Is Active Directory TCP or UDP?

Active Directory

Client Ports	Server Port	Protocol
1024-65535/TCP	1723/TCP	PPTP

What authentication protocols does Active Directory use?

In infrastructure, different authentication protocols are being used (e.g., LM, NTML, NTMLv2, Kerberos, LDAP) to verify users and grant them access to a domain. Microsoft® Active Directory (AD) supports both Kerberos and the Lightweight Directory Access Protocol (LDAP).

What protocols does a domain controller use?

This includes the operating system (usually Windows Server or Linux), an LDAP service (Red Hat Directory Server, etc.), a network time service (ntpd, chrony, etc.), and a computer network authentication protocol (usually Kerberos).

What is Active Directory in simple words?

Active Directory (AD) is a database and set of services that connect users with the network resources they need to get their work done. The database (or directory) contains critical information about your environment, including what users and computers there are and who’s allowed to do what.

What port is used by Active Directory?

AD uses the following ports to support user and computer authentication, according to the Active Directory and Active Directory Domain Services Port Requirements article: SMB over IP (Microsoft-DS): port 445 TCP, UDP. Kerberos: port 88 TCP, UDP. LDAP: port 389 UDP.

Is port 636 UDP or TCP?

Service Name and Transport Protocol Port Number Registry

Service Name	Port Number	Transport Protocol
ldap	389	udp
ldaps	636	tcp
ldaps	636	udp
www-ldap-gw	1760	tcp

What is SAML and Kerberos?

SAML is just a standard data format for exchanging authentication data securely using XML Schema, XML signature, XML encryption and SOAP. You would typically use it for a web SSO (single sign on). Kerberos requires that the user it is authenticating is in the kerberos domain.

What is a forest in Active Directory?

An Active Directory forest is the highest level of organization within Active Directory. Each forest shares a single database, a single global address list and a security boundary. By default, a user or administrator in one forest cannot access another forest.