RE: [cobalt-users] .htaccess

["Dan Kriwitsky" <webhosting@xxxxxxxxx>]

> 
> I am trying to protect a directory and found a thread in the 
> archives that I have followed but am still having problems.
> 
> My htaccess file looks like this:
> 
> AuthName Protected-Directory
> AuthType Basic
> AuthUserFile /home/sites/site2/web/clients/.htpasswd
> <limit GET POST>
> require valid-user
> </limit>
> ErrorDocument 401 /noauth.htm
> 

You need AuthPAM_Enabled off
I'm not sure if it's required, but I also had AuthGroupFile /dev/null

I would also recommend putting the .htpasswd file above the /web
directory so it's not web accessible.
http://www.cgi-factory.com/password/index.shtml is a script I installed
for a client to write to the authorized list.

If it's a RaQ4 you need to make a change to the AllowOverride field.