> yes, it does reply success for challenge/response authentication! > Don't I have to build squid with the winbind helpers then?
No - you're using Samba 3. As Henrik said, you need to use the helpers that Samba provides, not Squid. (I agree, Henrik - that must be at least the 5th time this week this has come up) All you need to do is compile Squid with support for the relevant auth types (basic and/or NTLM) - you do not specifically add the winbind helpers. When you build Samba 3, it provides a winbind helper that supports both basic and NTLM auth - you use that helper. Adam
