Update per ANSSI and Douglas feedback authored by Andrew Bartlett's avatar Andrew Bartlett


Signed-off-by: default avatarAndrew Bartlett <abartlet@samba.org>
...@@ -44,8 +44,8 @@ This can be used to create a central print server. ...@@ -44,8 +44,8 @@ This can be used to create a central print server.
## [Active Directory Domain Controller](https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller) ## [Active Directory Domain Controller](https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller)
Active Directory is often described as a combined LDAP, Kerberos and Active Directory is often described as a combined LDAP, Kerberos,
DCE/RPC server backed on to a common database DCE/RPC and DNS server backed on to a common database
([sam.ldb](../protocols-and-subsystems/sam.ldb) in Samba). ([sam.ldb](../protocols-and-subsystems/sam.ldb) in Samba).
It provides secure centralised authentication, authorization as well It provides secure centralised authentication, authorization as well
...@@ -79,7 +79,8 @@ authentication server for this protocol. ...@@ -79,7 +79,8 @@ authentication server for this protocol.
### [DCE/RPC Server](dce-rpc-server) ### [DCE/RPC Server](dce-rpc-server)
This implements as much of Microsoft's version of DCE/RPC as is This implements as much of Microsoft's version of DCE/RPC as is
necessary for Samba. necessary for Samba, including key services like [LSA](dce-rpc-server#lsa),
[SAMR](../protocols-and-subsystems/samr) and [NETLOGON](dce-rpc-server#netlogon)
### [Replication client and server](drs-replication) ### [Replication client and server](drs-replication)
...@@ -91,8 +92,8 @@ multiple domain controllers. ...@@ -91,8 +92,8 @@ multiple domain controllers.
Group Policy turns out to be quite simple on the server, it simply Group Policy turns out to be quite simple on the server, it simply
consists of files that the clients download and parse, so this is consists of files that the clients download and parse, so this is
actually a function of the file server and the `[netlogon]` share. It actually a function of the file server and the `[netlogon]` share. It
is critical for security that access to this share only be made over a is critical for client security that access to this share only be made
SMB signed connection, and clients need to enforce this. over a SMB signed connection, and clients need to enforce this.
### DNS Server ### DNS Server
... ...
......