root@debian:~# kinit administrator
Password for administrator@TEST.JP:
Warning: Your password will expire in 41 days on 2020年04月04日 07時32分32秒
root@debian:~# samba-tool user add chibi
Note: samba-tool user add is deprecated.  Please use samba-tool user create for the same function.
New Password:
Retype Password:
User 'chibi' created successfully
root@debian:~# wbinfo -u
TEST\administrator
TEST\guest
TEST\krbtgt
TEST\chibi
root@debian:~# wbinfo -n administrator
S-1-5-21-4146388153-4193096593-3140523898-500 SID_USER (1)
root@debian:~# wbinfo -n chibi
S-1-5-21-4146388153-4193096593-3140523898-1103 SID_USER (1)
root@debian:~# net ads info
LDAP server: 192.168.1.146
LDAP server name: debian.test.jp
Realm: TEST.JP
Bind Path: dc=TEST,dc=JP
LDAP port: 389
Server time: 土, 22  2月 2020 07:39:27 JST
KDC server: 192.168.1.146
Server time offset: 0
Last machine account password change: 土, 22  2月 2020 07:32:32 JST
root@debian:~# host -4 debian
debian.test.jp has address 192.168.1.146
root@debian:~# host -t SRV _ldap._tcp.test.jp
_ldap._tcp.test.jp has SRV record 0 100 389 debian.test.jp.
root@debian:~# host -t SRV _kerberos._udp.test.jp
_kerberos._udp.test.jp has SRV record 0 100 88 debian.test.jp.
root@debian:~# host -t A debian.test.jp
debian.test.jp has address 192.168.1.146
root@debian:~# smbclient -L localhost -U%

        Sharename       Type      Comment
        ---------       ----      -------
        sysvol          Disk
        netlogon        Disk
        IPC$            IPC       IPC Service (Samba 4.11.5-Debian)
SMB1 disabled -- no workgroup available
root@debian:~# smbclient //localhost/netlogon -Uadministrator
Enter TEST\administrator's password:
Try "help" to get a list of possible commands.
smb: \> ls
  .                                   D        0  Sat Feb 22 07:32:29 2020
  ..                                  D        0  Sat Feb 22 07:32:31 2020

                38958432 blocks of size 1024. 31915828 blocks available
smb: \> exit
root@debian:~# smbclient //localhost/sysvol -Uadministrator
Enter TEST\administrator's password:
Try "help" to get a list of possible commands.
smb: \> ls
  .                                   D        0  Sat Feb 22 07:32:32 2020
  ..                                  D        0  Sat Feb 22 07:38:02 2020
  test.jp                             D        0  Sat Feb 22 07:32:31 2020

                38958432 blocks of size 1024. 31915828 blocks available
smb: \> exit
root@debian:~# net ads lookup
Information for Domain Controller: 192.168.1.146

Response Type: LOGON_SAM_LOGON_RESPONSE_EX
GUID: 5cbd3fdb-f86e-498d-b148-7e5a8b59fe8d
Flags:
        Is a PDC:                                   yes
        Is a GC of the forest:                      yes
        Is an LDAP server:                          yes
        Supports DS:                                yes
        Is running a KDC:                           yes
        Is running time services:                   yes
        Is the closest DC:                          yes
        Is writable:                                yes
        Has a hardware clock:                       yes
        Is a non-domain NC serviced by LDAP server: no
        Is NT6 DC that has some secrets:            no
        Is NT6 DC that has all secrets:             yes
        Runs Active Directory Web Services:         no
        Runs on Windows 2012 or later:              no
Forest: test.jp
Domain: test.jp
Domain Controller: debian.test.jp
Pre-Win2k Domain: TEST
Pre-Win2k Hostname: DEBIAN
Server Site Name: Default-First-Site-Name
Client Site Name: Default-First-Site-Name
NT Version: 5
LMNT Token: ffff
LM20 Token: ffff
root@debian:~# dig test.jp

; <<>> DiG 9.11.14-3-Debian <<>> test.jp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15355
;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;test.jp.                       IN      A

;; ANSWER SECTION:
test.jp.                900     IN      A       192.168.1.146

;; AUTHORITY SECTION:
test.jp.                3600    IN      SOA     debian.test.jp. hostmaster.test.jp. 1 900 600 86400 3600

;; Query time: 0 msec
;; SERVER: 192.168.1.146#53(192.168.1.146)
;; WHEN: 土  2月 22 07:45:33 JST 2020
;; MSG SIZE  rcvd: 95

root@debian:~# wbinfo -t
checking the trust secret for domain TEST via RPC calls succeeded
root@debian:~# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: administrator@TEST.JP

Valid starting       Expires              Service principal
2020-02-22T07:38:33  2020-02-22T17:38:33  krbtgt/TEST.JP@TEST.JP
        renew until 2020-02-23T07:38:28
root@debian:~# wbinfo -g
TEST\cert publishers
TEST\ras and ias servers
TEST\allowed rodc password replication group
TEST\denied rodc password replication group
TEST\dnsadmins
TEST\enterprise read-only domain controllers
TEST\domain admins
TEST\domain users
TEST\domain guests
TEST\domain computers
TEST\domain controllers
TEST\schema admins
TEST\enterprise admins
TEST\group policy creator owners
TEST\read-only domain controllers
TEST\dnsupdateproxy
root@debian:~# cat /etc/os-release
PRETTY_NAME="Debian GNU/Linux bullseye/sid"
NAME="Debian GNU/Linux"
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"
root@debian:~# samba -V
Version 4.11.5-Debian
root@debian:~# smbclient -L localhost -U%

        Sharename       Type      Comment
        ---------       ----      -------
        sysvol          Disk
        netlogon        Disk
        IPC$            IPC       IPC Service (Samba 4.11.5-Debian)
SMB1 disabled -- no workgroup available
root@debian:~#