Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreeIPA domain and an Active Directory domain?
Answer : D
To establish a trust between a FreeIPA domain and an Active Directory domain, the correct command is ipa trust-add. This command is used to add a trust relationship with an Active Directory (AD) domain. The --type ad specifies the type of the trust, addom is the domain name, --admin Administrator specifies the AD administrator account, and --password prompts for the administrator's password.
The complete command looks like this:
a trust-add --type ad addom --admin Administrator --password
This command will initiate the trust creation process, which involves providing the credentials of the AD administrator.
FreeIPA Trusts
FreeIPA Trust Management
What is a correct statement about FreeIPA ID views?
Answer : C
In FreeIPA, ID views allow administrators to override default POSIX attributes for users and groups. This feature is useful when integrating with other identity management systems, enabling specific attribute values to be used on a per-host basis. This way, different POSIX attributes can be set for the same user or group in different contexts.
FreeIPA: ID Views
FreeIPA Documentation
When logging into a windows workstation which is member of an Active Directory domain, which of the following user names refers to the local account bob instead of the domain-wide account bob?
Answer : C
When logging into a Windows workstation that is a member of an Active Directory domain, the .\ prefix is used to specify a local user account rather than a domain account. Therefore, to refer to the local account bob, you would use .\bob.
In order to generate an individual log file for each of the machines connecting to a Samba server, which of the following statements must be used in the Samba configuration file?
Answer : A
Individual Log Files:
A . log file = /var/log/samba/log.%m: To generate an individual log file for each machine connecting to a Samba server, the %m variable is used in the log file path. This variable represents the machine name of the connecting client. Thus, the configuration line log file = /var/log/samba/log.%m creates a unique log file for each client machine.
Samba smb.conf manual
Logging configurations in Samba
Which of the following commands terminates all running instances of the Samba daemon handling for SMB shares?
Answer : D
Samba is a suite of programs that allows SMB/CIFS clients to interact with file and print services on a Linux/UNIX server.
smbd is the Samba daemon responsible for handling SMB/CIFS requests.
The smbcontrol utility is used to send messages to running Samba daemons.
The correct way to terminate all running instances of the Samba daemon handling SMB shares is to send a shutdown message to smbd using the command smbcontrol smbd shutdown.
This command ensures that only the smbd processes, which are responsible for handling SMB shares, are terminated without affecting other Samba components like nmbd (NetBIOS name server daemon).
Samba documentation: https://www.samba.org/samba/docs/current/man-html/smbcontrol.1.html
Which service unifies Linux and Windows account management by allowing a Linux system to include Windows domain users in the Linux user database?
Answer : D
Winbind: This service is used to unify Linux and Windows account management by allowing a Linux system to include Windows domain users in the Linux user database.
Functionality: Winbind enables Linux systems to retrieve user and group information from a Windows NT-based domain or Active Directory.
Other Services:
smbpasswdd, sudo, NIS, OpenLDAP: These services do not provide the same functionality for unifying account management between Linux and Windows.
Samba Winbind Documentation
In case the following parameters are set in a Samba file share configuration:
create mask = 711
force create mode = 750
What are the effective permissions of a file created with the permissions 777?
Answer : E
The effective permissions of a file created with the permissions 777 can be calculated considering the create mask and force create mode.
create mask = 711 implies that the permission bits are ANDed with 0711, i.e., only the owner can read, write, and execute.
force create mode = 750 implies that certain permission bits are always set, specifically 0750, i.e., read, write, and execute for the owner, and read and execute for the group.
The create mask reduces the permissions to 0711, and then force create mode adds the 0750 mask to the result.
Original permission: 777 AND with create mask (711): 711 OR with force create mode (750): 751
Thus, the effective permission is 751.
Samba smb.conf man page - create mask