Notes on private directory:

1. for most documentation, see:
http://www.uchicago.edu/docs/home-doc/password.html

2. to get real directory for .htaccess file, use sftp and do pwd. As of 12/28/2002, this was:
/data/vhosts/studentorgs/InterVarsity

3. Other modifications to .htaccess:
+ no <LIMIT=GET> or whatever (rules apply to all methods: GET, POST, etc.)
+ no specific user: any valid user can log in (allows adding of users to htpasswd if necessary).

4. Permissions:
folder: 710 (drwx--x---)
.htaccess: 640 (rw-r-----)
.htpasswd: 640
everything else can be whatever. Note that the server (httpd?) runs as group (possibly html?), and needs group execute permissions on the folder, and read permissions on htaccess and htpasswd.

5. You MUST have an index.html file in the directory!