Oh, stupid me. I apologize for the previous post in German. My problem (apache 2.0.63): I have a certain path, protected by mod_auth_ldap. Access is granted to authenticated users only. Now, I need to deny access for all members of a certain LDAP group, but all the other users still must have access. I thought somthing like this can solve the problem: <Location /path/to/somewhere/> Auth-stuff require valid-user <LimitExcept ALL> require group cn=.... </LimitExcept> </Location> But I wonder about the LimitExcept directive. I do not want to include all possible methods here. Is there a more intelligent way to solve my problem? Again, sorry for the German noise :-) Rainer --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx