LPIC-2 File Sharing and Samba Practice Question
A Samba server configured as an Active Directory domain member is unable to authenticate users from the domain. The administrator verifies that DNS resolution works, but `wbinfo -u` returns no output. What is the most likely cause?
⚠ Common exam trap
A common mix-up: candidates assume DNS or Kerberos issues are the root cause because they are common in domain authentication problems, but the specific symptom of `wbinfo -u` returning no output directly points to the winbind service not running, not to higher-layer protocol failures.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The winbind service is not running.
The `wbinfo -u` command queries the winbind service to list domain users. If it returns no output, the most likely cause is that the winbind service is not running, as it is responsible for resolving Windows domain users and groups on a Samba member server. Without winbind, Samba cannot authenticate domain users even if DNS and Kerberos are working correctly.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The smb.conf file is missing the 'idmap config' lines.
Why it's wrong here
Missing idmap config may cause mapping issues but not necessarily empty `wbinfo -u` output.
- ✓
The winbind service is not running.
Why this is correct
If winbind is not running, `wbinfo -u` cannot retrieve domain users.
- ✗
The Kerberos ticket is expired.
Why it's wrong here
Kerberos tickets affect authentication, but `wbinfo -u` uses the machine account, not user tickets.
- ✗
The system clock is not synchronized with the domain controller.
Why it's wrong here
Clock skew prevents Kerberos auth but does not cause `wbinfo -u` to return empty; winbind would still try.
Visual reference
Go deeper
Related to this question
About these practice questions
This LPIC-2 question is part of Courseiva's 507-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This LPIC-2 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-2 exam.