LPIC-3 Mixed Environments 300 Objectives.md
Last updated
Last updated
Key Knowledge Areas:
Understand the roles of the various Samba daemons and components Understand key issues regarding heterogeneous networks Understand the networking services used with SMB/CIFS and Active Directory, including their ports Understand the major features of SMB protocol versions 1.0, 2.0, 2.1 and 3.0 Understand of Samba 3 and Samba 4 differences Awareness of Samba VFS modules Awareness of Samba Clustering and CTDB Partial list of the used files, terms and utilities:
smbd
nmbd
samba
winbindd
Key Knowledge Areas:
Manage Samba server file-based configuration Manage of Samba server registry-based configuration Manage of Samba configuration parameters and variables Understand Samba server roles and security modes Configure Samba to use TLS Check the validity of a Samba configuration Troubleshoot and debug configuration problems with Samba Understand Windows tools used to configure a Samba Server The following is a partial list of the used files, terms and utilities:
smb.conf
security
server role
server string
server services
tls enabled
tls keyfile
tls dh params file
tls cafile
registry shares
include
vfs objects
samba-regedit
testparm
net registry including relevant subcommands
Key Knowledge Areas:
Start and stop Samba services on domain controllers and file servers Monitor and interact with running Samba daemons Backup and restore TDB files Backup and restore an Active Directory domain controller Understand backup and recovery strategies for Active Directory domain controllers Understand the impact of virtualization on Active Directory domain controllers The following is a partial list of the used files, terms and utilities:
smbcontrol (including relevant message types)
smbstatus
tdbbackup
tdbrestore
samba-tool domain backup (including subcommands)
Key Knowledge Areas:
Configure Samba logging, including setting log levels for specific debug classes and client-specific logging Query and modify the Samba password database Understand the contents of important TDB files List and edit TDB file content Identify TDB file corruption Access and modify objects in a Samba LDAP directory Enable and use the LDAP recycle bin Confirm the integrity of a domain controller’s database Create a renamed clone of a domain controller Awareness of Samba eventlog shipping Use rpcclient to query information on a Samba server
The following is a partial list of the used files, terms and utilities:
smb.conf:
log level
/var/log/samba/
smbpasswd
pdbedit
registry.tdb
secrets.tdb
tdbdump
tdbtool
ldbsearch
ldbmodify
ldbedit
ldbadd
ldbdel
samba-tool dbcheck
samba-tool domain backup (including relevant subcommands)
rpcclient
Key Knowledge Areas:
Understand the concepts of Active Directory Understand the principles of the network services used by Active Directory (i.e. DNS, Kerberos, NTP and LDAP and CIFS and MS-RPC) Set up a new Active Directory domain using Samba Add a Samba domain controller to an existing Active Directory domain Demote and remove online and offline domain controllers Verify AD replication Understand and query the global catalog and the partial attribute set Understand and configure domain functional levels Understand and configure Active Directory forest and domain trusts Understand and configure Active Directory sites, including subnet assignments Understand and manage FSMO roles, including their impact in case of an outage Configure authentication audit logging Configure SYSVOL replication using rsync or robocopy Integrate Samba with ntpd Awareness of Windows NT4 domains The following is a partial list of the used files, terms and utilities:
smb.conf:
server role
log level
samba-tool domain (including relevant subcommands)
samba-tool fsmo (including relevant subcommands)
samba-tool drs (including relevant subcommands)
rsync
/var/lib/samba/sysvol
robocopy
ntpd.conf
ntpsigndsocket
Key Knowledge Areas:
Understand and manage DNS for Samba as an AD domain controller Manage DNS records in Samba DNS DNS forwarding Standardized names in an Active Directory Multicast DNS Awareness of BIND9 DLZ DNS back end Awareness of NetBIOS name resolution and WINS The following is a partial list of the used files, terms and utilities:
