LPIC-3 300 Objectives V1
Introduction
Version Information
These objectives are version 1.0.0rc1. Objective renumbering will need to be done.
Addenda
Version Update Addendum (Apr 1st, 2013)
- released version 1.0.0rc1.
Translations of Objectives
The following translations of the objectives are available on this wiki:
Objectives
Topic 303: OpenLDAP Configuration
303.3 OpenLDAP Replication (weight: 3)
|
Weight |
3 |
|
Description |
Candidates should be familiar with the server replication available with OpenLDAP. |
Key Knowledge Areas:
- Replication concepts.
- Configure OpenLDAP replication.
- Analyze replication log files.
- Understand replica hubs.
- LDAP referrals.
- LDAP sync replication.
The following is a partial list of the used files, terms and utilities:
- master / slave server
- multi-master replication
- consumer
- replica hub
- one-shot mode
- referral
- syncrepl
- pull-based / push-based synchronization
- refreshOnly and refreshAndPersist
- replog
303.4 Securing the Directory (weight: 3)
|
Weight |
3 |
|
Description |
Candidates should be able to configure encrypted access to the LDAP directory, and restrict access at the firewall level. |
Key Knowledge Areas:
- Securing the directory with SSL and TLS.
- Firewall considerations.
- Unauthenticated access methods.
- User / password authentication methods.
- Maintanence of SASL user DB.
- Client / server certificates.
The following is a partial list of the used files, terms and utilities:
- SSL / TLS
- Security Strength Factors (SSF)
- SASL
- proxy authorization
- StartTLS
- iptables
303.5 OpenLDAP Server Performance Tuning (weight: 2)
|
Weight |
2 |
|
Description |
Candidates should be capable of measuring the performance of an LDAP server, and tuning configuration directives |
Key Knowledge Areas:
- Measure OpenLDAP performance.
- Tune software configuration to increase performance.
- Understand indexes.
The following is a partial list of the used files, terms and utilities:
- index
- DB_CONFIG
Topic 305: OpenLDAP as an Authentication Backend
305.1 LDAP Integration with PAM and NSS (weight: 2)
|
Weight |
2 |
|
Description |
Candidates should be able to configure PAM and NSS to retrieve information from an LDAP directory. |
Key Knowledge Areas:
- Configure PAM to use LDAP for authentication.
- Configure NSS to retrieve information from LDAP.
- Configure PAM modules in various Unix environments.
The following is a partial list of the used files, terms and utilities:
- PAM
- NSS
- /etc/pam.d/*
- /etc/nsswitch.conf
305.5 Integrating LDAP with Active Directory and Kerberos (weight: 2)
|
Weight |
2 |
|
Description |
Candidates should be able to integrate LDAP with Active Directory Services. |
Key Knowledge Areas:
- Kerberos integration with LDAP.
- Cross platform authentication.
- Single sign-on concepts.
- Integration and compatibility limitations between OpenLDAP and Active Directory.
The following is a partial list of the used files, terms and utilities:
- Kerberos
- Active Directory
- single sign-on
- DNS
Topic 310: Samba Basics
310.1 Samba Concepts and Architecture (weight: 1)
| Weight | 1 |
| Description | Candidates should understand the essential concepts of Samba. As well, the major differences between Samba3 and Samba4 should be known. |
Key Knowledge Areas:
- Understand the roles of the Samba daemons and components
- Understand key issues regarding heterogeneous networks
- Identify key TCP/UDP ports used with SMB/CIFS
- Knowledge of Samba3 and Samba4 differences
The following is a partial list of the used files, terms and utilities:
- /etc/services
- Samba daemons: smbd, nmbd, samba, winbindd
312.1 Configure Samba (weight: 6)
| Weight | 6 |
| Description | Candidates should be able to configure the Samba daemons for a wide variety of purposes |
Key Knowledge Areas:
- Knowledge of Samba server configuration file structure
- Knowledge of Samba variables and configuration parameters
- Troubleshoot and debug configuration problems with Samba
The following is a partial list of the used files, terms and utilities:
- smb.conf
- smb.conf parameters
- smb.conf variables
- testparm
- secrets.tdb
310.2 Regular Samba Maintenance (weight: 1)
| Weight | 2 |
| Description | Candidates should know about the various tools and utilities that are part of a Samba installation. |
Key Knowledge Areas:
- Monitor and interact with running Samba daemons
- Perform regular backups of Samba configuration and state data
The following is a partial list of the used files, terms and utilities:
- smbcontrol
- smbstatus
- tdbbackup
310.3 Troubleshooting Samba (weight: 2)
| Weight | 2 |
| Description | Candidates should understand the structure of trivial database files and know how troubleshoot problems |
