Precompilation for ColdFusion for Solaris (SPARC) and WebSphere
I am in the process of installing a ColdFusion application on Solaris 10 64-bit
(Sparc) running with WebSphere 6.1. The cfcompile script makes a reference to
jrun.jar however this is not available when CF is installed as an ear file that
is to be deployed on WAS. An abstract of cfcompile.sh is the following:
su $cfuser -c ${_JAVACMD} -cp $CLASSES
-Dcoldfusion.classPath=$CFUSION_HOME/lib/updates,$CFUSION_HOME/lib
-Dcoldfusion.libPath=$CFUSION_HOME/lib coldfusion.tools.CommandLineInvoker
Compiler -cfroot $CFUSION_HOME -webinf $WEBINF -webroot $webroot $dir
Do you see ways to solve this problem?
~|
Want to reach the ColdFusion community with something they want? Let them know
on the House of Fusion mailing lists
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:328112
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Problem with onblur event
We have a complicated parser that produces html from a meta format. Now, we are
having a problem in that eventhandlers (like onClick) are not being triggered
when the focus is on a field which has the onBlur eventhandler set. We could
solve the problem if JS is multi-threaded or if there a way to change the
priority of an event. Anyway, to summarize the problem we have something as
shown below:
script
function onBlurHandler(val)
{
document.getElementById('testarea').innerText=text entered: + val;
alert('alerting text');
}
/script
form
input name=text type=text id=input
onblur=onBlurHandler(this.value) size=5 /
input type=button value=Amend text=button onclick=alert('Amend
Clicked!');/
div id=testarea/div
/form
We want that when a user clicks on the Amend button the action handler of the
amend is executed after executing the onblur event.
The code above works as expected only if we comment the alert('alerting text')
in the onblur event handler. If alert('alerting text') is commented out then
the code works as expected and the onclick handler (of the Amend button) is
called after calling the onBlur event handler.
Is there a feasible workaround to this?
Joseph
~|
Want to reach the ColdFusion community with something they want? Let them know
on the House of Fusion mailing lists
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:325715
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe:
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: Problem with onblur event
Peter, Thanks a lot! Your solution is excellent. For the time being we will replace the onclick event with the onmousedown...Writing cross-browser independent code proves to be very challenging. Regarding jQuery. Yes, I definitely agree with you. Currently we are evaluating and comparing it with YUI. Joseph. Ah, I missed the whole ordering bit there. That's a browser-level problem. In Chrome, you get both alerts, as intended. In Firefox, the initial alert removes focus from the button so the mouseup doesn't register, so the onclick doesn't occur. Try: 1: Using a JS-built dialog box instead of alert (e.g. jQuery UI) 2: using the onmousedown event for the button instead of onclick. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:325726 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Penetration Testing Tools
Hello Friends, I am in the process of doing penetration testing on a Web Site that runs solely on IE (Internet Explorer). We need to identity problems such as XSS, Injections, Insecure Direct Object References, etc. Do you recommend or suggest any good tool, ideally a free or open-source tool. Thanks and Kind Regards, Joseph ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:325107 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Good Release Management Software
Hi Mike, Absolutely, that is exactly what I intended. Yes, I need to find software that automatically identifies what is different between the current release (residing on the client) and the current/new release (which we will give to clients). A good installer/release mgt software would typically do this job without requiring any manual intervention. So, I simply give this nice 'installer' or script to the client and perhaps not directly the plain vanilla files (.cfm, .cfc, etc.) and then it will do all the necessary things to upgrade the version. I can log in directly to the deployment environments but I usually do so to install the first release of the software or if there is a major change involved. Typically, we submit files directly to clients and then let their administrators install the change as we instruct them. Joseph. To clarify, it sounds like your goal is to identify the differences between the version of the software each client is running and the current version, and to automatically bundle together all the files that are different between the two versions so that you can give the customers only the files needed to upgrade. Is that correct? For deployment, is your goal to create an installer executable file that the customer can double-click on to have the new files added, or do you control the deployment by being able to directly upload to the customer's servers? -Mike Chabot ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:320051 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Good Release Management Software
