Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7
I thought I would share what I saw today which is really surprising. So When I run wsconfig tool as administrator, I see sites : All, site1, site2 and under D:\ColdFusion9\runtime\lib\wsconfig folder, I see 1, 2, 3 folders which matches All, site1, site2. The reason the folders 2 and 3 were created is because I didnt select ALL sites the time I ran wsconfig to configure site1 and site2. The reason I did this is because I wanted each site to have its own pool of requests i.e. 25 or 50 whatever you set. Now there was a new site added recently. So per documentation, I ran wsconfig as administrator and selected ADD on first screen, and on next screen, I selected ALL this time (because the CF documentation says so). So, once the configuration tool completes, I was expecting folders 1,2,3,4 under D:\ColdFusion9\runtime\lib\wsconfig . The tool finished running and sure enough I saw folder 4. I was like all is well. After few minutes, that folder 4 was gone/deleted automatically. The site/cfm page seems to be served fine. I am just baffled that the folder dissapeared just like that. Has anyone seen this? If it had not created folder 4, I would have been OK thinking, well it added configuration under folder 1 because I selected ALL site while configuring this new site. The creation of folder 4 and that folder dissapearing has raised few doubts in my mind. Thanks, Ajas Mohammed / iUseDropbox(http://db.tt/63Lvone9) http://ajashadi.blogspot.com We cannot become what we need to be, remaining what we are. No matter what, find a way. Because thats what winners do. You can't improve what you don't measure. Quality is never an accident; it is always the result of high intention, sincere effort, intelligent direction and skillful execution; it represents the wise choice of many alternatives. On Thu, Nov 7, 2013 at 1:33 PM, Charlie Arehart char...@carehart.orgwrote: Ah, ok. Well, the issue is that that document was written when CF 9.0.1 (or as it called itself there, “ColdFusion 9 update 1”) was released. The information it states was true then, a few years ago. They just did not think to go back and update it as they created hotfixes after the fact. And one could argue they could/should have been more clear and says “yes, at least those that are available as of date when the 9.0.1 installers were built.” So we see here how this is a pernicious problem with respect to anything you read. I see people relying on old blog posts or form threads from years ago, who assume that they state what is true (“they can’t say anything that’s not true on the internet”, right?), but they don’t consider that it may have been true then but is no longer. It may be because versions of software change, it may be because understanding about how things work has changed (for that writer, or for the community, and so on). More than anything, I’d argue that this stems from people being rather lazy in their writing, as above in the technote Ajas mentions. People need to write more carefully knowing that what they say may stand for years. And if folks wondered why I wrote so much when I do, that’s as much part of the reason as anything. People generally need the full context to really understand things. At least, that’s how I see it. :-) /charlie *From:* ad...@acfug.org [mailto:ad...@acfug.org] *On Behalf Of *Ajas Mohammed *Sent:* Thursday, November 07, 2013 11:37 AM *To:* discussion@acfug.org *Subject:* Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7 Hi, I was really misled (or perhaps misread it) by this URL earlier, http://helpx.adobe.com/coldfusion/kb/faq-coldfusion-9-0-update.html#main_Is_the_latest_security_hot_fix. I knew I had read this somewhere but didnt remember where. So looks like all hotfix and CHF are included for 9 and not 9.0.1 which would make sense. Is the latest security hotfix and cumulative hotfix for ColdFusion 9 included in ColdFusion 9 Update 1? Yes. Anyway, for anyone reading this thread, the resource CFMYTHS http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_installer_includes_all_updates%20is awesome. http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_installer_includes_all_updates http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_installer_includes_all_updates. I learned a lot from this post. I would recommend people to start from there and then proceed to other things. Like Charlie said, you can find the CHFs: http://helpx.adobe.com/coldfusion/kb/hot-fixes-coldfusion-9.html. Thanks Charlie, I always learn a great deal from your every single post. I mean it. Thanks, Ajas Mohammed / iUseDropbox(http://db.tt/63Lvone9) http://ajashadi.blogspot.com We cannot become what we need to be, remaining what we are. No matter what, find a way. Because thats what winners do. You can't improve what you don't measure. Quality is never an accident; it is always
Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7
a chance to do the same. We’re all in this together. :-) /charlie *From:* ad...@acfug.org [mailto:ad...@acfug.org] *On Behalf Of *Ajas Mohammed *Sent:* Wednesday, November 06, 2013 3:35 PM *To:* discussion@acfug.org *Subject:* Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7 In terms of security, for CF 9.0.1, do I need to install anything like hotfixes patches? I thought everything was included in the 9.0.1 updates, is that not the case? Can someone point me to link for hotfixes security patches for CF 9.0.1. Thanks, Ajas Mohammed / - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink http://www.fusionlink.com -
RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7
Thanks for the kind reply and understanding. :-) So as for your last sentence, let's be clear: when you say you wondered if the last hot fix was cumulative or not, if we're talking about CHFs, they are inherently cumulative (being an bbreviation for cumulative hotfix.) And as I mentioned below, in the case of CHF4 for 901, that is not only cumulative of all hotfixes at the time but ALSO all security fixes at that time. But as I touched on more in the blog entry I mentioned below on whether downloaded installers are updated (and I could have repeated in my last email but didn't think to), there are indeed often more hotfixes (individual and security) that are released after a CHF, over time. So it is incumbent on you to both add the CHF and THEN look at both the hotfixes page (which I point to below) AND the security bulletins page (which I point to in one of my comments on the blog entry) to see if there are new one after the CHF, and indeed there are for CF 901 CHF4. Yep, it's a lot of work. And as Dave Epler pointed out in a comment on that blog entry, he created the unofficial updater tool as a way to help with all this. See uu2.riaforge.org for more. It has some risks, related to what I point out in the blog entry about you maybe having multiple CFIDEs that you need to update. It doesn't provide for that. I just added a comment to the blog entry with more info. Hope all that helps Ajas or any other readers. /charlie From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed Sent: Thursday, November 07, 2013 12:10 AM To: discussion@acfug.org Subject: RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7 Thanks again, I kind of knew I was asking for trouble with that question. :=) I totally understand what you are referring to, in fact, I would take it as part complement, when you refer to my posts. I wouldnt take offense to your email, I have learned a lot from Esp Your emails. I might have missed obvious but my main concern was if the last hot fix was cumulative or not. I could not confirm it via adobe site earlier, maybe I was rushing through it. Your comments make sense. Thanks again, On Nov 6, 2013 9:47 PM, Charlie Arehart char...@carehart.org wrote: Wow, Ajas, the answer is that it's ABSOLUTELY NOT the case. When you get ANY release of CF, it DOES NOT come with all the updates. And as for 9.0.1 specifically, there were 4 CHFs and many individual security fixes since it was released. The same is true for all releases. FWIW, I addressed this issue you're raising in a 2010 blog entry (with more detail): CFMyths: When I download CF to install it from scratch, it has the latest fixes/updaters http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_inst aller_includes_all_updates I do mention there where you can find the CHFs: http://helpx.adobe.com/coldfusion/kb/hot-fixes-coldfusion-9.html. Of course, do be careful applying them, as things can break. I discuss that at length here: CF911: Are you finding CF (or CF Admin) busted after applying a hotfix? A few possible reasons http://www.carehart.org/blog/client/index.cfm/2011/10/21/why_chfs_may_break There is some good news for you, though, Ajas: if you do apply CF 9.0.1 CHF4, you will get all the individual, cumulative, AND security hotfixes at once. That latter point is new in CF 901 CHF4, in that it includes security updates. Previously, CHFs only included the previous hotfixes, not security updates. I realize that may sound great, but it can be a blessing and a curse. For many people, when they apply all security updates, they find that things do break. I discussed that as part of another entry: CF911: New Adobe document about #ColdFusion security hotfixes: required reading, I'd say http://www.carehart.org/blog/client/index.cfm/2013/5/21/new_adobe_summary_of _security_hotfix_tweaks I do realize that many folks, especially who don't spend much time in all this stuff, can easily misunderstand things, which is of course why I write the things I do, and in the depth I do. Finally, with all due (and sincere) respect to Ajas, when someone of his experience, so otherwise knowledgeable in the ways of CF administration (judging from his emails here and elsewhere) asks such a question, we really do have to shudder to think what the average developer/admin is assuming :-( I guess that's partly why I'm so busy in my CF server troubleshooting! But as you guys here see, I try (and try) to point out resources to help people avoid such problems and misconceptions.at least for those with the temerity to read more than a paragraph! :-) Fortunately Ajas has always been up to the challenge, so I trust both that he will have read to this point, and that he will take the information to hear (and accept my comment of the last paragraph in the spirit intended). More than that, I trust that he will now help others who may ever raise this same question. Hope others may get a chance to do
RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7
Ah, ok. Well, the issue is that that document was written when CF 9.0.1 (or as it called itself there, ColdFusion 9 update 1) was released. The information it states was true then, a few years ago. They just did not think to go back and update it as they created hotfixes after the fact. And one could argue they could/should have been more clear and says yes, at least those that are available as of date when the 9.0.1 installers were built. So we see here how this is a pernicious problem with respect to anything you read. I see people relying on old blog posts or form threads from years ago, who assume that they state what is true (they can't say anything that's not true on the internet, right?), but they don't consider that it may have been true then but is no longer. It may be because versions of software change, it may be because understanding about how things work has changed (for that writer, or for the community, and so on). More than anything, I'd argue that this stems from people being rather lazy in their writing, as above in the technote Ajas mentions. People need to write more carefully knowing that what they say may stand for years. And if folks wondered why I wrote so much when I do, that's as much part of the reason as anything. People generally need the full context to really understand things. At least, that's how I see it. :-) /charlie From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed Sent: Thursday, November 07, 2013 11:37 AM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7 Hi, I was really misled (or perhaps misread it) by this URL earlier, http://helpx.adobe.com/coldfusion/kb/faq-coldfusion-9-0-update.html#main_Is_ the_latest_security_hot_fix . I knew I had read this somewhere but didnt remember where. So looks like all hotfix and CHF are included for 9 and not 9.0.1 which would make sense. Is the latest security hotfix and cumulative hotfix for ColdFusion 9 included in ColdFusion 9 Update 1? Yes. Anyway, for anyone reading this thread, the resource CFMYTHS http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_ins taller_includes_all_updates%20 is awesome. http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_inst aller_includes_all_updates . I learned a lot from this post. I would recommend people to start from there and then proceed to other things. Like Charlie said, you can find the CHFs: http://helpx.adobe.com/coldfusion/kb/hot-fixes-coldfusion-9.html. Thanks Charlie, I always learn a great deal from your every single post. I mean it. Thanks, Ajas Mohammed / iUseDropbox( http://db.tt/63Lvone9 http://db.tt/63Lvone9) http://ajashadi.blogspot.com We cannot become what we need to be, remaining what we are. No matter what, find a way. Because thats what winners do. You can't improve what you don't measure. Quality is never an accident; it is always the result of high intention, sincere effort, intelligent direction and skillful execution; it represents the wise choice of many alternatives. On Thu, Nov 7, 2013 at 12:10 AM, Ajas Mohammed ajash...