[root@f30 ~]# kinit administrator
Password for administrator@TEST.JP:
[root@f30 ~]# samba-tool user list
Guest
Administrator
krbtgt
[root@f30 ~]# samba-tool user add chibi
Note: samba-tool user add is deprecated.  Please use samba-tool user create for the same function.
New Password:
Retype Password:
User 'chibi' created successfully
[root@f30 ~]# wbinfo -u
TEST\administrator
TEST\guest
TEST\krbtgt
TEST\chibi
[root@f30 ~]# wbinfo -n chibi
S-1-5-21-842234280-2978751291-3424404927-1103 SID_USER (1)
[root@f30 ~]# net ads info
LDAP server: 192.168.1.8
LDAP server name: f30.test.jp
Realm: TEST.JP
Bind Path: dc=TEST,dc=JP
LDAP port: 389
Server time: 月, 02  3月 2020 06:29:13 JST
KDC server: 192.168.1.8
Server time offset: 0
Last machine account password change: 月, 02  3月 2020 06:23:37 JST
[root@f30 ~]# host -4 f30
f30.test.jp has address 192.168.1.8
[root@f30 ~]# host -t SRV _ldap._tcp.test.jp
_ldap._tcp.test.jp has SRV record 0 100 389 f30.test.jp.
[root@f30 ~]# host -t SRV _kerberos._udp.test.jp
_kerberos._udp.test.jp has SRV record 0 100 88 f30.test.jp.
[root@f30 ~]# host -t A f30.test.jp.
f30.test.jp has address 192.168.1.8
[root@f30 ~]# smbclient -L localhost -U%

        Sharename       Type      Comment
        ---------       ----      -------
        sysvol          Disk
        netlogon        Disk
        IPC$            IPC       IPC Service (Samba 4.10.13)
Reconnecting with SMB1 for workgroup listing.

        Server               Comment
        ---------            -------

        Workgroup            Master
        ---------            -------
[root@f30 ~]# cat /etc/redhat-release
Fedora release 30 (Thirty)
[root@f30 ~]# samba -V
Version 4.10.13
[root@f30 ~]# net ads lookup
Information for Domain Controller: 192.168.1.8

Response Type: LOGON_SAM_LOGON_RESPONSE_EX
GUID: 83092d8a-221c-4378-8154-067cd2a4265a
Flags:
        Is a PDC:                                   yes
        Is a GC of the forest:                      yes
        Is an LDAP server:                          yes
        Supports DS:                                yes
        Is running a KDC:                           yes
        Is running time services:                   yes
        Is the closest DC:                          yes
        Is writable:                                yes
        Has a hardware clock:                       yes
        Is a non-domain NC serviced by LDAP server: no
        Is NT6 DC that has some secrets:            no
        Is NT6 DC that has all secrets:             yes
        Runs Active Directory Web Services:         no
        Runs on Windows 2012 or later:              no
Forest: test.jp
Domain: test.jp
Domain Controller: f30.test.jp
Pre-Win2k Domain: TEST
Pre-Win2k Hostname: F30
Server Site Name: Default-First-Site-Name
Client Site Name: Default-First-Site-Name
NT Version: 5
LMNT Token: ffff
LM20 Token: ffff
[root@f30 ~]# dig test.jp

; <<>> DiG 9.11.14-RedHat-9.11.14-2.fc30 <<>> test.jp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29372
;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;test.jp.                       IN      A

;; ANSWER SECTION:
test.jp.                900     IN      A       192.168.1.8

;; AUTHORITY SECTION:
test.jp.                3600    IN      SOA     f30.test.jp. hostmaster.test.jp. 1 900 600 86400 3600

;; Query time: 0 msec
;; SERVER: 192.168.1.8#53(192.168.1.8)
;; WHEN: 月  3月 02 06:31:34 JST 2020
;; MSG SIZE  rcvd: 92

[root@f30 ~]# samba-tool domain level show
Domain and forest function level for domain 'DC=test,DC=jp'

Forest function level: (Windows) 2008 R2
Domain function level: (Windows) 2008 R2
Lowest function level of a DC: (Windows) 2008 R2
[root@f30 ~]# wbinfo -t
checking the trust secret for domain TEST via RPC calls succeeded
[root@f30 ~]# wbinfo -g
TEST\cert publishers
TEST\ras and ias servers
TEST\allowed rodc password replication group
TEST\denied rodc password replication group
TEST\dnsadmins
TEST\enterprise read-only domain controllers
TEST\domain admins
TEST\domain users
TEST\domain guests
TEST\domain computers
TEST\domain controllers
TEST\schema admins
TEST\enterprise admins
TEST\group policy creator owners
TEST\read-only domain controllers
TEST\dnsupdateproxy
[root@f30 ~]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: administrator@TEST.JP

Valid starting       Expires              Service principal
2020-03-02T06:28:07  2020-03-02T16:28:07  krbtgt/TEST.JP@TEST.JP
        renew until 2020-03-03T06:28:03
[root@f30 ~]# samba-tool fsmo show
SchemaMasterRole owner: CN=NTDS Settings,CN=F30,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=jp
InfrastructureMasterRole owner: CN=NTDS Settings,CN=F30,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=jp
RidAllocationMasterRole owner: CN=NTDS Settings,CN=F30,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=jp
PdcEmulationMasterRole owner: CN=NTDS Settings,CN=F30,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=jp
DomainNamingMasterRole owner: CN=NTDS Settings,CN=F30,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=jp
DomainDnsZonesMasterRole owner: CN=NTDS Settings,CN=F30,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=jp
ForestDnsZonesMasterRole owner: CN=NTDS Settings,CN=F30,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=jp
[root@f30 ~]# samba-tool fsmo transfer --role=all
This DC already has the 'rid' FSMO role
This DC already has the 'pdc' FSMO role
This DC already has the 'naming' FSMO role
This DC already has the 'infrastructure' FSMO role
This DC already has the 'schema' FSMO role
This DC already has the 'domaindns' FSMO role
This DC already has the 'forestdns' FSMO role
[root@f30 ~]#