Hi, Our system is developed using ColdFusion technology. We have a number of clients and very often we need to deliver them not a full deployment (our whole package) but just some updates to certain files (.cfm, .cfc, .js, etc.). I am searching for a solution that can automatically build software releases. To my knowledge there are Windows programs that can handle of course both partial and full releases. Example, for VB.NET and C# you can easily build a release through .NET Visual Studio. However, what about ColdFusion/J2EE? Our system is platform independent so ideally the solution should cater for this. Joseph. The answer to your question would depend on what software you are dealing with plus what computer environment you have. Uploading a small Web site to a Linux server is quite different than distributing an enterprise software package to 1000 Windows users. The methods you use to test and approve code before deployment would also impact how your software releases are handled, as would the way you implement database changes. -Mike Chabot On Sat, Feb 28, 2009 at 8:31 AM, Joseph Bugeja jbug...@rs2group.com wrote: Do you recommend any good release management software, ideally an open source solution that we can use to automate releases of our software? ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:319986 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Good Release Management Software
Do you recommend any good release management software, ideally an open source solution that we can use to automate releases of our software? ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:319939 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: Clustering with Synchronization/Mirroring
Matthew, That is excellent. By any chance, is there a nice technical article available online that we can look into regarding NFS clustering? On the side, customer is saying that proper clustering should take care of code sync. So, if I push a file on the CF/JRun4 it should automatically take care of replicating/mirroring the change on the parallel server. Joseph. That's going to highly depend on your server architecture. We have Windows 2003 R2 Enterprise. The NFS clustering in that release has been fantastic, and has only failed one time in about a year. It's multi-point sync (a - b, b - a) and can do partial file changes as well. This also requires that the machines be part of an active directory domain. Matthew Williams Geodesic GraFX Joseph Bugeja wrote: ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:319591 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Obscuring the source code with pre-compilation
We are using cfcompile.bat to pre-compile the code of our application. In this way when our application goes to the client the source code is not easily viewable/reversible. However, when we pre-compile the code on Windows and then FTP it to an AIX machine with WebSphere the system does not come up. Any ideas on this problem or perhaps is there a better way to obscure the source code of our application? ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:319593 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
High-Availability Requirements
Hi, Usually we use CF8 Ent/JRun4/IIS combination for SMEs but for large organizations with high-availability demands do you think this combination still holds or we should invest in an alternative WS or App. Server? Thanks in advance as always for your excellent assistance. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:319595 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Clustering with Synchronization/Mirroring
We have a setup consisting of 2 CF8 servers running in parallel (the 2 instances are clustered together using CF8 Ent/JRun4) and we have one app. deployed on each of the two servers. Each request is served by either one of the 2 servers. Although clustering is working great, we would like have a facility that when a server generates a file on one server it gets automatically pushed to the other parallel server. Is that possible with ColdFusion clustering or we to invest on additional software/perhaps proprietrary ones? Naturally, the two folders (one on each of the parallel servers) need to contain the same content, so ideally when one gets generated on one server it is immediately replicated on the other server. Can you give some tips/assistance about this problem? Kindest Regards, Joseph. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:319492 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Enabling SSL for CF-Site
Hello Experts, This is more of a curiosity rather than a technical problem. We have a CF powered site hosted under IIS/JRun server on Win 2K 64-bit. This site works brilliantly, but now we need to make it available on SSL. From an application perspective, do you forsee any changes or it is simply a question of installing the SSL certificates on the Web servers? Many thanks for all your kind assistance. Kindest Regards, Joseph ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:316079 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Code Synchronization - Synchronize code on 2 different machines
Hi Guys, We are running two ColdFusion 8 machines in parallel to run our system. ColdFusion 8 round-robin clustering technique is used for high-availability. We would like to know if you have any suggestions or ideas on how we can synchronize the code on the different machines so that if I do a change on one machine then the change gets pushed to the other server. Thanks in advance. Regards, Joseph ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:315308 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
ColdFusion 8 Ent/JRun and IIS as external web server
Hello Experts, We are using ColdFusion 8 Enterprise/64-bit with its built-in JRun4 application server. Our clients would like to install IIS on a separate machine located in another segment in a DMZ. Our question is, can the JRun connector automatically discover ColdFusion instances if they are located in a separate segment, perhaps on a separate subnet for additional security? Do you this is possible or the servers strictly need to reside on the same network, perhaps on the same subnet? Thanks in advance for your kind assistance. Best Regards, Joseph. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:313423 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: Problem with reading and writing UTF-8 characters
