As AD DC doesn't work in samba46 and was broken again in samba 4.7.4 - the attack vector is quite narrow. Security: CVE-2018-1050 CVE-2018-1057 Sponsored by: iXsystems Inc.