Thanks Henrik for your informative reply. Just last 2 questions below. --- Henrik Nordstrom <hno@xxxxxxxxxxxxxxx> wrote: > On Fri, 12 Aug 2005, Tay Teck Wee wrote: > > > 1) But it would be most strange that squid on > version > > 2.4 could serve up the pop-up auth box while > version > > 2.5 cannot. > > Not at all. > > 2.4 does not know about the HTTP breakage introduced > by Microsoft in their > NTLM & Negotiate authentication schemes, and will > happily forward the > messages as seen resulting in total caos after a > while (including major > security issues on the server). What kind of chaos can we expect? > > 2.5 knows both NTLM and Negotiate violates HTTP and > can not be proxied in > a good manner. > > Also newer versions of MSIE and IIS also knows this > and will automatically > disable the use of NTLM and Negotiate when a proxy > is detected. > How does one auth then? Send instant messages to your online friends http://asia.messenger.yahoo.com