nerdexam
Linux_Foundation

LFCS · Question #650

Which of the following are roles of the winbindd service? (Choose TWO correct answers)

The correct answer is A. Maintain mappings between Unix UID/GID and Windows SID. D. User authentication by querying a Windows server. The winbindd service primarily maintains mappings between Unix UIDs/GIDs and Windows SIDs, and performs user authentication by querying a Windows Domain Controller.

Submitted by paula_co· Apr 18, 2026User and Group Management

Question

Which of the following are roles of the winbindd service? (Choose TWO correct answers)

Options

  • AMaintain mappings between Unix UID/GID and Windows SID.
  • BRetrieve the user's password from the Windows server.
  • CAdd machine accounts to the idmap table.
  • DUser authentication by querying a Windows server.
  • EProxy the request of the WINS search to the appropriate Windows server.

How the community answered

(68 responses)
  • A
    90% (61)
  • B
    6% (4)
  • C
    3% (2)
  • E
    1% (1)

Why each option

The `winbindd` service primarily maintains mappings between Unix UIDs/GIDs and Windows SIDs, and performs user authentication by querying a Windows Domain Controller.

AMaintain mappings between Unix UID/GID and Windows SID.Correct

Winbind is responsible for synchronizing and maintaining the mapping between Windows Security Identifiers (SIDs) and local Unix User IDs (UIDs) and Group IDs (GIDs), which is crucial for cross-platform identity management.

BRetrieve the user's password from the Windows server.

While winbind handles authentication, it typically does not directly 'retrieve' the user's password in plain text from the Windows server; it performs a secure authentication challenge-response process.

CAdd machine accounts to the idmap table.

Winbind manages ID mappings for users and groups, but the direct addition of machine accounts to an `idmap` table is usually part of the domain join process or `net` command, not a primary continuous role of `winbindd`.

DUser authentication by querying a Windows server.Correct

Winbind integrates Samba with Windows domains by authenticating Unix users against a Windows Domain Controller, allowing users to log in with their Windows credentials on a Unix/Linux system.

EProxy the request of the WINS search to the appropriate Windows server.

WINS (Windows Internet Name Service) resolution is handled by the `nmbd` daemon in Samba, not `winbindd`.

Concept tested: Winbind service roles

Source: https://www.samba.org/samba/docs/man/manpages/winbindd.8.html

Topics

#winbindd#Active Directory#User Authentication#ID Mapping

Community Discussion

No community discussion yet for this question.

Full LFCS Practice