Turns out the tdbbackup method was a red herring. What I am seeing though is that I can use "net ads testjoin" to rebind without having to authenticate. Running this with debug I see that the /var/run/samba/smb_krb5/krb5.conf.DOMAIN file is generated.
Turns out the tdbbackup method was a red herring. What I am seeing though is that I can use "net ads testjoin" to rebind without having to authenticate. Running this with debug I see that the /var/run/ samba/smb_ krb5/krb5. conf.DOMAIN file is generated.