Exam 302: Detailed Objectives
The successful completion of this exam entitles candidates to the specialty designation: LPI 302: Mixed Environments
- Concepts, Architecture and Design
- Installation and Development
- Configuration
- User and Group Management
- Working with CIFS, NetBIOS, and Active Directory
- Security and Performance
Topic 310: Concepts, Architecture and Design
310.1 Concepts
- Weight: 1
- Description: Candidates should be familiar with the fundamental concepts surrounding SMB/CIFS, file sharing and print services in a mixed environment.
Key Knowledge Areas
- Understand SMB/CIFS concepts
- Understand file sharing concepts
- Understand print services concepts
Terms and Utilities
- SMB
- CIFS
- smb.conf
310.2 Samba Roles
- Weight: 1
- Description: Candidates should be aware of Samba's security modes, and the key roles of the Samba daemons.
Key Knowledge Areas
- Understand Samba security modes
- Identify roles of core Samba daemons
- Manage Samba daemons
Terms and Utilities
- User Level Security
- Share Level Security
- Domain Security Mode
- ADS Security Mode
- smb.conf
- smbd
- nmbd
- winbindd
- smbcontrol
310.3 Trivial Database Files
- Weight: 2
- Description: Candidates should understand the structure of trivial database files and know how to troubleshoot problems.
Key Knowledge Areas
- Backup TDB files
- Restore TDB files
- Identify TDB file corruption
- Edit / list TDB file content
Terms and Utilities
- pdbedit
- secrets.tdb
- tdbbackup
- tdbdump
- tdbtool
- smbpasswd
Topic 311: Installation and Development
311.1 Compile and Install Samba
- Weight: 1
- Description: Configure and Build From Source.
Key Knowledge Areas
- Identify key Samba packages and content
- Identify and resolve dependencies
- Describe Samba software structure
- Knowledge of common Samba compilation options
Terms and Utilities
- gzip
- gpg
- make
311.2 Install and Upgrade Samba
- Weight: 1
- Description: Candidates should be able to install and upgrade Samba from source and from packages.
Key Knowledge Areas
- Install Samba from packages
- Install Samba from source
- Upgrade Samba
- gpg
- dpkg
- rpm
Terms and Utilities
Topic 312: Configuration
312.1 Configure Samba
- Weight: 6
- Description: Candidates should be able to configure the Samba daemons for a wide variety of purposes.
Key Knowledge Areas
- Knowledge of Samba server configuration file structure
- Knowledge of Samba variables and configuration parameters
- Identify key TCP/UDP ports used with SMB/CIFS
- Configure Samba logging
- Troubleshoot and debug problems with Samba
Terms and Utilities
- smb.conf parameters
- smb.conf variables
- /etc/services
- /var/log/samba/*
- log level
- debuglevel
- testparm
- smbtar
- strace
312.2 File Services
- Weight: 4
- Description: Candidates should be able to create and configure file shares in a mixed environment.
Key Knowledge Areas
- Create and configure file sharing
- Plan file service migration
- Hide IPC$
- Create scripts for user and group handling of file shares
- smbcquotas
- smbsh
Terms and Utilities
- smb.conf
- [homes]
- browseable, writeable, valid users
- IPC$
- mount, smbmount
312.3 Print Services
- Weight: 2
- Description: Candidates should be able to create and manage print shares in a mixed environment.
Key Knowledge Areas
- Create and configure printer sharing
- Configure integration between Samba and CUPS
- Manage Windows print drivers and configure downloading of print drivers
- Configure [print$]
- Understand security concerns with printer sharing
- Setup and manage print accounting
Terms and Utilities
- smb.conf
- [print$]
- CUPS
- cupsd.conf
- /var/spool/samba
- print accounting
- smbprngenpdf
- smbspool
312.4 Domain Control
- Weight: 4
- Description: Candidates should be able to setup and maintain primary and backup domain controllers, and manage Windows/Linux clients' access to the domain.
Key Knowledge Areas
- Understand domain membership
- Create and maintain a primary domain controller
- Create and maintain a backup domain controller
- Add computers to an existing domain
- Configure logon scripts
- Configure roaming profiles
- Configure system policies
Terms and Utilities
- primary domain controller
- backup domain controller
- domain membership
- roaming profiles
- system policies
- logon scripts
- Active Directory
- LDAP
- trust relationships
312.5 SWAT Configuration
- Weight: 1
- Description: Candidates should be able to install and configure the Samba web administration tool, and be comfortable with configuring changes to Samba within it.
Key Knowledge Areas
- Knowledge of SWAT features
- Install and configure SWAT
- Configure the Samba server via the SWAT interface
Terms and Utilities
- smb.conf
- /usr/sbin/swat
- internationalization
- SSL
- SWAT wizard
312.6 Internationalization
- Weight: 1
- Description: Candidates should be able to work with internationalization character codes and code pages.
Key Knowledge Areas
- Understand internationalization character codes and code pages
- Patch and build appropriate code conversion libraries
- Understand the difference in the name space between Windows and Linux/Unix with respect to user and group naming in a non-English environment
- Understand the difference in the name space between Windows and Linux/Unix with respect to computer naming in a non-English environment
Terms and Utilities
- internationalization
- character codes
- code pages
- smb.conf
- code conversion libraries
Topic 313: User and Group Management
313.1 Managing User Accounts and Groups
- Weight: 4
- Description: Candidates should be able to manage user and group accounts in a mixed environment.
Key Knowledge Areas
- Manager user and group accounts
- Understand user and group mapping
- Knowledge of user account management tools
- Use of the smbpasswd program
- Force ownership of file and directory objects
Terms and Utilities
- smb.conf
- /usr/bin/smbpasswd
- /etc/passwd
- /etc/group
- force user, force group
- idmap
313.2 Authentication and Authorization
- Weight: 8
- Description: Candidates should understand the various authentication mechanisms and configure access control.
Key Knowledge Areas
- Setup a local password database
- Knowledge of the smbpasswd file format
- Perform password synchronization
- Knowledge of alternative backend storage for passwords
- Integrate Samba with LDAP
- Understand access control lists
Terms and Utilities
- smb.conf
- smbpasswd
- passdb backend
- security mask
- PAM
- NSS
- password synchronization
- LDAP
313.3 Winbind
- Weight: 2
- Description: Candidates should be able to install and configure the Winbind service.
Key Knowledge Areas
- Install Winbind
- Configure Winbind
Terms and Utilities
- smb.conf
- winbindd
- PAM
- NSCD
- SID
- /etc/passwd
- /etc/group
- foreign SID