Difference between revisions of "LPIC-3 300 Objectives V1"

Revision as of 06:15, 23 August 2013 (view source) EricDeschamps (Talk | contribs) m (→‎394.1 Managing User Accounts and Groups (weight: 4)) ← Older edit		Latest revision as of 20:19, 4 December 2014 (view source) GMatthewRice (Talk | contribs)
(8 intermediate revisions by 2 users not shown)
Line 1:		Line 1:
	__FORCETOC__		__FORCETOC__
	==Introduction==		==Introduction==
		+
		+	A complete description of the [[LPIC-3|LPIC-3 certification program]] can be found [[LPIC-3|here]].
	<br />		<br />
Line 55:		Line 57:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Replication concepts.	+	* Replication concepts
−	* Configure OpenLDAP replication.	+	* Configure OpenLDAP replication
−	* Analyze replication log files.	+	* Analyze replication log files
−	* Understand replica hubs.	+	* Understand replica hubs
−	* LDAP referrals.	+	* LDAP referrals
−	* LDAP sync replication.	+	* LDAP sync replication
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
Line 97:		Line 99:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Securing the directory with SSL and TLS.	+	* Securing the directory with SSL and TLS
−	* Firewall considerations.	+	* Firewall considerations
−	* Unauthenticated access methods.	+	* Unauthenticated access methods
−	* User / password authentication methods.	+	* User / password authentication methods
−	* Maintanence of SASL user DB.	+	* Maintanence of SASL user DB
−	* Client / server certificates.	+	* Client / server certificates
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
Line 136:		Line 138:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Measure OpenLDAP performance.	+	* Measure OpenLDAP performance
−	* Tune software configuration to increase performance.	+	* Tune software configuration to increase performance
−	* Understand indexes.	+	* Understand indexes
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
Line 170:		Line 172:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Configure PAM to use LDAP for authentication.	+	* Configure PAM to use LDAP for authentication
−	* Configure NSS to retrieve information from LDAP.	+	* Configure NSS to retrieve information from LDAP
−	* Configure PAM modules in various Unix environments.	+	* Configure PAM modules in various Unix environments
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
Line 178:		Line 180:
	* PAM		* PAM
	* NSS		* NSS
−	* /etc/pam.d/*	+	* /etc/pam.d/
	* /etc/nsswitch.conf		* /etc/nsswitch.conf
Line 204:		Line 206:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Kerberos integration with LDAP.	+	* Kerberos integration with LDAP
−	* Cross platform authentication.	+	* Cross platform authentication
−	* Single sign-on concepts.	+	* Single sign-on concepts
−	* Integration and compatibility limitations between OpenLDAP and Active Directory.	+	* Integration and compatibility limitations between OpenLDAP and Active Directory
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
Line 241:		Line 243:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Understand the roles of the Samba daemons and components.	+	* Understand the roles of the Samba daemons and components
−	* Understand key issues regarding heterogeneous networks.	+	* Understand key issues regarding heterogeneous networks
−	* Identify key TCP/UDP ports used with SMB/CIFS.	+	* Identify key TCP/UDP ports used with SMB/CIFS
−	* Knowledge of Samba3 and Samba4 differences.	+	* Knowledge of Samba3 and Samba4 differences
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* /etc/services.	+	* /etc/services
−	* Samba daemons: smbd, nmbd, samba, winbindd.	+	* Samba daemons: smbd, nmbd, samba, winbindd
	<br />		<br />
Line 274:		Line 276:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Knowledge of Samba server configuration file structure.	+	* Knowledge of Samba server configuration file structure
−	* Knowledge of Samba variables and configuration parameters.	+	* Knowledge of Samba variables and configuration parameters
−	* Troubleshoot and debug configuration problems with Samba.	+	* Troubleshoot and debug configuration problems with Samba
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* smb.conf.	+	* smb.conf
−	* smb.conf parameters.	+	* smb.conf parameters
−	* smb.conf variables.	+	* smb.conf variables
−	* testparm.	+	* testparm
−	* secrets.tdb.	+	* secrets.tdb
	<br />		<br />
Line 310:		Line 312:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Monitor and interact with running Samba daemons.	+	* Monitor and interact with running Samba daemons
−	* Perform regular backups of Samba configuration and state data.	+	* Perform regular backups of Samba configuration and state data
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* smbcontrol.	+	* smbcontrol
−	* smbstatus.	+	* smbstatus
−	* tdbbackup.	+	* tdbbackup
	<br />		<br />
Line 342:		Line 344:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Configure Samba logging.	+	* Configure Samba logging
−	* Backup TDB files.	+	* Backup TDB files
−	* Restore TDB files.	+	* Restore TDB files
−	* Identify TDB file corruption.	+	* Identify TDB file corruption
−	* Edit / list TDB file content.	+	* Edit / list TDB file content
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* /var/log/samba/*	+	* /var/log/samba/
−	* log level.	+	* log level
−	* debuglevel.	+	* debuglevel
−	* smbpasswd.	+	* smbpasswd
−	* pdbedit.	+	* pdbedit
−	* secrets.tdb.	+	* secrets.tdb
−	* tdbbackup.	+	* tdbbackup
−	* tdbdump.	+	* tdbdump
−	* tdbrestore.	+	* tdbrestore
−	* tdbtool.	+	* tdbtool
	<br />		<br />
Line 384:		Line 386:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Understand internationalization character codes and code pages.	+	* Understand internationalization character codes and code pages
−	* Understand the difference in the name space between Windows and Linux/Unix with respect to share, file and directory names in a non-English environment.	+	* Understand the difference in the name space between Windows and Linux/Unix with respect to share, file and directory names in a non-English environment
−	* Understand the difference in the name space between Windows and Linux/Unix with respect to user and group naming in a non-English environment.	+	* Understand the difference in the name space between Windows and Linux/Unix with respect to user and group naming in a non-English environment
−	* Understand the difference in the name space between Windows and Linux/Unix with respect to computer naming in a non-English environment.	+	* Understand the difference in the name space between Windows and Linux/Unix with respect to computer naming in a non-English environment
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* internationalization.	+	* internationalization
−	* character codes.	+	* character codes
−	* code pages.	+	* code pages
−	* smb.conf.	+	* smb.conf
−	* dos charset, display charset and unix charset.	+	* dos charset, display charset and unix charset
	<br />		<br />
Line 422:		Line 424:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Create and configure file sharing.	+	* Create and configure file sharing
−	* Plan file service migration.	+	* Plan file service migration
−	* Limit access to IPC$.	+	* Limit access to IPC$
−	* Create scripts for user and group handling of file shares.	+	* Create scripts for user and group handling of file shares
−	* Samba share access configuration parameters.	+	* Samba share access configuration parameters
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* smb.conf.	+	* smb.conf
−	* [homes].	+	* [homes]
−	* smbcquotas.	+	* smbcquotas
−	* smbsh.	+	* smbsh
−	* browseable, writeable, valid users, write list, read list, read only and guest ok.	+	* browseable, writeable, valid users, write list, read list, read only and guest ok
−	* IPC$.	+	* IPC$
−	* mount, smbmount.	+	* mount, smbmount
	<br />		<br />
Line 460:		Line 462:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Knowledge of file / directory permission control.	+	* Knowledge of file / directory permission control
−	* Understand how Samba interacts with Linux file system permissions and ACLs.	+	* Understand how Samba interacts with Linux file system permissions and ACLs
−	* Use Samba VFS to store Windows ACLs.	+	* Use Samba VFS to store Windows ACLs
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* smb.conf.	+	* smb.conf
−	* chmod, chown.	+	* chmod, chown
−	* create mask, directory mask, force create mode, force directory mode.	+	* create mask, directory mask, force create mode, force directory mode
−	* smbcacls.	+	* smbcacls
−	* getfacl, setfacl.	+	* getfacl, setfacl
−	* vfs_acl_xattr, vfs_acl_tdb and vfs objects.	+	* vfs_acl_xattr, vfs_acl_tdb and vfs objects
	<br />		<br />
Line 495:		Line 497:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Create and configure printer sharing.	+	* Create and configure printer sharing
−	* Configure integration between Samba and CUPS.	+	* Configure integration between Samba and CUPS
−	* Manage Windows print drivers and configure downloading of print drivers.	+	* Manage Windows print drivers and configure downloading of print drivers
