On Mon, 1 Mar 2004, Henrik Nordstrom wrote:

> [major] Several NTLM related bugfixes and improvements fixing the problem
> of random auth popups and account lockouts. Optional support for the
> NEGOTIATE NTLM packet is also added to allow Samba-3.0.2 or later to
> negotiate the use of NTLMv2 or NTLM2.

Unfortunately it was quickly discovered that a new small but critical bug
crept into the NTLM code of 2.5.STABLE5 in certain configurations. Patch
and workaround available from the Squid-2.5.STABLE5 patches page