On Tue, Sep 16, 2008 at 11:35:22PM +0800, lhmwzy wrote: > I think when client ip address isn't 10.68.49.21,then should prompt > the enter username and password.if the username and password isn't > right,the last should deny access or display not authroised. This is controlled by "satisfy any|all" directive. -- Igor Sysoev http://sysoev.ru/en/