LPI 300-300 Exam Questions

The effective permissions of a file created with the permissions 777 can be calculated considering the create mask and force create mode.

create mask = 711 implies that the permission bits are ANDed with 0711, i.e., only the owner can read, write, and execute.

force create mode = 750 implies that certain permission bits are always set, specifically 0750, i.e., read, write, and execute for the owner, and read and execute for the group.

The create mask reduces the permissions to 0711, and then force create mode adds the 0750 mask to the result.

Original permission: 777 AND with create mask (711): 711 OR with force create mode (750): 751

Thus, the effective permission is 751.

Samba smb.conf man page - create mask

Automounting in a FreeIPA domain involves several key aspects:

Base Configuration File (/etc/auto.master): The auto.master file is the main configuration file for the automounter. It contains the master map which defines mount points and their corresponding maps. This file is crucial for setting up automount points.

Example entry in /etc/auto.master:

plaintext

Copy code

/home /etc/auto.home

SSSD Requirement: In a FreeIPA domain, automount requires the System Security Services Daemon (SSSD) to be installed and configured on each client. SSSD is used to retrieve automount maps from the FreeIPA server, enabling the automount feature to function correctly.

Example configuration in /etc/sssd/sssd.conf:

[sssd] services = nss, pam, autofs config_file_version = 2 domains = example.com [domain/example.com] autofs_provider = ipa ipa_server = _srv_

Automount Configuration

FreeIPA SSSD Integration

The samba-tool group add command is used to add a new group to the Samba Active Directory. This command has several parameters to customize the group creation process. Two of the available parameters are --sid and --group-type.

--sid:

The --sid parameter allows you to specify a Security Identifier (SID) for the new group.

Example usage:

samba-tool group add mygroup --sid=S-1-5-21-1234567890-123456789-1234567890-1234

This command will create a new group named mygroup with the specified SID.

--group-type:

The --group-type parameter allows you to specify the type of the group being created. This can be a security group or a distribution group.

Example usage:

samba-tool group add mygroup --group-type=security

This command will create a new security group named mygroup.

Samba Official Documentation: samba-tool

Samba Active Directory Management: Managing Groups

Purpose of the Command: testparm is used to check the Samba configuration file (smb.conf) for syntax errors.

Command

Running testparm will read the smb.conf file, parse it, and display any syntax errors or warnings. This helps ensure that the configuration is valid before restarting the Samba service.

Usage Example:

Simply execute testparm in the terminal, and it will automatically check the default configuration file.

Samba.org - testparm

Samba 4 Features: Samba 4 introduces major enhancements over Samba 3, including the ability to function as an Active Directory (AD) Domain Controller.

Capability as AD Controller:

Samba 4 includes support for AD protocols, allowing it to manage domain users and computers similar to a Windows AD server.

Incorrect Statements Clarified:

Samba 4 is a significant update with new features.

Windows clients can connect to Samba 4 servers.

Samba 4 does not include a proprietary file system called sambafs.

Samba 4 can integrate with existing AD domains.

Samba Wiki - Samba4