nerdexam
Linux_Foundation

LFCS · Question #597

Which of the following is true about the following share access properties? (Choose TWO correct answers.) [projects]path = /data/projects read only = noadmin users = timo, taki, +managers

The correct answer is B. The timo and taki users can manipulate files regardless of the file system permissions. C. +managers will be resolved as a Unix group. In Samba, admin users specifies users and groups who have administrative privileges over a share, allowing them to bypass standard file system permissions, and a + prefix denotes a Unix group.

Submitted by packet_pusher· Apr 18, 2026Service Configuration

Question

Which of the following is true about the following share access properties? (Choose TWO correct answers.) [projects]path = /data/projects read only = noadmin users = timo, taki, +managers

Options

  • A+managers will be resolved as a Winbind group.
  • BThe timo and taki users can manipulate files regardless of the file system permissions.
  • C+managers will be resolved as a Unix group.
  • D+managers is a builtin default Samba group.
  • EThe "admin users" can be applied only to print shares.

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    95% (35)
  • D
    3% (1)

Why each option

In Samba, `admin users` specifies users and groups who have administrative privileges over a share, allowing them to bypass standard file system permissions, and a `+` prefix denotes a Unix group.

A+managers will be resolved as a Winbind group.

The `+` prefix explicitly indicates a Unix group, not a Winbind group; Winbind groups are typically specified without the `+` prefix or with a domain prefix.

BThe timo and taki users can manipulate files regardless of the file system permissions.Correct

Users listed in `admin users` (timo, taki) are granted administrative privileges on the share, meaning they can manipulate files even if their underlying Unix permissions would normally deny access.

C+managers will be resolved as a Unix group.Correct

In Samba configuration, a group name prefixed with a plus sign (`+`) indicates that it should be resolved as a local Unix group rather than a Samba or Winbind group.

D+managers is a builtin default Samba group.

`+managers` refers to a local Unix group named `managers`; it is not a builtin default Samba group.

EThe "admin users" can be applied only to print shares.

The `admin users` parameter can be applied to any type of Samba share, including disk shares like `[projects]`, not exclusively to print shares.

Concept tested: Samba admin users and group resolution

Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html

Topics

#Samba configuration#Share permissions#Access control#Group resolution

Community Discussion

No community discussion yet for this question.

Full LFCS Practice