LPIC-2 Network Client Management Practice Question
Exhibit
Refer to the exhibit. passwd: files ldap group: files ldap shadow: files ldap netgroup: ldap
A new user has been added to the LDAP directory, but the user cannot log in. The admin confirms the LDAP server is reachable and the user entry exists. Which of the following is the most likely missing configuration?
⚠ Common exam trap
Many exam-takers confuse name service resolution (nsswitch.conf) with authentication (PAM), assuming that if getent shows the user, login should work, but PAM is the gatekeeper for authentication and must be explicitly configured.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The PAM configuration does not include pam_ldap.
D is correct because even if the LDAP server is reachable and the user entry exists, the system must be configured to use LDAP for authentication. PAM (Pluggable Authentication Modules) controls how authentication is performed; without pam_ldap (or pam_ldap.so) in the PAM stack, the system will not consult the LDAP server during login, so authentication fails regardless of the LDAP directory contents.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The LDAP server does not have the correct schema for the user.
Why it's wrong here
If the user entry exists, schema is likely correct.
- ✗
The nscd cache is stale and needs to be cleared.
Why it's wrong here
Caching may delay recognition but authentication would still work after cache flush.
- ✗
The nsswitch.conf file should have 'ldap' before 'files' for passwd.
Why it's wrong here
The order affects resolution but not authentication; the user entry exists and is found via 'files ldap'.
- ✓
The PAM configuration does not include pam_ldap.
Why this is correct
PAM is responsible for authentication; without pam_ldap, LDAP users cannot authenticate.
Go deeper
Related to this question
About these practice questions
Courseiva writes every LPIC-2 question from scratch — 507 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This LPIC-2 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-2 exam.