[Samba] AD replication problem "WERR_DS_DRA_ACCESS_DENIED" - need help debugging

[Rowland Penny]

On Wed, 4 Apr 2018 14:32:22 +0200
Dirk Laurenz via samba <samba at lists.samba.org> wrote:

> Same error here...
> 
> root at samba01:~# samba-tool ldapcmp ldap://samba01 ldap://samba02
> -Uadministrator --filter=CN,DC,member CONFIGURATION Password for
> [LAURENZ\administrator]:
> 

Firstly, I wouldn't have joined the new DC's with the names of the old
DC's.

Have you checked if
'63f4e656-6590-4c1d-a362-c3b97b5e464d._msdcs.local.laurenz.ws' is a
valid GUID ?
Is it something left over from an old join ?

Rowland