−	* Configure [print$].	+	* Configure [print$]
−	* Understand security concerns with printer sharing.	+	* Understand security concerns with printer sharing
−	* Uploading printer drivers for Point'n'Print driver installation using 'Add Print Driver Wizard' in Windows.	+	* Uploading printer drivers for Point'n'Print driver installation using 'Add Print Driver Wizard' in Windows
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* smb.conf.	+	* smb.conf
−	* [print$].	+	* [print$]
−	* CUPS.	+	* CUPS
−	* cupsd.conf.	+	* cupsd.conf
−	* /var/spool/samba.	+	* /var/spool/samba/
−	* smbspool.	+	* smbspool
−	* rpcclient.	+	* rpcclient
−	* net.	+	* net
	<br />		<br />
Line 537:		Line 539:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Manager user and group accounts.	+	* Manager user and group accounts
−	* Understand user and group mapping.	+	* Understand user and group mapping
−	* Knowledge of user account management tools.	+	* Knowledge of user account management tools
−	* Use of the smbpasswd program.	+	* Use of the smbpasswd program
−	* Force ownership of file and directory objects.	+	* Force ownership of file and directory objects
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* pdbedit.	+	* pdbedit
−	* smb.conf.	+	* smb.conf
−	* samba-tool user (with subcommands).	+	* samba-tool user (with subcommands)
−	* samba-tool group (with subcommands).	+	* samba-tool group (with subcommands)
−	* smbpasswd.	+	* smbpasswd
−	* /etc/passwd.	+	* /etc/passwd
−	* /etc/group.	+	* /etc/group
−	* force user, force group.	+	* force user, force group
−	* idmap.	+	* idmap
	<br />		<br />
Line 577:		Line 579:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Setup a local password database.	+	* Setup a local password database
−	* Perform password synchronization.	+	* Perform password synchronization
−	* Knowledge of different passdb backends.	+	* Knowledge of different passdb backends
−	* Convert between Samba passdb backends.	+	* Convert between Samba passdb backends
−	* Integrate Samba with LDAP.	+	* Integrate Samba with LDAP
−	* Configure Winbind service.	+	* Configure Winbind service
−	* Configure PAM and NSS.	+	* Configure PAM and NSS
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* smb.conf.	+	* smb.conf
−	* smbpasswd, tdbsam, ldapsam.	+	* smbpasswd, tdbsam, ldapsam
−	* passdb backend.	+	* passdb backend
−	* libnss_winbind.	+	* libnss_winbind
−	* libpam_winbind.	+	* libpam_winbind
−	* libpam_smbpass.	+	* libpam_smbpass
−	* wbinfo.	+	* wbinfo
−	* getent.	+	* getent
−	* SID and foreign SID.	+	* SID and foreign SID
−	* /etc/passwd.	+	* /etc/passwd
−	* /etc/group.	+	* /etc/group
	<br />		<br />
Line 624:		Line 626:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Understand and configure domain membership and trust relationships.	+	* Understand and configure domain membership and trust relationships
−	* Create and maintain a primary domain controller with Samba3 and Samba4.	+	* Create and maintain a primary domain controller with Samba3 and Samba4
−	* Create and maintain a backup domain controller with Samba3 and Samba4.	+	* Create and maintain a backup domain controller with Samba3 and Samba4
−	* Add computers to an existing domain.	+	* Add computers to an existing domain
−	* Configure logon scripts.	+	* Configure logon scripts
−	* Configure roaming profiles.	+	* Configure roaming profiles
−	* Configure system policies.	+	* Configure system policies
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* smb.conf.	+	* smb.conf
−	* security mode.	+	* security mode
−	* server role.	+	* server role
−	* domain logons.	+	* domain logons
−	* domain master.	+	* domain master
−	* logon script.	+	* logon script
−	* logon path.	+	* logon path
−	* NTConfig.pol.	+	* NTConfig.pol
−	* net.	+	* net
−	* profiles.	+	* profiles
−	* add machine script.	+	* add machine script
−	* profile acls.	+	* profile acls
	<br />		<br />
Line 670:		Line 672:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Configure and test Samba 4 as an AD DC.	+	* Configure and test Samba 4 as an AD DC
−	* Using smbclient to confirm AD operation.	+	* Using smbclient to confirm AD operation
−	* Understand how Samba integrates with AD services; DNS, Kerberos, NTP, LDAP.	+	* Understand how Samba integrates with AD services: DNS, Kerberos, NTP, LDAP
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* smb.conf.	+	* smb.conf
−	* server role.	+	* server role
−	* samba-tool domain (with subcommands).	+	* samba-tool domain (with subcommands)
−	* samba.	+	* samba
	<br />		<br />
