300-300 LPIC-3: Mixed Environments - Exam 300 - version 3.0 Free Practice Exam Questions (2025 Updated)

samba-tool drs:This set of commands is used to manage directory replication in an Active Directory domain. DRS stands for Directory Replication Service.

Functionality:It provides various subcommands to monitor, manage, and troubleshoot replication issues.

Other Commands:

samba-tool repl, directory, domain, sync:These do not specifically manage directory replication in the same way assamba-tool drs.

References

Samba DRS Command Documentation

The effective permissions of a file created with the permissions777can be calculated considering thecreate maskandforce create mode.

create mask = 711implies that the permission bits are ANDed with 0711, i.e., only the owner can read, write, and execute.

force create mode = 750implies that certain permission bits are always set, specifically 0750, i.e., read, write, and execute for the owner, and read and execute for the group.

Thecreate maskreduces the permissions to 0711, and thenforce create modeadds the 0750 mask to the result.

Original permission:777AND withcreate mask (711):711OR withforce create mode (750):751

Thus, the effective permission is751.

References:

Samba smb.conf man page - create mask

Client-Side Rendering:In Samba, raw printing means that the client machine renders the print job, which includes converting it to a printer-ready format.

Transmission to Printer:This rendered print job is then sent to the Samba server without further processing or alteration. Samba acts merely as a pass-through, sending the job directly to the printer.

Advantages:This method offloads the rendering process from the server to the client, which can be beneficial in environments with diverse printer types and models, reducing the processing load on the server.

Conclusion:Thus, the correct answer is that printing jobs are rendered on the client and passed on to the printer by Samba.

References

Samba Printing Documentation

DFS (Distributed File System):This allows for the organization of shared files on multiple servers in a distributed file system.

msdfs root = yes:This option in the Samba configuration file (smb.conf) enables a share to be a DFS root. This means the share can provide access to multiple other shares possibly located on different servers, creating a single point of access.

Functionality:When enabled, users accessing this DFS root can be redirected transparently to the actual location of the shared files, which might be spread across different servers.

Setup:To configure a DFS root, addmsdfs root = yesto the specific share definition in smb.conf.

References

Samba DFS Configuration

Thenetcommand is used to administer Samba and Windows servers. The subcommandadsis used in conjunction with thejoincommand to join a Samba server to an Active Directory domain. The correct subcommand that fits the patternnet ___ joinisads.

References:

Samba net command man page

Thesmbclientcommand is used to access shared resources on a network that uses the SMB (Server Message Block) protocol. To list the available SMB shares on a remote Samba server, the correct invocation issmbclient -L <server_name>. Here,-Lstands for "list" and<server_name>is the name of the Samba server. Therefore,smbclient -L FileSrv1will list all the available SMB shares on the server named FileSrv1.

References

smbclient man page

Samba: smbclient Command

Samba is a suite of programs that allows SMB/CIFS clients to interact with file and print services on a Linux/UNIX server.

smbdis the Samba daemon responsible for handling SMB/CIFS requests.

Thesmbcontrolutility is used to send messages to running Samba daemons.

The correct way to terminate all running instances of the Samba daemon handling SMB shares is to send a shutdown message tosmbdusing the commandsmbcontrol smbd shutdown.

This command ensures that only thesmbdprocesses, which are responsible for handling SMB shares, are terminated without affecting other Samba components likenmbd(NetBIOS name server daemon).

References

Samba documentation: https://www.samba.org/samba/docs/current/man-html/smbcontrol.1.html

samba-tool domain provision:This command sets up Samba 4 as an Active Directory Domain Controller.

Process:

Runsamba-tool domain provisionto start the setup.

Follow the prompts to specify the domain name, administrator password, and other required information.

Outcome:This command initializes the Samba server as a new domain controller for a new domain, configuring the necessary services and databases.

References

Samba Active Directory Domain Controller

-x Parameter:This parameter is used to remove (delete) an account from the Samba database.

Example:smbpasswd -x username

-a Parameter:This parameter adds a new account to the Samba database. If the account already exists, it will update the account.

Example:smbpasswd -a username

Other Options:

-d Parameter:Disables (not deletes) an account.

-e Parameter:Enables a previously disabled account.

Password Synchronization:Thesmbpasswdcommand does not affect Windows domain controllers; it manages Samba-specific passwords.

References

smbpasswd Command Documentation

The Kerberos configuration file, typically located at/etc/krb5.conf, contains several sections, each with different settings that control the behavior of Kerberos. Thelibdefaultssection is where default settings for Kerberos libraries are defined, and it may include thedefault_realmoption.

Example:

[libdefaults]default_realm= EXAMPLE.COMdns_lookup_realm=falsedns_lookup_kdc=true

References

Kerberos Configuration

Red Hat Kerberos Configuration

hide unreadable:This smb.conf option ensures that only files and directories that the user has permissions to access are visible in the file share.

Functionality:When set toyes, files and directories that the user cannot read (due to permissions) will be hidden from their view.

Security and Usability:This helps in enhancing both security and usability by preventing users from seeing files they cannot access, reducing clutter and potential confusion.

Example Configuration:

[example_share] hide unreadable =yes

References

Samba smb.conf Documentation

To establish a trust between a FreeIPA domain and an Active Directory domain, the correct command isipa trust-add. This command is used to add a trust relationshipwith an Active Directory (AD) domain. The--type adspecifies the type of the trust,addomis the domain name,--admin Administratorspecifies the AD administrator account, and--passwordprompts for the administrator's password.

The complete command looks like this:

a trust-add --typead addom --admin Administrator --password

This command will initiate the trust creation process, which involves providing the credentials of the AD administrator.

References

FreeIPA Trusts

FreeIPA Trust Management

The SMB protocol (Server Message Block) is used for providing shared access to files and printers.

Historically, SMB ran on top of NetBIOS over TCP/IP using port 139.

SMB can also run directly over TCP/IP without the NetBIOS layer, which uses port 445.

Therefore, TCP port 445 is used to provide the SMB protocol without NetBIOS.

References

Official IANA port numbers: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml

Microsoft documentation on SMB:https://docs.microsoft.com/en-us/windows/win32/fileio/microsoft-smb-protocol-and-cifs-protocol-overview

Remote Editing:

A. The registry can be edited remotely without logging into the server: One of the benefits of registry-based Samba configuration is that the registry can be editedremotely. This means administrators can make changes without needing to log into the server directly, facilitating easier and more flexible management.

Improved Startup Time:

C. Server processes require less time to start because they do not have to parse the configuration file: Registry-based configurations can reduce startup time because the Samba server processes do not need to parse a potentially complexsmb.conffile. Instead, they access the configuration directly from the registry, which can be faster.

Immediate Effect of Configuration Changes:

D. Configuration changes become effective immediately without a daemon reload: Changes made in the registry are applied immediately and do not require a daemon reload. This can be very advantageous for administrators who need to make quick adjustments without interrupting the service.

References:

Samba documentation

Various Samba configuration tutorials and best practice guides