Difference between revisions of "LPIC-3 300 Objectives V1(ES)"

From LPI Wiki
Jump to: navigation, search
Line 116: Line 116:
 
<br />
 
<br />
  
−
====<span style="color:navy">390.3 OpenLDAP Server Performance Tuning (weight: 2)</span>====
+
====<span style="color:navy">390.3 OpenLDAP Server Performance Tuning (Peso: 2)</span>====
  
 
{|
 
{|
Line 135: Line 135:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Measure OpenLDAP performance
 
* Measure OpenLDAP performance
Line 141: Line 141:
 
* Understand indexes
 
* Understand indexes
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* index
 
* index
Line 150: Line 150:
 
===''Topic 391: OpenLDAP as an Authentication Backend''===
 
===''Topic 391: OpenLDAP as an Authentication Backend''===
  
−
====<span style="color:navy">391.1 LDAP Integration with PAM and NSS (weight: 2)</span>====
+
====<span style="color:navy">391.1 LDAP Integration with PAM and NSS (Peso: 2)</span>====
  
 
{|
 
{|
Line 169: Line 169:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Configure PAM to use LDAP for authentication
 
* Configure PAM to use LDAP for authentication
Line 175: Line 175:
 
* Configure PAM modules in various Unix environments
 
* Configure PAM modules in various Unix environments
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* PAM
 
* PAM
Line 184: Line 184:
 
<br />
 
<br />
  
−
====<span style="color:navy">391.2 Integrating LDAP with Active Directory and Kerberos (weight: 2)</span>====
+
====<span style="color:navy">391.2 Integrating LDAP with Active Directory and Kerberos (Peso: 2)</span>====
  
 
{|
 
{|
Line 203: Line 203:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Kerberos integration with LDAP
 
* Kerberos integration with LDAP
Line 210: Line 210:
 
* Integration and compatibility limitations between OpenLDAP and Active Directory
 
* Integration and compatibility limitations between OpenLDAP and Active Directory
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* Kerberos
 
* Kerberos
Line 221: Line 221:
 
===''Topic 392: Samba Basics''===
 
===''Topic 392: Samba Basics''===
  
−
====<span style="color:navy">392.1 Samba Concepts and Architecture (weight: 2)</span>====
+
====<span style="color:navy">392.1 Samba Concepts and Architecture (Peso: 2)</span>====
  
 
{|
 
{|
Line 240: Line 240:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Understand the roles of the Samba daemons and components
 
* Understand the roles of the Samba daemons and components
Line 247: Line 247:
 
* Knowledge of Samba3 and Samba4 differences
 
* Knowledge of Samba3 and Samba4 differences
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* /etc/services
 
* /etc/services
Line 254: Line 254:
 
<br />
 
<br />
  
−
====<span style="color:navy">392.2 Configure Samba (weight: 4)</span>====
+
====<span style="color:navy">392.2 Configure Samba (Peso: 4)</span>====
  
 
{|
 
{|
Line 273: Line 273:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Knowledge of Samba server configuration file structure
 
* Knowledge of Samba server configuration file structure
Line 279: Line 279:
 
* Troubleshoot and debug configuration problems with Samba
 
* Troubleshoot and debug configuration problems with Samba
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* smb.conf
 
* smb.conf
Line 289: Line 289:
 
<br />
 
<br />
  
−
====<span style="color:navy">392.3 Regular Samba Maintenance (weight: 2)</span>====
+
====<span style="color:navy">392.3 Regular Samba Maintenance (Peso: 2)</span>====
  
 
{|
 
{|
Line 309: Line 309:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Monitor and interact with running Samba daemons
 
* Monitor and interact with running Samba daemons
 
* Perform regular backups of Samba configuration and state data
 
* Perform regular backups of Samba configuration and state data
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* smbcontrol
 
* smbcontrol
Line 322: Line 322:
 
<br />
 
<br />
  
−
====<span style="color:navy">392.4 Troubleshooting Samba (weight: 2)</span>====
+
====<span style="color:navy">392.4 Troubleshooting Samba (Peso: 2)</span>====
  
 
{|
 
{|
Line 341: Line 341:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Configure Samba logging
 
* Configure Samba logging
Line 349: Line 349:
 
* Edit / list TDB file content
 
* Edit / list TDB file content
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* /var/log/samba/
 
