What is an LDAP referral?

A method to encrypt LDAP traffic

A special ACL that grants read access to all users

A copy of the directory database stored on a secondary server

A server response that tells a client to contact another LDAP server for the requested data

An administrator is setting up OpenLDAP as the KDC database backend. After loading the Kerberos schema and creating the service account, which additional step is required to allow the KDC to store principal information?

Create the container entry (e.g., ou=Kerberos,dc=example,dc=com) and grant the service account write access to it

Configure the LDAP server to allow anonymous binds for the KDC

Create a DNS SRV record for the LDAP server

Set up replication between the LDAP server and the KDC

A cross-realm trust between an OpenLDAP-backed Kerberos realm (LINUX.EXAMPLE.COM) and an Active Directory realm (AD.EXAMPLE.COM) is configured. Users from AD can authenticate to Linux services, but users from LINUX cannot authenticate to AD services. The trust key is correct. What is the most likely cause?

The Linux KDC is not using LDAP as its backend

The AD domain controllers are not configured to trust the LINUX realm

The AD users have not been added to the Linux LDAP directory

The krb5.conf on Linux clients is missing the [capaths] section

A company uses OpenLDAP for user directory and Kerberos for authentication. A user changes their password. Which component must be updated to ensure the new password works for both LDAP and Kerberos?

The password must be updated in the client's keytab file

Only the LDAP directory needs to be updated

Only the Kerberos KDC database needs to be updated

The Kerberos KDC database and the LDAP directory must both be updated

A cross-realm trust is established between LINUX.EXAMPLE.COM and AD.EXAMPLE.COM. Users from AD can authenticate to Linux services. However, when a Linux user tries to access an AD service, the KDC returns a 'KDC_ERR_S_PRINCIPAL_UNKNOWN' error. What is the most likely cause?

The trust key between the realms is incorrect

The Linux KDC is not using LDAP as its backend

The krb5.conf on the Linux client is missing the [capaths] section

The service principal for the AD service is not registered in the AD KDC

LPIC-3 Mixed Environments

Domain 2Objective 2

391.2 Integrating LDAP with Active Directory and Kerberos (weight: 2) LPIC-3-MIXED-ENVIRONMENTS Practice Questions (Page 3)

Part of the Topic 391: OpenLDAP as an Authentication Backend domain, which makes up ~10% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–6 in this domain), expect 2–3 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

Questions 11–15

11foundation · easy
What is an LDAP referral?
Select an answer first
12application · medium
An administrator is setting up OpenLDAP as the KDC database backend. After loading the Kerberos schema and creating the service account, which additional step is required to allow the KDC to store principal information?
Select an answer first
13expert · hard
A cross-realm trust between an OpenLDAP-backed Kerberos realm (LINUX.EXAMPLE.COM) and an Active Directory realm (AD.EXAMPLE.COM) is configured. Users from AD can authenticate to Linux services, but users from LINUX cannot authenticate to AD services. The trust key is correct. What is the most likely cause?
Select an answer first
14application · medium
A company uses OpenLDAP for user directory and Kerberos for authentication. A user changes their password. Which component must be updated to ensure the new password works for both LDAP and Kerberos?
Select an answer first
15expert · hard
A cross-realm trust is established between LINUX.EXAMPLE.COM and AD.EXAMPLE.COM. Users from AD can authenticate to Linux services. However, when a Linux user tries to access an AD service, the KDC returns a 'KDC_ERR_S_PRINCIPAL_UNKNOWN' error. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-MIXED-ENVIRONMENTS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-MIXED-ENVIRONMENTS” is a trademark of its owner, used for identification only.