What is a common approach to integrate OpenLDAP with Active Directory for authentication?

Using OpenLDAP to store AD user passwords in plaintext

Using OpenLDAP as a proxy that forwards authentication requests to Active Directory

Replacing Active Directory with OpenLDAP entirely

Configuring Active Directory to replicate its database to OpenLDAP

A company wants to integrate OpenLDAP with Active Directory so that users can use their AD credentials to authenticate to Linux systems. The Linux systems are not joined to AD. Which authentication method should be configured on the Linux systems?

LDAP bind to the AD domain controllers

Local password authentication with synchronized passwords

Kerberos authentication against the OpenLDAP KDC

NIS authentication against the AD domain

After configuring OpenLDAP as the Kerberos KDC backend, the KDC starts successfully, but kadmind fails to start. The logs show 'Cannot open DB2 database' errors. What is the most likely cause?

The kadmind service account lacks write access to the LDAP container

kadmind is still configured to use the file-based database instead of the LDAP backend

A multinational company has OpenLDAP servers in two regions (EU and US) that must both authenticate users from either region. The EU server is the primary and the US server is a replica. Users in the US report slow authentication when the EU server is reachable but the US replica is not being used. The administrator wants to ensure US users authenticate against the US server when possible. Which configuration should be implemented?

Enable multi-master replication between the EU and US servers so both can accept writes

Configure the US client systems to use the US LDAP server as the primary and the EU server as a fallback in /etc/ldap.conf

Set up an LDAP referral from the EU server to the US server for all US-based user lookups

Create a DNS SRV record that points to the US server for the US domain and the EU server for the EU domain

LPIC-3 Mixed Environments

Domain 2Objective 2

391.2 Integrating LDAP with Active Directory and Kerberos (weight: 2) LPIC-3-MIXED-ENVIRONMENTS Practice Questions (Page 6)

Part of the Topic 391: OpenLDAP as an Authentication Backend domain, which makes up ~10% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–6 in this domain), expect 2–3 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

Questions 26–30

26foundation · easy
What is a common approach to integrate OpenLDAP with Active Directory for authentication?
Select an answer first
27foundation · easy
Which Kerberos configuration file typically contains directives that tell the KDC to use LDAP as its database backend?
Select an answer first
28application · medium
A company wants to integrate OpenLDAP with Active Directory so that users can use their AD credentials to authenticate to Linux systems. The Linux systems are not joined to AD. Which authentication method should be configured on the Linux systems?
Select an answer first
29expert · hard
After configuring OpenLDAP as the Kerberos KDC backend, the KDC starts successfully, but kadmind fails to start. The logs show 'Cannot open DB2 database' errors. What is the most likely cause?
Select an answer first
30expert · hard
A multinational company has OpenLDAP servers in two regions (EU and US) that must both authenticate users from either region. The EU server is the primary and the US server is a replica. Users in the US report slow authentication when the EU server is reachable but the US replica is not being used. The administrator wants to ensure US users authenticate against the US server when possible. Which configuration should be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to LPIC-3-MIXED-ENVIRONMENTS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-MIXED-ENVIRONMENTS” is a trademark of its owner, used for identification only.

391.2 Integrating LDAP with Active Directory and Kerberos (weight: 2) LPIC-3-MIXED-ENVIRONMENTS Practice Questions (Page 6)

Questions 26–30

What is a common approach to integrate OpenLDAP with Active Directory for authentication?

Which Kerberos configuration file typically contains directives that tell the KDC to use LDAP as its database backend?

A company wants to integrate OpenLDAP with Active Directory so that users can use their AD credentials to authenticate to Linux systems. The Linux systems are not joined to AD. Which authentication method should be configured on the Linux systems?

After configuring OpenLDAP as the Kerberos KDC backend, the KDC starts successfully, but kadmind fails to start. The logs show 'Cannot open DB2 database' errors. What is the most likely cause?

Keep studying — Topic 391: OpenLDAP as an Authentication Backend