LX0-104 · Question #659
In order to use the user and group mappings stored in an LDAP directory, which setting in smb.conf is correct?
The correct answer is B. idmap backend = ldap:ldap://ldap.example.com:636. To configure Samba to utilize an LDAP directory for user and group mappings, the idmap backend setting in smb.conf should be correctly set to ldap:ldap://ldap.example.com:636. This specifies both the mapping backend type and the LDAP server's URI.
Question
Options
- Aidmap backend = ldap://ldap.example.com:636
- Bidmap backend = ldap:ldap://ldap.example.com:636
- Cidmap backend = ldap server = ldap://ldap.example.com:636
- Didmap backend = ldap
How the community answered
(37 responses)- A5% (2)
- B89% (33)
- C3% (1)
- D3% (1)
Why each option
To configure Samba to utilize an LDAP directory for user and group mappings, the `idmap backend` setting in `smb.conf` should be correctly set to `ldap:ldap://ldap.example.com:636`. This specifies both the mapping backend type and the LDAP server's URI.
This syntax is incomplete as it lacks the initial `ldap:` prefix, which is necessary to explicitly specify the type of `idmap` backend being used.
The correct `smb.conf` syntax for configuring the `idmap backend` to use LDAP, including the LDAP server URI, is `idmap backend = ldap:ldap://ldap.example.com:636`. The first 'ldap' specifies the backend type, and 'ldap://ldap.example.com:636' provides the specific server address and port for the LDAP directory.
This syntax uses `ldap server =`, which is not the correct parameter for specifying the LDAP server within the `idmap backend` directive; the server URI should be part of the `idmap backend` value itself.
This option only specifies the backend type as `ldap` but does not include the essential LDAP server address and port, rendering it incomplete for practical use with an external LDAP directory.
Concept tested: Samba idmap LDAP configuration
Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html
Topics
Community Discussion
No community discussion yet for this question.