Change dns backend

service samba-ad-dc  stop

apt-get install bind9

service bind9  stop

• because i am to lazy to config apparmor

apt-get remove apparmor
reboot

• add this to named.conf.local

include "/var/lib/samba/private/named.conf";

• add this to named.conf.local

tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";

• remove from smb.conf

server services = ........ -dns

• change in

/var/lib/samba/private/named.conf

# For BIND 9.9.0
database "dlopen /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_9.so";

service samba-ad-dc  start

service bind9  start