LinuxQuestions.org - (debian - samba) about stored credentials and security

Hello all,

im working on a samba file server over debian, and im trying to make a scheme like this:

IMPORTANT NOTE; IM WORKING WITHOUT ANY DOMAIN

//192.168.1.254 is the server which shares:
1->home dirs (personal, only visible by each user, need password)
2->common folder (personal, shared by all people who were given a password)
3->shared folder with public files for everyone (no password)

*edit, "security" is a parameter in /etc/samba/smb.conf file, i use either user or share values.

In security = user,
private home dirs -> OK
common folders -> OK
i need to specify a password to access //192.168.1.254, so no public passwordless folder -> WRONG

In security = shared,
public folder without providing password and no password when accessing //192.168.1.254 -> OK
there arent home dirs -> WRONG
i cant use common folder, because it ask for a password, but the user is "guest", and is greyed-out so i cant change it! -> WRONG

So,
-I think security = shared can only offer userless&passwordless access ONLY. right?

-Security = user maybe more flexible, but i should create any kind of fake user&pass and spread it in order to access... right?

-Can i make 2 samba servers (any kind of alias), one of it passwordless (security = shared), another one with authentication (Security = user)?

I would like to hear oppinions about what direction to take

also, im making tests only with 1 client right now... when i access a user && password, its stored, i dont know if in windows XP client, or in samba server... how can i delete it so i can keep testing?
thanks