AFS's legacy built-in Kerberos v4 authentication server — long deprecated in OpenAFS.
IANA registers 7004 as afs3-kaserver, the AFS/Kerberos authentication service. The kaserver was AFS's own Kerberos v4 key distribution centre, issuing the tokens an AFS client needs before a file server will serve it. OpenAFS deprecated it in favour of a real Kerberos 5 KDC (MIT or Heimdal), so a live 7004 usually means an old, unmigrated AFS cell rather than a current deployment. AFS traffic here is Rx over UDP, so a TCP-only scan will typically show nothing even when the service is running.
Do not expose
Kerberos v4 is obsolete and its key exchange is not considered sound; a reachable kaserver is an authentication service that should have been retired, not firewalled.
$ sudo nmap -sU -p 7004 TARGETSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.