[Samba] TLS questions

[Robert Wooden]

I am currently NOT using SSL on my Samba domain.

While reading "Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC" and
thinking about implementing. I'm having trouble "getting my head" around
what certificates go where.

Simply put, I am not clear as to generating certificates on the clients and
then copy which files to to the server or vice versa?

What happens when certificates expire?

Perhaps I could be directed to an article or other information that may
help me understand?
-- 
Thank you.

Bob Wooden