in Server Admin: the choices are Standard, Kerberos, and Any Method.
When set to Any Method, AFP will first try to authenticate via Kerberos. If unavailable on the clients machine, AFP will show an error to the clients machine and then try standard authentication (which encrypts authentication over AFP)