- see footer for list info -<
Funnily enough I was having a discussion about this today and yeah, I
can only get it to work on the default instance. With the other
instances I get a security exception error.
For accessing them I'm just using the default instances through jrun
like yourself.
I know there is a technote in the making on this, though I wish they'd
hurry up about it because the docs are way too light on material.
Snake wrote:
- see footer for list info -<
Just to bring this up again.
Andy, did you do anything else other than add those JVM arguments to get it
working?
I have tested this again myself in case what you put in your blog was
different from what was on the MM site, and it only gets sandboxes working
in the default instance, they still do nothing in the other instances.
How are you accessing the CFADMIN on the other instances, through the jrun
server or via IIS.
I am just using the default, running through the jrun server on a different
port for each instance.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Russ Michaels
(Snake)
Sent: 24 May 2005 17:06
To: 'Coldfusion Development'
Subject: RE: [work] RE: [CF-Dev] CFMX7 sandboxing
- see footer for list info -<
I was discussing this with MM support before I went away, and they have
concluded that each instance needs it's own java.config file for the
sandboxing to work properly. Which means you then have to edit the windows
service to run JRUN with this config file, and the instance manager in CFMX7
becomes useless.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Andy Allan
Sent: 04 May 2005 21:38
To: Coldfusion Development
Subject: Re: [work] RE: [CF-Dev] CFMX7 sandboxing
- see footer for list info -<
You need to add a couple of additional JVM arguments to get
Sandboxing to work on both Multiserver and J2EE config installs.
So it does work, just not out of the box like you would
expect. I blogged about it today (watch the wrap)
http://www.creative-restraint.co.uk/blog/index.cfm?mode=entry&;
entry=A7038D2C-933C-C47E-510C9D5E61402BA4
Cheers,
Andy
Russ Michaels (Snake) wrote:
- see footer for list info -<
Confirmation now received from MM.
<quote>
Russ,
I tested this and you are correct, it does not work in my
J2EE install,
which is the same as Multi-Instance version. The standalone must be
doing something different.
I will ask at the meeting in a few hours.
Thanks,
Mike
</quote>
Rather a hulking great bug this I think.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Russ Michaels
(Snake)
Sent: 12 April 2005 12:43
To: 'Coldfusion Development'
Subject: RE: [work] RE: [CF-Dev] CFMX7 sandboxing
- see footer for list info -<
You can setup two instances on two servers and cluster them yes.
The test is pretty simple.
Install CFMX7 using the multi-server option.
On the default instance Enable sandboxing.
Create a default sandbox on the drive where all web sites
are stored.
E.G.
D:\
And disable the usual tags:- cfffile, cfdirectory, cfexecute,
cfregistry etc Now setup a site on your D drive (E.G.
d:\wwwroot\mydomain.com) Put a .cfm file in there that uses
any of the
disabled tags.
On CFMX7 stand alone you will get an error stating you do not have
permission to perform that action. Exactly as expected.
On ANY instance of CFMX using multi-server install, the
page will work
fine ignoring the sandbox.
I also have quite different setups on the 3 servers I tested.
Russ
I'm downloading the trial CF7 edition, is it possible to
set up a test
across 2 servers/ip's with it.
Maybe you have a blog somewhere on the way you verified its
broken:)?
Colm
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
Russ Michaels
(Snake)
Sent: Monday, April 11, 2005 11:04 PM
To: 'Coldfusion Development'
Subject: RE: [work] RE: [CF-Dev] CFMX7 sandboxing
- see footer for list info -<
I am saying it doesn't work, because it doesn't work.
Of course it should work, that's the purpose of it.
But 3 different servers running the multi-server
installation is not a
fluke.
Russ
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Colm Brazel
Sent: 11 April 2005 19:45
To: Coldfusion Development
Subject: RE: [work] RE: [CF-Dev] CFMX7 sandboxing
- see footer for list info -<
"furthermore, developers can take advantage of the ability
to set up
instance-specific sandbox security".
I don't understand why you say security sandboxing won't
work, as I
understand it, from the above it should and across
different servers
and be instance specific??
Colm
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
Russ Michaels
(Snake)
Sent: Monday, April 11, 2005 6:00 PM
To: 'Coldfusion Development'
Subject: RE: [work] RE: [CF-Dev] CFMX7 sandboxing
- see footer for list info -<
Erm..
No really?
That will be why I am using it then, and what all my posts
have been
about.
Russ
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Colm Brazel
Sent: 11 April 2005 16:07
To: Coldfusion Development
Subject: RE: [work] RE: [CF-Dev] CFMX7 sandboxing
- see footer for list info -<
"furthermore, developers can take advantage of the ability
to set up
instance-specific sandbox security"...before he goes into
clustering
below..
