Adding a new admin
On all KDCs: /var/heimdal/kadmind.acl
On all KDCs and fileservers (make sure you modify the AFS server/UserList on all of them!):
/etc/openafs/server/UserList pts cu user.admin pts adduser user.admin system:administrators
Machines
KDCs: barium, sodium, potassium
AFS: vos listaddrs and go down the list to see which ones are current, and "gafs" as well (though this one isn't so critical, as it won't cause the new account script to barf if you forget 