In case anyone else runs into trouble with the ntlm_auth helper for squid or winbind (failing to auth after a bad password until a wbinfo -t is issued) the following worked: I rebuilt samba with --build=i386-linux (even though this is an Opteron 246 on Fedora Core 4), re-joined the domain, and all is well. <shrug> John E.P. Hynes System Administrator Prime, Buchholz & Associates, Inc. 25 Chestnut Street Portsmouth, NH 03801 Phone: (603) 433-1143 x1193 Fax: (603) 433-8661 E-Mail: johnh@primebuchholz.com