Domains provisioned with Windows 2000 don't have an tombstoneLifetime attribute on the nTDSService object. We should fallback to the default of 180 instead of failing.
Fixed in master by 2ef79a4c1d695a3e498b142810a1317d85b9b6da for Samba 4.11. Closing, can be re-opened for a backport if/when desired.
Created attachment 15247 [details] patch for 4.10 cherry-picked from master Re-opening bug with the backport, this is simple and worth putting in 4.10
Created attachment 15278 [details] Patches for v4-9-test
Andrew, can we please have this for 4.9 too?
Comment on attachment 15278 [details] Patches for v4-9-test Thanks for the 4.9 backport, looks good!
G'Day Karolin, Please select for 4.9.next and 4.10.next
(In reply to Andrew Bartlett from comment #6) Pushed to autobuild-v4-{10,9}-test.
(In reply to Karolin Seeger from comment #7) Pushed to both branches. Closing out bug report. Thanks!