auth.plain [ "method" => "basic", "realm" => "test", "file" => "/etc/lighttpd2/test.plain" ]; if req.env["REMOTE_USER"] !~ "^(foo1|foo2)$" { auth.deny; }This action uses lua only to create the action, no lua is executed to handle requests in this case. Be careful: the empty username matches unauthenticated users.