I had intended this to CC: to the list... <sigh>
> <location /foo*> > AuthName "foo control" > AuthType Basic > PerlAuthenHandler Apache::OK > PerlAuthzHanlder WW_authz > PerlSetVar Mask Geek > require usermask geeky > </location> I have a similar setup, and my directory/authentication block is as follows: <Location /reports> DirectoryIndex stats.html PerlAuthenHandler +Apache::AuthenCache +Stat::Auth Apache::AuthenCache::manage_cache # AuthenCache Directives PerlSetVar AuthenCache_Encrypted Off # AuthenCache Directives AuthName "Stats (Your username is your Account ID)" AuthType Basic require valid-user Options +Includes ErrorDocument 403 /error/loginfail.html </Location> As listed, every path under /reports is subject to authentication. Naturally, auth in a SUBDIRECTORY can be overridden: <Location /reports/special> # Makes this directory globally accessible # in spite of its parent and siblings still # falling under the above listed AUTH handling. PerlAuthenHandler Apache::OK </Location> HTH! L8r, Rob #!/usr/bin/perl -w use Disclaimer qw/:standard/;