What is the primary benefit of integrating both PAM and NSS with LDAP for centralized authentication?

It automatically synchronizes passwords between LDAP and local /etc/shadow files.

It allows users to log in with the same credentials and have consistent account information across multiple systems.

It eliminates the need for local user accounts entirely, even for system services.

It provides a graphical interface for managing users.

An organization has two LDAP servers for redundancy. The primary server is ldap1.example.com and the secondary is ldap2.example.com. The administrator wants pam_ldap to fail over to the secondary server if the primary is unreachable. Which configuration in /etc/ldap.conf achieves this?

host ldap1.example.com, ldap2.example.com

binddn cn=admin,dc=example,dc=com

uri ldap://ldap1.example.com ldap://ldap2.example.com

LPIC-3 Mixed Environments

Domain 2Objective 1

391.1 LDAP Integration with PAM and NSS (weight: 2) LPIC-3-MIXED-ENVIRONMENTS Practice Questions (Page 5)

Part of the Topic 391: OpenLDAP as an Authentication Backend domain, which makes up ~10% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–6 in this domain), expect 2–3 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

7concepts

Questions 21–25

21foundation · easy
What is the primary benefit of integrating both PAM and NSS with LDAP for centralized authentication?
Select an answer first
22expert · hard
A security policy requires that LDAP users' home directories be automatically created upon first login. The administrator has configured pam_ldap for authentication and NSS for user lookups. Which PAM module type must be configured to create home directories?
Select an answer first
23expert · hard
An organization has two LDAP servers for redundancy. The primary server is ldap1.example.com and the secondary is ldap2.example.com. The administrator wants pam_ldap to fail over to the secondary server if the primary is unreachable. Which configuration in /etc/ldap.conf achieves this?
Select an answer first
24foundation · easy
In a PAM configuration file, which directive is used to specify that a module must succeed for authentication to continue, and if it fails, authentication fails immediately?
Select an answer first
25expert · hard
An administrator is troubleshooting an issue where LDAP users can log in via SSH but not via the 'su' command. The PAM configuration for SSH includes pam_ldap, but the 'su' command fails with 'Authentication failure'. Which configuration file is most likely missing pam_ldap?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-MIXED-ENVIRONMENTS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-MIXED-ENVIRONMENTS” is a trademark of its owner, used for identification only.

391.1 LDAP Integration with PAM and NSS (weight: 2) LPIC-3-MIXED-ENVIRONMENTS Practice Questions (Page 5)

Questions 21–25

What is the primary benefit of integrating both PAM and NSS with LDAP for centralized authentication?

A security policy requires that LDAP users' home directories be automatically created upon first login. The administrator has configured pam_ldap for authentication and NSS for user lookups. Which PAM module type must be configured to create home directories?

An organization has two LDAP servers for redundancy. The primary server is ldap1.example.com and the secondary is ldap2.example.com. The administrator wants pam_ldap to fail over to the secondary server if the primary is unreachable. Which configuration in /etc/ldap.conf achieves this?

In a PAM configuration file, which directive is used to specify that a module must succeed for authentication to continue, and if it fails, authentication fails immediately?

An administrator is troubleshooting an issue where LDAP users can log in via SSH but not via the 'su' command. The PAM configuration for SSH includes pam_ldap, but the 'su' command fails with 'Authentication failure'. Which configuration file is most likely missing pam_ldap?

Keep studying — Topic 391: OpenLDAP as an Authentication Backend