Hello. I'm using this to authenticate users with active directory by username. auth_param ntlm program /usr/src/samba/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 5 auth_param ntlm max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 20 minutes #auth_param ntlm use_ntlm_negotiate off auth_param basic program /usr/src/samba/bin/ntlm_auth --helper-protocol=squid-2.5-basic auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours auth_param basic casesensitive off acl squid_access proxy_auth REQUIRED http_access allow squid_access What I have to change to authenticate by group? Thanks Wilson