Hi Stefan, > pls show how you fixed it See https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory#Kerberos for the test. My fix was to take the one generated on the newer DC also to the older one. Joachim