Zhao, the <Directory /> can still have AllowOverride None (it is much more secure this way), only the <Directory /your-site-root/> needs to have AllowOverride All. I'm glad it's working. :)