I should have mentioned. It's a bad idea to have your password files under
your Document Root. Store them outside of it for security, although this
isn't why you are having a problem.

In the previous configuration I sent, the "order deny,allow" etc statements
aren't strictly necessary, but are useful if you plan to give users on
specific IP numbers or specific domains access to your server without a
username and password. ie, you can have

deny from all
allow from "IP", "Domain"
etc (without the quotes).

John

-----Original Message-----
From: Veronique Kraft [mailto:[EMAIL PROTECTED]]
Sent: 18 February 2000 05:54
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Username & Password

[snip]
        AuthUserFile /export/users/vekraft/apache/secret/.htpasswd
        AuthGroupFile /export/users/vekraft/apache/secret/.htgroup
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to