Another gotcha when migrating from apache 1.x to 2.x: The included htpasswd command will generate an .htpasswd with no group or world read bits: -rw-------. You will of course not notice this for a very long time, though it will seem obvious in retrospect. When your .htaccess auth doesn’t work, you will think the .htaccess syntax has changed, but not be able to figure out where. It hasn’t. But the Apache 2 docs don’t mention jack.
Music: The Fall :: Spectre Versus Rector