Key Knowledge Areas:
- Configure Samba logging
- Backup TDB files
- Restore TDB files
- Identify TDB file corruption
- Edit / list TDB file content
The following is a partial list of the used files, terms and utilities:
- /var/log/samba/*
- log level
- debuglevel
- smbpasswd
- pdbedit
- secrets.tdb
- tdbbackup
- tdbdump
- tdbrestore
- tdbtool
312.6 Internationalization (weight: 1)
| Weight | 1 |
| Description | Candidates should be able to work with internationalization character codes and code pages |
Key Knowledge Areas:
- Understand internationalization character codes and code pages
- Understand the difference in the name space between Windows and Linux/Unix with respect to share, file and directory names in a non-English environment
- Understand the difference in the name space between Windows and Linux/Unix with respect to user and group naming in a non-English environment
- Understand the difference in the name space between Windows and Linux/Unix with respect to computer naming in a non-English environment
The following is a partial list of the used files, terms and utilities:
- internationalization
- character codes
- code pages
- smb.conf
- dos charset, display charset and unix charset
Topic 312: Samba Share Configuration
312.2 File Services (weight: 4)
| Weight | 4 |
| Description | Candidates should be able to create and configure file shares in a mixed environment |
Key Knowledge Areas:
- Create and configure file sharing
- Plan file service migration
- Limit access to IPC$
- Create scripts for user and group handling of file shares
- Samba share access configuration parameters
The following is a partial list of the used files, terms and utilities:
- smb.conf
- [homes]
- smbcquotas
- smbsh
- browseable, writeable, valid users, write list and guest ok
- IPC$
- mount, smbmount
315.1 Linux File System and Share/Service Permissions (weight: 3)
| Weight | 3 |
| Description | Candidates should understand file permissions on a Linux file system in a mixed environment |
Key Knowledge Areas:
- Knowledge of file / directory permission control
- Understand how Samba interacts with Linux file system permissions and ACLs
- Use Samba VFS to store Windows ACLs
The following is a partial list of the used files, terms and utilities:
- smb.conf
- chmod, chown
- create mask
- directory mask
- getfacl, setfacl
- vfs_acl_xattr, vfs_acl_tdb and vfs objects
312.3 Print Services (weight: 2)
| Weight | 2 |
| Description | Candidates should be able to create and manage print shares in a mixed environment |
Key Knowledge Areas:
- Create and configure printer sharing
- Configure integration between Samba and CUPS
- Manage Windows print drivers and configure downloading of print drivers
- Configure [print$]
- Understand security concerns with printer sharing
The following is a partial list of the used files, terms and utilities:
- smb.conf
- [print$]
- CUPS
- cupsd.conf
- /var/spool/samba
- smbspool
Topic 313: Samba User and Group Management
313.1 Managing User Accounts and Groups (weight: 4)
| Weight | 4 |
| Description | Candidates should be able to manage user and group accounts in a mixed environment |
Key Knowledge Areas:
- Manager user and group accounts
- Understand user and group mapping
- Knowledge of user account management tools
- Use of the smbpasswd program
- Force ownership of file and directory objects
The following is a partial list of the used files, terms and utilities:
- pdbedit
- smb.conf
- samba-tool user (with subcommands)
- samba-tool group (with subcommands)
- smbpasswd
- /etc/passwd
- /etc/group
- force user, force group
- idmap
313.2 Authentication, Authorization and Winbind (weight: 8)
| Weight | 8 |
| Description | Candidates should understand the various authentication mechanisms and configure access control. Candidates should be able to install and configure the Winbind service. |
Key Knowledge Areas:
- Setup a local password database
- Knowledge of the smbpasswd file format
- Perform password synchronization
- Knowledge of alternative backend storage for passwords
- Integrate Samba with LDAP
- Configure Winbind service
- Configure PAM and NSS
The following is a partial list of the used files, terms and utilities:
- smb.conf
- smbpasswd
- passdb backend
- libnss_winbind
- libpam_winbind
- libpam_smbpass
- wbinfo
- SID and foreign SID
- /etc/passwd
- /etc/group
Topic 314: Samba Domain Integration
312.4 Samba as a PDC and BDC (weight: 4)
| Weight | 4 |
| Description | Candidates should be able to setup and maintain primary and backup domain controllers, and manage Windows/Linux clients' access to the domain |
Key Knowledge Areas:
- Understand domain membership
- Create and maintain a primary domain controller
