Disabling apache user authentication for a subdirectory?

[Scott Garman]

Hi group,

I have an apache server (2.0.46, RHEL 3) which requires SSL and user
authentication by default for everything it serves, like so:

httpd.conf snippet:

<Directory />
    Options FollowSymLinks
    AllowOverride All
    Order deny,allow
    Allow from all

    AuthPAM_Enabled on
    AuthName "Secure Login"
    AuthType Basic
    Require valid-user
    SSLRequireSSL
</Directory>

And I would like to disable the user auth requirement for one
subdirectory on the server (a Mandrake mirror):

<Directory "/var/www/html/mandrake10">
    Options Indexes
    Satisfy Any
</Directory>

This works, sort of. If I use a utility like wget I can download files
within that subdirectory, but using any web browser (Firefox, Mozilla,
Epiphany, IE) still pops up a login dialog box. However, if you just hit
"Cancel" on that login dialog (several times), you do get access to the
page. 

I've tried several combinations of things and read documentation on all
of the apache directives I'm using, and I don't get what's going on. Any
thoughts?

Thanks,

Scott

-- 
Scott Garman
sgarman at iname dot com