> Is there a way to: > > a) check authentication > b) if authentication succeeds, access proxy with those credentials > c) if it doesn't succeed, fall back to allow anyway > > Theoretically , acl ntlm_users proxy_auth REQUIRED (alc name assumes ntlm is auth. scheme) http_access allow ntlm_users http_access allow all Perhaps, M.