Line 704:		Line 706:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Joining Samba to an existing NT4 domain.	+	* Joining Samba to an existing NT4 domain
−	* Joining Samba to an existing AD domain.	+	* Joining Samba to an existing AD domain
−	* Ability to obtain a TGT from a KDC.	+	* Ability to obtain a TGT from a KDC
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* smb.conf.	+	* smb.conf
−	* server role.	+	* server role
−	* server security.	+	* server security
−	* net command.	+	* net command
−	* kinit, TGT and REALM.	+	* kinit, TGT and REALM
	<br />		<br />
Line 744:		Line 746:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Understand WINS concepts.	+	* Understand WINS concepts
−	* Understand NetBIOS concepts.	+	* Understand NetBIOS concepts
−	* Understand the role of a local master browser.	+	* Understand the role of a local master browser
−	* Understand the role of a domain master browser.	+	* Understand the role of a domain master browser
−	* Understand the role of Samba as a WINS server.	+	* Understand the role of Samba as a WINS server
−	* Understand name resolution.	+	* Understand name resolution
−	* Configure Samba as a WINS server.	+	* Configure Samba as a WINS server
−	* Configure WINS replication.	+	* Configure WINS replication
−	* Understand NetBIOS browsing and browser elections.	+	* Understand NetBIOS browsing and browser elections
−	* Understand NETBIOS name types.	+	* Understand NETBIOS name types
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* smb.conf.	+	* smb.conf
−	* nmblookup.	+	* nmblookup
−	* smbclient.	+	* smbclient
−	* name resolve order.	+	* name resolve order
−	* lmhosts.	+	* lmhosts
−	* wins support, wins server, wins proxy, dns proxy.	+	* wins support, wins server, wins proxy, dns proxy
−	* domain master, os level, preferred master.	+	* domain master, os level, preferred master
	<br />		<br />
Line 788:		Line 790:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Understand and manage DNS for Samba4 as an AD Domain Controller.	+	* Understand and manage DNS for Samba4 as an AD Domain Controller
−	* DNS forwarding with the internal DNS sever of Samba4.	+	* DNS forwarding with the internal DNS server of Samba4
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* samba-tool dns (with subcommands).	+	* samba-tool dns (with subcommands)
−	* smb.conf.	+	* smb.conf
−	* dns forwarder.	+	* dns forwarder
−	* /etc/resolv.conf.	+	* /etc/resolv.conf
−	* dig, host.	+	* dig, host
	<br />		<br />
Line 824:		Line 826:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Understand SMB/CIFS concepts.	+	* Understand SMB/CIFS concepts
−	* Access and mount remote CIFS shares from a Linux client.	+	* Access and mount remote CIFS shares from a Linux client
−	* Securely storing CIFS credentials.	+	* Securely storing CIFS credentials
−	* Understand features and benefits of CIFS.	+	* Understand features and benefits of CIFS
−	* Understand permissions and file ownership of remote CIFS shares.	+	* Understand permissions and file ownership of remote CIFS shares
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* SMB/CIFS.	+	* SMB/CIFS
−	* mount, mount.cifs.	+	* mount, mount.cifs
−	* smbclient.	+	* smbclient
−	* smbget.	+	* smbget
−	* smbtar.	+	* smbtar
−	* smbtree.	+	* smbtree
−	* findsmb.	+	* findsmb
−	* smb.conf.	+	* smb.conf
−	* smbcquotas.	+	* smbcquotas
−	* /etc/fstab.	+	* /etc/fstab
	<br />		<br />
Line 860:		Line 862:
	| style="background:#eaeaea" |		| style="background:#eaeaea" |
−	Clients should be able to interact with remote Windows clients, and configure Windows workstations to access file and print services from Linux servers.	+	Candidates should be able to interact with remote Windows clients, and configure Windows workstations to access file and print services from Linux servers.
	|}		|}
		+
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''
−	* Knowledge of Windows clients.	+	* Knowledge of Windows clients
−	* Explore browse lists and SMB clients from Windows.	+	* Explore browse lists and SMB clients from Windows
−	* Share file / print resources from Windows.	+	* Share file / print resources from Windows
−	* Use of the smbclient program.	+	* Use of the smbclient program
−	* Use of the Windows net utility.	+	* Use of the Windows net utility
	'''The following is a partial list of the used files, terms and utilities:'''		'''The following is a partial list of the used files, terms and utilities:'''
−	* Windows net command.	+	* Windows net command
−	* smbclient.	+	* smbclient
−	* control panel.	+	* control panel
−	* rdesktop.	+	* rdesktop
−	* workgroup.	+	* workgroup
−	<br />
	<br />		<br />

---

Latest revision as of 20:19, 4 December 2014

Introduction

A complete description of the LPIC-3 certification program can be found here.

Version Information

These objectives are version 1.0.0.

They were partially formed from content in the 301 and 302 exams. This is also a summary and detailed information on the changes from those objectives to version 1 of these objectives.

Addenda

Version Release (Oct 1st, 2013)

• released version 1.0.0

Translations of Objectives

The following translations of the objectives are available on this wiki:

• English
• French
• Spanish

Objectives

Topic 390: OpenLDAP Configuration

390.1 OpenLDAP Replication (weight: 3)

Weight	3
Description	Candidates should be familiar with the server replication available with OpenLDAP.

Key Knowledge Areas:

• Replication concepts
• Configure OpenLDAP replication
• Analyze replication log files
• Understand replica hubs
• LDAP referrals
• LDAP sync replication

The following is a partial list of the used files, terms and utilities:

• master / slave server
• multi-master replication
• consumer
• replica hub
• one-shot mode
• referral
• syncrepl
• pull-based / push-based synchronization
• refreshOnly and refreshAndPersist
• replog

390.2 Securing the Directory (weight: 3)

Weight	3
Description	Candidates should be able to configure encrypted access to the LDAP directory, and restrict access at the firewall level.

Key Knowledge Areas:

• Securing the directory with SSL and TLS
• Firewall considerations
• Unauthenticated access methods
• User / password authentication methods
• Maintanence of SASL user DB
• Client / server certificates

The following is a partial list of the used files, terms and utilities:

• SSL / TLS
• Security Strength Factors (SSF)
• SASL
• proxy authorization
• StartTLS
• iptables

390.3 OpenLDAP Server Performance Tuning (weight: 2)

Weight	2
Description	Candidates should be capable of measuring the performance of an LDAP server, and tuning configuration directives.

Key Knowledge Areas:

• Measure OpenLDAP performance
• Tune software configuration to increase performance
• Understand indexes

The following is a partial list of the used files, terms and utilities:

• index
• DB_CONFIG

Topic 391: OpenLDAP as an Authentication Backend

391.1 LDAP Integration with PAM and NSS (weight: 2)

Weight	2
Description	Candidates should be able to configure PAM and NSS to retrieve information from an LDAP directory.

Key Knowledge Areas:

• Configure PAM to use LDAP for authentication
• Configure NSS to retrieve information from LDAP
• Configure PAM modules in various Unix environments

The following is a partial list of the used files, terms and utilities:

• PAM
• NSS
• /etc/pam.d/
• /etc/nsswitch.conf

391.2 Integrating LDAP with Active Directory and Kerberos (weight: 2)

Weight	2
Description	Candidates should be able to integrate LDAP with Active Directory Services.

Key Knowledge Areas:

• Kerberos integration with LDAP
• Cross platform authentication
• Single sign-on concepts
• Integration and compatibility limitations between OpenLDAP and Active Directory

The following is a partial list of the used files, terms and utilities:

• Kerberos
• Active Directory
• single sign-on
• DNS

Topic 392: Samba Basics

392.1 Samba Concepts and Architecture (weight: 2)

Weight	2
Description	Candidates should understand the essential concepts of Samba. As well, the major differences between Samba3 and Samba4 should be known.

Key Knowledge Areas:

• Understand the roles of the Samba daemons and components
• Understand key issues regarding heterogeneous networks
• Identify key TCP/UDP ports used with SMB/CIFS
• Knowledge of Samba3 and Samba4 differences

The following is a partial list of the used files, terms and utilities:

• /etc/services
• Samba daemons: smbd, nmbd, samba, winbindd

392.2 Configure Samba (weight: 4)

Weight	4
Description	Candidates should be able to configure the Samba daemons for a wide variety of purposes.

Key Knowledge Areas:

• Knowledge of Samba server configuration file structure
• Knowledge of Samba variables and configuration parameters
• Troubleshoot and debug configuration problems with Samba

The following is a partial list of the used files, terms and utilities:

• smb.conf
• smb.conf parameters
• smb.conf variables
• testparm
• secrets.tdb

392.3 Regular Samba Maintenance (weight: 2)

Weight	2
Description	Candidates should know about the various tools and utilities that are part of a Samba installation.

