Which common issue can cause Kerberos authentication to fail when LDAP is the KDC backend?

The client's time is synchronized with the KDC

The LDAP schema does not include the Kerberos object classes

The LDAP server is using the wrong port

The KDC is using a flat file database

A Linux administrator needs to configure OpenLDAP to authenticate users against an existing Active Directory domain. The Linux servers are not joined to the AD domain. Which approach should be used to allow LDAP authentication against AD?

Replicate the AD user objects into OpenLDAP using a sync mechanism and authenticate against the local copy

Create a one-way trust between the OpenLDAP realm and the AD realm and use Kerberos for authentication

Configure OpenLDAP as a proxy that forwards LDAP binds to the AD domain controllers using LDAP referrals

Configure the Linux servers to use the AD domain controllers directly as the LDAP server in /etc/ldap.conf or /etc/nslcd.conf

In a mixed environment where a Linux client authenticates to an Active Directory domain, what is the first step in the Kerberos authentication flow?

The client sends its password to the application server

The client queries LDAP for the user's password hash

The client requests a ticket-granting ticket (TGT) from the KDC

The client establishes a TLS session with the LDAP server

A Linux client is configured to use both Kerberos and LDAP for authentication. When a user logs in, which step happens first in the authentication flow?

The client obtains a Kerberos TGT from the KDC

The client binds to the LDAP server using the user's credentials

The client requests a service ticket for the LDAP server

The client performs an LDAP search to find the user's DN

What is the primary purpose of LDAP replication?

To convert LDAP data to a relational database format

To enforce password policies across the directory

To provide high availability and fault tolerance for directory data

LPIC-3 Mixed Environments

Domain 2Objective 2

391.2 Integrating LDAP with Active Directory and Kerberos (weight: 2) LPIC-3-MIXED-ENVIRONMENTS Practice Questions (Page 5)

Part of the Topic 391: OpenLDAP as an Authentication Backend domain, which makes up ~10% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–6 in this domain), expect 2–3 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

Questions 21–25

21foundation · easy
Which common issue can cause Kerberos authentication to fail when LDAP is the KDC backend?
Select an answer first
22application · medium
A Linux administrator needs to configure OpenLDAP to authenticate users against an existing Active Directory domain. The Linux servers are not joined to the AD domain. Which approach should be used to allow LDAP authentication against AD?
Select an answer first
23foundation · easy
In a mixed environment where a Linux client authenticates to an Active Directory domain, what is the first step in the Kerberos authentication flow?
Select an answer first
24application · medium
A Linux client is configured to use both Kerberos and LDAP for authentication. When a user logs in, which step happens first in the authentication flow?
Select an answer first
25foundation · easy
What is the primary purpose of LDAP replication?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-MIXED-ENVIRONMENTS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-MIXED-ENVIRONMENTS” is a trademark of its owner, used for identification only.