apache/subversion with ldap

[hhding <hhding.gnu@gmail.com>]

hi, my friends

I try to verify access of svn user from apache by openldap.
I create userA and userB with schema posixAccount
and create groupA with schema posixGroups in openldap and add userA to it.
then I add line *Require group cn=groupA,dc=my* to apache's config file.
but, both userA and userB can login to subversion. why?

below is the version I use :
apache2 Version: 2.2.6-3
slapd Version: 2.3.38-1
libapache2-svn 1.4.4dfsg1-1

and attachements are complete config files

dn: dc=my
objectClass: dcObject
objectClass: organization
o: Example Company
dc: my

dn: cn=admin,dc=my
objectClass: organizationalRole
cn: admin

dn: uid=userA,dc=my
objectClass: top
objectClass: posixAccount
objectClass: account
cn: userA
uid: userA
uidNumber: 1
gidNumber: 1
homeDirectory: /home/userA
userPassword: 1

dn: uid=userB,dc=my
objectClass: top
objectClass: posixAccount
objectClass: account
cn: userB
uid: userB
uidNumber: 2
gidNumber: 2
homeDirectory: /home/userB
userPassword: 1

dn: cn=groupA,dc=my
objectClass: top
objectClass: posixGroup
cn: groupA
gidNumber: 1
memberUid: userA

<Location /svn>

  DAV svn

  SVNPath /var/lib/svn
  AuthType basic
  AuthName "SVN"
  AuthBasicProvider ldap
  AuthzLDAPAuthoritative on
  AuthLDAPURL ldap://localhost:389/dc=my?uid
  Require group cn=groupA,dc=my

  AuthzSVNAccessFile /etc/apache2/dav_svn.authz
</Location>

[/]
* = r