Which of the following statements is true about raw printing with Samba?
E
Explanation:
Client-Side Rendering: In Samba, raw printing means that the client machine renders the print job,
which includes converting it to a printer-ready format.
Transmission to Printer: This rendered print job is then sent to the Samba server without further
processing or alteration. Samba acts merely as a pass-through, sending the job directly to the printer.
Advantages: This method offloads the rendering process from the server to the client, which can be
beneficial in environments with diverse printer types and models, reducing the processing load on
the server.
Conclusion: Thus, the correct answer is that printing jobs are rendered on the client and passed on to
the printer by Samba.
Reference:
Samba Printing Documentation
The configuration of a Samba share contains the following line:
force directory mode = 0555
If a client creates a new directory with the permissions 0750, which permissions will the resulting
directory have in the Samba server's file system?
D
Explanation:
force directory mode = 0555: This setting in Samba forces the permissions of any newly created
directories to be 0555 regardless of what the client requests.
Client Request: If a client creates a directory with permissions 0750, Samba will override this and set
the directory's permissions to 0555.
Permissions Breakdown:
0: No permissions for owner.
5: Read and execute permissions for the group.
5: Read and execute permissions for others.
Enforcement: Samba applies this mode strictly to ensure consistency and security as defined by the
administrator.
Reference:
Samba Force Directory Mode Documentation
Which of the following smb.conf options turns a regular file share into a DFS share?
A
Explanation:
DFS (Distributed File System): This allows for the organization of shared files on multiple servers in a
distributed file system.
msdfs root = yes: This option in the Samba configuration file (smb.conf) enables a share to be a DFS
root. This means the share can provide access to multiple other shares possibly located on different
servers, creating a single point of access.
Functionality: When enabled, users accessing this DFS root can be redirected transparently to the
actual location of the shared files, which might be spread across different servers.
Setup: To configure a DFS root, add msdfs root = yes to the specific share definition in smb.conf.
Reference:
Samba DFS Configuration
FILL BLANK
What option in sms.conf defines where the data of a file share is stored? (Specify ONLY the option
name without any values.)
path
Explanation:
path Option: This parameter in smb.conf specifies the directory on the server where the shared data
is stored.
Usage: Within a share definition, the path option points to the actual location on the filesystem that
Samba will share.
Example Configuration:
[example_share] path = /srv/samba/share
Importance: Defining the correct path is crucial for ensuring that the share points to the intended
directory with the appropriate data and permissions.
Reference:
Samba smb.conf man page
Which parameter within a share definition in the Samba configuration makes Samba only show files
and directories on a file share which a user can access?
A
Explanation:
hide unreadable: This smb.conf option ensures that only files and directories that the user has
permissions to access are visible in the file share.
Functionality: When set to yes, files and directories that the user cannot read (due to permissions)
will be hidden from their view.
Security and Usability: This helps in enhancing both security and usability by preventing users from
seeing files they cannot access, reducing clutter and potential confusion.
Example Configuration:
[example_share] hide unreadable = yes
Reference:
Samba smb.conf Documentation
Which of the following lines is missing in the given [printers] share definition?
B
Explanation:
In the context of a Samba configuration for printer shares, the [printers] section usually requires the
printable = yes directive to indicate that the share is meant for printing. Without this directive,
Samba would not treat the share as a printer share, even if other settings like path are configured
properly.
The given snippet is:
The line printable = yes is missing and is essential for defining a printer share.
Reference:
Samba Official Documentation - Printer Sharing
The [homes] section of smb.conf contains the parameter browseable = no. What are the resulting
consequences? (Choose two.)
A, D
Explanation:
When browseable = no is set in the [homes] section of smb.conf, it prevents the share from
appearing in the list of available shares when users browse the server. However, users can still access
their home directories if they specify the correct UNC path directly.
A . When browsing the Samba server, there is no visible share named after the current user.
The share will not appear in the list of shares visible to the user during browsing.
D . The homes share can be directly accessed by specifically opening this share by its UNC path.
Users can still access the share by directly typing the path in the form \\servername\username.
