join as DC fails: LDAP error 10 LDAP_REFERRAL, or how to properly create application directory partition

[Andrew Bartlett]

On Wed, 2018-06-27 at 13:46 +0400, Alexey Sheplyakov via samba-
technical wrote:
> Hi,
> 
> On Wed, Jun 27, 2018 at 08:16:42PM +1200, Andrew Bartlett wrote:
>  
> > I'm confused, where in the join is it creating an application
> > partition?  I can imagine it replicating such, but where does it create
> > one?
> 
> I stand corrected. However join does modify the application partition, see
> 
> https://git.samba.org/samba.git/?p=samba.git;a=blob;f=python/samba/join.py;h=30ecce77c55852ed5ff542ea05c3e5f0c535835c;hb=d9914b9b6a66aebab367bcdc535bf8eaaa46abeb#l677
> 
> Windows DC having no domain naming master role refuses to modify application
> partitions, hence the problem.

OK, but that instead just makes me wonder what we need to do.  I don't
think windows has to join the naming master does it?

How does windows handle application partitions and/or how does it set
up the replication status for those?

Some more investigation is required here.

Thanks,

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba