Re: [PATCH 0/2] ksmbd: NTLM pass-through to a domain controller

From: Ralph Boehme

Date: Tue Oct 20 2026 - 10:31:56 EST


On 10/20/26 3:54 PM, Wang Zhaolong wrote:
I'm working on adding Active Directory Domain Controller support to ksmbd,
rather than just allowing ksmbd to join an existing AD domain as a member
server.

The initial goal is a single writable AD domain controller, supporting one
forest, one domain and one site, with most of the new AD services implemented
in Rust userspace components.

The planned functionality includes:

- AD directory services, including LDAP, DNS and CLDAP discovery.
- Kerberos KDC and PAC support.
- NETLOGON and domain secure-channel functionality.
- Integration with ksmbd authentication, identity mapping and authorization.
- Windows domain join and logon, including SYSVOL/NETLOGON and Group Policy support.

may I ask: why? What's the benefit over using something mature and Open Source that already does all that and more?

Just curious. :)

Cheers!
-slow

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature