Topic 210: Network Client Management

Perteneciente a LPIC-2

Módulos:

• 210.1 DHCP configuration (2)
• 210.2 PAM authentication (3)
• 210.3 LDAP client usage (2)
• 210.4 Configuring an OpenLDAP server (4)

De cara al examen, habría que tener claro:

• Configurar un servidor DHCP básico.
• Usar un cliente DHCP.
• Comprender la autentificación modular PAM.
• Conocer los principales módulos PAM.
• Modificar la configuración PAM para permitir cambios en la forma de autenticarse.
• Conocer el formato de los archivos LDIF.
• Consultar un directorio LDAP.
• Administrar las contraseñas en un directorio OpenLDAP.
• Añadir o modificar elementos de un directorio OpenLDAP.
• Configurar la autentificación de un sistema Linux en un directorio OpenLDAP.

Which dhcpd.conf option defines the DNS server address(es) to be sent to the DHCP clients?

• domainname
• domain-name-servers (Solución)
• domain-nameserver
• domain-name-server

A network has many network printers connected and they should get their addresses using DHCP. What information from each printer is needed to always assign them the same IP address when dhcpd is used as the DHCP server?

• MAC address (Solución)
• Host name
• Serial number
• Factory default IP address
• Built-in network card type

In a PAM configuration file, a sufficient control allows access:

• Immediately on success, if no previous required or requisite control failed. (Solución)
• Immediately on success, regardless of other controls.
• After waiting if all other controls return success.
• Immediately, but only if the user is root.

LDAP-based authentication against a newly-installed LDAP server does not work as expected. The file /etc/pam.d/login includes the following configuration parameters. Which of them is NOT correct?

• password required /lib/security/pam_ldap.so
• auth sufficient /lib/security/pam_ldap.so use_first_pass
• account sufficient /lib/security/pam_ldap.so
• password required /lib/security/pam_pwdb.so
• auth required /lib/security/pam_ldap.so (Solución)

Deberíamos especificar sufficient porque si hay cualquier fallo con LDAP, el siguiente paso podría ir al módulo pam_unix por ejemplo.

Which command can be used to change the password for an LDAP entry? (CORRECT TEXT)

• ldapmodify

For an LDAP client configuration, the LDAP base needs to be set. Which TWO of the following actions would achieve that?

• export LDAPBASE=dc=linuxfoo,dc=com (Solución)
• export BASE=dc=linuxfoo,dc=com
• Edit ldapbase.conf and add BASE dc=linuxfoo,dc=com
• Edit cldap.conf and add BASE dc=linuxfoo,dc=com
• Edit ldap.conf and add BASE dc=linuxfoo,dc=com (Solución)

To configure an LDAP service in the company “ Certkiller Ltd”, which of the following entries should be added to slapd.conf, in the Database Directives section, to set the rootdn so that the common name is Manager and the company's domain is Certkiller.com ?

• rootdn cn=Manager dc=Certkiller dc=com
• rootdn "cn=Manager,dc=Certkiller,dc=com" (Solución)
• rootdn cn=Certkiller,dc=com,dc=Manager
• rootdn "cn=Certkiller,dc=com,dc=Manager"
• rootdn "cn=Manager dc=Certkiller dc=com"

Which of the following are benefits of using PAM modules for authentication? (Choose all that apply.) Choose the 3 correct answers:

• None of the Above
• Password Control (Solución)
• User Control (Solución)
• Environment (Solución)

Which of the following will allow a server to listen for DHCP requests on a network segment without a dedicated DHCP server and forward the request to one on another network?

• DCHP Relay Agent (Solución)
• DHCP Daemon
• None of the Above
• DHCP Forwarder

Why is the 'pam_limits.so' module different than all the rest of the PAM modules?

• It does not deal with passwords
• None of the above
• It controls limits rather than authentication
• It is modified by the /etc/security/limits.conf file rather than with parameters (Solución)

DHCP stands for Domain Host Configuration Protocol.

• Verdadero
• Falso (Solución)

DHCP corresponde a Dynamic Host Configuration Protocol.

The /etc/nsswitch.conf file determines the order that authentication methods are applied to accounts, files or services.

• Verdadero (Solución)
• Falso