> I think that controls the interaction between user authentication > and host authentication. I'm not using any user authentication. > However, adding 'Satisfy any' fixes it. Is that because the > host authentication is still denying access, but the default user > authentication is to allow? Or because the host authentication > is working OK and the default user authentication is to permit? I'm not 1000% clear, but I think it is moreso that Satisfy controls how two phases (access control and authorization) are combined, and require "providers" are in the latter phase even though they make user-indepdendent authorization decisions. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx