Tuesday, September 3, 2002, 2:54:24 PM, you wrote:

EG> We have CF pages with links to files on file servers (also Win2K). All of
EG> the links are of the type <a href="file://path to
file/filename.xxx">>Label</a> and everything works just fine. Now access to
EG> files on these servers is going to be controlled by username/password.

EG> We know about running CF under its own account, but the security people want
EG> to use multiple username/password combinations for access to these files.

EG> Is there a way in CF to build/process these links so they pass the required
EG> username/password combination to the file server when a file is requested?
EG> If there is, is there a way to encrypt the request so the username/password
EG> are not exposed? (We looked at cfhttp and cfftp but they appear not to fit -
EG> the other server is not a web server.)

EG> Some of these files are quite large, so we would like the file access to
EG> bypass the web server. (Side question - am I correct that file:// requests
EG> bring files directly from the file server to the client and not through the
EG> CF server to the client?)

This is client side stuff. file:// isn't going to work in a browser
unless the client (I'm assuming IE) has access to the resource.
If your users are not going to have these passwords, then you are
going to have to have CF authenticate itself, then send the file to
the browser.

EG> To accomplish what we are trying to do, is our only solution to have CF
EG> running under its own username and then grant permissions to that username
EG> to access the files on the file server? Thanks!

This is probably the easiest way, but you still need to send the file
to the browser. You could map the file servers to drives on the CF
server, and then use cfcontent to send the file.

-- 
jon
mailto:[EMAIL PROTECTED]

______________________________________________________________________
This list and all House of Fusion resources hosted by CFHosting.com. The place for 
dependable ColdFusion Hosting.
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to