Hello Victor, If you see 'received type 1 NTLM token' message it means your IE was not able to use the Kerberos auth and have chosen NTLM instead. Please ensure you are browsing from *domain joined* machine and using NTLM/Kerberos authentication wrapper as described in http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory#Install_negotiate_wrapper. If you do not want to use NTLM then probably our humble guide will be of any use - http://docs.diladele.com/administrator_guide_3_4/installation_and_removal/active_directory/index.html Best regards, Rafael ________________________________________ From: squid-users <squid-users-bounces@xxxxxxxxxxxxxxxxxxxxx> on behalf of Victor Sudakov <sudakov@xxxxxxxxxxxxxxxx> Sent: Friday, October 3, 2014 1:51 PM To: Amos Jeffries Cc: squid-users@xxxxxxxxxxxxxxxxxxxxx Subject: Re: leaking memory in squid 3.4.8 and 3.4.7. Amos Jeffries wrote: > There are two things you can do to further improve performance: > 1) converting from NTLM to Kerberos authentication. Does Kerberos proxy authentication work with Firefox (Windows) at all? Success stories and recipes, anyone? NTLM did work both with Firefox and MSIE and even Chrome. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:sudakov@xxxxxxxxxxxxxxxx _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users