Hi, Problem has been solved. The problem occurred because the editor, Dreamweaver, was set to encode the file as UTF-8. There is more than one unicode normalization form and you can also include the Unicode signature in a file. The default settings we had appended the characters  (in hex/8-bit format they are ef bb bf) and this resulted in ColdFusion not being able to render properly the file. The problem was quickly solved by changing the file encoding. Technically, the problem was solved by removing the BOM (which is the UTF-8 byte order mark, and this is optional). In this was ColdFusion/Java created the file exactly as expected. Kind Regards, Joseph. Joseph Bugeja wrote: characters using the CHR function. This is a bit strange. Can you identify why? your editor, whatever that is. So what I am saying is that I must explicitly set the cfprocessingdirective you should be using this tag religiously, including any files via cfinclude. the only way things are getting messed up using that tag is if your files aren't utf-8 encoded. tag to store UTF-8 characters, however when I insert this tag in an existing file we are still left with this problem but instead we use CHR function to store these strings. most likely it's your editor. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:312927 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Problem with reading and writing UTF-8 characters
Hey Paul, Thanks for your reply. When I add the tag below: cfprocessingdirective pageencoding=utf-8 and exactly after it I use the cffile tag, then the string is stored correctly in the file, however when I do not include the cfprocessingdirective tag then the second à character is stored in the file as Ãâ Could this be related to the default Java encoding which is Cp1252, and the default locale of en_US. The ColdFusion version used is 8,0,0,176276. Joseph. Joseph Bugeja wrote: cffile action=write file=testfile.txt output=#chr(198)# and ? charset=utf-8 just to confirm, this works fine on our dev server (8.01). ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:312877 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Problem with reading and writing UTF-8 characters
Just to emphasize something. When I type the character directly with the CHR function, then it gets printed as expected in the file. However, when I type the character directly in the string (without the CHR function) then it gets printed as something else. Joseph. Hey Paul, Thanks for your reply. When I add the tag below: cfprocessingdirective pageencoding=utf-8 and exactly after it I use the cffile tag, then the string is stored correctly in the file, however when I do not include the cfprocessingdirective tag then the second à character is stored in the file as Ãâ Could this be related to the default Java encoding which is Cp1252, and the default locale of en_US. The ColdFusion version used is 8,0,0, 176276. Joseph. Joseph Bugeja wrote: cffile action=write file=testfile.txt output=#chr(198)# and ? charset=utf-8 just to confirm, this works fine on our dev server (8.01). ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:312879 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Problem with reading and writing UTF-8 characters
Thanks for your suggestions. As you suggested, the file 'neo-runtime.xml' has the UTF-8 encoding as default character set. The strange thing is that when I input the below code in a new file: cfprocessingdirective pageencoding=utf-8 cffile action=write file=C:\sample.txt output=objXML = Æ ae Ç à charset=utf-8 within our system the file output is exactly as expected, and when I preview this in a UTF-8 enabled viewer I get the correct output. However, when I modify an existing file (within our system) and insert the above two lines, the UTF-8 encoding seems to be forgetten and I can only encode Unicode characters using the CHR function. This is a bit strange. Can you identify why? So what I am saying is that I must explicitly set the cfprocessingdirective tag to store UTF-8 characters, however when I insert this tag in an existing file we are still left with this problem but instead we use CHR function to store these strings. Joseph. Joseph Bugeja wrote: Could this be related to the default Java encoding which is Cp1252, and the default locale of en_US. The ColdFusion version used is 8,0,0,176276. no, cf is in it's own little world--actually we prefer setting up our cf boxes like that even if they'll be serving thai, arabic, or whatever locales. it simplifies things in terms of admin, logging etc. (and its the only solution if you're in tr_TR). though you might double check that nobody's messed w/the cf server's default encoding. see what is in the cf_root/lib/neo-runtime.xml file for the defaultCharset property: var name='defaultCharset'stringUTF-8/string/var if this is changed double check the email encoding too (you can do this via cfadmin). ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:312889 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Problem with reading and writing UTF-8 characters
Hi Guys, We are using ColdFusion 8 with the built-in Java 1.6. When trying to write a string that contains UTF-8 characters to a file, these characters are becoming stored incorrectly in the file. A sample call issued is the following: cffile action=write file=testfile.txt output=#chr(198)# and Æ charset=utf-8 When the file is read back, the chr(198) is correctly being encoded and displayed as Æ (= chr(198)) but when the Norwegian character is directly stored in the string without converting it to ASCII then instead of the string Æ a funny character is being stored in the file. Do you have any ideas on how we can solve this? Thanks in advance for your kind assistance. Regards, Joseph. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:312845 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
DataSource Events like Before Commit?
Dear ColdFusion Users, Is there a way that I can attach to a datasource through an event like before_commit or before_update? So, if I have a cfquery tag, and I would ColdFusion to automatically, before ColdFusion executes the code found in the cfquery I would like it to automatically execute another query for example to set the user id to the database? In this way I do not need to make any modification to the existing code except that of creating new code to do something before executing my main query? Thanks in advance for your assistance. Regards, Joseph. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309431 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: DataSource Events like Before Commit?
Thanks for your reply. Let me explain our scenario. We have a number of cfquery tags that insert, update and delete data from our Oracle database. Basically, before each query is run I need to execute a stored procedure. This stored procedure sets the userid (the user currently logged in) in the database for auditing purposes. We have hundreds of queries and it is not good from a design perspective to rewrite each query to call the same central piece of code before each query gets executed. So my original query should be: Original Query: cfquery DML Operation /cfquery New requirement should be: cftransaction cfstoredproc Set the user id /cfstoredproc cfquery DML Operation /cfquery /cftransaction As shown above, I need to call the cfstoredproc before each query is executed. Personally, I would prefer if I keep my original design and before the original query is run the ColdFusion engine automatically injects the new call in a transaction to set the clientid. Do you have any suggestions? Joseph, I don't think what you are trying to do is possible. Can you give us some more details of what you are trying to accomplish to see if we can help you come up with an alternative solution? Sincerely, Dave Phillips Dear ColdFusion Users, Is there a way that I can attach to a datasource through an event like before_commit or before_update? So, if I have a cfquery tag, and I would ColdFusion to automatically, before ColdFusion executes the code found in the cfquery I would like it to automatically execute another query for example to set the user id to the database? In this way I do not need to make any modification to the existing code except that of creating new code to do something before executing my main query? Thanks in advance for your assistance. Regards, Joseph. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309435 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: DataSource Events like Before Commit?
Thanks again for your reply. Unfortunately, I need to pass the userid prior to executing each query as otherwise the auditing function would not know the userid. We have triggers on tables but triggers need the read the userid apriori. ColdFusion does not allow us to build our connection string dynamically or to dynamically inject connection string variables (such as the userid), as is the case with VB.NET and C#. This is why I am looking for an alternative. Joseph, I think Gert's suggestion earlier could work for you. You could design a trigger to fire the stored procedure prior to any Inserts or Updates. Check out this page on oracle site for some direction: http://tinyurl.com/5sjhlg I haven't done anything with triggers myself. But if you want to avoid re-coding your CFML, I think this is your route to go. Of course, this will only work for you if the only thing changing your tables is your CF app. Any manual changes to the database, or any other application accessing the same database would fire the triggers as well, unless you can figure out a way to make them fire only when your app accesses the database. Hope this helps, Dave Phillips Thanks for your reply. Let me explain our scenario. We have a number of cfquery tags that insert, update and delete data from our Oracle database. Basically, before each query is run I need to execute a stored procedure. This stored procedure sets the userid (the user currently logged in) in the database for auditing purposes. We have hundreds of queries and it is not good from a design perspective to rewrite each query to call the same central piece of code before each query gets executed. So my original query should be: Original Query: cfquery DML Operation /cfquery New requirement should be: cftransaction cfstoredproc Set the user id /cfstoredproc cfquery DML Operation /cfquery /cftransaction As shown above, I need to call the cfstoredproc before each query is executed. Personally, I would prefer if I keep my original design and before the original query is run the ColdFusion engine automatically injects the new call in a transaction to set the clientid. Do you have any suggestions? before ColdFusion executes the code found in the cfquery I would like it to automatically execute another query for example to set the user id to the database? In this way I do not need to make any modification to the existing code except that of creating new code to do something before executing my main query? Thanks in advance for your assistance. Regards, Joseph. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309442 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: DataSource Events like Before Commit?
Exactly! You perfectly understood my concern. If ColdFusion supported dynamic connection parameter injection or proxy authentication then we can identify the connection pool users but there is no straightforward solution to this. Through pooling we are connected through one db user which for security complaince (PCI) we need to remove this hole while keeping the benefits of pooling. Triggers can help certainly help us for auditing but again at db level I do not want have the same user showing up in my logs. Got it. Now I understand better. You want to pass the userid of your 'logged in user' to track the change in the database instead of using the user id that the datasource is logged in as. I don't see any way for you to do this without changing your code. Maybe someone else can come up with something, but I just don't see any way around it. Whether you change it to implement the idea you had below or do it some other way, bottom line is, you will need to change your code to make Oracle aware of each individual user's ID. You might still be able to find a way to use the triggers, but I still think you'll need a code change. Sorry, no help. Dave Thanks again for your reply. Unfortunately, I need to pass the userid prior to executing each query as otherwise the auditing function would not know the userid. We have triggers on tables but triggers need the read the userid apriori. ColdFusion does not allow us to build our connection string dynamically or to dynamically inject connection string variables (such as the userid), as is the case with VB.NET and C#. This is why I am looking for an alternative. Joseph, I think Gert's suggestion earlier could work for you. You could design a trigger to fire the stored procedure prior to any Inserts or Updates. Check a before ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309448 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: DataSource Events like Before Commit?
Dave, That's exactly what I was looking for - proxy authentication. I created a thread on this forum about this but the reply I got is that ColdFusion does not natively support this. So, the solution is to either create our own JNDI datasource using Java. However, I decided to not go this way and instead set the client identifier prior to executing each query. This should work and according to my testing it does not inflict a heavy performance degradation. Joseph, I did some googling and found that Oracle has 'proxy user authentication'. See this Ask Tom article (someone wanting to do the same thing as you are, but in java): http://tinyurl.com/6qe8xk Although I don't know if you can do it with the ColdFusion setup directly, but maybe you can access some underlying java component to do it. Hopefully this might give you another alternative. Let me know how it turns out. Dave Exactly! You perfectly understood my concern. If ColdFusion supported dynamic connection parameter injection or proxy authentication then we can identify the connection pool users but there is no straightforward solution to this. Through pooling we are connected through one db user which for security complaince (PCI) we need to remove this hole while keeping the benefits of pooling. Triggers can help certainly help us for auditing but again at db level I do not want have the same user showing up in my logs. Got it. Now I understand better. You want to pass the userid of your 'logged in user' to track the change in the database instead of using the user id that the datasource is logged in as. I don't see any way for you to do this without changing your code. Maybe someone else can come up with something, but I just don't see any way around it. Whether you change it to implement the idea you had below or do it some other way, bottom line is, you will need to change your code to make Oracle aware of each individual user's ID. You might still be able to find a way to use the triggers, but I still think alternative. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309457 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: DataSource Events like Before Commit?
Yes, I'll work on something like that but it requires heavy testing to make sure that the solution is correct. Pooling is quite a difficult topic and not very much documented topic (I could not find a document that explains how the ColdFusion driver is communicating with Oracle - like what if the pool size is set to 1 and there are two concurrent connections, then what happens with the Oracle session - does it open a session for each user or it uses time-sharing, etc.?). It could be the case that when I set the user id through a stored procedure, another user comes in, reusing an existing connection from the pool, and then that will mess up the authentication process. However, through transactions we are guaranteed that what is in the transaction is committed/rollbacked in a block. The disadvantage with transactions is that they cannot be nested and they affect the performance. Why not just set it in their session and then you are only setting it once and referencing that for each query you execute. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309472 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Integrating ColdFusion with Tuxedo
Dear ColdFusion Users, We are in the process of migrating a legacy client-server system from VB to ColdFusion. The current system uses Tuxedo middleware platform. I believe that Tuxedo provides listener/handlers for remote clients (Java, CORBA, WS), but I would like to check with you if you forsee any difficulties or challenges that we might encounter in integrating ColdFusion with this platform. Your help and experience is really appreciated. Sincerely, Joseph Bugeja. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:307591 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Integrating ColdFusion with Tuxedo
Dear ColdFusion Users, We are in the process of migrating a legacy client-server system from VB to ColdFusion. The current system uses Tuxedo middleware platform. I believe that Tuxedo provides listener/handlers for remote clients (Java, CORBA, WS), but I would like to check with you if you foresee any difficulties or challenges that we might encounter in integrating ColdFusion with this platform. Your help and experience is really appreciated. Sincerely, Joseph Bugeja. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:307592 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: Proxy Authentication with Oracle - Does ColdFusion Support th is?
