[ActiveDir] Which ports to open in the DMZ to communicate with AD & SQL...

[Jason B]

We are putting a MS sharepoint server in the DMZ and need to have it on the 
domain and communicating with a SQL server on the domain.  Because of these 
needs, we only want to open the minimum number of ports to get 
functionality.  We have LDAP (389) opened and SQL (1433) opened.  What other 
ports will we need to open to be able to log in on the sharepoint server 
with a domain account?  Currently, with only these two ports opened, a 
domain account can't log on to the sharepoint server in the DMZ.

Any help is MUCH appreciated. 
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/