Pass the LPI LPIC Level 3 300-300 Questions and answers with CertsForce

Whenbrowseable = nois set in the[homes]section ofsmb.conf, it prevents the share from appearing in the list of available shares when users browse the server. However, users can still access their home directories if they specify the correct UNC path directly.

A. When browsing the Samba server, there is no visible share named after the current user.

The share will not appear in the list of shares visible to the user during browsing.

D. The homes share can be directly accessed by specifically opening this share by its UNC path.

Users can still access the share by directly typing the path in the form\\servername\username.

References:

Samba Official Documentation - Home Directories

Adding SSSD to /etc/nsswitch.conf:

To include SSSD (System Security Services Daemon) as a source of information in the/etc/nsswitch.conffile, the service namesssmust be added. This is specified without any parameters. Thesssservice allows the system to retrieve information from various sources, such as LDAP, Kerberos, and others, as configured in SSSD.

References:

SSSD documentation

nsswitch.confconfiguration guidelines

When usingrsyncto synchronize the SYSVOL share's contents between multiple Samba servers, it's essential to ensure data consistency and avoid conflicts. The following precautions should be taken:

A. Synchronize from the domain controller which is the PDC emulator to the other domain controllers.

The PDC emulator is typically the authoritative source for certain domain-wide operations, making it the best source for SYSVOL synchronization.

C. Make the SYSVOL share read only on all domain controllers but the one used as synchronization source.

This prevents changes on other domain controllers that could cause inconsistencies.

E. Make sure to make all changes to GPOs on the domain controller which is the replication source.

Ensuring that all Group Policy Objects (GPOs) changes are made on the source controller prevents conflicts and ensures that all controllers have the latest configuration.

References:

Samba Documentation - SYSVOL Replication

hide unreadable:This smb.conf option ensures that only files and directories that the user has permissions to access are visible in the file share.

Functionality:When set toyes, files and directories that the user cannot read (due to permissions) will be hidden from their view.

Security and Usability:This helps in enhancing both security and usability by preventing users from seeing files they cannot access, reducing clutter and potential confusion.

Example Configuration:

[example_share] hide unreadable =yes

References

Samba smb.conf Documentation

Samba 4 Features:Samba 4 introduces major enhancements over Samba 3, including the ability to function as an Active Directory (AD) Domain Controller.

Capability as AD Controller:

Samba 4 includes support for AD protocols, allowing it to manage domain users and computers similar to a Windows AD server.

Incorrect Statements Clarified:

Samba 4 is a significant update with new features.

Windows clients can connect to Samba 4 servers.

Samba 4 does not include a proprietary file system called sambafs.

Samba 4 can integrate with existing AD domains.

References:

Samba Wiki - Samba4