search for: infra2

...for requested realm As you see, it's trying to find a KDC for the _workgroup_ name, not the DNS name. I suppose that it has no trouble locating a DC for the correct realm name (because it doesn't log any errors and that part of it works fine). wbinfo --all-domains gives me this: BUILTIN INFRA2 (which is the host name) MYDOMAIN (the NetBIOS name again) The first attempt to "net ads join" the domain also _apparently_ failed with the same symptom, the second attempt worked (well, it told me the DNS update failed, but that's most likely a permissions issue with the preexisting...