RE: Keeping Anon access off & turning on Scheduled Tasks
> Barring that you can set up a site that mirrors your web site > but does allow anon access and have it respond only to > 127.0.0.1. That would allow your tasks to run but not expose > the content to the outside world. This is the approach I'd recommend, although I probably wouldn't have it mirror the entire site unless that's absolutely necessary. Just set it up to allow access to the specific scripts in question, without authentication required of course. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:295601 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: Keeping Anon access off & turning on Scheduled Tasks
Hello again - Thanks for the good ideas. I need to keep Anonymous Access off on the primary web site, but having a secondary site that does allow it, is a good idea. Thank you very much! Doug >Right... Excellent I forgot you could set permissions at a very granular >level like that. > > >Since you are using IIS... You could also go into the IIS Administrator >drill down to the file, then choose properties. From there go to security >and set it to allow Anon. > >IIS allows these settings at the file level. Helps if you are just having >tasks run that don't need to be secured. You could also add code in the page >to ensure that the remote_addr was the ip of your server. >That way you only run the page if it is the server requesting it. That means >you'd have to use the run command from the CFA Scheduled Tasks and couldn't >hit it from your local machine. > >At least this way it prevents passwords from being passed cleartext. > >Steve > > >There is a username and password attribute for scheduled tasks. It requires >that you allow the "plain text" option I believe. > >Barring that you can set up a site that mirrors your web site but does allow >anon access and have it respond only to 127.0.0.1. That would allow your >tasks to run but not expose the content to the outside world. > >-mark > ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:295602 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: Keeping Anon access off & turning on Scheduled Tasks
Right... Excellent I forgot you could set permissions at a very granular level like that. -Original Message- From: DURETTE, STEVEN J (ATTASIAIT) [mailto:[EMAIL PROTECTED] Sent: Monday, December 31, 2007 2:03 PM To: CF-Talk Subject: RE: Keeping Anon access off & turning on Scheduled Tasks Since you are using IIS... You could also go into the IIS Administrator drill down to the file, then choose properties. From there go to security and set it to allow Anon. IIS allows these settings at the file level. Helps if you are just having tasks run that don't need to be secured. You could also add code in the page to ensure that the remote_addr was the ip of your server. That way you only run the page if it is the server requesting it. That means you'd have to use the run command from the CFA Scheduled Tasks and couldn't hit it from your local machine. At least this way it prevents passwords from being passed cleartext. Steve -Original Message- From: Mark Kruger [mailto:[EMAIL PROTECTED] Sent: Monday, December 31, 2007 2:25 PM To: CF-Talk Subject: RE: Keeping Anon access off & turning on Scheduled Tasks There is a username and password attribute for scheduled tasks. It requires that you allow the "plain text" option I believe. Barring that you can set up a site that mirrors your web site but does allow anon access and have it respond only to 127.0.0.1. That would allow your tasks to run but not expose the content to the outside world. -mark -Original Message- From: [EMAIL PROTECTED] [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, December 31, 2007 1:09 PM To: CF-Talk Subject: Keeping Anon access off & turning on Scheduled Tasks Hi Folks - I am looking for someone who may have done something like this before and remembers what needs to be done! ;-) I have an intranet web site already built and running fine. It currently has Anonymous access turned off. This allows the web site to pull the user's cgi.auth_user info to be passed and processed (display name, set up security, etc). Now I am trying to get Scheduled Tasks to run properly. But everytime I do it, I get the following message: (I stripped out the HTML code) ___ You are not authorized to view this page You do not have permission to view this directory or page using the credentials that you supplied because your Web browser is sending a WWW-Authenticate header field that the Web server is not configured to accept. Please try the following: Contact the Web site administrator if you believe you should be able to view this directory or page. Click the refresh button to try again with different credentials. HTTP Error 401.2 - Unauthorized: Access is denied due to server configuration.Internet Information Services (IIS) Technical Information (for support personnel) Go to Microsoft Product Support Services and perform a title search for the words HTTP and 401 Open IIS Help, which is accessible in IIS Manager (inetmgr), and search for topics titled About Security, Authentication, and About Custom Error Messages. __ If anybody has any ideas of how to keep Anon access off and Scheduled Tasks or the CF server proper access to do this, I would appreciate any info. Thanks, Doug ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:295598 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: Keeping Anon access off & turning on Scheduled Tasks
