[Freeipa-users] Re: Cannot find KDC for realm (dns on another machine)

You have realm SOME.NETWORK and primary IPA domain pri.some.network. IPA actually expects that primary domain and realm are the same (naming context above has to be the same as the primary domain). If you want to use SOME.NETWORK as your realm, you have to own DNS domain some.network too and set it as your primary domain when deploying the initial master. It is OK to have that master in a different DNS domain -- as long as DNS is resolvable in a normal way, that should work.