For sites switching over to the encrypted password format, Samba provides an option that should help with the transition. The
update
encrypted
option allows a site to ease into using encrypted passwords from plaintext passwords. You can activate this option as follows:
[global]
update encrypted = yes
This instructs Samba to create an encrypted version of each user's Unix password in the
smbpasswd file each time he or she connects to a share. When this option is enabled, you must have the
encrypt
passwords
option set to
no
so that the client will pass plaintext passwords to Samba to use to update the files. Once each user has connected at least once, you can set
encrypted
passwords
=
yes
, allowing you to use only the encrypted passwords. The user must already have a valid entry in the
smbpasswd file for this option to work.