Skip to content
LFCSUsers and GroupsSingle Linux VMHard

Shared directory with ACLs and LDAP accounts through SSSD

Scenario lfcs-usr-002 · about 8 minutes · 9 points · 8 grader checks

Set up a setgid project directory with access and default ACLs, then make the host resolve users and groups from a local LDAP server through SSSD.

  • acl
  • setgid
  • ldap
  • sssd
  • nss
  • pam

What you will practise

  • Create a setgid shared directory
  • Grant access with access and default ACLs
  • Configure SSSD for LDAP users and groups
  • Create home directories at first login

Start this lab

With the CLI installed and signed in, this command provisions a fresh Ubuntu 24.04 LTS virtual machine on your Mac, applies the scenario setup and prints the task below.

goldenkube start lfcs-usr-002

Task

The task text exactly as the CLI shows it. Solve it on the machine, then run goldenkube submit.

1. /srv/projects/alpha is the shared directory of the group devs: - group owner devs, members of devs may create, read and modify files in it, everybody else except qa has no access (mode 2770: new files belong to devs) - members of qa can list it and read the files in it, including files and directories created later, but cannot change anything. 2. An LDAP server runs on this host: ldap://127.0.0.1, base dc=lab,dc=internal, anonymous read allowed, no TLS. Configure SSSD so that its users and groups (for example ldapuser1 and the group ldapstaff) are known to the system, and so that a home directory is created at an LDAP user's first login. SSSD must be running now and start at boot. Do not create local copies of the LDAP accounts.

Requirements and details

Certification
LFCS · Linux Foundation Certified System Administrator
Domain
Users and Groups
Difficulty
Hard
Environment
Single Linux VM
Recommended time
8 minutes
Points
9
Grader checks
8
Operating system
Ubuntu 24.04 LTS
Minimum CLI version
0.1.0
Scenario version
1
Published

Grading runs locally: 8 state checks read your machine when you submit; the scenario passes when every check passes. Hints, the reference solution and the check definitions are available only inside the CLI, not on this page.

Install the CLICreate a free account

More Users and Groups labs

LFCSUsers and GroupsMedium

Users, groups, password ageing, profiles and resource limits

Create a group, a user with fixed IDs, expiry and ageing, a system account, a system-wide and a personal environment variable, and per-group limits.

Single Linux VM · ~6 min · 9 points

  • useradd
  • groupadd
  • chage
  • profile
  • limits
  • pam-limits

goldenkube start lfcs-usr-001

Independent community project, not affiliated with or endorsed by CNCF or The Linux Foundation. Lab results are practice feedback, not an exam score.