Since you are using IIS... You could also go into the IIS Administrator drill down to the file, then choose properties. From there go to security and set it to allow Anon. IIS allows these settings at the file level. Helps if you are just having tasks run that don't need to be secured. You could also add code in the page to ensure that the remote_addr was the ip of your server. That way you only run the page if it is the server requesting it. That means you'd have to use the run command from the CFA Scheduled Tasks and couldn't hit it from your local machine. At least this way it prevents passwords from being passed cleartext. Steve -Original Message- From: Mark Kruger [mailto:[EMAIL PROTECTED] Sent: Monday, December 31, 2007 2:25 PM To: CF-Talk Subject: RE: Keeping Anon access off & turning on Scheduled Tasks There is a username and password attribute for scheduled tasks. It requires that you allow the "plain text" option I believe. Barring that you can set up a site that mirrors your web site but does allow anon access and have it respond only to 127.0.0.1. That would allow your tasks to run but not expose the content to the outside world. -mark -Original Message- From: [EMAIL PROTECTED] [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, December 31, 2007 1:09 PM To: CF-Talk Subject: Keeping Anon access off & turning on Scheduled Tasks Hi Folks - I am looking for someone who may have done something like this before and remembers what needs to be done! ;-) I have an intranet web site already built and running fine. It currently has Anonymous access turned off. This allows the web site to pull the user's cgi.auth_user info to be passed and processed (display name, set up security, etc). Now I am trying to get Scheduled Tasks to run properly. But everytime I do it, I get the following message: (I stripped out the HTML code) ___ You are not authorized to view this page You do not have permission to view this directory or page using the credentials that you supplied because your Web browser is sending a WWW-Authenticate header field that the Web server is not configured to accept. Please try the following: Contact the Web site administrator if you believe you should be able to view this directory or page. Click the refresh button to try again with different credentials. HTTP Error 401.2 - Unauthorized: Access is denied due to server configuration.Internet Information Services (IIS) Technical Information (for support personnel) Go to Microsoft Product Support Services and perform a title search for the words HTTP and 401 Open IIS Help, which is accessible in IIS Manager (inetmgr), and search for topics titled About Security, Authentication, and About Custom Error Messages. __ If anybody has any ideas of how to keep Anon access off and Scheduled Tasks or the CF server proper access to do this, I would appreciate any info. Thanks, Doug ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:295597 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: Keeping Anon access off & turning on Scheduled Tasks
There is a username and password attribute for scheduled tasks. It requires that you allow the "plain text" option I believe. Barring that you can set up a site that mirrors your web site but does allow anon access and have it respond only to 127.0.0.1. That would allow your tasks to run but not expose the content to the outside world. -mark -Original Message- From: [EMAIL PROTECTED] [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, December 31, 2007 1:09 PM To: CF-Talk Subject: Keeping Anon access off & turning on Scheduled Tasks Hi Folks - I am looking for someone who may have done something like this before and remembers what needs to be done! ;-) I have an intranet web site already built and running fine. It currently has Anonymous access turned off. This allows the web site to pull the user's cgi.auth_user info to be passed and processed (display name, set up security, etc). Now I am trying to get Scheduled Tasks to run properly. But everytime I do it, I get the following message: (I stripped out the HTML code) ___ You are not authorized to view this page You do not have permission to view this directory or page using the credentials that you supplied because your Web browser is sending a WWW-Authenticate header field that the Web server is not configured to accept. Please try the following: Contact the Web site administrator if you believe you should be able to view this directory or page. Click the refresh button to try again with different credentials. HTTP Error 401.2 - Unauthorized: Access is denied due to server configuration.Internet Information Services (IIS) Technical Information (for support personnel) Go to Microsoft Product Support Services and perform a title search for the words HTTP and 401 Open IIS Help, which is accessible in IIS Manager (inetmgr), and search for topics titled About Security, Authentication, and About Custom Error Messages. __ If anybody has any ideas of how to keep Anon access off and Scheduled Tasks or the CF server proper access to do this, I would appreciate any info. Thanks, Doug ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:295593 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Keeping Anon access off & turning on Scheduled Tasks
Hi Folks - I am looking for someone who may have done something like this before and remembers what needs to be done! ;-) I have an intranet web site already built and running fine. It currently has Anonymous access turned off. This allows the web site to pull the user's cgi.auth_user info to be passed and processed (display name, set up security, etc). Now I am trying to get Scheduled Tasks to run properly. But everytime I do it, I get the following message: (I stripped out the HTML code) ___ You are not authorized to view this page You do not have permission to view this directory or page using the credentials that you supplied because your Web browser is sending a WWW-Authenticate header field that the Web server is not configured to accept. Please try the following: Contact the Web site administrator if you believe you should be able to view this directory or page. Click the refresh button to try again with different credentials. HTTP Error 401.2 - Unauthorized: Access is denied due to server configuration.Internet Information Services (IIS) Technical Information (for support personnel) Go to Microsoft Product Support Services and perform a title search for the words HTTP and 401 Open IIS Help, which is accessible in IIS Manager (inetmgr), and search for topics titled About Security, Authentication, and About Custom Error Messages. __ If anybody has any ideas of how to keep Anon access off and Scheduled Tasks or the CF server proper access to do this, I would appreciate any info. Thanks, Doug ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:295592 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
