diff --git a/machines/kerberos.metznet.ca.scm b/machines/kerberos.metznet.ca.scm
index d36d3cf..17de14c 100644
--- a/machines/kerberos.metznet.ca.scm
+++ b/machines/kerberos.metznet.ca.scm
@@ -287,6 +287,26 @@ cryptography.")
                                                                "KRB5_KDC_PROFILE=/etc/kdc.conf")
                                                               #:user "root"
                                                               #:group "root"))
+                          (stop #~(make-kill-destructor)))
+        (shepherd-service (documentation "")
+                          (provision '(kadmind))
+                          (requirement '(networking user-processes))
+                          (start #~(make-forkexec-constructor (list #$(file-append
+                                                                       (kdc-configuration-krb5
+                                                                        configuration)
+                                                                       "/sbin/kadmind")
+                                                               "-nofork" "-P"
+                                                               "/run/kadmind.pid")
+                                                              #:environment-variables
+                                                              (list (string-append
+                                                                     "LD_LIBRARY_PATH=${LD_LIBRARY_PATH}:"
+                                                                     #$(kdc-configuration-krb5
+                                                                        configuration)
+                                                                     "/lib/krb5/plugins/kdb")
+                                                               "SSL_CERT_DIR=/etc/ssl/certs"
+                                                               "KRB5_KDC_PROFILE=/etc/kdc.conf")
+                                                              #:user "root"
+                                                              #:group "root"))
                           (stop #~(make-kill-destructor)))))
 
 (define kdc-service-type