RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

[Charlie Arehart]

You will continue to see it using jrun_iis6_wildcard. That's not incorrect
(but potentially confusing, yes).

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Tuesday, November 05, 2013 12:01 AM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

 

Again thanks. I think I am guessing that the correct answer to this is 75
because of different application pools. I could be wrong though, like you
said better to do practical test and figure out what happens.

 

One thing I found which is weird "I have jrun_iis6_wildcard instead of
jrun_iis7_wildcard", this is really surprising to me. We had iis6
comparability initially and then removed it and re installed cf 9.0.1 & ran
connector again for all sites.

 

Thanks,




 

iUseDropbox(  http://db.tt/63Lvone9) 
http://ajashadi.blogspot.com
We cannot become what we need to be, remaining what we are.
No matter what, find a way. Because thats what winners do.
You can't improve what you don't measure.
Quality is never an accident; it is always the result of high intention,
sincere effort, intelligent direction and skillful execution; it represents
the wise choice of many alternatives.

 

On Mon, Nov 4, 2013 at 11:42 PM, Charlie Arehart 
wrote:

Thanks for the kind regards. As for your question, that's something I've
always wondered myself. :-)

In fact, you will see that on the Adobe blog entry about that
maxworkerthreads bug (from a few years ago) that I had asked this question
specifically, and I never got an answer. I always wanted to test it, but
never got around to it. 

If you may do some testing determine it, please do let us know. To quote
"Dances with Wolves", I'd consider that a "good trade". :-)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Monday, November 04, 2013 10:53 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

 

Thank you sir. You are the best!!!.

 

Do you see any issues with these separate folders? Plus what about the whole
logic about concurrent requests and IIS bug? In this case without the fix
(maxworkerthreads=25) and default worker process (1) and seperate
application pools for all sites plus 2nd folder and 3 folder as well, does
it mean this 

 

1. 25 default setting for concurrent req (bug) x for all sites and 25 x for
2nd folder and 25 x for 3rd folder = 75

 or

2. 25 max requests for all sites , 2nd folder site, 3 folder site = 25 max
requests overall 

 

Thanks,




  

 

 

- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink   
- 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

[Ajas Mohammed]

Again thanks. I think I am guessing that the correct answer to this is 75
because of different application pools. I could be wrong though, like you
said better to do practical test and figure out what happens.

One thing I found which is weird "I have jrun_iis6_wildcard instead of
jrun_iis7_wildcard", this is really surprising to me. We had iis6
comparability initially and then removed it and re installed cf 9.0.1 & ran
connector again for all sites.

Thanks,


iUseDropbox(http://db.tt/63Lvone9)
http://ajashadi.blogspot.com
We cannot become what we need to be, remaining what we are.
No matter what, find a way. Because thats what winners do.
You can't improve what you don't measure.
Quality is never an accident; it is always the result of high intention,
sincere effort, intelligent direction and skillful execution; it represents
the wise choice of many alternatives.


On Mon, Nov 4, 2013 at 11:42 PM, Charlie Arehart wrote:

> Thanks for the kind regards. As for your question, that’s something I’ve
> always wondered myself. :-)
>
> In fact, you will see that on the Adobe blog entry about that
> maxworkerthreads bug (from a few years ago) that I had asked this question
> specifically, and I never got an answer. I always wanted to test it, but
> never got around to it.
>
> If you may do some testing determine it, please do let us know. To quote
> “Dances with Wolves”, I’d consider that a “good trade”. :-)
>
> /charlie
>
>
>
> *From:* ad...@acfug.org [mailto:ad...@acfug.org] *On Behalf Of *Ajas
> Mohammed
> *Sent:* Monday, November 04, 2013 10:53 PM
> *To:* discussion@acfug.org
> *Subject:* Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7
>
>
>
> Thank you sir. You are the best!!!.
>
>
>
> Do you see any issues with these separate folders? Plus what about the
> whole logic about concurrent requests and IIS bug? In this case without the
> fix (maxworkerthreads=25) and default worker process (1) and seperate
> application pools for all sites plus 2nd folder and 3 folder as well, does
> it mean this
>
>
>
> 1. 25 default setting for concurrent req (bug) x for all sites and 25 x
> for 2nd folder and 25 x for 3rd folder = 75
>
>  or
>
> 2. 25 max requests for all sites , 2nd folder site, 3 folder site = 25 max
> requests overall
>
>
>
> Thanks,
>
>
> 
>
>
>
> -
> To unsubscribe from this list, manage your profile @
> http://www.acfug.org?fa=login.edituserform
>
> For more info, see http://www.acfug.org/mailinglists
> Archive @ http://www.mail-archive.com/discussion%40acfug.org/
> List hosted by FusionLink 
> -
>

RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

[Charlie Arehart]

Thanks for the kind regards. As for your question, that's something I've
always wondered myself. :-)

In fact, you will see that on the Adobe blog entry about that
maxworkerthreads bug (from a few years ago) that I had asked this question
specifically, and I never got an answer. I always wanted to test it, but
never got around to it. 

If you may do some testing determine it, please do let us know. To quote
"Dances with Wolves", I'd consider that a "good trade". :-)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Monday, November 04, 2013 10:53 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

 

Thank you sir. You are the best!!!.

 

Do you see any issues with these separate folders? Plus what about the whole
logic about concurrent requests and IIS bug? In this case without the fix
(maxworkerthreads=25) and default worker process (1) and seperate
application pools for all sites plus 2nd folder and 3 folder as well, does
it mean this 

 

1. 25 default setting for concurrent req (bug) x for all sites and 25 x for
2nd folder and 25 x for 3rd folder = 75

 or

2. 25 max requests for all sites , 2nd folder site, 3 folder site = 25 max
requests overall 

 

Thanks,




  

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

[Ajas Mohammed]

Thank you sir. You are the best!!!.

Do you see any issues with these separate folders? Plus what about the
whole logic about concurrent requests and IIS bug? In this case without the
fix (maxworkerthreads=25) and default worker process (1) and seperate
application pools for all sites plus 2nd folder and 3 folder as well, does
it mean this

1. 25 default setting for concurrent req (bug) x for all sites and 25 x for
2nd folder and 25 x for 3rd folder = 75
 or
2. 25 max requests for all sites , 2nd folder site, 3 folder site = 25 max
requests overall

Thanks,


iUseDropbox(http://db.tt/63Lvone9)
http://ajashadi.blogspot.com
We cannot become what we need to be, remaining what we are.
No matter what, find a way. Because thats what winners do.
You can't improve what you don't measure.
Quality is never an accident; it is always the result of high intention,
sincere effort, intelligent direction and skillful execution; it represents
the wise choice of many alternatives.


On Mon, Nov 4, 2013 at 7:54 PM, Charlie Arehart wrote:

> Ajas, that was so with IIS 6 but no longer so with IIS 7 (particularly
> without running in IIS 6 compat mode, as you indicated). In IIS 7, the
> settings no longer propagate to newly added sites. You do have to run the
> wsconfig tool to either do a remove/re-add of “all sites”, or you can
> individually connect the new sites to CF (as you did). And in that case, it
> WOULD create a new folder under wsconfig, as that is one per “connection”
> between IIS (one or all sites) and CF.
>
>
>
> /charlie
>
>
>
> *From:* ad...@acfug.org [mailto:ad...@acfug.org] *On Behalf Of *Ajas
> Mohammed
> *Sent:* Monday, November 04, 2013 5:35 PM
> *To:* discussion@acfug.org
> *Subject:* [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7
>
>
>
>
>  We have brand new servers with CF 9.0.1 Windows 2008 R2 IIS 7 (removed
> IIS 6 comptability from IIS before install).
>
> After the CF 9.0.1 installation, I believe I had to run wsconfig the first
> time to configure connectors for ALL IIS 7 sites. All was perfect.
>
> Recently, 2 new sites were added and I had to run wsconfig tool again. I
> was under the impression that any new site will take the settings from
> default site which was set properly for IIS 7.
>
> Anyway, after running wsconfig for these new 2 sites, now I have folders
> 1,2,3 under D:\ColdFusion9\runtime\lib\wsconfig which surprised me.
>
> Is this normal? also why these 2 sites didnt go under folder 1 like other
> sites?
>
> Thanks,
>
> Ajas.
>
>
>
> -
> To unsubscribe from this list, manage your profile @
> http://www.acfug.org?fa=login.edituserform
>
> For more info, see http://www.acfug.org/mailinglists
> Archive @ http://www.mail-archive.com/discussion%40acfug.org/
> List hosted by FusionLink 
> -

RE: [ACFUG Discuss] CFLDAP oddity

[Charlie Arehart]

Rob, while it could be hacking, I'd propose that it could be that
spiders/bots or other automated request agents (including possibly your own
monitoring or load balancing pings to CF pages) could be the cause of that
unexpectedly high rate of requests.

I realize you would think that your access logs would have shown that, but
still another possibility is that you may have requests running against CF
that may not be showing up in that web server log you are looking at. It may
be that you have more than one site causing requests to go to that code, and
it may be that you are not looking at that site's logs (assuming that it
can't be any but the site you assumed), or it could also be that such an
"other" site may not be doing any access logging at all.

If this is CF10, here's another possibility: CF10 includes it's own access
logs tracking every request that runs against CF, regardless of what site
it's coming from (in your external web server). See the
[cf10]\[instance]\runtime\logs (not the logs dir under the instance). CF9
does not have such an access log of its own.

Similarly, if you have FusionReactor, it also logs every request (in any
release of CF, Railo, etc.) and could help you see if requests are getting
to the page/application doing the CFLDAP.

I've seen situations like yours where it was in fact caused by spiders/bots
or other automated requests. And the number of LDAP  calls was exactly equal
to the number of such requests. Someone may say, in that case, "but we see
the CFLDAP call being made in the onsessionstart method of application.cfc
(or code in application.cfm that is only run if a new session is created),
and we would think therefore that the CFLDAP call should be made only once
per many requests from a user". But this is where people  are often burned
(and shocked to learn) that EVERY page request from such automated requests
will typically create a new session and run such code, that you thought was
only run "once per session", instead on every request.

Let us know if that helps.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of John Mason
Sent: Monday, November 04, 2013 6:53 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CFLDAP oddity

 

That sounds like a possible hacking attempt. I would look through your logs
and see if someone is exploiting something in your coding. There's nothing
inherent in the tag that would cause this.

John
ma...@fusionlink.com


On 11/4/13 6:01 PM, Rob Saxon wrote:

CF gurus,

 

Our LDAP administrator informed us that our online directory application was
making 17000 thousand connection requests to the LDAP server in the course
of a few hours. Our web logs show that, at most, about 800 requests were
made during that time.  Is there something about the CFLDAP tag that would
suddenly generate that kind of traffic?

 

Thanks,

Rob

 

---
Rob Saxon
Director
Web Management
Mercer University
478-301-5550

 


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink   
- 

 


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink   
- 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] resetting admin password on CF10

[Charlie Arehart]

Troy, it Is true that when you add a new CF Admin user, even one with all
admin roles "allowed", it does NOT give them the security roles, so only
that original Admin user can add a new user.

No, you say that after running the passwordreset you still can't get in, but
did you restart CF? You do need to, as that modified a file that is then
read during startup.

If you did do a restart, then I would propose something else could be at
issue. While the password reset does reset the password for that initial
"admin" user, it is possible (through other manual file modification) to
change that username to something else.  The following technote discusses
it, and though for CF8, the concept should still apply for CF10:

http://helpx.adobe.com/coldfusion/kb/coldfusion-8-change-root-administrator.
html


FWIW, I also discuss that and much more on the multi-user capability for the
CF Admin in an article I did for Adobe, listed on my articles page at:

http://www.carehart.org/articles/#2009_1

Let us know if any of that helps.

/charlie



From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of troy
Sent: Monday, November 04, 2013 5:48 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] resetting admin password on CF10

 

I have encountered an issue on one of my production CF10 servers. I have
created a user for the CF Admin for use outside of the "admin" user.
However, I can no longer log in with the admin user and can not see any of
the user manager properties with my new user. 

 

I have tried resetting the password with the passwordreset.bat file located
in [coldfusionhome]\cfusion\bin and it does not resolve the issue.

 

Does anyone have any tricks on how to reset the admin password?

 

Thank you,

 

Troy Jones

Technical Manager

Third Wave Digital

1841 Hardeman Ave.

Macon, GA 31201

t...@thirdwavedigital.com

www.thirdwavedigital.com

 


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink   
- 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

[Charlie Arehart]

Ajas, that was so with IIS 6 but no longer so with IIS 7 (particularly
without running in IIS 6 compat mode, as you indicated). In IIS 7, the
settings no longer propagate to newly added sites. You do have to run the
wsconfig tool to either do a remove/re-add of "all sites", or you can
individually connect the new sites to CF (as you did). And in that case, it
WOULD create a new folder under wsconfig, as that is one per "connection"
between IIS (one or all sites) and CF. 

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Monday, November 04, 2013 5:35 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

 




We have brand new servers with CF 9.0.1 Windows 2008 R2 IIS 7 (removed IIS 6
comptability from IIS before install).

After the CF 9.0.1 installation, I believe I had to run wsconfig the first
time to configure connectors for ALL IIS 7 sites. All was perfect. 

Recently, 2 new sites were added and I had to run wsconfig tool again. I was
under the impression that any new site will take the settings from default
site which was set properly for IIS 7.

Anyway, after running wsconfig for these new 2 sites, now I have folders
1,2,3 under D:\ColdFusion9\runtime\lib\wsconfig which surprised me.

Is this normal? also why these 2 sites didnt go under folder 1 like other
sites?

Thanks,

Ajas.

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

Re: [ACFUG Discuss] CFLDAP oddity

[John Mason]

That sounds like a possible hacking attempt. I would look through your 
logs and see if someone is exploiting something in your coding. There's 
nothing inherent in the tag that would cause this.


John
ma...@fusionlink.com


On 11/4/13 6:01 PM, Rob Saxon wrote:


CF gurus,

Our LDAP administrator informed us that our online directory 
application was making 17000 thousand connection requests to the LDAP 
server in the course of a few hours. Our web logs show that, at most, 
about 800 requests were made during that time.  Is there something 
about the CFLDAP tag that would suddenly generate that kind of traffic?


Thanks,

Rob

---
Rob Saxon
Director
Web Management
Mercer University
478-301-5550


-
To unsubscribe from this list, manage your profile @
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by FusionLink 
- 





-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform


For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

[ACFUG Discuss] CFLDAP oddity

[Rob Saxon]

CF gurus,

Our LDAP administrator informed us that our online directory application was 
making 17000 thousand connection requests to the LDAP server in the course of a 
few hours. Our web logs show that, at most, about 800 requests were made during 
that time.  Is there something about the CFLDAP tag that would suddenly 
generate that kind of traffic?

Thanks,
Rob

---
Rob Saxon
Director
Web Management
Mercer University
478-301-5550




-

To unsubscribe from this list, manage your profile @ 

http://www.acfug.org?fa=login.edituserform



For more info, see http://www.acfug.org/mailinglists

Archive @ http://www.mail-archive.com/discussion%40acfug.org/

List hosted by http://www.fusionlink.com

-

[ACFUG Discuss] resetting admin password on CF10

[troy]

I have encountered an issue on one of my production CF10 servers. I have 
created a user for the CF Admin for use outside of the "admin" user. However, I 
can no longer log in with the admin user and can not see any of the user 
manager properties with my new user.

I have tried resetting the password with the passwordreset.bat file located in 
[coldfusionhome]\cfusion\bin and it does not resolve the issue.

Does anyone have any tricks on how to reset the admin password?

Thank you,

Troy Jones
Technical Manager
Third Wave Digital
1841 Hardeman Ave.
Macon, GA 31201
t...@thirdwavedigital.com
www.thirdwavedigital.com




-

To unsubscribe from this list, manage your profile @ 

http://www.acfug.org?fa=login.edituserform



For more info, see http://www.acfug.org/mailinglists

Archive @ http://www.mail-archive.com/discussion%40acfug.org/

List hosted by http://www.fusionlink.com

-

[ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

[Ajas Mohammed]

We have brand new servers with CF 9.0.1 Windows 2008 R2 IIS 7 (removed IIS
6 comptability from IIS before install).

After the CF 9.0.1 installation, I believe I had to run wsconfig the first
time to configure connectors for ALL IIS 7 sites. All was perfect.

Recently, 2 new sites were added and I had to run wsconfig tool again. I
was under the impression that any new site will take the settings from
default site which was set properly for IIS 7.

Anyway, after running wsconfig for these new 2 sites, now I have folders
1,2,3 under D:\ColdFusion9\runtime\lib\wsconfig which surprised me.

Is this normal? also why these 2 sites didnt go under folder 1 like other
sites?

Thanks,

Ajas.