Comment Re:AFS server issue is a remote root vulnerability (Score 1) 74
For the record, the root user can login to AFP if one enables root login in the NetInfo database.
Look in the local NetInfo /config/AppleFileServer/ at the allow_root_login property. If it is set to 1 instead of 0 then the root user may use AFP. It's best to leave it at 0 but one doesn't have to do so.
Look in the local NetInfo