Thanx for your advice. But maybe i don't understand what do you mean. -If if i use the domain group membership, i must not use the win32_NTLM_auth? But if i don't use it, squid send me an error (if i prefix the line with "auth_param ntlm program" by a '#') what is the authentification helper i must use? Basic? with the external acl actually configured? 2005/8/24, Serassio Guido <guido.serassio@xxxxxxxxxxxxxxxxx>: > Hi, > > At 11.24 24/08/2005, guillaume.chardin@xxxxxxxxx wrote: > > >Hi, > >I experience a problem with squid NT installed on a winXP pro member > >of a win2000 Active directory domain. > > > >The proxy cache works perfectly ans authentication too. But sometimes, > >when client use it (by Internet Explorer or firefox) it ask for login > >and password few time. After entering the same username and password > >that it was used for the connection, we can access to the cache. > > > cut > >here is my squid.conf > > > >auth_param ntlm program c:/squid/libexec/win32_ntlm_auth.exe -A proxy-alwd > > > >external_acl_type NT_global_group %LOGIN > >c:/squid/libexec/win32_check_group.exe -G -c > > If you are already using external ACL group membership, you don't > need the group membership done by win32_ntlm_auth. This feature is > intended for little proxy, not member of domains. > > Regards > > Guido > > > > - > ======================================================== > Guido Serassio > Acme Consulting S.r.l. - Microsoft Certified Partner > Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY > Tel. : +39.011.9530135 Fax. : +39.011.9781115 > Email: guido.serassio@xxxxxxxxxxxxxxxxx > WWW: http://www.acmeconsulting.it/ > >
