samba4

https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC

https://help.univention.com/t/samba-4-troubleshooting/32

debug geral:
https://wiki.samba.org/index.php/Samba_AD_DC_Troubleshooting

problemas no acesso às políticas de grupo na pasta sysvol:

getfacl /var/lib/samba/sysvol/samba.aefm.pt/Policies/

resultado:

https://www.tecmint.com/join-ubuntu-to-active-directory-domain-member-s…

https://lists.samba.org/archive/samba/2015-June/thread.html#192519
https://wiki.archlinux.org/index.php/Samba/Active_Directory_domain_cont…
https://aur.archlinux.org/packages/samba-dhcpd-update/

samba-tool drs showrepl - Directory Replication Services (DRS) management. - Show replication status.

#Disable password expiration for the Administrator account.
samba-tool user setexpiry Administrator --noexpiry

#Show domain level password options.
samba-tool domain passwordsettings show

#Disable password complexity at the domain level.
samba-tool domain passwordsettings set --complexity=off

#Disable password history at the domain level.
samba-tool domain passwordsettings set --history-length=0

#Disable password min-age at the domain level.
samba-tool domain passwordsettings set --min-pwd-age=0

penso que o problema passa por isto https://github.com/lxc/lxd/issues/3442

como os datasets estão numa pool zfs provavelmente fazer isto resolve:
zfs set xattr=sa dados
zfs set acltype=posixacl dados

https://blog.alt255.com/post/posix-acls/

nope, não resolve! contentor privilegiado, sim.

******************************* modificação do nome do servidor

como se trata de um contentor lxc a alteração será feita na config
lxc.utsname = lxc_dc1.aefm.local

******************************* modificar o ficheiro /etc/resolv.conf

search aefm.local
nameserver 127.0.0.1

******************************* comentar na config da vm lxc_dc1 a linha seguinte para permitir a gestão de quotas e setfattr