Since some Linux users recently and in the past have reported Apache serving cfml
source when CFMX is stopped, I thought I'd send this elaboration on the importance of
the -map switch of wsconfig.jar
(Sometimes the mailing list server cuts off the bottom of email posts, so if you don't
see "------- END ------" further down then this email was truncated")
-Steven Erat
Problem:
-----------------
CFMX on *nix: When ColdFusion MX is stopped, Apache shows cfml source code.
Explanation and Solution:
---------------------------------
Currently there is no shell script supplied with CFMX for Linux/Unix users to run to
automatically configure the webserver connector. Users are left with having to read
the documentation or use the wsconfig.jar -help switch.
Unfortunately, neither the wsconfig.jar -help or the documentation refer to the -map
switch for Apache users. The -help switch actually has two references to -map being
for IIS only, and this is not accurate.
>From the new connector FAQ, its pointed out in an example for Linux/Unix users on
>Apache how to use wsconfig.jar, and includes using the -map switch.
>From the FAQ:
--------------------------------------
What would a typical Web Server Configuration Tool command line configuration for
Unix/Linux look like?
/opt/coldfusionmx/jre/bin/java -jar /opt/coldfusionmx/runtime/lib/wsconfig.jar -ws
Apache -bin /opt/apache2/bin/httpd -script /opt/apache2/bin/apachectl -dir
/opt/apache2/conf -map .cfm,.cfc,.jsp,.cfml -coldfusion
--------------------------------------
The -map switch configures Apache to associate .cfm requests with the ColdFusion
module, so when ColdFusion is stopped Apache should not display source code.
The online documentation has been updated at the bottom to indicate:
--------------------------------------
When a web server is configured to support ColdFusion MX, several file extensions are
specified to be processed exclusively by ColdFusion. These extensions are: .jsp, .cfm,
.cfc, and .cfml. If these file extensions are not correctly specified, a web server
may deliver files of these types as static files if ColdFusion MX is not running.
The ColdFusion Install kit on all platforms correctly sets these extensions. The web
server scripts provided for Windows in {cf_home}\CFusionMX\bin\connectors also
correctly set these extensions.
The instructions on this page incorrectly omit the -map switch for Unix platforms.
Whenever wsconfig.jar is used to configure a web server, the -map switch is always
required. The correct format for this switch with all web servers on all platforms is:
-map .cfm,.cfc,.cfml,.jsp
--------------------------------------
There is a Security Bulletin on Macromedia.com that warns about the required usage of
the -map switch, but some readers may misinterpret the purpose of the bulletin becuase
the introduction begins with
"If additional web servers are configured using the instructions in the
ColdFusion MX documentation....."
The -map switch should be used for configuring the first and only webserver instance,
as well as any additional instances.
CFMX Updater 3 Connector FAQ
http://www.macromedia.com/support/coldfusion/ts/documents/connector_install_faq.htm
Macromedia LiveDocs page for the connector usage
http://livedocs.macromedia.com/cfmxdocs/Installing_ColdFusion_MX/configuring4.jsp
Macromedia Security Bulletin MPSB02-13
http://www.macromedia.com/devnet/security/security_zone/mpsb02-13.html
------ END ------
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=14
Subscription:
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=14
Get the mailserver that powers this list at http://www.coolfusion.com
Unsubscribe:
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.14
