Free 300-300 Practice Test Questions and Answers (2026) | Cert Empire Practice Questions

Individual Log Files:

A . log file = /var/log/samba/log.%m: To generate an individual log file for each machine connecting

to a Samba server, the %m variable is used in the log file path. This variable represents the machine

name of the connecting client. Thus, the configuration line log file = /var/log/samba/log.%m creates

a unique log file for each client machine.

Reference:

Samba smb.conf manual

Logging configurations in Samba

Automounting in a FreeIPA domain involves several key aspects:

Base Configuration File (/etc/auto.master): The auto.master file is the main configuration file for the

automounter. It contains the master map which defines mount points and their corresponding maps.

This file is crucial for setting up automount points.

Example entry in /etc/auto.master:

plaintext

Copy code

/home /etc/auto.home

SSSD Requirement: In a FreeIPA domain, automount requires the System Security Services Daemon

(SSSD) to be installed and configured on each client. SSSD is used to retrieve automount maps from

the FreeIPA server, enabling the automount feature to function correctly.

Example configuration in /etc/sssd/sssd.conf:

[sssd] services = nss, pam, autofs config_file_version = 2 domains = example.com

[domain/example.com] autofs_provider = ipa ipa_server = _srv_

Reference:

Automount Configuration

FreeIPA SSSD Integration

Thank you for your visit.

To limit access to a Samba share, the valid users and valid groups options can be used. These

directives specify which users or groups are allowed to access the share.

C . valid groups

This option restricts access to members of specified Unix groups.

D . valid users

This option restricts access to specified Unix users.

Reference:

Samba smb.conf man page

The smbcacls utility is used to manage Windows ACLs on Samba shares. The output format shown in

the image suggests it relates to detailed ACL information, which is typically generated by smbcacls.

Reference:

Samba smbcacls man page

Pluggable Authentication Modules (PAM) provides a system of libraries that handle the

authentication tasks of applications (services) on a Linux system. These libraries are loaded

dynamically and can be configured in the /etc/pam.d directory or in /etc/pam.conf. The PAM

modules are divided into four types:

auth (authentication): This module type is responsible for authenticating the user, setting up user

credentials, and initiating a session.

account: This module type manages account policies such as password expiration, access restrictions,

and checking user permissions.

password: This module type handles the updating of authentication tokens, such as passwords.

session: This module type manages tasks that need to be performed at the beginning and end of a

session, like mounting directories or logging.

Reference:

Linux PAM Documentation

Understanding PAM

Consistent Copy of LDB Files:

C . ldbbackup: The ldbbackup command is used to create a consistent copy of LDB files. LDB files are

used by Samba to store data in a database format. The ldbbackup utility ensures that the data is

copied in a consistent state, which is crucial for backup and recovery processes.

Reference:

Samba documentation on ldbbackup

General LDB management guides

samba-tool domain provision: This command sets up Samba 4 as an Active Directory Domain

Controller.

Process:

Run samba-tool domain provision to start the setup.

Follow the prompts to specify the domain name, administrator password, and other required

information.

Outcome: This command initializes the Samba server as a new domain controller for a new domain,

configuring the necessary services and databases.

Reference:

Samba Active Directory Domain Controller

dns forwarder: This smb.conf option specifies the DNS server to which queries should be forwarded if

they cannot be resolved locally by the Samba server.

Configuration:

Add dns forwarder = to smb.conf on the Samba server.

Ensure all clients are configured to query the Samba server for DNS information.

Process:

Clients send all DNS queries to the Samba server.

If the Samba server cannot resolve a query locally, it forwards the request to the additional DNS

server.

Benefit: This ensures that all DNS records, including those from the Active Directory domain and

other DNS information, can be resolved by the clients.

Reference:

Samba DNS Forwarding

path Option: This parameter in smb.conf specifies the directory on the server where the shared data is stored. Usage: Within a share definition, the path option points to the actual location on the filesystem that Samba will share. Example Configuration: [example_share] path = /srv/samba/share Importance: Defining the correct path is crucial for ensuring that the share points to the intended directory with the appropriate data and permissions. Reference: Samba smb.conf man page

Adding SSSD to /etc/nsswitch.conf: To include SSSD (System Security Services Daemon) as a source of information in the /etc/nsswitch.conf file, the service name sss must be added. This is specified without any parameters. The sss service allows the system to retrieve information from various sources, such as LDAP, Kerberos, and others, as configured in SSSD. Reference: SSSD documentation nsswitch.conf configuration guidelines

The smbclient command is used to access shared resources on a server running the SMB/CIFS protocol. To authenticate using an existing Kerberos token, the -k option is used. This instructs smbclient to use Kerberos for authentication, assuming that the user already has a valid Kerberos ticket (usually obtained via the kinit command). Example: smbclient //server/share -k Reference: smbclient man page Kerberos Authentication with Samba

An LDIF (LDAP Data Interchange Format) file is used to represent directory entries in LDAP (Lightweight Directory Access Protocol). Each entry in an LDIF file starts with the dn (Distinguished Name) attribute, which uniquely identifies the entry in the directory. The dn attribute is mandatory and specifies the path to the entry within the LDAP directory. Reference: LDAP documentation: https://ldap.com/ldap-data-interchange-format-ldif/ OpenLDAP LDIF documentation: https://www.openldap.org/doc/admin24/ldif.html

The net command is used to administer Samba and Windows servers. The subcommand ads is used in conjunction with the join command to join a Samba server to an Active Directory domain. The correct subcommand that fits the pattern net ___ join is ads. Reference: Samba net command man page

Purpose of the Command: testparm is used to check the Samba configuration file (smb.conf) for syntax errors. Command Running testparm will read the smb.conf file, parse it, and display any syntax errors or warnings. This helps ensure that the configuration is valid before restarting the Samba service. Usage Example: Simply execute testparm in the terminal, and it will automatically check the default configuration file. Reference: Samba.org - testparm

The SMB protocol (Server Message Block) is used for providing shared access to files and printers.

Historically, SMB ran on top of NetBIOS over TCP/IP using port 139.

SMB can also run directly over TCP/IP without the NetBIOS layer, which uses port 445.

Therefore, TCP port 445 is used to provide the SMB protocol without NetBIOS.

Reference:

Official IANA port numbers: https://www.iana.org/assignments/service-names-portnumbers/service-names-port-numbers.xhtml

Microsoft documentation on SMB: https://docs.microsoft.com/enus/windows/win32/fileio/microsoft-smb-protocol-and-cifs-protocol-overview