Hi Russ,
isi auth krb5 realm create --realm=VLABKDC.LOCAL --kdc=ldapkdc.demo.local --admin-server=ldapkdc.demo.local --default-domain=demo.local
Should be
isi auth krb5 realm create --realm=VLABKDC.LOCAL --kdc=ldap-kdc.demo.local --admin-server=ldap-kdc.demo.local --default-domain=demo.local
Jeremy Freeman and Walt Wright told me about this. I have not verified it myself.