Connecting to legacy AFP services

Older, less secure authentication methods are not enabled by default in OS X Lion and Mountain Lion. You can enable one or more of these methods to support legacy devices or protocols by following these steps:

    1. Open Terminal.
    2. Execute the following commands:
      sudo chmod o+w /Library/Preferences
      sudo defaults write /Library/Preferences/ afp_host_prefs_version -int 1


  1. Make an AFP connection to another system so that the AFP Client preference file will be filled in with the default set of values. Note: You must connect as a registered user, not as a guest.
  2. Execute the following command to see a list of the disabled User Authentication Methods (UAMs)
    defaults read /Library/Preferences/ afp_disabled_uams

    By default the disabled UAMs are “Cleartxt Passwrd”, “MS2.0”, “2-Way Randnum exchange”, and “DHCAST128”.Note: If you don’t see a list, restart your computer and repeat step 3.

  3. To enable one of these UAMs, remove it from the list of disabled UAMs. For example, this command enables DHCAST128 by removing it from the list of disabled authentication methods:
    sudo defaults write /Library/Preferences/ afp_disabled_uams -array "Cleartxt Passwrd" "MS2.0" "2-Way Randnum exchange"
  4. After the desired changes have been made, restore the permissions on the Preferences folder with this command:
    sudo chmod o-w /Library/Preferences

Leave a Reply