smb.conf:
multicst dns register
samba-tool dns (with subcommands)
samba_dnsupdate
host
Key Knowledge Areas:
Manage user accounts and user group for standalone servers and Samba AD Knowledge of user account management tools Delegate administrative permissions in AD to specific users / user groups Configure password expiration and change requirements Manage password policies and password setting objects Understand principals and their identification SID (DN, GUID) Understand User Principal Name (UPN) and User Principal Name Suffix (UPN Suffix) Understand and manage Security and Distribution Groups Understand and manage LDAP attributes of security principals Understand and manage RFC2307 attributes in a Samba AD Map Kerberos service principal names to user accounts Export Kerberos keytabs for a specific principal Awareness of LDAP Account Manager The following is a partial list of the used files, terms and utilities:
samba-tool user (including relevant subcommands)
samba-tool group (including relevant subcommands)
samba-tool domain passwordsettings
samba-tool domain exportkeytab
samba-tool spn (including relevant subcommands)
smbpasswd
pdbedit
kinit
klist
Key Knowledge Areas:
Join Samba to an existing AD domain Configure Winbind service, including ID mapping Understand and configure Winbind ID mapping, including various mapping backends Configure PAM and NSS to use Winbind The following is a partial list of the used files, terms and utilities:
smb.conf:
security
server role
realm
workgroup
idmap config
winbind enumerate users
winbind enumerate groups
winbind offline logon
winbind separator
template shell
template homedir
idmap_ad
idmap_autorid
idmap_ldap
idmap_rfc2307
idmap_rid
idmap_tdb
idmap_tdb2
net ads (including relevant subcommands)
libnss_winbind
libpam_winbind
wbinfo
Key Knowledge Areas:
Setup a local password database Perform password synchronization Knowledge of different passdb backends Convert between Samba passdb backends The following is a partial list of the used files, terms and utilities:
smb.conf:
passdb backend
pam_smbpass.so
smbpasswd
pdbedit
Key Knowledge Areas:
Create and configure CIFS file shares Manage Samba share access configuration parameters Use registry based share configuration Manage profile and user home shares Plan file service migration Limit access to IPC$ Awareness of user shares Awareness of existing VFS modules and their general functionality, including modules to support audit logs and snapshots / shadow copies The following is a partial list of the used files, terms and utilities:
smb.conf:
path
writable / write ok / read only
valid users
invalid users
read list
write list
guest ok
hosts allow / allow hosts
hosts deny / deny hosts
hide unreadable
hide unwritable files
hide dot files
hide special files
veto files
smbcquotas
Key Knowledge Areas:
Enforce ownership and permissions of files and directories Manage ACLs for shares and folders Understand POSIX, Extended POSIX and Windows ACLs Understand how Samba stores Windows ACLs in Linux ACLs and extended attributes Configure ACLs for profile and home folder shares Configure encryption of CIFS connections The following is a partial list of the used files, terms and utilities:
smb.conf
profile acls
inherit acls
map acl inherit
store dos attributes
vfs objects
smb encrypt
setfacl
smbcacls
sharesec
vfs_acl_xattr
vfs_acl_tdb
samba-tool ntacl (including subcommands)
Key Knowledge Areas:
Understand DFS Configure DFS shares The following is a partial list of the used files, terms and utilities:
smb.conf:
host msdfs
msdfs root
msdfs proxy
ln
Key Knowledge Areas:
Understand Samba printing, including raw printing Create and configure print shares Configure integration between Samba and CUPS Manage Windows print drivers and configure downloading of print drivers Upload printer drivers using 'Add Print Driver Wizard' in Windows Preconfigure driver settings Configure paper sizes and forms Supported driver versions Manage GPO options for trusted print servers Awareness of spoolssd The following is a partial list of the used files, terms and utilities:
smb.conf:
printing
printable / print ok
printcap name / printcap
spoolss: architecture = Windows x64
/var/spool/samba/
smbspool
