nerdexam
CompTIA

LX0-104 · Question #588

When migrating files from a Windows server A to a Samba server B with the command 'net rpc share migrate files -S A -destination=B -acls -attrs -U administrator', some files that originally belong onl

The correct answer is C. force unknown acl user = yes. The force unknown acl user = yes option in smb.conf resolves migration errors for files with ACLs assigned only to Windows groups by mapping unresolvable Windows SIDs to a valid Unix identity.

Essential System Services

Question

When migrating files from a Windows server A to a Samba server B with the command 'net rpc share migrate files -S A -destination=B -acls -attrs -U administrator', some files that originally belong only to a Windows group (no user) will generate errors during the migration. Which option in smb.conf will force such files to be mapped to the correct UNIX UID and GID?

Options

  • Ause acl = yes
  • Bmap group acls = yes
  • Cforce unknown acl user = yes
  • Dinherit acls = no

How the community answered

(31 responses)
  • A
    13% (4)
  • B
    10% (3)
  • C
    74% (23)
  • D
    3% (1)

Why each option

The `force unknown acl user = yes` option in `smb.conf` resolves migration errors for files with ACLs assigned only to Windows groups by mapping unresolvable Windows SIDs to a valid Unix identity.

Ause acl = yes

`use acl = yes` enables general ACL support but does not specifically address the issue of mapping *unknown* Windows SIDs to Unix identities during file migration.

Bmap group acls = yes

`map group acls = yes` is not a standard Samba parameter used for this specific problem; other ACL-related parameters exist but not this exact one.

Cforce unknown acl user = yesCorrect

The `force unknown acl user = yes` parameter in `smb.conf` is specifically designed to handle scenarios where Windows ACLs contain SIDs (Security Identifiers) that do not have a corresponding Unix user or group mapping. Setting this to `yes` forces Samba to map these unknown SIDs to a default or valid Unix identity, preventing errors during migration.

Dinherit acls = no

`inherit acls = no` controls whether newly created files or directories inherit ACLs from their parent, which is unrelated to resolving unmapped SIDs during a file migration.

Concept tested: Samba ACL migration unknown SIDs

Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html

Topics

#Samba configuration#file migration#ACLs#UID/GID mapping

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice