root@graz-dc-bis.ad.tao.at# samba-tool domain join ad.tao.at DC -k yes
Finding a writeable DC for domain 'ad.tao.at'
Found DC graz-dc-sem.ad.tao.at
workgroup is AD
realm is ad.tao.at
checking sAMAccountName
Adding CN=GRAZ-DC-BIS,OU=Domain Controllers,DC=ad,DC=tao,DC=at
Adding CN=GRAZ-DC-BIS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ad,DC=tao,DC=at
Adding CN=NTDS Settings,CN=GRAZ-DC-BIS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ad,DC=tao,DC=at
Adding SPNs to CN=GRAZ-DC-BIS,OU=Domain Controllers,DC=ad,DC=tao,DC=at
Setting account password for GRAZ-DC-BIS$
Enabling account
Calling bare provision
No IPv6 address will be assigned
Provision OK for domain DN DC=ad,DC=tao,DC=at
Starting replication
Schema-DN[CN=Schema,CN=Configuration,DC=ad,DC=tao,DC=at] objects[402/1566] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=ad,DC=tao,DC=at] objects[804/1566] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=ad,DC=tao,DC=at] objects[1206/1566] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=ad,DC=tao,DC=at] objects[1566/1566] linked_values[0/0]
Analyze and apply schema objects
Partition[CN=Configuration,DC=ad,DC=tao,DC=at] objects[402/1626] linked_values[0/0]
Partition[CN=Configuration,DC=ad,DC=tao,DC=at] objects[804/1626] linked_values[0/0]
Partition[CN=Configuration,DC=ad,DC=tao,DC=at] objects[1206/1626] linked_values[0/0]
Partition[CN=Configuration,DC=ad,DC=tao,DC=at] objects[1608/1626] linked_values[0/0]
Partition[CN=Configuration,DC=ad,DC=tao,DC=at] objects[1626/1626] linked_values[28/0]
Replicating critical objects from the base DN of the domain
Partition[DC=ad,DC=tao,DC=at] objects[97/97] linked_values[24/0]
Partition[DC=ad,DC=tao,DC=at] objects[380/283] linked_values[24/0]
Done with always replicated NC (base, config, schema)
Replicating DC=DomainDnsZones,DC=ad,DC=tao,DC=at
Partition[DC=DomainDnsZones,DC=ad,DC=tao,DC=at] objects[48/48] linked_values[0/0]
Replicating DC=ForestDnsZones,DC=ad,DC=tao,DC=at
Partition[DC=ForestDnsZones,DC=ad,DC=tao,DC=at] objects[18/18] linked_values[0/0]
Partition[DC=ForestDnsZones,DC=ad,DC=tao,DC=at] objects[36/18] linked_values[0/0]
Committing SAM database
Sending DsReplicateUpdateRefs for all the replicated partitions
Setting isSynchronized and dsServiceName
Setting up secrets database
Joined domain AD (SID S-1-5-21-3879549028-3895635520-2867903743) as a DC

root@graz-dc-bis.ad.tao.at# samba -i
samba version 4.1.6-Debian started.
Copyright Andrew Tridgell and the Samba Team 1992-2013
At this time the 'samba' binary should only be used for either:
'server role = active directory domain controller' or to access the ntvfs file server with 'server services = +smb' or the rpc proxy with 'dcerpc endpoint servers = remote'
You should start smbd/nmbd/winbindd instead for domain member and standalone file server tasks

root@graz-dc-bis.ad.tao.at# samba-tool testparm --parameter-name="server role"
active directory domain controller