* /var/log/samba/
Line 364: Line 364:
 
<br />
 
<br />
  
−
====<span style="color:navy">392.5 Internationalization (weight: 1)</span>====
+
====<span style="color:navy">392.5 Internationalization (Peso: 1)</span>====
  
 
{|
 
{|
Line 383: Line 383:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Understand internationalization character codes and code pages
 
* Understand internationalization character codes and code pages
Line 390: Line 390:
 
* Understand the difference in the name space between Windows and Linux/Unix with respect to computer naming in a non-English environment
 
* Understand the difference in the name space between Windows and Linux/Unix with respect to computer naming in a non-English environment
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* internationalization
 
* internationalization
Line 402: Line 402:
 
===''Topic 393: Samba Share Configuration''===
 
===''Topic 393: Samba Share Configuration''===
  
−
====<span style="color:navy">393.1 File Services (weight: 4)</span>====
+
====<span style="color:navy">393.1 File Services (Peso: 4)</span>====
  
 
{|
 
{|
Line 421: Line 421:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Create and configure file sharing
 
* Create and configure file sharing
Line 429: Line 429:
 
* Samba share access configuration parameters
 
* Samba share access configuration parameters
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* smb.conf
 
* smb.conf
Line 440: Line 440:
 
<br />
 
<br />
  
−
====<span style="color:navy">393.2 Linux File System and Share/Service Permissions (weight: 3)</span>====
+
====<span style="color:navy">393.2 Linux File System and Share/Service Permissions (Peso: 3)</span>====
  
 
{|
 
{|
Line 459: Line 459:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Knowledge of file / directory permission control
 
* Knowledge of file / directory permission control
Line 465: Line 465:
 
* Use Samba VFS to store Windows ACLs
 
* Use Samba VFS to store Windows ACLs
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* smb.conf
 
* smb.conf
Line 475: Line 475:
 
<br />
 
<br />
  
−
====<span style="color:navy">393.3 Print Services (weight: 2)</span>====
+
====<span style="color:navy">393.3 Print Services (Peso: 2)</span>====
  
 
{|
 
{|
Line 494: Line 494:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Create and configure printer sharing
 
* Create and configure printer sharing
Line 503: Line 503:
 
* Uploading printer drivers for Point'n'Print driver installation using 'Add Print Driver Wizard' in Windows
 
* Uploading printer drivers for Point'n'Print driver installation using 'Add Print Driver Wizard' in Windows
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* smb.conf
 
* smb.conf
Line 517: Line 517:
 
===''Topic 394: Samba User and Group Management''===
 
===''Topic 394: Samba User and Group Management''===
  
−
====<span style="color:navy">394.1 Managing User Accounts and Groups (weight: 4)</span>====
+
====<span style="color:navy">394.1 Managing User Accounts and Groups (Peso: 4)</span>====
  
 
{|
 
{|
Line 536: Line 536:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Manager user and group accounts
 
* Manager user and group accounts
Line 544: Line 544:
 
* Force ownership of file and directory objects
 
* Force ownership of file and directory objects
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* pdbedit
 
* pdbedit
Line 557: Line 557:
 
<br />
 
<br />
  
−
====<span style="color:navy">394.2 Authentication, Authorization and Winbind (weight: 5)</span>====
+
====<span style="color:navy">394.2 Authentication, Authorization and Winbind (Peso: 5)</span>====
  
 
{|
 
{|
Line 576: Line 576:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Setup a local password database
 
* Setup a local password database
Line 586: Line 586:
 
* Configure PAM and NSS
 
* Configure PAM and NSS
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* smb.conf
 
* smb.conf
Line 604: Line 604:
 
===''Topic 395: Samba Domain Integration''===
 
===''Topic 395: Samba Domain Integration''===
  
−
====<span style="color:navy">395.1 Samba as a PDC and BDC (weight: 3)</span>====
+
====<span style="color:navy">395.1 Samba as a PDC and BDC (Peso: 3)</span>====
  
 
{|
 
{|
Line 623: Line 623:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Understand and configure domain membership and trust relationships
 
* Understand and configure domain membership and trust relationships
Line 633: Line 633:
 
* Configure system policies
 
* Configure system policies
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* smb.conf
 
* smb.conf
Line 650: Line 650:
 
<br />
 
<br />
  
−
====<span style="color:navy">395.2 Samba4 as an AD compatible Domain Controller (weight: 3)</span>====
+
====<span style="color:navy">395.2 Samba4 as an AD compatible Domain Controller (Peso: 3)</span>====
  
 
{|
 
{|
Line 669: Line 669:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Configure and test Samba 4 as an AD DC
 
* Configure and test Samba 4 as an AD DC
Line 675: Line 675:
 
* Understand how Samba integrates with AD services: DNS, Kerberos, NTP, LDAP
 
* Understand how Samba integrates with AD services: DNS, Kerberos, NTP, LDAP
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* smb.conf
 
* smb.conf
Line 684: Line 684:
 
<br />
 
<br />
  
−
====<span style="color:navy">395.3 Configure Samba as a Domain Member Server (weight: 3)</span>====
+
====<span style="color:navy">395.3 Configure Samba as a Domain Member Server (Peso: 3)</span>====
  
 
{|
 
{|
Line 703: Line 703:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Joining Samba to an existing NT4 domain
 
* Joining Samba to an existing NT4 domain
Line 709: Line 709:
 
* Ability to obtain a TGT from a KDC
 
* Ability to obtain a TGT from a KDC
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* smb.conf
 
* smb.conf
Line 724: Line 724:
  
  
−
====<span style="color:navy">396.1 NetBIOS and WINS (weight: 3)</span>====
+
====<span style="color:navy">396.1 NetBIOS and WINS (Peso: 3)</span>====
  
 
{|
 
{|
Line 743: Line 743:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Understand WINS concepts
 
* Understand WINS concepts
Line 756: Line 756:
 
* Understand NETBIOS name types
 
* Understand NETBIOS name types
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* smb.conf
 
* smb.conf
Line 768: Line 768:
 
<br />
 
<br />
  
−
====<span style="color:navy">396.2 Active Directory Name Resolution (weight: 2)</span>====
+
====<span style="color:navy">396.2 Active Directory Name Resolution (Peso: 2)</span>====
  
 
{|
 
{|
Line 787: Line 787:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Understand and manage DNS for Samba4 as an AD Domain Controller
 
* Understand and manage DNS for Samba4 as an AD Domain Controller
 
* DNS forwarding with the internal DNS server of Samba4
 
* DNS forwarding with the internal DNS server of Samba4
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* samba-tool dns (with subcommands)
 
* samba-tool dns (with subcommands)
Line 804: Line 804:
 
===''Topic 397: Working with Linux and Windows Clients''===
 
===''Topic 397: Working with Linux and Windows Clients''===
  
−
====<span style="color:navy">397.1 CIFS Integration (weight: 3)</span>====
+
====<span style="color:navy">397.1 CIFS Integration (Peso: 3)</span>====
  
 
{|
 
{|
Line 823: Line 823:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Understand SMB/CIFS concepts
 
* Understand SMB/CIFS concepts
Line 831: Line 831:
 
* Understand permissions and file ownership of remote CIFS shares
 
* Understand permissions and file ownership of remote CIFS shares
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* SMB/CIFS
 
* SMB/CIFS
Line 846: Line 846:
 
<br />
 
<br />
  
−
====<span style="color:navy">397.2 Working with Windows Clients (weight: 2)</span>====
+
====<span style="color:navy">397.2 Working with Windows Clients (Peso: 2)</span>====
  
 
{|
 
{|
Line 865: Line 865:
 
|}
 
|}
  
−
'''Key Knowledge Areas:'''
+
'''Áreas de conocimiento clave:'''
  
 
* Knowledge of Windows clients
 
* Knowledge of Windows clients
Line 873: Line 873:
 
* Use of the Windows net utility
 
* Use of the Windows net utility
  
−
'''The following is a partial list of the used files, terms and utilities:'''
+
'''La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:'''
  
 
* Windows net command
 
* Windows net command

Revision as of 20:32, 7 December 2017

Contents

Introduction

Se puede encontrar una descripción completa del [[LPIC-3|LPIC-3 programa de certificación ] aqui.


Información de versión

Estos objetivos son la versión 1.0.0.

Se formaron parcialmente a partir del contenido en los exámenes 301 and 302. Este también es un resumen e información detallada sobre los cambios de esos objetivos a la versión 1 de estos objetivos.


