nerdexam
CompTIA

LX0-104 · Question #635

How can the risk of UID/GID inconsistencies be avoided across UNIX/Linux systems that are sharing information over protocols other than SMB/CIFS (eg: NFS)?

The correct answer is A. Specify a common LDAP idmap backend in smb.conf.. To avoid UID/GID inconsistencies across UNIX/Linux systems sharing information via protocols like NFS, specify a common LDAP ID mapping backend.

Essential System Services

Question

How can the risk of UID/GID inconsistencies be avoided across UNIX/Linux systems that are sharing information over protocols other than SMB/CIFS (eg: NFS)?

Options

  • ASpecify a common LDAP idmap backend in smb.conf.
  • BSpecify a common Kerberos realm in smb.conf.
  • CSpecify a common domain name in smb.conf.
  • DSpecify a common password server in smb.conf.
  • ESpecify a common winbind id range in smb.conf.

How the community answered

(52 responses)
  • A
    85% (44)
  • B
    2% (1)
  • C
    10% (5)
  • E
    4% (2)

Why each option

To avoid UID/GID inconsistencies across UNIX/Linux systems sharing information via protocols like NFS, specify a common LDAP ID mapping backend.

ASpecify a common LDAP idmap backend in smb.conf.Correct

Implementing a common LDAP ID mapping backend ensures that all UNIX/Linux systems resolve user and group identities to the same UIDs and GIDs. This consistency is crucial for maintaining correct file permissions and access control when sharing data across systems using protocols such as NFS, preventing issues where the same user might have different IDs on different machines.

BSpecify a common Kerberos realm in smb.conf.

Specifying a common Kerberos realm aids in authentication but does not inherently resolve UID/GID mapping inconsistencies for file permissions across systems.

CSpecify a common domain name in smb.conf.

Specifying a common domain name in `smb.conf` is primarily for Samba's domain membership and does not directly address UID/GID consistency for non-SMB/CIFS protocols.

DSpecify a common password server in smb.conf.

Specifying a common password server handles password management but does not provide a centralized, consistent UID/GID mapping for all users and groups across different systems.

ESpecify a common winbind id range in smb.conf.

Specifying a common Winbind ID range in `smb.conf` is specific to Samba's internal ID mapping and does not guarantee consistency for other UNIX/Linux systems sharing via non-SMB protocols unless those systems are also configured universally to leverage Winbind's ID mapping.

Concept tested: Cross-protocol UID/GID consistency with LDAP

Source: https://wiki.samba.org/index.php/Idmap_backends

Topics

#UID/GID consistency#LDAP#ID mapping#centralized identity

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice