First, we configure the "default" to be a very restrictive set of   features.                                                          
<Directory />
    Options FollowSymLinks
    AllowOverride None
</Directory>






HTACCESS

AuthUserFile /var/www/.htpasswd
AuthType Basic
AuthName "name"
Require valid-user


httpd.conf
#
# AllowOverride controls what directives may be placed in .htaccess files.
# It can be "All", "None", or any combination of the keywords:
#   Options FileInfo AuthConfig Limit Indexes
#
    AllowOverride AuthConfig