> NT box. The question is, can Samba generate the cleartext password from > the NT hash, never. the only "clean" way to get the clear-text password is to write a replacement NIS+ L.S.A. (local security authority) for nt clients. and microsoft, knowing full well what this means, is not prepared to release the API for Lsa development.