Thank you for your reply!

I've tried by IP, using two machines on different subnets that both could ping the DSS (and vice versa), and FQDN.

I probably disabled the dynamic discovery in VMWare (is it by default? I never checked, since I install by kickstart script and use static discovery there), but I cannot see how that would be the cause the MS discovery authentication failure.

Any other ideas?