Basic Authentication not working

[Arvy]

Previous post: https://forums.cpanel.net/threads/w...nclude-protection-not-working-anymore.683745/

After 19/December, something happened (maybe EasyApache update) that broke some things:
- FilesMatch in global Apache config, pre/post VirtualHost include, stopped to work (after years working)
- Directory protection (password) set in cPanel stopped to work

Both in Wordpress sites, due to its .htaccess file. In non-cpanel and non-Wordpress sites, both works.

------------

I'll open the ticket.

Now I found another BIG problem. Scenario: Wordpress site and an independent folder, with basic authentication set by Cpanel. It returns "404", but the server headers have the basic authentication header. Now really looks a bug. Note: the hack was removed, it's pure cPanel config.

I'll send you the URL in pvt, if you want to look.

HTTP/1.1 404 Not Found
Date: Mon, 04 Jan 2021 17:53:43 GMT
Server: Apache
WWW-Authenticate: Basic realm="Admin"
...

 

[cPRex]

Hey there! Can you confirm if this was setup using cPanel >> Directory Privacy or was this another tool in place? Once I know that I can do some testing on my end.

 

[Arvy]

Yes, only Directory Privacy. No manual intervention.

Try: install Wordpress, create a new "foobar" folder and "Directory Privacy" it.

Ticket created, internal reference is: #94094532

Thanks.

 

[cPRex]

Thanks for the update - I'm following that now on my end :D

 

[cPRex]

It looks like you were able to modify the post_virtualhost_global.conf include file to contain this:

ErrorDocument 401 default
ErrorDocument 403 default

and now things are working well. Is the WordPress include also working how you expect at this point?

 

[Arvy]

Yes, the problem was .shtml files. Reverting ErrorDocument fix the problem without touch users .htaccess.

Thanks!

 

[cPRex]

I'm glad we were able to help track that down!

 

[Arvy]

(deleted)