ubuntu 18.04 and later are a bit messier to domain join thanks to systemd-resolved. by default kerberos looks at /etc/resolv.conf for its dns information, and by default systemd-resolved symlinks /etc/resolv.conf to /run/systemd/resolve/stub-resolv.conf which very helpfully provides localhost as the nameserver: