Hello, Almost ready to sitch my squid 2.5S9 in production, but some few more test and I find a strange problem. Sometime I have my IE prompting for a username/password, since the NLTM is (look like) working i try to find out why I'm getting this request. I try to look int the cache, my access.log, nothing there. any clue why ? Where to loko ? here is my config: # Authentication scheme ## NTLM auth auth_param ntlm program /opt/samba/bin/ntlm_auth --helper-protocol=squid-2.5-ntl mssp auth_param ntlm children 64 auth_param ntlm max_challenge_lifetime 30 minutes auth_param ntlm max_challenge_reuses 0 ## basic auth auth_param basic program /opt/samba/bin/ntlm_auth --helper-protocol=squid-2.5-ba sic auth_param basic children 64 auth_param basic credentialsttl 2 hours auth_param basic realm CAI Internet access control Genève #authenticate_cache_garbage_interval 10 minute #authenticate_ttl 10 minute external_acl_type NT_global_group concurrency=64 %LOGIN /opt/squid/libexec/wbinfo_group.pl acl techuser external NT_global_group D-CH\SurfeursWebCCH-T acl webuser external NT_global_group D-CH\SurfeursWebCCH D-CH\SurfeursWebCCH-T D-CH\SurfeursWebBCH D-CH\SurfeursWebHCH acl cai-auth proxy_auth REQUIRED # cache directory info cache_dir diskd /cache1 25000 64 256 cache_replacement_policy LFUDA maximum_object_size 20 MB cache_swap_high 80 cache_swap_low 70 redirect_children 20 coredump_dir /usr/local/squid/var forwarded_for off hierarchy_stoplist cgi-bin ? http_access deny ftp !techuser http_access allow cai-auth webuser http_access deny all Arno Streuli ****************************************************************** DISCLAIMER - E-MAIL ------------------- The information contained in this E-Mail is intended for the named recipient(s). It may contain certain privileged and confidential information, or information which is otherwise protected from disclosure. If you are not the intended recipient, you must not copy,distribute or take any action in reliance on this information ******************************************************************