An organization has two OpenLDAP directories: one for the engineering department (dc=eng,dc=example,dc=com) and one for the sales department (dc=sales,dc=example,dc=com). A user in engineering needs to authenticate against the sales directory. What should be configured to allow this?

An LDAP referral from the engineering directory to the sales directory for the sales suffix

A DNS SRV record for the sales directory

A Kerberos cross-realm trust between the two directories

Replication of the sales directory into the engineering directory

What is the purpose of the LDAP ACLs when LDAP acts as the KDC backend?

To define the Kerberos realm name

To replicate the LDAP database to other servers

To restrict access to sensitive principal attributes such as keys

To enable anonymous binds for all users

What is a cross-realm trust in Kerberos?

A relationship that allows a KDC in one realm to issue service tickets for principals in another realm

A firewall rule that allows Kerberos traffic between realms

A mechanism to synchronize passwords between two realms

A method to replicate the KDC database to another realm

A company runs a Linux fleet authenticating against an OpenLDAP-backed Kerberos realm (CORP.EXAMPLE.COM). They acquire a subsidiary using Active Directory (AD.EXAMPLE.COM). Users in the subsidiary need to access Linux resources in the parent company without new credentials. The parent company's KDC is OpenLDAP-backed. Which configuration is required on the parent company's Kerberos servers to enable this access?

Create an LDAP referral from the OpenLDAP backend to the AD domain controllers for all authentication requests

Add a [realms] section entry for AD.EXAMPLE.COM and a [capaths] section mapping CORP.EXAMPLE.COM to AD.EXAMPLE.COM in krb5.conf

Set the default_realm in krb5.conf to AD.EXAMPLE.COM on all Linux clients

Configure the OpenLDAP backend to replicate the AD user database into the local Kerberos principal database

An organization has OpenLDAP servers in two data centers. They want to ensure that if one data center fails, users can still authenticate. Which configuration should be used?

Configure an LDAP referral from the primary to the secondary server

Set up multi-master replication between the two OpenLDAP servers

Set up a Kerberos cross-realm trust between the two data centers

Use a single LDAP server with a DNS SRV record

LPIC-3 Mixed Environments

Domain 2Objective 2

391.2 Integrating LDAP with Active Directory and Kerberos (weight: 2) LPIC-3-MIXED-ENVIRONMENTS Practice Questions (Page 4)

Part of the Topic 391: OpenLDAP as an Authentication Backend domain, which makes up ~10% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–6 in this domain), expect 2–3 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

Questions 16–20

16application · medium
An organization has two OpenLDAP directories: one for the engineering department (dc=eng,dc=example,dc=com) and one for the sales department (dc=sales,dc=example,dc=com). A user in engineering needs to authenticate against the sales directory. What should be configured to allow this?
Select an answer first
17foundation · easy
What is the purpose of the LDAP ACLs when LDAP acts as the KDC backend?
Select an answer first
18foundation · easy
What is a cross-realm trust in Kerberos?
Select an answer first
19application · medium
A company runs a Linux fleet authenticating against an OpenLDAP-backed Kerberos realm (CORP.EXAMPLE.COM). They acquire a subsidiary using Active Directory (AD.EXAMPLE.COM). Users in the subsidiary need to access Linux resources in the parent company without new credentials. The parent company's KDC is OpenLDAP-backed. Which configuration is required on the parent company's Kerberos servers to enable this access?
Select an answer first
20application · medium
An organization has OpenLDAP servers in two data centers. They want to ensure that if one data center fails, users can still authenticate. Which configuration should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-MIXED-ENVIRONMENTS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-MIXED-ENVIRONMENTS” is a trademark of its owner, used for identification only.