AuthType does not work for subdirs
 

cat subdir/.htaccess

AuthType basic
AuthName "Secured area"
AuthUserFile /some/.htmaster/.ok_user
Require valid-user

works for URL

http://site.dk/subdir/

asking user/password

but does not for

http://site.dk/subdir/cgi/test-cgi

Why?

Any body here?

Just a guess:

Make sure have / in the end of both URI and Location.

Static Context Definition
URI /private/
Location private/

Location? is it required? .htaccess is in folder I want to protect, why
I have to put location tag there?

It should work.
When you test the second URL, you should close all your browser window first, browser will remember the authentication when you test the first URL.
Is there a .htacess under /subdir/cgi/ folder? what is the content?
Also, you can switch back to Apache temporarily to verify your configuration see if it is working as you expected or not.

Switch back is not an option. No .htaccess in subfolders.

Please try 4.2.2 release, it should work now.

/usr/local/lsws/admin/misc/lsup.sh -f -v 4.2.2

Oh! You have new version released! Can I see change log or release notes?