No. It's because CFLOGIN is broken in CF. They never put in a mechanism to communicate a user's roles between servers, no matter which mechanism you used.
We worked directly with New Atlanta to fix it in BD a couple of years ago. I don't know if CF8 fixes the problem, but I doubt it. Respectfully, Adam Phillip Churvis President Productivity Enhancement From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Howard Fore Sent: Monday, December 17, 2007 5:26 PM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] Challenges with CF7 cluster I don't have any experience with it, but isn't that the point of the "cookiedomain" attribute in the cflogin tag? >From the online docs: Specifying the Internet domain Use the cookieDomain attribute to specify the domain of the cookie used to mark a user as logged-in. You use cookieDomain if you have a clustered environment (for example, www.acme.com, www2.acme.com, and so on). This lets the cookie work for all computers in the cluster. For example, to ensure that the cookie works for all servers in the acme.com domain, specify cookieDomain=".acme.com". To specify a domain name, start the name with a period. Caution: Before setting the cookie domain, consider the other applications or servers in the broader domain might have access to the cookie. For example, a clustered payroll application at payroll1.acme.com, payroll2.acme.com, and so on, might reveal sensitive information to the test computer at test.acme.com, if the cookie domain is broadly set to .acme.com. On 12/17/07, Adam Churvis <[EMAIL PROTECTED]> wrote: Remember that CFLOGIN's roles don't work across a cluster with CF; they only work with BlueDragon, AFAIK. So if an already-authenticated user is getting kicked out when he tries to go to a different server and there is a test on the destination page for membership in one or more roles (in other words, testing for authorization rather than just authentication), then that might be it. Respectfully, Adam Phillip Churvis President Productivity Enhancement From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Clontz Jr., Lee Sent: Monday, December 17, 2007 3:22 PM To: discussion@acfug.org Subject: [ACFUG Discuss] Challenges with CF7 cluster Hey, everyone - We're implanting a CF7 cluster in a new university Web hosting environment and we've hit a few snags. Unfortunately, clustering seems to be one of the more poorly documented aspects of CF administration, so I was wondering if anyone had some input. We currently have two Web servers behind a load balancer, each connecting to a two-node CF7 cluster with J2EE session variables and session replication turned on. We have JRun sticky sessions turned off. In doing this, and in migrating sites to the new architecture, we've hit on some strange problems: > CFLOGIN session replication seems to work intermittently, particularly if the CFLOGIN block is within a method without Application.cfc/cfm. > We have a developer who creates an XML session object which throws a serialization error. > Components, in general, seem to be dodgy when hopping nodes My question, then, is twofold - 1, does Adobe assume you'll be using sticky sessions when clustering CF and 2, does anyone know of any good resources on understanding exactly what works and what doesn't in clustered environments? Thanks very much, - Lee _____ This e-mail message (including any attachments) is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message (including any attachments) is strictly prohibited. If you have received this message in error, please contact the sender by reply e-mail message and destroy all copies of the original message (including attachments). ------------------------------------------------------------- Annual Sponsor - Figleaf <http://www.figleaf.com> Software To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink <http://www.fusionlink.com> ------------------------------------------------------------- ------------------------------------------------------------- Annual Sponsor - Figleaf <http://www.figleaf.com> Software To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink <http://www.fusionlink.com> ------------------------------------------------------------- -- Howard Fore, [EMAIL PROTECTED] "Whether you believe you can do a thing or not, you are right." -- Henry Ford ------------------------------------------------------------- Annual Sponsor - Figleaf Software <http://www.figleaf.com> To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink <http://www.fusionlink.com> ------------------------------------------------------------- ------------------------------------------------------------- Annual Sponsor FigLeaf Software - http://www.figleaf.com To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -------------------------------------------------------------
