By default, in case of error with either afs:user or afs:group parameter, all authentication parameters are ignored (user, group), a message appears in the output feed and the query is rejected. Set QueryParsing/discardOnError parameter to false to avoid this behavior.