* nelhage has the [krbroot
command](http://web.mit.edu/nelhage/Public/krbroot), with which you
use syntax like "krbroot ssh linerva" when you want to use your
- root instance for a command. You can also "krbroot shell".
+ root instance for a command. You can also "krbroot shell". adehnert [extended it](https://www.dehnerts.com/gitweb/?p=user/alex/software/my-snippets.git;a=blob;f=krbroot;hb=HEAD) to add a `krbroot screen` subcommand, use `ATHENA_USER`, and support arbitrary principals.
* quentin and broder wrote [kdo](http://web.mit.edu/snippets/kerberos/kdo),
which is similar in spirit to krbroot, but designed for Mac OS
You should change your root instance’s password with a command like this, to upgrade your key from critically weak DES encryption algorithm to strong AES encryption:
- kadmin -p andersk/root -q 'cpw -e aes256-cts:normal -e aes128-cts:normal andersk/root'
+ kadmin -p andersk/root -q 'cpw -e aes256-cts:normal,aes128-cts:normal andersk/root'
-(Note: This might make your password incompatible with a [handful of services](http://debathena.mit.edu/trac/ticket/529) that you should not have been using with your root instance in the first place.) You can confirm the change with
+(Note: This previously made your password incompatible with a [handful of services](http://debathena.mit.edu/trac/ticket/529) that you should not have been using with your root instance in the first place, but these services have now been fixed.) You can confirm the change with
kadmin -p andersk/root -q 'getprinc andersk/root'