[Samba] kerberos/samba errors?

[jimc]

These two problems must be related.

kinit: cannot resolve servers for kdc in realm "${REALM}" while getting 
initial credentials

samba-tool dns zonelist catnip
yadda
yadda,
etc.
failed to connect to host 127.0.1.1 on port 135 NT_STATUS_REFUSED

krb5 is as provided in /usr/local/samba/share/setup/krb5.conf

/etc/services shows port 135 as:

loc-srv  135-tcp  emap
loc_srv 137-udp emap

What we need is a 'hitch hiker's guide to linux', which will at least 
have "DON'T PANIC" in large friendly letters on the cover.

-jimc