LPI 300-300 - LPIC-3: Mixed Environments - Exam 300 - version 3.0

In a Samba configuration file, variables can be used to represent dynamic values.

The%Dvariable represents the domain of the current user.

This variable can be used in various configuration directives to customize the behavior of Samba services based on the user's domain.

References

Samba variables documentation: https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html

dns forwarder:This smb.conf option specifies the DNS server to which queries should be forwarded if they cannot be resolved locally by the Samba server.

Configuration:

Adddns forwarder = <additional_DNS_server_IP>to smb.conf on the Samba server.

Ensure all clients are configured to query the Samba server for DNS information.

Process:

Clients send all DNS queries to the Samba server.

If the Samba server cannot resolve a query locally, it forwards the request to the additional DNS server.

Benefit:This ensures that all DNS records, including those from the Active Directory domain and other DNS information, can be resolved by the clients.

References

Samba DNS Forwarding

Pluggable Authentication Modules (PAM) provides a system of libraries that handle the authentication tasks of applications (services) on a Linux system. These libraries are loaded dynamically and can be configured in the/etc/pam.ddirectory or in/etc/pam.conf. The PAM modules are divided into four types:

auth (authentication):This module type is responsible for authenticating the user, setting up user credentials, and initiating a session.

account:This module type manages account policies such as password expiration, access restrictions, and checking user permissions.

password:This module type handles the updating of authentication tokens, such as passwords.

session:This module type manages tasks that need to be performed at the beginning and end of a session, like mounting directories or logging.

References

Linux PAM Documentation

Understanding PAM

force directory mode = 0555:This setting in Samba forces the permissions of any newly created directories to be 0555 regardless of what the client requests.

Client Request:If a client creates a directory with permissions 0750, Samba will override this and set the directory's permissions to 0555.

Permissions Breakdown:

0: No permissions for owner.

5: Read and execute permissions for the group.

5: Read and execute permissions for others.

Enforcement:Samba applies this mode strictly to ensure consistency and security as defined by the administrator.

References

Samba Force Directory Mode Documentation

Configuration Backend:Samba can be configured to read its settings from various backends, including the Windows registry.

Setting the Backend:

Addingconfig backend = registryin the[global]section ofsmb.confinstructs Samba to use the registry for its configuration.

Implementation Steps:

Open thesmb.conffile.

Add the lineconfig backend = registryunder the[global]section.

Restart the Samba services to apply the changes.

References:

Samba Wiki - Configuration