MostOfMyMac.com

In certain cases, it may be desirable to rebuild the Kerberos Key Distribution Center (KDC) on a 10.5 server in a manner that retains the existing databases for LDAP and PasswordServer.  The steps outlined in this article will accomplish this. Note: You must have at least one of the “Recoverable Authentication Methods” (WebDAV-Digest and/or APOP) checked in the Policy tab under Settings for the Open Directory service in Server Admin, otherwise passwords will not be recreated properly.   Important: Be sure to back up the files mentioned in the steps below prior to editing or deleting them.