LFCS Question #625: Real Exam Question with Answer & Explanation

Question

Which of the following lines should be added to smb.conf to use authenticate users against the Kerberos domain bc.ep.kerberos.biz?

Options

• Akerberos = bc.ep.kerberos.biz
• Brealm = bc.ep.kerberos.biz
• Ckrb5 = /etc/krb5.conf
• Dkrb5 workgroup = bc.ep.kerberos.biz

Explanation

To configure Samba for Kerberos authentication, the realm parameter in smb.conf must specify the target Kerberos domain.

Common mistakes.

• A. kerberos is not a valid smb.conf parameter for specifying the Kerberos realm; the correct parameter is realm.
• C. krb5 = /etc/krb5.conf is not an smb.conf parameter, but rather the path to the Kerberos client configuration file that the underlying Kerberos library uses.
• D. krb5 workgroup is not a valid smb.conf parameter; the workgroup parameter specifies the NetBIOS domain/workgroup, while realm specifies the Kerberos realm.

Concept tested. Samba Kerberos realm configuration

Reference. https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html

No community discussion yet for this question.