LX0-104 · Question #597
Which of the following is true about the following share access properties? (Choose TWO correct answers.) [projects]path = /data/projects read only = noadmin users = timo, taki, +managers
The correct answer is B. The timo and taki users can manipulate files regardless of the file system permissions. C. +managers will be resolved as a Unix group.. In a Samba share, admin users grants listed users root-level privileges that override filesystem permissions, and a group name prefixed with a plus sign, like +managers, will be resolved as a Unix group.
Question
Options
- A+managers will be resolved as a Winbind group.
- BThe timo and taki users can manipulate files regardless of the file system permissions.
- C+managers will be resolved as a Unix group.
- D+managers is a builtin default Samba group.
- EThe "admin users" can be applied only to print shares.
How the community answered
(27 responses)- A4% (1)
- B78% (21)
- D4% (1)
- E15% (4)
Why each option
In a Samba share, `admin users` grants listed users root-level privileges that override filesystem permissions, and a group name prefixed with a plus sign, like `+managers`, will be resolved as a Unix group.
A group prefixed with `+` (e.g., `+managers`) is typically resolved as a Unix group, not a Winbind group; Winbind groups are usually specified with a domain prefix or an `@` symbol (e.g., `@DOMAIN\managers`).
Users specified in the `admin users` parameter, such as `timo` and `taki`, are granted root-level access to the share. This allows them to manipulate files and directories, including creating, deleting, and modifying, regardless of the underlying Unix file system permissions.
In Samba's `smb.conf` configuration, a group name prefixed with a plus sign (`+`) indicates that it should be resolved as a Unix group, meaning Samba will look up the `managers` group in the server's local Unix group database.
Samba does not have a built-in default group named `+managers`; it refers to a user-defined Unix group.
The `admin users` parameter can be applied to any type of Samba share (e.g., disk shares, home shares) to grant administrative privileges, not exclusively to print shares.
Concept tested: Samba admin users and group resolution
Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html#ADMINUSERS
Topics
Community Discussion
No community discussion yet for this question.