I needed a way to find KDCs for a domain. Here’s how I did it for TCP and UDP.

dig SRV _kerberos._udp.DOMAINNAME

And similarly for TCP.

dig SRV _kerberos._tcp.DOMAINNAME