rpcclient (to execute topic-related commands (enumdrivers, enumprinters, setdriver))
net (included topic-related subcommands)
Key Knowledge Areas:
Understand and configure NSS and PAM Enforce password complexity policies and periodic password changes Create home directories for new users Lock accounts automatically after failed login attempts Configure NSS and PAM to retrieve information from LDAP Configure SSSD authentication against Active Directory, IPA, LDAP and Kerberos domains and the local system’s authentication database Manage local accounts through SSSD Obtain and manage Kerberos tickets The following is a partial list of the used files, terms and utilities:
pam_ldap.so
ldap.conf
pam_krb5.so
pam_cracklib.so
pam_tally2.so
pam_faillock.so
pam_mkhomedir.so
sssd
sssd.conf
sss_override
sss_cache
sss_debuglevel
sss_user* and sss_group*
/var/lib/sss/db/
krb5.conf
kinit
klist
kdestroy
Key Knowledge Areas:
Access remote CIFS shares from a Linux client Mount remote CIFS shares on a Linux client Automatically mount home directories Store and manage CIFS credentials securely Understand and manage permissions and file ownership of remote CIFS shares Understand and manage quotas on CIFS shares The following is a partial list of the used files, terms and utilities:
smb.conf
smbclient (including relevant subcommands)
mount
mount.cifs
pam_mount.so
pam_mount.conf.xml
setcifsacl
smbcquotas
smbget
smbtar
Key Knowledge Areas:
Understand how to set up and use Windows hosts Join a Windows host to an Active Directory domain Access remote CIFS shares from a Windows client Configure printing to remote printers from a Windows client Configure file and print shares on a Windows host Understand the concept, structure and capabilities of GPOs Create and modify GPOs and apply GPOs to machines or users Access a remote Windows desktop Create and configure logon scripts Configure roaming profiles for Active Directory users Configure profile folder redirects The following is a partial list of the used files, terms and utilities:
smb.conf:
logon path
logon script
net (Windows command; including all relevant subcommands)
samba-tool gpo (including all relevant subcommands)
rdesktop
Key Knowledge Areas:
Understand the features, architecture as well as server-side and client-side components of FreeIPA Install a FreeIPA server Set up and manage a FreeIPA domain using standard settings and default services Understand replication topology and configure FreeIPA replication Join clients to an existing FreeIPA domain Awareness of ipa-backup The following is a partial list of the used files, terms and utilities:
ipa-server-install
ipa-replica-prepare
ipa-replica-install
ipa-client-install
ipactl
Key Knowledge Areas:
Manage user accounts and groups Manage hosts, hostgroups and services Understand the principle of IPA access control permissions, privileges and roles Understand ID views Awareness of sudo, autofs, SSH, SELinux and NIS integration as well as host based access control in FreeIPA Awareness of the FreeIPA CA The following is a partial list of the used files, terms and utilities:
ipa (including relevant user-, stageuser- and group-* and idview-* subcommands)
ipa (including relevant host-, hostgroup-, service-* and getkeytab subcommands)
ipa (including relevant permission-, privilege-, and role-* subcommands)
ipctl
ipa-advice
Key Knowledge Areas:
Understand and set up FreeIPA and Active Directory integration using Kerberos cross-realm trusts Configure ID ranges in FreeIPA Understand and manage external non-POSIX groups in FreeIPA Awareness of Microsoft Privilege Attribute Certificates and how they are handled by FreeIPA Awareness of replication based FreeIPA and Active Directory integration The following is a partial list of the used files, terms and utilities:
ipa-adtrust-install
ipa (including relevant trust-, idrange- and group-* subcommands)
Key Knowledge Areas:
Understand major NFSv4 features Configure and manage an NFSv4 server and clients Understand and use the NFSv4 pseudo file system Understand and use NFSv4 ACLs Use Kerberos for for NFSv4 authentication The following is a partial list of the used files, terms and utilities:
nfs4_editfacl
nfs4_getfacl
nfs4_setfacl
mount (including common NFS mount options)