Key Knowledge Areas:

• Monitor and interact with running Samba daemons
• Perform regular backups of Samba configuration and state data

The following is a partial list of the used files, terms and utilities:

• smbcontrol
• smbstatus
• tdbbackup

392.4 Troubleshooting Samba (weight: 2)

Weight	2
Description	Candidates should understand the structure of trivial database files and know how troubleshoot problems.

Key Knowledge Areas:

• Configure Samba logging
• Backup TDB files
• Restore TDB files
• Identify TDB file corruption
• Edit / list TDB file content

The following is a partial list of the used files, terms and utilities:

• /var/log/samba/
• log level
• debuglevel
• smbpasswd
• pdbedit
• secrets.tdb
• tdbbackup
• tdbdump
• tdbrestore
• tdbtool

392.5 Internationalization (weight: 1)

Weight	1
Description	Candidates should be able to work with internationalization character codes and code pages.

Key Knowledge Areas:

• Understand internationalization character codes and code pages
• Understand the difference in the name space between Windows and Linux/Unix with respect to share, file and directory names in a non-English environment
• Understand the difference in the name space between Windows and Linux/Unix with respect to user and group naming in a non-English environment
• Understand the difference in the name space between Windows and Linux/Unix with respect to computer naming in a non-English environment

The following is a partial list of the used files, terms and utilities:

• internationalization
• character codes
• code pages
• smb.conf
• dos charset, display charset and unix charset

Topic 393: Samba Share Configuration

393.1 File Services (weight: 4)

Weight	4
Description	Candidates should be able to create and configure file shares in a mixed environment.

Key Knowledge Areas:

• Create and configure file sharing
• Plan file service migration
• Limit access to IPC$
• Create scripts for user and group handling of file shares
• Samba share access configuration parameters

The following is a partial list of the used files, terms and utilities:

• smb.conf
• [homes]
• smbcquotas
• smbsh
• browseable, writeable, valid users, write list, read list, read only and guest ok
• IPC$
• mount, smbmount

393.2 Linux File System and Share/Service Permissions (weight: 3)

Weight	3
Description	Candidates should understand file permissions on a Linux file system in a mixed environment.

Key Knowledge Areas:

• Knowledge of file / directory permission control
• Understand how Samba interacts with Linux file system permissions and ACLs
• Use Samba VFS to store Windows ACLs

The following is a partial list of the used files, terms and utilities:

• smb.conf
• chmod, chown
• create mask, directory mask, force create mode, force directory mode
• smbcacls
• getfacl, setfacl
• vfs_acl_xattr, vfs_acl_tdb and vfs objects

393.3 Print Services (weight: 2)

Weight	2
Description	Candidates should be able to create and manage print shares in a mixed environment.

Key Knowledge Areas:

• Create and configure printer sharing
• Configure integration between Samba and CUPS
• Manage Windows print drivers and configure downloading of print drivers
• Configure [print$]
• Understand security concerns with printer sharing
• Uploading printer drivers for Point'n'Print driver installation using 'Add Print Driver Wizard' in Windows

The following is a partial list of the used files, terms and utilities:

• smb.conf
• [print$]
• CUPS
• cupsd.conf
• /var/spool/samba/
• smbspool
• rpcclient
• net

Topic 394: Samba User and Group Management

394.1 Managing User Accounts and Groups (weight: 4)

Weight	4
Description	Candidates should be able to manage user and group accounts in a mixed environment.

Key Knowledge Areas:

• Manager user and group accounts
• Understand user and group mapping
• Knowledge of user account management tools
• Use of the smbpasswd program
• Force ownership of file and directory objects

The following is a partial list of the used files, terms and utilities:

• pdbedit
• smb.conf
• samba-tool user (with subcommands)
• samba-tool group (with subcommands)
• smbpasswd
• /etc/passwd
• /etc/group
• force user, force group
• idmap

394.2 Authentication, Authorization and Winbind (weight: 5)

Weight	5
Description	Candidates should understand the various authentication mechanisms and configure access control. Candidates should be able to install and configure the Winbind service.

