Apache .htaccess file

[DCT Jared Smith]

You need to specify what kind of actions you're limiting.

You want to surround the "require group users" with this tag: 
<Limit GET POST>
require group users
</Limit>

You can also use DENY ALL and then REQUIRE GROUP USERS,
take a look at this tiny tutorial, or do a brief search on Google for
more examples:

http://www.theriver.com/trwrc/htaccess.html

>what is the proper way in requiring a password access via https?
>I can only get it to work using non-secure means using this .htaccess file using 
http://www.domain.com/members

>AuthType Basic
>AuthName "members only"
>AuthGroupFile /www/members/.htgroup
>AuthUserFile /www/users/usrs
>require group users

>If I point to https://www.domain.com/members it goes right through without a prompt for a password.

>What am I missing here.