[Samba] User names not replicating to secondary DC

[Rowland penny]

On 02/03/2020 18:59, Durwin via samba wrote:
>> Can you run this script on both DC's.

OK, dc0 seems to have the ipaddress: 172.23.93.25

        dc1 seems to have the ipaddress: 172.23.93.26

So why does dc1 use 172.23.93.3 as its nameserver ? and what is 
172.23.93.3 ?

The /etc/krb5.conf files should be the same on both machines, I prefer 
this format:

[libdefaults]
         default_realm = MSI.MYDOMAIN.COM
         dns_lookup_realm = false
         dns_lookup_kdc = true

You are missing:

include "/var/lib/samba/bind-dns/named.conf";

 From '/etc/bind/named.conf.local' on dc1

Which leads us to this in '/etc/bind/named.conf.options' (on both DCs):

tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";

If you do have '/var/lib/samba/bind-dns' , then you are using the wrong 
dns.keytab, you should be using:

/var/lib/samba/bind-dns/dns.keytab

Rowland