RE: [ACFUG Discuss] Adobe Breakfast

[Charlie Arehart]

A couple of thoughts.

1) yep, great to see the list reviving a bit, and to hear from folks again. :-)

2) About the Adobe breakfast, and “knowing about it”, I’ll just share that it 
was also posted on the Adobe CF Community portal, which is a hybrid blog and 
gateway to the CF forums. The posting was here:

https://coldfusion.adobe.com/2018/02/adobe-coldfusion-roadshow-february-20-march-3/


And it’s still near the top at https://coldfusion.adobe.com. FWIW, there is 
also still the older Adobe blog at blogs.coldfusion.com. (Curiously, this 
roadshow post was made only at the former, not the latter.)

3) Indeed, everyone interested in CF should keep an eye on both, really, or add 
them to any feed tools you have (the feeds are 
https://coldfusion.adobe.com/feed/ and http://blogs.adobe.com/coldfusion/feed/, 
respectively). I use a nifty free service, called https://blogtrottr.com, to be 
emailed about any postings.  To be clear, the portal is also where ANYONE can 
post CF content, so you’ll hear from more than just Adobe.

And since it’s indeed been a while since the list was active, I’ll just point 
out that I won’t be at the breakfast because (as some of you know) my wife and 
I had moved from ATL to south central KY back in 2015. Yep, we “bought the 
farm”, in the good sense. :-) I work from a cabin, still doing remote CF server 
troubleshooting, and as busy doing it as ever. Viva la CF! :-)

/charlie

 

From: ad...@acfug.org  On Behalf Of Kyle Shiflett
Sent: Monday, February 26, 2018 01:30 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] Adobe Breakfast

 

Cameron,

I saw it on FB:

https://www.facebook.com/events/150605922271350/

To RSVP, you have to email Kishore at kish...@adobe.com 
 

I've included the email I received below.

Kyle

--

Thank you for accepting the meeting invite for Adobe ColdFusion breakfast 
meeting . The meeting would be held at Courtyard Atlanta Midtown/Georgia Tech, 
1132 Techwood Drive NW, Atlanta, GA.
 
The schedule for the day would be:
 
8:00 AM – 9:00 AM – Breakfast
9:00 AM – 10:00 AM – What’s new in ColdFusion 2018 and Future plans for 
ColdFusion
10:00 AM – 10:30 AM – What was new in ColdFusion 2016 and ColdFusion 11
10:30 AM – 11:00 AM – Demonstration of the Performance Management Suite in 
ColdFusion 2018
 
Looking forward to meeting you there. Please feel free to forward it to anyone 
else in your organization who would be interested in joining us.
 
Regards,
kishore







Cameron Childress  

February 26, 2018 at 2:24 PM

Since the list is suddenly back from the dead - anyone going to the Adobe 
breakfast / meeting on Friday?

 

Do you have a link? I don't think I saw anything about this.

 

-Cameron

 

-- 

Cameron Childress
p:   678.637.5072  

 

Kyle Shiflett  

February 25, 2018 at 2:05 PM

Since the list is suddenly back from the dead - anyone going to the Adobe 
breakfast / meeting on Friday?

 

I’m hoping to be there.

 

Kyle 

 

RE: [ACFUG Discuss] strange behavior with cftoken/cfid with CF9

[Charlie Arehart]

Thanks for stepping in, John, and for handling things going forward.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of John Mason
Sent: Saturday, February 24, 2018 11:08 AM
To: discussion@acfug.org; l...@lgriffin.net
Subject: Re: [ACFUG Discuss] strange behavior with cftoken/cfid with CF9

 

Sorry for the delay Les, I still manage the ACFUG list and will have you off in 
a moment. FYI for others as well, simply email me if you need to unsubscribe.

John
ma...@fusionlink.com  

 

RE: [ACFUG Discuss] CFBuilder

[Charlie Arehart]

Yep, and for any wanting to know about still other editors, including those 
that DO support CFML (or not), and links to such CFML plugins or extensions 
where needed, see the category of my CF411.com site: 
http://www.cf411.com/editors

And for those wanting to learn more about hidden gems in CFBuilder, I did talks 
on that, all still available, at carehart.org/presentations.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Wes Byrd
Sent: Thursday, February 22, 2018 09:33 PM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] CFBuilder

 

I was a long time user of Eclipse and CFBuilder.  I have been converted to VS 
Code.  It’s free… and it is much faster and better than CFBuilder.  Especially 
if you use Git as your source code repository.  VS Code has a huge following, 
it gets updated with new features and fixes every month, it has a TON of 
add-ons (including for CMFL).

RE: [ACFUG Discuss] strange behavior with cftoken/cfid with CF9

[Charlie Arehart]

Wow, I don’t know if there’s anyone with that ability. There was for a time, 
but then the group moved to a new system. Then it went quiet for a few years. 

Now that it’s reviving again, surely some like Les will say “I don’t care to be 
here anymore”. I’m just not sure who has control anymore to remove you. (There 
was even a time where there was a way to remove yourself, but I don’t know it 
myself.)

So Les, if you don’t hear from anyone, you may no choice but to just setup a 
rule to just tell your mail client (or server) to delete messages you receive 
that show being sent “to” discussion@acfug.org  . 
(It’s also possible that this spate of activity will die down again. Just 
depends on who DOES value it.)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Les
Sent: Friday, February 23, 2018 06:53 AM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] strange behavior with cftoken/cfid with CF9

 

please remove me from this list. 

RE: [ACFUG Discuss] strange behavior with cftoken/cfid with CF9

[Charlie Arehart]

Jeff has posted this question also in the Adobe forums. Folks may want to see 
my reply there (just written), if not also reply there. 

https://forums.adobe.com/message/10198418#10198418


(Cross-posting is always risky, Jeff. Some will see one but not the other. And 
only you, or others watching both, will get the complete picture, which can be 
confusing for all concerned.)



/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jeff Howard
Sent: Thursday, February 22, 2018 04:58 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] strange behavior with cftoken/cfid with CF9

 

This is an older CRM application using CF 9 that hasn't been changed in over a 
year.

 

As of Sunday between the hours of 8 AM and 4 PM cftoken/cfid disappear in the 
middle of loading the dashboard. 2/3 of the content appears and then the 
cfid/cftoken disappear. It only occurs at very specific times of the day.

 

Any ideas?

 

 


 

 

Virus-free.  

 www.avast.com 

 

RE: [ACFUG Discuss] Hopefully this list still exists

[Charlie Arehart]

Dude, they’re getting the band back together! :-) 

So Frank, on your observation, can you offer a simple 2-3 line proofcase? I 
realize you gave us code, but not with the values you’re really using for the 
vars.

Sometimes, when you create such an example, you find out that it’s not what you 
thought. But if it is, then others could at least readily try it on their own 
systems, and if there’s no solution found, you could then include it in a bug 
report to Adobe.

I’ve not heard of this problem you report, so I’m inclined to think there may 
be another explanation. But let’s see. Hope that’s helpful.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Cameron Childress
Sent: Wednesday, August 31, 2016 05:03 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] Hopefully this list still exists

 

Folks are still on the list, though I am not sure the list management tool are 
visible anymore.

 

The acfug.org domain actually just auto-renewed - so I think we are still good 
as long as the list software is actually running

 

-Cameron

 

On Wed, Aug 31, 2016 at 5:23 PM, Ajas Mohammed  wrote:

Thanks for the email. I for one used to enjoy the challenges in this group with 
people sending their issues. 

 

I hope we can bring it back through this group emails or any other means as 
long as we are actively getting requests.

 

Thanks,



On Wednesday, August 31, 2016, Frank Moorman  
wrote:

As the subject line states... hopefully this mail list still exists...

I came across something interesting today... (and very stressful before I 
figured it out...)

I migrated code from a CF10 server to a CF11 server. And I had a major bug 
because of it. It seems like the function of ListAppend changed.

The Migration docs mentioned how there were changes to the CFScript way of 
using list functions... but I did not see any mention of changes to the CFML 
tag functionality.

I had this code inside a loop:



But it turns out that where CF10 and before would append UpdateString with the 
additional value and store nonsense in devnull, CF11 changes the way it works. 
In the above function in now stores the combination in the devnull variable.



The above does work in CF11 also which seems to be how to change it to work on 
a minimal level.

Hope everyone is well if this maillist still gets out,
Enjoy all,

Frank Moorman



-- 
 

iUseDropbox(  http://db.tt/63Lvone9) 
http://ajashadi.blogspot.com
We cannot become what we need to be, remaining what we are.
No matter what, find a way. Because thats what winners do.
You can't improve what you don't measure.
Quality is never an accident; it is always the result of high intention, 
sincere effort, intelligent direction and skillful execution; it represents the 
wise choice of many alternatives.

 





 

-- 

Cameron Childress
--
p:   678.637.5072

im: cameroncf

facebook   | twitter 
  | google+ 
 

 

RE: [ACFUG Discuss] has anyone had issues with Chrome lately?

[Charlie Arehart]

Jeff, do you mean the default/home page of some acfug site, or are you asking 
if people are having such a problem with other/all sites?

I’ll say that I’ve not seen any such problem. If you’re still having the issue, 
I’d be more inclined to suspect an issue on a particular server’s 
configuration, like the web server. Are you sure there’s been no change there?

Either way, you may want to use your browser’s “developer tools” (all modern 
browsers have them) to view the communications between your client and server. 
You may see something in the transfer of headers, status codes, or content 
which could explain your problem.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jeff Howard
Sent: Friday, April 10, 2015 9:19 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] has anyone had issues with Chrome lately?

 

Has anyone had issues with Chrome starting in the past week not displaying the 
default home/index page?

 

The site has worked for years and still works fine in IE and FF but for some 
reason Chrome is just displaying a blank white page when typing in the URL as 
if it does not recognize the default page setting in IIS.

 

Anyone else having this issue?

 

Thanks in advance,

Jeff

RE: [ACFUG Discuss] trying to add SSL to an old MX server

[Charlie Arehart]

Jeff, before I proceed, let me note that the basics haven’t changed (running 
the keytool to put a cert into cacerts), so even an old article should suffice.

That said, one thing such old articles generally don’t take into account, 
though (and this makes folks think the instructions must not be right), is that 
it’s become common for folks to change the JVM which CF uses (by pointing CF to 
a new JVM, in the CF Admin “Java JVM” page or via editing the java.home in the 
jvm.config file). 

Well, if you do change CF to use a JVM I a different location, then you MUST 
change those instructions to point to the cacerts within THAT NEW JVM location, 
not the one inside of CF.

And another problem is simply to make sure that you are giving the keytool the 
correct path to update the cacerts, wherever it is, and to make sure it’s been 
updated. Besides checking the date before and after the update, there is a form 
of the keytool command to list the certs in it as another way to confirm 
success. 

Still another problem is that some may find they need to run their command line 
“as administrator” before doing the keytool command, to make sure they do have 
privileges to edit that keytool file, even if the right one and with the right 
path. :-) I do believe that if you don’t have privileges, it just fails 
silently (you don’t know it didn’t update unless you check, as above).

Let us know if that helps. And I’ll add, FWIW, that I did a substantial blog 
post on recovering problems trying to change your JVM, which may benefit some 
seeing this and could help if you needed to understand more about what I say 
above: 
http://www.carehart.org/blog/client/index.cfm/2014/12/11/help_I_updated_CFs_JVM_and_it_wont_start.
 I’ve not yet myself done a post on this issue of importing certs (since again 
the basics had not changed), though I’ve thought about it.

That said, here are some more recent blog posts about the topic:

http://www.electrictraindesigns.com/?p=41
http://www.bryansgeekspeak.com/2014/12/coldfusion-11-java-keytool-import-cert.html


I’m sure there are others that some could share, even if just a few years old 
(like 
http://rameshsabeti.blogspot.com/2010/07/coldfusion-failing-https-requests-to.html
 ).

Hope that’s helpful.

/charlie



From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jeff Howard
Sent: Wednesday, March 18, 2015 12:12 AM
To: discussion@acfug.org
Subject: [ACFUG Discuss] trying to add SSL to an old MX server

 

Any ideas on where to look? I'm find more recent instructions for CF 9 and on.

 

Client updated their SSL last week and it broke a web service.

 

Thanks,

Jeff

RE: [ACFUG Discuss] ColdFusion 11 upgrade breaking ExtJS everywhere

[Charlie Arehart]

Mike, before folks might dig any further into this(and though this may already 
be an obvious thing you've checked), have you confirmed that the problem isn't 
something simpler, like the CFIDE/scripts folder being blocked or not there in 
the site you're using? 

You mention confirming there are no errors in the js console. Are you also 
using any sort of browser dev tool to see/confirm that there are no 404's on 
the page? If the needed JS could not be downloaded, it would of course throw no 
error in the JS console. :-)

It's at least worth checking and letting us know. And if that's not it, then 
I'd say this is rather esoteric stuff. If you don't get an answer here you may 
want to raise it on the Adobe CF forums to get a wider audience, including (but 
not guaranteed to included) Adobe folks.

Hope that's helpful.

/charlie

-Original Message-
From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Mike Staver
Sent: Thursday, March 05, 2015 12:10 AM
To: discussion@acfug.org
Subject: [ACFUG Discuss] ColdFusion 11 upgrade breaking ExtJS everywhere

I wrote some code a few years back, and I have very little ExtJS coding 
experience outside of using what shipped with CF 9  10. I was disappointed to 
discover that most of one of my pages was broken via the upgrade to CF 11. I 
did some digging, and discovered that CF 11 ships with ExtJS 4.1. I don't 
remember what CF 10 was running, but this code used to work that is associated 
with a CFGrid object:

 // add the 2 custom buttons to the toolbar and init the grid listener
 function init() {
 Ext.onReady(function () {
 var grid = ColdFusion.Grid.getGridObject(Players);
 var tbar = ColdFusion.Grid.getTopToolbar('Players');
 tbar.add({xtype: 'button', text: Add Player, handler: 
onAdd });
 tbar.add({xtype: 'tbseparator'});
 tbar.add({xtype: 'tbfill'});
 tbar.addButton({xtype:'button', text:Delete Player, 
handler:onDelete });
 ColdFusion.Grid.showTopToolbar('Players');
 grid.addListener(rowdblclick, showEditWin);
 })
 }

The part that doesn't work is the listener for the double clicking of rows. 
Basically, nothing happens now when I double click a row. I've searched for 2 
days now trying to wrap my head around the Ext documentation to understand what 
I'm doing wrong. No errors are thrown on the JS console, but nothing happens 
either. I've found this:

http://docs.sencha.com/extjs/4.1.3/#!/api/Ext.grid.Panel

They show the addListener function, and to be honest, I'm not sure what has 
changed about it or what I'm currently doing wrong. Does anything obvious jump 
out to anyone?

RE: [ACFUG Discuss] Running CFExecute in ColdFusion 11

[Charlie Arehart]

Thanks for the update, Bettina. And while I realize you are opting to go with 
the other route, you may want to at least understand what was amiss here, as it 
could come back to bite you in other ways (perhaps other templates, or other 
related problems.) 

So as for the failing bat file, did you see something in the output of 
CFEXECUTE (you can configure it to save the output), which may have helped you.

And you mention my article on “reducing security risks”. Well, to be clear, 
that’s from early 2013 and was related to a hack of Dec 2012, where the 
solution was mostly in CF updates (all included already in CF11) as well as 
some extra lockdowns you could do, like IIS Request Filtering or Apache Deny 
directives, as discussed in the CF 11 (and 10 and 9) lockdown guides.

All that said, I wonder if a DIFFERENT problem may be at root here. If you HAVE 
been focused on security (since you DID turn on the “secure profile”, and as 
you mention my article), if you HAVE followed something in the lockdown guide, 
you may have changed the user that CF runs as (from “system” to a more limited 
permission user). If so, one of the problems there is that you have to change 
ALL directories that your CF code runs in (or touches) to give THAT user 
permission. Do maybe that is why the CFXECUTE bat file is failing. 

Again, viewing the output from CFEXECUTE may be the best thing to look at to 
really help you nail this down. But these are some guesses from afar, as it’s 
all stuff I see every week helping people with CF server troubleshooting, 
whether in my consulting services or on lists and forums like here. :-)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Bettina M. Scurlock
Sent: Monday, February 02, 2015 11:39 AM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] Running CFExecute in ColdFusion 11

 

Charlie  John,

Thank you for the suggestions.  This is the first time I have encountered 
CFExecute and had not encountered this issue before.  Charlie, to answer your 
questions, the secure profile has been turned on and we have the most recent 
version of the installer, update 3).  The error we were receiving wasn't from 
CFExecute, but rather the BAT file was failing when it was executed, which lead 
me to believe that it was issues with security permissions.

 

We have decided to go with John's option of executing the bat files through a 
database cron job for security reasons.  Charlie, I re-read your article on on 
reducing security risks on ColdFusion servers 
http://www.carehart.org/blog/client/index.cfm/2013/1/2/Part2_serious_security_threat
  and was able to share it with my management team.

 

Thanks guys!

 

Cheers,

Bettina

 

RE: [ACFUG Discuss] Moving from ColdFusion 9 standard to ColdFusion 11 standard

[Charlie Arehart]

Chris, sadly there’s no simple answer to your question 1. 

Are you trying to run CF11 on the same machine as CF9? That could have problems 
due to web server configuration issues. Are you putting it on a new machine? 
That could go well, but since this is IIS I’ll note that you could unexpectedly 
bring “old” cf9 configuration settings with you when you move your web site 
code, as the web.config file in the root may have been edited by CF, IIS, or 
someone there, and it will be read by IIS on the “new” machine (or a new site 
in the current machine if you’re not moving to a new one).

Beyond that, are you installing CF11 as a download from last week or later? If 
so, that has update 3 already applied. If it’s an older installer, note that 
you’ll need to apply update 3 and rebuild your web server connector (created by 
the initial install). For some folks, that’s easy. For others (even with years 
of experience), that can be a hassle, and mistakes (or failing to do it) could 
leave things busted.

Another issue is that CF11 (and 10) offer a “secure profile” option, which 
often folks will presume they want (for improved security) but they may find 
that some aspects of their code may fail or not work well because of this new 
more secured environment.

Separately, there’s another security issue which could hurt you depending on 
the exact version of CF9 you were running. If it was 9.0.2, you’re ok. If it 
was 9..0.0 or 9.0.1, then it depends on whether you had applied a couple of 
security updates released in 2011 and 2012 (or the latest cumulative hotfix for 
those releases which included them).  If you did not, then when you move to 
CF10 or 11, those will include the security fixes, and you may find problems 
because of that changed behavior--which you WOULD have hit on 9 but did not 
because you’d not applied those updates.

Of course, beyond that, any move from one release to another CAN have problems 
due to compatibility changes in code. There are relatively few of those, 
thankfully, but do see the “what’s new” docs for 11 and 10 for more.

All that said, there are no problem with respect to your questions 2 and 3.

As for question 4, the upgrade can take literally just minutes if all goes 
well. The problem is if anything goes wrong. Then you may be totally screwed 
for hours if you don’t quickly find/resolve the problem.

So are you attempting things on a test server first? That would be very wise 
(even so, if your test server does not completely model your prod one, you 
could have things go fine in test and then go poorly in prod).

You mentioned being open to assistance.  While a hosting company may help, 
they’d likely only help if you were moving to their server. Is that what you’re 
considering? If not, or if your host cannot help, I’ll just note that there are 
folks (myself included) who do CF server troubleshooting. I list them at a 
category of my CF411 site, cf411.com/cfconsult. 

I can say (as my comments above show) that I have helped hundreds of folks with 
this very move. I have blogged many things about it (carehart.org/blog) but if 
you want direct help, we could get CF11 installed and working (and deal with 
any immediate challenges) in less than an hour, typically. It’s then up to you 
to do testing, and I could help with problems as you hit them, or of course I 
can help with anticipating problems like I have outlined above.

Hope all that’s helpful.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Chris
Sent: Friday, December 19, 2014 12:48 AM
To: discussion@acfug.org
Subject: [ACFUG Discuss] Moving from ColdFusion 9 standard to ColdFusion 11 
standard

 

Hi All,

 

1. What are the key points I need to be aware of when moving from ColdFusion 
9(CF 9) standard to ColdFusion 11(CF 11) standard?

 

2. Our applications were built several years ago and use Application.cfm 
instead of Application.cfc Can this cause any issues?

 

3. The back-end is MySQL and web server is IIS on a Windows Server 2008 OS. 
Does CF 11 integrate well with these?

 

4. How long would the upgrade process take? I understand any unexpected glitch 
can delay it, but how long does it generally take for a 8 core Pentium CPU 
having 8GB RAM on a Windows Server 2008 OS? The other applications running on 
the server are MySQL and MS-Security essentials.

 

Our server team does not have time to assist us with the upgrade. We have been 
advised to use managed hosting at 
http://www.adobe.com/products/coldfusion-family/hosting-partners.html

but don't know if any of those companies provide assistance for version 
upgrades like our case.

 

Any advice would be appreciated.

 

Thanks

RE: [ACFUG Discuss] Issue with cftry and Query of Queries

[Charlie Arehart]

Here are a couple of things to consider:

- a catch will fail to work if the code in the catch causes an error itself, in 
which case the error will be passed up to the next higher errorhandler in the 
chain, or dumped to the screen like a traditional CF error. That said, I see 
your code shows your catch doing nothing that should fail to work, but then the 
comments above it suggest you’ve perhaps removed code you feel it sensitive or 
unimportant. Just know that if there’s any code that was in the real catch, you 
ay want to test if really removing it might make it work
- but second, note that a cfcatch does not abort a request. You would need to 
do that, otherwise the code proceeds to the next line of code, which again in 
your case we can’t tell what’s next but I assume there was more code to this. 
You may want to see what happens if you add in an abort.

Let us know what you think or find. I realize it’s not “the solution” but it 
may help you get to it.

/charlie



From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of troy
Sent: Wednesday, August 06, 2014 12:18 PM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] Issue with cftry and Query of Queries

 

snip

But my real question is why the error escaped the try/catch block at all. 
cfcatch type=”any” should have caught anything regardless of whether the 
error originated in the contained logic block or some other method called by 
it, yes?

 

 

Thank you,

 

Troy Jones

 

RE: [ACFUG Discuss] Creating effect of html tags in a Rich Text Format(RTF)

[Charlie Arehart]

What version of CF are you on, Chris? Why not use CFDOCUMENT? Since CF9, it
can generate your word doc (a real one, rather than you trying to send plain
text to the user via CFCONTENT), and I I'm pretty sure it would support
conversion of HTML tags to corresponding word features. (I have to admit I
have not myself ever used the feature, but I've known of it.) Let us know
how it goes, or if you (or anyone else here) has tried it and already knows
if it will help or not.

For more, see these (and if you may be using CF10, just change the 9.0 to
10.0 in the URLs):

http://help.adobe.com/en_US/ColdFusion/9.0/Developing/WS56EA2935-FBD2-4089-8
402-FDDA2BAF55FB.html

http://help.adobe.com/en_US/ColdFusion/9.0/CFMLRef/WSc3ff6d0ea77859461172e08
11cbec22c24-7c21.html

Note that some aspects of the feature involve integrating the (free)
openoffice app on the server, discussed some in the above and also at:

http://help.adobe.com/en_US/ColdFusion/9.0/Installing/WS899EE911-747B-45cf-8
550-DC9123823364.html

 

/charlie

PS In case someone else may have answered this, I am having mail server
problems and so have not seen email since Thursday around 3pm. Hope that
will be resolved soon, but this may get sent before I do see any other
replies.

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Chris
Sent: Thursday, June 19, 2014 12:48 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] Creating effect of html tags in a Rich Text
Format(RTF)

 

I have a Rich Text Format(RTF) document which is generated by 

 

--

 

cfquery name=allPages datasource=website_2014
SELECT ID 
FROM websitepages 
WHERE areaID='100'
/cfquery

cfcontent type = application/msword
cfoutput
cfloop query=individualPages startrow=1
endrow=#allPages.recordCount#

cfquery name=getData datasource=website_2014
SELECT pageContent 
FROM sitepages 
WHERE pageID='#allPages.ID#'
Order by linkName
/cfquery
 
 #getData.pageContent#

/cfloop
/cfoutput

--

 

The RTF document contains text like

strongThis is a test message/strongbr/
a href=http://www.somedomain.com; Test domain and lot of other HTML
tags/a

I need to convert this to

This is a test message(with bold formatting in Microsoft-Word) 

(Line break for br/ tag) 

Test domain (which when clicked will lead to http://www.somedomain.com)

I understand I can remove the HTML tags using regular expressions, but how
can I recreate their effect(bold, hyperlink) in the RTF document.

