we are running squid 2.6stable16 with ntlm auth. we use winbind to support challenge response auth so that there is no user interaction or password dialog popup. is it possible to force basic auth - so that no ntlm-auth is used or tried before - for certain clients (eg acl javavm browser java) or urls? proxy-auth uses settings from auth_param but you can't define which auth-schema being used, right? markus