Samba AD DC runs in a Linux container, so you must prepend samba-tool invocations (and similar commands) with nsdc-run, like
nsdc-run -- samba-tool domain passwordsettings show
Samba AD DC runs in a Linux container, so you must prepend samba-tool invocations (and similar commands) with nsdc-run, like
nsdc-run -- samba-tool domain passwordsettings show