mod_authz_default Authorization fallback module Base mod_authz_default.c authz_default_module Available in Apache 2.1 and later

This module is designed to be the fallback module, if you don't have configured an authorization module like mod_authz_user or mod_authz_groupfile. It simply rejects any authorization request.

 AuthzDefaultAuthoritative Sets whether authorization is passed to lower level modules AuthzDefaultAuthoritative On|Off AuthzDefaultAuthoritative On directory.htaccess AuthConfig

Setting the AuthzDefaultAuthoritative directive explicitly to Off allows for authorization to be passed on to lower level modules (as defined in the modules.c files).

Note

Normally there are no lower level modules, since mod_authz_default is defined to be already on a very low level. Therefore you should leave the value of AuthzDefaultAuthoritative as default (On).