[squid-users] ntlm authentication

[Ilya]

2) Does every http-response contain user`s username & password 
when ntlm authentication is used?

No. NTLM-over-http is not a HTTP authentication scheme, it 
only tries to masquerade itself as looking like one at first 
glance..



Then how does squid define whether a current http-request 
belongs to an authorized user or not? In HTTP authentication 
scheme each http-request contains username|password, which 
help squid (or authentication helper) to identify user.

wbr,
Ilya