Hello,

We have a section of our site which is secure with SSL and I was wondering how I can force http://www.mysite.com/cfide/administrator/ to https://www.mysite.com/cfide/administrator/. It doesn't look like you can edit the CF Templates for any kind of cflocation or other re-direct.

I am running CFMX. Yes, ancient I know.

Thanks a lot.

I have Jetty installed on our local CF dev server so I can take advantage of stopping & starting CF from my dev box (on the same LAN as the CF dev server). CF 10 on a Win7 Pro 64-bit box.

I can connect to Jetty from the dev server via http://localhost:8985.

I've added firewall exceptions for it (tried both specific ports and allowing jetty.exe through).

But I just can't connect to it from any machine other than the one where Jetty is installed - it times out as if the port is blocked. I looked over the jetty director at the connector (which I'm admittedly not too familiar with) but I didn't see anything in there about 'localhost only' especially as the whole point is to be able to access the service remotely.

Am I missing something? I get not wanting to expose it to the wild, but our external firewall handles that. Do I need to mess with the internal tomcat setup for this to work?

Getting the following sequence in the coldfusion-out.log file:

Oct 16, 2012 11:51:15 AM Information [ajp-bio-8012-exec-2] - Starting HTTP request {URL='http://www.adobe.com:80/go/coldfusion-updates', method='get'}

Oct 16, 2012 11:51:25 AM Error [ajp-bio-8012-exec-5] - A timeout occurred while attempting to lock updatecheck. The specific sequence of files included or processed is: /local/scratch/coldfusion10/cfusion/wwwroot/CFIDE/administrator/updates/index.cfm, line: 92

Oct 16, 2012 11:51:49 AM Error [ajp-bio-8012-exec-2] - Not able to connect to Update Site: The request has exceeded the allowable time limit Tag: cfhttp

Not sure exactly what is going on here, but I can't get any of my updates for ColdFusion 10, with the exception of the mandatory one that was installed manually.  I would appreciate any help with this, since there does not seem to be any way to get updates otherwise!  We are running CF10 on RHEL6.3 with the Apache release that shipped with the OS, 2.2.15.

Thanks

Running ColdFusion 9,0,1,274733 on JRun (J2EE install), Windows Server 2008 R2, Java 1.6.0_22

Has anyone else had a problem getting the default document, index.cfm, to work with ColdFusion? I'm assuming that this is only an issue because of our setup; different web server (IIS) and application server (ColdFusion). I can't imagine we are the only ones running this configuration. Are we?

So here is the issue.

If we request http://mysite.com/test/index.cfm it works.

If we request http://mysite.com/test/ it does not work and we get a 404.

I checked the web connector's log file on our IIS server and can see that it is sending the request to our ColdFusion server. The ColdFusion server is sending back the 404 error code but I can't figure out why. We have the default document set on our IIS server for index.cfm. We also have the <welcome-file-list> set to include index.cfm on our application server (web.xml).

From our web connector's log when we do NOT include index.cfm:

2012-11-01 13:37:22 jrISAPI[4544:3600]  ***HttpExtensionProc for JRun ISAPI Extension: uri is "/test/"

2012-11-01 13:37:22 jrISAPI[4544:3600]     HTTP_HOST: servername

2012-11-01 13:37:22 jrISAPI[4544:3600]  filtering /test/ (/test/) HOST=servername

2012-11-01 13:37:22 jrISAPI[4544:3600]  filterRequest:   no match

2012-11-01 13:37:22 jrISAPI[4544:3600]  ExecUrl: request received: URL=/test/

2012-11-01 13:37:22 jrISAPI[4544:3600]  ExecUrl Completion: 404, ErrorCode=2, URL=/test/.

From our web connector's log when we do include index.cfm:

2012-11-01 13:49:02 jrISAPI[9936:3600]  ***HttpExtensionProc for JRun ISAPI Extension: uri is "/test/index.cfm"

2012-11-01 13:49:02 jrISAPI[9936:3600]     HTTP_HOST: servername

2012-11-01 13:49:02 jrISAPI[9936:3600]  filtering /test/index.cfm (/test/index.cfm) HOST=servername

2012-11-01 13:49:02 jrISAPI[9936:3600]  filterRequest:   matched *.cfm

2012-11-01 13:49:02 jrISAPI[9936:3600]  ***IISWorkerThreadProc for JRun ISAPI Extension: uri is "/test/index.cfm"

2012-11-01 13:49:02 jrISAPI[9936:3600]     ALL_RAW: Connection: Keep-Alive Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, application (553)

2012-11-01 13:49:02 jrISAPI[9936:3600]  Headers and Values:

... and much more ...

We have gotten around this issue by using the URL Rewrite module in IIS to append index.cfm to the URL. It works but my gut keeps telling me that we should not need to do that for such basic functionality.

Is anyone else having this issue? How have you gotten around this?

We've got ourselves a sick server/application and I'd like to gather a little community advice if I may. I believe the evidence supports a memory leak in my application somewhere and would love to hear a second opinion and/or suggestions.

The issue has been that used memory (as seen by FusionReactor) will climb up to about 90%+ and then the service will start to queue requests and eventually stop processing them all together. A service restart will bring everything back up again and it could run for 2 days or 2 hours before the issue repeats itself. Due to the inconsistant up time, I can't be sure that it's not some trouble bit of code that runs only occasionally or if it's something that's a core part of the application. My current plan is to review the heap graph on the "sick" server and look for sudden jumps in memory usage then review the IIS logs for requests at those times to try and establish a pattern. If anyone has some better suggestions though, I'm all ears! The following are some facts about this situation that may be usefull.

The "sick" server:

- CF 9.0.1.274733 Standard

- FusionReactor 4.0.9

- Win2k8 Web R2 (IIS7.5)

- Dual Xeon 2.8GHz CPUs

- 4GB RAM

JVM Config (same on "sick" and "good" servers):

- Initial and Max heap: 1536

-server -Xss10m -Dsun.io.useCanonCaches=false -XX:PermSize=192m  -XX:MaxPermSize=256m -XX:+UseParNewGC -Xincgc -Xbatch -Dcoldfusion.rootDir={application.home}/../ -Dcoldfusion.libPath={application.home}/../lib -Dcoldfusion.dotnet.disableautoconversion=true

What I believe a "healthy" server graph should look like (from "good" server):

And the "sick" server graph looks like this:

I would like to set up a single website with CFM11 under IIS8.5

In this website there are several CFM applications, each under a different "Application" subfolder. For security purposes, monitoring and separate maintenance shutdowns per application, these would all need their own "application pool".

However, this means that these applications should run under a different application pool than their website root node. In IIS this causes a 403.18 exception:

HTTP Error 403.18 - Forbidden

The specified request cannot be processed in the application pool that is configured for this resource on the Web server.

Most likely causes:

•An ISAPI filter or custom module changed the URL to run in a different application pool than the original URL.

•An ISAPI extension (or custom module) used ExecuteURL (or ExecuteRequest) to run in a different application pool than the original URL.

•You have a custom error page that is located in one application pool but is referenced by a Web site in another application pool. When the URL is processed, it is determined by IIS that that it should have been processed in the first application pool, not the other pool.

•The Web site has multiple applications configured. The application this request is configured to run in is set to run in an application pool that does not exist.

All works fine if the "applications" in the subfolders run under the same application pool as the website root. However that is not my preferred setup... The behaviour is consistent over all CFM-applications that I deploy, no matter how simple they are...

Two questions:

- is coldfusion actually looking to "higher" folders than I expect it to? (and can that be avoided)

- any hints or experiences on how to avoid / solve this issue?

This week I've been working on getting clustering setup for a client. Initially we were using CF10 with the latest patches. Ideally we wanted non-sticky load balancing with session replication. We want really high availability with the option to reboot a server at any time and not have to wait for session draining or lose customers if a node goes down. Adam Cameron points out that there is an issue with CF10 and not having an option to turn on session replication Adam Cameron's CFML Blog: Problem with session replication with CF10 clustering. Trying various fixes I could not get the session to replicate we moved to CF11 which restores that issue. There is a bug open for CF10 with some weird responses but I never saw any sort of fix for this.

CF11 as noted solves this odd issue, so I thought we were in the clear. Following the limited cluster setup guides found online there is some manual configuration to do on the remote instance. First, I am not sure if the default cfusion instance just can't be used as a member of a cluster but I had a hard time ever getting it to work. So both the local and remote instance use new CF11 instances created from within the Instance Manager. The instructions Adobe ColdFusion 10 * Enabling clustering for load balancing and failover are mostly correct in that you have to copy the <cluster> node to the remote instance. One issue pointed out in a few places is that the cluster block has to actually go IN the <host> node and not after it. CF10, CF11 and maybe even CF9 put the block (and the documents suggest putting the block) after the </host> tag which, in my experience, does not work.

After everything was configured and I started up my test I could not get the remote node to respond at all. Looking in the cf error log I constantly saw this line:

INFO: Manager [/]: skipping state transfer. No members active in cluster group.

Digging in to the tomcat clustering discussions this basically means the cluster couldn't find the remote instance. By default CF uses the multicast cluster support in tomcat and doesn't have an option to do anything different. Researching this found that AWS does not support broadcast nor multicast in EC2. Further research showed how tomcat could be configured for static cluster member configuration and so I modified the server.xml files to match and viola, cluster with session replication. Using the ELB on AWS we have sticky sessions disabled (basically round-robin style requests) and the requests bounce evenly between the instance members. The session id's, however, stay the same on each page load even though the request is going to a different host.

So here is what the cluster node of the server.xml looks like:

<Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster" channelSendOptions="8" channelStartOptions="3">        <Manager notifyListenersOnReplication="true" expireSessionsOnShutdown="false" className="org.apache.catalina.ha.session.DeltaManager"/>        <Channel className="org.apache.catalina.tribes.group.GroupChannel">          <!--<Membership port="45564" dropTime="3000" address="228.0.0.4" className="org.apache.catalina.tribes.membership.McastService" frequency="500"/>-->          <Receiver port="4001" autoBind="100" address="auto" selectorTimeout="5000" maxThreads="6" className="org.apache.catalina.tribes.transport.nio.NioReceiver"/>          <Sender className="org.apache.catalina.tribes.transport.ReplicationTransmitter">            <Transport className="org.apache.catalina.tribes.transport.nio.PooledParallelSender"/>          </Sender>          <Interceptor className="org.apache.catalina.tribes.group.interceptors.TcpPingInterceptor"/> <!-- ADDED -->          <Interceptor className="org.apache.catalina.tribes.group.interceptors.TcpFailureDetector"/>          <Interceptor className="org.apache.catalina.tribes.group.interceptors.MessageDispatch15Interceptor"/>      <Interceptor className="org.apache.catalina.tribes.group.interceptors.StaticMembershipInterceptor">                <Member className="org.apache.catalina.tribes.membership.StaticMember"                  port="4002"                  host="172.31.33.220"                  domain="delta-static"                  uniqueId="{0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15}"                />          </Interceptor>        </Channel>        <Valve className="org.apache.catalina.ha.tcp.ReplicationValve" filter=""/>        <Valve className="org.apache.catalina.ha.session.JvmRouteBinderValve"/>        <ClusterListener className="org.apache.catalina.ha.session.JvmRouteSessionIDBinderListener"/>        <ClusterListener className="org.apache.catalina.ha.session.ClusterSessionListener"/>      </Cluster>

You can see the <membership> node is commented out (this is the multicast function). The TcpPingInterceptor is added and the StaticMembershipInterceptor is added. The reciever port on this instance is 4001 and the remote instance is 4002 so the interceptor uses 4002 on this instance to contact the remote host and vice-versa. In other words the remote instance will use the same <cluster> node with the ports switch and the host IP address changed on the static interceptor. The uniqueID then rotates on each member going from {0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15} to {1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,0}

Of course each additional member to the cluster will mean manual changes to each existing member (to add additional static interceptors) but that seems a small price to pay to not have to move our entire environment off AWS.

We have a new install windows server 2012 R2 with a new install CF11 standard installed on C drive. Everything is 64bit. The CF administrator site and login works fine.  cfm files will not serve up in the default directory, but IIS shows htm files fine.  CF administrator runs fine.

Web Server Config tool will only show "None" in the IIS Web Site box.  The usual CGI, APS, etc have been installed on IIS.  In fact IIS and CF11 have been reinstalled.  wsconfig.exe manual run shows no errors.

The problem is that any call to a cfm template results in an error (html pages serve fine):

HTTP Error 500.0 - Internal Server Error

The page cannot be displayed because an internal server error has occurred.

Detailed Error Information:

Module       IsapiModule

Notification       ExecuteRequestHandler

Handler       cfmHandler

Error Code       0x8007007f

Requested URL       http://localhost:80/default.cfm

Physical Path       C:\inetpub\wwwroot\default.cfm

Can anybody give any suggestions for troubleshooting?  No logs seem to show any information that helps.

Hi,

CF 10 docs seem a tad thin on the subject of silent / unattended / scripted installation and configuration.

I need to find a fully automated (scripted) way to do these things:

1) install of ColdFusion 10 server in standalone mode

2) create additional servers instances

3) configure each server instance separately (settings, data sources, mappings, etc)

Is this currently possible with CF 10? If yes, where's the documentation?

I'm aiming for a Chef cookbook for performing unattended CF10 installations on a farm of headless Linux hosts. Manual configuration through the Administrator UI is a definite deal breaker here.

Thanks in advance!

Best regards,

Jan

Coldfusion 11

Windows Server 2012 R2

Both the Coldfusion admin and additonal site work fine on HTTP.

As soon as I attempt to enable SSL websockets and install SSL certs, the Coldfusion 11 Application service will not start. I followed the steps below....

Coldfusion 11 - Web Sockets via SSL

The Coldfusion-error.log shows

Jan 26, 2015 3:21:23 PM org.apache.catalina.core.AprLifecycleListener init

INFO: The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path

Server was a cloned VM of the test server with developer copy of CF11, but license has been purchased and applied. SSL certs have been imported successfully, paths are correct in CF Admin to the cert file etc.

Do I need to install another version of Coldfusion to get around this issue or is there a download update I need to apply?

If i reconfig the \cfusion\runtime\conf\server.xml to comment out the SSL sections it works fine.

Any assistance welcome - I can't allow this site to made publicly available with using SSL.

SM

After applying the security patch 12-26 I am getting the error "Could not access a java object field called allowAppDataInServContext".  When I removed the update the error goes away.  When I read the update it returns.

The error states it occurred in the following line: cfapplication name="somename" clientmanagement="No" sessionmanagement="Yes" setclientcookies="Yes"

I have been trying to get clustering going but sessions never work. In a virtual machine, I have CF11 Enterprise on Windows installed. The VM was copied from a staging environment that was previously setup following the common "CF Lockdown Guide", but I don't believe we're having an issue there.

I have stripped the VM down to the basics and reverted many "lockdown" changes. The CF services are setup to run as an administrator. I have two websites in IIS - one basic index.cfm site that dumps instance name, and a full site that is dumping instance name, alongside having a login and much functionality. Three instances are setup in CF Admin - cfusion, Instance1, and Instance2. Instance1 and Instance2 are both part of a cluster, Cluster1.

I have tried all combinations of "sticky sessions" and "session replication", reinstalling the CF Connectors (tried both globally and per-site) and Handler Mappings each setting update. Services were restarted after each change, as necessary.

I have also tried moving the "Cluster" node in each Instance's server.xml to be contained within the Host node, but it did nothing.

Neither Sticky Sessions or Session Replication seem to work. Each requests goes to the next instance (set as 1/1 load balancing factor). Session replication doesn't work as I can never login. Sticky sessions never work as each subsequent request hits the next instance, apparently invalidating the login request. I can make other updates to the load balancing, such as changing the factor to 5/1 and having Instance1 take 5 requests for every 1 of Instance2, but session ID's and replication do not appear to be working.

My first attempt at this was on CF10. It had the exact same problem (with a difference being that Session Replication isn't a check-able option in CF Admin).

Does anyone have any other ideas of what to try? There isn't much on Google, and I've already seen all pages/forum posts that seem to apply to my issue.

I have a ColdFusion 10 Enterprise server setup with a number of instances and a bunch of websites all accessing a shared codebase using IIS 8.5. After running wsconfig to setup the websites for ColdFusion it adds the *.cfm handler mapping in for each instance and site just fine. I'm attempting to use the application.cfc onMissingTemplate function to implement SEO friendly URLs with ColdFusion. To this end I have added a URL Rewrite to the web.config in that folder to rewrite URLs with no ColdFusion file to map to a non-existent cfm file:

<rule name="Missing Templates" stopProcessing="true">

     <match url="^(.*)$" />

     <conditions>

          <add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true" />

          <add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true" />

     </conditions>

     <action type="Rewrite" url="{R:1}-.cfm" />

</rule>

This properly rewrites the URLs, however in order to make it work I have had to adjust the cfm handler on the IIS record to set the Resource Type to Unspecified. Otherwise IIS sees the file doesn't exist and does not pass it off to ColdFusion to be caught by the onMissingTemplate, and the page will not load. The issue is that when I adjust the cfm handler in IIS this updates the web config to remove the existing cfm handler and add it back in. This works great for a single website. However since I have multiple websites in IIS pointing to the same root folder this overrides the cfm handler for all of them and points at the same isapi_redirect.dll file for all of the websites, for example "C:\ColdFusion10\config\wsconfig\2\isapi_redirect.dll". So now all of the websites are using that same instance of the file instead of their own in different folders like "C:\ColdFusion10\config\wsconfig\3\isapi_redirect.dll" or "C:\ColdFusion10\config\wsconfig\4\isapi_redirect.dll" as they used to, which results in permissions issues and I'm assuming removes the benefit of multiple instances for ColdFusion or IIS to some degree.

So I'm trying to figure out if there is a way to change the "Inherited" settings on the IIS websites for the cfm handler, rather than having to remove and override those settings. If I could have it inherit the Resource Type of Unspecified then I wouldn't need to alter that shared web.config file. I can't find anywhere within IIS where these settings are inherited from, and since each site points to it's own folder I'm not sure how it could inherit them. Is there some place that I can go to adjust those settings for the handlers that are created by the wsconfig?