nerdexam
CompTIA

LX0-104 · Question #121

To avoid having to add a machine trust account to a PDC for each Windows client in the domain (using the useradd command), a directive can be used in the Samba configuration file. Select the option…

The correct answer is C. add machine script. To automate the creation of machine trust accounts for Windows clients in a Samba domain, the add machine script directive in smb.conf can be used. This directive specifies a script to execute when a new machine account needs to be provisioned.

Administrative Tasks

Question

To avoid having to add a machine trust account to a PDC for each Windows client in the domain (using the useradd command), a directive can be used in the Samba configuration file. Select the option below that shows the best solution for this situation.

Options

  • Aname resolve order = <correct order>
  • Bmachine map = /etc/samba/machines
  • Cadd machine script
  • Dlogon script
  • Eread only = no

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    13% (3)
  • C
    75% (18)
  • D
    8% (2)

Why each option

To automate the creation of machine trust accounts for Windows clients in a Samba domain, the `add machine script` directive in `smb.conf` can be used. This directive specifies a script to execute when a new machine account needs to be provisioned.

Aname resolve order = <correct order>

The `name resolve order` directive controls how Samba resolves hostnames, not how machine trust accounts are managed.

Bmachine map = /etc/samba/machines

`machine map` is not a standard Samba directive for managing machine accounts in this manner; it might refer to an internal mapping but not an automation script.

Cadd machine scriptCorrect

The `add machine script` directive allows Samba to execute a specified script whenever a new machine account is created, eliminating the need to manually add each machine trust account with commands like `useradd` to the PDC. This script handles the necessary backend operations to integrate new client machines into the domain.

Dlogon script

A `logon script` is executed on the client machine after successful authentication, not on the server for machine account creation.

Eread only = no

`read only = no` typically refers to share permissions, allowing writes to a share, and is unrelated to machine trust account creation.

Concept tested: Samba machine account automation

Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html#ADDMACHINESCRIPT

Topics

#Samba#PDC#machine trust accounts#smb.conf directives

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice