[ACFUG Discuss] TLS in CFLDAP [Lucee]
CF gurus, We have a server with Lucee installed. Is there a way to get CFLDAP to use TLS instead of SSL for secure connections? I am trying to connect to an LDAP server that does not support SSL v2. I don't see usetls as a parameter available in CFLDAP in Lucee. Is there a workaround? Thanks, Rob
[ACFUG Discuss] CFLDAP oddity
CF gurus, Our LDAP administrator informed us that our online directory application was making 17000 thousand connection requests to the LDAP server in the course of a few hours. Our web logs show that, at most, about 800 requests were made during that time. Is there something about the CFLDAP tag that would suddenly generate that kind of traffic? Thanks, Rob --- Rob Saxon Director Web Management Mercer University 478-301-5550 - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
RE: [ACFUG Discuss] CFLDAP and memory errors
it just goes to show that sometimes the cause is NOT about the JVM and NOT about CF itself, but can be influenced by code (which I'll argue could be exacerbated by spiders and bots). So often, it's one thing that leads to another. But you have to start somewhere. :-) Perhaps the simplest solution (if you can't lower the heap much) would be to move to a 64-bit environment. That removes the 2gb per process limit, and often lets CF/the JVM "breath" better. Hope that's helpful. /charlie PS I probably ought to make a blog entry out of this, but I'll wait to hear what others may say, and especially how things may go for Rob if he tries any of the suggestions. Sadly, not all answers are always "right". This can be an area with lots of subtleties. Even so, the above has proven helpful and true for many I've helped, and it's different from what most offer in response to the problem, so let's see how it goes. From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Rob Saxon Sent: Tuesday, October 09, 2012 11:56 AM To: ACFUG (discussion@acfug.org) Subject: [ACFUG Discuss] CFLDAP and memory errors CF Gurus, We have several apps that are generating the following error at different times: "unable to create new native thread The specific sequence of files included or processed is: [file path and line #] " java.lang.OutOfMemoryError: unable to create new native thread The errors eventually require a CF restart. We first experienced this while running CF7, but it continues to occur after upgrading to CF 9.0.2 and increasing the JVM allocation to three-quarters of a gigabyte. The error consistently occurs when using the CFLDAP tag to query an LDAP server. Does anyone have any suggestions about how to troubleshoot it? Thanks, Rob --- Rob Saxon Director Web Management Mercer University 478-301-5550 - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink<http://www.fusionlink.com> - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink<http://www.fusionlink.com> - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
[ACFUG Discuss] CFLDAP and memory errors
CF Gurus, We have several apps that are generating the following error at different times: "unable to create new native thread The specific sequence of files included or processed is: [file path and line #] " java.lang.OutOfMemoryError: unable to create new native thread The errors eventually require a CF restart. We first experienced this while running CF7, but it continues to occur after upgrading to CF 9.0.2 and increasing the JVM allocation to three-quarters of a gigabyte. The error consistently occurs when using the CFLDAP tag to query an LDAP server. Does anyone have any suggestions about how to troubleshoot it? Thanks, Rob ------- Rob Saxon Director Web Management Mercer University 478-301-5550 - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
RE: [ACFUG Discuss] ColdFusion system account access to database
Charlie, You're amazing! With your help, I found the problem. When I archived the old macromedia_drivers, I kept the copy of the jar in the same directory with a different file name. Apparently, these collided. Now that I moved the archive elsewhere, it works as a straight SQL Server data source! Thanks so much! Rob From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Rob Saxon Sent: Tuesday, February 22, 2011 4:03 AM To: discussion@acfug.org Subject: RE: [ACFUG Discuss] ColdFusion system account access to database Charlie, I found the same article earlier this afternoon. Your guidance added confirmation that this may lead to the solution. Since we are running MX7 and SQL Server 2008 Express, I updated the drivers. I restarted the server and configured an "Other" type data source where I specified: JDBC URL: jdbc:macromedia:sqlserver://[server_name]:1433;databaseName=[db_name]; SelectMethod=direct;sendStringParametersAsUnicode=false;MaxPooledStatements=0;AuthenticationMethod=Type2; Driver class: macromedia.jdbc.MacromediaDriver Driver Name: User Name: Password: Description: All blank Advanced settings: Defaults Throws this error: Connection verification failed for data source: java.sql.SQLException: [Macromedia][SQLServer JDBC Driver]Could not establish a connection using integrated security: No LoginModules configured for JDBC_DRIVER_01 The root cause was that: java.sql.SQLException: [Macromedia][SQLServer JDBC Driver]Could not establish a connection using integrated security: No LoginModules configured for JDBC_DRIVER_01 Other notes: * I also tried the value of the JDBC URL in the Connection String value under advanced settings * I have confirmed that TCP/IP is enabled on the * I can create the same data connection using the Windows SQL Server ODBC driver on the web server successfully, so DB permissions and configuration should not be a factor. Any other thoughts of things to try? Thank so much for your help! Rob From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Charlie Arehart Sent: Monday, February 21, 2011 5:12 PM To: discussion@acfug.org Subject: RE: [ACFUG Discuss] ColdFusion system account access to database Rob, what you're trying to do is referred to as "trusted"or "type 2" or "windows" authentication. The good news is that if you're using CF 8 or 9, all you need to do is leave the username blank. CF will use that to infer that you want to use trusted authentication with, as you note, whatever account has been used to start CF. This is discussed in the docs, but it's pretty easy to miss, even for those who ever do note that there are docs on CF Administration. :-) CF9: http://help.adobe.com/en_US/ColdFusion/9.0/Admin/WSc3ff6d0ea77859461172e0811cbf364104-7fe5.html CF8: http://livedocs.adobe.com/coldfusion/8/htmldocs/help.html?content=datasources_ADV_MJS_11.html If you're on CF7, though, such trusted authentication was enabled only by updating the JDBC drivers, a discussed in this technote: http://kb2.adobe.com/cps/000/42dcb10a.html And further, you needed to modify the connection parameters. See the section there near the bottom on "SQL Server NT authentication users". Let us know if any of that works for you, Rob. /charlie arehart char...@carehart.org Providing on-demand troubleshooting services for CF and CFBuilder at http://www.carehart.org/consulting From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Rob Saxon Sent: Monday, February 21, 2011 2:55 PM To: discussion@acfug.org Subject: RE: [ACFUG Discuss] ColdFusion system account access to database Thanks for the suggestion Steve. I also tried that and it failed. Interestingly enough, if I don't specify a user name or password, I get: "Could not establish a connection using integrated security: No LoginModules configured for JDBC_DRIVER_01" Thanks, Rob From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Steve Ross Sent: Monday, February 21, 2011 2:44 PM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] ColdFusion system account access to database You might have to use "user@domain" as your user name... On Mon, Feb 21, 2011 at 2:02 PM, Rob Saxon mailto:saxon...@mercer.edu>> wrote: Our DBA is wanting use to use an Active Directory domain account to access an internal database. He has given our CF service account access to the DB, but I am having difficulty getting a data source to connect thru CF Admin. Is it possible to do this? So far, I'm using domain\system account name as the data source user name and corresponding password. Any suggestions? Thanks, Rob - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfu
RE: [ACFUG Discuss] ColdFusion system account access to database
Thanks for the continued support, Charlie. Comments below: From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Charlie Arehart Sent: Tuesday, February 22, 2011 10:57 AM To: discussion@acfug.org Subject: RE: [ACFUG Discuss] ColdFusion system account access to database Well, I wouldn't have tried the "other" type first, but I see that in that technote I shared it does say you may need to do it because of some other bug. Did you at least try it as a normal SQL Server DSN? I did try that Error: java.sql.SQLException: [Macromedia][SQLServer JDBC Driver]Could not establish a connection using integrated security: No LoginModules configured for JDBC_DRIVER_01 I see you say later, "I also tried the value of the JDBC URL in the Connection String value under advanced settings". Right, that is all I was meaning in my suggestion. So do you get the exact same error message then? That's important for us to know. If the JDBC URL is blank and Connection string is: jdbc:macromedia:sqlserver://[server_name]:1433;databaseName=[db_name]; SelectMethod=direct;sendStringParametersAsUnicode=false;MaxPooledStatements=0;AuthenticationMethod=Type2; Error: java.sql.SQLException: No suitable driver If both are populated the same: Error: java.sql.SQLException: [Macromedia][SQLServer JDBC Driver]Could not establish a connection using integrated security: No LoginModules configured for JDBC_DRIVER_01 You then say "I can create the same data connection using the Windows SQL Server ODBC driver on the web server successfully, so DB permissions and configuration should not be a factor". Well, again let's be sure we understand what you're saying. In that ODBC datasource, did you also get to leave the username/pw blank? And even if so, don't you see that the login then would not be that with which you started CF. I don't know what it would be, except perhaps the System account. I haven't done much with ODBC drivers in years. But we want to be sure you're comparing apples to apples before making any conclusions. I logged in to the CF server as the domain account that the CF service runs under and defined an ODBC connection to the same DB server and database using Windows Authentication (no password needed). It pulled the list of DBs on that server and connected successfully. Again, the point of the trusted auth in CF is that if you leave the username/pw off, it then uses whatever account CF is started with. And I'll note that in googling the error you got, I found one page at least (http://forums.devshed.com/coldfusion-development-84/cfmx-7-02-and-ms-sql-2005t-469693.html) where one of the commenters said that the solution for him was adding a SQL Server login (using Management Studio) to define a user for whatever account CF was using, then grant it access to the particular database. So are you sure that's been done on the SQL Server? Yes, I connected to the DB server as that domain account and as a DBO and confirmed that there is a login for the account on the server and it has sufficient access to the correct DB. Just trying to help you think through things. I realize you may come back that all those are done and you still have the problem. Looks like that is where I am, but I REALLY appreciate your help. Sadly, nearly ever reference to this problem on the web offers no solution (other than "use sql authentication"). But the whole point of the hotfix (or the change in 8 and 9) was to allow specifically this feature, so I will look forward to us finding and resolving the problem for you. Perhaps it's just a minor issue of not having made the needed change in SQL Server. Looking forward to your answer. :-) My research found the same thing. /charlie From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Rob Saxon Sent: Tuesday, February 22, 2011 4:03 AM To: discussion@acfug.org Subject: RE: [ACFUG Discuss] ColdFusion system account access to database Charlie, I found the same article earlier this afternoon. Your guidance added confirmation that this may lead to the solution. Since we are running MX7 and SQL Server 2008 Express, I updated the drivers. I restarted the server and configured an "Other" type data source where I specified: JDBC URL: jdbc:macromedia:sqlserver://[server_name]:1433;databaseName=[db_name]; SelectMethod=direct;sendStringParametersAsUnicode=false;MaxPooledStatements=0;AuthenticationMethod=Type2; Driver class: macromedia.jdbc.MacromediaDriver Driver Name: User Name: Password: Description: All blank Advanced settings: Defaults Throws this error: Connection verification failed for data source: java.sql.SQLException: [Macromedia][SQLServer JDBC Driver]Could not establish a connection using integrated security: No LoginModules configured for JDBC_DRIVER_01 The root cause was that: java.sql.SQLException: [Macromedia][SQLServer JDBC Driver]C
RE: [ACFUG Discuss] ColdFusion system account access to database
Charlie, I found the same article earlier this afternoon. Your guidance added confirmation that this may lead to the solution. Since we are running MX7 and SQL Server 2008 Express, I updated the drivers. I restarted the server and configured an "Other" type data source where I specified: JDBC URL: jdbc:macromedia:sqlserver://[server_name]:1433;databaseName=[db_name]; SelectMethod=direct;sendStringParametersAsUnicode=false;MaxPooledStatements=0;AuthenticationMethod=Type2; Driver class: macromedia.jdbc.MacromediaDriver Driver Name: User Name: Password: Description: All blank Advanced settings: Defaults Throws this error: Connection verification failed for data source: java.sql.SQLException: [Macromedia][SQLServer JDBC Driver]Could not establish a connection using integrated security: No LoginModules configured for JDBC_DRIVER_01 The root cause was that: java.sql.SQLException: [Macromedia][SQLServer JDBC Driver]Could not establish a connection using integrated security: No LoginModules configured for JDBC_DRIVER_01 Other notes: * I also tried the value of the JDBC URL in the Connection String value under advanced settings * I have confirmed that TCP/IP is enabled on the * I can create the same data connection using the Windows SQL Server ODBC driver on the web server successfully, so DB permissions and configuration should not be a factor. Any other thoughts of things to try? Thank so much for your help! Rob From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Charlie Arehart Sent: Monday, February 21, 2011 5:12 PM To: discussion@acfug.org Subject: RE: [ACFUG Discuss] ColdFusion system account access to database Rob, what you're trying to do is referred to as "trusted"or "type 2" or "windows" authentication. The good news is that if you're using CF 8 or 9, all you need to do is leave the username blank. CF will use that to infer that you want to use trusted authentication with, as you note, whatever account has been used to start CF. This is discussed in the docs, but it's pretty easy to miss, even for those who ever do note that there are docs on CF Administration. :-) CF9: http://help.adobe.com/en_US/ColdFusion/9.0/Admin/WSc3ff6d0ea77859461172e0811cbf364104-7fe5.html CF8: http://livedocs.adobe.com/coldfusion/8/htmldocs/help.html?content=datasources_ADV_MJS_11.html If you're on CF7, though, such trusted authentication was enabled only by updating the JDBC drivers, a discussed in this technote: http://kb2.adobe.com/cps/000/42dcb10a.html And further, you needed to modify the connection parameters. See the section there near the bottom on "SQL Server NT authentication users". Let us know if any of that works for you, Rob. /charlie arehart char...@carehart.org Providing on-demand troubleshooting services for CF and CFBuilder at http://www.carehart.org/consulting From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Rob Saxon Sent: Monday, February 21, 2011 2:55 PM To: discussion@acfug.org Subject: RE: [ACFUG Discuss] ColdFusion system account access to database Thanks for the suggestion Steve. I also tried that and it failed. Interestingly enough, if I don't specify a user name or password, I get: "Could not establish a connection using integrated security: No LoginModules configured for JDBC_DRIVER_01" Thanks, Rob From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Steve Ross Sent: Monday, February 21, 2011 2:44 PM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] ColdFusion system account access to database You might have to use "user@domain" as your user name... On Mon, Feb 21, 2011 at 2:02 PM, Rob Saxon mailto:saxon...@mercer.edu>> wrote: Our DBA is wanting use to use an Active Directory domain account to access an internal database. He has given our CF service account access to the DB, but I am having difficulty getting a data source to connect thru CF Admin. Is it possible to do this? So far, I'm using domain\system account name as the data source user name and corresponding password. Any suggestions? Thanks, Rob - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink<http://www.fusionlink.com> - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
RE: [ACFUG Discuss] ColdFusion system account access to database
Thanks for the suggestion Steve. I also tried that and it failed. Interestingly enough, if I don't specify a user name or password, I get: "Could not establish a connection using integrated security: No LoginModules configured for JDBC_DRIVER_01" Thanks, Rob From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Steve Ross Sent: Monday, February 21, 2011 2:44 PM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] ColdFusion system account access to database You might have to use "user@domain" as your user name... On Mon, Feb 21, 2011 at 2:02 PM, Rob Saxon mailto:saxon...@mercer.edu>> wrote: Our DBA is wanting use to use an Active Directory domain account to access an internal database. He has given our CF service account access to the DB, but I am having difficulty getting a data source to connect thru CF Admin. Is it possible to do this? So far, I'm using domain\system account name as the data source user name and corresponding password. Any suggestions? Thanks, Rob ------- Rob Saxon Director Web Management Mercer University 478-301-5550 -- Steve Ross web application & interface developer http://blog.stevensross.com [mobile] (912) 344-8113 [ AIM / Yahoo! : zeriumsteven ] [googleTalk : nowhiding ] - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
[ACFUG Discuss] ColdFusion system account access to database
Our DBA is wanting use to use an Active Directory domain account to access an internal database. He has given our CF service account access to the DB, but I am having difficulty getting a data source to connect thru CF Admin. Is it possible to do this? So far, I’m using domain\system account name as the data source user name and corresponding password. Any suggestions? Thanks, Rob --- Rob Saxon Director Web Management Mercer University 478-301-5550 N�r��yb�X��f�j���鮇���mq
RE: [ACFUG Discuss] hotfix kb400262
Cameron, We haven't installed the hotfix, and unfortunately, we do not have a test environment to test the hotfix. I know it's a less than ideal situation. We simply wanted to gauge the risk in applying this particular hotfix to a production system. Thanks, Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cameron Childress Sent: Tuesday, July 08, 2008 10:18 PM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] hotfix kb400262 Oddly, that's the exact problem that hf702-65095 (which is the hotfix mentioned by KB400262) was supposed to fix. http://kb.adobe.com/selfservice/viewContent.do?externalId=kb400262 So really, the issue is, you had this problem, applied a hotfix that was supposed to fix it, and still have this problem? Have you opened up any of the problem files to see if the problem mentioned in the KB article is happening to one of those bad spool files? From the KB article: "It appears that ColdFusion inserts a new line character into the email before it leaves the Spool directory and therefore the file becomes corrupted, resulting in the following error message in the mail.log file:" I'd open one of those files up and look for anything odd, like the filename being borked by a newline. Also, did this start happening around any change on your server? Perhaps something that would change permissions on the attachments storage location? Lastly, I would double check to make sure the hotfix was actually applied correctly. I am pretty sure hotfixes are listed in the "Settings Summary" screen in the CFAdmin, and I would check to make sure it's listed and got installed correctly. -Cameron On Tue, Jul 8, 2008 at 4:14 PM, John Evans <[EMAIL PROTECTED]> wrote: > Yes Cameron, they are going into the undelivered folder with the error message > > "Error","scheduler-0","07/07/08","13:23:56",,"The ColdFusion mail spool > encountered an invalid spool file in the spool directory. The invalid file > was Mail30580.cfmail. This file was moved to the undelivered directory." > > In the mail.log file... > > Thanks for the help! > > In Christ, > John Evans > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cameron > Childress > Sent: Tuesday, July 08, 2008 4:05 PM > To: discussion@acfug.org > Subject: Re: [ACFUG Discuss] hotfix kb400262 > > On Tue, Jul 8, 2008 at 3:59 PM, Rob Saxon <[EMAIL PROTECTED]> wrote: >> We're running CFMX7 and discovered an issue with email containing >> attachments bouncing to the server. I realize it's been out for over a >> year, but has anyone had any problems installing this hotfix? > > Can you be more specific about what's happening? "Bouncing" implies > that the recipient is refusing the email, which is unlikely to be > related to ColdFusion. > > Do you mean they are going into the undelivered folder on the CF server? > > -Cameron > > -- > Cameron Childress > Sumo Consulting Inc > http://www.sumoc.com > --- > cell: 678.637.5072 > aim: cameroncf > email: [EMAIL PROTECTED] > > > - > To unsubscribe from this list, manage your profile @ > http://www.acfug.org?fa=login.edituserform > > For more info, see http://www.acfug.org/mailinglists > Archive @ http://www.mail-archive.com/discussion%40acfug.org/ > List hosted by http://www.fusionlink.com > - > > > > > > - > To unsubscribe from this list, manage your profile @ > http://www.acfug.org?falogin.edituserform > > For more info, see http://www.acfug.org/mailinglists > Archive @ http://www.mail-archive.com/discussion%40acfug.org/ > List hosted by http://www.fusionlink.com > - > > > > -- Cameron Childress Sumo Consulting Inc http://www.sumoc.com --- cell: 678.637.5072 aim: cameroncf email: [EMAIL PROTECTED] - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
[ACFUG Discuss] hotfix kb400262
We're running CFMX7 and discovered an issue with email containing attachments bouncing to the server. I realize it's been out for over a year, but has anyone had any problems installing this hotfix? Thanks, Rob - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
[ACFUG Discuss] SOT: SSL vendors
We have many SSL certificates (20+) that we license through Thawte (including ColdFusion servers). Most of these certs are on stand-alone servers, so using a wildcard certificate is not cost effective. Do any of you have recommendations about options that could provide this functionality with reliability, security, and less cost? Thanks, Rob - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
[ACFUG Discuss] CFLDAP Connection Cleanup
We have a CF server that has 4 or 5 applications that query our LDAP server. The most used of these apps is our main user directory. Our networking folks recently added monitoring software on our new LDAP server and they noticed that there are over 2000 tcp socket requests (in the course of about 3 hours) from the CF server to the LDAP server that are in a CLOSE_WAIT state. These requests only go away if the LDAP is cycled. Our CF apps use CFLDAP tags to query the LDAP server. It was my understanding that ColdFusion cleans up these connections at the end of its processing. Does anyone have any suggestions about how to identify the offending app(s) and prevent future connections from hanging in this state? Thanks, Rob --- Rob Saxon Director Web Management Mercer University 478-301-5550 - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
RE: [ACFUG Discuss] HTML email generated by CF
Thanks, Troy. I'll test it and see. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Troy Jones Sent: Thursday, September 06, 2007 1:07 PM To: discussion@acfug.org Subject: RE: [ACFUG Discuss] HTML email generated by CF While I am unsure of other mail clients (I have only tested in Outlook 2003 in cached Exchange mode), the full URL must always be used for the HREF value. I suppose it could be a bug, I just have never thought to question it. Troy Jones Dynapp Support Team 678-528-2952 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rob Saxon Sent: Thursday, September 06, 2007 12:47 PM To: discussion@acfug.org Subject: RE: [ACFUG Discuss] HTML email generated by CF I have a with the rest of the absolute path. It seems to work in other clients. Is this a bug with Outlook 2003? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Momolu Sancea Sent: Thursday, September 06, 2007 9:35 AM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] HTML email generated by CF Troy is right, relative links will cause that problem. On 9/5/07, Dusty Hale < [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> > wrote: I use outlook 2003 and by default it turns links off for security unless the sender is on the junk email safe list. Don't know if this info helps you? Dusty -Original Message- From: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> [mailto: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] On Behalf Of Rob Saxon Sent: Wednesday, September 05, 2007 3:11 PM To: discussion@acfug.org <mailto:discussion@acfug.org> Subject: RE: [ACFUG Discuss] HTML email generated by CF I've had two cases with users and Outlook 2003. Others report no problem. -Original Message- From: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> [mailto: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ]On Behalf Of Tepfer, Seth Sent: Wednesday, September 05, 2007 1:53 PM To: discussion@acfug.org <mailto:discussion@acfug.org> Subject: RE: [ACFUG Discuss] HTML email generated by CF Is this happening consistently to all users of Outlook, or just to particular users? Outlook has the ability to turn off links in emails, though for the life of me I cannot find the checkbox. -Original Message- From: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> [mailto: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] On Behalf Of Rob Saxon Sent: Wednesday, September 05, 2007 1:43 PM To: ACFUG Subject: [ACFUG Discuss] HTML email generated by CF I realize that this is probably an Outlook/Microsoft issue but I've not been able to find a solution elsewhere, so I thought someone on this list might have an idea. Using CF, we generate an HTML email that ties to a calendar application. In a few random cases, users of Outlook 2003 report that they are unable to click the links in the email because hovering over the email link reveals outbind://83-011 Instead of the full URL as it does on other clients. Any ideas? Thanks, Rob - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com - - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?falogin.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com - - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com - - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com - - Annual Sponsor - Figleaf Software <http://www.figleaf
RE: [ACFUG Discuss] HTML email generated by CF
I have a with the rest of the absolute path. It seems to work in other clients. Is this a bug with Outlook 2003? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Momolu Sancea Sent: Thursday, September 06, 2007 9:35 AM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] HTML email generated by CF Troy is right, relative links will cause that problem. On 9/5/07, Dusty Hale < [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> > wrote: I use outlook 2003 and by default it turns links off for security unless the sender is on the junk email safe list. Don't know if this info helps you? Dusty -Original Message- From: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> [mailto: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] On Behalf Of Rob Saxon Sent: Wednesday, September 05, 2007 3:11 PM To: discussion@acfug.org <mailto:discussion@acfug.org> Subject: RE: [ACFUG Discuss] HTML email generated by CF I've had two cases with users and Outlook 2003. Others report no problem. -Original Message- From: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> [mailto: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ]On Behalf Of Tepfer, Seth Sent: Wednesday, September 05, 2007 1:53 PM To: discussion@acfug.org <mailto:discussion@acfug.org> Subject: RE: [ACFUG Discuss] HTML email generated by CF Is this happening consistently to all users of Outlook, or just to particular users? Outlook has the ability to turn off links in emails, though for the life of me I cannot find the checkbox. -Original Message- From: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> [mailto: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] On Behalf Of Rob Saxon Sent: Wednesday, September 05, 2007 1:43 PM To: ACFUG Subject: [ACFUG Discuss] HTML email generated by CF I realize that this is probably an Outlook/Microsoft issue but I've not been able to find a solution elsewhere, so I thought someone on this list might have an idea. Using CF, we generate an HTML email that ties to a calendar application. In a few random cases, users of Outlook 2003 report that they are unable to click the links in the email because hovering over the email link reveals outbind://83-011 Instead of the full URL as it does on other clients. Any ideas? Thanks, Rob - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com - - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?falogin.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com - - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com - - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com - - Annual Sponsor - Figleaf Software <http://www.figleaf.com> To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink <http://www.fusionlink.com> - - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
RE: [ACFUG Discuss] HTML email generated by CF
I've had two cases with users and Outlook 2003. Others report no problem. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tepfer, Seth Sent: Wednesday, September 05, 2007 1:53 PM To: discussion@acfug.org Subject: RE: [ACFUG Discuss] HTML email generated by CF Is this happening consistently to all users of Outlook, or just to particular users? Outlook has the ability to turn off links in emails, though for the life of me I cannot find the checkbox. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rob Saxon Sent: Wednesday, September 05, 2007 1:43 PM To: ACFUG Subject: [ACFUG Discuss] HTML email generated by CF I realize that this is probably an Outlook/Microsoft issue but I've not been able to find a solution elsewhere, so I thought someone on this list might have an idea. Using CF, we generate an HTML email that ties to a calendar application. In a few random cases, users of Outlook 2003 report that they are unable to click the links in the email because hovering over the email link reveals outbind://83-011 Instead of the full URL as it does on other clients. Any ideas? Thanks, Rob - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com - - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?falogin.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com - - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
[ACFUG Discuss] HTML email generated by CF
I realize that this is probably an Outlook/Microsoft issue but I've not been able to find a solution elsewhere, so I thought someone on this list might have an idea. Using CF, we generate an HTML email that ties to a calendar application. In a few random cases, users of Outlook 2003 report that they are unable to click the links in the email because hovering over the email link reveals outbind://83-011 Instead of the full URL as it does on other clients. Any ideas? Thanks, Rob - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
RE: [ACFUG Discuss] CF Service Account
Sandbox security is fine when it is backed up by OS-level security. >>> >>> What hack do you refer to? That's a new one on me. >>> >>> -dhs >>> >>> >>> Dean H. Saxe, CISSP, CEH >>> [EMAIL PROTECTED] >>> "[U]nconstitutional behavior by the authorities is constrained only >>> by the peoples' willingness to contest them" >>> --John Perry Barlow >>> >>> >>> On Aug 1, 2007, at 3:12 PM, John Mason wrote: >>> >>> There's some, but there's a known remote java class hack to get >>> around it. >>> I'm testing CF8 for this issue. Bluedragon doesn't have this issue >>> by the way. For a lot of things sandboxing is certainly good if >>> people would just use it ;) But if you have COM objects on and CF is >>> running under the local service account. Which a lot of people do >>> for some reason. You can pretty much do anything you want to a >>> server. Taking CF off local service account achieves a lot of known >>> security issues out right and it's easy to implement. That's why I >>> jump on that whenever possible. >>> John Mason >>> [EMAIL PROTECTED] >>> 770.337.8363 >>> www.FusionLink.com - ColdFusion and Flex hosting Now offering >>> ColdFusion 8 Enterprise hosting FREE Subversion hosting >>> >>> >>> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Charlie >>> Arehart >>> Sent: Wednesday, August 01, 2007 2:59 PM >>> To: discussion@acfug.org >>> Subject: RE: [ACFUG Discuss] CF Service Account >>> >>> >>> No value in the resource/sandbox security? :-) /charlie >>> >>> >>> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rob >>> Saxon >>> Sent: Wednesday, August 01, 2007 2:05 PM >>> To: discussion@acfug.org >>> Subject: RE: [ACFUG Discuss] CF Service Account >>> >>> >>> >>> >>> Thank you John and Dean for your feedback. The CF script needs to >>> write the contents of a web form to a folder on another server so >>> that an application on that server can read in the form results. >>> >>> >>> - >>> Annual Sponsor - Figleaf Software >>> >>> To unsubscribe from this list, manage your profile @ >>> http://www.acfug.org?fa=login.edituserform >>> >>> For more info, see http://www.acfug.org/mailinglists Archive @ >>> http://www.mail-archive.com/discussion%40acfug.org/ >>> List hosted by FusionLink >>> - >>> - >>> Annual Sponsor - Figleaf Software >>> >>> To unsubscribe from this list, manage your profile @ >>> http://www.acfug.org?fa=login.edituserform >>> >>> For more info, see http://www.acfug.org/mailinglists Archive @ >>> http://www.mail-archive.com/discussion%40acfug.org/ >>> List hosted by FusionLink >>> - >>> >>> - >>> Annual Sponsor - Figleaf Software >>> >>> To unsubscribe from this list, manage your profile @ >>> http://www.acfug.org?fa=login.edituserform >>> >>> For more info, see http://www.acfug.org/mailinglists Archive @ >>> http://www.mail-archive.com/discussion%40acfug.org/ >>> List hosted by FusionLink >>> - >>> >> >> >> -- >> >> >> "A government big enough to give you everything you want, is strong >> enough to take everything you have." >> -Thomas Jefferson >> >> "If your a horse, and someone gets on you, and falls off, and then >> gets right back on you; I think you should buck him off right away." >> -Todays deep thoughts >> >> "The winner in any meeting is the one with the highest caffeine >> resistance and bladder capacity" -Roger Wright >> >> >> - >> Annual Sponsor FigLeaf Software - http://www.figleaf.com >> >> T
RE: [ACFUG Discuss] CF Service Account
Thank you John and Dean for your feedback. The CF script needs to write the contents of a web form to a folder on another server so that an application on that server can read in the form results. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Mason Sent: Wednesday, August 01, 2007 1:50 PM To: discussion@acfug.org Subject: RE: [ACFUG Discuss] CF Service Account Dean said it and I completely agree. Be very careful not to use the default local system account for this or on a AD account. A web app really doesn't need high level permissions. If you can share why you would need to access shared drives, etc. Maybe we can advise a better way. On the question itself, yes you can change this to an AD (active directory) account that has permissions to the local server and those shared drives. The second method would only happen if you didn't have AD on. John Mason [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> 770.337.8363 www.FusionLink.com <http://www.fusionlink.com/> - ColdFusion and Flex hosting Now offering ColdFusion 8 Enterprise hosting FREE Subversion hosting _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rob Saxon Sent: Wednesday, August 01, 2007 12:22 PM To: discussion@acfug.org Subject: [ACFUG Discuss] CF Service Account By default the CF service runs as a System account. What is the best practice to allow this service to access all areas of the web server and other server shares? Here are some ideas I considered: Scenario 1: Creating a domain account for the service with that belongs to the local Admin group for the host server. Scenario 2: Creating a local account on the host and shared servers with the same name and make that account a member of the web server's admin group and give that local account access to the share on the remote server. Is either of these possibilities recommended? If not, are there any suggestions? Take care, Rob ------- Rob Saxon Director Web Management Mercer University 478-301-5550 - Annual Sponsor - Figleaf Software <http://www.figleaf.com> To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink <http://www.fusionlink.com> - - Annual Sponsor - Figleaf Software <http://www.figleaf.com> To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink <http://www.fusionlink.com> - - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
[ACFUG Discuss] CF Service Account
By default the CF service runs as a System account. What is the best practice to allow this service to access all areas of the web server and other server shares? Here are some ideas I considered: Scenario 1: Creating a domain account for the service with that belongs to the local Admin group for the host server. Scenario 2: Creating a local account on the host and shared servers with the same name and make that account a member of the web server's admin group and give that local account access to the share on the remote server. Is either of these possibilities recommended? If not, are there any suggestions? Take care, Rob ------- Rob Saxon Director Web Management Mercer University 478-301-5550 - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
RE: [ACFUG Discuss] ColdFusion MX 6.1 download
Thanks so much, Precia. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of AppDeveloper Sent: Monday, June 25, 2007 12:33 PM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] ColdFusion MX 6.1 download ColdFusion MX 6.1 Updater http://download.macromedia.com/pub/coldfusion/updates/cfmx_61update_win.exe Precia On 6/25/07, Rob Saxon < [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> > wrote: We are experiencing some difficulty locating a download for CF 6.1 upgrade on Adobe's web site. Tech support is offering little help. Does anyone here know where a copy can be found? - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com - - Annual Sponsor - Figleaf Software <http://www.figleaf.com> To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink <http://www.fusionlink.com> - - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
[ACFUG Discuss] ColdFusion MX 6.1 download
We are experiencing some difficulty locating a download for CF 6.1 upgrade on Adobe's web site. Tech support is offering little help. Does anyone here know where a copy can be found? - Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -