hello, I'm trying to migrate on digest sheme, the problem is that many clients doesn't works in this case - incompatible - for example wget. So I need a negotiate identification scheme, or something similar like: If digest fail the user try the second ident method. 1 - Digest 2 - Ldap basic I thing I misunderstanding something, because there is no negotiation. I can do something like this with squid 3.2 ? auth_param negotiate program /usr/lib/squid/digest_ldap_auth -b "ou=People,dc=ldap,dc=test" -h 127.0.0.1:389 -u "uid" -A "l" -D "ou=People,dc=ldap,dc=test" auth_param digest realm TEST auth_param digest children 200 startup=20 idle=20 auth_param digest nonce_garbage_interval 5 minutes auth_param digest nonce_max_duration 60 minutes auth_param digest nonce_max_count 6 auth_param basic program /usr/lib/squid/squid_ldap_auth -v 3 -b ou=People,dc=ldap,dc=test -h 127.0.0.1:389 auth_param basic realm TEST2 auth_param basic children 100 startup=50 idle=20 Thanks for any advice. Regards, Fred