Lapin Blanc
2018-May-01 14:44 UTC
[Samba] Detailed documentation about latest Samba AD DC authentication
Hi, I don't know if this is the right place for this kind of questions, and I'm sorry if that's not the case. I have a work to present for school for which I need to understand the authentication processes in samba 4 latest versions (ie >= 4.7). More precisely, about the protocols involved (ldap, ldaps, kerberos, others ?), encryption types, etc. Googling for documentation, I found a lot of informations, but many of them are outdated, especially concerning the general architecture of samba (now integrating most of the services needed). I found Andrew Bartlett thesis there and read it eagerly : https://www.samba.org/samba/news/articles/abartlet_thesis.pdf What I would like to find is something approaching, but kind of updated... Any pointer would be welcome...
Andrew Bartlett
2018-May-01 18:50 UTC
[Samba] Detailed documentation about latest Samba AD DC authentication
On Tue, 2018-05-01 at 16:44 +0200, Lapin Blanc via samba wrote:> Hi, I don't know if this is the right place for this kind of questions, and > I'm sorry if that's not the case. > I have a work to present for school for which I need to understand the > authentication processes in > samba 4 latest versions (ie >= 4.7). More precisely, about the protocols > involved (ldap, ldaps, > kerberos, others ?), encryption types, etc. > Googling for documentation, I found a lot of informations, but many of them > are outdated, especially > concerning the general architecture of samba (now integrating most of the > services needed). > I found Andrew Bartlett thesis there and read it eagerly : > https://www.samba.org/samba/news/articles/abartlet_thesis.pdf > What I would like to find is something approaching, but kind of updated... > Any pointer would be welcome...I'm preparing this for a customer: https://gitlab.com/catalyst-samba/samba-docs/wikis/home It might help you with what you need. Feedback most certainly welcome! Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Maybe Matching Threads
- Google Cloud Directory Service password synchronization for AD DC
- Samba Share - security considerations
- Google Cloud Directory Service password synchronization for AD DC
- Keytab extraction for tshark analyze
- Accentuated characters issue when receiving attributes from "samba user syncpasswords"