Thanks heaps, guys! This is the sort of information I think I was looking for. Dave, I knew it had to be possible. I've just not done it. I didn't even think about sourceless deployment! This client has been thinking about upgrading to CF8 Enterprise anyway (currently on 6.1 standard), so maybe this will just push them over the edge into upgrading, rewriting everything from scratch.
Thanks for all the links guys, I'm sure we'll need to do our homework on this to figure out how to accomplish all this. Chris On 9/24/07, Dave Shuck <[EMAIL PROTECTED]> wrote: > > BTW, here is a screenshot of what it looks like when you package your > application: > http://www.adobe.com/devnet/coldfusion/articles/clustering_06.html > > On 9/24/07, Dave Shuck <[EMAIL PROTECTED]> wrote: > > > > I forgot to mention that you will indeed have to use Enterprise for that > > ability. > > > > On 9/24/07, Dave Shuck <[EMAIL PROTECTED] > wrote: > > > > > > Christopher, they are simply spouting off about things that they don't > > > have knowledge about nor understand. Since at least version 7 (possibly > > > 6.1, but I don't think so), ColdFusion has had the ability to be > > > deployed by way of sourceless deployment. There are many articles > > > explaining how to do this, but in essence you install it into a J2EE > > > server > > > as a compiled java application. > > > > > > For bullet points to back this up, and for a few additional bullet > > > points related to security, check this link: > > > http://www.adobe.com/products/coldfusion/coldfusion7/features/ > > > > > > > > > In short: > > > _____________ > > > EAR/WAR deployment > > > > > > Deploy an application and the entire ColdFusion runtime as a standard > > > Java™ archive (EAR or WAR file). Moving ColdFusion applications into > > > production in J2EE environments has never been easier. > > > Sourceless deployment > > > > > > Optionally omit unencrypted ColdFusion Markup Language (CFML) source > > > in ColdFusion applications packaged as J2EE archives, allowing > > > applications > > > to be redistributed and helping protect sensitive information. > > > _____________ > > > > > > When you take this approach, there is absolutely no difference between > > > this and any other Java application that they deploy. > > > > > > ~Dave > > > > > > On 9/24/07, Ron Mast < [EMAIL PROTECTED]> wrote: > > > > > > > I'm thinking you could map a drive to your application server from > > > > your web server and then assign that drive as the home directory and I > > > > believe you can connect to SQL server via network to create an ODBC or > > > > JDBC > > > > connection. Haven't tried it but I'm guessing that would work. > > > > Hopefully I > > > > didn't misunderstood you. > > > > > > > > > > > > > > > > Ron Mast > > > > > > > > Truth Hardware > > > > > > > > Webmaster > > > > > > > > 507-444-4693 > > > > ------------------------------ > > > > > > > > *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > > > > *On Behalf Of *Christopher Jordan > > > > *Sent:* Monday, September 24, 2007 12:56 PM > > > > *To:* Dallas/Fort Worth ColdFusion User Group Mailing List > > > > *Subject:* [DFW CFUG] Security Questions > > > > > > > > > > > > > > > > Hi folks, > > > > > > > > I need some advice. One of our bigger clients has a handful of Java > > > > developers working for them who don't particularly like ColdFusion. > > > > While > > > > their initial complaints were that it wasn't open source and that you're > > > > tied to one particular company (thoughts which I quickly squashed), now > > > > they're whispering in the ear of the decision makers that Cold Fusion > > > > won't > > > > do "Three Tiered Security". > > > > > > > > I just now think I remember asking the group about this once before, > > > > but it's probably worth talking about again. Their idea of the three > > > > tiered > > > > security model is that there's a web server, an application server, and > > > > a > > > > database server. The web server contains no code, no passwords, and can > > > > only > > > > communicate to the application server by virtue of the web server's IP > > > > address, and because the web server is the only machine that knows > > > > where the > > > > application server is. Sounds a bit like "security through obscurity" > > > > to me, > > > > but what do I know? > > > > > > > > Anyway, these Java developers are telling the decision makers at > > > > this client that ColdFusion just isn't secure because it can't do this > > > > three > > > > tiered security stuff, but Java can. So they're saying, "why don't you > > > > just > > > > let us rewrite everything in Java for you?" > > > > > > > > Well, while my little company has never run CF as anything but a > > > > windows service, using CF Standard. We figure that it's written in Java > > > > so > > > > we ought to be able to make CF run in this sort of three tiered > > > > environment > > > > too. > > > > > > > > So my questions are: > > > > > > > > * Are these developer's right? Is CF not capable of running this > > > > Three Tiered model, and are we less safe for it? > > > > * If in fact, CF *can* run in this Three Tiered model, will we > > > > need to upgrade to CF Enterprise to do it? > > > > * Lots of our code is proceedural, though we've been switching to > > > > using CFCs slowly (not really OO, but rather storing related queries, > > > > and > > > > functions in CFCs) > > > > * What arguments can we make to our client on this subject? > > > > * Can anyone point me to any articles or other materials online > > > > concerning this topic specific to CF? > > > > > > > > Thanks for any help guys and gals. I'm going to cross-this to > > > > CF-Talk, so I apologize in advance for any duplication I may cause. > > > > > > > > Chris > > > > > > > > -- > > > > http://cjordan.us > > > > > > > > _______________________________________________ > > > > Reply to DFWCFUG: > > > > [email protected] > > > > Subscribe/Unsubscribe: > > > > http://lists1.safesecureweb.com/mailman/listinfo/list > > > > List Archives: > > > > http://www.mail-archive.com/list%40list.dfwcfug.org/ > > > > http://www.mail-archive.com/list%40dfwcfug.org/ > > > > DFWCFUG Sponsors: > > > > www.instantspot.com/ > > > > www.teksystems.com/ > > > > > > > > > > > > > > > > > -- > > > ~Dave Shuck > > > [EMAIL PROTECTED] > > > http://daveshuck.instantspot.com > > > > > > > > > > -- > > ~Dave Shuck > > [EMAIL PROTECTED] > > http://daveshuck.instantspot.com > > > > > > -- > ~Dave Shuck > [EMAIL PROTECTED] > http://daveshuck.instantspot.com > > _______________________________________________ > Reply to DFWCFUG: > [email protected] > Subscribe/Unsubscribe: > http://lists1.safesecureweb.com/mailman/listinfo/list > List Archives: > http://www.mail-archive.com/list%40list.dfwcfug.org/ > http://www.mail-archive.com/list%40dfwcfug.org/ > DFWCFUG Sponsors: > www.instantspot.com/ > www.teksystems.com/ > > -- http://cjordan.us
_______________________________________________ Reply to DFWCFUG: [email protected] Subscribe/Unsubscribe: http://lists1.safesecureweb.com/mailman/listinfo/list List Archives: http://www.mail-archive.com/list%40list.dfwcfug.org/ http://www.mail-archive.com/list%40dfwcfug.org/ DFWCFUG Sponsors: www.instantspot.com/ www.teksystems.com/