 

Any suggestions would be appreciated.

 

Thanks

 

RE: [ACFUG Discuss] CF10 and Exchange 2013

[Charlie Arehart]

But did you simply try testing a connection between CF10 and Exchange 2013?
If it's that you do not yet have CF10 installed, do note that you can
install the Developer (or Trial) edition for free. 

If you do that, I'd recommend you not install it on a prod server running CF
9 or earlier, unless you are VERY careful about potential web server
configuration conflicts if you mean to keep that older CF running while
doing this CF10 testing. Better to pick some machine that has no CF on it.
You could easily uninstall CF after the test. 

At least then you'd know if CF10 CAN connect to your 2013 exchange server.
Of course, things could be different under load. :-)

HTH.

/charlie



From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of DeJong, Nathan
D.
Sent: Thursday, March 20, 2014 1:47 PM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] CF10 and Exchange 2013

 

Thanks Charlie and John.

 

We are looking at doing a project this summer that involves connecting with
Exchange 2013 for calendaring purposes.  We are still running CF8 and
looking to upgrade to CF10/11 or possibly move to Railo.  I was trying to
search for any resources about connecting ColdFusion and Exchange 2013 but
not finding much information besides CF10 and Exchange 2010.  With Railo I
saw a recommendation to use a 3rd party java implementation called
JWebServices for Exchange.  I had not seen anything about using .Net so I
will look into that further as well.

 

Thanks,

Nathan 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CF10 and Exchange 2013

[Charlie Arehart]

CF10 added support for Exchange 2010, not 13. (See that and other features
of CF10 here:
http://www.carehart.org/blog/client/index.cfm/2012/3/7/charlie_areharts_ulti
mate_cf10_new_features_list0

As for CF11/Splendor, the feature set is not complete, but I see no
reference to 2013 in the PDFs available at labs.adobe.com.

That said, just because it's not supported doesn't mean it won't work. Are
you finding that it does not? If so, there could be other issues that are
not related to CF's support of it. I find many struggle with Exchange
integration for all kinds of reasons.

Perhaps someone with more experience may speak up, or share more details on
what's happening for you.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of DeJong, Nathan
D.
Sent: Wednesday, March 19, 2014 1:44 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] CF10 and Exchange 2013

 

Hey, I am wondering if anyone knows if CF10 works with Microsoft Exchange
2013?  Or if not, if CF11 will support it?

 

Thanks,

Nathan


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] Re: cfspreadsheet etc. question

[Charlie Arehart]

Good stuff, Jason. 

And I'll add, Jeff, that there are indeed other options for dealing with
spreadsheets in CFML, and some have been shared by others here. I have a
list of them as a category in my CF411 site:

http://www.cf411.com/excel


There may be many more than most realize, and Jeff perhaps another will work
for your particular need if one of these shared so far do not.

/charlie

PS Still looking for clarification on your version and update level, in case
that may well be a problem.

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jason Delmore
Sent: Tuesday, March 18, 2014 12:31 AM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] Re: cfspreadsheet etc. question

 

I think you are reading the whole sheet in when you use CFSPREADSHEET and
essentially setting the pointer to sheet 2 with the second CFSPREADSHEET
line.  So you are trying to overwrite the existing spreadsheet with the same
objects and CF doesn't like that.

 

Maybe you should try something like this (I haven't touched CFSPREADSHEET so
I could be way off)

 

cfspreadsheet action=read
src=#application.rootDir#assets\C3d\IgG_Single_Template.xlsm
name=Patient_Output

cfset
SpreadsheetSetCellValue(Patient_Output,patientResults.patientName,7,5)

cfset SpreadsheetSetCellValue(Patient_Output,patientResults.clinic,8,5)
cfset
SpreadsheetSetCellValue(Patient_Output,DateFormat(patientResults.patientDOB,
mm/dd/),9,5)
cfset
SpreadsheetSetCellValue(Patient_Output,DateFormat(patientResults.sampleDate,
mm/dd/),10,5)
cfset
SpreadsheetSetCellValue(Patient_Output,DateFormat(patientResults.reportDate,
mm/dd/),11,5)
cfset SpreadsheetSetCellValue(Patient_Output,patientResults.doctor,12,5)
cfset SpreadsheetSetCellValue(Patient_Output,link goes here,13,3)

 

cfset SpreadsheetSetActiveSheetNumber(Patient_Output, 2) !--- here is
where the magic is... ---

cfloop from=1 to=20 index=i
 cfset SpreadsheetSetCellValue(Patient_Output,.5,2,2)
/cfloop

!--- Write both sheets to the new file. --- 
cfspreadsheet action=write filename=#theFile# name=Patient_Output
overwrite=true 

!--- Redirect user to the patient spreadsheet. ---
cflocation url=/C3d/individual_results/#patientResults.lname#.xlsm

 

 

I did CFXL using POI a number of years back.  It's on riaforge.  If nothing
else, looking at the code may give you some inspiration if you decide to
delve into POI.

 

Best wishes,

Jason

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] Re: cfspreadsheet etc. question

[Charlie Arehart]

Thanks for the update, and not to be antagonistic but it's still not clear.
:-) Are you saying you reverted back to CF9? Or stayed on 10 by changing
your datetimeformat references (a new function in CF10, which for most is a
godsend, but was an incompatibility for you)?

Either way, whether on 9 or 10, there are updates that must be done, and if
you (or someone) didn't do them, or may even have done them wrong, that's
still a possible explanation. So we need to know what update you are at. If
you're on CF10, just look at the CF Admin system info page's update level.
If you're on CF9 or earlier, sadly it's not that simple but I offered a link
below that told how to find out your real update level on those releases.

Finally, separate from that, I had proposed that you might want to share
some simple code (a complete, self-contained template) that showed what you
want to work. Maybe one of us would run it and say yes, it does work as
expected, which would perhaps confirm it's some config issue on your end.
(Even if not updates, perhaps it's something different in your CF Admin, or
application.cfc/cfm). But please do check and report the update level also,
thanks.

As always, just trying to help.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jeff Howard
Sent: Sunday, March 16, 2014 7:24 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] Re: cfspreadsheet etc. question

 

Yeah, well funny thing about that. I contacted the hosting company (that I
really want to say and dog right now but am refraining) to migrated to a
CF10 server. What was discussed was that they would migrated the site and
let me test before updating the DNS. Unfortunately, that is not how it
worked out and while trying to work on this the entire site went down
because I had a UDF that I've used for years called DateTimeFormat. It is
all over my code and as I'm sure you understand, it didn't work out that
well. So, I did try to update and test but ended up frantically trying to
get the site back up and running.

 

I was following up because I know that what I'm trying to do I did years ago
working for another company and it was fairly simple (though lengthy code).
It was 3rd party UDF but worked. I'm almost wondering if I may need to
create the entire spreadsheet with CF including formulas, etc.

 

On Sun, Mar 16, 2014 at 5:07 PM, Charlie Arehart char...@carehart.org
wrote:

Jeff, while you await a reply from anyone, and while you did reply kindly to
my last note, you didn't really answer what I had asked: are you confirming
you have the LATEST UPDATES installed for whatever version of CF you have?
You want to rule that out before assuming it just can't work as you are
trying.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jeff Howard
Sent: Sunday, March 16, 2014 1:55 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] Re: cfspreadsheet etc. question

 

Still hoping that someone out there has some insight on this. Does anyone
have their own functions for writing to spreadsheets that may not trigger
this error?

 

On Fri, Mar 14, 2014 at 1:04 PM, Jeff Howard jeh...@gmail.com wrote:

I have tried all sorts of workarounds for this issue. I just tried splitting
the excel workbook into two separate workbooks and then combining them in
the last step and I keep getting the same error when trying to add the
second sheet to the workbook.

 

Anyone ever had this issue and know how to resolve it?

 

The web site you are accessing has experienced an unexpected error.
Please contact the website administrator. 


The following information is meant for the website developer for debugging
purposes. 



Error Occurred While Processing Request 




An exception occurred while using action=update. 

 


org.apache.poi.POIXMLException:
org.apache.poi.openxml4j.exceptions.InvalidOperationException: A part with
the name '/xl/drawings/drawing2.xml' already exists : Packages shall not
contain equivalent part names and package implementers shall neither create
nor recognize packages with equivalent part names. [M1.12] 


 



Resources: 

*   Enable Robust Exception Information to provide greater detail about
the source of errors. In the Administrator, click Debugging  Logging 
Debug Output Settings, and select the Robust Exception Information option.
*   Check the  http://www.adobe.com/go/prod_doc ColdFusion
documentation to verify that you are using the correct syntax.
*   Search the  http://www.adobe.com/go/prod_support/ Knowledge Base
to find a solution to your problem.



Browser  

Mozilla/5.0 (Windows NT 6.1; WOW64; rv:27.0) Gecko/20100101 Firefox/27.0


Remote Address  

108.73.189.89


Referrer  

http://dunwoodylabs.com/office/loginForm.cfm


Date/Time  

14-Mar-14 11:58 AM

 

On Thu, Mar 13, 2014 at 11:25 PM, Jeff Howard jeh...@gmail.com wrote:

I'm using CF 9 to try and create a spreadsheet from a template. The
spreadsheet has 2 sheets, 1 that has charts

RE: [ACFUG Discuss] Re: cfspreadsheet etc. question

[Charlie Arehart]

Jeff, while you await a reply from anyone, and while you did reply kindly to
my last note, you didn't really answer what I had asked: are you confirming
you have the LATEST UPDATES installed for whatever version of CF you have?
You want to rule that out before assuming it just can't work as you are
trying.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jeff Howard
Sent: Sunday, March 16, 2014 1:55 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] Re: cfspreadsheet etc. question

 

Still hoping that someone out there has some insight on this. Does anyone
have their own functions for writing to spreadsheets that may not trigger
this error?

 

On Fri, Mar 14, 2014 at 1:04 PM, Jeff Howard jeh...@gmail.com wrote:

I have tried all sorts of workarounds for this issue. I just tried splitting
the excel workbook into two separate workbooks and then combining them in
the last step and I keep getting the same error when trying to add the
second sheet to the workbook.

 

Anyone ever had this issue and know how to resolve it?

 

The web site you are accessing has experienced an unexpected error.
Please contact the website administrator. 


The following information is meant for the website developer for debugging
purposes. 



Error Occurred While Processing Request 




An exception occurred while using action=update. 



org.apache.poi.POIXMLException:
org.apache.poi.openxml4j.exceptions.InvalidOperationException: A part with
the name '/xl/drawings/drawing2.xml' already exists : Packages shall not
contain equivalent part names and package implementers shall neither create
nor recognize packages with equivalent part names. [M1.12] 


 



Resources: 

*   Enable Robust Exception Information to provide greater detail about
the source of errors. In the Administrator, click Debugging  Logging 
Debug Output Settings, and select the Robust Exception Information option.
*   Check the  http://www.adobe.com/go/prod_doc ColdFusion
documentation to verify that you are using the correct syntax.
*   Search the  http://www.adobe.com/go/prod_support/ Knowledge Base
to find a solution to your problem.



Browser  

Mozilla/5.0 (Windows NT 6.1; WOW64; rv:27.0) Gecko/20100101 Firefox/27.0


Remote Address  

108.73.189.89


Referrer  

http://dunwoodylabs.com/office/loginForm.cfm


Date/Time  

14-Mar-14 11:58 AM

 

On Thu, Mar 13, 2014 at 11:25 PM, Jeff Howard jeh...@gmail.com wrote:

I'm using CF 9 to try and create a spreadsheet from a template. The
spreadsheet has 2 sheets, 1 that has charts on it, 2 contains the data used
to create the charts.

 

The data for sheet 2 is stored in MS SQL database and I'm querying that and
trying to write to the second sheet that contains the formulas to have the
charts auto-generated.

 

I'm getting the following error message when I try to update the sheet that
contains the data that I wrote to sheet 2. The updates work for sheet 1 but
when I try to update sheet 2 I get the error.

 



An exception occurred while using action=update. 



java.lang.IllegalArgumentException: The workbook already contains a sheet of
this name 

 

 

 

Here is the code (I simplified the loop to try for testing/dev):

 


cfspreadsheet action=read
src=#application.rootDir#assets\C3d\IgG_Single_Template.xlsm
name=Patient_Output sheet=1
cfspreadsheet action=read
src=#application.rootDir#assets\C3d\IgG_Single_Template.xlsm
name=newCalc_P1 sheet=2

cfset
SpreadsheetSetCellValue(Patient_Output,patientResults.patientName,7,5)
cfset SpreadsheetSetCellValue(Patient_Output,patientResults.clinic,8,5)
cfset
SpreadsheetSetCellValue(Patient_Output,DateFormat(patientResults.patientDOB,
mm/dd/),9,5)
cfset
SpreadsheetSetCellValue(Patient_Output,DateFormat(patientResults.sampleDate,
mm/dd/),10,5)
cfset
SpreadsheetSetCellValue(Patient_Output,DateFormat(patientResults.reportDate,
mm/dd/),11,5)
cfset SpreadsheetSetCellValue(Patient_Output,patientResults.doctor,12,5)
cfset SpreadsheetSetCellValue(Patient_Output,link goes here,13,3)

cfloop from=1 to=20 index=i
 cfset SpreadsheetSetCellValue(newCalc_P1,.5,2,2)
/cfloop

!--- Write both sheets to the new file. --- 
cfspreadsheet action=write filename=#theFile# name=Patient_Output
overwrite=true 
cfspreadsheet action=update filename=#theFile# name=newCalc_P1
sheetname=newCalc_P1
!--- Redirect user to the patient spreadsheet. ---
cflocation url=/C3d/individual_results/#patientResults.lname#.xlsm

 

 

Any help would be greatly appreciated.

 

Thanks in advance,

Jeff

 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] does SPREADSHEETREMOVESHEET not work?

[Charlie Arehart]

Jeff, I have never used any of that functionality, but since you say you are
on CF9, have you applied any/all updates? There may be bugs that were
long-since fixed, but I find that many people (or their server admin's)
never bother to update CF, especially 9 and earlier since it was often quite
a bear to do.

If you want to know what version you have (9.0, 9.0.1, or 9.0.2) and what
updates you have, I have a blog entry helping with that:

http://www.carehart.org/blog/client/index.cfm/2012/6/18/what_hotfixes_have_b
een_applied


And if you may decide to proceed with some update(s), do proceed with
caution. I share some warnings here:

http://www.carehart.org/blog/client/index.cfm/2011/10/21/why_chfs_may_break

Note as well that if you think that downloading an installer from Adobe
should mean it has all the updates already applied, that's not so, as I
discuss here:

http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_inst
aller_includes_all_updates

And if you may wonder how to find available hotfixes, I provide links to
them in that last blog entry.

Finally, if you may be tempted to go to 9.0.2 (not saying that's your
solution necessarily), consider the info I share here:

http://www.carehart.org/blog/client/index.cfm/2013/8/19/understanding_ColdFu
sion_9.0.2_a_FAQ

But I appreciate that none of this may help solve your problem. Maybe
there's something obvious you're doing or not that someone more familiar
with the spreadsheet features may help with. I just wanted to offer this as
something to consider in the meantime.



/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jeff Howard
Sent: Friday, March 14, 2014 1:15 AM
To: discussion@acfug.org
Subject: [ACFUG Discuss] does SPREADSHEETREMOVESHEET not work?

 

I copied the code straight from Adobe's site and rewrote it using cfscript,
cfset, cfset temp =, cfset obj = and all of them threw the same error.

 


Variable SPREADSHEETREMOVESHEET is undefined.


 

Here is the various code I tried in CF 9:

cfset spreadsheetRemoveSheet(Patient_Output,newCalc_P1)

cfset temp = spreadsheetRemoveSheet(Patient_Output,newCalc_P1)

cfset Patient_Output = spreadsheetRemoveSheet(Patient_Output,newCalc_P1)

 


cfscript 
Patient_Output = spreadsheetRemoveSheet(Patient_Output,newCalc_P1); 
/cfscript

 

I thought that with all the spreadsheet functionality that this project
would be fairly quick and need it tomorrow. I was trying to find a work
around for the duplicate sheet error in the last message I posted so thought
maybe if I deleted the sheet first and then saved it I would have a work
around and instead I just got another error message.

 

Help!!!

 

Thanks in advance for any and all help,

Jeff




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] does SPREADSHEETREMOVESHEET not work?

[Charlie Arehart]

 = SpreadsheetGetCellValue(newCalc_P1,writeRow,writeCol)
 
/cfloop
!--- Write both sheets to the new file. --- 
cfspreadsheet action=write filename=#theFile# name=Patient_Output
overwrite=true
cfspreadsheet action=update filename=#theFile# name=newCalc_P1
sheetname=newCalc_P1
!--- Redirect user to the patient spreadsheet. ---
cflocation url=/C3d/individual_results/#patientResults.lname#.xlsm

 

On Fri, Mar 14, 2014 at 9:55 AM, Charlie Arehart char...@carehart.org
wrote:

Jeff, I have never used any of that functionality, but since you say you are
on CF9, have you applied any/all updates? There may be bugs that were
long-since fixed, but I find that many people (or their server admin's)
never bother to update CF, especially 9 and earlier since it was often quite
a bear to do.

If you want to know what version you have (9.0, 9.0.1, or 9.0.2) and what
updates you have, I have a blog entry helping with that:

http://www.carehart.org/blog/client/index.cfm/2012/6/18/what_hotfixes_have_b
een_applied


And if you may decide to proceed with some update(s), do proceed with
caution. I share some warnings here:

http://www.carehart.org/blog/client/index.cfm/2011/10/21/why_chfs_may_break

Note as well that if you think that downloading an installer from Adobe
should mean it has all the updates already applied, that's not so, as I
discuss here:

http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_inst
aller_includes_all_updates

And if you may wonder how to find available hotfixes, I provide links to
them in that last blog entry.

Finally, if you may be tempted to go to 9.0.2 (not saying that's your
solution necessarily), consider the info I share here:

http://www.carehart.org/blog/client/index.cfm/2013/8/19/understanding_ColdFu
sion_9.0.2_a_FAQ

But I appreciate that none of this may help solve your problem. Maybe
there's something obvious you're doing or not that someone more familiar
with the spreadsheet features may help with. I just wanted to offer this as
something to consider in the meantime.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jeff Howard
Sent: Friday, March 14, 2014 1:15 AM
To: discussion@acfug.org
Subject: [ACFUG Discuss] does SPREADSHEETREMOVESHEET not work?

 

I copied the code straight from Adobe's site and rewrote it using cfscript,
cfset, cfset temp =, cfset obj = and all of them threw the same error.

 


Variable SPREADSHEETREMOVESHEET is undefined.


 

Here is the various code I tried in CF 9:

cfset spreadsheetRemoveSheet(Patient_Output,newCalc_P1)

cfset temp = spreadsheetRemoveSheet(Patient_Output,newCalc_P1)

cfset Patient_Output = spreadsheetRemoveSheet(Patient_Output,newCalc_P1)

 


cfscript 
Patient_Output = spreadsheetRemoveSheet(Patient_Output,newCalc_P1); 
/cfscript

 

I thought that with all the spreadsheet functionality that this project
would be fairly quick and need it tomorrow. I was trying to find a work
around for the duplicate sheet error in the last message I posted so thought
maybe if I deleted the sheet first and then saved it I would have a work
around and instead I just got another error message.

 

Help!!!

 

Thanks in advance for any and all help,

Jeff


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 

 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] LDAP file size limit

[Charlie Arehart]

OK, but that's the first time you've said that in all your notes. :-) I said
from my first note that I was surmising that you might be using IIS based on
other info in your first note (referring to other MS technologies,
especially).

So let's change course: I still would assert that you should explore any way
that web servers might play a role rather than focus only on the LDAP server
as the seeming culprit. You're not finding anything that suggests there's
such a limit in the LDAP server, right? BTW, where is the LDAP server? Are
you saying that you know that it, too, is definitely NOT behind IIS?

And you are saying that the error is not between the client and CQ/AEM,
right? So we don't need to wonder about a limitation in the Tomcat web
server, if we assume that THAT is what CQ/AEM is using.

Still, your notes have not really conveyed how you get the uploads from your
web app (now we know it to be CQ/AEM on Tomcat). Is it that it (CQ/AEM) or
some code running in it that you wrote somehow pushes the file once received
in the web application to the LDAP server? Do you know how it does that? Is
it a web service call? A .net object call? You said in your last note that
there aren't any network devices between the application and ldap servers,
so I'm hopeful you can share insight on what you know to be the connection
between the two.

It's possible that IIS is still a player in terms of the interface to the
LDAP server. If you have confirmation that it is not, do you know if it's
any sort of web server? If you're making a web service call from CQ/AEM to
the LDAP, there certainly would be one, but I realize it may NOT be a web
service call, in which case then assuming it's not some other sort of
http-based call, then yes I suppose we can finally rule out web servers from
the mix.

Please don't hear me being antagonistic. I'm going on your original note
that said you could find no one else reporting any such 10m limit for LDAP.
So I'm trying to help you think outside that box to see if there is
something you're not considering.

/charlie


-Original Message-
From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Mike Staver
Sent: Monday, February 24, 2014 1:20 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] LDAP file size limit

IIS isn't in the mix on this server at all. CQ is running as a standalone
application server on port 4503 with no other firewall or load balancer in
between itself and the LDAP server.

On 2/24/2014 8:26 AM, Charlie Arehart wrote:
 OK, but even if it's a Tomcat app (as is CF10+ itself), that doesn't 
 rule out IIS as a player in the equation. They (or a customer) could 
 choose to implement it behind IIS, or of course Apache, or indeed 
 Tomcat's own web server (as is the case with the built-in web server in
CF10).

 So I think you will want to confirm if that's so. For instance, if the 
 URL to access this web app has no port then it's using port 80, and if 
 you run IIS that would typically (though not necessarily) mean that 
 you were running that web app through IIS. Even if there is some other 
 non-standard port, that could STILL be pointing to a site defined in 
 IIS. Only you (or someone there with access to IIS, if not you) can 
 know for sure. I'd confirm it before continuing to look elsewhere.

 /charlie






-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] AVG exploit blackhat seo type 1703

[Charlie Arehart]

Thanks for the update. The issues all apply to CF7 as well. And even more
so, in that Adobe may have only created updates for 8 and 9, for security
vulnerabilities in recent years (support for 7 would have been dropped by
Adobe when 9 came out in 2009. So it's all the more vital to lockdown the
Admin and admin-related directories. (The Admin API was introduced in CF7,
and while I don't have a cf7 setup to check, I suspect that the API was set
to be remotely public, after login, just as it remains today, which again
makes the hack from earlier this year one that even 7 servers could be
subject to.)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jeff Howard
Sent: Tuesday, November 12, 2013 12:59 AM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] AVG exploit blackhat seo type 1703

 

I appreciate the reply and I'm going to read through the links that you
posted. I did not mention they are still running CF7. I will definitely pass
your name along for a quick remote fix if I am unable to lock things down
more to prevent this from happening in the future.

 

Thanks again.

 

Jeff

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] AVG exploit blackhat seo type 1703

[Charlie Arehart]

Well, Jeff, it could be any of a number of things, but I think you're on the
right track that it's more of a config thing than a code thing.

My first guess (from helping others with a similar kind of breakin) is that
the bad guys may have gotten in through the CFIDE/componentutils folder,
which many leave open to public access (requiring a login, but still
vulnerable). There's a certain URL they can compose that can allow them to
edit/upload files. Since few CF folks really use the CFC browser which the
componentutils provides access to, or they may not want it open publicly
(even though it does offer a login prompt), this is one of the folders you
can and should block entirely like the CFIDE/adminapi. If you're on IIS 7+,
is request filtering feature is the best way. I discuss that and other
options in a series of blog entries I did earlier this year, when a similar
but different exploit happened starting late last December. See the 3-part
series at:

http://www.carehart.org/blog/client/index.cfm/2013/1/

Now, you'll notice that the latest entry of the 3 talks about an Adobe
hotfix that addressed the particular vulnerability then (in the adminapi).
But here's the thing: you really need to lockdown these vulnerable folders
within the CFIDE (like adminapi and componentutils), because the bad guys
can and do come up with new ways to get in even after Adobe plugs one known
hole. They do mention in the technote for that Jan 13 security bulletin
(http://www.adobe.com/support/security/advisories/apsa13-01.html ) that you
should lock down those folders. 