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
Colm Brazel
Sent: Monday, April 11, 2005 3:58 PM
To: Coldfusion Development
Subject: [work] RE: [CF-Dev] CFMX7 sandboxing
- see footer for list info -<
Security sandboxing doesn't work on CFMX7 in multi-server
configuration.
Trick is to use Jrun..
According to Greg Stewart in that article I mentioned using
JRUN 'you
can package these tailored instances and then redeploy them
on another
instance or even a different server running JRUN' he
mentionds Brandon
Purcell's article, "Advantages of using multiple instances for
Coldfusion MX for J2EE:
www.macromedia.com/devnet/mx/coldfusion/j2ee/articles/multiple.html
Colm
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
Russ Michaels
(Snake)
Sent: Monday, April 11, 2005 2:48 PM
To: 'Coldfusion Development'
Cc: 'ColdFusion Guru List'
Subject: [work] [CF-Dev] CFMX7 sandboxing
- see footer for list info -<
I appear to have found a bug.
Security sandboxing doesn't work on CFMX7 in multi-server
configuration.
I have tested this on 3 separate servers that were installed as
multi-server, and on ALL of them, the sandboxes have no effect.
Disabled tags continue to work.
Testing on CFMX7 in stand alone configuration, the
sandboxes work
fine.
Russ
_______________________________________________
For details on ALL mailing lists and for joining or leaving
lists, go
to http://list.cfdeveloper.co.uk/mailman/listinfo
--
CFDeveloper Sponsors:-
- Hosting provided by www.cfmxhosting.co.uk -<
- Forum provided by www.fusetalk.com -<
- DHTML Menus provided by www.APYCOM.com -<
- Lists hosted by www.Gradwell.com -<
- CFdeveloper is run by Russ Michaels, feel free to
volunteer your help
-<
---
avast! Antivirus: Outbound message clean.
Virus Database (VPS): 0515-0, 04/11/2005 Tested on: 4/11/2005
3:58:11 PM avast! - copyright (c) 1988-2004 ALWIL Software.
http://www.avast.com
_______________________________________________
For details on ALL mailing lists and for joining or leaving
lists, go
to http://list.cfdeveloper.co.uk/mailman/listinfo
--
CFDeveloper Sponsors:-
- Hosting provided by www.cfmxhosting.co.uk -<
- Forum provided by www.fusetalk.com -<
- DHTML Menus provided by www.APYCOM.com -<
- Lists hosted by www.Gradwell.com -<
- CFdeveloper is run by Russ Michaels, feel free to
volunteer your help
-<
---
avast! Antivirus: Outbound message clean.
Virus Database (VPS): 0515-0, 04/11/2005 Tested on: 4/11/2005
4:06:29 PM avast! - copyright (c) 1988-2004 ALWIL Software.
http://www.avast.com
_______________________________________________
For details on ALL mailing lists and for joining or leaving
lists, go
to http://list.cfdeveloper.co.uk/mailman/listinfo
--
CFDeveloper Sponsors:-
- Hosting provided by www.cfmxhosting.co.uk -<
- Forum provided by www.fusetalk.com -<
- DHTML Menus provided by www.APYCOM.com -<
- Lists hosted by www.Gradwell.com -<
- CFdeveloper is run by Russ Michaels, feel free to
volunteer your help
-<
_______________________________________________
For details on ALL mailing lists and for joining or leaving
lists, go
to http://list.cfdeveloper.co.uk/mailman/listinfo
--
CFDeveloper Sponsors:-
- Hosting provided by www.cfmxhosting.co.uk -<
- Forum provided by www.fusetalk.com -<
- DHTML Menus provided by www.APYCOM.com -<
- Lists hosted by www.Gradwell.com -<
- CFdeveloper is run by Russ Michaels, feel free to
volunteer your help
-<
---
avast! Antivirus: Outbound message clean.
Virus Database (VPS): 0515-0, 04/11/2005 Tested on: 4/11/2005
7:44:23 PM avast! - copyright (c) 1988-2004 ALWIL Software.
http://www.avast.com
_______________________________________________
For details on ALL mailing lists and for joining or leaving
lists, go
to http://list.cfdeveloper.co.uk/mailman/listinfo
--
CFDeveloper Sponsors:-
- Hosting provided by www.cfmxhosting.co.uk -<
- Forum provided by www.fusetalk.com -<
- DHTML Menus provided by www.APYCOM.com -<
- Lists hosted by www.Gradwell.com -<
- CFdeveloper is run by Russ Michaels, feel free to
volunteer your help
-<
_______________________________________________
For details on ALL mailing lists and for joining or leaving
lists, go
to http://list.cfdeveloper.co.uk/mailman/listinfo
--
CFDeveloper Sponsors:-
- Hosting provided by www.cfmxhosting.co.uk -<
- Forum provided by www.fusetalk.com -<
- DHTML Menus provided by www.APYCOM.com -<
- Lists hosted by www.Gradwell.com -<
- CFdeveloper is run by Russ Michaels, feel free to
volunteer your help
-<
---
avast! Antivirus: Outbound message clean.