Addenda

Version de lanzamiento (1 de Octubre , 2013)

  • Version actual 1.0.0


Translations of Objectives

Las siguientes traducciones de los objetivos están disponibles en esta wiki:


Objetivos

Topic 390: Configuración de OpenLDAP

390.1 Replicación de OpenLDAP (Pesot: 3)

Weight

3

Description

Los candidatos deben estar familiarizados con la replicación del servidor disponible con OpenLDAP.

Áreas de conocimiento clave:

  • Conceptos de replicación
  • Configurar la replicación de OpenLDAP
  • Analizar archivos de registro de replicación
  • Comprender los centros de réplica
  • Referencias de LDAP
  • Replicación de sincronización LDAP

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • servidor maestro / esclavo
  • replicación multi-master
  • consumer
  • hub de réplica
  • modo one-shot
  • referral
  • syncrepl
  • sincronización basada en pull / basado en push
  • refreshOnly and refreshAndPersist
  • replog


390.2 Asegurar el directorio (Peso: 3)

Weight

3

Description

Los candidatos deben poder configurar el acceso codificado al directorio LDAP y restringir el acceso al nivel del firewall.

Áreas de conocimiento clave:

  • Asegurar el directorio con SSL y TLS
  • Consideraciones de firewall
  • Métodos de acceso no autenticado
  • Métodos de autenticación de usuario / contraseña
  • Mantenimiento del usuario SASL DB
  • Certificados de cliente / servidor

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • SSL / TLS
  • Factores de fortaleza de seguridad (SSF)
  • SASL
  • autorización de proxy
  • StartTLS
  • iptables


390.3 OpenLDAP Server Performance Tuning (Peso: 2)

Weight

2

Description

Candidates should be capable of measuring the performance of an LDAP server, and tuning configuration directives.

Áreas de conocimiento clave:

  • Measure OpenLDAP performance
  • Tune software configuration to increase performance
  • Understand indexes

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • index
  • DB_CONFIG


Topic 391: OpenLDAP as an Authentication Backend

391.1 LDAP Integration with PAM and NSS (Peso: 2)

Weight

2

Description

Candidates should be able to configure PAM and NSS to retrieve information from an LDAP directory.

Áreas de conocimiento clave:

  • Configure PAM to use LDAP for authentication
  • Configure NSS to retrieve information from LDAP
  • Configure PAM modules in various Unix environments

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • PAM
  • NSS
  • /etc/pam.d/
  • /etc/nsswitch.conf


391.2 Integrating LDAP with Active Directory and Kerberos (Peso: 2)

Weight

2

Description

Candidates should be able to integrate LDAP with Active Directory Services.

Áreas de conocimiento clave:

  • Kerberos integration with LDAP
  • Cross platform authentication
  • Single sign-on concepts
  • Integration and compatibility limitations between OpenLDAP and Active Directory

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • Kerberos
  • Active Directory
  • single sign-on
  • DNS


Topic 392: Samba Basics

392.1 Samba Concepts and Architecture (Peso: 2)

Weight

2

Description

Candidates should understand the essential concepts of Samba. As well, the major differences between Samba3 and Samba4 should be known.

Áreas de conocimiento clave:

  • Understand the roles of the Samba daemons and components
  • Understand key issues regarding heterogeneous networks
  • Identify key TCP/UDP ports used with SMB/CIFS
  • Knowledge of Samba3 and Samba4 differences

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • /etc/services
  • Samba daemons: smbd, nmbd, samba, winbindd


392.2 Configure Samba (Peso: 4)

Weight

4

Description

Candidates should be able to configure the Samba daemons for a wide variety of purposes.

Áreas de conocimiento clave:

  • Knowledge of Samba server configuration file structure
  • Knowledge of Samba variables and configuration parameters
  • Troubleshoot and debug configuration problems with Samba

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • smb.conf
  • smb.conf parameters
  • smb.conf variables
  • testparm
  • secrets.tdb


392.3 Regular Samba Maintenance (Peso: 2)

Weight


2

Description

Candidates should know about the various tools and utilities that are part of a Samba installation.

Áreas de conocimiento clave:

  • Monitor and interact with running Samba daemons
  • Perform regular backups of Samba configuration and state data

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • smbcontrol
  • smbstatus
  • tdbbackup


392.4 Troubleshooting Samba (Peso: 2)

Weight

2

Description

Candidates should understand the structure of trivial database files and know how troubleshoot problems.