They also mention locking down the CFIDE/administrator. That's a bit
different. While if you don't use the features provided by those other
folders at all (adminapi and componentutils) you can entirely block them,
you probably don't want to do that with the administrator directory, though
you may want to reconsider how accessible it is. The login prompt is not
enough: you should add IP address restrictions or additional web server
authentication to limit who can even see that (and therefore all the files
in that administrator directory). Again, I discuss that further in those 3
entries.

Finally, your bad guys may be exploiting an old FCKEditor code deep in the
CFIDE/scripts/ajax folder. The problem is that you can't just block that
folder (or indeed the CFIDE/scripts or the whole CFIDE folder) if indeed you
use CFML code that generates HTML that relies on that CFIDE/scripts folder.
Now, you could block it (the FCKeditor code) if you absolutely KNEW that
your code never used it, using the same approaches I discuss in the entries.
But if you can't block it, I'll warn of another potential problem:

It could be that you HAVE (or someone on your server HAS) applied hotfixes
that addressed previous FCKEditor vulnerabilities, but you/they may have
made a mistake in applying the update. I see many people who maybe apply a
given CF update/hotfix to ONE copy of the CFIDE, but then they have another
that they don't realize is in use (as a real or virtual directory in one or
more web sites) but which they DID NOT update at the same time, and
therefore remains vulnerable. I discuss that problem here:

http://www.carehart.org/blog/client/index.cfm/2011/10/21/why_chfs_may_break

Hope some of that may help you. You can also learn more about some aspects
of what I discuss above, and really a LOT more, in the Adobe CF LockDown
Guides, available for CF 10, 9, 8, and 7. I point to those in the blog
entries as well.

If you don't want to wade through all that info or perhaps may not trust
yourself to properly get these blocks and updates done correctly, I can help
with that by way of short-term remote assistance, with satisfaction
guaranteed. More at the consulting page at carehart.org.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jeff Howard
Sent: Sunday, November 10, 2013 9:30 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] AVG exploit blackhat seo type 1703

 

I have a client that has a user that uses AVG that had the alert exploit
blackhat seo (type 1703) pop up on a site that I do maintenance for. This
happened a few months back and it seemed unfounded. I got an email saying
that it is happening again and this time when I viewed the source code for
the page there was a bunch of injected links at the bottom of the page.

 

I've been researching for awhile now and I'm having a hard time figuring out
how the exploit happens (understandable) but I'm also having a hard time
finding how to prevent it from happening again.

 

Does anyone have any experience in dealing with this? If so, what steps can
I take to prevent it?

 

Something that is kind of confusing me as well is that client's client has 2
separate domains on their server. One is the site that I do maintenance for,
the other I have no access to but they are both displaying the same
error/alert. This makes me believe that it may be more server security than
web site security.

 

If 

RE: [ACFUG Discuss] CFmail issue with CF10

[Charlie Arehart]

Well it's great to hear if you have solved things, but it begs at least a
couple of questions:

Aren't both CF instances running on the same machine? And if so, if that is
indeed a windows 7 issue, wouldn't both CF releases had the same issue?
Are you sure it's not that the CF9 instance also already had this java
argument added (much like I asked in the last email, but I had written and
sent that just moments ago, before seeing this.)

Finally, if it does NOT have that, then the next question would be whether
both CF instances are using the same Java version. They should both be Java
1.6, by default. They will likely be different subversions, both because CF
offered an updated one in 10 by default, but also because you or someone
there could have changed either CF 9 or 10 to use a different JVM than the
default they come with.

If you hit the system information page in the CF Admin (I icon in top
right corner), that has a display of the JVM version. Let us know what it is
for both. It might put a bow on this.

But thanks indeed for sharing what you observed.

As for my last note, I do still think you have an issue that is keeping CF10
from accessing the updates on the internet. That problem, and indeed many
others one can hit with the updater, is addressed in one of the 50 questions
and answers addressed about the CF10 updater in a FAQ at:

http://blogs.coldfusion.com/post.cfm/coldfusion-hotfix-installation-guide

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jayaraman,
Viswanathan
Sent: Friday, November 08, 2013 7:35 AM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] CFmail issue with CF10

 

Charlie,

 

  I was googling and found this interesting article

 

http://stackoverflow.com/questions/14064111/java-mail-mystery-smtp-blocked

 

According to this on Windows 7, there are two connectivities IPV4 and IPV6.

 

The problem is due to the IPv4/IPv6 preference of Java. Java tries to use
IPv6 by default (?) and my ISP does not support IPV6. However, it's enabled
on my Windows 7 boxes by default.

 

I added -Djava.net.preferIPv4Stack=true in the JVM arguments and then the
cfmail and verification in CF Admin worked like a charm.  This is probably
an issue with Windows 7 and CF10 probably using Java Mail.

 

Jay Jayaraman
Central Billing Services
Financial Management and Planning
(404) 273-7131 (C)

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jayaraman,
Viswanathan
Sent: Friday, November 08, 2013 7:19 AM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] CFmail issue with CF10

 

My response in red. Thank you for looking into this.

 

Jay Jayaraman
Central Billing Services
Financial Management and Planning
(404) 273-7131 (C)

 

From:  mailto:ad...@acfug.org ad...@acfug.org [ mailto:ad...@acfug.org
mailto:ad...@acfug.org] On Behalf Of Charlie Arehart
Sent: Thursday, November 07, 2013 5:51 PM
To:  mailto:discussion@acfug.org discussion@acfug.org
Subject: RE: [ACFUG Discuss] CFmail issue with CF10

 

OK. Thanks for the clarifications, but I'm not ready to give up yet. :-)

snip




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CFmail issue with CF10

[Charlie Arehart]

Thanks.  Let's use what info we can here.

First, when I proposed stopping CF9 or 10, it was not to see if it changed
whether the email test itself worked (or failed), but simply whether any
call to the page on the server that you think you stopped would fail,
because CF was stopped. This is just to confirm that the URL you think goes
to CF instance A really is going to that instance. If you stop it, and yet
the request (any request) still runs, then clearly it's not going to the
right server. Again, it was just a sanity check I was proposing.

Second, I see that you didn't try the ping or telnet. I suppose you read my
wording about whether the test passed and thought you didn't need to, but
please do. I'd be curious to see what happens.

Finally, as for your version of CF10, you do NOT have any updates. I realize
you have clicked the server updates and see nothing. That has an
explanation. I suspect that the server you're looking at doesn't have access
to the internet, or .. maybe it's that you require a proxy to be configured
(in your browser and in CF) in order to access the internet, and maybe you
had done that in CF9 but not CF 10. 

And that could explain both why your CF10 admin can't get to the CF10
updates (on the Adobe site) AND why your CF10 code can't access the SMTP
server (if it's on another computer). I think we may really be onto
something here.

Can you show us the java args line from the java  jvm page of your CF9
and 10 Admin?

/charlie

PS Once you do get the downloads working, if you need to add a proxy, you
will need to do what's called the mandatory update for CF10 before you can
even download the other updates. Just google for that to learn more. For
more, see
http://helpx.adobe.com/coldfusion/kb/coldfusion-10-mandatory-update.html, or
again that's something I can help you with directly via my consulting
services/

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jayaraman,
Viswanathan
Sent: Friday, November 08, 2013 7:19 AM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] CFmail issue with CF10

 

My response in red. Thank you for looking into this.

 

Jay Jayaraman
Central Billing Services
Financial Management and Planning
(404) 273-7131 (C)

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Charlie Arehart
Sent: Thursday, November 07, 2013 5:51 PM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] CFmail issue with CF10

 

OK. Thanks for the clarifications, but I'm not ready to give up yet. :-)

To answer your first question, the question really wouldn't be whether CF10
use[s] any other port to communicate with the smtp server other than the
specified port (25)?  The port is defined by the smtp server, and CF would
be told to use it. I assume you are telling it (cf10) to use that port, just
as I assume you are telling the CF 9 admin to use the same port.  And the
servernames (for the smtp server) are absolutely ideintical, you say,
right?Correct

It would be very odd then that 2 CF servers on the same box would not both
be able to connect to a given remote server.  So to dig a little further, I
want to confirm some things. Some of my questions may sound out there, but
I've learned to ask the dumb questions that make sure there are no
mistaken assumption at the root of the apparent bug. :-)

So let's be really clear here:

- are you saying that the CF9 is installed on this same box right now?
Yes.  Both installations are Developer Edition with Built-in WebServer on my
work PC. I just ask because if it's really that 9 was installed previously,
and this is your recollection, we can't know for sure it wouldn't have
failed now. I realize you said both deployments are on the same box. I
just want to make 100% sure you meant that.
- assuming both are installed now, are you visiting the URL for the CF9 and
10 admins as the same ip or domain (or localhost)? Both are localhost (Port
Number 8500 for CF9 and 8501 for CF10)If not, you could be looking at the
admin for some other box. Again, this is one of those ones that could trip
someone up, unsuspecting. In fact, unless you're using localhost or
127.0.0.1, I'd even go so far as to suggest you stop CF on the box (one at a
time) and confirm that indeed the respective admin you're using fails. I
stopped CF9 and tried again with CF10 only up and still CF10 connection to
mail server failed.
- assuming you would say both are the same domain, or that test passes, then
if you go onto the server and go to the command prompt and do a ping of the
server, or a telnet to port 25, what does it say? (let us know if you need
more help doing those.) We would expect that if it works for CF9 on that
box, then a ping of that server or (for sure) a telnet to its port 25 should
work from the command prompt. But then, if it fails for CF10, it should fail
for the server. I can't see how CF10 would uniquely have a problem, if all
else is the same on CF9.
- Finally, have you updated CF10 to the latest update (11

RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

[Charlie Arehart]

Thanks for the kind reply and understanding. :-)

So as for your last sentence, let's be clear: when you say you wondered if
the last hot fix was cumulative or not, if we're talking about CHFs, they
are inherently cumulative (being an bbreviation for cumulative hotfix.)
And as I mentioned below, in the case of CHF4 for 901, that is not only
cumulative of all hotfixes at the time but ALSO all security fixes at that
time. 

But as I touched on more in the blog entry I mentioned below on whether
downloaded installers are updated (and I could have repeated in my last
email but didn't think to), there are indeed often more hotfixes (individual
and security) that are released after a CHF, over time. So it is incumbent
on you to both add the CHF and THEN look at both the hotfixes page (which I
point to below) AND the security bulletins page (which I point to in one of
my comments on the blog entry) to see if there are new one after the CHF,
and indeed there are for CF 901 CHF4.

Yep, it's a lot of work. And as Dave Epler pointed out in a comment on that
blog entry, he created the unofficial updater tool as a way to help with all
this. See uu2.riaforge.org for more. It has some risks, related to what I
point out in the blog entry about you maybe having multiple CFIDEs that you
need to update. It doesn't provide for that. I just added a comment to the
blog entry with more info.

Hope all that helps Ajas or any other readers.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Thursday, November 07, 2013 12:10 AM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

 

Thanks again, I kind of knew I was asking for trouble with that question.
:=)

I totally understand what you are referring to, in fact,  I would take it as
part complement, when you refer to my posts. I wouldnt take offense to your
email, I have learned a lot from Esp Your emails.

I might have missed obvious but my main concern was if the last hot fix was
cumulative or not. I could not confirm it via adobe site earlier, maybe I
was rushing through it. Your comments make sense.

Thanks again,

On Nov 6, 2013 9:47 PM, Charlie Arehart char...@carehart.org wrote:

Wow, Ajas, the answer is that it's ABSOLUTELY NOT the case.  

When you get ANY release of CF, it DOES NOT come with all the updates. And
as for 9.0.1 specifically, there were 4 CHFs and many individual security
fixes since it was released. The same is true for all releases. 

FWIW, I addressed this issue you're raising in a 2010 blog entry (with more
detail):

CFMyths: When I download CF to install it from scratch, it has the latest
fixes/updaters
http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_inst
aller_includes_all_updates 

I do mention there where you can find the CHFs:
http://helpx.adobe.com/coldfusion/kb/hot-fixes-coldfusion-9.html. 

Of course, do be careful applying them, as things can break. I discuss that
at length here:

CF911: Are you finding CF (or CF Admin) busted after applying a hotfix? A
few possible reasons
http://www.carehart.org/blog/client/index.cfm/2011/10/21/why_chfs_may_break 

There is some good news for you, though, Ajas: if you do apply CF 9.0.1
CHF4, you will get all the individual, cumulative, AND security hotfixes at
once. That latter point is new in CF 901 CHF4, in that it includes security
updates. Previously, CHFs only included the previous hotfixes, not security
updates.  I realize that may sound great, but it can be a blessing and a
curse. For many people, when they apply all security updates, they find that
things do break. I discussed that as part of another entry:

CF911: New Adobe document about #ColdFusion security hotfixes: required
reading, I'd say
http://www.carehart.org/blog/client/index.cfm/2013/5/21/new_adobe_summary_of
_security_hotfix_tweaks 

I do realize that many folks, especially who don't spend much time in all
this stuff, can easily misunderstand things, which is of course why I write
the things I do, and in the depth I do.

Finally, with all due (and sincere) respect to Ajas, when someone of his
experience, so otherwise knowledgeable in the ways of CF administration
(judging from his emails here and elsewhere) asks such a question, we really
do have to shudder to think what the average developer/admin is assuming :-(


I guess that's partly why I'm so busy in my CF server troubleshooting! But
as you guys here see, I try (and try) to point out resources to help people
avoid such problems and misconceptions.at least for those with the temerity
to read more than a paragraph! :-)  Fortunately Ajas has always been up to
the challenge, so I trust both that he will have read to this point, and
that he will take the information to hear (and accept my comment of the last
paragraph in the spirit intended). 

More than that, I trust that he will now help others who may ever raise this
same question. Hope others may get a chance to do

RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

[Charlie Arehart]

Ah, ok. Well, the issue is that that document was written when CF 9.0.1 (or
as it called itself there, ColdFusion 9 update 1) was released.

The information it states was true then, a few years ago. They just did not
think to go back and update it as they created hotfixes after the fact. And
one could argue they could/should have been more clear and says yes, at
least those that are available as of  date when the 9.0.1 installers
were built.

So we see here how this is a pernicious problem with respect to anything you
read. I see people relying on old blog posts or form threads from years ago,
who assume that they state what is true (they can't say anything that's not
true on the internet, right?), but they don't consider that it may have
been true then but is no longer. It may be because versions of software
change, it may be because understanding about how things work has changed
(for that writer, or for the community, and so on).

More than anything, I'd argue that this stems from people being rather lazy
in their writing, as above in the technote Ajas mentions. People need to
write more carefully knowing that what they say may stand for years. And if
folks wondered why I wrote so much when I do, that's as much part of the
reason as anything. People generally need the full context to really
understand things. At least, that's how I see it. :-)

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Thursday, November 07, 2013 11:37 AM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

 

Hi,

I was really misled (or perhaps misread it) by this URL earlier,
http://helpx.adobe.com/coldfusion/kb/faq-coldfusion-9-0-update.html#main_Is_
the_latest_security_hot_fix . I knew I had read this somewhere but didnt
remember where. So looks like all hotfix and CHF are included for 9 and not
9.0.1 which would make sense.


Is the latest security hotfix and cumulative hotfix for ColdFusion 9
included in ColdFusion 9 Update 1?


Yes.

Anyway,  for anyone reading this thread, the resource CFMYTHS
http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_ins
taller_includes_all_updates%20 is awesome.
http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_inst
aller_includes_all_updates  . I learned a lot from this post.

I would recommend people to start from there and then proceed to other
things.  Like Charlie said, you can find the CHFs:
http://helpx.adobe.com/coldfusion/kb/hot-fixes-coldfusion-9.html. 

 

Thanks Charlie, I always learn a great deal from your every single post. I
mean it.

Thanks,




Ajas Mohammed / 

iUseDropbox( http://db.tt/63Lvone9 http://db.tt/63Lvone9) 
http://ajashadi.blogspot.com
We cannot become what we need to be, remaining what we are.
No matter what, find a way. Because thats what winners do.
You can't improve what you don't measure.
Quality is never an accident; it is always the result of high intention,
sincere effort, intelligent direction and skillful execution; it represents
the wise choice of many alternatives.

 

On Thu, Nov 7, 2013 at 12:10 AM, Ajas Mohammed ajash...@gmail.com wrote:

Thanks again, I kind of knew I was asking for trouble with that question.
:=)

I totally understand what you are referring to, in fact,  I would take it as
part complement, when you refer to my posts. I wouldnt take offense to your
email, I have learned a lot from Esp Your emails.

I might have missed obvious but my main concern was if the last hot fix was
cumulative or not. I could not confirm it via adobe site earlier, maybe I
was rushing through it. Your comments make sense.

Thanks again,

On Nov 6, 2013 9:47 PM, Charlie Arehart char...@carehart.org wrote:

Wow, Ajas, the answer is that it's ABSOLUTELY NOT the case.  

When you get ANY release of CF, it DOES NOT come with all the updates. And
as for 9.0.1 specifically, there were 4 CHFs and many individual security
fixes since it was released. The same is true for all releases. 

FWIW, I addressed this issue you're raising in a 2010 blog entry (with more
detail):

CFMyths: When I download CF to install it from scratch, it has the latest
fixes/updaters
http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_inst
aller_includes_all_updates 

I do mention there where you can find the CHFs:
http://helpx.adobe.com/coldfusion/kb/hot-fixes-coldfusion-9.html. 

Of course, do be careful applying them, as things can break. I discuss that
at length here:

CF911: Are you finding CF (or CF Admin) busted after applying a hotfix? A
few possible reasons
http://www.carehart.org/blog/client/index.cfm/2011/10/21/why_chfs_may_break 

There is some good news for you, though, Ajas: if you do apply CF 9.0.1
CHF4, you will get all the individual, cumulative, AND security hotfixes at
once. That latter point is new in CF 901 CHF4, in that it includes security
updates. Previously, CHFs only included the previous hotfixes, not security

RE: [ACFUG Discuss] CFmail issue with CF10

[Charlie Arehart]

OK. Thanks for the clarifications, but I'm not ready to give up yet. :-)

To answer your first question, the question really wouldn't be whether CF10
use[s] any other port to communicate with the smtp server other than the
specified port (25)?  The port is defined by the smtp server, and CF would
be told to use it. I assume you are telling it (cf10) to use that port, just
as I assume you are telling the CF 9 admin to use the same port.  And the
servernames (for the smtp server) are absolutely ideintical, you say, right?

It would be very odd then that 2 CF servers on the same box would not both
be able to connect to a given remote server.  So to dig a little further, I
want to confirm some things. Some of my questions may sound out there, but
I've learned to ask the dumb questions that make sure there are no
mistaken assumption at the root of the apparent bug. :-)

So let's be really clear here:

- are you saying that the CF9 is installed on this same box right now? I
just ask because if it's really that 9 was installed previously, and this is
your recollection, we can't know for sure it wouldn't have failed now. I
realize you said both deployments are on the same box. I just want to make
100% sure you meant that.
- assuming both are installed now, are you visiting the URL for the CF9 and
10 admins as the same ip or domain (or localhost)? If not, you could be
looking at the admin for some other box. Again, this is one of those ones
that could trip someone up, unsuspecting. In fact, unless you're using
localhost or 127.0.0.1, I'd even go so far as to suggest you stop CF on the
box (one at a time) and confirm that indeed the respective admin you're
using fails.
- assuming you would say both are the same domain, or that test passes, then
if you go onto the server and go to the command prompt and do a ping of the
server, or a telnet to port 25, what does it say? (let us know if you need
more help doing those.) We would expect that if it works for CF9 on that
box, then a ping of that server or (for sure) a telnet to its port 25 should
work from the command prompt. But then, if it fails for CF10, it should fail
for the server. I can't see how CF10 would uniquely have a problem, if all
else is the same on CF9.
- Finally, have you updated CF10 to the latest update (11)?

Let us know.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jayaraman,
Viswanathan
Sent: Thursday, November 07, 2013 1:56 PM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] CFmail issue with CF10

 

My responses in red

 

Jay Jayaraman
Central Billing Services
Financial Management and Planning
(404) 273-7131 (C)

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Charlie Arehart
Sent: Wednesday, November 06, 2013 9:23 PM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] CFmail issue with CF10

 

Are you saying that the CF9 and CF10 deployments are on the same box?

Yes.  Both deployments are in the same box

If not, the unreachable could be that there's some firewall on the smtp
server that is opened to the cf9 box and not the cf10, or something like
that. 

Both settings use the same Server name and port.  Does CF10 use any other
port to communicate with the smtp server other than the specified port (25)?

Also, are you referring to the CF Admin Mail page settings (as opposed to
code doing a CFMAIL, which can override that)?  Yes.  I also tried to
override with in cfmail with the same result.

if your focus is the Admin settings, then besides the address and port
fields, check out (on both servers) the other settings in the admin page.
Maybe some of the checkboxes are not in sync between the two. 

All the other settings were the same between CF9 and CF10.  Verified that.

Finally, are you seeing this message when you check the verify checkbox on
that page and submit it?

Error message Connection Verification Failed! when I check the Verify
checkbox and submit it

 

Or is this in your logs? 

When I try the CFMail tag with or without the hard-coded values of server
and port, The following error message is in the mail.log

javax.mail.MessagingException: Could not connect to SMTP host: host
address, port: 25;   nested exception is:
java.net.SocketException: Network is unreachable: connect  

 

If the latter, are you SURE it's coming from the CF Admin settings and not
some hard-coded values on CFMAIL tags within your server's apps?

Let us know how that goes.

 

/charlie




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] resetting admin password on CF10

[Charlie Arehart]

Troy, since you refer to passwordreset.bat, we know you're on Windows. So
did you run that by double-clicking on it as shown within Windows Explorer?
If so, there are two problems with that.

First, that would mean you didn't use run as administrator, which may be
very important, and an error may have reflected that. 

Second, though, by running it from within Windows Explorer like that, you
won't have seen if indeed there was an error or other response after the
command completed, because the temporary command prompt window that is
opened is closed after the bat file runs. It's always a good idea to avoid
running bat files from Windows Explorer if there's any chance they may have
output you need to see that's displayed after the bat file runs.

So try opening a command prompt yourself-and don't forget to do it by
right-clicking and choosing run as admin (or if you see an option in your
Start menu for CMD as Admin, choose that.) If you get an error reporting
java.io.FileNotFoundException: ..\lib\password.properties (Access is
denied), that confirms that you needed to run it as admin. (All this is
something I've been meaning to blog on, as they're easy mistakes to make.)

Let us know how it goes, and if indeed there still seems something else
amiss. That would be more fodder for the blog entry. :-)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of troy
Sent: Tuesday, November 05, 2013 10:28 AM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] resetting admin password on CF10

 

Charlie,

 

As it turns out, I was able to determine that the password had been
physically changed and I located the new password and was able to log in
successfully. So, while my initial problem is solved, it begs another
question about why the use of the passwordreset.bat file did not prove
effective. I used the process of resetting the password with this utility,
restarting both CF and WWW and the admin password still was not ever
altered. This seems a bit problematic to me but like I said, at least the
immediate problem is resolved.

 

I did read your links and will probably test that out on a development
environment as time allows.

 

Thanks for the info.

 

-Troy

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Charlie Arehart
Sent: Monday, November 04, 2013 8:07 PM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] resetting admin password on CF10

 

Troy, it Is true that when you add a new CF Admin user, even one with all
admin roles allowed, it does NOT give them the security roles, so only
that original Admin user can add a new user.

No, you say that after running the passwordreset you still can't get in, but
did you restart CF? You do need to, as that modified a file that is then
read during startup.

If you did do a restart, then I would propose something else could be at
issue. While the password reset does reset the password for that initial
admin user, it is possible (through other manual file modification) to
change that username to something else.  The following technote discusses
it, and though for CF8, the concept should still apply for CF10:

http://helpx.adobe.com/coldfusion/kb/coldfusion-8-change-root-administrator.
html


FWIW, I also discuss that and much more on the multi-user capability for the
CF Admin in an article I did for Adobe, listed on my articles page at:

http://www.carehart.org/articles/#2009_1

Let us know if any of that helps.

/charlie

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of troy
Sent: Monday, November 04, 2013 5:48 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] resetting admin password on CF10

 

I have encountered an issue on one of my production CF10 servers. I have
created a user for the CF Admin for use outside of the admin user.
However, I can no longer log in with the admin user and can not see any of
the user manager properties with my new user. 

 

I have tried resetting the password with the passwordreset.bat file located
in [coldfusionhome]\cfusion\bin and it does not resolve the issue.

