On 4 Aug 2012, at 11:57, Matthew Newton <mcn4 at leicester.ac.uk> wrote: > On Sat, Aug 04, 2012 at 11:10:38AM +0200, Klaus Klein wrote: >> Therefore I'm a bit puzzled that if no matching entry in users >> is found that the authentication still takes place. > authorize { files if (notfound || noop) { reject } } ??