mod_auth_mysql should decline if it fails to authenticate a user when MySQLAuthAuthoritative Off is set. Without this patch mod_auth_mysql doesn't decline properly when doing a 'require group foo', it checks to see if the user exists in the group table and returns a auth failure if not. Thats broken :P
Created attachment 32578 [details, diff] patch to fix bug
please add metadata
Added thanks for the patch.