Hi, I wrote two squid helper programs which are available at http://squidkerbauth.sourceforge.net/ The first program is a Kerberos based authentication helper program and uses the Proxy Negotiate header with SPNEGO/Kerberos tokens. It will be part of future squid-2 releases. The second help is a authorisation helper program using ldap against Active Directory with SASL/GSSAPI authentication. This is in a beta state. Both programs work in a multi domain Kerberos environment with Firefox and IE7 on Linux and Solaris. For more details see the readme in Sourceforge's CVS at http://squidkerbauth.cvs.sourceforge.net/squidkerbauth Regards Markus
