Changes
Page history
Update per ANSSI and Douglas feedback
authored
Jul 25, 2018
by
Andrew Bartlett
Signed-off-by:
Andrew Bartlett
<
abartlet@samba.org
>
Show whitespace changes
Inline
Side-by-side
samba-functionality/overview.md
View page @
115f5160
...
@@ -44,8 +44,8 @@ This can be used to create a central print server.
...
@@ -44,8 +44,8 @@ This can be used to create a central print server.
## [Active Directory Domain Controller](https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller)
## [Active Directory Domain Controller](https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller)
Active Directory is often described as a combined LDAP, Kerberos
and
Active Directory is often described as a combined LDAP, Kerberos
,
DCE/RPC server backed on to a common database
DCE/RPC
and DNS
server backed on to a common database
(
[
sam.ldb
](
../protocols-and-subsystems/sam.ldb
)
in Samba).
(
[
sam.ldb
](
../protocols-and-subsystems/sam.ldb
)
in Samba).
It provides secure centralised authentication, authorization as well
It provides secure centralised authentication, authorization as well
...
@@ -79,7 +79,8 @@ authentication server for this protocol.
...
@@ -79,7 +79,8 @@ authentication server for this protocol.
### [DCE/RPC Server](dce-rpc-server)
### [DCE/RPC Server](dce-rpc-server)
This implements as much of Microsoft's version of DCE/RPC as is
This implements as much of Microsoft's version of DCE/RPC as is
necessary for Samba.
necessary for Samba, including key services like
[
LSA
](
dce-rpc-server#lsa
)
,
[
SAMR
](
../protocols-and-subsystems/samr
)
and
[
NETLOGON
](
dce-rpc-server#netlogon
)
### [Replication client and server](drs-replication)
### [Replication client and server](drs-replication)
...
@@ -91,8 +92,8 @@ multiple domain controllers.
...
@@ -91,8 +92,8 @@ multiple domain controllers.
Group Policy turns out to be quite simple on the server, it simply
Group Policy turns out to be quite simple on the server, it simply
consists of files that the clients download and parse, so this is
consists of files that the clients download and parse, so this is
actually a function of the file server and the
`[netlogon]`
share. It
actually a function of the file server and the
`[netlogon]`
share. It
is critical for security that access to this share only be made
over a
is critical for
client
security that access to this share only be made
SMB signed connection, and clients need to enforce this.
over a
SMB signed connection, and clients need to enforce this.
### DNS Server
### DNS Server
...
...
...
...