[Samba] problem joining Samba DC to existing domain

[Michal Sládek]

Hello!

I am not able to joing new Samba DC to existing domain:

Linux side:
OS: Centos 7
Samba version: 4.9.8 (Tranquil repo)
Hostname: adserver9

Windows side:
OS: Windows Server 2016
Domain/forrest level: Windows Server 2008 R2
Hostname: adserver8
Domain: spcr.local

I am following this guide:
https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory

I am getting this error:
[root at adserver9 /]# samba-tool domain join spcr.local DC
-U"SPCR\Administrator" --verbose
Finding a writeable DC for domain 'spcr.local'
Found DC adserver8.spcr.local
Password for [SPCR\Administrator]:
workgroup is SPCR
realm is spcr.local
Adding CN=ADSERVER9,OU=Domain Controllers,DC=spcr,DC=local
Adding
CN=ADSERVER9,CN=Servers,CN=Vychozi-nazev-prvni-site,CN=Sites,CN=Configuration,DC=spcr,DC=local
Adding CN=NTDS
Settings,CN=ADSERVER9,CN=Servers,CN=Vychozi-nazev-prvni-site,CN=Sites,CN=Configuration,DC=spcr,DC=local
Join failed - cleaning up
Deleted CN=ADSERVER9,OU=Domain Controllers,DC=spcr,DC=local
Deleted CN=NTDS
Settings,CN=ADSERVER9,CN=Servers,CN=Vychozi-nazev-prvni-site,CN=Sites,CN=Configuration,DC=spcr,DC=local
Deleted
CN=ADSERVER9,CN=Servers,CN=Vychozi-nazev-prvni-site,CN=Sites,CN=Configuration,DC=spcr,DC=local
ERROR(ldb): uncaught exception - LDAP error 1 LDAP_OPERATIONS_ERROR -
 <000021A2: SvcErr: DSID-030A089E, problem 5012 (DIR_ERROR), data 8610
> <>
  File "/usr/lib64/python2.7/site-packages/samba/netcmd/__init__.py", line
178, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib64/python2.7/site-packages/samba/netcmd/domain.py", line
716, in run
    backend_store=backend_store)
  File "/usr/lib64/python2.7/site-packages/samba/join.py", line 1501, in
join_DC
    ctx.do_join()
  File "/usr/lib64/python2.7/site-packages/samba/join.py", line 1397, in
do_join
    ctx.join_add_objects()
  File "/usr/lib64/python2.7/site-packages/samba/join.py", line 683, in
join_add_objects
    ctx.samdb.modify(m)

I would be grateful if somebody could point me to a right direction...

Best regards

Michal