Changes
Page history
Update per ANSSI and Douglas feedback
authored
Jul 25, 2018
by
Andrew Bartlett
Signed-off-by:
Andrew Bartlett
<
abartlet@samba.org
>
Show whitespace changes
Inline
Side-by-side
samba-functionality/overview.md
View page @
115f5160
...
...
@@ -44,8 +44,8 @@ This can be used to create a central print server.
## [Active Directory Domain Controller](https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller)
Active Directory is often described as a combined LDAP, Kerberos
and
DCE/RPC server backed on to a common database
Active Directory is often described as a combined LDAP, Kerberos
,
DCE/RPC
and DNS
server backed on to a common database
(
[
sam.ldb
](
../protocols-and-subsystems/sam.ldb
)
in Samba).
It provides secure centralised authentication, authorization as well
...
...
@@ -79,7 +79,8 @@ authentication server for this protocol.
### [DCE/RPC Server](dce-rpc-server)
This implements as much of Microsoft's version of DCE/RPC as is
necessary for Samba.
necessary for Samba, including key services like
[
LSA
](
dce-rpc-server#lsa
)
,
[
SAMR
](
../protocols-and-subsystems/samr
)
and
[
NETLOGON
](
dce-rpc-server#netlogon
)
### [Replication client and server](drs-replication)
...
...
@@ -91,8 +92,8 @@ multiple domain controllers.
Group Policy turns out to be quite simple on the server, it simply
consists of files that the clients download and parse, so this is
actually a function of the file server and the
`[netlogon]`
share. It
is critical for security that access to this share only be made
over a
SMB signed connection, and clients need to enforce this.
is critical for
client
security that access to this share only be made
over a
SMB signed connection, and clients need to enforce this.
### DNS Server
...
...
...
...