By default, the AFP proxy user does not have permission to read the passwords for users of a password policy. The AFP user can log in to the AFP server only when the AFP proxy user is granted rights to read the password in the password policy.