$ net ads join -U duncan
Enter duncan's password:
Using short domain name -- A22713
Joined 'A227-13-CLIENT' to dns domain 'a22713.cis226.a227.cis'

$realm -v join A22713.CIS226.A227.CIS
 * Resolving: _ldap._tcp.a22713.cis226.a227.cis
 * Performing LDAP DSE lookup on: 10.227.2.23
 * Performing LDAP DSE lookup on: 192.168.27.1
 * Performing LDAP DSE lookup on: 172.27.27.1
 * Successfully discovered: a22713.cis226.a227.cis
 * Unconditionally checking packages
 * Resolving required packages
 * LANG=C /usr/sbin/adcli join --verbose --domain a22713.cis226.a227.cis --domain-realm A22713.CIS226.A227.CIS --domain-controller 10.227.2.23 --login-type user --login-ccache=/var/cache/realmd/realm-ad-kerberos-HHZ48Y
 * Using domain name: a22713.cis226.a227.cis
 * Calculated computer account name from fqdn: A227-13-CLIENT
 * Using domain realm: a22713.cis226.a227.cis
 * Sending netlogon pings to domain controller: ldap://10.227.2.23
 * Received NetLogon info from: a227-13.a22713.cis226.a227.cis
 * Wrote out krb5.conf snippet to /var/cache/realmd/adcli-krb5-LkmwSp/krb5.d/adcli-krb5-conf-UPNngB
 ! Couldn't authenticate to active directory: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Server not found in Kerberos database)
adcli: couldn't connect to a22713.cis226.a227.cis domain: Couldn't authenticate to active directory: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Server not found in Kerberos database)
 ! Insufficient permissions to join the domain
Password for Administrator:
 * Unconditionally checking packages
 * Resolving required packages
 * LANG=C /usr/sbin/adcli join --verbose --domain a22713.cis226.a227.cis --domain-realm A22713.CIS226.A227.CIS --domain-controller 10.227.2.23 --login-type user --login-user Administrator --stdin-password
 * Using domain name: a22713.cis226.a227.cis
 * Calculated computer account name from fqdn: A227-13-CLIENT
 * Using domain realm: a22713.cis226.a227.cis
 * Sending netlogon pings to domain controller: ldap://10.227.2.23
 * Received NetLogon info from: a227-13.a22713.cis226.a227.cis
 * Wrote out krb5.conf snippet to /var/cache/realmd/adcli-krb5-NQw4OE/krb5.d/adcli-krb5-conf-nCSNeb
 * Authenticated as user: Administrator@A22713.CIS226.A227.CIS
 ! Couldn't authenticate to active directory: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Server not found in Kerberos database)
adcli: couldn't connect to a22713.cis226.a227.cis domain: Couldn't authenticate to active directory: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Server not found in Kerberos database)
 ! Insufficient permissions to join the domain
realm: Couldn't join realm: Insufficient permissions to join the domain