LPIC-3 Mixed Environment key terms

The Samba daemon that handles SMB client connections, file and print sharing, authentication, and locking; it listens on TCP 445 and often 139.

The Samba daemon that provides NetBIOS name registration, browsing, and name resolution for legacy SMB clients; modern SMB3 direct hosting on port 445 reduces its importance.

A Samba daemon that queries domain controllers to map Windows SIDs to Unix UIDs and GIDs; it also provides NSS and PAM integration for domain users and groups.

The main Samba configuration file, normally /etc/samba/smb.conf, organized into [global] and share sections; parameters control networking, authentication, logging, and share behavior.

A Samba utility that parses smb.conf, reports syntax errors and unknown parameters, and prints the effective configuration; use -v to show all default settings.

The third major version of the Server Message Block protocol; it adds encryption, continuous availability, multichannel, and stronger signing, and negotiates dialects from SMB 3.0 to 3.1.1.

A Samba password backend storing account and group information in the tdb database, typically private/passdb.tdb; it supports Samba local users but not full Active Directory domain control.

A Samba server role that implements an Active Directory domain controller, providing Kerberos, LDAP, DNS, SMB file services, and Group Policy for domain members.

The primary Samba administrative command for provisioning domains, joining domain controllers, managing users, groups, DNS records, and replication in Samba AD.

The samba-tool subcommand that initializes a new Samba Active Directory forest and domain, creating the initial database, DNS zone, administrator account, and Kerberos configuration.

A file containing long-term Kerberos keys for service principals, often /etc/krb5.keytab; services such as Samba use it to authenticate to the KDC without interactive passwords.

A Samba DNS backend option that stores AD-integrated DNS zones inside Samba's internal database; it avoids BIND but lacks some advanced DNS features.

A set of smb.conf parameters that define how Windows security identifiers map to Unix UIDs and GIDs, specifying the backend and range per domain.

A Samba command that joins a Linux host to an Active Directory domain, creating a machine account and updating the local Kerberos and Samba configuration.

An identifier in Kerberos and Active Directory that names a service instance, such as cifs/fileserver.example.com; Samba registers SPNs for its SMB and HTTP services.

Five special Active Directory operations master roles-schema master, domain naming master, RID master, PDC emulator, and infrastructure master-that Samba AD must assign to domain controllers.

The shared directory in an Active Directory domain that stores Group Policy objects and scripts; Samba AD replicates SYSVOL using its own replication and file synchronization mechanisms.

A section in smb.conf, enclosed in square brackets, that exposes a directory or printer to SMB clients; it inherits global parameters unless overridden locally.

A share-level smb.conf parameter listing users and groups allowed to connect; if set, all other accounts are denied access before filesystem permissions are evaluated.

A Samba share parameter that filters the Unix permission bits assigned to newly created files; directory mask applies the equivalent filter to new directories.

A share parameter that makes all file operations run as a specified Unix account, overriding the connecting user's identity for permission checks and ownership.

A smb.conf parameter that loads Samba virtual file system modules to extend share behavior, such as recycle, full_audit, shadow_copy2, and fruit.

A Samba access control list stored in the share_info.tdb database that grants or denies SMB permissions to users or groups independently of Unix file modes.

A Samba parameter that controls SMB3 encryption requirements or support for a share or globally, with values such as required, desired, and off.

Opportunistic locks that let SMB clients cache file data locally; Samba must break them when another client opens the file, balancing performance and coherence.

Distributed File System, a set of SMB namespaces and referrals that present multiple servers or shares under one tree; Samba can host standalone DFS roots and referrals.

An FTP-like command-line SMB client used to list shares, transfer files, and test authentication; it supports Kerberos, SMB3 encryption, and tar backups.

A Linux mount helper that mounts an SMB/CIFS share into the local filesystem, accepting options for credentials, Kerberos, permissions, and protocol version.

The Linux package providing mount.cifs, cifscreds, and related tools needed to mount and manage SMB/CIFS filesystems from Linux clients.

A text file containing a username, password, and optionally domain, referenced by mount.cifs or smbclient to avoid exposing secrets on command lines.

A CIFS mount option that lets each local user access the share with their own credentials after the initial mount, rather than sharing one identity.

A command-line Samba tool that issues MS-RPC calls to SMB servers for tasks such as querying users, groups, shares, and domain information.

A Samba utility that reports current SMB connections, open files, and locked files, useful for troubleshooting share access and sessions.

The System Security Services Daemon caches and retrieves identity and authentication data from remote providers such as LDAP, Kerberos, and Active Directory for Linux.

The Linux configuration file that controls the order of name service sources for passwd, group, hosts, and other databases; domain integration adds sss or winbind.

Pluggable Authentication Modules, a Linux framework that stacks authentication, account, session, and password modules; pam_sss and pam_winbind connect logins to central identity providers.

A Linux service that discovers and joins Active Directory or IPA domains, configuring SSSD, Kerberos, and PAM automatically; controlled with the realm command.

The main SSSD configuration file, typically /etc/sssd/sssd.conf, defining domains, identity providers, access control, cache settings, and Kerberos parameters.

A Samba winbind utility that queries domain users, groups, SIDs, and trusts; it tests whether winbindd and the idmap configuration resolve identities correctly.

A Windows security identifier, a variable-length binary value identifying a user, group, or computer; Samba maps SIDs to Unix UIDs and GIDs.