300-300 Exam Dumps and Practice Questions

Pluggable Authentication Modules (PAM) provides a system of libraries that handle the authentication tasks of applications (services) on a Linux system. These libraries are loaded dynamically and can be configured in the /etc/pam.d directory or in /etc/pam.conf. The PAM modules are divided into four types:

auth (authentication): This module type is responsible for authenticating the user, setting up user credentials, and initiating a session.

account: This module type manages account policies such as password expiration, access restrictions, and checking user permissions.

password: This module type handles the updating of authentication tokens, such as passwords.

session: This module type manages tasks that need to be performed at the beginning and end of a session, like mounting directories or logging.

Linux PAM Documentation

Understanding PAM

samba-tool domain provision: This command sets up Samba 4 as an Active Directory Domain Controller.

Process:

Run samba-tool domain provision to start the setup.

Follow the prompts to specify the domain name, administrator password, and other required information.

Outcome: This command initializes the Samba server as a new domain controller for a new domain, configuring the necessary services and databases.

Samba Active Directory Domain Controller

When logging into a Windows workstation that is a member of an Active Directory domain, the .\ prefix is used to specify a local user account rather than a domain account. Therefore, to refer to the local account bob, you would use .\bob.

How to Log On to Your Computer if You Are a Domain User

Windows Logon Naming Conventions

The effective permissions of a file created with the permissions 777 can be calculated considering the create mask and force create mode.

create mask = 711 implies that the permission bits are ANDed with 0711, i.e., only the owner can read, write, and execute.

force create mode = 750 implies that certain permission bits are always set, specifically 0750, i.e., read, write, and execute for the owner, and read and execute for the group.

The create mask reduces the permissions to 0711, and then force create mode adds the 0750 mask to the result.

Original permission: 777 AND with create mask (711): 711 OR with force create mode (750): 751

Thus, the effective permission is 751.

Samba smb.conf man page - create mask

Consistent Copy of LDB Files:

C . ldbbackup: The ldbbackup command is used to create a consistent copy of LDB files. LDB files are used by Samba to store data in a database format. The ldbbackup utility ensures that the data is copied in a consistent state, which is crucial for backup and recovery processes.

Samba documentation on ldbbackup

General LDB management guides