 

Does anyone have any tricks on how to reset the admin password?

 

Thank you,

 

Troy Jones

Technical Manager

Third Wave Digital

1841 Hardeman Ave.

Macon, GA 31201

t...@thirdwavedigital.com

www.thirdwavedigital.com

 


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted

RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

[Charlie Arehart]

Wow, Ajas, the answer is that it's ABSOLUTELY NOT the case.  

When you get ANY release of CF, it DOES NOT come with all the updates. And
as for 9.0.1 specifically, there were 4 CHFs and many individual security
fixes since it was released. The same is true for all releases. 

FWIW, I addressed this issue you're raising in a 2010 blog entry (with more
detail):

CFMyths: When I download CF to install it from scratch, it has the latest
fixes/updaters
http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_inst
aller_includes_all_updates 

I do mention there where you can find the CHFs:
http://helpx.adobe.com/coldfusion/kb/hot-fixes-coldfusion-9.html. 

Of course, do be careful applying them, as things can break. I discuss that
at length here:

CF911: Are you finding CF (or CF Admin) busted after applying a hotfix? A
few possible reasons
http://www.carehart.org/blog/client/index.cfm/2011/10/21/why_chfs_may_break 

There is some good news for you, though, Ajas: if you do apply CF 9.0.1
CHF4, you will get all the individual, cumulative, AND security hotfixes at
once. That latter point is new in CF 901 CHF4, in that it includes security
updates. Previously, CHFs only included the previous hotfixes, not security
updates.  I realize that may sound great, but it can be a blessing and a
curse. For many people, when they apply all security updates, they find that
things do break. I discussed that as part of another entry:

CF911: New Adobe document about #ColdFusion security hotfixes: required
reading, I'd say
http://www.carehart.org/blog/client/index.cfm/2013/5/21/new_adobe_summary_of
_security_hotfix_tweaks 

I do realize that many folks, especially who don't spend much time in all
this stuff, can easily misunderstand things, which is of course why I write
the things I do, and in the depth I do.

Finally, with all due (and sincere) respect to Ajas, when someone of his
experience, so otherwise knowledgeable in the ways of CF administration
(judging from his emails here and elsewhere) asks such a question, we really
do have to shudder to think what the average developer/admin is assuming :-(


I guess that's partly why I'm so busy in my CF server troubleshooting! But
as you guys here see, I try (and try) to point out resources to help people
avoid such problems and misconceptions.at least for those with the temerity
to read more than a paragraph! :-)  Fortunately Ajas has always been up to
the challenge, so I trust both that he will have read to this point, and
that he will take the information to hear (and accept my comment of the last
paragraph in the spirit intended). 

More than that, I trust that he will now help others who may ever raise this
same question. Hope others may get a chance to do the same. We're all in
this together. :-)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Wednesday, November 06, 2013 3:35 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

 

In terms of security, for CF 9.0.1, do I need to install anything like
hotfixes  patches? I thought everything was included in the 9.0.1 updates,
is that not the case?

Can someone point me to link for hotfixes  security patches for CF 9.0.1.

Thanks,




Ajas Mohammed /  

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

[Charlie Arehart]

Ajas, that was so with IIS 6 but no longer so with IIS 7 (particularly
without running in IIS 6 compat mode, as you indicated). In IIS 7, the
settings no longer propagate to newly added sites. You do have to run the
wsconfig tool to either do a remove/re-add of all sites, or you can
individually connect the new sites to CF (as you did). And in that case, it
WOULD create a new folder under wsconfig, as that is one per connection
between IIS (one or all sites) and CF. 

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Monday, November 04, 2013 5:35 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

 




We have brand new servers with CF 9.0.1 Windows 2008 R2 IIS 7 (removed IIS 6
comptability from IIS before install).

After the CF 9.0.1 installation, I believe I had to run wsconfig the first
time to configure connectors for ALL IIS 7 sites. All was perfect. 

Recently, 2 new sites were added and I had to run wsconfig tool again. I was
under the impression that any new site will take the settings from default
site which was set properly for IIS 7.

Anyway, after running wsconfig for these new 2 sites, now I have folders
1,2,3 under D:\ColdFusion9\runtime\lib\wsconfig which surprised me.

Is this normal? also why these 2 sites didnt go under folder 1 like other
sites?

Thanks,

Ajas.

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] resetting admin password on CF10

[Charlie Arehart]

Troy, it Is true that when you add a new CF Admin user, even one with all
admin roles allowed, it does NOT give them the security roles, so only
that original Admin user can add a new user.

No, you say that after running the passwordreset you still can't get in, but
did you restart CF? You do need to, as that modified a file that is then
read during startup.

If you did do a restart, then I would propose something else could be at
issue. While the password reset does reset the password for that initial
admin user, it is possible (through other manual file modification) to
change that username to something else.  The following technote discusses
it, and though for CF8, the concept should still apply for CF10:

http://helpx.adobe.com/coldfusion/kb/coldfusion-8-change-root-administrator.
html


FWIW, I also discuss that and much more on the multi-user capability for the
CF Admin in an article I did for Adobe, listed on my articles page at:

http://www.carehart.org/articles/#2009_1

Let us know if any of that helps.

/charlie



From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of troy
Sent: Monday, November 04, 2013 5:48 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] resetting admin password on CF10

 

I have encountered an issue on one of my production CF10 servers. I have
created a user for the CF Admin for use outside of the admin user.
However, I can no longer log in with the admin user and can not see any of
the user manager properties with my new user. 

 

I have tried resetting the password with the passwordreset.bat file located
in [coldfusionhome]\cfusion\bin and it does not resolve the issue.

 

Does anyone have any tricks on how to reset the admin password?

 

Thank you,

 

Troy Jones

Technical Manager

Third Wave Digital

1841 Hardeman Ave.

Macon, GA 31201

t...@thirdwavedigital.com

www.thirdwavedigital.com

 


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CFLDAP oddity

[Charlie Arehart]

Rob, while it could be hacking, I'd propose that it could be that
spiders/bots or other automated request agents (including possibly your own
monitoring or load balancing pings to CF pages) could be the cause of that
unexpectedly high rate of requests.

I realize you would think that your access logs would have shown that, but
still another possibility is that you may have requests running against CF
that may not be showing up in that web server log you are looking at. It may
be that you have more than one site causing requests to go to that code, and
it may be that you are not looking at that site's logs (assuming that it
can't be any but the site you assumed), or it could also be that such an
other site may not be doing any access logging at all.

If this is CF10, here's another possibility: CF10 includes it's own access
logs tracking every request that runs against CF, regardless of what site
it's coming from (in your external web server). See the
[cf10]\[instance]\runtime\logs (not the logs dir under the instance). CF9
does not have such an access log of its own.

Similarly, if you have FusionReactor, it also logs every request (in any
release of CF, Railo, etc.) and could help you see if requests are getting
to the page/application doing the CFLDAP.

I've seen situations like yours where it was in fact caused by spiders/bots
or other automated requests. And the number of LDAP  calls was exactly equal
to the number of such requests. Someone may say, in that case, but we see
the CFLDAP call being made in the onsessionstart method of application.cfc
(or code in application.cfm that is only run if a new session is created),
and we would think therefore that the CFLDAP call should be made only once
per many requests from a user. But this is where people  are often burned
(and shocked to learn) that EVERY page request from such automated requests
will typically create a new session and run such code, that you thought was
only run once per session, instead on every request.

Let us know if that helps.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of John Mason
Sent: Monday, November 04, 2013 6:53 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CFLDAP oddity

 

That sounds like a possible hacking attempt. I would look through your logs
and see if someone is exploiting something in your coding. There's nothing
inherent in the tag that would cause this.

John
ma...@fusionlink.com


On 11/4/13 6:01 PM, Rob Saxon wrote:

CF gurus,

 

Our LDAP administrator informed us that our online directory application was
making 17000 thousand connection requests to the LDAP server in the course
of a few hours. Our web logs show that, at most, about 800 requests were
made during that time.  Is there something about the CFLDAP tag that would
suddenly generate that kind of traffic?

 

Thanks,

Rob

 

---
Rob Saxon
Director
Web Management
Mercer University
478-301-5550

 


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 

 


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

[Charlie Arehart]

Thanks for the kind regards. As for your question, that's something I've
always wondered myself. :-)

In fact, you will see that on the Adobe blog entry about that
maxworkerthreads bug (from a few years ago) that I had asked this question
specifically, and I never got an answer. I always wanted to test it, but
never got around to it. 

If you may do some testing determine it, please do let us know. To quote
Dances with Wolves, I'd consider that a good trade. :-)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Monday, November 04, 2013 10:53 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

 

Thank you sir. You are the best!!!.

 

Do you see any issues with these separate folders? Plus what about the whole
logic about concurrent requests and IIS bug? In this case without the fix
(maxworkerthreads=25) and default worker process (1) and seperate
application pools for all sites plus 2nd folder and 3 folder as well, does
it mean this 

 

1. 25 default setting for concurrent req (bug) x for all sites and 25 x for
2nd folder and 25 x for 3rd folder = 75

 or

2. 25 max requests for all sites , 2nd folder site, 3 folder site = 25 max
requests overall 

 

Thanks,




Ajas Mohammed /  

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

[Charlie Arehart]

You will continue to see it using jrun_iis6_wildcard. That's not incorrect
(but potentially confusing, yes).

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Tuesday, November 05, 2013 12:01 AM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

 

Again thanks. I think I am guessing that the correct answer to this is 75
because of different application pools. I could be wrong though, like you
said better to do practical test and figure out what happens.

 

One thing I found which is weird I have jrun_iis6_wildcard instead of
jrun_iis7_wildcard, this is really surprising to me. We had iis6
comparability initially and then removed it and re installed cf 9.0.1  ran
connector again for all sites.

 

Thanks,




Ajas Mohammed / 

iUseDropbox( http://db.tt/63Lvone9 http://db.tt/63Lvone9) 
http://ajashadi.blogspot.com
We cannot become what we need to be, remaining what we are.
No matter what, find a way. Because thats what winners do.
You can't improve what you don't measure.
Quality is never an accident; it is always the result of high intention,
sincere effort, intelligent direction and skillful execution; it represents
the wise choice of many alternatives.

 

On Mon, Nov 4, 2013 at 11:42 PM, Charlie Arehart char...@carehart.org
wrote:

Thanks for the kind regards. As for your question, that's something I've
always wondered myself. :-)

In fact, you will see that on the Adobe blog entry about that
maxworkerthreads bug (from a few years ago) that I had asked this question
specifically, and I never got an answer. I always wanted to test it, but
never got around to it. 

If you may do some testing determine it, please do let us know. To quote
Dances with Wolves, I'd consider that a good trade. :-)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Monday, November 04, 2013 10:53 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7

 

Thank you sir. You are the best!!!.

 

Do you see any issues with these separate folders? Plus what about the whole
logic about concurrent requests and IIS bug? In this case without the fix
(maxworkerthreads=25) and default worker process (1) and seperate
application pools for all sites plus 2nd folder and 3 folder as well, does
it mean this 

 

1. 25 default setting for concurrent req (bug) x for all sites and 25 x for
2nd folder and 25 x for 3rd folder = 75

 or

2. 25 max requests for all sites , 2nd folder site, 3 folder site = 25 max
requests overall 

 

Thanks,




Ajas Mohammed /  

 

 

- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CF 10 webservice complex type within complex type

[Charlie Arehart]

I often see people trying to make XML processing work in one way when there
are far better ways, just not well understood. I would always recommend to
anyone doing XML processing in CFML that they take 30 minutes to look over
what I think is a classic on this topic, by Nate Weiss, Utilizing XML and
XSLT in ColdFusion MX. It's from the CF6 timeframe, but still mostly
applies now just as it did then. 

Sadly, the PDF is often hard to find on the web, so I posted it on my own
site. I point to it (and other useful XML resources) at a blog entry I did:

http://www.carehart.org/blog/client/index.cfm/2011/5/10/where_to_learn_CFMLs
_XML_capabilities

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Tuesday, September 17, 2013 1:06 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CF 10 webservice complex type within complex
type

 

Ok makes sense. I was checking it the wrong way, i.e. isArray(benefits[1])
which is wrong. Per your code, it should be #isArray(benefits)#

Thanks a lot. 




Ajas Mohammed /  

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CF 9.0 64 bit on IIS 7.5 Windows 2008 R2 SP1

[Charlie Arehart]

Ajas, do you realize that CF 9.0 does not support running on IIS 7? You can
maybe finagle it, as blog entries like this show, but you're trying to force
a shoe that doesn't fit. Why not just update to 9.0.1, which does add IIS 7
support?

As for why things are not working as is, since you have to make various
tweaks to get CF 9.0 to work on IIS 7, it could be anything you may have
tried in working through different people's suggestions. Trying to sort
out what's amiss at this point by email would seem difficult.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Wednesday, September 04, 2013 1:59 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] CF 9.0 64 bit on IIS 7.5 Windows 2008 R2 SP1

 

Hi,

I have an issue with CF 9.0 (yes 9.0 and not 9.0.1 or 9.0.2) 64 bit
installation. Before the CF 9 64 bit install, http://localhost works fine as
in IIS start page shows up fine and any html page shows up fine.

After I install CF 9 64 bit in server configuration (E:\ColdFusion9  wwroot
also on E drive), the installer works fine until the final step which tries
to open the administrator http://127.0.0.1/CFIDE/administrator/index.cfm .
After this the http://localhost or http://localhost/iisstart.htm doesnt
work. After Basically, *.cfm and *.htm or *.html also stop working. 

The handler for request path ( * ) points to
E:\ColdFusion9\runtime\lib\wsconfig\1\jrun_iis6_wildcard.dll and handler for
request path ( *.cfm ) points to
E:\ColdFusion9\runtime\lib\wsconfig\jrun_iis6.dll

I found several results on google search and pretty much tried everything (
as in making sure IIS roles that are needed are installed and so on). Can
anyone suggest what I might be missing here?

I have already tried to uninstall and reinstall again but it didnt help.

 

Helpful links I found :
http://www.codecurry.com/2009/09/installing-coldfusion-on-iis-7.html
http://coldfusioner.blogspot.com/2011/12/fix-number-1-installing-64-bit.html

Error Summary


HTTP Error 500.0 - Internal Server Error


The page cannot be displayed because an internal server error has occurred.


Detailed Error Information


Module

IsapiModule


Notification

ExecuteRequestHandler


Handler

AboMapperCustom-13593


Error Code

0x800700c1


Requested URL

http://127.0.0.1:80/CFIDE/administrator/index.cfm


Physical Path

E:\inetpub\wwwroot\CFIDE\administrator\index.cfm


Logon Method

Anonymous


Logon User

Anonymous

 

Ajas Mohammed / 

iUseDropbox( http://db.tt/63Lvone9 http://db.tt/63Lvone9) 
http://ajashadi.blogspot.com
We cannot become what we need to be, remaining what we are.
No matter what, find a way. Because thats what winners do.
You can't improve what you don't measure.
Quality is never an accident; it is always the result of high intention,
sincere effort, intelligent direction and skillful execution; it represents
the wise choice of many alternatives.




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] ColdFusion Builder freezes abruptly

[Charlie Arehart]

Worth a try.

but note also: if you just do a “switch workspace” (in the menu) you may find 
the freezes stop, too. Of course, that gives you a new blank workspace. You 
need to re-import projects and other stuff. But sometimes that sort of reset 
fixes something. Note that you can always switch back to your previous 
workspace, to either review what had been set there, or just to go back if 
setting up  a new one is too painful.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Chris
Sent: Tuesday, September 03, 2013 12:34 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] ColdFusion Builder freezes abruptly

 

Thanks Charlie:

This is very useful. I should switch to the CF Express edition and see if those 
freezes stop.

 

 

  _  

From: Charlie Arehart char...@carehart.org
To: discussion@acfug.org 
Sent: Saturday, August 24, 2013 3:43 PM
Subject: RE: [ACFUG Discuss] ColdFusion Builder freezes abruptly

 

Well, start by looking at the list of what features ARE only in the paid 
edition:

http://cfdocyard.blogspot.com/2011/05/coldfusion-builder-express-edition-free.html

How many of those do you (I mean, “you all”, rhetorically) use?

One may go down the list and say “well, only a few of the 14 listed paid-only 
features seem interesting to me”.

OK, but so many people using CFB never setup a server connection (or don’t get 
it working right), whether it’s a remote server or even just their local 
development server. Perhaps half the real benefits of CFB (over other editors) 
are related to its getting info from the CF server, whether about code insight 
to access CFC methods and db tables/cols, as well as files that are accessible 
only using admin mappings, and so on. 

Then many other features are only really helpful if they can have access to all 
files on the server, not just necessarily those in a specific project, like the 
code hyperlinking (where you ctrl-hover over a file and it opens, which only 
works for files in the current directory or web-relative paths if you don’t 
have a server connection), the refactoring and quick-fix features, searching 
files on the server, the log viewing (viewing logs on the server within the 
IDE, using the Tail View), and more. 

Then there’s also the step debugger (but I know some will never use one, or 
many struggle to get it to work, because again it requires connection to the 
server, even if that’s “local”).

There are more, but you asked for “some”. Since you asked, Scott, are any of 
those things that you feel you have missed, or that others you see using it may 
have? :-)

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Scott Dowling
Sent: Friday, August 23, 2013 11:28 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] ColdFusion Builder freezes abruptly

 

Charlie,

 

Mind pointing out some of the over looked features in the pay version?




 

Scott Dowling
(615) 260-9549

 

 

On Fri, Aug 23, 2013 at 10:42 PM, Charlie Arehart char...@carehart.org wrote:

I didn’t see anyone mention it: Troy, did you know CFBuilder has a free 
edition? It’s called CFBuilder Express. While it withholds things from the paid 
version, I find that many people never ever use a lot of those things so won’t 
miss them. That said, it’s a shame that so many do miss those features. They’re 
what make CFB standout as a true IDE as compared to other editors. 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of troy
Sent: Friday, August 16, 2013 9:36 AM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] ColdFusion Builder freezes abruptly

 

That’s been my experience with it for the most part as well, Cameron. I used CF 
Builder 2 for some time at my last job and just found that there were too many 
“foibles” to want to invest in it when moving to my current job. I am back to 
using the free IDE that I started with many years ago that has a few problems, 
but it’s free.

 

That said, I’d love to see the product become more reliable and more reasonably 
priced as I’d consider using it again with those caveats.

 

Thank you,

 

Troy Jones

 

- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 
http://www.acfug.org/?fa=login.edituserform  

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com/  
- 

 


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 
http://www.acfug.org/?fa=login.edituserform  

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com

RE: [ACFUG Discuss] Unable to invoke CFC error when the Flex part tries to call a CFC

[Charlie Arehart]

Also, what's the significance of the 5 minutes? Is that perhaps your CF
(or application's) session timeout? Is it the time that IIS's app pool is
set to recycle? Either may be a clue to help you dig further. 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Cameron
Childress
Sent: Tuesday, September 03, 2013 12:59 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] Unable to invoke CFC error when the Flex part
tries to call a CFC

 

On Tue, Sep 3, 2013 at 12:44 PM, Chris  wrote:

The error message is 
Unable to invoke CFC An error operation occurred when performing a file
operation write on
C:\inetpub\wwwroot\clients\ourdomainname\www\projectname\www\connectors\deb
ug.html

What could be causing this error? How can I drill down to the cause?

 

My first guess would be either CF does not have write permissions for that
folder or it does not exist. Are you using Charles or some other proxy to
observe the full error? That may give you more detail.

 

-Cameron

 

-- 
Cameron Childress
--
p:   678.637.5072

im: cameroncf

facebook http://www.facebook.com/cameroncf  | twitter
http://twitter.com/cameronc  | google+
https://profiles.google.com/u/0/117829379451708140985 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] Unable to invoke CFC error when the Flex part tries to call a CFC

[Charlie Arehart]

I'll save Cameron (or others) from a reply. :-) Charles is not something
they can disallow. :-) It's not a server proxy, but rather a client one.
You can use it (and tools like it, including some built into browsers) to
track the requests made from a given web page, whether to components like
images, js, and css or those made via Ajax or Flash Remoting, as Flex may
do.

I have a blog entry with more on the concept and such tools:

http://www.carehart.org/blog/client/index.cfm/2012/3/20/builtin_browser_prox
y_sniffer_tools

And as I mention there, I have a list of such tools here:

http://www.cf411.com/proxy

And I also point to a classic article on why they are so useful. I'd argue
that every web developer or troubleshooter should know how to use at least
one of them, even if only that built-into their favored browser.

Whether it will help for this particular problem of yours, Chris, is another
question altogether. :-) But it could help give clues.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Chris
Sent: Tuesday, September 03, 2013 2:28 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] Unable to invoke CFC error when the Flex part
tries to call a CFC

 

Thanks Cameron:

The folder exists and CF has write permissions for it. Else, the error would
be occurring all the time and we could not use the system at all. Right now,
it occurs after the system is used for a while(after 10-15 minutes and
sometimes after 30-45 minutes), then if people stop using it for 5 minutes
or so, the error disappears.

Our serveradmin might know if a proxy like Charles is allowed by the hosting
company, but I do not.

 

 

  _  

From: Cameron Childress camer...@gmail.com
To: discussion@acfug.org 
Sent: Tuesday, September 3, 2013 12:59 PM
Subject: Re: [ACFUG Discuss] Unable to invoke CFC error when the Flex part
tries to call a CFC

 

On Tue, Sep 3, 2013 at 12:44 PM, Chris  wrote:

The error message is 
Unable to invoke CFC An error operation occurred when performing a file
operation write on
C:\inetpub\wwwroot\clients\ourdomainname\www\projectname\www\connectors\deb
ug.html

What could be causing this error? How can I drill down to the cause?

 

My first guess would be either CF does not have write permissions for that
folder or it does not exist. Are you using Charles or some other proxy to
observe the full error? That may give you more detail.

 

-Cameron

 

-- 
Cameron Childress
--
p:   678.637.5072

im: cameroncf

facebook http://www.facebook.com/cameroncf  | twitter
http://twitter.com/cameronc  | google+
https://profiles.google.com/u/0/117829379451708140985 

 

 


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] Unable to invoke CFC error when the Flex part tries to call a CFC

[Charlie Arehart]

OK. But the “5 minutes” you mention sounds intriguing, so do keep thinking 
about that. 

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Chris
Sent: Tuesday, September 03, 2013 2:34 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] Unable to invoke CFC error when the Flex part 
tries to call a CFC

 

Thanks Charlie:

I don't know the time at which IIS app pool is set to recycle, but the CF 
session timeout is 16 hours(sessiontimeout=#CreateTimeSpan(0,16,0,0)# 
applicationtimeout=#CreateTimeSpan(0,16,0,0)#)

 

I will have to ask our server admin(who in turn has to ask the server admins of 
the hosting company) to check the IIS app pool time. 

 




-

To unsubscribe from this list, manage your profile @ 

http://www.acfug.org?fa=login.edituserform



For more info, see http://www.acfug.org/mailinglists

Archive @ http://www.mail-archive.com/discussion%40acfug.org/

List hosted by http://www.fusionlink.com

-

RE: [ACFUG Discuss] Unable to invoke CFC error when the Flex part tries to call a CFC

[Charlie Arehart]

Glad to help. 

And FWIW, Charles is not the only one that can analyze flex/flash remoting/AMF 
calls, as I mention on my list. But your problem may or may not be about that 
so much as perhaps something else in the formation of the request being sent to 
the server, and it may not be about AMF. Just sayin’. But Charles may tell all. 

Let us know what you find out.

/charlie



From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Chris
Sent: Tuesday, September 03, 2013 5:32 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] Unable to invoke CFC error when the Flex part 
tries to call a CFC

 

Thanks Charlie:

I need to know lot more. I have not used Charles which is a tool most Flex 
developers are fluent with. 

Your blog and list of tools are a goldmine for people like me.

I will try Charles and see if it can point me to areas I need to focus on.

 




-

To unsubscribe from this list, manage your profile @ 

http://www.acfug.org?fa=login.edituserform



For more info, see http://www.acfug.org/mailinglists

Archive @ http://www.mail-archive.com/discussion%40acfug.org/

List hosted by http://www.fusionlink.com

-

RE: [ACFUG Discuss] ColdFusion Builder freezes abruptly

[Charlie Arehart]

Well, start by looking at the list of what features ARE only in the paid
edition:

http://cfdocyard.blogspot.com/2011/05/coldfusion-builder-express-edition-fre
e.html

How many of those do you (I mean, you all, rhetorically) use?

