Not entirely... The administrator uses the CFLOGIN framework which can accept authentication credentials coming from a number of sources. One of those sources is basic webserver authentication.
I think the bug was that it didn't check the coldfusion application name before authenticating the user. Spike > -----Original Message----- > From: Snake [mailto:[EMAIL PROTECTED]] > Sent: 18 September 2002 18:33 > To: [EMAIL PROTECTED] > Subject: RE: [ cf-dev ] CFMX, admin never asks for password > > > Well that's screwy. > > -----Original Message----- > From: Spike [mailto:[EMAIL PROTECTED]] > Sent: 18 September 2002 17:27 > To: [EMAIL PROTECTED] > Subject: RE: [ cf-dev ] CFMX, admin never asks for password > > > Do you have http security turned on for the cfide directory? > > If so, there was a mention of a bug in the release notes for > the CFMX updater that might have something to do with it. > > <snip> > When using web server Basic Authentication, the user was not > prompted for the Administrator password after logging in to > the web server, even when the ColdFusion MX Administrator > password prompt is enabled. </snip> > > Spike > > > -----Original Message----- > > From: Snake [mailto:[EMAIL PROTECTED]] > > Sent: 18 September 2002 18:18 > > To: [EMAIL PROTECTED] > > Subject: [ cf-dev ] CFMX, admin never asks for password > > > > > > I have 2 machines I have now installed CFMX on, with > cfadmin password > > specified. Yet it never asks you for any password and just logs you > > right in. I have to stick directory security on the site to lock it > > down. > > > > What's up with that then ? > > > > > > > > -- > > ** Archive: > http://www.mail-archive.com/dev%> 40lists.cfdeveloper.co.uk/ > > > > > To unsubscribe, e-mail: > [EMAIL PROTECTED] > > For additional commands, e-mail: > [EMAIL PROTECTED] For > > human help, e-mail: [EMAIL PROTECTED] > > > > > > > > -- > ** Archive: http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/ > > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: > [EMAIL PROTECTED] For human help, e-mail: > [EMAIL PROTECTED] > > > -- > ** Archive: http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/ > > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: > [EMAIL PROTECTED] For human help, e-mail: > [EMAIL PROTECTED] > > -- ** Archive: http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/ To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] For human help, e-mail: [EMAIL PROTECTED]
