nerdexam
CompTIA

LX0-104 · Question #662

When upgrading from Samba 2 to Samba 3, which of the following points should be considered when user information is stored in a LDAP server? (Select TWO correct answers.)

The correct answer is A. Never run the Samba 3 server before the configuration to use the LDAP server is complete. C. Set the domain SID of Samba 3 to the same value of Samba 2 with the net setlocalsid command.. When upgrading Samba 2 to Samba 3 with user information stored in LDAP, it is crucial to complete the LDAP configuration before starting the Samba 3 server and to maintain the same domain SID.

Essential System Services

Question

When upgrading from Samba 2 to Samba 3, which of the following points should be considered when user information is stored in a LDAP server? (Select TWO correct answers.)

Options

  • ANever run the Samba 3 server before the configuration to use the LDAP server is complete.
  • BConvert all passwords in the LDAP server to the new encryption method.
  • CSet the domain SID of Samba 3 to the same value of Samba 2 with the net setlocalsid command.
  • DDump all data files created by Samba 2, and restore them with Samba 3 to fix the ACLs.
  • EChange the permissions of the files created by Samba 2 to match the group permissions in Samba 3.

How the community answered

(28 responses)
  • A
    82% (23)
  • B
    7% (2)
  • D
    4% (1)
  • E
    7% (2)

Why each option

When upgrading Samba 2 to Samba 3 with user information stored in LDAP, it is crucial to complete the LDAP configuration before starting the Samba 3 server and to maintain the same domain SID.

ANever run the Samba 3 server before the configuration to use the LDAP server is complete.Correct

Running the Samba 3 server before its LDAP configuration is complete can lead to the server initializing with a local backend, causing inconsistencies or data loss when later attempting to switch to the intended LDAP backend.

BConvert all passwords in the LDAP server to the new encryption method.

While password encryption methods changed in Samba 3, converting *all* passwords in LDAP is not always a mandatory initial step before running the server; Samba 3 can often be configured to handle older hashes or integrate with existing LDAP schema without an immediate mass conversion.

CSet the domain SID of Samba 3 to the same value of Samba 2 with the net setlocalsid command.Correct

Setting the Samba 3 domain SID to match the Samba 2 domain SID using the `net setlocalsid` command is essential to ensure that existing clients and trusts from the Samba 2 domain continue to function seamlessly with the upgraded Samba 3 server.

DDump all data files created by Samba 2, and restore them with Samba 3 to fix the ACLs.

Dumping and restoring all data files from Samba 2 to fix ACLs is generally not the correct or primary approach for migrating user information specifically stored in an LDAP server, as ACLs are usually associated with file shares and not directly managed by LDAP for user accounts.

EChange the permissions of the files created by Samba 2 to match the group permissions in Samba 3.

Changing file permissions to match group permissions is a general file management task and not a specific, critical consideration unique to upgrading Samba's LDAP-backed user information from version 2 to 3.

Concept tested: Samba LDAP upgrade considerations

Source: https://www.samba.org/samba/docs/current/manpages/samba.8.html

Topics

#Samba upgrade#LDAP integration#Domain SID#Samba configuration

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice