I notice that in Andrew Bartlett's authentication the default for the 'plaintext to smbpasswd' parameter is False. I'm just wondering whether a better default would be to True if 'encrypt passwords' is set to True. Tim.