using Apache/2.4.38 (Debian) with Debian-style split config. Here are the relevant bits of a vhost. This is in /etc/apache2/sites-enabled/000-default.
<VirtualHost *> ServerName www.example.org DocumentRoot /var/www/example CustomLog /var/log/apache2/example/access.log combined <Directory "/var/www/example/" > # DISABLE THE ENTIRE DOCROOT Require all denied </Directory> </VirtualHost> I restarted Apache and browsed a page that isn't in cache. It loaded as normal. My real question is that basic file auth is also ignored, but I thought I'd start simple. Things that might be related, to rule them out: ${APACHE_LOCK_DIR} and ${APACHE_RUN_DIR} are not defined. I have the compatibility module loaded, as I migrated from 2.2, but as far as I can see I have no remaining 2.2 syntax in my config. Let me know what else you may need and I'll provide it. Thanks --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org