One may go down the list and say well, only a few of the 14 listed
paid-only features seem interesting to me.

OK, but so many people using CFB never setup a server connection (or don't
get it working right), whether it's a remote server or even just their local
development server. Perhaps half the real benefits of CFB (over other
editors) are related to its getting info from the CF server, whether about
code insight to access CFC methods and db tables/cols, as well as files that
are accessible only using admin mappings, and so on. 

Then many other features are only really helpful if they can have access to
all files on the server, not just necessarily those in a specific project,
like the code hyperlinking (where you ctrl-hover over a file and it opens,
which only works for files in the current directory or web-relative paths if
you don't have a server connection), the refactoring and quick-fix features,
searching files on the server, the log viewing (viewing logs on the server
within the IDE, using the Tail View), and more. 

Then there's also the step debugger (but I know some will never use one, or
many struggle to get it to work, because again it requires connection to the
server, even if that's local).

There are more, but you asked for some. Since you asked, Scott, are any of
those things that you feel you have missed, or that others you see using it
may have? :-)

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Scott Dowling
Sent: Friday, August 23, 2013 11:28 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] ColdFusion Builder freezes abruptly

 

Charlie,

 

Mind pointing out some of the over looked features in the pay version?




 

Scott Dowling
(615) 260-9549

 

 

On Fri, Aug 23, 2013 at 10:42 PM, Charlie Arehart char...@carehart.org
wrote:

I didn't see anyone mention it: Troy, did you know CFBuilder has a free
edition? It's called CFBuilder Express. While it withholds things from the
paid version, I find that many people never ever use a lot of those things
so won't miss them. That said, it's a shame that so many do miss those
features. They're what make CFB standout as a true IDE as compared to other
editors. 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of troy
Sent: Friday, August 16, 2013 9:36 AM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] ColdFusion Builder freezes abruptly

 

That's been my experience with it for the most part as well, Cameron. I used
CF Builder 2 for some time at my last job and just found that there were too
many foibles to want to invest in it when moving to my current job. I am
back to using the free IDE that I started with many years ago that has a few
problems, but it's free.

 

That said, I'd love to see the product become more reliable and more
reasonably priced as I'd consider using it again with those caveats.

 

Thank you,

 

Troy Jones

 

- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] ATL Code Camp

[Charlie Arehart]

Thanks for that heads-up, Doug. I'd missed news of it, even attending some
recent MS user groups, sadly. There are at least a couple of interesting
topics. Thanks.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Douglas Knudsen
Sent: Tuesday, August 20, 2013 8:36 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] ATL Code Camp

 

Hey, this is happening this Saturday.  Its cheap and packed full of some
gems.  

 

http://www.atlantacodecamp.org/2013/

 




Douglas Knudsen
http://www.cubicleman.com
this is my signature, like it?




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CF 10 and REST and wtf?

[Charlie Arehart]

Thanks, Bill.  Thankfully, we have many anchors-and indeed buoys,
lighthouses, and radars, if I can stretch the analogy-- both in the wider CF
world and in the ACFUG specifically. :-) I've learned from so many of them,
and I acknowledged as much in my prefatory remarks of the CF10 WACK book. 

We are all so very privileged to be in such a great, giving community. I
know a lot of people want to regard it as fading. I see it as still pretty
vibrant. 

But then I am old, nostalgic, and need reading classes these days, so
perhaps how I see things may not really mean as much to some as it used
to. ;-)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Bill Brock
Sent: Tuesday, August 20, 2013 5:37 PM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] CF 10 and REST and wtf?

 

Ah, for what it's worth, ditto on Ajas's comment - I like your reference
librarian comment - does fit.  J

 

In all seriousness, you are a great anchor resource for the community, and
you do deserve the thanks.


Bill




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CF 10 and REST and wtf?

[Charlie Arehart]

Thanks for the kind regards, Ajas. I do feel a bit like the reference
librarian for the CF community sometimes. :-)

I think it's just that since CF server troubleshooting is all I do, I just
have these topics at top of mind, whereas for many they have to rely on what
they can google. Sadly, a lot of misinformation is then spread that way, and
it's too bad that sometimes I can come off to some as arrogant and
condescending in trying to correct some of those misperceptions or
misunderstandings. 

That's probably the negative to my being in this position, and though I try
hard not to abuse it or offend others, it seems to just kind of come with
the territory. And I can only hope then that I help far more than I hurt.
:-)  So thanks again for the encouragement. Some may think you're feeding
the monster, but I will accept it simply in the genuine appreciation with
which you meant it. :-)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Monday, August 19, 2013 1:42 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CF 10 and REST and wtf?

 

Wow, Great Points Charlie. We are not on CF 10 yet but that is definitely
worth remembering.

What would we do without you Charlie? I hate to speak for others, but from
my side,  I have learned so many *great/cool* things from you. Appreciate it
man.

Ajas Mohammed / 

iUseDropbox( http://db.tt/63Lvone9 http://db.tt/63Lvone9) 
http://ajashadi.blogspot.com
We cannot become what we need to be, remaining what we are.
No matter what, find a way. Because thats what winners do.
You can't improve what you don't measure.
Quality is never an accident; it is always the result of high intention,
sincere effort, intelligent direction and skillful execution; it represents
the wise choice of many alternatives.

 

On Sun, Aug 18, 2013 at 10:27 PM, Charlie Arehart char...@carehart.org
wrote:

Doug, here's something even some experienced hoster's don't know: after
installing CF10, and/or adding updates, for many of the updates you need to
then rebuild the web server connector (meaning they have to open CF's web
server config tool, then remove and re-add the connection of a site or all
sites to a CF instance.) Only on doing that do they get the benefit of some
connector changes that were introduced in a few of the updates (of the 11
updates to CF 10 so far since last May).

This is mentioned pretty clearly in the update page, but most people in my
experience are just missing/ignoring it, and they just apply the update and
never rebuild the connectors. They can confirm if they have by checking the
date of that very isapi_redirect.dll page. If it's dates in March of 2012,
or November of 2012, it's old. If it's June of 2013, it's as of update 11.
If they are not yet on update 11, but it's dated in March, they need to
update to at least update 5 and then rebuild the connector, to solve some
pretty serious problems that update 5 addressed (last year).

Now, I don't know if any of these updates that change the connector will
solve your specific REST problem, but if indeed there is some related
problem with the connector itself, then it's worth a shot. (I don't work
with REST myself, so don't know how to connect any other dots based on what
you've reported previously.)

/charlie 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CF 10 and REST and wtf?

[Charlie Arehart]

Doug, here's something even some experienced hoster's don't know: after
installing CF10, and/or adding updates, for many of the updates you need to
then rebuild the web server connector (meaning they have to open CF's web
server config tool, then remove and re-add the connection of a site or all
sites to a CF instance.) Only on doing that do they get the benefit of some
connector changes that were introduced in a few of the updates (of the 11
updates to CF 10 so far since last May).

This is mentioned pretty clearly in the update page, but most people in my
experience are just missing/ignoring it, and they just apply the update and
never rebuild the connectors. They can confirm if they have by checking the
date of that very isapi_redirect.dll page. If it's dates in March of 2012,
or November of 2012, it's old. If it's June of 2013, it's as of update 11.
If they are not yet on update 11, but it's dated in March, they need to
update to at least update 5 and then rebuild the connector, to solve some
pretty serious problems that update 5 addressed (last year).

Now, I don't know if any of these updates that change the connector will
solve your specific REST problem, but if indeed there is some related
problem with the connector itself, then it's worth a shot. (I don't work
with REST myself, so don't know how to connect any other dots based on what
you've reported previously.)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Douglas Knudsen
Sent: Sunday, August 18, 2013 10:16 AM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CF 10 and REST and wtf?

 

WEll, no solution still on this.  Hostek moved the site to a different
newer server, the hands in the air we already rebooted solution.  Still
same behavior.  The REST service cranks up, but then dies out within 24
hours.  C:\ColdFusion10\config\wsconfig\1\isapi_redirect.dll is in the
error page from IIS, almost makes me think the connectors are at fault.  But
then, I've been away from admining CF for too long.  Might ask Hostek to try
out using a Linux server instead...

 

DK




Douglas Knudsen
http://www.cubicleman.com
this is my signature, like it?

 

On Fri, Aug 9, 2013 at 9:03 AM, Douglas Knudsen douglasknud...@gmail.com
wrote:

righto Bill, thanks.  That Adam Tuttle was the author of Taffy, eh?  Anyway,
I do have a call to restInitApplication(); inside the main application.cfc
which houses the index.cfm. I also have a simple CFM with the call in it
just to be sure in my testing.  Once this is called, about 50% of the time,
my issue goes awaybut then returns within 24 hours.  The host is
befuddled of course :)  how I wish this simple client still used fusionlink!


 

DK




Douglas Knudsen
http://www.cubicleman.com
this is my signature, like it?

 

On Fri, Aug 9, 2013 at 1:48 AM, Bill Beers bbe...@beersconsulting.com
wrote:

Doug,

 

Not sure if this is related to your issue, but I read at the following link
about having to refresh the rest services.

 

http://www.anujgakhar.com/2012/02/20/using-rest-services-in-coldfusion-10/

 

Look at the discussion below the blog post.  I am about to begin a REST
project so I am interested in your results.  Although, in my project, I have
access to the CFAdmin.

 

Regards,

 

Bill Beers

bbe...@beersconsulting.com

 

 

 

 

 

 

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Douglas Knudsen
Sent: Thursday, August 08, 2013 3:57 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CF 10 and REST and wtf?

 

so far no luck.  Host just reset things but problem came back after
another day.  I get one of these IIS 500 pages
https://app.box.com/s/5iarseihfwzxdnqn6ecs  

 

The CFC I have setup is real basic for testing this issue, it should 'just
work!'   

 

something like this

 

component restpath=/works rest=true {

 

remote any function getAll() httpMethod=GET
produces=application/json{

 

  return {foo:42};

 

}

 

}




Douglas Knudsen
http://www.cubicleman.com
this is my signature, like it?

 

On Tue, Aug 6, 2013 at 10:56 AM, Ajas Mohammed ajash...@gmail.com wrote:

Douglas,

Any luck on this? You said it never fails on local server so I guess someone
(haha me) testing it locally for you wont help.

Let us know what you find. :-)




Ajas Mohammed / 

iUseDropbox( http://db.tt/63Lvone9 http://db.tt/63Lvone9) 
http://ajashadi.blogspot.com
We cannot become what we need to be, remaining what we are.
No matter what, find a way. Because thats what winners do.
You can't improve what you don't measure.
Quality is never an accident; it is always the result of high intention,
sincere effort, intelligent direction and skillful execution; it represents
the wise choice of many alternatives.

 

On Mon, Aug 5, 2013 at 2:57 PM, Douglas Knudsen douglasknud...@gmail.com
wrote:

tooling around a wee bit on something old and re-working a site with Angular
+ Bootstrap...its fun.  So I figured I'd make use of the fancy new REST
stuff in CF10. 

RE: [ACFUG Discuss] ColdFusion Builder freezes abruptly

[Charlie Arehart]

Sorry, I was in a hurry when I wrote. I meant windowshow 
viewothergeneralprogress.

Anyway, even without a connection to the sever,  the progress view may be 
useful to understand background processing in CFB (and Eclipse).

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Chris
Sent: Friday, August 09, 2013 6:25 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] ColdFusion Builder freezes abruptly

 

Thanks Charlie:

Yes, some times tools can be like a difficult child.

I don't see the progress view in windowpreferencesgeneralprogress. CFB is 
not connected to a server. I maintain an application in CF, Flex and MySQL. CF 
is the middle tier and Flex part uses the CFC to interact with the MySQL using 
Flash remoting.

I appreciate your assistance and time.




-

To unsubscribe from this list, manage your profile @ 

http://www.acfug.org?fa=login.edituserform



For more info, see http://www.acfug.org/mailinglists

Archive @ http://www.mail-archive.com/discussion%40acfug.org/

List hosted by http://www.fusionlink.com

-

RE: [ACFUG Discuss] ColdFusion Builder freezes abruptly

[Charlie Arehart]

Thanks for your kind regards, Chris. And isn’t it funny how troubling software 
can sometimes be like a petulant child: just when you starting watch it, it 
tends not to act up. :-) 

But patience, grasshopper. Yep, let’s see how it goes over time. Also, turn on 
the progress view (windowpreferencesgeneralprogress), to view background 
communications between CFB and CF (if you have connected any projects to a 
server). That too can be insightful, and perhaps your issues are only under 
certain forms of communications between the two.

As for other plugins, I would not immediately suspect that myself, no. I mean, 
aren’t those the ones that are built-into CFB? Everyone would be using them, 
and I promise not everybody has problems with CFB being resource hungry. As 
always, there is some explanation. You just need to find it. Hope the above 
(and below) will help.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Chris
Sent: Friday, August 09, 2013 12:51 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] ColdFusion Builder freezes abruptly

 

Charlie,

Thanks for your advice.

I turned on the heap monitor and it has not crashed since then. Heap size is 
139M of total: 248M max: 495M mark:none . On doing garbage collection it 
drops to 64M of 248M 
If CF builder freezes again due to excess memory usage, I will increase the 
heap size.

But, under Window-preferences-general-Startup and shutdown I see all plugins 
in that window are activated at start-up

Coldfusion SQL Plugin
Appcode generation plug-in
...
...

Aptana scripting
Automatic updates scheduler

Could the fact that so many plug-ins are activated be causing CF builder to 
freeze? Also, I use Flash Builder 4.5(but that does not freeze often) lot of 
times along with CF builder. I understand some people have commented that 
Eclipse based IDEs are resource hungry even though my system was 8GB RAM

I appreciate your prompt response and time. 

 




-

To unsubscribe from this list, manage your profile @ 

http://www.acfug.org?fa=login.edituserform



For more info, see http://www.acfug.org/mailinglists

Archive @ http://www.mail-archive.com/discussion%40acfug.org/

List hosted by http://www.fusionlink.com

-

RE: [ACFUG Discuss] Out of Memory?!?

[Charlie Arehart]

Good to hear. (Well, that's a sad part of my business: sometimes it helps
to have another failure, but if it's new info that confirms or denies
something, at least it's an advancement to the solution.) 

As for your question, FR is mainly a monitor of CF (or whatever java based
server process you install it into, whether a CFML server like CF, Railo, or
Open BlueDragon, or a java servlet engine/jee server like jboss, tomcat,
jetty, resin, etc.).

Now, it also happens to watch the system-wide CPU, in addition to that
within the instance, but that's all that it watches outside the instance
it monitors.

Of course, I don't want to short-change FR. I love it and work with it
almost daily, and help people use it to solve problems that may have plagued
them for years. But that's the frank answer (pardon the pun) to your
question.

/charlie



From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Frank Moorman
Sent: Friday, August 09, 2013 2:38 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] Out of Memory?!?

 

Thanks all for the insight...

And just as Charlie predicted, the event happened again without tripping the
alert.

One benefit, even though I was not actively watching what happened, I did
have the server monitor running. The event happened when the server was only
using 440MB, with 1.2GB free in the jvm allocation. So it definitely is not
a memory issue. (It also happened in between GC cycles, so that isn't the
issue either.) 

As for the possibility of the CPU, I won't discount this, but I doubt it
would be from CF. We do use CFDocument/CFPDF which I know grab resources,
but normally those pages are during the morning, and it actually happened
twice last night at a time when I would not expect it.

I'll have to gather more information. I'm starting to think that the cause
may be outside CF. I'm going to try to look at all the system logs and try
to piece together exactly what was happening at the time of the event.

Another question though...  Fusion Reactor monitors the entire system, not
just CF right? (i.e. it can track running system processes, not just what CF
is doing) If this is true, this may be the next step if my efforts are
fruitless. 

Thanks,
Frank




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] Out of Memory?!?

[Charlie Arehart]

Like you, I would think this is not memory related. I think that's just a
really old error message, from the days when even the then Macromedia
engineers could only throw up their hands and guess when something was
amiss.

I recently saw this error message happening for a client where we found
(since they were on IIS) that the jrun_iis6_wildcard.logs (in
[ColdFusion9]\runtime\lib\wsconfig\nn\LogFiles) had indications of errors
also. I realize you're on Apache, and you say you looked at all the logs,
but did you check out those logs in that wsconfig dir and its subdirs? It's
just a stab in the dark whether any log messages there (around the same
time) will be useful.

I would focus on something making the CF instance not responsive. I know you
said you raised the simult request threads from 10 to 40, and it seemed fine
at 10. But maybe you have new load, or a new problem that makes requests
hang.

As Ajas said, FR (or as you're using it, the CF Server Monitor) can show you
any running requests (the CFSM only show them if you turn on start
monitoring). If you can be on when it happens you may be surprised what you
find. If all 10 (or now 40) are hung, even if only for a while, that could
lead to the error-not that CF's down, but the connector thinks it can't be
reached.

And as you noted in a later message, turning on the alerts will help (in
either CFSM, again where start monitoring must be enabled for them to
work, or in FR, or SeeFusion), as that will give you info even when you
can't be watching the monitors. Since you're using the CFSM, and you say
you configured the alerts, did you confirm that you get the email they send?
There's no test feature. What I do is set the memory alert to below the
current memory used, which should trigger an alert within a few minutes. But
then I turn that alert off. I find it useless, since the JVM (since 1.5) can
often let used memory climb to the max before deciding to do a major GC, so
you can get those memory alerts when there's no real problem, if indeed a GC
at that point would have collected a lot of not really used memory. 

But I do recommend that slow server alert in the CFSM, or the running
requests alert in FR. For almost everyone, if you have many requests running
at once, that's a canary in the coal mine indicating that problems may be
afoot. The question then is whether the alert shows many slow requests. If
it just shows many fast ones, then that is just a sign of a lot of traffic,
and if it's being handled fast, you need to increase the number of max
simult requests, and the alert level in whatever monitor you're using.

And be careful about setting the other values in request tuning so low
(web services, flash remoting, and remote cfcs). There's never a harm in
them being more than you need. But if they are less than you need, that
could be where a bottleneck happens. I know you say you don't serve web
services, but I've seen shows have their own cf pages calling their own CFCs
as web services. And if that request limit was low, then that becomes a
single threading bottleneck. Or maybe you DO have code calling CFCs remotely
(via ajax). Or about flash remoting, the monitor (and FR) use those, and
your own code may (even if unexpectedly). Again, why constrict them? If you
don't use them, there's no harm in them being larger (like 5 or 10, each).

Finally, note that you could have cf requests using either cfthread or
reporting, and there are limits for each of those (configurable in the
admin). And though you are not using CF Standard, I'll say for other readers
that they could have all this sort of problem caused by using some tag that
is itself single-threaded in CF Standard, as are many tags, including
cfdocument, cfpdf, and more. That could cause a low traffic site to still
have hung requests.

Let us know if any of that helps, or not. But yes, if it remains and you
don't solve it, I am available for consulting, and with my satisfaction
guarantee, you don't have to pay for time you don't feel is valuable.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Frank Moorman
Sent: Thursday, August 08, 2013 7:42 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] Out of Memory?!?

 

All, 

I'm trying to figure out and determine a Jrun Out of Memory error. I get the
following in my logs:

[Thu Aug 08 14:40:14 2013] [notice] jrApache[2937: 31182]  returning error
page for JRun too busy or out of memory
[Thu Aug 08 15:50:09 2013] [notice] jrApache[1787: 63699]  returning error
page for JRun too busy or out of memory


It doesn't happen often, (maybe once or occasionally twice a business day)
but as everyone understands, users aren't happy when it happens to them.

This is a linux box, 64bit Centos 6, CF9 Enterprise, 64bit jvm version 1.7.
(The jvm was installed separately from CF for security and coldfusion uses
it.)

I doubt it is actually an out of memory condition (though I could be wrong)
The server has 6GB of physical memory 

RE: [ACFUG Discuss] ColdFusion Builder freezes abruptly

[Charlie Arehart]

Chris, there could be any number of explanations, but one is that you may be
running out of memory (within the heap of CFB). 

You can try to find out if that's possibly an issue by turning on the heap
monitor within cfb (an available feature under windowpreferencesgeneral),
to see if perhaps you are running high on use of heap. And if so, you can do
a Garbage Collection to see if the use of heap drops much. If not, that
could be the problem. 

One thing to note: even if it is not showing high use of memory now, it may
be using more after a period of time, when things go wrong. So keep an eye
on it.

If that's the issue, you can increase the heap use, via the XMX element in
the java args, in the cfbuilder.ini in the CFBuilder directory, as discussed
more at:

http://cfmumbojumbo.com/cf/index.cfm/coding/increase-cfbuilder-performance/

Let us know if that helps.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Chris
Sent: Wednesday, August 07, 2013 3:29 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] ColdFusion Builder freezes abruptly

 

This has happened few times in a week. ColdFusion Builder freezes before I
can save my changes. I have to forcibly close it due to which I lose my
changes.

Below is the error message.




Description:
  A problem caused this program to stop interacting with Windows.

Problem signature:
  Problem Event Name:AppHangB1
  Application Name:CFBuilder.exe
  Application Version:0.0.0.0
  Application Timestamp:4d87abff
  Hang Signature:f995
  Hang Type:0
  OS Version:6.1.7601.2.1.0.256.48
  Locale ID:1033
  Additional Hang Signature 1:f9958bdcfa28433dc7455ec412522419
  Additional Hang Signature 2:1ddc
  Additional Hang Signature 3:1ddc116d15dad9215547ede071e06e9c
  Additional Hang Signature 4:f995
  Additional Hang Signature 5:f9958bdcfa28433dc7455ec412522419
  Additional Hang Signature 6:1ddc
  Additional Hang Signature 7:1ddc116d15dad9215547ede071e06e9c





I am using ColdFusion Builder 2, Version: 2.0.1, Build: 282422 on a Windows
7 Professional(64bit). My system has the required Windows updates.

What could be causing this and how can I fix it?

Thanks  


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] Moving CFIDE folder

[Charlie Arehart]

Yep, that is one bummer about using the AdminAPI for such things. But then
it is indeed an admin settings, so that's their thinking. (And that's why I
assumed you would be able to find the value in the AdminAPI somewhere.)

If perhaps you had reason to want to make it more generally available to all
devs on your server, here's a thought: you could create a CF page that would
load that data into a server scope variable, and you could call it in the
onserverstart.cfc to populate it on each restart.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of DeJong, Nathan
D.
Sent: Monday, June 24, 2013 11:44 AM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] Moving CFIDE folder

 

Thanks Charlie and Scott.  You can get the value with a call to the runtime
api

 

rtObj.getRuntimeProperty(CFFormScriptSrc)

 

but that does require you to be logged into the adminapi object first.

 

With the list of tags, I was afraid no one had published it.

 

Thanks,

Nathan




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] Moving CFIDE folder

[Charlie Arehart]

Good questions, Nathan. I'm not aware of an answer to the first, but it
would be great for someone to research and publish it. As for the second,
I'm not aware of a variable, but I suspect it can be gotten from the Admin
API. I'm not in a position to try to get that right now, but let's see if
someone may check it out and report back.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of DeJong, Nathan
D.
Sent: Thursday, June 20, 2013 4:23 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] Moving CFIDE folder

 

After watching Charlie's presentations about updates and security at the
last ACFUG meeting, we are going to be implementing many of the suggestions
that we have not already done.  One of the first is moving the CFIDE
directory to a different location, locking down access to it, and creating a
virtual link to the scripts folder.  

 

There are two things that I have tried to research but am not finding the
answers:

. A list of tags that would create references to anything in the
CFIDE (we are using CF8 but a list for CF9 or CF10 would be fine)

. A built-in variable that we could use to that has the access
scriptscr location of the CFIDE/scripts folder for when we want to directly
link to a file in the scripts folder

 

Thanks,

 

Nathan DeJong

Applications Developer

Information Technology

Oxford College of Emory University

nathan.dej...@emory.edu

678-658-0867

 

 

 

  _  


This e-mail message (including any attachments) is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, distribution
or copying of this message (including any attachments) is strictly
prohibited.

If you have received this message in error, please contact
the sender by reply e-mail message and destroy all copies of the
original message (including attachments).


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

[ACFUG Discuss] Two sessions at ACFUG tomorrow/Wed night

[Charlie Arehart]

Hey folks, just wanted to share a heads-up that I'll be presenting 2
sessions tomorrow (Wednesday) night at the ACFUG meeting: 

Updating/Hotfixing ColdFusion 10, 9 and 8: Tips and Traps 
and
Locking down the #ColdFusion Administrator: Your First Line of Defense
Against Hackers

For the talk descriptions, and to RSVP for the event (to help with planning
for pizza and drinks), please visit http://www.acfug.org or more
specifically:

http://www.meetup.com/AtlantaCFUG/events/122860242/

 

/charlie

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] Two sessions at ACFUG tomorrow/Wed night

[Charlie Arehart]

Hi Scott, I will, yes. Likely just before (or just after) the talk tomorrow
night.

