You need a special hash, none of native AD your properti should have REALM:MD5(user:REALM:password) On Tuesday 13 January 2009 08:59:46 Leonardo Rodrigues Magalhães wrote: > i'm actually running squid (2.7 stable4) with squid_ldap_auth for > authenticating users in my MS Active Directory tree. I'm running: > > auth_param basic program /usr/bin/squid_ldap_auth -R -b > "dc=XXXXXXX,dc=XXXXX" -D "cn=XXXXX,ou=Internet,dc=XXXXXX,dc=XXXXXXX" > -w "XXXXXX" -f sAMAccountName=%s -h 192.168.0.8 > > > i was trying to change from basic authentication to digest one, so > avoiding cleartext passwords to flow over network. but i'm not having > success on that. > > > can anyone share a working digest_ldap_auth syntax that is working > to authenticate users in MS AD ??? > > Thanks.