samba-tool reuires python3-Markdown only if it was built as DC with MIT
kerberos.
This is bad. python3-Markdown is required even it was built with Heimdal
kerberos:

Index: samba.spec
===================================================================
--- samba.spec  (revision 11810e8fe55875da766cbbe350b4df85)
+++ samba.spec  (working copy)
@@ -548,7 +548,7 @@
 Requires:       samba = %{version}
 Requires:       samba-ldb-ldap = %{version}
 Requires:       samba-python3 = %{version}
-%if %{with_mit_dc}
+%if %{with_dc}
 Requires:       python3-Markdown
 %endif