The problem is actually with winbind, as the following produces identical results: 1) /usr/local/samba/bin/wbinfo -a mydomain\\myname%myrealpassword plaintext password authentication succeeded challenge/response password authentication succeeded 2) /usr/local/samba/bin/wbinfo -a mydomain\\myname%aboguspassword plaintext password authentication failed error code was NT_STATUS_WRONG_PASSWORD (0xc000006a) error messsage was: Wrong Password Could not authenticate user mydomain\myname%aboguspassword with plaintext password challenge/response password authentication failed error code was NT_STATUS_ACCESS_DENIED (0xc0000022) error messsage was: Access denied Could not authenticate user mydomain\myname with challenge/response 3) /usr/local/samba/bin/wbinfo -a mydomain\\myname%myrealpassword plaintext password authentication failed error code was NT_STATUS_WRONG_PASSWORD (0xc000006a) error messsage was: Wrong Password Could not authenticate user mydomain\myname%aboguspassword with plaintext password challenge/response password authentication failed error code was NT_STATUS_ACCESS_DENIED (0xc0000022) error messsage was: Access denied Could not authenticate user mydomain\myname with challenge/response 4) /usr/local/samba/bin/wbinfo -t checking the trust secret via RPC calls succeeded 5) /usr/local/samba/bin/wbinfo -a mydomain\\myname%myrealpassword plaintext password authentication succeeded challenge/response password authentication succeeded John E.P. Hynes System Administrator Prime, Buchholz & Associates, Inc. 25 Chestnut Street Portsmouth, NH 03801 Phone: (603) 433-1143 x1193 Fax: (603) 433-8661 E-Mail: johnh@primebuchholz.com