nerdexam
CompTIA

LX0-104 · Question #322

What are the requirements for configuring a Samba file server to work in Active Directory mode? (Choose THREE correct answers.)

The correct answer is A. Join a domain using the command: net ads join B. Specify a realm in the smb.conf file. C. Synchronize time with the realm server.. To configure a Samba file server to function in Active Directory mode, it must join the domain, specify its realm, and ensure time synchronization with the domain controller.

Administrative Tasks

Question

What are the requirements for configuring a Samba file server to work in Active Directory mode? (Choose THREE correct answers.)

Options

  • AJoin a domain using the command: net ads join
  • BSpecify a realm in the smb.conf file.
  • CSynchronize time with the realm server.
  • DUse Winbind in the ADS mode with this command: winbindd -krb5
  • ECreate an administrator account with the pdbedit command.

How the community answered

(38 responses)
  • A
    95% (36)
  • D
    3% (1)
  • E
    3% (1)

Why each option

To configure a Samba file server to function in Active Directory mode, it must join the domain, specify its realm, and ensure time synchronization with the domain controller.

AJoin a domain using the command: net ads joinCorrect

Using the `net ads join` command is essential to integrate the Samba server as a member server within an Active Directory domain, creating the necessary machine account.

BSpecify a realm in the smb.conf file.Correct

The `realm` parameter in the `smb.conf` file must accurately specify the DNS name of the Active Directory domain to facilitate proper Kerberos authentication.

CSynchronize time with the realm server.Correct

Time synchronization with the realm server (Active Directory Domain Controller) is a critical requirement for Kerberos authentication, which Active Directory relies upon, to prevent authentication failures.

DUse Winbind in the ADS mode with this command: winbindd -krb5

`winbindd -krb5` is not a standard configuration command for Winbind in ADS mode; Winbind's integration with Kerberos for ADS is configured through `smb.conf` and `krb5.conf`.

ECreate an administrator account with the pdbedit command.

While an administrator account is needed to *perform* the `net ads join`, creating a *new* administrator account with `pdbedit` (which manages local Samba accounts) is not a direct requirement for the *server itself* to operate in Active Directory mode.

Concept tested: Samba Active Directory member server configuration

Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html

Topics

#Samba#Active Directory integration#smb.conf#time synchronization

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice