freeBSD 11.3, apache 24 with mod_ldap, mod_authz_ldap loaded in http.conf

here is the configuration for ldap in http.conf

LDAPSharedCacheSize 200000
LDAPCacheEntries 1024
LDAPCacheTTL 600
LDAPOpCacheEntries 1024
LDAPOpCacheTTL 600

LDAPTrustedGlobalCert CA_BASE64 /usr/local/etc/CA.pem
LDAPTrustedMode SSL

< Directory />
    AuthLDAPURL ldaps://ldap.jackyu.org/dc=jackyu,dc=org?uid
    AuthLDAPGroupAttributeIsDN off
    AuthLDAPGroupAttribute memberUid
    AuthLDAPBindDN cn=pamclient,ou=SystemAdmin,dc=jackyu,dc=org
    AuthLDAPBindPassword xyz
    AuthType basic
    AuthName "Secure Access"
    AuthBasicProvider ldap
    require ldap-group cn=family,ou=group,dc=jackyu,dc=org
    AllowOverride None
    Order deny,allow
    Deny from all
#    AuthzLDAPAuthoritative on (this is removed in apache 24)
< /Directory>

For apapche 22, this configuration works fine, but for apache 24, when user tries to access the site, it shows forbidden (403 error), without prompting user the login popup. User has no chance to login.

This apache 24 server can connect to ldap server in the shell for user authentication. The problem is apache 24 doesn't prompt user login when user tries to access the site.