Dave Raven wrote: > We are currently talking to samba, but we are able to join the > domain. Where we sit right now is that if we use -basic instead of > -ntlmssp it works fine. I've narrowed it down to the password that's the > problem - its obtaining the user, domain and workstation just fine. All > the command line tools work perfectly - only when using auth_param ntlm * > does it fail... > > As far as I have been able to understand it, there is either a problem > with the way squid is passing the reply to the ntlm challenge to the > helper, or a problem with the helper... You can test plaintext and challenge/response authentication from the command line using wbinfo: wbinfo -a username%password You should get success for both plaintext and challenge/response. If not, then you know the problem is with Samba, rather than Squid or ntlm_auth. Adam