Perteneciente a LPIC-2

Módulos:

• 210.1 DHCP configuration (2)
• 210.2 PAM authentication (3)
• 210.3 LDAP client usage (2)
• 210.4 Configuring an OpenLDAP server (4)

De cara al examen, habría que tener claro:

• Configurar un servidor DHCP básico.
• Usar un cliente DHCP.
• Comprender la autentificación modular PAM.
• Conocer los principales módulos PAM.
• Modificar la configuración PAM para permitir cambios en la forma de autentificarse.
• Conocer el formato de los archivos LDIF.
• Consultar un directorio LDAP.
• Administrar las contraseñas en un directorio OpenLDAP.
• Añadir o modificar elementos de un directorio OpenLDAP.
• Configurar la autentificación de un sistema Linux en un directorio OpenLDAP.

Which dhcpd.conf option defines the DNS server address(es) to be sent to the DHCP clients?

• domainname
• domain-name-servers (Solución)
• domain-nameserver
• domain-name-server

A network has many network printers connected and they should get their addresses using DHCP. What information from each printer is needed to always assign them the same IP address when dhcpd is used as the DHCP server?

• MAC address (Solución)
• Host name
• Serial number
• Factory default IP address
• Built-in network card type

In a PAM configuration file, a sufficient control allows access:

• Immediately on success, if no previous required or requisite control failed. (Solución)
• Immediately on success, regardless of other controls.
• After waiting if all other controls return success.
• Immediately, but only if the user is root.

LDAP-based authentication against a newly-installed LDAP server does not work as expected. The file /etc/pam.d/login includes the following configuration parameters. Which of them is NOT correct?

• password required /lib/security/pam_ldap.so
• auth sufficient /lib/security/pam_ldap.so use_first_pass
• account sufficient /lib/security/pam_ldap.so
• password required /lib/security/pam_pwdb.so
• auth required /lib/security/pam_ldap.so (Solución)

Deberíamos especificar sufficient porque si hay cualquier fallo con LDAP, el siguiente paso podría ir al módulo pam_unix por ejemplo.

Which command can be used to change the password for an LDAP entry? (CORRECT TEXT)

• ldapmodify

For an LDAP client configuration, the LDAP base needs to be set. Which TWO of the following actions would achieve that?

• export LDAPBASE=dc=linuxfoo,dc=com (Solución)
• export BASE=dc=linuxfoo,dc=com
• Edit ldapbase.conf and add BASE dc=linuxfoo,dc=com
• Edit cldap.conf and add BASE dc=linuxfoo,dc=com
• Edit ldap.conf and add BASE dc=linuxfoo,dc=com (Solución)

To configure an LDAP service in the company “ Certkiller Ltd”, which of the following entries should be added to slapd.conf, in the Database Directives section, to set the rootdn so that the common name is Manager and the company's domain is Certkiller.com ?

• rootdn cn=Manager dc=Certkiller dc=com
• rootdn "cn=Manager,dc=Certkiller,dc=com" (Solución)
• rootdn cn=Certkiller,dc=com,dc=Manager
• rootdn "cn=Certkiller,dc=com,dc=Manager"
• rootdn "cn=Manager dc=Certkiller dc=com"