>if you do a wbinfo -a username%password do you get plaintext password = >succeeded and encrypted password succeeded? Just tried it and plaintext succeeded. Also that challenge/response failed. Remember that username starts with domain- where - is the separator character specified in smb.conf.