Active Directory (AD) is a set of network services that run on a Domain Controller (DC).
Active Directory (AD) is a set of network services that run on a [Domain Controller (DC)](https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller).
The AD DC administers a _domain_ of users and computers.
The AD DC is responsible for verifying the identity of hosts in the network,
using a common database (or _directory_).
...
...
@@ -69,8 +61,11 @@ and Samba (specifically the `samba` binary) acts as server for each protocol.
The server responsibilties include:
* _File Server_. The AD DC must always provide file server functionality.
Note that the file server always runs as a separate binary ([smbd](https://git.samba.org/?p=samba.git;a=tree;f=source3/smbd)).
* _File and NetBIOS Server_. The AD DC must always provide file server and NetBIOS functionality.
The file server always runs as a separate binary, called [smbd](https://git.samba.org/?p=samba.git;a=tree;f=source3/smbd).
Note that when run as an AD DC, Samba uses different [NetBIOS server code](https://git.samba.org/?p=samba.git;a=tree;f=source4/nbt_server)
(rather than the [nmbd](https://git.samba.org/?p=samba.git;a=tree;f=source3/nmbd) binary),
which includes multi-master WINS replication support.
* _LDAP Server_. LDAP (Lightweight Directory Access Protocol) is one way
AD clients look up user information or to perform administration.
...
...
@@ -101,9 +96,10 @@ So this is functionality is actually provided by the file server (via the `[netl
Note that it is critical for client security that access to this share only be made
over a SMB signed connection, and clients need to enforce this.