[HOWTO] - Password protect Apache folders

[hazmat]

Really anywhere should be fine I guess. I put it after the DocumentRoot directive.

[setho]

I've followed the directions given by Jadey above, and restarted Apache, but when I view the directory I've protected, there's no request for a username/password.

I noticed the following things (which may be quirks of my server installation or perhaps changes since OS X Server 10.1):

Within /private/etc/httpd/httpd.conf, the "AllowOverride None " directive was commented out, along with the entirety of the (httpd authorization?) section.

Following the instructions, I received an error when I tried to restart Apache. When I uncommented all the directives within the httpd authorization section of httpd.conf, the error did not recur and Apache restarted.

Additionally, there is a comment in the same section as follows:

#### For Mac OS X Server: Any directives in this directory block will be
#### overridden by the ones in the virtual hosts in httpd_macosxserver.conf.

Here's the setup:

Running OS X Server 10.2 on a G4 (not an Xserve).

Trying to protect a directory within a subdomain:

http://seth.foofoofooseth.com/protect/

When I go to the protected directory, it does not prompt for a username/password.

Any suggestions?

Do I need to edit the virtual domains listed in httpd_macosxserver.conf?

Are there overriding "default" configurations in httpd.conf or httpd_macosxserver.conf which are foiling my plans?