nerdexam
CompTIA

LX0-104 · Question #659

In order to use the user and group mappings stored in an LDAP directory, which setting in smb.conf is correct?

The correct answer is B. idmap backend = ldap:ldap://ldap.example.com:636. To configure Samba to utilize an LDAP directory for user and group mappings, the idmap backend setting in smb.conf should be correctly set to ldap:ldap://ldap.example.com:636. This specifies both the mapping backend type and the LDAP server's URI.

Essential System Services

Question

In order to use the user and group mappings stored in an LDAP directory, which setting in smb.conf is correct?

Options

  • Aidmap backend = ldap://ldap.example.com:636
  • Bidmap backend = ldap:ldap://ldap.example.com:636
  • Cidmap backend = ldap server = ldap://ldap.example.com:636
  • Didmap backend = ldap

How the community answered

(37 responses)
  • A
    5% (2)
  • B
    89% (33)
  • C
    3% (1)
  • D
    3% (1)

Why each option

To configure Samba to utilize an LDAP directory for user and group mappings, the `idmap backend` setting in `smb.conf` should be correctly set to `ldap:ldap://ldap.example.com:636`. This specifies both the mapping backend type and the LDAP server's URI.

Aidmap backend = ldap://ldap.example.com:636

This syntax is incomplete as it lacks the initial `ldap:` prefix, which is necessary to explicitly specify the type of `idmap` backend being used.

Bidmap backend = ldap:ldap://ldap.example.com:636Correct

The correct `smb.conf` syntax for configuring the `idmap backend` to use LDAP, including the LDAP server URI, is `idmap backend = ldap:ldap://ldap.example.com:636`. The first 'ldap' specifies the backend type, and 'ldap://ldap.example.com:636' provides the specific server address and port for the LDAP directory.

Cidmap backend = ldap server = ldap://ldap.example.com:636

This syntax uses `ldap server =`, which is not the correct parameter for specifying the LDAP server within the `idmap backend` directive; the server URI should be part of the `idmap backend` value itself.

Didmap backend = ldap

This option only specifies the backend type as `ldap` but does not include the essential LDAP server address and port, rendering it incomplete for practical use with an external LDAP directory.

Concept tested: Samba idmap LDAP configuration

Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html

Topics

#Samba configuration#LDAP integration#idmap backend#user mapping

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice