domain controller security
 

hellow poeple

well I have posted once and I want to ask again but different kind of question about samba dc. I installed sernet samba dc in my network behind firewall. network with mixed win/mac PCs. so people say that I am very brave man :D so it is not secure. Is there some difference in security installing ms dc or samba dc. I am not going to change it with ms dc. If there is no difference all ms admins are very brave poeple :D but this installation I do really need group policy really helps me managing users centrally.

thanks

People complain mostly because of the way passwords are transmitted. So make sure you do not send clear text by

Set
encrypted passwords yes

Do not allow lanmanager to be used

Lanman auth no

You can also use ldap etc for auth.

Don't allow share level security, this forces users to be authenticated for access

Limit hosts with access and make sure samba does not bind to all available interfaces.

Do not allow browsing.

I think that should toughen it up a little