> Linux isn't vulnerable by default, because it's missing features by default. It has no equivalent of Active Directory, and doesn't use Kerberos or anything li

> Linux isn't vulnerable by default, because it's missing features by default. It has no equivalent of Active Directory, and doesn't use Kerberos or anything like it by default. Could you tell more why do you think so? For what I remember, Linux in this regard is exactly the same as Windows: you have to install and configure Samba 4 or FreeIPA in order to get a kerberized domain; you also have to join the clients into domain exactly the same way you would join windows clients. In Windows, your servers out of the box won't run the necessary services, you have to install the AD DS server role. You have to join the clients into domain. So there's nothing like AD or Kerberos on Windows by default either.