I need to authenticate squid users by Active Directory. My Microsoft domain is "inside.it" into internal network (every pc name is according to "clientname.inside.it") and AD domain controllers have Win 2000 server as os. On my external network (dmz) I have another domain that is "external.it"; it's not MS domain and it's used to introduce me on Internet about emails and web services. E.g. : my email address: Riccardo.external.it my company www site: www.external.it My dns is Bind9 and in my company it's available only for Squid (to solve sitenames) infact my clients were not able to query to it. My Squid version is 2.7 Stable3 and it stays on the same server where there is Bind. Can keep these 2 domains as divided and independent for integrating Squid authentication to Active Directory ? I read that, for creating this system, I have to insert my squid into domain by SAMBA packet but my purpose is keeping same behaviour and environment. Riccardo