Hello I did net/vampire with success. 1) I noticed that second domain controller not listening on port 3268. Is this normal ? ( /usr/local/samba/private/dns_update_list file suggest to have record for gc service for second domain controller ) 2) Should I add record for dc2 in /etc/krb5.conf on both servers ? I suggest [realms] TEST.LOCAL = { kdc = dc1.test.local:88 *kdc = dc2.test.local:88* admin_server = dc1.test.local:749 *admin_server = dc2.test.local:749* default_domain = test.local