LX0-104 · Question #625
Which of the following lines should be added to smb.conf to use authenticate users against the Kerberos domain bc.ep.kerberos.biz?
The correct answer is B. realm = bc.ep.kerberos.biz. To configure Samba to authenticate users against a specific Kerberos domain, the realm parameter in the smb.conf file must be set to the Kerberos realm name.
Question
Options
- Akerberos = bc.ep.kerberos.biz
- Brealm = bc.ep.kerberos.biz
- Ckrb5 = /etc/krb5.conf
- Dkrb5 workgroup = bc.ep.kerberos.biz
How the community answered
(31 responses)- B94% (29)
- C3% (1)
- D3% (1)
Why each option
To configure Samba to authenticate users against a specific Kerberos domain, the `realm` parameter in the `smb.conf` file must be set to the Kerberos realm name.
`kerberos` is not a standard or recognized parameter in `smb.conf` for configuring the Kerberos realm; the correct parameter is `realm`.
The `realm` parameter in the `smb.conf` file is crucial for Kerberos integration, specifying the Kerberos realm (e.g., bc.ep.kerberos.biz) that Samba should use for authenticating users.
`krb5 = /etc/krb5.conf` is not a valid `smb.conf` parameter; Samba will typically find the Kerberos configuration file (`/etc/krb5.conf`) automatically without explicit configuration here.
`krb5 workgroup` is not a standard `smb.conf` parameter for Kerberos integration; `workgroup` refers to the NetBIOS domain/workgroup, while `realm` is used for Kerberos.
Concept tested: Samba Kerberos integration
Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html
Topics
Community Discussion
No community discussion yet for this question.