Key Knowledge Areas:

• Setup a local password database
• Perform password synchronization
• Knowledge of different passdb backends
• Convert between Samba passdb backends
• Integrate Samba with LDAP
• Configure Winbind service
• Configure PAM and NSS

The following is a partial list of the used files, terms and utilities:

• smb.conf
• smbpasswd, tdbsam, ldapsam
• passdb backend
• libnss_winbind
• libpam_winbind
• libpam_smbpass
• wbinfo
• getent
• SID and foreign SID
• /etc/passwd
• /etc/group

Topic 395: Samba Domain Integration

395.1 Samba as a PDC and BDC (weight: 3)

Weight	3
Description	Candidates should be able to setup and maintain primary and backup domain controllers. Candidates should be able to manage Windows/Linux client access to the NT-Style domains.

Key Knowledge Areas:

• Understand and configure domain membership and trust relationships
• Create and maintain a primary domain controller with Samba3 and Samba4
• Create and maintain a backup domain controller with Samba3 and Samba4
• Add computers to an existing domain
• Configure logon scripts
• Configure roaming profiles
• Configure system policies

The following is a partial list of the used files, terms and utilities:

• smb.conf
• security mode
• server role
• domain logons
• domain master
• logon script
• logon path
• NTConfig.pol
• net
• profiles
• add machine script
• profile acls

395.2 Samba4 as an AD compatible Domain Controller (weight: 3)

Weight	3
Description	Candidates should be able to configure Samba 4 as an AD Domain Controller.

Key Knowledge Areas:

• Configure and test Samba 4 as an AD DC
• Using smbclient to confirm AD operation
• Understand how Samba integrates with AD services: DNS, Kerberos, NTP, LDAP

The following is a partial list of the used files, terms and utilities:

• smb.conf
• server role
• samba-tool domain (with subcommands)
• samba

395.3 Configure Samba as a Domain Member Server (weight: 3)

Weight	3
Description	Candidates should be able to integrate Linux servers into an environment where Active Directory is present.

Key Knowledge Areas:

• Joining Samba to an existing NT4 domain
• Joining Samba to an existing AD domain
• Ability to obtain a TGT from a KDC

The following is a partial list of the used files, terms and utilities:

• smb.conf
• server role
• server security
• net command
• kinit, TGT and REALM

Topic 396: Samba Name Services

396.1 NetBIOS and WINS (weight: 3)

Weight	3
Description	Candidates should be familiar with NetBIOS/WINS concepts and understand network browsing.

Key Knowledge Areas:

• Understand WINS concepts
• Understand NetBIOS concepts
• Understand the role of a local master browser
• Understand the role of a domain master browser
• Understand the role of Samba as a WINS server
• Understand name resolution
• Configure Samba as a WINS server
• Configure WINS replication
• Understand NetBIOS browsing and browser elections
• Understand NETBIOS name types

The following is a partial list of the used files, terms and utilities:

• smb.conf
• nmblookup
• smbclient
• name resolve order
• lmhosts
• wins support, wins server, wins proxy, dns proxy
• domain master, os level, preferred master

396.2 Active Directory Name Resolution (weight: 2)

Weight	2
Description	Candidates should be familiar with the internal DNS server with Samba4.

Key Knowledge Areas:

• Understand and manage DNS for Samba4 as an AD Domain Controller
• DNS forwarding with the internal DNS server of Samba4

The following is a partial list of the used files, terms and utilities:

• samba-tool dns (with subcommands)
• smb.conf
• dns forwarder
• /etc/resolv.conf
• dig, host

Topic 397: Working with Linux and Windows Clients

397.1 CIFS Integration (weight: 3)

Weight	3
Description	Candidates should be comfortable working with CIFS in a mixed environment.

Key Knowledge Areas:

• Understand SMB/CIFS concepts
• Access and mount remote CIFS shares from a Linux client
• Securely storing CIFS credentials
• Understand features and benefits of CIFS
• Understand permissions and file ownership of remote CIFS shares

The following is a partial list of the used files, terms and utilities:

• SMB/CIFS
• mount, mount.cifs
• smbclient
• smbget
• smbtar
• smbtree
• findsmb
• smb.conf
• smbcquotas
• /etc/fstab

397.2 Working with Windows Clients (weight: 2)

Weight	2
Description	Candidates should be able to interact with remote Windows clients, and configure Windows workstations to access file and print services from Linux servers.

Key Knowledge Areas:

• Knowledge of Windows clients
• Explore browse lists and SMB clients from Windows
• Share file / print resources from Windows
• Use of the smbclient program
• Use of the Windows net utility

The following is a partial list of the used files, terms and utilities:

• Windows net command
• smbclient
• control panel
• rdesktop
• workgroup