Windows domain unavailable

I am using UCS 5. I had to take down my primary controller (A), promote my backup (B), reinstall UCS on A as a backup, promote A to primary again, and reinstall UCS on B as backup.

After this process, I seem to have no Windows domain. I’m getting errors from PCs like “We can’t sign you in with this credential because your domain isn’t available.” I can’t see the root Windows domain share \\[domain] or any samba shares on \\A or \\B.

I’m hoping there’s a script I can run or some other simple way of recreating the domain.

I still have certificates in /etc/univention/ssl, including ucsCA, ucs-sso.[domain], and univention-directory-manager.[domain], if that makes a difference. Is there supposed to be one for the bare domain?