Environment: ColdFusion 6 and 7 running on Windows 2003 Servers Active Directory Domain running in Native Mode on Windows 2003 Servers
I recently had a problem where CFNTauthenticate on ColdFusion 7 stopped working. All attempts to authenticate were failing with the error of "UserNotInDir" failure if thrownonerror was set to false. If throwonerror was set to true, then I got the message that : "Could not find domain controller for this domain <domainname.>" Additionally, similar results were experienced by ColdFusion 6 servers using the ntauth class for domain authentication. At the same time this occurred one of our domain controllers was down due to a switch failure. However we have many redundant domain controllers spread over three sites, including one in the same rack as our CF servers. No other services (Exchange, Machine Logins, etc) were impacted. Upon further inspection, it was determined that one of the dc's that was down was playing the Active Directory FSMO role of PDC emulator. Further testing shows that we cannot get authentication to work if a ColdFusion machine is unable to contact the PDC emulator regardless of the state of the rest of the domain. In order to work around this, I'm developing a alternative authentication piece that uses LDAP authentication against the domain, and can switch between domain controllers if one is down. I can do it, and make it pretty robust, but I'm worried though that I may be over thinking this. Has anyone else experienced this? If you have, short of getting the PDC emulator back online, is there a way around this. Any other opinions or feedback would be welcome. Terrence Ryan Senior Systems Programmer Wharton Computing and Information Technology E-mail: [EMAIL PROTECTED] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting, up-to-date ColdFusion information by your peers, delivered to your door four times a year. http://www.fusionauthority.com/quarterly Archive: http://www.houseoffusion.com/cf_lists/message.cfm/forumid:4/messageid:246595 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