In reality, connection pooling with proxy authentication should automatically create a second session, a lightweight session, with the actual user id and password. Naturally, the dba must grant the proxy user connect rights on the database for this to work. I did not investigate but I think, as was suggested, we need to create our own JNDI data-source for this to work, and then find a way to dynamically inject the specific settings. -Original Message- From: Dave Watts [mailto:[EMAIL PROTECTED] Sent: Monday, April 21, 2008 8:51 PM To: CF-Talk Subject: RE: Proxy Authentication with Oracle - Does ColdFusion Support th is? But isn't that what the OP wanted? The ability to have auditing based on user authentication over the datasource and the session it creates (not just as a login to a table)? Wouldn't a datasource created at the J2EE server behave the same way? I would assume that the ASP pool would work the same way. I'd be curious to see how it would run under load testing. No, the OP wanted to use proxy authentication, which would let you have a single connection pool with a single username and password, but would also let you track the Oracle account using a specific connection from that pool by its own specific username and password. This is an Oracle-specific feature, which requires manipulation of the connection string at runtime to include the proxy authentication attributes. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Training: Adobe/Google/Paperthin Certified Partners http://training.figleaf.com/ WebManiacs 2008: the ultimate conference for CF/Flex/AIR developers! http://www.webmaniacsconference.com/ ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;192386516;25150098;k Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:303959 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: Proxy Authentication with Oracle - Does ColdFusion Support th is?
Is there a workaround? Speaking of .NET/C#, to discern the identity of the actual user while keeping the benefits of pooling, the following two approaches can be used: Proxy Authentication using C#: String oradb = Data Source=OraDb;User Id=ActualUser;Password=secret; Proxy User Id=scott;Proxy Password=tiger; ; OR Client Identifier using C#/Oracle: conn.ClientId = SomeUser; Is there a similar method in ColdFusion? Thanks Regards, Joseph. -Original Message- From: Joseph Bugeja [mailto:[EMAIL PROTECTED] Sent: Saturday, April 19, 2008 2:35 PM To: CF-Talk Subject: Re: Proxy Authentication with Oracle - Does ColdFusion Support th is? Hi Dave, Thanks for your immediate reply. This is a bit problematic. I think there are workarounds to this but do you happen to know how this problem can be dealt with? Speaking from a security perspective, we need to find a way to identify the users that are actually connected to the database whilst preserving the advantages of connection pooling. .NET does not have this problem because in the connection string we can specify both the proxy user and the real users. I know that Oracle has something that is called the client id, and this could be a possible solution, but again we need to know what Adobe or CF users recommend. Regards, Joseph. In order to have proper auditing and for other benefits like No, I don't think so. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Training: Adobe/Google/Paperthin Certified Partners http://training.figleaf.com/ WebManiacs 2008: the ultimate conference for CF/Flex/AIR developers! http://www.webmaniacsconference.com/ ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;192386516;25150098;k Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:303842 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: Proxy Authentication with Oracle - Does ColdFusion Support th is?
Hi Dave, Thanks for your immediate reply. This is a bit problematic. I think there are workarounds to this but do you happen to know how this problem can be dealt with? Speaking from a security perspective, we need to find a way to identify the users that are actually connected to the database whilst preserving the advantages of connection pooling. .NET does not have this problem because in the connection string we can specify both the proxy user and the real users. I know that Oracle has something that is called the client id, and this could be a possible solution, but again we need to know what Adobe or CF users recommend. Regards, Joseph. In order to have proper auditing and for other benefits like No, I don't think so. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Training: Adobe/Google/Paperthin Certified Partners http://training.figleaf.com/ WebManiacs 2008: the ultimate conference for CF/Flex/AIR developers! http://www.webmaniacsconference.com/ ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;192386516;25150098;k Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:303802 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: ColdFusion and IIS as an external Web Server - Is JRun requir ed o n both machines?
