Re: Problem with CFFILE
Dave What do you recommend that I do. I am running the coldfusion application on one server and am trying to move a folder on another server using 'CFFile'. The only way I have been able to get it to work is by running the ColdFusion service logged on as a User I created that is a Member of the 'Domain Admins' group. I had a feeling that this was unsafe, but I do not know how to correct it. What do you recommend Thanks for your help. - Original Message - From: "Dave Watts" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Tuesday, July 22, 2003 12:26 AM Subject: RE: Problem with CFFILE > > Running as administrator is horribly insecure. If anyone > > manages to run illicit code on your CF server, it will > > have complete access to everything, rather than being > > sandboxed to only what a low-level user account has access > > to. Using the System account is better, but a separate > > account for only CF is best. > > Running as the SYSTEM account is also horribly insecure. In some respects, > it's more of a problem than running as any other specific user account, > including the Administrator account. Any code run by SYSTEM is considered to > be part of the "Trusted Computing Base", and can impersonate other users. > This is how the CFIMPERSONATE tag used in CF 4 and 5 worked. > > Dave Watts, CTO, Fig Leaf Software > http://www.figleaf.com/ > voice: (202) 797-5496 > fax: (202) 797-5444 > > ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Problem with CFFILE
Barney, I created a new user on my file server named 'ColdFusion'. The only group that will allow me to restart the ColdFusion Application Server is the 'Domain Admin' group. If I use any other group I get an error. How unsecure is the 'Domain Admin' group regarding your previous comments. Thanks. - Original Message - From: "Barney Boisvert" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Monday, July 21, 2003 6:46 PM Subject: RE: Problem with CFFILE > Running as administrator is horribly insecure. If anyone manages to run > illicit code on your CF server, it will have complete access to everything, > rather than being sandboxed to only what a low-level user account has access > to. Using the System account is better, but a separate account for only CF > is best. > > If switching to administrator solved your problem, then your issue is > defintely with permissions. I believe that the system account can only have > access to the local machine, but I could be way off base. I'd try creating > a new user account specifically for CF, adding it to the domain, and giving > it access to the share in question. Then set CF to run as that user and see > what happens. > > barneyb > > --- > Barney Boisvert, Senior Development Engineer > AudienceCentral > [EMAIL PROTECTED] > voice : 360.756.8080 x12 > fax : 360.647.5351 > > www.audiencecentral.com > > > > -Original Message- > > From: Christopher J. Sills > > [mailto:[EMAIL PROTECTED] > > Sent: Monday, July 21, 2003 3:21 PM > > To: CF-Talk > > Subject: Re: Problem with CFFILE > > > > > > Nathan, > > > > The service was set up for the system, I changed it to the > > Administrator on > > the file server and it seemed to work. Do you know if there are any > > security issues with doing this. > > > > Thanks. > > > > - Original Message - > > From: "Nathan Smith" <[EMAIL PROTECTED]> > > To: "CF-Talk" <[EMAIL PROTECTED]> > > Sent: Monday, July 21, 2003 5:40 PM > > Subject: RE: Problem with CFFILE > > > > > > > Check the user that the coldFusion Service is running under - default is > > > system. If it is something else, that user should have rights to the > > > diretories in question. > > > > > > > > > > > > -Original Message- > > > From: Christopher J. Sills > > > [mailto:[EMAIL PROTECTED] > > > Sent: Monday, July 21, 2003 3:26 PM > > > To: CF-Talk > > > Subject: Problem with CFFILE > > > > > > > > > I am having a problem with the CFFILE. I have two servers in > > the company > > > that I am dealing with. One is a web server that host our website and > > runs > > > the CF application. The other is our file server that stores all the > > > companies main files. > > > > > > I use CFFILE to try and move a folder from one directory to > > another on the > > > file server. Evey time I try this though I get the following error. > > > > > > Error processing CFFILE > > > > > > Unable to move file '\\neteyes-serv01\E$\Prospects\03-034 (Kalis, CP - > > > Garwood Metal)' to path '\\neteyes-serv01\E$\Customers\03-034 > > (Kalis, CP - > > > Garwood Metal)'. Access is denied. (error 5) > > > > > > > > > > > > I read one message that mentioned making sure the 'System' has > > permission > > to > > > read and write, but I'm not sure If I did it correctly. Both of these > > > folders have there permissions set to 'Everyone' and 'System'. > > > > > > Is there anyone out there that can help me. PLEASE PLEASE PLEASE. > > > > > > Thanks. > > > > > > Christopher J. Sills > > > [EMAIL PROTECTED] > > > > > > > > > > > > ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Get the mailserver that powers this list at http://www.coolfusion.com Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Problem with CFFILE
Nathan, The service was set up for the system, I changed it to the Administrator on the file server and it seemed to work. Do you know if there are any security issues with doing this. Thanks. - Original Message - From: "Nathan Smith" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Monday, July 21, 2003 5:40 PM Subject: RE: Problem with CFFILE > Check the user that the coldFusion Service is running under - default is > system. If it is something else, that user should have rights to the > diretories in question. > > > > -----Original Message- > From: Christopher J. Sills > [mailto:[EMAIL PROTECTED] > Sent: Monday, July 21, 2003 3:26 PM > To: CF-Talk > Subject: Problem with CFFILE > > > I am having a problem with the CFFILE. I have two servers in the company > that I am dealing with. One is a web server that host our website and runs > the CF application. The other is our file server that stores all the > companies main files. > > I use CFFILE to try and move a folder from one directory to another on the > file server. Evey time I try this though I get the following error. > > Error processing CFFILE > > Unable to move file '\\neteyes-serv01\E$\Prospects\03-034 (Kalis, CP - > Garwood Metal)' to path '\\neteyes-serv01\E$\Customers\03-034 (Kalis, CP - > Garwood Metal)'. Access is denied. (error 5) > > > > I read one message that mentioned making sure the 'System' has permission to > read and write, but I'm not sure If I did it correctly. Both of these > folders have there permissions set to 'Everyone' and 'System'. > > Is there anyone out there that can help me. PLEASE PLEASE PLEASE. > > Thanks. > > Christopher J. Sills > [EMAIL PROTECTED] > > > ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Get the mailserver that powers this list at http://www.coolfusion.com Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Problem with CFFILE
I am having a problem with the CFFILE. I have two servers in the company that I am dealing with. One is a web server that host our website and runs the CF application. The other is our file server that stores all the companies main files. I use CFFILE to try and move a folder from one directory to another on the file server. Evey time I try this though I get the following error. Error processing CFFILE Unable to move file '\\neteyes-serv01\E$\Prospects\03-034 (Kalis, CP - Garwood Metal)' to path '\\neteyes-serv01\E$\Customers\03-034 (Kalis, CP - Garwood Metal)'. Access is denied. (error 5) I read one message that mentioned making sure the 'System' has permission to read and write, but I'm not sure If I did it correctly. Both of these folders have there permissions set to 'Everyone' and 'System'. Is there anyone out there that can help me. PLEASE PLEASE PLEASE. Thanks. Christopher J. Sills [EMAIL PROTECTED] ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
