RedHat EX200 Exam - Topic 1 Question 115 Discussion

Actual exam question for RedHat's EX200 exam

Question #: 115
Topic #: 1

Binding to an external validation server.

System server.domain11.example.com provides a LDAP validation service, your system should bind to this service as required:

Base DN of validation service is dc=example,dc=com

LDAP is used for providing account information and validation information Connecting and using the certification of http://server.domain11.example.com/pub/EXAMPLE-CA-CERT to encrypt

After the correct configuration, ldapuser1 can log into your system, it does not have HOME directory until you finish autofs questions, ldapuser1 password is password.

AExplanation:
yum -y install sssd authconfig-gtk krb5-workstation authconfig-gtk // open the graphical interface
Modify user account database to ldap, fill up DN and LDAP SERVER as questions required, use TLS to encrypt connections making tick, write http://server.domain11.example.com/pub/EXAMPLE-CA-CERT to download ca, authentication method choose ldap password.
You can test if the ldapuser is added by the following command:
Id ldapuser1
Note: user password doesn't not need to set

Show Suggested Answer

Suggested Answer: A

by Christiane at Jul 09, 2025, 03:29 PM

Limited Time Offer

25%

Off

Get Premium EX200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Marti

2 months ago

I think you need to set a HOME directory for ldapuser1 eventually.

upvoted 0 times

...

Rolande

2 months ago

Wait, the password is just "password"? That seems risky!

upvoted 0 times

...

Linn

3 months ago

Don't forget to test with "id ldapuser1" to confirm it's working!

upvoted 0 times

...

Lucy

3 months ago

Agreed, make sure to use TLS for security!

upvoted 0 times

...

Eloisa

3 months ago

Just a heads up, the Base DN is dc=example,dc=com.

upvoted 0 times

...

Elroy

3 months ago

I recall that we need to ensure TLS is enabled for secure connections, but I’m a bit uncertain about how to verify if ldapuser1 is properly added.

upvoted 0 times

...

Ora

4 months ago

I feel confident about using `authconfig-gtk` to modify the user account database, but I might mix up the DN format.

upvoted 0 times

...

Aliza

4 months ago

I think we had a similar question in our last mock exam about setting up LDAP with TLS. I should double-check the steps for downloading the CA certificate.

upvoted 0 times

...

Devorah

4 months ago

I remember we practiced binding to an LDAP server, but I'm not entirely sure about the exact commands to use for the configuration.

upvoted 0 times

...

Ilene

4 months ago

This seems pretty straightforward. As long as I follow the steps in the explanation, I think I can get this set up correctly. The key is making sure I get all the LDAP details right.

upvoted 0 times

...

Darell

4 months ago

Okay, I've got a plan. First, I'll install the necessary packages like sssd and authconfig-gtk. Then I'll configure the LDAP settings, including the base DN and server URL. And don't forget to download and use the CA cert for the encrypted connection.

upvoted 0 times

...

Verda

5 months ago

Hmm, I'm a little unsure about this one. Binding to an external LDAP server and using a CA cert to encrypt the connection sounds tricky. I'll need to read through the details carefully.

upvoted 0 times

...

Dusti

5 months ago

This looks like a pretty straightforward LDAP configuration question. I think I can handle this - just need to make sure I get the details right.

upvoted 0 times

...

France

6 months ago

Wait, we're supposed to use a graphical interface for this? I was hoping for a nice, clean command-line solution. Oh well, I guess I'll just have to embrace my inner GUI wizard.

upvoted 0 times

Rupert

5 months ago

Don't worry, it's just a one-time thing. Once it's set up, we can go back to the command line.

upvoted 0 times

...

Wendell

5 months ago

Yes, it seems like we have to use the graphical interface for this setup.

upvoted 0 times

...

Rickie

6 months ago

Haha, 'user password doesn't not need to set'? I'm already questioning the quality of this exam question. Let's see how the rest of it holds up.

upvoted 0 times

Stefanie

5 months ago

I agree, that does seem like a strange statement.

upvoted 0 times

...

Brianne

6 months ago

We also need to download the ca certificate from http://server.domain11.example.com/pub/EXAMPLE-CA-CERT.

upvoted 0 times

...

Velda

7 months ago

Yes, and we need to use TLS to encrypt connections.

upvoted 0 times

...

Avery

7 months ago

The instructions seem clear, but I'm a bit concerned about the lack of a HOME directory for the ldapuser1 account. Might need to look into that further.

upvoted 0 times

Jarod

5 months ago

Once ldapuser1 can log in successfully, we can focus on setting up the HOME directory through autofs.

upvoted 0 times

...

Billye

5 months ago

Make sure to follow the steps for configuring the LDAP connection correctly, then we can troubleshoot the HOME directory issue.

upvoted 0 times

...

Loreen

5 months ago

Don't worry about the HOME directory for now, we can address that after setting up the LDAP validation service.

upvoted 0 times

...

Colette

6 months ago

User4: Remember that the user password doesn't need to be set.

upvoted 0 times

...

Lashawnda

6 months ago

User3: Make sure to test if ldapuser1 is added using the 'id ldapuser1' command.

upvoted 0 times

...

Amber

6 months ago

User2: Don't worry about the HOME directory, it will be set up after the autofs questions.

upvoted 0 times

...

Trinidad

6 months ago

User1: The instructions are pretty straightforward, just follow the steps.

upvoted 0 times

...

Ricki

7 months ago

The base DN of the validation service is dc=example,dc=com, right?

upvoted 0 times

...

Lina

7 months ago

Looks straightforward, just need to follow the steps and configure the LDAP server connection. The CA cert download is a nice touch to ensure secure communication.

upvoted 0 times