LPIC-2 Network Client Management Practice Question
Which TWO authentication modules can be used with PAM to integrate LDAP authentication on a Linux client?
⚠ Common exam trap
Many exam-takers confuse pam_ldap with pam_unix or think pam_radius can be used for LDAP, but the exam expects knowledge of the specific PAM modules designed for directory services and Kerberos integration.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
pam_krb5
Option B (pam_krb5) is correct because it allows PAM to authenticate users via Kerberos, which is frequently used as the authentication backend for LDAP directories. In typical enterprise deployments, LDAP stores user attributes while Kerberos handles the actual authentication; integrating LDAP authentication on a Linux client therefore often requires both pam_ldap (for user information) and pam_krb5 (for authentication). Option E (pam_ldap) is correct because it directly enables PAM to perform LDAP bind operations for user authentication. Both modules together provide a complete LDAP-based authentication solution.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
pam_unix
Why it's wrong here
pam_unix is for local /etc/shadow authentication.
- ✓
pam_krb5
Why this is correct
pam_krb5 can be used for Kerberos authentication, often with LDAP.
- ✗
pam_radius
Why it's wrong here
pam_radius is for RADIUS authentication.
- ✗
pam_tally2
Why it's wrong here
pam_tally2 is for account locking, not authentication.
- ✓
pam_ldap
Why this is correct
pam_ldap provides direct LDAP authentication.
Go deeper
Related to this question
About these practice questions
Courseiva writes every LPIC-2 question from scratch — 507 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This LPIC-2 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-2 exam.