Lots of people are going to tell you not to use kaserver, and instead install a real kerberos kdc. While they are right, that won't solve your immediate problem, which is probably that the 'afs' identity doesn't exist in your kaserver