i've generated my password file w/ the htpasswd command. my .htaccess file looks like this: Code: AuthUserFile /Users/zim/Sites/.htpasswd AuthName ByPassword AuthType Basic Require valid-user i've removed index.html from ~/Sites. when i browse to http://127.0.0.1/~zim, i get a directory listing, but no user/password challenge. this is my first foray into apache. i've made no changes to the default install (i'm on osx 10.2.6). here's some apache info: Code: [~] > httpd -V Server version: Apache/1.3.27 (Darwin) Server built: 01/15/03 19:22:17 Server's Module Magic Number: 19990320:13 Server compiled with.... -D EAPI -D HAVE_MMAP -D USE_MMAP_SCOREBOARD -D USE_MMAP_FILES -D HAVE_FCNTL_SERIALIZED_ACCEPT -D HAVE_FLOCK_SERIALIZED_ACCEPT -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT -D HARD_SERVER_LIMIT=2048 -D HTTPD_ROOT="/usr" -D SUEXEC_BIN="/usr/sbin/suexec" -D DEFAULT_PIDLOG="/var/run/httpd.pid" -D DEFAULT_SCOREBOARD="/var/run/httpd.scoreboard" -D DEFAULT_LOCKFILE="/var/run/httpd.lock" -D DEFAULT_ERRORLOG="/var/log/httpd/error_log" -D TYPES_CONFIG_FILE="/etc/httpd/mime.types" -D SERVER_CONFIG_FILE="/etc/httpd/httpd.conf" -D ACCESS_CONFIG_FILE="/etc/httpd/access.conf" -D RESOURCE_CONFIG_FILE="/etc/httpd/srm.conf" obviously, i'd like to get the password challenge working. anyone have any ideas?