Migrate/replace Samba AD DC to new server

Check that it is not something simple like NTP synchronization issue - so that the system clock on the new DC differs from the existing DC by more than 5 minutes.

Just in case these articles are useful to you:
https://logmeonce.com/resources/kinit-password-incorrect-while-getting-initial-credentials/