> So, a question is: how to do that user input log\pass only once (in logon in domain) & Squid > will no longer ask him log\pass, but still was authorization? Maybe is there anything options with > 'external_acl_type ... %LOGIN'? Or else where... The squid wiki has an example of how to do this (recently updated): http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory