Hi

I installed apache a few days ago and have been experimenting with it. Have been working though examples in a Apache book. Currently on the subject of security, what i want to do is to password protect a directory in my website. I am trying Basic HTTP Authentication, have created the userfile and groupfile and saved them in the apache directory. Have also created a .htaccess text file which the book tells me to save in the directory i want to protect. But when i access the directory through a browser i get stright in without been asked for a password. Anyone had similar problems and know the solution or knows a good link to somewhere that does.

Many thanks Martin

What does .htaccess contain? What are permissions on .htaccess, .htpasswd, and index.html? Does Apache have "AllowOverrides" enabled.

.htaccess contains:

AuthName "mod_auth Test Realm"
AuthType Basic
AuthUserFile /usr/local/apache2/auth/userfile
AuthGroupFile /usr/local/apache2/auth/groupfile
require group admins friends

I think because of the way i have set it up that everything need the root permission. Is this the wrong way to do it?

I have set AllowOverides to 'all' but no luck