A Linux workstation is joined to an Active Directory domain. Users can log in via SSH using their domain credentials, but they cannot log in at the graphical console. The SSH service uses a PAM configuration that includes pam_winbind, while the graphical login uses a different PAM service file. What is the most likely cause?

The Kerberos ticket cache is not writable by the graphical login user.

The smb.conf is missing the 'winbind use default domain' parameter.

The graphical login PAM service file does not include pam_winbind.so.

The nsswitch.conf is missing 'winbind' for the passwd entry.

A Samba server is configured with security = ads and is joined to an AD domain. Users can authenticate via SMB, but when they try to use Kerberos-based services, they get a 'KDC can't reach realm' error. What is the most likely cause?

The /etc/krb5.conf is missing the correct realm and KDC entries.

The user's password is incorrect.

The Samba server is not using Kerberos for SMB authentication.

The Winbind service is not running.

What is the primary role of Winbind in a Samba environment that is integrated with an Active Directory domain?

To replace the need for a DNS server by providing NetBIOS name resolution for the domain

To resolve Windows domain users and groups to Unix UIDs and GIDs and to authenticate them using domain credentials

To synchronize the local /etc/passwd file with the Active Directory user database on a regular basis

To provide a graphical interface for managing Samba shares and users

A Samba server uses the 'tdb' idmap backend. The administrator notices that after a system crash, domain users can no longer access files, and their UIDs appear to have changed. What is the most likely cause?

The rid backend was used instead of tdb.

The nsswitch.conf was reset to default.

The Samba server was rejoined to the domain.

The tdb database was corrupted or lost during the crash, causing mappings to be recreated with different IDs.

LPIC-3 Mixed Environments

Domain 5Objective 2

394.2 Authentication, Authorization and Winbind (weight: 5) LPIC-3-MIXED-ENVIRONMENTS Practice Questions (Page 4)

Part of the Topic 394: Samba User and Group Management domain, which makes up ~10% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–6 in this domain), expect 2–3 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

8concepts

Questions 16–20

16application · medium
A Linux workstation is joined to an Active Directory domain. Users can log in via SSH using their domain credentials, but they cannot log in at the graphical console. The SSH service uses a PAM configuration that includes pam_winbind, while the graphical login uses a different PAM service file. What is the most likely cause?
Select an answer first
17application · medium
A Samba server is configured with security = ads and is joined to an AD domain. Users can authenticate via SMB, but when they try to use Kerberos-based services, they get a 'KDC can't reach realm' error. What is the most likely cause?
Select an answer first
18foundation · easy
What is the primary role of Winbind in a Samba environment that is integrated with an Active Directory domain?
Select an answer first
19foundation · easy
In /etc/nsswitch.conf, which database entries should include 'winbind' to allow system resolution of domain users and groups?
Select an answer first
20expert · hard
A Samba server uses the 'tdb' idmap backend. The administrator notices that after a system crash, domain users can no longer access files, and their UIDs appear to have changed. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-MIXED-ENVIRONMENTS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-MIXED-ENVIRONMENTS” is a trademark of its owner, used for identification only.

394.2 Authentication, Authorization and Winbind (weight: 5) LPIC-3-MIXED-ENVIRONMENTS Practice Questions (Page 4)

Questions 16–20

A Samba server is configured with security = ads and is joined to an AD domain. Users can authenticate via SMB, but when they try to use Kerberos-based services, they get a 'KDC can't reach realm' error. What is the most likely cause?

What is the primary role of Winbind in a Samba environment that is integrated with an Active Directory domain?

In /etc/nsswitch.conf, which database entries should include 'winbind' to allow system resolution of domain users and groups?

A Samba server uses the 'tdb' idmap backend. The administrator notices that after a system crash, domain users can no longer access files, and their UIDs appear to have changed. What is the most likely cause?

Keep studying — Topic 394: Samba User and Group Management