LFCS Question #601: Real Exam Question with Answer & Explanation

Question

Samba cannot be a Backup Domain Controller for an NT4 PDC because:

Options

• ASamba 3 implements 128-bit encryption, which is unsupported by an NT4 PDC.
• Bthe native NT4 SAM replication protocols have not yet been fully implemented.
• Cthe database backends used by each server are incompatible.
• Dthe Samba team does not want to encourage the use of a Windows server as a PDC.

Explanation

Samba cannot function as a Backup Domain Controller (BDC) for a Windows NT4 Primary Domain Controller (PDC) because the specific NT4 SAM (Security Account Manager) replication protocols required for this role were never fully implemented in Samba.

Common mistakes.

• A. While encryption levels can be a factor in compatibility, the primary reason for Samba's inability to act as an NT4 BDC was the lack of SAM replication protocol support, not solely encryption. Samba versions capable of NT4 emulation generally supported compatible authentication and encryption methods.
• C. While database backends differ (Samba uses its own TDB or similar, NT4 uses registry-based SAM), Samba's design often involves abstraction layers to handle these differences; the core issue was the replication protocol, not merely the backend storage incompatibility.
• D. The technical capabilities and limitations are driven by implementation challenges and protocol specifics, not by the Samba team's philosophical stance on encouraging or discouraging certain domain setups.

Concept tested. Samba NT4 BDC limitations

Reference. https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html

No community discussion yet for this question.