I'll throw out as well (for those who don't know) that I can help with
either challenge as well, on a consulting basis (remotely, short-term, and
even on-demand). More at the consulting page of my carehart.org site.

But to be clear, tomorrow is not at all a sales pitch! :-) I'll give folks
all the info they need to understand the issues and resolve many of them, as
well as links to resources with still more info. But for those who may
prefer help rather than digging in on their own, just saying I'm available.
;-)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Scott Dowling
Sent: Tuesday, June 11, 2013 6:28 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] Two sessions at ACFUG tomorrow/Wed night

 

Charlie,

 

Not going to be able to make it tomorrow, will you put your slides up? This
is exactly what I am dealing with at my job right now.

 

-S

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] Getting Connection Refused

[Charlie Arehart]

Glad to hear you find things resolved, Brooks. But to be clear, the
resources I pointed to did clarify that this was a JVM issue (I just didn't
say that specifically in my pointing them out). :-) 

They did also talk about changing the TTL value. Finally, they did also
propose that just restarting the instance could have helped. 

Just sharing in case your change comes back some day to still seem not to
work. It may be that simply restarting CF (and therefore the JVM) would be
the most expedient solution. Saying that as much for other readers who may
someday find/reuse this thread, too.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Wilson, Brooks
Sent: Tuesday, May 21, 2013 9:25 AM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] Getting Connection Refused

 

Greetings:

 

It turns out that technically speaking CF doesn't cache the DNS, but the JVM
does. In this case the JVM DNS cache was corrupted and we were being
directed to the wrong ip. We set the time to live parameter in the JVM DNS
cache to something other than forever and restarted the server. This fixed
the problem. This one was very interesting and challenging.

 

Sincerely, Brooks

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] Getting Connection Refused

[Charlie Arehart]

Brooks, do you mean you were reading *that* CF caches DNS entries? Yes,
that's so. And while there doesn't seem to be a way to clear it (other than
to restart CF), there is a way to control how long it's set to live. For
more, see these blog entries (one really old, one relatively old):

http://tjordahl.blogspot.com/2004/10/cfmx-and-dns-caching.html
http://coldfused.blogspot.com/2008/01/dns-lookup-caching-in-coldfusionjava.h
tml

And the following more generic resources:

http://docs.oracle.com/javase/6/docs/technotes/guides/net/properties.html#nc
t
http://www.rgagnon.com/javadetails/java-0445.html
http://serverfault.com/questions/459814/clearing-tomcats-dns-cache

Hope that helps.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Wilson, Brooks
Sent: Thursday, May 16, 2013 10:20 AM
To: discussion@acfug.org
Subject: [ACFUG Discuss] Getting Connection Refused

 

Greetings:

 

I'm using a CFFEED tag to retrieve an RSS feed. It has suddenly stopped
working. Nothing has changed. When we trace the request - nothing happens. I
was reading the CF caches DNS entries - but I don't see any information on
how to clear the cache. Does anyone have any experience with misbehaving
CFFEED/CFHTTP tags?

 

Sincerely, Brooks

  _  

Brooks Wilson  |  Senior Web Developer Programmer/Analyst
Technology Solutions Services  |  Application Delivery Services

Federal Reserve Bank of Atlanta  |  1000 Peachtree Street,  Atlanta, GA
30309-4470

Phone: 404.498.8178 | Fax: 404.498.8239 | Mobile: 404.985.9270

Email:  mailto:brooks.wil...@atl.frb.org brooks.wil...@atl.frb.org

 


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] FYI - Security Advisory for ColdFusion - Active zero day exploit

[Charlie Arehart]

Same here, Frank. I've never heard of there ever being a gettingstarted
directory in CFIDE, ever. I've checked multiple machines just now, and find
none. 

I do recall there being one some number of releases ago, but never in the
CFIDE that I recall. Perhaps in CFDOCS. I don't recall if it was added as
part of the install or was an option you could download.

Indeed, I was just about to report this on the Adobe blog about this
technote, and I see that someone else has pointed it out as a comment. Let's
hope they correct the bulletin soon, as it's clearly currently incorrect and
confusing (and they may have meant really the CFIDE/componentutils, which
has itself been used by some other attacks.)

That said, if there is indeed some vulnerability in code in a gettingstarted
directory somewhere, and it's determined that this was indeed from CF8, then
folks who are on 9 or 10 should not rest too carefully, because if they'd
had that older release, the directory could still be around in some website
docroot, so whatever they ultimately report, it's worth watching out for it
(and possibly blocking it, if not removing it entirely, if you never use it
anyway.)

/charlie



From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Frank Moorman
Sent: Thursday, May 09, 2013 3:54 AM
To: discussion@acfug.org
Subject: [ACFUG Discuss] FYI - Security Advisory for ColdFusion - Active
zero day exploit

 

All,

In case you have not heard... Adobe mentioned this last night...

https://www.adobe.com/support/security/advisories/apsa13-03.html

Essentially, the believe the exploit is already out there and is actively
infecting systems.

However, it can be prevented through access controls on the CFIDE admin
directories.





AFFECTED SOFTWARE VERSIONS


ColdFusion 10, 9.0.2, 9.0.1 and 9.0 for Windows, Macintosh and UNIX


MITIGATIONS


Adobe recommends ColdFusion customers take the following steps to mitigate
this vulnerability:

. Restrict public access to the CFIDE/administrator, CFIDE/adminapi
and CFIDE/gettingstarted directories by following the hardening guidance in
the
http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/products/cold
fusion/pdfs/91025512-cf9-lockdownguide-wp-ue.pdf ColdFusion 9 Lockdown
Guide and
http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/products/cold
fusion-enterprise/pdf/CF10%20Lockdown%20Guide.pdf ColdFusion 10 Lockdown
Guide

. Refer to the
http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/products/cold
fusion/pdfs/91025512-cf9-lockdownguide-wp-ue.pdf ColdFusion 9 Lockdown
Guide and
http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/products/cold
fusion-enterprise/pdf/CF10%20Lockdown%20Guide.pdf ColdFusion 10 Lockdown
Guide for security best practices and further information on these hardening
techniques.

This is the first I have heard of the CFIDE/gettingstarted directory, so I
am assuming that is only on CF10. Another directory that should be protected
but it not mentioned on this exploit(but has been mentioned on others) is
the CFIDE/componentutils directory.

If needed/desired, I can share some simple .htaccess samples for people that
need to protect CF on an apache server...


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] ACFUG meeting tomorrow night (May 1): Solr with James Mccullough

[Charlie Arehart]

Hey James, thanks for the really great presentation last week.

In fact, I had sent a  follow-up email to you the next day via the
meetup.com site, but I wonder if perhaps you did not get it, or if somehow I
did not get your reply.

Hope you'll forgive me reaching out here on the list, but can you drop me a
note with your address and I'll try to email you directly (rather than
through meetup.com)? My address is char...@carehart.org.

Thanks.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Charlie Arehart
Sent: Tuesday, April 30, 2013 2:42 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] ACFUG meeting tomorrow night (May 1): Solr with
James Mccullough

 

Just a heads up. We do have an ACFUG meeting tomorrow night (May 1):  Solr
with James Mccullough

For more info, and to RSVP, see:

http://www.meetup.com/AtlantaCFUG/events/113809862/

/charlie

PS Normally meetings are announced only on the announcement list, which you
can  sign up for at the old site:
http://old.acfug.org/index.cfm?fa=mailinglists.default. Since some may be
more recent members who didn't know that, and maybe aren't on that list, and
also since we've had relatively light attendance at meetings this past year,
I wanted to take a moment and share the news on this one, as it almost
slipped under my own radar. :-)


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] ACFUG meeting tomorrow night (May 1): Solr with James Mccullough

[Charlie Arehart]

I don't think Scott had presented it before (but he can confirm). As for
getting a recording, one of the reasons I was trying to reach him was to
arrange to get him to present it on the Online CF Meetup. Then there would
indeed be a recording. :-)

/charlie

 

From: Frank Moorman [mailto:stretch...@franksdomain.net] 
Sent: Tuesday, May 07, 2013 9:20 PM
To: discussion@acfug.org
Cc: Charlie Arehart
Subject: Re: [ACFUG Discuss] ACFUG meeting tomorrow night (May 1): Solr with
James Mccullough

 

Unfortunately, I wanted to be there, but could not make it to the meeting...

Is there a video of the presentation somewhere on the net? (either from last
week, or a prior iteration...)



On 05/07/2013 08:53 PM, Charlie Arehart wrote:

Hey James, thanks for the really great presentation last week.

In fact, I had sent a  follow-up email to you the next day via the
meetup.com site, but I wonder if perhaps you did not get it, or if somehow I
did not get your reply.

Hope you'll forgive me reaching out here on the list, but can you drop me a
note with your address and I'll try to email you directly (rather than
through meetup.com)? My address is char...@carehart.org.

Thanks.

 

/charlie

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

[ACFUG Discuss] ACFUG meeting tomorrow night (May 1): Solr with James Mccullough

[Charlie Arehart]

Just a heads up. We do have an ACFUG meeting tomorrow night (May 1):  Solr
with James Mccullough

For more info, and to RSVP, see:

http://www.meetup.com/AtlantaCFUG/events/113809862/

/charlie

PS Normally meetings are announced only on the announcement list, which you
can  sign up for at the old site:
http://old.acfug.org/index.cfm?fa=mailinglists.default. Since some may be
more recent members who didn't know that, and maybe aren't on that list, and
also since we've had relatively light attendance at meetings this past year,
I wanted to take a moment and share the news on this one, as it almost
slipped under my own radar. :-)




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CF 9 IP restriction

[Charlie Arehart]

That’s potentially helpful, Teddy, but to be clear, it would apply if he’s 
using the Tomcat web server (built-into JBoss, just as it is with CF as its 
“internal web server”  option), but if he is fronting his JBoss CF deployment 
with Apache or IIS, then the IP block would need to be done in those, which is 
why I asked which web server he is using.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Teddy R Payne
Sent: Saturday, April 20, 2013 12:15 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CF 9 IP restriction

 

I did some brief internet research and found this.  Perhaps this might lead you 
to something.

 

http://marakana.com/bookshelf/jboss_admin_tutorial/security.html

 

HIH

Sent from my iPhone


On Apr 19, 2013, at 10:40 PM, Charlie Arehart char...@carehart.org wrote:

Using what web server? That’s the crux of where any such protection would be 
done.

/charlie




From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Mike Staver
Sent: Friday, April 19, 2013 1:30 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CF 9 IP restriction

 

Does anyone know if you can do something similar using JBOSS, but a bit more 
granular, just blocking /CFIDE/administrator by IP?


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 




-

To unsubscribe from this list, manage your profile @ 

http://www.acfug.org?fa=login.edituserform



For more info, see http://www.acfug.org/mailinglists

Archive @ http://www.mail-archive.com/discussion%40acfug.org/

List hosted by http://www.fusionlink.com

-

RE: [ACFUG Discuss] CF 9 IP restriction

[Charlie Arehart]

Using what web server? That's the crux of where any such protection would be
done.

/charlie



From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Mike Staver
Sent: Friday, April 19, 2013 1:30 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CF 9 IP restriction

 

Does anyone know if you can do something similar using JBOSS, but a bit more
granular, just blocking /CFIDE/administrator by IP?




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] Re: New CF Vulnerability - Check your servers

[Charlie Arehart]

Yes.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Thursday, April 11, 2013 2:51 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] Re: New CF Vulnerability - Check your servers

 

Thanks Cameron.

There were 2 more hotfixes released after this for CF 9.0 (in our
case).Looks like hotfix 3 includes 2 as well. So, if someone doesnt apply
hf2, He can use hf3 and be up to date right(with hf2 included). I am I
correct in this assumption? Can someone confirm please?

hf 2 --
http://helpx.adobe.com/coldfusion/kb/cumulative-hotfix-2-coldfusion-900.html

hf 3 --
http://helpx.adobe.com/coldfusion/kb/cumulative-hotfix-3-coldfusion-900.html

Thanks.

Ajas Mohammed / 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CF 9 64 bit installer file

[Charlie Arehart]

Yes, again. :-)

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Thursday, April 11, 2013 8:54 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CF 9 64 bit installer file

 

No, both files were same size and same name. I guess when I downloaded first
file couple of yrs back, I  had downloaded it as developer edition 64 bit
and then when I downloaded few months back, it was straight 64 bit and It
got me thinking, what if I install CF 9.0 (yes 9.0 this time) using
developer installer and if it doesnt work , I will be in bit of bother. But
apparently not, as installers are same, license will trigger Enterprise
version. :-)

 

Thanks,

 

Ajas Mohammed / 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] 9.01 vs 9.02

[Charlie Arehart]

Steve, this is a point I just made in one of my replies this week to Ajas,
but to reiterate, any security hotfixes created by Adobe are created for
9.0, 9.0.1, and 9.0.2. So no, you are not in any danger, as long as you
always apply the latest HFs.

As for not updating to Java 7, yes, technically you are in danger, in that
Oracle has EOLed java 6 and are NOT offering new updates for Java 6. So if
there are new vulnerabilities identified, they will only update Java 7, not
6 (just as if Adobe fixes CF now, they only do it for CF 10 and 9, not 8 or
earlier). The EOL of java 6 was only in the past couple of months, so at
least you can update to a 8relatively recent* JVM update, just not THE
latest one.

Finally, as for your observation about the wording of the Adobe mention
about supported jdks, I assume you are referring to the first sentence of
step 1 in this doc:
http://helpx.adobe.com/coldfusion/kb/change-coldfusion-jvm.html

Download and install a supported version of JDK.

I suppose that's just a CYA statement. (And if this doc may have existed for
CF9 before the update that allowed 1.7, it was referring to them supporting
only Java 1.6. Indeed, until about mid-last year, they only supported up to
1.6.0_24.) But I agree with you it would be better if they'd show or point
to some table to clarify what JVMs are supported by what versions of CF.
(Seems a good blog opportunity!)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Steven
Sent: Friday, April 12, 2013 8:35 AM
To: discussion@acfug.org
Subject: [ACFUG Discuss] 9.01 vs 9.02

 

All,

while we're on the subject of patching  upgrades..

last night I patched our 9.01 box with the latest hotfix4 from
http://helpx.adobe.com/coldfusion/kb/hot-fixes-coldfusion-9.html

and I followed the steps there.

 

But I'm still fuzzy on a couple things..

 

I didn't want to go through the hassle of doing a complete
uninstall/reinstall to get the box over to the 9.02 series. Am I still in
danger of having security holes that aren't addressed by the 9.01 series
hotfixes?

 

And, also within this hotfix4 I applied -- an optional step is to upgrade
the jvm by getting the latest jdk from oracle, modifying the jvm.config to
call the new, etc.  I elected not to touch the jvm and we are still using
native (out of the box ver). Am I again in danger of new security issues? (I
have another Adobe rant. They mention in this step to use only the JDKs
which are compatible with cf9 -- but don't bother within the instructions to
tell you which are compatible!).

 

How did you guys approach your cf9 patching?

Happy Friday.

 

Thx,

Steve

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CF 9 64 bit installer file

[Charlie Arehart]

Ajas, I think there's an important explanation for what you're seeing, that
you may not be considering.

First, as Troy has said, yes, the installer does not change based on Std,
Ent, Trial, or Dev. The one installer does ask during installation which of
those you want.

But second, as for the size difference you see, there may be a very
important explanation for that. (Even if you know this, I'll share it as
much for others as it's a source of frequent confusion.) 

Note that the CF9 installer you would download today from the Adobe site,
which has been there since May of 2012, is NOT 9.0 (as it was for 2-3 years
prior)-it is 9.0.2, which is (like 9.0) a full installer. It includes
9.0+9.0.1 but lacks Verity (the main reason for its creation), and it also
includes all the hfs available as of its release in May 2012. (You still
need to add more updates, as I'll discuss in a moment.)

While Adobe did (some months ago) change the site
(http://www.adobe.com/support/coldfusion/downloads_updates.html#cf9) to more
clearly indicate on the page that the CF9 installer is a 9.0.2 installer,
they did not change the filename to so clearly indicate this.  The current
902 download filename (on that page I just mentioned) is
ColdFusion_9_WWEJ_win64.exe. You mention the old one you see as being
ColdFusion_9_WWE_win64.exe, and I do think that was the 9.0 installer
filename. Is the new one you're comparing the same name? or the one with
WWEJ that I just mentioned? If so, that's the difference.

Also, be careful too then NOT to download and install over that the
still-available 9.0.1 updater. That is for updating a 9.0 install. If you
run it atop a 9.0.2, it will not warn you (it was built before 9.0.2 came
out so is not aware of it), and it will break your CF installation.

Finally, just as all releases of CF, note that the 9.0.2 installer offered
there is not the latest. There are HFs available for that since its
release. (To those who might complain about that, note that it's hard for
Adobe to build a new installer for a release, given all the permutations of
supported platforms and related tools like DBs and web servers, so they
build new installers only on major updates or new releases.)

/charlie



From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Wednesday, April 10, 2013 7:48 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CF 9 64 bit installer file

 

Thanks Troy.


Ajas Mohammed / 



On Wed, Apr 10, 2013 at 5:27 PM, Troy Jones t...@thirdwavedigital.com
wrote:

I believe that is correct. The installer handles all versions.

Thank you,

Troy Jones

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Wednesday, April 10, 2013 5:17 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] CF 9 64 bit installer file

Hi,

Just checking if the installer available on adobe's site for CF 9 64 bit
would work with Enterprise license.

I downloaded one earlier named ColdFusion_9_WWE_win64.exe which is 443,876KB
in size and was wondering if the installer is same for standard and
enterprise or even developer and the license key would trigger the actual
type of installation i.e. standard license vs enterprise license.

Ajas Mohammed / 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CF 9 64 bit installer file

[Charlie Arehart]

Glad to help.  A few more thoughts.

First, to be clear, I made no mention of CF10 at all. Not sure what led you
to bring that up. :-)

As for your situation, I do now understand that you would want 9.0 and not
9.0.2. That's fine. I was just clarifying the situation.

So if you have a 9.0 installer, I'd be curious what the other one was that
you were comparing. You're saying it's the same name, but different size?
That would be odd.

Finally, do note that you will need to do 9.0, then 9.0.1, then the CHFs and
HFs for 9.0.1 on top of that, to get you to the latest version you can have
of 9.0.1, assuming that's what you have or had and are trying to recreate.

One last thing: you said cf 9 in the last two paragraphs, and I think you
would do yourself (and readers)  a favor to be more explicit. CF 9.0.2 is as
much cf9 as is 9.0 or 9.0.1. When you're talking about matters of
installation and updating, it's critical to be accurate. 

As always, just trying to help. :-)

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Thursday, April 11, 2013 11:07 AM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CF 9 64 bit installer file

 

Thanks Charlie for clarification. We have unique situation where in we want
CF 9 ONLY with verity, as one of our app is based of verity. We are moving
to new servers 64 bit Win 2008 R2 from the old 32 bit win 2003. We want to
setup exact replica of our current setup, hence we want, CF 9 only as we
would have needed a lot of testing on CF 10 to make sure our app doesnt
break or we dont come across new issues. We do lot of pdfs and it becomes an
issue once the pdf rendering is affected by font size etc. So CF 9 to CF 10
migration is not an option and management prefers CF 9 setup on new servers.

Coming back to original topic. I had downloaded the
ColdFusion_9_WWE_win64.exe file sometime back as in probably few months back
or maybe last year. I did notice that the downloads available as of now are
for 9.0.2 ColdFusion_9_WWEJ_win64.exe, which we dont want. Honestly, i
missed that J on the installer file on first reading. :-)

So I was not comparing, the newer ColdFusion_9_WWEJ_win64.exe vs older file
ColdFusion_9_WWE_win64.exe. My concern was that if i Use the older installer
file, to install FRESH COPY OF CF 9 on our new servers and use the
enterprise key, then it would work or not. Looks like it will work. 

So I will use the older file ColdFusion_9_WWE_win64.exe and install CF 9 and
make a note to myself, that I install the important hotfix from Jan 2013(
was cumulative) and the 2 more that got released last month.

 

Thanks for the detailed explanation.

 

Ajas Mohammed /  

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CF 9 64 bit installer file

[Charlie Arehart]

Thanks for the clarifications. As for the CF9 backwards licensing, the good
news is that a CF 9 license is indeed for any version: 9.0, 9.0.1, or 9.0.2.
:-)

As for your having the 2 files, the old and one from a few months, if they
are the same, I thought you had said you found one had a different size. Was
that still some other? 

As for your last comment, to be clear, that's why I did add, assuming
that's what you have or had and are trying to recreate. :-) That said, I
would wonder why one on 9 would not want to move to 9.0.1. It's free, and
does add some useful new functionality (for coders and for admins). But I do
appreciate you may feel you need to test first. Just saying it's worth
considering. :-) Fortunately, Adobe does indeed still provide updates for
9.0, 9.0.1, and 9.0.2, so you're not missing out there, though it does mean
people need to be sure to apply the right fix for the right version! :-)

/charlie



From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Thursday, April 11, 2013 12:58 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CF 9 64 bit installer file

 

Point noted. CF 9.0 It is from now. :-) Makes sense to me. I always thought
cf 9 means 9.0 and people mention 9.0.1 and 9.0.2 if they happen to use that
*specific* version, I didn't know/realize 9.0.2 could be read as cf 9 or
vice versa also.

About Cf 10, i mentioned it, because someone would say, why dont you start
with fresh install (new servers right) of CF 10 and dont worry about
upgrades in future. It seems you can buy CF10 and request adobe for CF 9.0
license via backwards licensing. Different topic but thats what we plan to
do. Not sure if that is 9.0.2 license. I am assuming they give you 9.0
license and not 9.0.1 or 9.0.2. I dont know if the version matters in case
of a license, specific to 9.0 and 9.0.x.

About installers, well I had an old (2yr old perhaps) installer and also one
which i downloaded few months back and size is same on both
ColdFusion_9_WWE_win64.exe. I just didnt know which one to trust as good
source. Sorry for confusion.

Finally, do note that you will need to do 9.0, then 9.0.1, then the CHFs and
HFs for 9.0.1 on top of that, to get you to the latest version you can have
of 9.0.1, assuming that's what you have or had and are trying to recreate.

About this, we dont want to do 9.0.1 as we never did that on our current
prodn servers or QA servers. We want to stay with 9.0 only with latest
security hotfixes of course.

Ajas Mohammed /  

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] Images as Blobs

[Charlie Arehart]

No, Mike. Both the CFIMAGE tag (and functions) and even the CFCONTENT tag
(if you had reason to want to you that) offer means to generate their
results from an object in memory. It just may be vital to convert it from
the form you obtain from the DB into a form that can be sent by these
tags/functions. Try playing with it, and if it doesn't work, see the CFML
docs on the tag you're using which should discuss this issue. (And do note
that besides the CFML Reference, which may sometimes be terse on a topic,
there is also the ColdFusion Developer Guide, which sometimes will talk for
pages about a given topic mentioned only briefly--if at all--in the CFML
Reference.)

/charlie


-Original Message-
From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Mike Staver
Sent: Tuesday, April 02, 2013 3:19 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] Images as Blobs

Thanks for the input Teddy. Yeah, I did look at that - but it's my
understanding that I would still need to dump the image out onto the file
system before sending it out via the web server, right? I'm assuming there
isn't a way around that.






-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CF10 Migration Questions

[Charlie Arehart]

Sounds like a winner. Thanks for stepping up to present that topic, Bettina.


As long as you're asking us for more possible related topics, I'd think
you'd want to address the autohotfix mechanism. Besides how it works, you
could clarify how one MUST apply them even with a download of CF10 made
today (it's not updated out of the box), and how one must apply the
mandatory update first, and how/when one must rebuild the web server
connectors after applying the, etc.

I know your focus is migration, so the focus may be more on how things are
different for coding brought from an old release to 10, but since this
mechanism is so different and so fundamental to those using CF10 that, I'd
think it could fit well here (perhaps as lower priority if you fill the time
with others that seem more specific to your topic). 

Come to think of it, I could see a whole talk on the update process, since
there are some other gotchas like if you're server does not have internet
access, and more. Maybe I could offer that as a more detailed talk another
month. :-) But you could still maybe mention just the most fundamental
aspect in a couple-to-a-few minutes.

