I use squidnt 2.6 stable 4 on Windows 2003 with Active Directory Integration My squid.conf is: -------------squid.conf-------------- external_acl_type NT_global_group %LOGIN c:/squid/libexec/mswin_check_lm_group.exe -G -c acl DomainUsers external NT_global_group "c:/squid/etc/DomainUsers.txt" acl Proxy_Messengers_yes external NT_global_group Proxy_Messengers_yes acl Proxy_Internet_Ts external NT_global_group Proxy_Internet_Ts acl Proxy_All_Open external NT_global_group Proxy_All_Open acl Proxy_ftp_porn_block_yes external NT_global_group Proxy_ftp_porn_block_yes auth_param ntlm children 100 http_access deny Proxy_Internet_Ts !trustedsites http_access allow enabled http_access deny porn !Proxy_All_Open deny_info ERR_PORN_ACCESS_DENIED porn http_access deny bad_word_content_type !Proxy_ftp_porn_block_yes !Proxy_All_Open deny_info ERR_PORN_ACCESS_DENIED bad_word_content_type http_access deny msnmessenger !Proxy_Messengers_yes !Proxy_All_Open http_access deny msnweb !Proxy_Messengers_yes !Proxy_All_Open http_access deny msnit !Proxy_Messengers_yes !Proxy_All_Open http_access deny BadDest !Proxy_Messengers_yes !Proxy_All_Open http_access deny rs_deny !rs_allowed http_access deny ftpblock !Proxy_ftp_porn_block_yes !Proxy_All_Open http_access allow autorizzati DomainUsers -------------squid.con-------------- Problem: As you can see all Domain users (apart members of "Proxy_All_Open") can't visit porn site and the acl works correctly blocking them but the error message displayed is always: "Cache Access Denied.Sorry, you are not currently allowed to request:from this cache until you have authenticated yourself" And not my customized html file ubicated in C:\squid\share\errors\Italian\ERR_PORN_ACCESS_DENIED When using ip based rules (in the past...before to using ntlm auth)this problem there wasn't and my acl was always the same: http_access deny porn !secmano_ip_no_restriction deny_info ERR_PORN_ACCESS_DENIED porn Do someone know what is wrong?
