts are authenticated and managed by Active Directory itself, not locally created via pdbedit on the Samba server.

Concept tested. Samba Active Directory domain membership requirements

Reference. https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html

No community discussion yet for this question.