Hope that's helpful.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Bettina M.
Scurlock
Sent: Monday, March 04, 2013 10:13 AM
To: discussion@acfug.org
Subject: [ACFUG Discuss] CF10 Migration Questions

 

Hello Everyone,

 

I will be presenting at this month's ACFUG
http://www.meetup.com/AtlantaCFUG/events/104183652/  meeting about
migrating to ColdFusion 10.  My presentation will be a basic overview of the
migration process and the new features to CF10.  I will also be discussing
some of the issues and concerns with the migration.  If you plan to attend
this month's presentation and specific questions related to certain features
in ColdFusion, (i.e. LSDS, Solr, etc.) please feel free to send your
questions to me and I will be more than happy to address them.  Here are a
few questions that I have received and will be address at the meeting:

*   CF10 MS Exchange Issues
*   CF10 64-bit Windows referencing 32-bit .NET dll using CreateObject()
*   CF10 JVM concerns
*   LCDS ES on CF10

 

Hope to see you there!

 

Best Regards,

Bettina M. Scurlock




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CF10 Migration Questions

[Charlie Arehart]

Good to hear. And as for that proposal, I am only putting it forth. Not
committing yet until I hear from those controlling the schedule as to when
there's an open slot, and an interest (and I can confirm I'm available that
date).



/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Bettina M.
Scurlock
Sent: Monday, March 04, 2013 12:29 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CF10 Migration Questions

 

Thanks for the input Charlie.  I will definitely address the software update
process.  I think it is a great idea to have a whole talk on the CF update
process.  Thanks for volunteering Charlie!!  Looks like we have a lot of
great meetups in the near future!!



On Mon, Mar 4, 2013 at 12:05 PM, Charlie Arehart char...@carehart.org
wrote:

Sounds like a winner. Thanks for stepping up to present that topic, Bettina.


As long as you're asking us for more possible related topics, I'd think
you'd want to address the autohotfix mechanism. Besides how it works, you
could clarify how one MUST apply them even with a download of CF10 made
today (it's not updated out of the box), and how one must apply the
mandatory update first, and how/when one must rebuild the web server
connectors after applying the, etc.

I know your focus is migration, so the focus may be more on how things are
different for coding brought from an old release to 10, but since this
mechanism is so different and so fundamental to those using CF10 that, I'd
think it could fit well here (perhaps as lower priority if you fill the time
with others that seem more specific to your topic). 

Come to think of it, I could see a whole talk on the update process, since
there are some other gotchas like if you're server does not have internet
access, and more. Maybe I could offer that as a more detailed talk another
month. :-) But you could still maybe mention just the most fundamental
aspect in a couple-to-a-few minutes.

Hope that's helpful.

/charlie 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] New CF Vulnerability - Check your servers

[Charlie Arehart]

Yes, there are various issues like that which will now bite people who had
not done any of the security fixes until this one. I've been meaning to do a
blog entry to highlight them, but have just been too busy.

/charlie



From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Monday, January 21, 2013 5:12 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] New CF Vulnerability - Check your servers

 

Frank,

I know PostParametersLimit is a different issue than the security fix, if
thats what you were trying to imply. I meant that since the security fix is
CUMULATIVE fix, we saw it for the first time after applying security
fix(because we had not patched up our servers with earlier
hotfixes/patches).

So PostParametersLimit = No. of form fields, where as postSizeLimit = size
in MB of how big the post Size (form) can get.

Thanks,

Ajas Mohammed / 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] New CF Vulnerability - Check your servers

[Charlie Arehart]

For CF7, there are no new security hotfixes since 2008, but for CF8, there
were new ones as late as Sep '12. 

See: http://www.adobe.com/support/security/#coldfusion

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Tuesday, January 22, 2013 7:49 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] New CF Vulnerability - Check your servers

 

I was wondering about people who are on CF 7/8. One of our server is still
on CF 7. So apart from restricting public access to CFIDE admin folders, is
there anything else that needs to be done for CF 7/8? I do know that this
security fix by adobe tech note addresses versions CF 9.0, 9.0.1, 9.0.2 and
CF 10.

Thanks,



Ajas Mohammed / 

iUseDropbox( http://db.tt/63Lvone9 http://db.tt/63Lvone9) 
http://ajashadi.blogspot.com
We cannot become what we need to be, remaining what we are.
No matter what, find a way. Because thats what winners do.
You can't improve what you don't measure.
Quality is never an accident; it is always the result of high intention,
sincere effort, intelligent direction and skillful execution; it represents
the wise choice of many alternatives.

 

On Tue, Jan 22, 2013 at 7:31 PM, Charlie Arehart char...@carehart.org
wrote:

Yes, there are various issues like that which will now bite people who had
not done any of the security fixes until this one. I've been meaning to do a
blog entry to highlight them, but have just been too busy.

/charlie

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed
Sent: Monday, January 21, 2013 5:12 PM
To: discussion@acfug.org


Subject: Re: [ACFUG Discuss] New CF Vulnerability - Check your servers

 

Frank,



I know PostParametersLimit is a different issue than the security fix, if
thats what you were trying to imply. I meant that since the security fix is
CUMULATIVE fix, we saw it for the first time after applying security
fix(because we had not patched up our servers with earlier
hotfixes/patches).

So PostParametersLimit = No. of form fields, where as postSizeLimit = size
in MB of how big the post Size (form) can get.

Thanks,

Ajas Mohammed / 

 

 

- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] New CF Vulnerability - Check your servers

[Charlie Arehart]

 your help.



Ajas Mohammed / 

iUseDropbox( http://db.tt/63Lvone9 http://db.tt/63Lvone9) 
http://ajashadi.blogspot.com
We cannot become what we need to be, remaining what we are.
No matter what, find a way. Because thats what winners do.
You can't improve what you don't measure.
Quality is never an accident; it is always the result of high intention,
sincere effort, intelligent direction and skillful execution; it represents
the wise choice of many alternatives.

 

On Wed, Jan 16, 2013 at 12:56 AM, Charlie Arehart char...@carehart.org
wrote:

Ok, call off the alarm (those of you on 9.0.2). It turns out that the
confusion about the new hotfix (regarding 9.0.2) was just a mistake in the
technote. All is as it should be, and everyone ought to apply this hotfix
ASAP. :-)

BTW, since writing my comment earlier, I have come out with a part 3 entry,
on the hotfix and more. 

http://www.carehart.org/blog/client/index.cfm/2013/1/15/Part3_serious_securi
ty_threat

Still planning a part 4, with post mortem and more. A bit busy now to commit
to when. :-)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Charlie Arehart
Sent: Tuesday, January 15, 2013 3:44 PM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] New CF Vulnerability - Check your servers

 

Thanks for sharing it here, Cam.

Do beware, though: for those on 9.0.2, there's a glitch in the hotfix (a
missing web-inf.zip within the cf902.zip). 

I've added a comment on the blog entry that points to that
(http://blogs.coldfusion.com/post.cfm/coldfusion-security-update-for-version
-9-and-above), but obviously those who go straight to the technote wouldn't
see that. Hopefully Adobe will fix this ASAP.

To be clear, this warning is only for those on 9.0.2. Those on 9.0, 9.0.1,
or 10 should absolutely proceed with the hotfix as provided.

 

/charlie

 

- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 

 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] New CF Vulnerability - Check your servers

[Charlie Arehart]

:-)

Thanks. I will note that they did just yesterday kindly add me to the
acknowledgements section of the security advisory, a first for me. :-)
Various issues caused the delay. Nothing nefarious. I got a call from
someone on PSIRT explaining the situation. I was just happy to get the
mention.

The good news is that I've gotten payment by a burst of new business from
people needing help with this. Of course, I posted the first two entries
making no mention of my services. That really wasn't my motivation. But
come, the work has. And some of those have then realized I could help with
other things, which has led to still more work, so it's been all the more
beneficial. 

Of course, it's a bit like being a roofer after a tornado blows through. You
don't want to say you're glad for the work, as you feel for people who
were affected. 

I have a part 4/post mortem in the works, but sadly too busy to get time to
write it up. Perhaps over the weekend.

/charlie



From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Steve Ross
Sent: Friday, January 18, 2013 10:17 AM
To: ACFUG ColdFusion Discussion
Subject: Re: [ACFUG Discuss] New CF Vulnerability - Check your servers

 

Adobe should be paying you Charlie... 

 

On Wed, Jan 16, 2013 at 9:39 AM, Ajas Mohammed ajash...@gmail.com wrote:

Thanks Charlie, Cameron for keeping us updated with the latest.

Charlie, thanks for those blog entries. Really appreciate all your help.



Ajas Mohammed / 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] New CF Vulnerability - Check your servers

[Charlie Arehart]

Thanks for sharing it here, Cam.

Do beware, though: for those on 9.0.2, there's a glitch in the hotfix (a
missing web-inf.zip within the cf902.zip). 

I've added a comment on the blog entry that points to that
(http://blogs.coldfusion.com/post.cfm/coldfusion-security-update-for-version
-9-and-above), but obviously those who go straight to the technote wouldn't
see that. Hopefully Adobe will fix this ASAP.

To be clear, this warning is only for those on 9.0.2. Those on 9.0, 9.0.1,
or 10 should absolutely proceed with the hotfix as provided.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Cameron
Childress
Sent: Tuesday, January 15, 2013 1:56 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] New CF Vulnerability - Check your servers

 

FYI - a hotfix was released today for this vulnerability:

 

http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix-apsb13-03.ht
ml

-Cameron

-- 
Cameron Childress
--
p:   678.637.5072

im: cameroncf

facebook http://www.facebook.com/cameroncf  | twitter
http://twitter.com/cameronc  | google+
https://profiles.google.com/u/0/117829379451708140985 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] New CF Vulnerability - Check your servers

[Charlie Arehart]

Ok, call off the alarm (those of you on 9.0.2). It turns out that the
confusion about the new hotfix (regarding 9.0.2) was just a mistake in the
technote. All is as it should be, and everyone ought to apply this hotfix
ASAP. :-)

BTW, since writing my comment earlier, I have come out with a part 3 entry,
on the hotfix and more. 

http://www.carehart.org/blog/client/index.cfm/2013/1/15/Part3_serious_securi
ty_threat

Still planning a part 4, with post mortem and more. A bit busy now to commit
to when. :-)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Charlie Arehart
Sent: Tuesday, January 15, 2013 3:44 PM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] New CF Vulnerability - Check your servers

 

Thanks for sharing it here, Cam.

Do beware, though: for those on 9.0.2, there's a glitch in the hotfix (a
missing web-inf.zip within the cf902.zip). 

I've added a comment on the blog entry that points to that
(http://blogs.coldfusion.com/post.cfm/coldfusion-security-update-for-version
-9-and-above), but obviously those who go straight to the technote wouldn't
see that. Hopefully Adobe will fix this ASAP.

To be clear, this warning is only for those on 9.0.2. Those on 9.0, 9.0.1,
or 10 should absolutely proceed with the hotfix as provided.

 

/charlie




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] New CF Vulnerability - Check your servers

[Charlie Arehart]

Yep, that is the same, and while they work on a real fix, that bulletin
warns of some key things to lock down in the meantime (as I did in my blog
entries, though /CFIDE/componentutils was not one I'd seen used in any of
the compromises I found. It was always CFIDE/adminapi, and I have asked
Adobe about that, since they make no mention of it.)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Frank Moorman
Sent: Thursday, January 10, 2013 6:15 AM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] New CF Vulnerability - Check your servers

 

All,

I received a new HackMyCF report on one of my sites earlier...  It had a
brand new CRITICAL error that I never saw before... 




ComponentUtils Exposed to the Public

The /CFIDE/componentutils/ directory is open to the public it should be
locked down to prevent exploit.

I went and immediately locked it down like my existing administrator and and
adminapi directories...

Is this related to all the compromised servers in the past month?

Ok, I did some searching and I found out that yes, this directory is listed
by adobe in their latest security bulletin. (and I assume is related to the
recent hacks...) However, I think that it is important to share with the
group...


On 01/03/2013 08:50 AM, Cameron Childress wrote:

FYI - worth reading up on this.

 

 
http://www.carehart.org/blog/client/index.cfm/2013/1/2/serious_security_thr
eat
http://www.carehart.org/blog/client/index.cfm/2013/1/2/serious_security_thre
at 

 

http://www.carehart.org/blog/client/index.cfm/2013/1/2/Part2_serious_securit
y_threat

 

-Cameron

 

-- 
Cameron Childress
--
p:   678.637.5072 

im: cameroncf

facebook http://www.facebook.com/cameroncf  | twitter
http://twitter.com/cameronc  | google+
https://profiles.google.com/u/0/117829379451708140985 

 

 


- 
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform 

For more info, see http://www.acfug.org/mailinglists 
Archive @ http://www.mail-archive.com/discussion%40acfug.org/ 
List hosted by FusionLink http://www.fusionlink.com  
- 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] ColdFusion 10 updates Offline

[Charlie Arehart]

Please see this, the first message pinned to the top of the messages area on
the meetup site for the ACFUG:

http://www.meetup.com/AtlantaCFUG/messages/boards/thread/16786512

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ramirez, Ruben -
Curtis 1000
Sent: Friday, December 07, 2012 9:10 AM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] ColdFusion 10 updates Offline

 

Good morning.

 

I have updated my profile so that these emails go to a different email
address. But I must have done something wrong because now I am getting
emails to both this old email address and the new one.

When I attempt to unsubscribe from the  meetup website, it is saying that
this emails is not in the system so it seems like I am unable to unsubscribe
this email address.

 

Can you somebody please unsubscribe me from these emails? Or tell me how I
can do it myself?

 

Thanks in advance for your help,

 

Ruben




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] ColdFusion 10 updates Offline

[Charlie Arehart]

OK, I'll continue to play dumb, since this use of -f on the java -jar
command is entirely new to me. What is it in the properties.txt that you
were passing, Mike? And is it then that, Dawn, which you're referring to?
Are you aware of what he may be passing in? Or were you just referring to a
generic issue of passing text files?

I did google some for this -f, but came up empty. Even on the Oracle page
on the jars:
http://docs.oracle.com/javase/6/docs/technotes/tools/windows/jar.html it's
not clear what it would have to do with running the updates. That's all I'm
really trying to understand, in case it may help others. Thanks to you both.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Dawn Hoagland
Sent: Thursday, December 06, 2012 9:32 AM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] ColdFusion 10 updates Offline

 

Formatting problems when passing text files between Windows and 'nix have
been around since anyone needed to pass text files between Windows and 'nix.
Windows implements a different method of the linefeed character.

 

Notepad should always be safe.  But I've occasionally had problems there as
well.

 

On Wed, Dec 5, 2012 at 11:10 PM, Charlie Arehart char...@carehart.org
wrote:

Glad to hear it helped.

As for the properties file, that's the first I've ever heard of using that
(in Windows or Unix). Since you seem to indicate its use with Windows,
what's it for? (I could google it, sure, but I'd like to hear your
perspective, such as what led you to use it at all. I've never seen it
mentioned, though of course I've seen mention of the command line java -jar
approach.)

As for the cookie thing, I've not heard anyone else talk about it yet, and
since I've not had time to analyze it to really identify the nature of the
problem (and whether anything in CF controls or influences it), I have not
yet filed any bug report.

/charlie


-Original Message-
From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Mike Staver
Sent: Wednesday, December 05, 2012 7:08 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] ColdFusion 10 updates Offline

Thanks Charlie. I was able to download the jar files from the XML you
pointed out, and then run the command line update. Since this is on Solaris
and I don't have a GUI, I had to use the silent option like so:

java -jar hotfix_005.jar -i silent -f properties.txt

What tripped me up on that command is that if you create a properties file
on Windows, and then transfer it over to the Solaris machine, it won't work.
The Windows vs Unix end of line character will bite you. The update appeared
to run fine, but when I'd log back into CF Admin, it would still show the
old version. Running dos2unix or just editing the properties file in your
editor of choice would correct the issue.

I'm interested in hear more about the reason we have to clear cookies to get
back into CF Admin. Hopefully they can correct that with a hot fix if they
haven't already.





-
To unsubscribe from this list, manage your profile @
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-








 

-- 
Dawn




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] ColdFusion 10 updates Offline

[Charlie Arehart]

Ah, got it now. I missed that this was a silent install. Thanks for your
patience with me, Mike. :-)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Mike Staver
Sent: Thursday, December 06, 2012 6:32 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] ColdFusion 10 updates Offline

 

Ok, so two completely separate items really. Sorry to confuse the two.
First, this:

java -jar hotfix_005.jar -i silent -f properties.txt

I have to do this because I need a way to update CF 10 with the appropriate
hotfixes on Solaris. It's a DoD server under strict control. Could I use a
remote X session to blow back the GUI to my desktop using Cygwin or
something? I suppose, but it seems like overkill does it not? So double
clicking on the jar file to execute it is out of the question. I can't
remember where, but I found some Adobe documentation regarding the patching
of CF 10. They did mention this java command above. Here is what I put in
the properties.txt file BTW:

INSTALLER_UI=SILENT
USER_INSTALL_DIR=/web/cf10
DOC_ROOT=/web/cf10/cfusion/wwwroot

I'd be willing to bet $10 that is how the CF Administrator actually installs
the hotfixes as well. 

The second issue is the end of line character. *nix and Windows do it
differently. I forget the specifics, but if I'm not mistaken, Windows uses
two different characters and *nix uses one. So, I wrote the properties.txt
file on my Windows 7 workstation in notepad and scp'd it over to the Solaris
box. It borked the hotfix install because the installer wasn't applying the
patches to the correct directories. It was adding what looked like a space
character to the end of the path, so the actual path looked like:

/web/cf10 /cfusion/wwwroot

That was bad :) Running dos2unix on Solaris fixed it up and I'm now good to
go. 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] ColdFusion 10 updates Offline

[Charlie Arehart]

Glad to hear it helped.

As for the properties file, that's the first I've ever heard of using that
(in Windows or Unix). Since you seem to indicate its use with Windows,
what's it for? (I could google it, sure, but I'd like to hear your
perspective, such as what led you to use it at all. I've never seen it
mentioned, though of course I've seen mention of the command line java -jar
approach.)

As for the cookie thing, I've not heard anyone else talk about it yet, and
since I've not had time to analyze it to really identify the nature of the
problem (and whether anything in CF controls or influences it), I have not
yet filed any bug report.

/charlie


-Original Message-
From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Mike Staver
Sent: Wednesday, December 05, 2012 7:08 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] ColdFusion 10 updates Offline

Thanks Charlie. I was able to download the jar files from the XML you
pointed out, and then run the command line update. Since this is on Solaris
and I don't have a GUI, I had to use the silent option like so:

java -jar hotfix_005.jar -i silent -f properties.txt

What tripped me up on that command is that if you create a properties file
on Windows, and then transfer it over to the Solaris machine, it won't work.
The Windows vs Unix end of line character will bite you. The update appeared
to run fine, but when I'd log back into CF Admin, it would still show the
old version. Running dos2unix or just editing the properties file in your
editor of choice would correct the issue.

I'm interested in hear more about the reason we have to clear cookies to get
back into CF Admin. Hopefully they can correct that with a hot fix if they
haven't already.





-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] ColdFusion 10 updates Offline

[Charlie Arehart]

Glad to have helped. 

As for that problem you're experiencing, here's good news. 

First, it's not at all a Solaris issue. I've seen it on other OS's as well. 

Second, while I plan to do a blog entry with more details, the quick
solution is just to clear all the cookies for whatever domain you're using
to visit the Admin page. Fortunately most modern browsers, or their
available development tools, make this pretty easy. 

If you look, you'll see that you likely have duplicate cookies for CFIDE,
CFTOKEN, (or JsessionId if using J2EE sessions), and others. At a minimum,
just remove all the cfide/cftoken (or jsessionid) cookies. You'll need to
log in one more time, but that should do it.

Again, I'll have more to say in an upcoming blog entry. But I'll look
forward to hearing from you or others with any feedback on this.

/charlie


-Original Message-
From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Mike Staver
Sent: Friday, November 30, 2012 6:13 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] ColdFusion 10 updates Offline

Thanks for the info Charlie. I'm going to have to have download the updates
and run them from the command line. The box in question is a Solaris 10
machine, and I've had nothing but issues with CF 10 on Solaris
unfortunately. The biggest issue is that in CF Administrator, clicking the
submit button on any page after changing a setting throws an error and
logs the user out. You can log back in and try it again, but the result will
be the same. I've found this to be true after installing the mandatory
certificate fix. So, I'd hope that update 5 addresses this issue.






-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] ColdFusion 10 updates Offline

[Charlie Arehart]

Mike, this need to run the updates on a non-connected machine is indeed
addressed. Just not on the administrator screen (perhaps something they
should change). 

The question was asked as a comment in the most recent blog entry about
updater 5, and I offered an extended explanation and answer to the bottom
line question there.

The short answer is that you can get the downloads via this URL:
http://download.adobe.com/pub/adobe/coldfusion/xml/updates.xml, and then put
it on the machine in question, to run either in the Admin or from the
command line.

But for any who feel that the admin or blog entries offer too little
information about common challenges one may encounter with the auto hotfix
mechanism, please do see my comment on that entry where I point to much more
detailed information that Adobe provides:

http://blogs.coldfusion.com/post.cfm/coldfusion-10-update-5-security-update-
now-available#comment-E2FCC8B6-D768-4D5D-ED4080058C52C04C

See also my follow-on comment right after it (#35). I think you'll be amazed
at the great info that's available, if you just know where to look. I
totally get that Adobe should do more wherever they discuss the hotfixes
(blogs, the updater interface in the admin, and the docs) to make it more
clear to people how and where to find that additional info.

Hope that helps, Mike.

/charlie

-Original Message-
From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Mike Staver
Sent: Thursday, November 29, 2012 11:58 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] ColdFusion 10 updates Offline

Can someone point me to a download location for the coldfusion 10 updates? I
find it incredibly odd that I do not find them in any of the obvious places
I would expect to. Yes, I know they want us to get them from the
administrator screens. I can't. I have a machine that is installed in an
enclave without Internet access. I need to be able to put the updates on a
disc and take them there. Please tell me I don't have to go to the trouble
of downloading the updates via another cf install and dig them out of the
updates folder. That seems silly to me. 

-Mike

-
To unsubscribe from this list, manage your profile @
http://www.acfug.org?fa=gin.edituserform

For more info, see http://www.acfug.org/mailinglists Archive @
http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-







-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] running coldfusion apps on Mac

[Charlie Arehart]

Steve, are you referring to the latter part of this thread (about Rick
wanting off the list)? Or are you referring to the original discussion about
running CF on Mac? Just curious.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Steve Ross
Sent: Wednesday, November 28, 2012 1:10 PM
To: ACFUG ColdFusion Discussion
Subject: Re: [ACFUG Discuss] running coldfusion apps on Mac

 

This reminds me of a lot of the stuff in this:
http://www.youtube.com/watch?v=I1KjX5NOD7c Not trolling nor trying to start
a flame war and CF still pays the bills but, there are a lot of REALLY good
points in it regardless of if you agree with the overall message.

 

-Steve

 

On Thu, Nov 22, 2012 at 8:28 PM, R Coe ric...@gmail.com wrote:

yeah i didnt mean to hollar, I appreciate the information though, I love
this ACFUG but when I signed up there were two different sites and I must
have lost my way to this mailing list, Just need to change my settings,
didnt realize this was going out to a user - please forgive me brother -
happy thanksgiving , wish you the best -

 

Rick C

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] running coldfusion apps on Mac

[Charlie Arehart]

Great to hear. Thanks for the update, and glad to help.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Dusty Hale
Sent: Wednesday, November 21, 2012 2:24 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] running coldfusion apps on Mac

 

Charlie:

 

Yea I think that was it. I was running the tool yesterday when I started
troubleshooting but I had also told CF to config all sites during the
install and then when I tried running the tool yesterday I didn't removed
things first. Today I tried again and removed all sites first then re-added.
Now all the sites seem to work. 

 

Thanks again for your help and advice. 

 

Dusty

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] running coldfusion apps on Mac

[Charlie Arehart]

R, no need to holler. This seems the first such request you've ever made,
right? Let me try to help.

(If perhaps you got added to the list and didn't request it, that would be
pretty hard to have happen, but I suppose it could. On the other hand, if
you did add yourself previously and now you want off the list, there's
really no need to use exclamation points, and it's not as if Dusty's message
and the thread was off-topic, but anyway...)