Áreas de conocimiento clave:

  • Configure Samba logging
  • Backup TDB files
  • Restore TDB files
  • Identify TDB file corruption
  • Edit / list TDB file content

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • /var/log/samba/
  • log level
  • debuglevel
  • smbpasswd
  • pdbedit
  • secrets.tdb
  • tdbbackup
  • tdbdump
  • tdbrestore
  • tdbtool


392.5 Internationalization (Peso: 1)

Weight

1

Description

Candidates should be able to work with internationalization character codes and code pages.

Áreas de conocimiento clave:

  • Understand internationalization character codes and code pages
  • Understand the difference in the name space between Windows and Linux/Unix with respect to share, file and directory names in a non-English environment
  • Understand the difference in the name space between Windows and Linux/Unix with respect to user and group naming in a non-English environment
  • Understand the difference in the name space between Windows and Linux/Unix with respect to computer naming in a non-English environment

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • internationalization
  • character codes
  • code pages
  • smb.conf
  • dos charset, display charset and unix charset


Topic 393: Samba Share Configuration

393.1 File Services (Peso: 4)

Weight

4

Description

Candidates should be able to create and configure file shares in a mixed environment.

Áreas de conocimiento clave:

  • Create and configure file sharing
  • Plan file service migration
  • Limit access to IPC$
  • Create scripts for user and group handling of file shares
  • Samba share access configuration parameters

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • smb.conf
  • [homes]
  • smbcquotas
  • smbsh
  • browseable, writeable, valid users, write list, read list, read only and guest ok
  • IPC$
  • mount, smbmount


393.2 Linux File System and Share/Service Permissions (Peso: 3)

Weight

3

Description

Candidates should understand file permissions on a Linux file system in a mixed environment.

Áreas de conocimiento clave:

  • Knowledge of file / directory permission control
  • Understand how Samba interacts with Linux file system permissions and ACLs
  • Use Samba VFS to store Windows ACLs

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • smb.conf
  • chmod, chown
  • create mask, directory mask, force create mode, force directory mode
  • smbcacls
  • getfacl, setfacl
  • vfs_acl_xattr, vfs_acl_tdb and vfs objects


393.3 Print Services (Peso: 2)

Weight

2

Description

Candidates should be able to create and manage print shares in a mixed environment.

Áreas de conocimiento clave:

  • Create and configure printer sharing
  • Configure integration between Samba and CUPS
  • Manage Windows print drivers and configure downloading of print drivers
  • Configure [print$]
  • Understand security concerns with printer sharing
  • Uploading printer drivers for Point'n'Print driver installation using 'Add Print Driver Wizard' in Windows

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • smb.conf
  • [print$]
  • CUPS
  • cupsd.conf
  • /var/spool/samba/
  • smbspool
  • rpcclient
  • net


Topic 394: Samba User and Group Management

394.1 Managing User Accounts and Groups (Peso: 4)

Weight

4

Description

Candidates should be able to manage user and group accounts in a mixed environment.

Áreas de conocimiento clave:

  • Manager user and group accounts
  • Understand user and group mapping
  • Knowledge of user account management tools
  • Use of the smbpasswd program
  • Force ownership of file and directory objects

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • pdbedit
  • smb.conf
  • samba-tool user (with subcommands)
  • samba-tool group (with subcommands)
  • smbpasswd
  • /etc/passwd
  • /etc/group
  • force user, force group
  • idmap


394.2 Authentication, Authorization and Winbind (Peso: 5)

Weight

5

Description

Candidates should understand the various authentication mechanisms and configure access control. Candidates should be able to install and configure the Winbind service.

Áreas de conocimiento clave:

  • Setup a local password database
  • Perform password synchronization
  • Knowledge of different passdb backends
  • Convert between Samba passdb backends
  • Integrate Samba with LDAP
  • Configure Winbind service
  • Configure PAM and NSS

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • smb.conf
  • smbpasswd, tdbsam, ldapsam
  • passdb backend
  • libnss_winbind
  • libpam_winbind
  • libpam_smbpass
  • wbinfo
  • getent
  • SID and foreign SID
  • /etc/passwd
  • /etc/group


Topic 395: Samba Domain Integration

395.1 Samba as a PDC and BDC (Peso: 3)

Weight

3

Description

Candidates should be able to setup and maintain primary and backup domain controllers. Candidates should be able to manage Windows/Linux client access to the NT-Style domains.

