Apparently OpenAFS does not really use unix accounts, and some chicanery is required to get the two to work together, and for all to be kosher. I am not a fan.