yup, that's what mod_auth_config did. However, mod_auth_config;
1. invokes auth for the local directives (not <Auth> sectioned)
2. invokes auth for all <Auth> sections.
providing the explicit list in AuthBasicProvider would ensure we walk the provider configs correctly.
No, the module that was posted had no concept of providers. The right place to do this is at the provider level not the hook level. -- justin
