root@debian:~# kinit administrator
Password for administrator@TEST.JP:
root@debian:~# net ads join -U administrator
Enter administrator's password:
Using short domain name -- TEST
Joined 'DEBIAN' to dns domain 'test.jp'
No DNS domain configured for debian. Unable to perform DNS Update.
DNS update failed: NT_STATUS_INVALID_PARAMETER
root@debian:~# systemctl restart winbind
root@debian:~# wbinfo -u
TEST\guest
TEST\administrator
TEST\krbtgt
TEST\chibi
root@debian:~# wbinfo -n chibi
S-1-5-21-531816203-730215079-1526157293-1103 SID_USER (1)
root@debian:~# net ads info
LDAP server: 192.168.1.143
LDAP server name: dc2.test.jp
Realm: TEST.JP
Bind Path: dc=TEST,dc=JP
LDAP port: 389
Server time: 月, 30 11月 2020 04:54:40 JST
KDC server: 192.168.1.143
Server time offset: -3
Last machine account password change: 月, 30 11月 2020 04:54:09 JST
root@debian:~# host -4 dc
dc.test.jp has address 192.168.1.34
dc.test.jp has address 192.168.1.24
dc.test.jp has IPv6 address 2400:4052:46e0:b700:55c4:a495:cffa:fa8c
dc.test.jp has IPv6 address 2400:4052:46e0:b700:78ff:d4cf:8f24:c7aa
root@debian:~# host -4 dc1
dc1.test.jp has address 192.168.1.42
dc1.test.jp has IPv6 address 2400:4052:46e0:b700:8ca1:4fc6:8897:27c2
root@debian:~# host -4 dc2
dc2.test.jp has address 192.168.1.143
dc2.test.jp has IPv6 address 2400:4052:46e0:b700:4187:ee03:b5e:34e1
root@debian:~# host -t SRV _ldap._tcp.test.jp
_ldap._tcp.test.jp has SRV record 0 100 389 dc2.test.jp.
_ldap._tcp.test.jp has SRV record 0 100 389 dc.test.jp.
_ldap._tcp.test.jp has SRV record 0 100 389 dc1.test.jp.
root@debian:~# host -t SRV _kerberos._udp.test.jp
_kerberos._udp.test.jp has SRV record 0 100 88 dc1.test.jp.
_kerberos._udp.test.jp has SRV record 0 100 88 dc2.test.jp.
_kerberos._udp.test.jp has SRV record 0 100 88 dc.test.jp.
root@debian:~# host -t A test.jp
test.jp has address 192.168.1.143
test.jp has address 192.168.1.42
test.jp has address 192.168.1.24
test.jp has address 192.168.1.34
root@debian:~# cat /etc/os-release
PRETTY_NAME="Debian GNU/Linux 10 (buster)"
NAME="Debian GNU/Linux"
VERSION_ID="10"
VERSION="10 (buster)"
VERSION_CODENAME=buster
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"
root@debian:~# cat /etc/debian_version
10.6
root@debian:~# samba -V
Version 4.9.5-Debian
root@debian:~# smbclient //192.168.1.24/netlogon -Uadministrator
Enter TEST\administrator's password:
Try "help" to get a list of possible commands.
smb: \> ls
  .                                   D        0  Sat Nov 28 06:54:46 2020
  ..                                  D        0  Sat Nov 28 06:54:46 2020

                124869119 blocks of size 4096. 110418819 blocks available
smb: \> exit
root@debian:~# smbclient //192.168.1.24/sysvol -Uadministrator
Enter TEST\administrator's password:
Try "help" to get a list of possible commands.
smb: \> ls
  .                                   D        0  Sat Nov 28 06:54:46 2020
  ..                                  D        0  Sat Nov 28 06:54:46 2020
  test.jp                             D        0  Sat Nov 28 06:54:46 2020

                124869119 blocks of size 4096. 110418820 blocks available
smb: \> exit
root@debian:~# net ads lookup
Information for Domain Controller: 192.168.1.143

Response Type: LOGON_SAM_LOGON_RESPONSE_EX
GUID: feabb66c-dd8b-489d-8e9a-8c72474ce583
Flags:
        Is a PDC:                                   no
        Is a GC of the forest:                      yes
        Is an LDAP server:                          yes
        Supports DS:                                yes
        Is running a KDC:                           yes
        Is running time services:                   yes
        Is the closest DC:                          yes
        Is writable:                                yes
        Has a hardware clock:                       no
        Is a non-domain NC serviced by LDAP server: no
        Is NT6 DC that has some secrets:            no
        Is NT6 DC that has all secrets:             yes
        Runs Active Directory Web Services:         yes
        Runs on Windows 2012 or later:              yes
Forest:                 test.jp
Domain:                 test.jp
Domain Controller:      dc2.test.jp
Pre-Win2k Domain:       TEST
Pre-Win2k Hostname:     DC2
Server Site Name :              Default-First-Site-Name
Client Site Name :              Default-First-Site-Name
NT Version: 5
LMNT Token: ffff
LM20 Token: ffff
root@debian:~# dig test.jp

; <<>> DiG 9.11.5-P4-5.1+deb10u2-Debian <<>> test.jp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46720
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4000
;; QUESTION SECTION:
;test.jp.                       IN      A

;; ANSWER SECTION:
test.jp.                600     IN      A       192.168.1.42
test.jp.                600     IN      A       192.168.1.24
test.jp.                600     IN      A       192.168.1.143
test.jp.                600     IN      A       192.168.1.34

;; Query time: 1 msec
;; SERVER: 192.168.1.24#53(192.168.1.24)
;; WHEN: 月 11月 30 04:57:33 JST 2020
;; MSG SIZE  rcvd: 100

root@debian:~# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: administrator@TEST.JP

Valid starting       Expires              Service principal
2020-11-29T19:51:40  2020-11-30T05:51:40  krbtgt/TEST.JP@TEST.JP
        renew until 2020-11-30T19:51:35
root@debian:~# wbinfo -t
checking the trust secret for domain TEST via RPC calls succeeded
root@debian:~# wbinfo -g
TEST\domain computers
TEST\cert publishers
TEST\domain users
TEST\domain guests
TEST\ras and ias servers
TEST\allowed rodc password replication group
TEST\enterprise read-only domain controllers
TEST\cloneable domain controllers
TEST\protected users
TEST\key admins
TEST\enterprise key admins
TEST\domain controllers
TEST\read-only domain controllers
TEST\denied rodc password replication group
TEST\group policy creator owners
TEST\enterprise admins
TEST\domain admins
TEST\schema admins
TEST\dnsadmins
TEST\dnsupdateproxy
root@debian:~#