Exam 202-450 topic 1 question 63 discussion

Actual exam question from LPI's 202-450

Question #: 63
Topic #: 1

In order to join a file server to the Active Directory domain intra.example.com, the following smb.conf has been created:

The command net ads join raises an error and the server is not joined to the domain. What should be done to successfully join the domain?

A. Change server role to ad member server to join an Active Directory domain instead of an NT4 domain.
B. Add realm = intra.example.com to the smb.conf and change workgroup to the domain's netbios workgroup name.
C. Manually create a machine account in the Active Directory domain and specify the machine account's name with ""U when starting net ads join.
D. Remove the winbind enum users and winbind enum groups since winbind is incompatible with Active Directory domains.
E. Remove all idmap configuration stanzas since the id mapping is defined globally in an Active Directory domain and cannot be changed on a member server.

Show Suggested Answer

Suggested Answer: B 🗳️

by Jabs777 at March 10, 2021, 2:50 p.m.

Comments

Submit Cancel

roach7

Highly Voted 3 years, 3 months ago

B is correct: https://lpic2.unix.nl/ch10.html

upvoted 7 times

...

antanasbu

Most Recent 8 months, 2 weeks ago

Selected Answer: E

https://wiki.samba.org/index.php/Updating_Samba#Failure_To_Access_Shares_on_Domain_Controllers_If_idmap_config_Parameters_Set_in_the_smb.conf_File

upvoted 1 times

...

Lantos

1 year, 1 month ago

Selected Answer: B

From the samba docs, ADS domains section: Example 14.2. ADS Domain Member Server smb.conf # Global parameters [global] workgroup = BUTTERNET netbios name = GARGOYLE realm = BUTTERNET.BIZ security = ADS template shell = /bin/bash idmap uid = 500-10000000 idmap gid = 500-10000000 winbind use default domain = Yes winbind nested groups = Yes printer admin = "BUTTERNET\Domain Admins" Ref: https://www.samba.org/~ab/output/htmldocs/Samba3-HOWTO/idmapper.html

upvoted 1 times

...