> It seems that I misunderstood what you meant. Do you want the PROXY to > authenticate against its parent? Independently from who is the user it > acts in behalf of? Yes, that's the idea. All users are restricted to the same ACL, so I see no reason to try to auth w/ differnt users, except maybe for tracking which computers are going where, but I can figure that out later.