I'll point out my own surprise in noticing that there is no message footer
on this list, as there has been over the years. Here's what it should
convey:

The mailing list is discussed on the site (acfug.org), in the discussions
tab there. And in the first (pinned) message, Josh points out that You can
subscribe/unsubscribe from the ACFUG mailing lists on our old web site at:
http://old.acfug.org/index.cfm?fa=mailinglists.default;.  That page it
explains that you would login to manage your profile
(http://old.acfug.org/index.cfm?fa=login.loginform).

And yes, if you may I don't know my password, there's an option to recover
from that.   And in that both pages ask for your email address, let me save
you more frustration (if you may have more than one address) but noting that
the one you're using to send notes to the list is ric...@gmail.com (so use
that).

Hope that helps.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of R Coe
Sent: Wednesday, November 21, 2012 4:32 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] running coldfusion apps on Mac

 

unsubscribe me please

On Wed, Nov 21, 2012 at 2:05 PM, Dusty Hale du...@dustyhale.com wrote:

I do have the CFIDE mapped in the other sites too. CF seems to execute fine.
I think this is a problem in IIS or something. This is what I'm actually
running into now:

 

Windows 7 Pro with IIS 7.5

 

snip




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] running coldfusion apps on Mac

[Charlie Arehart]

Dusty, there are a few potential problems.

First, are you saying that you installed CF10 telling it to connect to IIS
during the installer, telling it to run with all sites? And then after
that, did you load up the CF Admin with localhost or 127.0.0.1 (which
worked), but now find that when you added a new IIS site, and are trying to
browse pages there, it's not working (except in the root)?

In that case, the problem may not be so much with CF10, but rather due to
a difference in IIS 7 (which also applied to 9.0.1). Only 9.0.1 and 10 are
supported for IIS 7, unless one runs in IIS 6 compatibility mode (and to
some other manual tweaks to get earlier releases to work.) 

And one of the differences of running CF 9.0.1 or 10 against IIS 7 in its
native mode is that, even if you may tell it to configure all sites, it
(IIS) no longer causes newly added sites to inherit all the settings set for
the server. So as Mark said, you need to re-run the CF web server config
tool whenever you add a site, to remove and re-add the option to connect
all sites. It's annoying, but again it's not new in CF 10.

It's just that often people moving to 10 are also moving to Windows 7 or
moving to Windows 2008 for the first time, likely running a shiny new
install of IIS 7, which (unless you change it) is running in native IIS 7
mode (versus IIS 6 Compat mode.) As such, they then experience this
difference  connecting CF to IIS 7. The need to do this reconfiguration on
new sites is indeed documented in the CF 9.0.1 and 10 docs, and in the
config tool, and the installer, but people often miss it (expecting that
things work as they always have, and that the discussion is not something
new, I think.) 

Here, also, is another gotcha: in Windows 7 and 2008, there's also new
security (better, but tighter and it gets in the way sometimes compared to
old experience/expectations). I have seen many people who, even though their
user was a Windows administrator account or in the Admin group, they
still needed to choose manually to run as administrator when launching the
CF web server config tool. If you use the GUI, right-click on it in
StartAll ProgramsAdobeColdFusion xWed Server Configuration and choose
run as administrator. If using the command line, do that same right-click
trick when opening the command prompt.

Let us know if any of that helps.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Dusty Hale
Sent: Tuesday, November 20, 2012 4:51 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] running coldfusion apps on Mac

 

Well I kind of abandoned the idea and today actually I installed CF 10 in
the new Win 7 Pro Virtual Machine (vmware) I've set up. I added a new site
in IIS and have configured that to work with CF and created an ODBC via CF
admin for the site (it works). The problem I'm now running into is that
sites in IIS don't seem to work correctly unless it's all in the default
site and in the default wwwroot folder. The new IIS site I set up does work
when I pull up the homepage. However, if I browse to any page located in a
subfolder, I get a 404 error even though the page does exist and the in the
404 error it shows the physical path to the wwwroot folder even though the
site was set up in IIS to point to c:\websites\mysite\ ... I've tried
everything known to man and have been googling all day about it and still
nothing. I'm totally stuck and frustrated. Now I'm thinking about going back
to the idea of putting CF on the mac side but I'm confused if I should
install a web server on the mac side or use the built in webserver in CF and
I would really like to understand why I can't get sites on the IIS side to
work unless they're in the default site and wwwroot folder. 

If anyone has any insight to that it would be most appreciated. 

 

Thanks,

Dusty

On Thu, Nov 15, 2012 at 12:02 PM, Steve Ross nowhid...@gmail.com wrote:

http://www.virtualbox.org/manual/ch06.html#network_hostonly

 

 

On Thu, Nov 15, 2012 at 1:00 PM, Steve Ross nowhid...@gmail.com wrote:

Are you using Virtualbox?

 

Sounds like you could use host only mode on the VM to do something like that
but, I haven't ever used it. I just typically go into my /etc/hosts on my
mac and change the IP if the windows vm's IP changes.

 

 

On Tue, Nov 13, 2012 at 9:13 PM, Dusty Hale du...@dustyhale.com wrote:

Steve thanks for the info. I'm familiar with configuring a hosts file on a
Windows machine. I'm not sure if the IP on my VM is dynamically assigned or
not so this is a concern. I seem to remember in the past hitting an IIS site
on the VM from the mac side and always having to change the IP. If you have
any other info about how to solve that problem, please share and if not I
will google up something to try and resolve that. Are you saying I could
configure the hosts file on the VM for this. If you have an example line
from your hosts file that would be awesome :-)

 

Thanks again,

Dusty

 

On Tue, Nov 13, 2012 at 7:28 PM, Steve 

RE: [ACFUG Discuss] Quick Survey - Mura Users? Railo?

[Charlie Arehart]

Yes, no, no.

I note you said using mura and railo. Thanks for that clarification. Some
with such polls say have used, which could be answered positively by
anyone who's looked into the thing but is not currently using it. That
generally seems an important distinction. Glad you phrased it as you did,
and hope folks notice it. :-)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Cameron
Childress
Sent: Friday, November 02, 2012 10:18 AM
To: discussion@acfug.org
Subject: [ACFUG Discuss] Quick Survey - Mura Users? Railo?

 

Next week at ACFUG I'm going to be going through Blue River's MuraCon
slidedeck and talking about the upcoming Mura 6 (http://getmura.com/)
release. I'm also going to run through Gert Franz's State of Railo slidedeck
about new Railo 4 features and some other developments in the Railo camp.

 

I thought I'd check with the group beforehand and ask those who plan to
attend:

 

1) Who's heard of Mura?

2) Who's using Mura?

3) Who's using Railo?

 

-Cameron


 

-- 
Cameron Childress
--
p:   678.637.5072

im: cameroncf

facebook http://www.facebook.com/cameroncf  | twitter
http://twitter.com/cameronc  | google+
https://profiles.google.com/u/0/117829379451708140985 

 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] How would you feel about doing a contract job in Costa Rica

[Charlie Arehart]

Cool stuff, indeed. Thanks for the additional info. Again, I recommend
anyone who's looking for a break from the rat race to consider the
possibility. :-)

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Dusty Hale
Sent: Wednesday, October 31, 2012 8:53 AM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] How would you feel about doing a contract job
in Costa Rica

 

Charlie is correct. San Jose has both the nice and the very very gnarly. I
don't go to San Jose very often and I fly in and out of Liberia actually
which is an hour North of Tamarindo. I do go to San Jose occasionally though
for shopping and I stay in the nicer areas like Escazu which is near the
only Apple store in Costa Rica ;-) ... 

 

Life in Tamarindo is much different than San Jose and yes as Charlie says
that's why I don't live near the big city. Tamarindo is 4 hours North of San
Jose and centrally located to numerous amazing and famous beaches like Playa
Flamingo, Playa Grande (turtle reserve), Playa Avellanas, and Playa Negra.
The town itself is rustic and full of wonderful people and culture. They
nickname the town TamaGringo because most of the businesses there are owned
by Americans and other foreigners.  Everyone speaks english so there is no
need to know spanish beyond a few basic words. There is very little violent
crime and no vandalism that I have ever seen. However burglaries can and do
happen but certainly not any worse than anywhere I've lived in Atlanta. I
live in an apartment with gates much the same way I lived in Atlanta except
that it's warm all year and the apartment is a few steps away from the beach
:-). Internet access and 3g cell phone service are good but there is a
little more than normal downtime as compared to US. It's not bad though.
Once every couple of months they'll announce an organized power outage which
usually is during the week for several hours and all the local ex-pat online
workers (mostly SEO's and Blogger types) meet at the local Subway Sandwich
shop to work on projects and use their power generators. It's kind of cool
actually to see all the faces there of online workers that have transformed
their lives into an adventure. 

 

There are also two amazing private schools in Playa Flaming and my daughter
will be attending one of them in Fall of 2013. Both schools are are owned by
Americans and have an American curriculum with a bilingual focus. 

 

Dusty

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] Adobe products... Educational discount?

[Charlie Arehart]

And Frank, note more specifically in the reference Howard offered that
students/teachers can get a Creative Cloud membership (with those tools you
seek and more) at just $20/month. More at
http://store1.adobe.com/cfusion/store/html/index.cfm?event=displayProductca
tegoryOID=7335802store=OLS-EDU.

/charlie


-Original Message-
From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Frank Moorman
Sent: Monday, October 29, 2012 11:49 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] Adobe products... Educational discount?

Sorry this really isn't directly related to CF

All, does Adobe have have any educational discounts... for high school
students?  My nephew just started at a charter/magnet school for multimedia
arts in Jacksonville. He is required to get Adobe After Effects, Premiere
Pro, and Photoshop from CS6. (but would prefer  to have the Creative Suite
Master Collection with Audition and Fireworks.)

However, like most families right now, money is somewhat tight (especially
after springing for a Mac Book, which even used was a budget breaker,) so I
was hoping that some of the Adobe people on the list would know where to get
the best pricing/discounts on the software or what programs are available to
get him the software at a promotional rate. Obviously, getting a legit copy
is important...
(so the too good to be true deals from craigslist aren't really an option.)

Thanks,
Frank


-
To unsubscribe from this list, manage your profile @
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists Archive @
http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-







-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] How would you feel about doing a contract job in Costa Rica

[Charlie Arehart]

Server yes, surfer no. :-) Thanks, Wes, for the thought. (But it's
Arehart, not Earhart. Common mistake, so no worries.)

And Dusty, so that's where you went to? Didn't know. 

But guess what: I was just there this past week until yesterday! Was helping
the folks at Britt. (For the yanks here, Britt is basically the Starbucks of
Costa Rica. I saw their coffee everywhere, from the hotels to the airport.)
I was helping them with performance of their servers. My wife came along and
we enjoyed some time off on the weekends. No time to make it up to
Guanacaste where you were, Dusty, but we got in the water at Manuel Antonio,
and Kim got to do some rainforest and volcano touring while I worked late
last week. We do look forward to returning to see more.

Anyway, while I appreciate the recommendation, Wes, and while I do also
appreciate your sharing the opps with us, Dusty, I am thoroughly enjoying
the CF server troubleshooting I do as an independent consultant. And while I
could indeed do it from anywhere, and may someday consider CR or other
places in Central America, for now that's a while off. 

So I will simply recommend that if anyone else is looking for a getaway like
Dusty is offering, do give this serious consideration. How often does an opp
like this come along? :-) And Costa Rica is not only a beautiful country,
the people are wonderful too, and among the most gracious I've met.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Wes Byrd
Sent: Tuesday, October 30, 2012 6:11 PM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] How would you feel about doing a contract job
in Costa Rica

 

surfer even.  lol

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Wes Byrd
Sent: Tuesday, October 30, 2012 5:03 PM
To: discussion@acfug.org
Subject: RE: [ACFUG Discuss] How would you feel about doing a contract job
in Costa Rica

 

This sounds right up Charlie Earhart's alley.  He seems like a cool hip
server kinda guy.  ;-P

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Dusty Hale
Sent: Tuesday, October 30, 2012 4:29 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] How would you feel about doing a contract job in
Costa Rica

 

Dear ACFUG members:

 

First, I'm posting this to discussion because this is not yet a job offering
but something I want to discuss and get a feel for. 

 

It's been a while since I've used this list so I hope it reaches all of you.
It's been even longer since I lived in Atlanta. Six years ago I relocated
from Atlanta to the very famous small surf and beach town in Costa Rica
known as Tamarindo. This is the same town as seen in one of the most famous
surf movies of all time Endless Summer (Endless Summer II actually). I've
been working remotely from this amazing place for 6 years now and I love it
so much and it has taught me many new things about life. For starters I was
always a surfer. I grew up surfing in Florida so relocating to Costa Rica
was much like getting back to my roots and surf life. I also learned how to
speak Spanish and live simple and greatly reduced my cost of living and need
to acquire assets I don't really need or use (fancy cars, fancy cloths,
fancy lifestyle) and refocused my life on the things that matter all while
maintaining my web developer career largely based on my ColdFusion and SQL
Server knowledge. Free time, family, friends, the beach, surfing community,
etc are all things that mean the world to me.

 

So about now you're asking yourself: Why is this guy emailing acfug about
this? Well you see, life has just presented a new opportunity to me and
several people who I will hire on a contract basis. In the past three years
I have developed solutions for a particular client that sells medical
information subscriptions and the data is stored in SQL Server and delivered
through ColdFusion apps (and some .NET ugg!). The projects were very
successful and I now have a budget to actually open a new office and hire a
small devoted team of 3 to 5 people. The team would be comprised of a
Project Manager (me), a graphic and layout designer, an interface coding
guru (html5, css4, jQuery, etc), and one or two application developers (CF,
SQL, jQuery, AJAX). The best part is that the office will be in Downtown
Tamarindo, Costa Rica in one of the best buildings in town and centrally
located to everything. This is on the Northern Pacific Side with amazing
nature, beaches, culture, surfing waves, ocean fishing, volcanoes, rock
climbing, white water rafting, monkeys, iguanas, and all kinds of other
things that make it such an amazing place. Tamarindo also has an amazing
community full of culture, restaurants,  night clubs, and tour companies all
centered in a town where you don't need a car (walk or bike will do).

 

So I thought I would start this adventure today by putting this little
feeler email out and ask the acfug community members about how you would
feel about taking a 1 year contract position (option to 

RE: [ACFUG Discuss] How would you feel about doing a contract job in Costa Rica

[Charlie Arehart]

And January is among the nicest times of the year there, right? (We got to
experience some of the rainiest weather of the year last week, but also a
couple of pretty days.)

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Dusty Hale
Sent: Tuesday, October 30, 2012 6:49 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] How would you feel about doing a contract job
in Costa Rica

 

I'll keep this list posted as this evolves and assuming this plays out the
way it appear to be playing out, we would be looking to put a team together
by early to mid January. 

 

Thanks again for listening :-) ... my heart warms just thinking about it.

 

Dusty

On Tue, Oct 30, 2012 at 5:10 PM, Wes Byrd w...@dynapp.com wrote:

surfer even.  lol

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] How would you feel about doing a contract job in Costa Rica

[Charlie Arehart]

Wow, wouldn't that be funny, indeed, if we might have hooked up there and
yet have not been able to for a while here in Atlanta.

Indeed, when was the last time you got down to a meeting, for everyone to
enjoy your company? :-)

Anyway, enjoy the trip and the country. Just be prepared: it's not all
rainforest, beach, and nature's beauty. The San Jose city and suburbs have
more a feel of South Central LA, with nearly all houses (the nice and the
gnarly) having not only bars on their windows, but iron fences several feet
high surrounding them, then topped with barbed wire and/or concertina wire.
I just can't imagine living in an environment where you have that sort of
constant fear of burglary, vandalism, or worse.

But again though, the people and nature are indeed wonderful. I'm sure Dusty
(and others) would say and that's why I don't live in or near the big
city. Still, just be aware of that distinction (and oh, there's the traffic
in the city and suburbs, too!)

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Erika L. Rich
Sent: Tuesday, October 30, 2012 9:33 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] How would you feel about doing a contract job
in Costa Rica

 

Charlie! That's incredible. We are going to just miss each other! Charles
and I will be there for 3 weeks from mid-November. That would have been
pretty funny if we managed to hook up in Costa Rica, but yet haven't been
able to make it down there again to see you guys in Alpharetta. :)

We are looking forward to Costa Rica and it will be a research trip to
scope out great places to live (part-time) and work. I hear many great
things about the country and I am sure we will enjoy ourselves immensely.

Cheers,
Erika

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] Need DTD Schema for CF10

[Charlie Arehart]

I already spoke to Ed directly (as he had emailed me separately too), and
I'm just seeing this. But I'll share what I did, in case it may help other
readers here.

Good news: Adobe does indeed offer free updated extensions/tag help/tag
completion/etc for Dreamweaver for each release, up to CF10. 

And for those still using HomeSite/HomeSite+/ColdFusion Studio, you can
update that for free, as well, to CF8. (If you haven't updated you got one
of these, even just getting updates to only CF8 might be better far more
than what's built-in to the tool.)

For more on getting these free updates, see a blog entry I did on this very
topic last month:

http://www.carehart.org/blog/client/index.cfm/2012/10/13/Updates_for_DW_HS_f
or_CF_ 8_9_10
http://www.carehart.org/blog/client/index.cfm/2012/10/13/Updates_for_DW_HS_
for_CF_%208_9_10 

(And yes, to any who would say why not instead encourage people to update
to more modern editors/IDEs?, I do mention them as well and link to more
info on several of them at the end of the blog entry.)

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of
szwedo...@epamail.epa.gov
Sent: Wednesday, October 24, 2012 9:50 AM
To: discussion@acfug.org
Subject: [ACFUG Discuss] Need DTD Schema for CF10

 

Anyone know where I can get a DTD schema for CF10?

I need to update Dreamweaver with the latest tags.

Thanks!
__
Ed Szwedo




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CFLDAP and memory errors

[Charlie Arehart]

I would suspect that it may be only made worse by increasing the heap. :-)
Strap on your seatbelts. If the problem was easily understood and solved,
you'd have found the answer elsewhere. I'll share here some thoughts you
don't see/hear often. It will take a few paragraphs to give proper context,
though. Sorry for the long-ish email.

Often (though not always) the unable to create new native thread is due to
CF/the JVM being unable to allocate a new thread in a part of the address
space OUTSIDE the heap (but within the jrun.exe process space), and you
don't set this stack space. It just gets what's left over after the
heap, permgen, and other spaces use memory. 

Well, if you are on 32-bit (where most people got this error), then you get
only 2GB total addressable space for each process. And the bigger you make
the heap, the less space is left for this stack space. There are more
details and nuances, but this should help get you started. So believe it or
not, sometimes lowering the heap is the solution.

How far can you lower it? Well, until you start getting outofmemory: java
heap space errors (or gc overhead limit reached, which means merely that
the JVM has been trying to do GCs as it gets full, but it's not able to
reclaim much.) So yes, it's a balancing act, to make both errors go away.

As always, there's more to this than meets the eye: while sometimes the
solution is to change the resource limits (add heap, or in this case reduce
it), but another thought is to find what's putting pressure on the exhausted
resource instead. So there may be some other explanation for why you are
trying to create so many threads that can't fit in that stack space, or
other things putting pressure on that available addressable space, thus
squeezing the stack space. There can be many reasons for that, again too
much to get into in email.  



BTW, if someone would point out the XSS jvm arg as a solution for this
new native thread error which they've seen offered, I'd argue against
that. Here's why: that's not for setting the size of the stack space, but
rather for setting the size of each stack entry. And since I can find no
documentation of what the default is for different versions of the JVM and
OS, I would be leery of just changing that to see if it may help this
problem.

(Similarly, and related, when one gets outofmemory in the heap, the natural
reaction is increase the heap, but I'd argue instead you should find out
what's putting pressure on the heap, which might be an unusually large
amount of sessions, perhaps caused by excessive visits by spiders and bots,
etc. Lowering that pressure may be the real right answer, and may do
your server a world of other good.)

No, you don't often hear the above, but it's because a) it can't be
communicated in a tweet and b) people tend to repeat what they've heard from
others (in tweets or perhaps in old blog entries, which in my estimate seem
often to have been more making guesses at what was amiss, and offering a
bunch of solutions, like JVM argument tweaks, rather than focusing on real
root causes, etc.) 

BTW, I mean no disrespect to any here on the list who may have done that, or
may well disagree with me. I'm just commenting on my observation of this CF
server troubleshooting space, where I live day in and day out. I know there
may be others here who don't agree with something I've said above. It's
clearly an area with divergent opinions. I'm just basing my observations and
suggestions on what I have specifically helped many people with.

One last thing about the new native thread error: there's one other thing
that can lead to it. For some releases of CF, there was a problem where
image handling was loading lots of DLLs into the address space, and that TOO
was putting pressure on the stack space. Applying that hotfix (which was
sometimes not included in the CHFs) would be necessary.  But since you say,
Rob, that you're on 9.0.2, then you have ALL the hotfixes, and that's not
the issue for you. Even so, it just goes to show that sometimes the cause is
NOT about the JVM and NOT about CF itself, but can be influenced by code
(which I'll argue could be exacerbated by spiders and bots). So often, it's
one thing that leads to another. But you have to start somewhere. :-)

Perhaps the simplest solution (if you can't lower the heap much) would be to
move to a 64-bit environment. That removes the 2gb per process limit, and
often lets CF/the JVM breath better. 

Hope that's helpful.

/charlie

PS I probably ought to make a blog entry out of this, but I'll wait to hear
what others may say, and especially how things may go for Rob if he tries
any of the suggestions. Sadly, not all answers are always right. This can
be an area with lots of subtleties.  Even so, the above has proven helpful
and true for many I've helped, and it's different from what most offer in
response to the problem, so let's see how it goes.

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Rob 

RE: [ACFUG Discuss] CFLDAP and memory errors

[Charlie Arehart]

Cool stuff. Thanks for sharing, Jason.

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jason Delmore
Sent: Tuesday, October 09, 2012 4:09 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CFLDAP and memory errors

 

Rob,

 

I think the memory part of this error message is somewhat misleading.  What
is happening is that the JVM is running out of operating system threads.  As
Charlie points out, you can decrease the heap size and leave more space for
the stack, but at the end of the day you are just nudging up the upward
limit a bit, you can also decrease the stack size used by each thread, but
then you are likely to cause a different memory error.  Life is certainly
better in 64-bit as these limits become somewhat meaningless.

 

In this case, each CFLDAP request will spawn a new thread and if for some
reason the LDAP requests are queuing or not closing properly or quickly
enough then the system will basically run out at some point when it goes to
create the next thread and error out.

 

A relatively easy solution although maybe not ideal, would be to manually
manage the LDAP request queue and if the in process requests are getting too
deep, sleep until the queue settles.  I imagine you have spikes in requests
that just need to be leveled out a bit.  You may also want to store some of
the LDAP results in your DB for some period of time as sort of an auth
cache.

 

Just some thoughts,

Jason

 

On Tue, Oct 9, 2012 at 2:28 PM, Rob Saxon saxon...@mercer.edu wrote:

Charlie,

Thanks so much for lending your expertise.  We will take a look at lowering
the heap space.  We are on a 32-bit server, but it has run for several years
without issue.  Recently, we added more apps that rely on LDAP calls via
CFLDAP.  So far, every time this error was thrown, the CFFDAP tag was in
process. Do you know of any code optimizing strategies specific to CFLDAP?

Thanks,

Rob 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: [ACFUG Discuss] CF 10 Dynamic Java Loading

[Charlie Arehart]

Good to hear. Thanks for the update.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Mike Staver
Sent: Monday, September 24, 2012 12:34 AM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CF 10 Dynamic Java Loading

 

So, I reached out to the JavaLoader mail list and Mark responded with the
fix. It appears I've been using the classloader jar file incorrectly for
years. As I mentioned before, I've been putting that jar file in a standard
CF lib directory for loading. That is not the correct location for the file
- I was supposed to have left it in the lib folder it came in, and keep that
folder relative to the JavaLoader.cfc and other cfcs that ship with
JavaLoader. When I did that, and restarted ColdFusion, I was able to use it
successfully with CF 10. It's amazing that it ever worked for me in CF 7-9.
I now have to continue to test with the latest version of POI, etc. 

Thanks everybody for the help. I don't know when I decided I was supposed to
put the jar in the standard CF locations, but it was sometime back in the CF
7 days. Hopefully this keeps somebody from making the same mistake. I will
also try to use the new CF 10 method for loading java files and report back
if I can make it work as I need. 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-