LFCS · Question #650
Which of the following are roles of the winbindd service? (Choose TWO correct answers)
The correct answer is A. Maintain mappings between Unix UID/GID and Windows SID. D. User authentication by querying a Windows server. The winbindd service primarily maintains mappings between Unix UIDs/GIDs and Windows SIDs, and performs user authentication by querying a Windows Domain Controller.
Question
Options
- AMaintain mappings between Unix UID/GID and Windows SID.
- BRetrieve the user's password from the Windows server.
- CAdd machine accounts to the idmap table.
- DUser authentication by querying a Windows server.
- EProxy the request of the WINS search to the appropriate Windows server.
How the community answered
(68 responses)- A90% (61)
- B6% (4)
- C3% (2)
- E1% (1)
Why each option
The `winbindd` service primarily maintains mappings between Unix UIDs/GIDs and Windows SIDs, and performs user authentication by querying a Windows Domain Controller.
Winbind is responsible for synchronizing and maintaining the mapping between Windows Security Identifiers (SIDs) and local Unix User IDs (UIDs) and Group IDs (GIDs), which is crucial for cross-platform identity management.
While winbind handles authentication, it typically does not directly 'retrieve' the user's password in plain text from the Windows server; it performs a secure authentication challenge-response process.
Winbind manages ID mappings for users and groups, but the direct addition of machine accounts to an `idmap` table is usually part of the domain join process or `net` command, not a primary continuous role of `winbindd`.
Winbind integrates Samba with Windows domains by authenticating Unix users against a Windows Domain Controller, allowing users to log in with their Windows credentials on a Unix/Linux system.
WINS (Windows Internet Name Service) resolution is handled by the `nmbd` daemon in Samba, not `winbindd`.
Concept tested: Winbind service roles
Source: https://www.samba.org/samba/docs/man/manpages/winbindd.8.html
Topics
Community Discussion
No community discussion yet for this question.