KDC service check and Kerberos authenticated DNS updates both Critical

I was able to get Samba / KDC running again by re-provisioning the Samba server following this HowTo: Re-Provisioning Samba4 on a DC Master