Using samba-tools drs clone-cd-database seem to work.
How to perform the takeover over the cli?
root@ucs:~# samba-tool drs clone-dc-database "domain.local" --server=192.168.1.200 -UAdministrator --targetdir /var/tmp/hq-AD --include-secrets
Password for [DOMAIN\Administrator]:
INFO 2021-03-21 09:42:44,949 pid:4928 /usr/lib/python2.7/dist-packages/samba/join.py #1558: workgroup is DOMAIN
INFO 2021-03-21 09:42:44,949 pid:4928 /usr/lib/python2.7/dist-packages/samba/join.py #1561: realm is domain.local
Calling bare provision
INFO 2021-03-21 09:42:44,952 pid:4928 /usr/lib/python2.7/dist-packages/samba/provision/__init__.py #2368: Looking up IPv4 addresses
INFO 2021-03-21 09:42:44,952 pid:4928 /usr/lib/python2.7/dist-packages/samba/provision/__init__.py #2385: Looking up IPv6 addresses
WARNING 2021-03-21 09:42:44,953 pid:4928 /usr/lib/python2.7/dist-packages/samba/provision/__init__.py #2392: No IPv6 address will be assigned
INFO 2021-03-21 09:42:45,747 pid:4928 /usr/lib/python2.7/dist-packages/samba/provision/__init__.py #2558: Setting up share.ldb
INFO 2021-03-21 09:42:45,784 pid:4928 /usr/lib/python2.7/dist-packages/samba/provision/__init__.py #2562: Setting up secrets.ldb
INFO 2021-03-21 09:42:45,805 pid:4928 /usr/lib/python2.7/dist-packages/samba/provision/__init__.py #2568: Setting up the registry
INFO 2021-03-21 09:42:45,837 pid:4928 /usr/lib/python2.7/dist-packages/samba/provision/__init__.py #2571: Setting up the privileges database
INFO 2021-03-21 09:42:45,868 pid:4928 /usr/lib/python2.7/dist-packages/samba/provision/__init__.py #2574: Setting up idmap db
INFO 2021-03-21 09:42:45,897 pid:4928 /usr/lib/python2.7/dist-packages/samba/provision/__init__.py #2581: Setting up SAM db
INFO 2021-03-21 09:42:45,906 pid:4928 /usr/lib/python2.7/dist-packages/samba/provision/__init__.py #887: Setting up sam.ldb partitions and settings
INFO 2021-03-21 09:42:45,907 pid:4928 /usr/lib/python2.7/dist-packages/samba/provision/__init__.py #899: Setting up sam.ldb rootDSE
INFO 2021-03-21 09:42:45,916 pid:4928 /usr/lib/python2.7/dist-packages/samba/provision/__init__.py #1307: Pre-loading the Samba 4 and AD schema
Unable to determine the DomainSID, can not enforce uniqueness constraint on local domainSIDs
INFO 2021-03-21 09:42:45,937 pid:4928 /usr/lib/python2.7/dist-packages/samba/provision/__init__.py #2631: A Kerberos configuration suitable for Samba AD has been generated at /var/tmp/hq-AD/private/krb5.conf
INFO 2021-03-21 09:42:45,937 pid:4928 /usr/lib/python2.7/dist-packages/samba/provision/__init__.py #2632: Merge the contents of this file with your system krb5.conf or replace it with this one. Do not create a symlink!
Provision OK for domain DN DC=domain,DC=local
Starting replication
Using DS_BIND_GUID_W2K3
Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[402/1426] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[804/1426] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[1206/1426] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[1600/1426] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[1774/1426] linked_values[0/0]
Analyze and apply schema objects
Partition[CN=Configuration,DC=domain,DC=local] objects[402/3919] linked_values[0/55]
Partition[CN=Configuration,DC=domain,DC=local] objects[804/3919] linked_values[0/55]
Partition[CN=Configuration,DC=domain,DC=local] objects[1206/3919] linked_values[0/55]
Partition[CN=Configuration,DC=domain,DC=local] objects[1608/3919] linked_values[0/55]
Partition[CN=Configuration,DC=domain,DC=local] objects[1939/3919] linked_values[55/55]
dsdb_replicated_objects_convert: Ignoring object outside partition e936a6ce-2829-49de-920b-589c9d6308d0 CN=Schema,CN=Configuration,DC=domain,DC=local: WERR_DS_ADD_REPLICA_INHIBITED
Partition[CN=Configuration,DC=domain,DC=local] objects[1988/3919] linked_values[55/55]
Replicating critical objects from the base DN of the domain
Partition[DC=domain,DC=local] objects[111/180] linked_values[295/319]
Partition[DC=domain,DC=local] objects[272/4136] linked_values[60/319]
Failed to commit objects: DOS code 0x000021bf
Missing target object - retrying with DRS_GET_TGT
Partition[DC=domain,DC=local] objects[534/4136] linked_values[118/319]
Partition[DC=domain,DC=local] objects[728/4136] linked_values[151/319]
dsdb_replicated_objects_convert: Ignoring object outside partition 7b6fb7bd-5cd9-4b03-9047-26b04aa37e4c CN=Configuration,DC=domain,DC=local: WERR_DS_ADD_REPLICA_INHIBITED
dsdb_replicated_objects_convert: Ignoring object outside partition 4c4c0217-3751-48d7-b151-29372ebf4d85 DC=ForestDnsZones,DC=domain,DC=local: WERR_DS_ADD_REPLICA_INHIBITED
dsdb_replicated_objects_convert: Ignoring object outside partition 751a832a-4820-46fd-a32f-542aa3997206 DC=DomainDnsZones,DC=domain,DC=local: WERR_DS_ADD_REPLICA_INHIBITED
Partition[DC=domain,DC=local] objects[837/4136] linked_values[360/319]
Done with always replicated NC (base, config, schema)
Replicating DC=DomainDnsZones,DC=domain,DC=local
Partition[DC=DomainDnsZones,DC=domain,DC=local] objects[207/211] linked_values[0/0]
Replicating DC=ForestDnsZones,DC=domain,DC=local
Partition[DC=ForestDnsZones,DC=domain,DC=local] objects[8/8] linked_values[0/0]
Committing SAM database
INFO 2021-03-21 09:43:01,636 pid:4928 /usr/lib/python2.7/dist-packages/samba/join.py #1652: Setting isSynchronized and dsServiceName
INFO 2021-03-21 09:43:01,637 pid:4928 /usr/lib/python2.7/dist-packages/samba/join.py #1564: Cloned domain DOMAIN (SID S-1-5-21-890141649-2263398704-4290175720)