Skip to content
GitLab
Menu
Why GitLab
Pricing
Contact Sales
Explore
Why GitLab
Pricing
Contact Sales
Explore
Sign in
Get free trial
Changes
Page history
Update per ANSSI and Douglas feedback
authored
Jul 25, 2018
by
Andrew Bartlett
Signed-off-by:
Andrew Bartlett
<
abartlet@samba.org
>
Hide whitespace changes
Inline
Side-by-side
samba-functionality/overview.md
View page @
115f5160
...
...
@@ -44,8 +44,8 @@ This can be used to create a central print server.
## [Active Directory Domain Controller](https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller)
Active Directory is often described as a combined LDAP, Kerberos
and
DCE/RPC server backed on to a common database
Active Directory is often described as a combined LDAP, Kerberos
,
DCE/RPC
and DNS
server backed on to a common database
(
[
sam.ldb
](
../protocols-and-subsystems/sam.ldb
)
in Samba).
It provides secure centralised authentication, authorization as well
...
...
@@ -79,7 +79,8 @@ authentication server for this protocol.
### [DCE/RPC Server](dce-rpc-server)
This implements as much of Microsoft's version of DCE/RPC as is
necessary for Samba.
necessary for Samba, including key services like
[
LSA
](
dce-rpc-server#lsa
)
,
[
SAMR
](
../protocols-and-subsystems/samr
)
and
[
NETLOGON
](
dce-rpc-server#netlogon
)
### [Replication client and server](drs-replication)
...
...
@@ -91,8 +92,8 @@ multiple domain controllers.
Group Policy turns out to be quite simple on the server, it simply
consists of files that the clients download and parse, so this is
actually a function of the file server and the
`[netlogon]`
share. It
is critical for security that access to this share only be made
over a
SMB signed connection, and clients need to enforce this.
is critical for
client
security that access to this share only be made
over a
SMB signed connection, and clients need to enforce this.
### DNS Server
...
...
...
...