--- smb.conf.5 2006-11-14 11:02:05.000000000 +0100 +++ smb.conf.5.new 2007-01-26 19:32:12.624702166 +0100 @@ -1810,7 +1810,7 @@ encrypt passwords (G) This boolean controls whether encrypted passwords will be negotiated with the client. Note that Windows NT 4.0 SP3 and above and also Windows 98 will by default expect encrypted passwords unless a registry entry is changed. To use encrypted passwords in Samba see the chapter "User Database" in the Samba HOWTO Collection. .sp -MS Windows clients that expect Microsoft encrypted passwords and that do not have plain text password support enabled will be able to connect only to a Samba server that has encypted password support enabled and for which the user accounts have a valid encrypted password. Refer to the smbpasswd command man page for information regarding the creation of encrypted passwords for user accounts. +MS Windows clients that expect Microsoft encrypted passwords and that do not have plain text password support enabled will be able to connect only to a Samba server that has encrypted password support enabled and for which the user accounts have a valid encrypted password. Refer to the smbpasswd command man page for information regarding the creation of encrypted passwords for user accounts. .sp The use of plain text passwords is NOT advised as support for this feature is no longer maintained in Microsoft Windows products. If you want to use plain text passwords you must set this parameter to no. .sp @@ -2599,7 +2599,7 @@ The LANMAN encrypted response is easily broken, due to it's case-insensitive nature, and the choice of algorithm. Servers without Windows 95/98/ME or MS DOS clients are advised to disable this option. .sp Unlike the -\fBencypt passwords\fR +\fBencrypt passwords\fR option, this parameter cannot alter client behaviour, and the LANMAN response will still be sent over the network. See the \fBclient lanman auth\fR to disable this for Samba's clients (such as smbclient)