Skip to content
Update per ANSSI and Douglas feedback authored by Andrew Bartlett's avatar Andrew Bartlett


Signed-off-by: default avatarAndrew Bartlett <abartlet@samba.org>
......@@ -44,8 +44,8 @@ This can be used to create a central print server.
## [Active Directory Domain Controller](https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller)
Active Directory is often described as a combined LDAP, Kerberos and
DCE/RPC server backed on to a common database
Active Directory is often described as a combined LDAP, Kerberos,
DCE/RPC and DNS server backed on to a common database
([sam.ldb](../protocols-and-subsystems/sam.ldb) in Samba).
It provides secure centralised authentication, authorization as well
......@@ -79,7 +79,8 @@ authentication server for this protocol.
### [DCE/RPC Server](dce-rpc-server)
This implements as much of Microsoft's version of DCE/RPC as is
necessary for Samba.
necessary for Samba, including key services like [LSA](dce-rpc-server#lsa),
[SAMR](../protocols-and-subsystems/samr) and [NETLOGON](dce-rpc-server#netlogon)
### [Replication client and server](drs-replication)
......@@ -91,8 +92,8 @@ multiple domain controllers.
Group Policy turns out to be quite simple on the server, it simply
consists of files that the clients download and parse, so this is
actually a function of the file server and the `[netlogon]` share. It
is critical for security that access to this share only be made over a
SMB signed connection, and clients need to enforce this.
is critical for client security that access to this share only be made
over a SMB signed connection, and clients need to enforce this.
### DNS Server
......
......