Re: [PATCH 0/2] ksmbd: NTLM pass-through to a domain controller
From: Ralph Boehme
Date: Tue Oct 20 2026 - 10:31:56 EST
On 10/20/26 3:54 PM, Wang Zhaolong wrote:
I'm working on adding Active Directory Domain Controller support to ksmbd,
rather than just allowing ksmbd to join an existing AD domain as a member
server.
The initial goal is a single writable AD domain controller, supporting one
forest, one domain and one site, with most of the new AD services implemented
in Rust userspace components.
The planned functionality includes:
- AD directory services, including LDAP, DNS and CLDAP discovery.
- Kerberos KDC and PAC support.
- NETLOGON and domain secure-channel functionality.
- Integration with ksmbd authentication, identity mapping and authorization.
- Windows domain join and logon, including SYSVOL/NETLOGON and Group Policy support.
may I ask: why? What's the benefit over using something mature and Open Source that already does all that and more?
Just curious. :)
Cheers!
-slow
Attachment:
OpenPGP_signature.asc
Description: OpenPGP digital signature