Virus Database (VPS): 0515-0, 04/11/2005 Tested on: 4/12/2005
9:36:21 AM avast! - copyright (c) 1988-2004 ALWIL Software.
http://www.avast.com
---
avast! Antivirus: Outbound message clean.
Virus Database (VPS): 0515-0, 04/11/2005 Tested on: 4/12/2005
9:47:05 AM avast! - copyright (c) 1988-2004 ALWIL Software.
http://www.avast.com
_______________________________________________
For details on ALL mailing lists and for joining or leaving
lists, go
to http://list.cfdeveloper.co.uk/mailman/listinfo
--
CFDeveloper Sponsors:-
- Hosting provided by www.cfmxhosting.co.uk -<
- Forum provided by www.fusetalk.com -<
- DHTML Menus provided by www.APYCOM.com -<
- Lists hosted by www.Gradwell.com -<
- CFdeveloper is run by Russ Michaels, feel free to
volunteer your help
-<
_______________________________________________
For details on ALL mailing lists and for joining or leaving
lists, go
to http://list.cfdeveloper.co.uk/mailman/listinfo
--
CFDeveloper Sponsors:-
- Hosting provided by www.cfmxhosting.co.uk -<
- Forum provided by www.fusetalk.com -<
- DHTML Menus provided by www.APYCOM.com -<
- Lists hosted by www.Gradwell.com -<
- CFdeveloper is run by Russ Michaels, feel free to
volunteer your help
-<
_______________________________________________
For details on ALL mailing lists and for joining or leaving
lists, go
to http://list.cfdeveloper.co.uk/mailman/listinfo
--
CFDeveloper Sponsors:-
- Hosting provided by www.cfmxhosting.co.uk -<
- Forum provided by www.fusetalk.com -<
- DHTML Menus provided by www.APYCOM.com -<
- Lists hosted by www.Gradwell.com -<
- CFdeveloper is run by Russ Michaels, feel free to volunteer your
help -<
--
[EMAIL PROTECTED]
www.creative-restraint.co.uk
www.scottishcfug.com
_______________________________________________
For details on ALL mailing lists and for joining or leaving
lists, go to http://list.cfdeveloper.co.uk/mailman/listinfo
--
CFDeveloper Sponsors:-
- Hosting provided by www.cfmxhosting.co.uk -<
- Forum provided by www.fusetalk.com -<
- DHTML Menus provided by www.APYCOM.com -<
- Lists hosted by www.Gradwell.com -<
- CFdeveloper is run by Russ Michaels, feel free to
volunteer your help
-<
_______________________________________________
For details on ALL mailing lists and for joining or leaving lists, go to
http://list.cfdeveloper.co.uk/mailman/listinfo
--
CFDeveloper Sponsors:-
- Hosting provided by www.cfmxhosting.co.uk -<
- Forum provided by www.fusetalk.com -<
- DHTML Menus provided by www.APYCOM.com -<
- Lists hosted by www.Gradwell.com -<
- CFdeveloper is run by Russ Michaels, feel free to volunteer your help -<
_______________________________________________
For details on ALL mailing lists and for joining or leaving lists, go to
http://list.cfdeveloper.co.uk/mailman/listinfo
--
CFDeveloper Sponsors:-
- Hosting provided by www.cfmxhosting.co.uk -<
- Forum provided by www.fusetalk.com -<
- DHTML Menus provided by www.APYCOM.com -<
- Lists hosted by www.Gradwell.com -<
- CFdeveloper is run by Russ Michaels, feel free to volunteer your help -<
--
[EMAIL PROTECTED]
www.creative-restraint.co.uk
www.scottishcfug.com
_______________________________________________
For details on ALL mailing lists and for joining or leaving lists, go to
http://list.cfdeveloper.co.uk/mailman/listinfo
--
CFDeveloper Sponsors:-
- Hosting provided by www.cfmxhosting.co.uk -<
- Forum provided by www.fusetalk.com -<
- DHTML Menus provided by www.APYCOM.com -<
- Lists hosted by www.Gradwell.com -<
- CFdeveloper is run by Russ Michaels, feel free to volunteer your help -<
