Hi! I got ntlm working against a Windows 2008 AD domain in native mode. But i got some problem with some sites thats sends a popup for login for the squid server to the requested site. As i read this is a problem when the site uses Microsoft JAVA ? I can create an acl thats allow this urls but that is some work to maintain... What is the best way to handle this? And why do i get a deny of every request when using AUTH ? is this the way it designed ? first a deny the a refresh 0 citrix28.jll.jllad.se TCP_DENIED/407 2056 GET http://www.projectplace.se/Projektplatsen_images/newsticker.gif jll\jore NONE/- text/html 1253694393.722 1 citrix28.jll.jllad.se TCP_DENIED/407 2234 GET http://www.projectplace.se/Projektplatsen_images/newsticker.gif - NONE/- text/html 1253694393.750 19 citrix28.jll.jllad.se TCP_REFRESH_HIT/304 408 GET http://www.projectplace.se/Projektplatsen_images/newsticker.gif jore DIRECT/92.123.155.18 image/gif Regards Anders -- Med Vänliga Hälsningar Best Regards * Anders Larsson * Systemadmin Unix/Linux * Tieto * 831 48 ÖSTERSUND * Växel: +46 (0)63 664 63 00 * Fax: +46 (0)63 664 63 20 * Tel: +46 (0)10 481 98 01 * Mobil: +46 (0)70 656 42 64 * Mail: anders.larsson@xxxxxxxxx ********************************************** ---- Debian is they way to salvation ---- --- How Hard Can It Be ---