>I think its a matter of "username" (Basic) vs "DOMAIN@username" >(Kerberos). > >You can test this by replacing the group lookup with a fake >external_acl_helper which logs the credentials passed to the group helper. >Doing a few requests through both auth mechanisms will show you what >difference the group helper sees. Amos, I made a simple perl script that takes STDIN and writes it to a file in /var/log/squid that is owned by squid:squid and returns "OK" but its not working. Either I missed the error with ALL,9 (I didn’t know which module to focus on). How does one get a helper to log in cache.log like the included binaries do when you enable debug in them? Thanks! jlc