AnsweredAssumed Answered

.htaccess denying access - no more sugar access

Question asked by Jared Feider on May 1, 2014
Hi, I believe I might have hosed my system by overwriting a config file but I am not certain.  When I try to access the sugar directory - like I always did - it simply lists the file contents - that is, nothing is served up via http.  I assume HTTP is working as it servers up test.php with <?php phpinfo(); ?>.  At first the lockout started from a machine on another network 10.0.1. (via VPN) then after restarting apache again the local network, same as the server, 192.168.25. quit getting access.  The apache errors are all the same - example follows:

[Thu May 01 12:03:08.220283 2014] [authz_core:error] [pid 3141:tid 139790666249984] [client 192.168.25.53:54477] AH01630: client denied by server configuration: /srv/httpd/htdocs/sugar/.htaccess

I have a development directory sugardev that is experiencing the same thing.

I did make sure that .htaccess was set per Sugar's site:
# BEGIN SUGARCRM RESTRICTIONS
RedirectMatch 403 (?i)^.*.log$
RedirectMatch 403 (?i)/+not_imported_.*.txt
RedirectMatch 403 (?i)/+(soap|cache|xtemplate|data|examples|include|log4php|metadata|modules)/+.*.(php|tpl)
RedirectMatch 403 (?i)/+emailmandelivery.php
RedirectMatch 403 (?i)/+cache/+upload
# END SUGARCRM RESTRICTIONS
Oddly I had some other stuff in the .htaccess file - not sure if this should be there or not but I tried commenting out and it did not seem to make a difference.

<FilesMatch "<FilesMatch "\.(jpg|png|gif|js|css|ico)$"><IfModule mod_headers.c>
                Header set ETag ""
                Header set Cache-Control "max-age=2592000"
                Header set Expires "01 Jan 2112 00:00:00 GMT"
        </IfModule>
</FilesMatch>
<IfModule mod_expires.c>
        ExpiresByType text/css "access plus 1 month"
        ExpiresByType text/javascript "access plus 1 month"
        ExpiresByType application/x-javascript "access plus 1 month"
        ExpiresByType image/gif "access plus 1 month"
        ExpiresByType image/jpg "access plus 1 month"
        ExpiresByType image/png "access plus 1 month"
</IfModule>#46;(jpg|png|gif|js|css|ico)$"><IfModule mod_headers.c>
                Header set ETag ""
                Header set Cache-Control "max-age=2592000"
                Header set Expires "01 Jan 2112 00:00:00 GMT"
        </IfModule>
</FilesMatch>
<IfModule mod_expires.c>
        ExpiresByType text/css "access plus 1 month"
        ExpiresByType text/javascript "access plus 1 month"
        ExpiresByType application/x-javascript "access plus 1 month"
        ExpiresByType image/gif "access plus 1 month"
        ExpiresByType image/jpg "access plus 1 month"
        ExpiresByType image/png "access plus 1 month"
</IfModule>

.htaccess seems to be working as it blocks access to sugarcrm.log but I am able to view most of the other files in the sugar directory (albeit text - not via HTTP).

Is this an .htaccess issue or something with httpd.conf?   I am thinking possibly that a recent http config file was over written but why does apache error file indicate access denied via .htaccess?

I am out of commission - help is appreciated!

My system is Slackware 14.1, Apache/2.4.9, Sugar 6.5.16. 

Outcomes