Áreas de conocimiento clave:

  • Understand and configure domain membership and trust relationships
  • Create and maintain a primary domain controller with Samba3 and Samba4
  • Create and maintain a backup domain controller with Samba3 and Samba4
  • Add computers to an existing domain
  • Configure logon scripts
  • Configure roaming profiles
  • Configure system policies

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • smb.conf
  • security mode
  • server role
  • domain logons
  • domain master
  • logon script
  • logon path
  • NTConfig.pol
  • net
  • profiles
  • add machine script
  • profile acls


395.2 Samba4 as an AD compatible Domain Controller (Peso: 3)

Weight

3

Description

Candidates should be able to configure Samba 4 as an AD Domain Controller.

Áreas de conocimiento clave:

  • Configure and test Samba 4 as an AD DC
  • Using smbclient to confirm AD operation
  • Understand how Samba integrates with AD services: DNS, Kerberos, NTP, LDAP

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • smb.conf
  • server role
  • samba-tool domain (with subcommands)
  • samba


395.3 Configure Samba as a Domain Member Server (Peso: 3)

Weight

3

Description

Candidates should be able to integrate Linux servers into an environment where Active Directory is present.

Áreas de conocimiento clave:

  • Joining Samba to an existing NT4 domain
  • Joining Samba to an existing AD domain
  • Ability to obtain a TGT from a KDC

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • smb.conf
  • server role
  • server security
  • net command
  • kinit, TGT and REALM



Topic 396: Samba Name Services

396.1 NetBIOS and WINS (Peso: 3)

Weight

3

Description

Candidates should be familiar with NetBIOS/WINS concepts and understand network browsing.

Áreas de conocimiento clave:

  • Understand WINS concepts
  • Understand NetBIOS concepts
  • Understand the role of a local master browser
  • Understand the role of a domain master browser
  • Understand the role of Samba as a WINS server
  • Understand name resolution
  • Configure Samba as a WINS server
  • Configure WINS replication
  • Understand NetBIOS browsing and browser elections
  • Understand NETBIOS name types

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • smb.conf
  • nmblookup
  • smbclient
  • name resolve order
  • lmhosts
  • wins support, wins server, wins proxy, dns proxy
  • domain master, os level, preferred master


396.2 Active Directory Name Resolution (Peso: 2)

Weight

2

Description

Candidates should be familiar with the internal DNS server with Samba4.

Áreas de conocimiento clave:

  • Understand and manage DNS for Samba4 as an AD Domain Controller
  • DNS forwarding with the internal DNS server of Samba4

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • samba-tool dns (with subcommands)
  • smb.conf
  • dns forwarder
  • /etc/resolv.conf
  • dig, host


Topic 397: Working with Linux and Windows Clients

397.1 CIFS Integration (Peso: 3)

Weight

3

Description

Candidates should be comfortable working with CIFS in a mixed environment.

Áreas de conocimiento clave:

  • Understand SMB/CIFS concepts
  • Access and mount remote CIFS shares from a Linux client
  • Securely storing CIFS credentials
  • Understand features and benefits of CIFS
  • Understand permissions and file ownership of remote CIFS shares

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • SMB/CIFS
  • mount, mount.cifs
  • smbclient
  • smbget
  • smbtar
  • smbtree
  • findsmb
  • smb.conf
  • smbcquotas
  • /etc/fstab


397.2 Working with Windows Clients (Peso: 2)

Weight

2

Description

Candidates should be able to interact with remote Windows clients, and configure Windows workstations to access file and print services from Linux servers.

Áreas de conocimiento clave:

  • Knowledge of Windows clients
  • Explore browse lists and SMB clients from Windows
  • Share file / print resources from Windows
  • Use of the smbclient program
  • Use of the Windows net utility

La siguiente es una lista parcial de los archivos, términos y utilidades utilizadas:

  • Windows net command
  • smbclient
  • control panel
  • rdesktop
  • workgroup


Retrieved from "https://wiki.lpi.org/pubwiki/index.php?title=LPIC-3_300_Objectives_V1(ES)&oldid=4304"