300-300 Practice Questions

The effective permissions of a file created with the permissions 777 can be calculated considering

the create mask and force create mode.

create mask = 711 implies that the permission bits are ANDed with 0711, i.e., only the owner can

read, write, and execute.

force create mode = 750 implies that certain permission bits are always set, specifically 0750, i.e.,

read, write, and execute for the owner, and read and execute for the group.

The create mask reduces the permissions to 0711, and then force create mode adds the 0750 mask

to the result.

Original permission: 777 AND with create mask (711): 711 OR with force create mode (750): 751

Thus, the effective permission is 751.

Reference:

Samba smb.conf man page - create mask

Command The samba-tool dns add command is used to add DNS records in Samba.

Parameters:

dc1: Specifies the Samba DNS server.

samba.private: The DNS zone.

fileserver01: The hostname for the new DNS record.

AAAA: Specifies that the record is for an IPv6 address.

2001:db8::190: The IPv6 address to be assigned to the hostname.

-U Administrator: Specifies the user performing the operation, in this case, the Administrator.

Usage: This command properly adds a forward DNS record for fileserver01 with the specified IPv6

address into the samba.private zone on the server dc1.

Reference:

Samba DNS Administration

Samba is a suite of programs that allows SMB/CIFS clients to interact with file and print services on a

Linux/UNIX server.

smbd is the Samba daemon responsible for handling SMB/CIFS requests.

The smbcontrol utility is used to send messages to running Samba daemons.

The correct way to terminate all running instances of the Samba daemon handling SMB shares is to

send a shutdown message to smbd using the command smbcontrol smbd shutdown.

This command ensures that only the smbd processes, which are responsible for handling SMB shares,

are terminated without affecting other Samba components like nmbd (NetBIOS name server

daemon).

Reference:

Samba documentation: https://www.samba.org/samba/docs/current/man-html/smbcontrol.1.html

To establish a trust between a FreeIPA domain and an Active Directory domain, the correct command

is ipa trust-add. This command is used to add a trust relationship with an Active Directory (AD)

domain. The --type ad specifies the type of the trust, addom is the domain name, --admin

Administrator specifies the AD administrator account, and --password prompts for the

administrator's password.

The complete command looks like this:

a trust-add --type ad addom --admin Administrator --password

This command will initiate the trust creation process, which involves providing the credentials of the

AD administrator.

Reference:

FreeIPA Trusts

FreeIPA Trust Management

The smbclient command is used to access shared resources on a network that uses the SMB (Server

Message Block) protocol. To list the available SMB shares on a remote Samba server, the correct

invocation is smbclient -L . Here, -L stands for "list" and is the name

of the Samba server. Therefore, smbclient -L FileSrv1 will list all the available SMB shares on the

server named FileSrv1.

Reference:

smbclient man page

Samba: smbclient Command

In the context of a Samba configuration for printer shares, the [printers] section usually requires the

printable = yes directive to indicate that the share is meant for printing. Without this directive,

Samba would not treat the share as a printer share, even if other settings like path are configured

properly.

The given snippet is:

The line printable = yes is missing and is essential for defining a printer share.

Reference:

Samba Official Documentation - Printer Sharing

x Parameter: This parameter is used to remove (delete) an account from the Samba database.

Example: smbpasswd -x username

-a Parameter: This parameter adds a new account to the Samba database. If the account already

exists, it will update the account.

Example: smbpasswd -a username

Other Options:

-d Parameter: Disables (not deletes) an account.

-e Parameter: Enables a previously disabled account.

Password Synchronization: The smbpasswd command does not affect Windows domain controllers; it

manages Samba-specific passwords.

Reference:

smbpasswd Command Documentation

In the SSSD (System Security Services Daemon) configuration file, various services can be defined to

handle different types of access and authentication. The services listed in the SSSD configuration file

under the [sssd] section can include:

kerberos: This service allows SSSD to handle Kerberos authentication.

nss (Name Service Switch): This service provides name resolution and manages user and group

information.

sudo: This service enables SSSD to provide sudo rules based on the identity provider.

These services are specified in the services attribute of the [sssd] section of the sssd.conf file.

Example:

[sssd] services = nss, pam, sudo domains = LDAP [nss] filter_users = root filter_groups = root [sudo]

sudo_provider = ldap

Reference:

SSSD Services

SSSD Man Pages

Adding SSSD to /etc/nsswitch.conf: To include SSSD (System Security Services Daemon) as a source of information in the /etc/nsswitch.conf file, the service name sss must be added. This is specified without any parameters. The sss service allows the system to retrieve information from various sources, such as LDAP, Kerberos, and others, as configured in SSSD. Reference: SSSD documentation nsswitch.conf configuration guidelines

Purpose of the Command: testparm is used to check the Samba configuration file (smb.conf) for syntax errors. Command Running testparm will read the smb.conf file, parse it, and display any syntax errors or warnings. This helps ensure that the configuration is valid before restarting the Samba service. Usage Example: Simply execute testparm in the terminal, and it will automatically check the default configuration file. Reference: Samba.org - testparm