Reference:
Samba Official Documentation - Home Directories
Which Samba utility, when launched with the appropriate parameters, generates the following
output?
A
Explanation:
The smbcacls utility is used to manage Windows ACLs on Samba shares. The output format shown in
the image suggests it relates to detailed ACL information, which is typically generated by smbcacls.
Reference:
Samba smbcacls man page
Which of the following options can be used to limit access to a Samba share? (Choose two.)
C, D
Explanation:
To limit access to a Samba share, the valid users and valid groups options can be used. These
directives specify which users or groups are allowed to access the share.
C . valid groups
This option restricts access to members of specified Unix groups.
D . valid users
This option restricts access to specified Unix users.
Reference:
Samba smb.conf man page
In case the following parameters are set in a Samba file share configuration:
create mask = 711
force create mode = 750
What are the effective permissions of a file created with the permissions 777?
E
Explanation:
The effective permissions of a file created with the permissions 777 can be calculated considering
the create mask and force create mode.
create mask = 711 implies that the permission bits are ANDed with 0711, i.e., only the owner can
read, write, and execute.
force create mode = 750 implies that certain permission bits are always set, specifically 0750, i.e.,
read, write, and execute for the owner, and read and execute for the group.
The create mask reduces the permissions to 0711, and then force create mode adds the 0750 mask
to the result.
Original permission: 777 AND with create mask (711): 711 OR with force create mode (750): 751
Thus, the effective permission is 751.
Reference:
Samba smb.conf man page - create mask
Which of the following are valid Samba backends to store user and group information? (Choose two.)
B, C
Explanation:
smbpasswd: This backend uses the smbpasswd file to store user and group information. It is a simple
plaintext file format that holds password hashes and other account information.
ldapsam: This backend utilizes LDAP (Lightweight Directory Access Protocol) to store user and group
information. LDAP is a more scalable and flexible option suitable for larger environments.
Other Options:
sdb, krb, smb: These are not valid Samba backends for storing user and group information.
Reference:
Samba User and Group Database Backends
How is the Global Catalog of an Active Directory domain accessed?
A
Explanation:
Global Catalog: The Global Catalog is a distributed data repository that contains a searchable, partial
representation of every object in every domain in a multi-domain Active Directory forest.
Access Method: It is accessed through LDAP queries to specific ports:
Port 3268: For plain text (unencrypted) LDAP queries.
Port 3269: For LDAP queries encrypted with TLS.
Other Options:
GCS SMB share, GCS records, SRV records, CN=GC in LDAP: These do not provide the correct method
to access the Global Catalog.
Reference:
Microsoft Documentation on Active Directory Global Catalog
Which of the following Samba commands provides comprehensive information and status flags on
the user candidate?
C
Explanation:
pdbedit: This Samba command is used to manage the user accounts stored in the Samba password
database.
-v: The verbose option provides detailed information.
-u candidate: Specifies the user for which to display the information.
Other Commands:
smbpasswd, net sam show, samba-tool user list, getent smbpasswd: These commands do not
provide the same comprehensive information and status flags as pdbedit.
Reference:
Samba pdbedit Documentation
Which service unifies Linux and Windows account management by allowing a Linux system to
include Windows domain users in the Linux user database?
D
Explanation:
Winbind: This service is used to unify Linux and Windows account management by allowing a Linux
system to include Windows domain users in the Linux user database.
Functionality: Winbind enables Linux systems to retrieve user and group information from a
Windows NT-based domain or Active Directory.
Other Services:
smbpasswdd, sudo, NIS, OpenLDAP: These services do not provide the same functionality for
unifying account management between Linux and Windows.
Reference:
Samba Winbind Documentation
Which group of commands manages the directory replication in an active directory domain?
C
Explanation:
samba-tool drs: This set of commands is used to manage directory replication in an Active Directory
domain. DRS stands for Directory Replication Service.
Functionality: It provides various subcommands to monitor, manage, and troubleshoot replication
issues.
Other Commands:
samba-tool repl, directory, domain, sync: These do not specifically manage directory replication in
the same way as samba-tool drs.
Reference:
Samba DRS Command Documentation