prevent unauthorized user to get in this directory

[nickyeng]

i have /members directory, and a form.html

i have a .htaccess file to prevent unauthorized ppl to get in.

.htaccess file
group.file
password file
All in directory /members

but everytime i access the http:://hostname/members/form.html, it wiill success and why no pop-up the box and ask for password?

i have this .htaccess file:

AuthType Basic
AuthName "Password Required"
AuthUserFile password
AuthGroupFile group.file
Require Group authors
 

and my password file created using htpasswd utility from apache.
one user named user1, password is one.

the group file i created by using textpad and then save as group.file format

authors: user1 user2
 

What is wrong then?
Please help..
thanks
from NIck

[AricC]

I've never messed around with .htaccess, but here is a pretty good tutorial that may help. Also, this is probably a typo but:

http:://hostname/members/form.html

Should be:

http://hostname/members/form.html

[nickyeng]

I've never messed around with .htaccess, but here is a pretty good tutorial that may help. Also, this is probably a typo but:

http:://hostname/members/form.html

Should be:

http://hostname/members/form.html

thanks for corrected me for that.
the server i run is decius account named something like this:

/export/home/student/w0050853/xxx/html/
# which is equilavent to the following adress call :
# http://decius.xxx.xxx:44000/
 

the address i request is

http://decius.xxx.xxx:44000/ass2/members/form.html
 

the .htaccess file contain:

AuthType Basic
AuthName "Password Required"
AuthUserFile /export/home/student/w0050853/xxx/html/ass2/members/password
Require valid-user
 

Is it something wrong with my AuthUserFile?
because i can't make sure my path is correct, but i try every directory path already and no help.

[nickyeng]

my path to password is

/home/student/w0050853/xxx/html/ass2/members/password
 

why it still couldn't pop up the authentication box..???

oh my god, i'm headache!!!