Jan, > It's not clear to me from the documentation how to configure > ntlm authentication if the local samba server is also the > PDC. The users that need to authenticate to the proxy server > are the same users that are known to samba. Do I also need to > use winbind? If yes, how does it need to be configured? Yes, you need to use winbindd. The config is pretty simple: log file = /var/log/samba/log.%m workgroup = <DOMAIN NAME> password server = <Domain controller> security = domain winbind uid = 10000-20000 winbind gid = 10000-20000 winbind use default domain = yes That's all I did! Then test it with something like this: /usr/bin/wbinfo -u