Hi Folks, i know this question has been asked a thousend times before but i hope you will help anyway. I wanted to secure a subdirectory of my web-root by password and i created a file .htaccess with the following content and moved it to the subdir. AuthUserFile /usr/local/httpd/htdocs/.htpasswd AuthGroupFile /dev/null AuthName Intern AuthType Basic <Limit GET> require valid-user </Limit> /usr/local/httpd/htdocs/.htpasswd does exist and was created using htpasswd. Entries in my httpd.conf AccessFileName .htaccess AllowOverride All Everything seems to be ok, but whenever i open the subdirectory with my webbrowser it opens without the password check. it seems like the server is just ignoring the file.... aby ideas?? t.i.a. alex - To unsubscribe from this list: send the line "unsubscribe linux-newbie" in the body of a message to [EMAIL PROTECTED] Please read the FAQ at http://www.linux-learn.org/faqs