Active Directory replication failed because the DS could not derive an SPN
The DS cannot derive a service principal name (SPN) with which to mutually authenticate the target server.
Active Directory replication failed because the local directory database lacks the information required to derive the target server's service principal name for mutual authentication.
