root@dc2:/home/eida# samba-tool domain join eida.lan DC -U eida --dns-backend=BIND9_DLZ INFO 2021-03-06 23:24:56,464 pid:723 /usr/lib/python3/dist-packages/samba/join.py #107: Finding a writeable DC for domain 'eida.lan' INFO 2021-03-06 23:24:56,479 pid:723 /usr/lib/python3/dist-packages/samba/join.py #109: Found DC dc1.eida.lan Password for [EIDA\eida]: ... INFO 2021-03-06 23:25:18,637 pid:723 /usr/lib/python3/dist-packages/samba/join.py #1559: Joined domain EIDA (SID S-1-5-21-X-Y-Z) as a DC root@dc2:/home/eida# cp /var/lib/samba/private/krb5.conf /etc root@dc2:/home/eida# chmod 0644 /etc/krb5.conf root@dc2:/home/eida# cat /etc/krb5.conf [libdefaults] default_realm = EIDA.LAN dns_lookup_realm = false dns_lookup_kdc = true [realms] EIDA.LAN = { default_domain = eida.lan } [domain_realm] DC2 = EIDA.LAN root@dc2:/home/eida# samba-tool drs showrepl Default-First-Site-Name\DC2 DSA Options: 0x00000001 DSA object GUID: f9e268d7-X-Y-Z-3787aad77574 DSA invocationId: b1c9ce40-X-Y-Z-4a3d8fd9033d ==== INBOUND NEIGHBORS ==== CN=Configuration,DC=eida,DC=lan Default-First-Site-Name\DC1 via RPC DSA object GUID: d2bd2987-A-B-C-5ba7691aadef Last attempt @ Sat Mar 6 23:39:36 2021 CET was successful 0 consecutive failure(s). Last success @ Sat Mar 6 23:39:36 2021 CET ... ==== OUTBOUND NEIGHBORS ==== CN=Configuration,DC=eida,DC=lan Default-First-Site-Name\DC1 via RPC DSA object GUID: d2bd2987-A-B-C-5ba7691aadef Last attempt @ NTTIME(0) was successful 0 consecutive failure(s). Last success @ NTTIME(0) ... ==== KCC CONNECTION OBJECTS ==== Connection -- Connection name: 5a4b78fa-A-B-C-eca1e621c4de Enabled : TRUE Server DNS name : dc1.eida.lan Server DN name : CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=eida,DC=lan TransportType: RPC options: 0x00000001 Warning: No NC replicated for Connection!