Squid Active directory, Samba and Kerberos

["Logu" <logsnaath@xxxxxxx>]

Hi,

I want to authenticate squid proxy users against Active Directory (win2k). 
Should I go for ntlm authentication or basic squid ldap authentication. what 
are the advantages and disadvantages of both. I have read the documents for 
ntlm authentication and came to know that it requires samba, winbind and 
kerberos. Why do we need these packages to communicate to the Active 
Directory. I have earlier configured pam_ntlm authentication for telnet and 
other applications for which just a samba server which will act as PDC or a 
workgroup. But why in this case it requires samba ( and Kerberos) even 
though there is a domain controller (win2k with AD).

Thanks
-logu