A Samba server is configured to use the LDAP password backend. The root DN for the LDAP directory is defined in slapd.conf. In order to define an alternative account used by the Samba administrator, which steps are necessary? (Select THREE correct answers.)

Question

Accepted Answer

B. Add a new Samba administrative account to the LDAP directory. A new Samba administrative account must be created as an entry in the LDAP directory itself, as Samba relies on LDAP for user and group management when configured to use the LDAP password backend. C. Make certain that the 'ldap admin' option in smb.conf does not point to the LDAP root DN. To use an alternative administrator account, the `ldap admin` option in `smb.conf` should specify the distinguished name (DN) of this new account, rather than the LDAP root DN, which provides broader and potentially insecure privileges. E. Change the 'access' attributes in slapd.conf. The `access` attributes in `slapd.conf` (OpenLDAP's configuration) need to be modified to grant the newly created alternative administrative account the necessary permissions to manage Samba-related entries within the LDAP directory.

Answer

A. Make sure the password for the new administrative account matches the UNIX root password. The password for an LDAP administrative account does not need to match the UNIX root password; LDAP authentication is separate from local UNIX authentication.

Answer

D. Map the administrative account to the domain administrator. Mapping the administrative account to a domain administrator might be part of a larger domain setup, but it is not a direct or necessary step solely for defining an alternative Samba administrator account for an LDAP backend.

A Samba server is configured to use the LDAP password backend. The root DN for the LDAP directory is defined in slapd.conf. In order to define an alternative account used by the Samba administrator…

Question

Options

How the community answered

Why each option

Topics

Community Discussion