OK ... Thanks for the tip .. We have some groups here that have access to a limited set of sites, so our rules are like the following: http_access allow group set_of_sites http_access deny group I guess we will have to turn them upside down :-) The weirdest thing is that these rules used to work, until we applied the security rollup for W2k SP4. After that, we had some problems regarding squid rules with windows groups. Due to that, we removed the security rollup. Then two things happened: the password prompts related to deny rules, and our basic authentication, that was broken before the installation of the security rollup, turned to work again ... Regards, Carlos. 2005/8/5, Henrik Nordstrom <hno@xxxxxxxxxxxxxxx>: > On Tue, 2 Aug 2005, Carlos Zottmann wrote: > > > The problem we are facing is that when a user hits a rule that denies > > access, squid falls back to basic authentication and prompts the user > > for a new username and password. > > Make sure your deny lines end with a non-authentication related ACL, for > example "all". > > Regards > Henrik >