You must define or install a DNS server for the tenant.

There must be a DNS server available from the tenant network which can be used to resolve the name of the domain so that the tenant can authenticate.