LX0-104 · Question #121
To avoid having to add a machine trust account to a PDC for each Windows client in the domain (using the useradd command), a directive can be used in the Samba configuration file. Select the option…
The correct answer is C. add machine script. To automate the creation of machine trust accounts for Windows clients in a Samba domain, the add machine script directive in smb.conf can be used. This directive specifies a script to execute when a new machine account needs to be provisioned.
Question
Options
- Aname resolve order = <correct order>
- Bmachine map = /etc/samba/machines
- Cadd machine script
- Dlogon script
- Eread only = no
How the community answered
(24 responses)- A4% (1)
- B13% (3)
- C75% (18)
- D8% (2)
Why each option
To automate the creation of machine trust accounts for Windows clients in a Samba domain, the `add machine script` directive in `smb.conf` can be used. This directive specifies a script to execute when a new machine account needs to be provisioned.
The `name resolve order` directive controls how Samba resolves hostnames, not how machine trust accounts are managed.
`machine map` is not a standard Samba directive for managing machine accounts in this manner; it might refer to an internal mapping but not an automation script.
The `add machine script` directive allows Samba to execute a specified script whenever a new machine account is created, eliminating the need to manually add each machine trust account with commands like `useradd` to the PDC. This script handles the necessary backend operations to integrate new client machines into the domain.
A `logon script` is executed on the client machine after successful authentication, not on the server for machine account creation.
`read only = no` typically refers to share permissions, allowing writes to a share, and is unrelated to machine trust account creation.
Concept tested: Samba machine account automation
Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html#ADDMACHINESCRIPT
Topics
Community Discussion
No community discussion yet for this question.