Originally Posted by vishesh
I guess, You should also try by opening port tcp:389 and udp:53
Many thanks for this. It still doesn't work but that's not to say you haven't solved it, as it doesn't work anymore without iptables on...
...I think I need to re-join the domain, then getent group with the new rules and a new ticket in place.