Greetings, Just configured sarg and squid with pam auth I am very curious as to why my users are displaying as IP instead of usernames. NUMACCESSED SITEUSERS 1metrics.adobe.com 172.150.1.254 2www.acrobat.com172.150.1.254 3www.adobe.com172.150.1.254 4www.google.co.za172.150.1.254 5www.google.com172.150.1.254 6wwwimages.adobe.com172.150.1.254 Here is a nippet of the access.log 172.150.1.254 - danny [12/Nov/2005:12:34:06 +0200] "GET http://www.adobe.com/images/css/1dot.gif HTTP/1.0" 302 376 TCP_MISS:DIRECT 172.150.1.254 - danny [12/Nov/2005:12:34:06 +0200] "GET http://wwwimages.adobe.com/www.adobe.com/images/finalmark.gif HTTP/1.0" 200 1287 TCP_MISS:DIRECT 172.150.1.254 - danny [12/Nov/2005:12:34:06 +0200] "GET http://www.adobe.com/images/anav_products.gif HTTP/1.0" 302 381 TCP_MISS:DIRECT Note the username is in there. I am running fwlsasolburg:/usr/lib # rpm -qa | grep squid squid-2.5.STABLE10-5 fwlsasolburg:/usr/lib # rpm -qa | grep sarg sarg-2.0.8-3 fwlsasolburg:/usr/lib # Has anyone got a solution for this? Just FYI it is resolving ip's in the Internet Usage Report NUMUSERIDCONNECTBYTES%BYTESIN-CACHE-OUTELAPSED TIMEMILISEC%TIME 1viademo1.metsimaholo.gov.za89512.51K100.00%0.00%100.00%00:00:0000.00% mmm.. Whats missing... Chadley