[Samba] remote site options

[Reindl Harald]

Am 09.09.18 um 17:16 schrieb Sonic via samba:
> Currently using Samba 4 as AD at the main site and would like the main site
> AD to authenticate users at a remote site (about 3 systems). As I use my
> domain management system from a remote location via VPN I know this works,
> but the VPN may not be the lowest cost in terms of overhead.

why?

> What other options are available?
> 
> I'm thinking that port forwarding between the sites may incur the least
> overhead (which ports?). What are the common (and maybe not so common)
> practices in place for this scenario?

frankly you even need bridged VPN instead routed - so how should this
work with port forwarding adn what problem do you try to solve befoe
come up with solutions?