nerdexam
CompTIA

LX0-104 · Question #620

What must be done to allow only users of the devel system group to access a share?

The correct answer is A. In the smb.conf file, set valid users = @devel. To allow only users of the 'devel' system group to access a Samba share, the valid users parameter in smb.conf should be set to @devel.

Security

Question

What must be done to allow only users of the devel system group to access a share?

Options

  • AIn the smb.conf file, set valid users = @devel
  • BIn the smb.conf file, set valid groups = @devel
  • CIn the smb.conf file, set valid groups = devel
  • Dchgrp the directory on the Samba server to the devel group, and then set the GID bit on the directory.

How the community answered

(14 responses)
  • A
    71% (10)
  • B
    14% (2)
  • C
    7% (1)
  • D
    7% (1)

Why each option

To allow only users of the 'devel' system group to access a Samba share, the `valid users` parameter in `smb.conf` should be set to `@devel`.

AIn the smb.conf file, set valid users = @develCorrect

The `valid users` parameter, when prefixed with an `@` symbol (e.g., `@devel`), specifies that only authenticated users who are members of the corresponding Unix group 'devel' are permitted to access the Samba share.

BIn the smb.conf file, set valid groups = @devel

`valid groups` is not a standard `smb.conf` parameter used for controlling which Unix groups can access a share; `valid users = @groupname` is the correct parameter and syntax.

CIn the smb.conf file, set valid groups = devel

`valid groups = devel` is incorrect syntax and not a recognized `smb.conf` parameter for restricting access to a share based on group membership.

Dchgrp the directory on the Samba server to the devel group, and then set the GID bit on the directory.

Changing Unix file system group ownership (`chgrp`) and setting the GID bit affects underlying file permissions but does not directly control which users can establish a connection to the Samba share itself; `smb.conf` parameters manage share access.

Concept tested: Samba share access control (group-based)

Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html

Topics

#Samba share permissions#group access#smb.conf#valid users

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice