# WHATPORT(7004)

## NAME

port 7004 — AFS Authentication Server (kaserver) — AFS's legacy built-in Kerberos v4 authentication server — long deprecated in OpenAFS.

Protocol: TCP/UDP  
IANA registry

## DESCRIPTION

IANA registers 7004 as afs3-kaserver, the AFS/Kerberos authentication service. The kaserver was AFS's own Kerberos v4 key distribution centre, issuing the tokens an AFS client needs before a file server will serve it. OpenAFS deprecated it in favour of a real Kerberos 5 KDC (MIT or Heimdal), so a live 7004 usually means an old, unmigrated AFS cell rather than a current deployment. AFS traffic here is Rx over UDP, so a TCP-only scan will typically show nothing even when the service is running.

## EXPOSURE

**Do not expose.** Kerberos v4 is obsolete and its key exchange is not considered sound; a reachable kaserver is an authentication service that should have been retired, not firewalled.

## CHECK

```sh
sudo nmap -sU -p 7004 TARGET
```

## SEE ALSO

- docs — [OpenAFS Administration Guide](https://docs.openafs.org/AdminGuide/index.html) (docs.openafs.org)
- source — [OpenAFS source repository](https://github.com/openafs/openafs) (github.com)
- iana — [IANA Service Name and Transport Protocol Port Number Registry — 7004](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=7004) (iana.org)

---

HTML: <https://whatport.net/7004/> · JSON: <https://whatport.net/7004.json> · full dataset: <https://whatport.net/ports.json>