Dave, thanks for the article, and your help is always appreciated. I think
I'll go with FTP on this one, but I'll look into running CF as a different
user anyway for the mentioned security benefit.

ps. the reason we need to update this file, and why it's on another server:

We run a few mailing lists that we need to make private by turning off
subscribe requests sent to them. The only way for registered users to
subscribe/unsubscribe will then be through the 'account preferences' section
after they're registered, approved, and logged into the site. Our mailing
list software, on another server, reads a file when it needs to know its
subscribed user base. This is the file I'll be overwriting through FTP. This
also makes backing up the mailing list software's configuration easy, as I
will be storing users' subscription information in the database as well.

There's the concern that constantly overwriting this file may conflict with
the mailing list software trying to constantly read from it, but our user
base is relatively low, and the traffic on these mailing lists is even
lower. Given that the two servers are on the same network, and that this
file will never reach much more than a few k - the risk of this happening
will be pretty low. Also, my figure of 10 - 50 updates to the file per day
is highly inflated, it will realistically be around 0 - 5 times per day
given how many new subscribe requests we can expect (the audience these
lists serve is a finite number of people).

Thanks again. Adam.


> -----Original Message-----
> From: Dave Watts [mailto:[EMAIL PROTECTED]
> Sent: Friday, March 07, 2003 1:00 PM
> To: '[EMAIL PROTECTED]'
> Cc: '[EMAIL PROTECTED]'
> Subject: RE: running CF as different user/or use FTP
> 
> 
> > What are some of the known implications with starting CF 
> > as another user, if any? I need access to a file on 
> > another server for one very small component, and am 
> > trying to weigh the pros/cons of using either a network 
> > share, or going through FTP. If I understand correctly, 
> > in order to use a network share you have to start CF 
> > with an account that has the proper permissions on that 
> > share.
> > 
> > This will be a file that needs to be updated fairly 
> > frequently: 10 - 50 times per day. What would you do?
> 
> Yes, to use a Windows Networking share, you'll need CF to run 
> as a user
> which can see the share. To run CF as a different user, 
> you'll need to make
> sure that the user account has permissions on all the right files and
> registry keys. There's a good writeup of this for CF 5 here:
> 
> http://www.defusion.com/articles/index.cfm?ArticleID=89
> 
> It's actually quite a bit easier with CFMX, since there's no 
> significant
> registry data - just ensure that the CFMX user account has 
> rights to the
> \CFusionMX directory and your .cfm files, more or less.
> 
> However, granting this user account rights to your network might be a
> security issue. That's really up to you to decide.
> 
> I would probably go with FTP, if you just want to fetch a 
> file from one
> server to another, as long as the server already had FTP on 
> it. You could
> limit FTP access to only allow connections from the web/CF 
> server, and you
> wouldn't have to grant any Windows networking rights to do this.
> 
> You might want to reconsider the whole thing, though. Why 
> does the file need
> to be on the second server in the first place? Why not move 
> it to your web
> server, and fetch it from there when you need it via FTP or HTTP?
> 
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
> voice: (202) 797-5496
> fax: (202) 797-5444
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Your ad could be here. Monies from ads go to support these lists and provide more 
resources for the community. http://www.fusionauthority.com/ads.cfm

                                Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
                                

Reply via email to