[Samba] TLS questions

[Rowland penny]

On 01/09/2019 16:41, Robert Wooden via samba wrote:
> I am currently NOT using SSL on my Samba domain.
>
> While reading "Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC" and
> thinking about implementing. I'm having trouble "getting my head" around
> what certificates go where.
>
> Simply put, I am not clear as to generating certificates on the clients and
> then copy which files to to the server or vice versa?
>
> What happens when certificates expire?
>
> Perhaps I could be directed to an article or other information that may
> help me understand?

Why do you need to use SSL ?

Kerberos is more secure, so what are you thinking of the certificates for ?

Rowland