| There is a common misconception that you are required to use .htaccess files in order to implement password authentication. This is not the case. Putting authentication directives in a section, in your main server configuration file, is the preferred way to implement this, and .htaccess files should be used only if you don't have access to the main server configuration file.Having said that, if you still think you need to use a .htaccess file, you may find that a configuration such as what follows may work for you.You must have "AllowOverride AuthConfig" in effect for these directives to be honored..htaccess file contents:AuthType BasicAuthName "Password Required"AuthUserFile /www/passwords/password.fileAuthGroupFile /www/passwords/group.fileRequire Group admins Note that AllowOverride AuthConfig must be in effect for these directives to have any effect. |