Thanks for this info. I was a bit confused because when I install ColdFusion as an EAR file and I examine its content I can still find jrun.xml and thus I thought that we still JRun. Regards, Joseph. if we install ColdFusion on another application server, like WebSphere, then do we still need jrun.dll. No, your J2EE application server is responsible for connecting to your web server. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Training: Adobe/Google/Paperthin Certified Partners http://training.figleaf.com/ WebManiacs 2008: the ultimate conference for CF/Flex/AIR developers! http://www.webmaniacsconference.com/ ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;192386516;25150098;k Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:303803 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Proxy Authentication with Oracle - Does ColdFusion Support this?
Dear CF-Users, In order to have proper auditing and for other benefits like identity preservation we cannot just make use of a single username/password as is traditionally required for connection pooling. There is more than one way to handle this, but a common method that can be used to avoid this type of problem is to make use of proxy authentication. With proxy authentication, we can keep the advantages of connection pooling whilst at the same time we are able to, a certain extent, identify users. In Java proxy authentication is implemented as shown below (David Knox code): 1. Connect to middle tier using the proxy user: OracleOCIConnectionPool ods = new OracleOCIConnectionPool(); ods.setURL(jdbc:oracle:oci:@ + tnsAlias); ods.setUser(coldFusion); ods.setPassword(password); 2. Connect using Proxy Authentication: java.util.Properties userNameProp = new java.util.Properties(); userNameProp.setProperty(OracleOCIConnectionPool.PROXY_DISTINGUISHED_NAME, scott); Connection conn = ods.getProxyConnection(OracleOCIConnectionPool.PROXYTYPE_DISTINGUISHED_NAME, userNameProp); Basically, I would like to know, if possible, if ColdFusion natively supports this kind of authentication. Thanks all for your kind assistance. Kindest Regards, Joseph. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;192386516;25150098;k Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:303723 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
ColdFusion and IIS as an external Web Server - Is JRun required o n both machines?
Dear CF-Users, We are using ColdFusion 8 Enterprise Edition and we want to check if it is possible to separate the ColdFusion application server from the IIS Web Server. In our scenario, we have two separate machines - one dedicated for ColdFusion and the other dedicated to the Web Server. The machines are on the same LAN but only the web server is accessible from the Web (this is in DMZ). The Web Server Configuration Tool that comes with ColdFusion/JRun allows us to discover and connect with a remote JRun host, but my question is whether we need to install JRun on both the web server and the application server. Apparently, IIS requires jrun.dll locally to successfully handle the application extensions .cf, .cfm, etc. Thanks all for your help. Best Regards, Joseph. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;192386516;25150098;k Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:303724 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: ColdFusion and IIS as an external Web Server - Is JRun requir ed o n both machines?
Hello Sir, Thanks for your reply. I agree with you on the mirroring and the website importing option. I think this is the way to go. I went through that kb article a couple of days ago however it assumes that the Coldfusion and the WebServer are located on the same machine, and this is not our case. I believe that it is not a simple replace all the localhost entries in wsconfig.properties to our IP address to work? Related to this, if we install ColdFusion on another application server, like WebSphere, then do we still need jrun.dll. I guess or I hope no? Regards, Joseph. -Original Message- From: Matthew Williams [mailto:[EMAIL PROTECTED] Sent: Friday, April 18, 2008 3:16 PM To: CF-Talk Subject: Re: ColdFusion and IIS as an external Web Server - Is JRun required o n both machines? You don't need the full blown install to do this, however it's going to be a completely manual process. You can find instructions for that at this link http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_19575. The only thing that's not reflected in the kb entry is that IIS6 now uses a wildcard ISAPI reference. It may help you to configure a webserver locally on the ColdFusion box, and then mirror these settings on your DMZ server (from the IIS standpoint). Or, even better, create the website locally and just save the site for import into the DMZ. Matthew Williams Geodesic GraFX www.geodesicgrafx.com/blog ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;192386516;25150098;k Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:303734 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
