Hi all, After some digging in the Apache docs I managed to come up with the following configuration snippet to secure my whole server excluding one directory: <Location /proxyserver> Order deny,allow Allow from all Satisfy any ProxyPass http://someproxyserver.com ProxyPassReverse http://someproxyserver.com </Location> <Location /> AuthType Basic AuthName "myserver" AuthUserFile /path/to/userfile AuthGroupFile /path/to/groupfile Require group mygroup </Location> Now for some reason the "/proxyserver" location still asks for a user/password, but allows entry nonetheless. I get a pop-up three times which I can just cancel and then I can access the page. Any idea how to avoid this? I need to access that location programmatically and I get confronted with an authorization which I don't want to handle in my code... Kind Regards, Jan --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx