[users@httpd] apache2.conf AuthType Basic

[Egon Frerich]

I want to allow only user with password to see /gitweb. I put this into 
apache.conf:

|<Directory /opt/gitweb> Options Indexes FollowSymLinks AllowOverride 
None #Require all granted AuthType Basic AuthName "flora" 
AuthBasicProvider file AuthUserFile "/etc/apache2/passwd/passwords" 
Require user xxx </Directory> |

But could see gitweb without a password.

What should I do?

Egon