====== Samba: Second controlleur de domaine ======

apt-get install samba winbind libnss-winbind krb5-user smbclient ldb-tools

nano /etc/krb5.conf

[libdefaults]
  default_realm = MYDOMAIN.LAN
    dns_lookup_realm = false
    dns_lookup_kdc = true
[realms]
  MYDOMAIN.LAN = {
  kdc = 127.0.0.1
  kdc = 192.168.1.12
  }

kinit administrator

rm /etc/samba/smb.conf

samba-tool domain join mydomain.lan RODC -U MYDOMAIN\\Administrator
ou dans le cas d'un autre domain controlleur
samba-tool domain join mydomain.lan DC -U"MYDOMAIN\administrator"

nano /etc/samba/smb.conf
dns forwarder = 8.8.8.8

systemctl disable systemd-resolved