Do you think this is caused Location directive used for a location and a sublocation? I tested on a fresh apache. The <directory> directive works as expected (i.e. only user1, user2 and user3 can access bbb/) (But still I am prompted for password even if I do not access bbb/): <Directory /usr/local/apache2/htdocs/aaa> .... Require valid-user .... </Directory> <Directory /usr/local/apache2/htdocs/aaa/bbb> .... Require user user1 user2 ..... </Directory> thanks --- On Thu, 20/8/09, Eric Covener <covener@xxxxxxxxx> wrote: > From: Eric Covener <covener@xxxxxxxxx> > Subject: Re: 'require' keyword > To: users@xxxxxxxxxxxxxxxx, aw@xxxxxxxxxx > Date: Thursday, 20 August, 2009, 6:21 PM > On Thu, Aug 20, 2009 at 10:55 AM, > André Warnier<aw@xxxxxxxxxx> > wrote: > > Melanie Pfefer wrote: > > ... > > > >> Require user user1 > >> Require user user2 > > > > Melanie, > > I believe you may be caught by the fact that the two > lines above actually > > express /two/ requirements, cumulatively, which cannot > be both met at the > > same time. > > > > Try this : > > Require user user1 user2 > > This should not result in a functional change. > Multiple requires are > OR'ed, even when on different Require ... lines or > from different > modules. > > > Require user user1 > > Require user user2 > > Satisfy any > > Satisfy only changes how access control and authorization > interact, > not how multiple authorization directives interact. > > -- > Eric Covener > covener@xxxxxxxxx > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP > Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more > info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > Send instant messages to your online friends http://uk.messenger.yahoo.com --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx