So, your experience is that with _kerberos._tcp entries but no _kerberos._udp entries it works.
However, with _kerberos._udp and _kerberos._tcp entries both, it fails? If so, that's a bug. With modern (say post Windows XP), I'd imagine that TCP only will be fine. However, if adding the UDP entries causes a failure, I definitely should work with upstream. --Sam