LX0-104 · Question #652
Select which groups must map to UNIX GIDs on a Samba server operating as a PDC. (Select TWO correct answers.)
The correct answer is B. Domain Users C. Domain Guests. When a Samba server operates as a Primary Domain Controller (PDC), the Domain Users and Domain Guests groups are essential and must be mapped to Unix GIDs. These mappings are crucial for correctly managing user and guest access permissions within the Samba domain.
Question
Options
- ADomain Administrators
- BDomain Users
- CDomain Guests
- DDomain Controllers
- EDomain Operators
How the community answered
(47 responses)- A4% (2)
- B87% (41)
- D6% (3)
- E2% (1)
Why each option
When a Samba server operates as a Primary Domain Controller (PDC), the Domain Users and Domain Guests groups are essential and must be mapped to Unix GIDs. These mappings are crucial for correctly managing user and guest access permissions within the Samba domain.
'Domain Administrators' is an important group, but its mapping is not strictly mandated for basic PDC functionality in the same way as core user and guest groups.
The 'Domain Users' group is a fundamental group for any Windows domain, including those emulated by Samba as a PDC, and its mapping to a Unix GID is necessary to provide standard user access and permissions.
The 'Domain Guests' group is also a mandatory group that must be mapped to a Unix GID on a Samba PDC to properly handle guest user permissions and access rights with limited privileges.
'Domain Controllers' is a group related to managing domain controllers themselves and is not a general user group requiring mandatory GID mapping for user access on a Samba PDC.
'Domain Operators' is an optional administrative group with specific delegated permissions, and its mapping is not a core requirement for basic Samba PDC operation unlike Domain Users or Guests.
Concept tested: Samba PDC mandatory group mappings
Source: https://www.samba.org/samba/docs/current/manpages/net_groupmap.8.html
Topics
Community Discussion
No community discussion yet for this question.