I resolved this by using a simple process I had forgotten I discovered last August.
First, on the Master, run the following post-archive restoration:
sudo mkpassdb -kerberize
Then you need to demote the PDC on the Master back to Standalone. Don’t worry, unlike demoting the Open Directory, this won’t destroy anything. Then re-promote to PDC. This somehow re-sequences the Domain SID.
After the above my BDC capability on a new Replica was restored. 😀
Comments are closed