- Create and maintain a backup domain controller
- Add computers to an existing domain
- Configure logon scripts
- Configure roaming profiles
- Configure system policies
The following is a partial list of the used files, terms and utilities:
- smb.conf
- primary domain controller
- backup domain controller
- domain membership
- roaming profiles
- system policies
- logon scripts
- Active Directory
- LDAP
- trust relationships
314.3 Samba4 as an AD compatible Domain Controller (weight: 3)
| Weight | 3 |
| Description | Candidates should be able to configure Samba 4 as an AD Domain Controller |
Key Knowledge Areas:
- Configure and test Samba 4 as an AD DC
- Understand how Samba integrates with AD services; DNS, Kerberos, NTP, ACLs
The following is a partial list of the used files, terms and utilities:
- samba-tool domain provision
- samba
- smbclient
- getent
314.3 Integrating with Active Directory (weight: 2)
| Weight | 2 |
| Description | Candidates should be able to integrate Linux servers into an environment where Active Directory is present |
Key Knowledge Areas:
- List remove Active Directory / LDAP users
- Configure Samba in ADS security mode
- Knowledge of the DNS requirements for Active Directory
The following is a partial list of the used files, terms and utilities:
- Active Directory
- ADS Security Mode
- DNS
- LDAP
- Windows' net command
- Kerberos
- domain
- smb.conf
- smbcalcs
Topic 314: Samba Name Services
314.2 NetBIOS and WINS (weight: 6)
| Weight | 6 |
| Description | Candidates should be familiar with NetBIOS/WINS concepts and understand network browsing |
Key Knowledge Areas:
- Understand WINS concepts
- Understand NetBIOS concepts
- Understand the role of a local master browser
- Understand the role of a domain master browser
- Understand the role of Samba as a WINS server
- Understand name resolution
- Configure Samba as a WINS server
- Configure WINS replication
- Understand NetBIOS browsing, service announcements and elections
The following is a partial list of the used files, terms and utilities:
- NetBIOS
- NBT
- WINS
- local master browser
- domain master browser
- service announcements
- elections
- node types
- smbclient
- name resolve order
- lmhosts
314.2 Active Directory Name Resolution (weight: 3)
| Weight | 3 |
| Description | Candidates should be familiar with the internal DNS server with Samba4. |
Key Knowledge Areas:
- Understand and manage DNS for Samba4 as an AD Domain Controller
- DNS forwarding
The following is a partial list of the used files, terms and utilities:
- samba-tool
- /etc/resolv.conf
Topic 314: Working with Linux and Windows Clients
314.1 CIFS Integration (weight: 3)
| Weight | 3 |
| Description | Candidates should be comfortable working with CIFS in a mixed environment |
Key Knowledge Areas:
- Understand SMB/CIFS concepts
- Mount remote CIFS shares from a Linux client
- Understand features and benefits of CIFS
The following is a partial list of the used files, terms and utilities:
- SMB
- CIFS
- mount, smbmount
- smbclient
- smbtar
- smb.conf
- /etc/fstab
314.4 Working with Windows Clients (weight: 4)
| Weight | 4 |
| Description | Clients should be able to interact with remote Windows clients, and configure Windows workstations to access file and print services from Linux servers |
Key Knowledge Areas:
- Knowledge of Windows clients
- Explore browse lists and SMB clients from Windows
- Share file / print resources from Windows
- Use of the smbclient program
- Use of the Windows net utility
The following is a partial list of the used files, terms and utilities:
- Windows' net command
- smbclient
- mount, smbmount
- control panel
- rdesktop
- workgroup
- smbget
- smbtree
- findsmb
Topic 315: Security and Performance
315.2 Samba Security (weight: 2)
| Weight | 2 |
| Description | Candidates should be able to secure Samba at both the firewall level, and the Samba daemons themselves |
Key Knowledge Areas:
- Configure access to and from a Samba server at the firewall level
- Configure security relate parameters in the smb.conf file
The following is a partial list of the used files, terms and utilities:
- iptables
- smb.conf
- /etc/services
- security modes
315.3 Performance Tuning (weight: 1)
| Weight | 1 |
| Description | Candidates should be able to cluster services for load balancing and high availability purposes, and tune Samba settings for better server and network performance |
Key Knowledge Areas:
- Measure Samba performance
- Optimize Samba memory usage
- Improve file transfer speed in a SMB/CIFS environment
The following is a partial list of the used files, terms and utilities:
- smb.conf
- 'max *' parameters
- netstat
- smbstatus
- socket options
