Adding/Extracting AFS Service Key

• kadmin:

  • addprinc -e des-cbc-crc:normal -randkey afs/irealm.awesmoe.org
  • ktadd -k /tmp/afs.keytab -e des-cbc-crc:normal afs/irealm.awesmoe.org

• ktadd will tell you the afs/realm KVNO

• At a shell prompt:

  • sudo /usr/afs/bin/asetkey add 5 /tmp/afs.keytab \ afs/irealm.awesmoe.org
• my KVNO happened to be 5