tis 2009-08-18 klockan 22:06 +0200 skrev Youenn Boussard: > 1 - do a transparent authentication in windows with squid (ntlm or > kerberos). Yes. > 2 - append an http header after that to a backend server with user > principal name (user@domain) or an header domain\user ? Yes. The login name can be sent in a faked Basic authentication header to the backend. See the login= option to cache_peer. Regards Henrik