LX0-104 · Question #650
Which of the following are roles of the winbindd service? (Choose TWO correct answers)
The correct answer is A. Maintain mappings between Unix UID/GID and Windows SID. D. User authentication by querying a Windows server.. The winbindd service facilitates Active Directory integration for Samba by handling identity mapping and user authentication. It maintains critical mappings between Unix UIDs/GIDs and Windows SIDs, and performs user authentication by querying a Windows server.
Question
Options
- AMaintain mappings between Unix UID/GID and Windows SID.
- BRetrieve the user's password from the Windows server.
- CAdd machine accounts to the idmap table.
- DUser authentication by querying a Windows server.
- EProxy the request of the WINS search to the appropriate Windows server.
How the community answered
(36 responses)- A89% (32)
- B6% (2)
- C3% (1)
- E3% (1)
Why each option
The `winbindd` service facilitates Active Directory integration for Samba by handling identity mapping and user authentication. It maintains critical mappings between Unix UIDs/GIDs and Windows SIDs, and performs user authentication by querying a Windows server.
The `winbindd` service maintains a database of mappings between Unix User IDs (UIDs) and Group IDs (GIDs) and their corresponding Windows Security Identifiers (SIDs), which is fundamental for allowing Windows users and groups to be recognized by Unix systems, ensuring consistent identity management.
`winbindd` performs authentication challenges with the Windows server without retrieving user passwords directly, ensuring security by not exposing credentials.
`winbindd` uses the idmap table for mappings but does not directly add machine accounts; machine account management is typically handled through other Samba tools like `net rpc join`.
`winbindd` handles user authentication requests for domain users by forwarding them to a Windows domain controller (e.g., Active Directory) and processing the response, thereby enabling Unix clients to authenticate against the Windows domain and allowing Windows domain users to log in.
WINS (Windows Internet Name Service) resolution, including proxying WINS searches, is a function of the `nmbd` service, not `winbindd`.
Concept tested: Samba winbindd roles and functionality
Source: https://www.samba.org/samba/docs/current/manpages/winbindd.8.html
Topics
Community Discussion
No community discussion yet for this question.