kinit: krb5_get_init_creds: unable to reach any KDC in realm LOCAL
On macOS the default client does not fall back to TCP.

In your krb.conf prefix your kdc value with tcp/ to force the client to use TCP if your corporate network blocks UDP (A lot of them do).

kdc = tcp/realm.example.com:88