Ok. Let me be a bit more annoying. Is it necessary to use the pure ntlm auth following the negotiate? In what case the negotiate ntlm will not succeed and the pure ntlm will do? One more thing: Can i set two basic auth methods? One with the ntlm_auth with helper-protocol "squid-2.5-basic", and another with basic_ldap_auth? Seems that, in some cases, my basic_ldap_auth is receiving "samaccountname=none" and thus failing. Probably from some Internet Explorer behind a load balancer or a NAT. So i thought of trying ntlm basic too, but i couldn't find any example with two basic authentications and don't know if that makes any sense. thanks!
