diff --git a/exec/binkit.js b/exec/binkit.js
index bec5adaf2348562e3d54b60201e5e962aa775fa5..533e5714d242e61d4133f3daddd5a2bf99a73587 100644
--- a/exec/binkit.js
+++ b/exec/binkit.js
@@ -839,7 +839,7 @@ function inbound_auth_cb(pwd, bp)
 			}
 			else {
 				// TODO: Deal with arrays of passwords?
-				if (bp.cb_data.binkitcfg.node[addr].nomd5)
+				if (!bp.cb_data.binkitcfg.node[addr].nomd5)	// AllowPlainPasswords=false
 					log(LOG_WARNING, "CRAM-MD5 required (and not provided) by " + addr);
 				else if (bp.cb_data.binkitcfg.node[addr].pass === pwd[0]) {
 					log(LOG_INFO, "Plain-text password match for " + addr);