From the MSDN documentation, error 1323 means "error unable to update the password". My first set of searches implied that the time was out of sync between the servers. Manual join worked fine and after syncing the time to the DC before the join, I had the same issue.
Then I found a comment here that said add the domain to the username.
And then it worked.