Thanks Jeroen. I got it working. Now I just need allow some sites to a specific group. But it seems i cant use dstdomain to do that. #Grupo Acesso Padrao acl ldapAcessoPadrao external ldap_group AcessoPadrao # ACL com sites permitidos para Acesso Padrao acl acesso_padrao dstdomain -i "/usr/local/squid/sites_acesso_padrao" http_access deny ldapAcessoPadrao http_access allow ldapAcessoPadrao acesso_padrao Any suggestions? 2009/12/24 Jeroen Ruijter <jeroen.ruijter@xxxxxxxxxxxxxxx>: > Dear Sir/Madam, > > I have successfully enabled LDAP authentication between my Squid 3.0 and Windows 2003 Active Directory. > Everything seems to work correctly, but in my access.log I see for every https connection TCP_DENIED/407. > Strange enough most sites seem to work fine. > > On my previous squid proxy we used NCSA auth, I get the same errors there. > > When I disabled proxy_auth it all seems to work fine. > > Can anyone give me a hint what to do? > > Regards Jeroen Ruijter >