well, i got password changing in TNG working. AGAIN. someone was bitching about it, so in order not to lose them [if it don't work, i have to use 2.0.x], decided to fix it. worked my way through a series of about four separate bugs (!), starting client-side so that i would be able to test using rpcclient against samba itself if needs be. worked my way through an anonymous-connection netlogond bug [samba's TNG daemons all call the netlogond daemon for authentication purposes, it's the only sane, single-code-path way to do it, as NT has a multi-level authentication scheme...], and it turns out that there *is* such a concept as anyonymous encrytped DCE/RPC :) so had to fix that.

all very satisfying to actually see it working, so did a 2.5.2 alpha release, hooray.