I have a Netware 6sp5 server AFP loaded. But I can't get a good login from
a OS X system. I can intruder lock out the test account from the MAC so I
think I have my ctxs.cfg file correct. User can login from Windows with the
NW client just fine. My password policy does not sync the simple Password.
Is that the problem? Here are my password policy options.

Universal Password Options
Enable Universal Password true
Enable the Advanced Password Rules true
Remove the NDS password when setting Universal Password false
Synchronize NDS password when setting Universal Password true
Synchronize Simple Password when setting Universal Password false
Synchronize Distribution Password when setting Universal Password true
Allow user agent to retrieve password true
Verify whether existing passwords comply with the password policy
(verification occurs on login) false