@gmail.com wrote: Thanks again, I kind of knew I was asking for trouble with that question. :=) I totally understand what you are referring to, in fact, I would take it as part complement, when you refer to my posts. I wouldnt take offense to your email, I have learned a lot from Esp Your emails. I might have missed obvious but my main concern was if the last hot fix was cumulative or not. I could not confirm it via adobe site earlier, maybe I was rushing through it. Your comments make sense. Thanks again, On Nov 6, 2013 9:47 PM, Charlie Arehart char...@carehart.org wrote: Wow, Ajas, the answer is that it's ABSOLUTELY NOT the case. When you get ANY release of CF, it DOES NOT come with all the updates. And as for 9.0.1 specifically, there were 4 CHFs and many individual security fixes since it was released. The same is true for all releases. FWIW, I addressed this issue you're raising in a 2010 blog entry (with more detail): CFMyths: When I download CF to install it from scratch, it has the latest fixes/updaters http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_inst aller_includes_all_updates I do mention there where you can find the CHFs: http://helpx.adobe.com/coldfusion/kb/hot-fixes-coldfusion-9.html. Of course, do be careful applying them, as things can break. I discuss that at length here: CF911: Are you finding CF (or CF Admin) busted after applying a hotfix? A few possible reasons http://www.carehart.org/blog/client/index.cfm/2011/10/21/why_chfs_may_break There is some good news for you, though, Ajas: if you do apply CF 9.0.1 CHF4, you will get all the individual, cumulative, AND security hotfixes at once. That latter point is new in CF 901 CHF4, in that it includes security updates. Previously, CHFs only included the previous hotfixes, not security
Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7
In terms of security, for CF 9.0.1, do I need to install anything like hotfixes patches? I thought everything was included in the 9.0.1 updates, is that not the case? Can someone point me to link for hotfixes security patches for CF 9.0.1. Thanks, Ajas Mohammed / iUseDropbox(http://db.tt/63Lvone9) http://ajashadi.blogspot.com We cannot become what we need to be, remaining what we are. No matter what, find a way. Because thats what winners do. You can't improve what you don't measure. Quality is never an accident; it is always the result of high intention, sincere effort, intelligent direction and skillful execution; it represents the wise choice of many alternatives. On Tue, Nov 5, 2013 at 12:42 AM, Charlie Arehart char...@carehart.orgwrote: You will continue to see it using jrun_iis6_wildcard. That’s not incorrect (but potentially confusing, yes). /charlie *From:* ad...@acfug.org [mailto:ad...@acfug.org] *On Behalf Of *Ajas Mohammed *Sent:* Tuesday, November 05, 2013 12:01 AM *To:* discussion@acfug.org *Subject:* Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7 Again thanks. I think I am guessing that the correct answer to this is 75 because of different application pools. I could be wrong though, like you said better to do practical test and figure out what happens. One thing I found which is weird I have jrun_iis6_wildcard instead of jrun_iis7_wildcard, this is really surprising to me. We had iis6 comparability initially and then removed it and re installed cf 9.0.1 ran connector again for all sites. Thanks, Ajas Mohammed / iUseDropbox(http://db.tt/63Lvone9) http://ajashadi.blogspot.com We cannot become what we need to be, remaining what we are. No matter what, find a way. Because thats what winners do. You can't improve what you don't measure. Quality is never an accident; it is always the result of high intention, sincere effort, intelligent direction and skillful execution; it represents the wise choice of many alternatives. On Mon, Nov 4, 2013 at 11:42 PM, Charlie Arehart char...@carehart.org wrote: Thanks for the kind regards. As for your question, that’s something I’ve always wondered myself. :-) In fact, you will see that on the Adobe blog entry about that maxworkerthreads bug (from a few years ago) that I had asked this question specifically, and I never got an answer. I always wanted to test it, but never got around to it. If you may do some testing determine it, please do let us know. To quote “Dances with Wolves”, I’d consider that a “good trade”. :-) /charlie *From:* ad...@acfug.org [mailto:ad...@acfug.org] *On Behalf Of *Ajas Mohammed *Sent:* Monday, November 04, 2013 10:53 PM *To:* discussion@acfug.org *Subject:* Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7 Thank you sir. You are the best!!!. Do you see any issues with these separate folders? Plus what about the whole logic about concurrent requests and IIS bug? In this case without the fix (maxworkerthreads=25) and default worker process (1) and seperate application pools for all sites plus 2nd folder and 3 folder as well, does it mean this 1. 25 default setting for concurrent req (bug) x for all sites and 25 x for 2nd folder and 25 x for 3rd folder = 75 or 2. 25 max requests for all sites , 2nd folder site, 3 folder site = 25 max requests overall Thanks, Ajas Mohammed / - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink http://www.fusionlink.com - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink http://www.fusionlink.com -
Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7
Please review the Adobe CF Security bulletins and make sure you're patched. There were some pretty major holes plugged last January. https://www.adobe.com/support/security/?securityadvisoryproduct=%23coldfusionSubmit=Go#coldfusion On Wed, Nov 6, 2013 at 3:35 PM, Ajas Mohammed ajash...@gmail.com wrote: In terms of security, for CF 9.0.1, do I need to install anything like hotfixes patches? I thought everything was included in the 9.0.1 updates, is that not the case? Can someone point me to link for hotfixes security patches for CF 9.0.1. Thanks, Ajas Mohammed / iUseDropbox(http://db.tt/63Lvone9) http://ajashadi.blogspot.com We cannot become what we need to be, remaining what we are. No matter what, find a way. Because thats what winners do. You can't improve what you don't measure. Quality is never an accident; it is always the result of high intention, sincere effort, intelligent direction and skillful execution; it represents the wise choice of many alternatives. On Tue, Nov 5, 2013 at 12:42 AM, Charlie Arehart char...@carehart.orgwrote: You will continue to see it using jrun_iis6_wildcard. That’s not incorrect (but potentially confusing, yes). /charlie *From:* ad...@acfug.org [mailto:ad...@acfug.org] *On Behalf Of *Ajas Mohammed *Sent:* Tuesday, November 05, 2013 12:01 AM *To:* discussion@acfug.org *Subject:* Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7 Again thanks. I think I am guessing that the correct answer to this is 75 because of different application pools. I could be wrong though, like you said better to do practical test and figure out what happens. One thing I found which is weird I have jrun_iis6_wildcard instead of jrun_iis7_wildcard, this is really surprising to me. We had iis6 comparability initially and then removed it and re installed cf 9.0.1 ran connector again for all sites. Thanks, Ajas Mohammed / iUseDropbox(http://db.tt/63Lvone9) http://ajashadi.blogspot.com We cannot become what we need to be, remaining what we are. No matter what, find a way. Because thats what winners do. You can't improve what you don't measure. Quality is never an accident; it is always the result of high intention, sincere effort, intelligent direction and skillful execution; it represents the wise choice of many alternatives. On Mon, Nov 4, 2013 at 11:42 PM, Charlie Arehart char...@carehart.org wrote: Thanks for the kind regards. As for your question, that’s something I’ve always wondered myself. :-) In fact, you will see that on the Adobe blog entry about that maxworkerthreads bug (from a few years ago) that I had asked this question specifically, and I never got an answer. I always wanted to test it, but never got around to it. If you may do some testing determine it, please do let us know. To quote “Dances with Wolves”, I’d consider that a “good trade”. :-) /charlie *From:* ad...@acfug.org [mailto:ad...@acfug.org] *On Behalf Of *Ajas Mohammed *Sent:* Monday, November 04, 2013 10:53 PM *To:* discussion@acfug.org *Subject:* Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7 Thank you sir. You are the best!!!. Do you see any issues with these separate folders? Plus what about the whole logic about concurrent requests and IIS bug? In this case without the fix (maxworkerthreads=25) and default worker process (1) and seperate application pools for all sites plus 2nd folder and 3 folder as well, does it mean this 1. 25 default setting for concurrent req (bug) x for all sites and 25 x for 2nd folder and 25 x for 3rd folder = 75 or 2. 25 max requests for all sites , 2nd folder site, 3 folder site = 25 max requests overall Thanks, Ajas Mohammed / - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink http://www.fusionlink.com - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink http://www.fusionlink.com - -- Dawn
RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7
Wow, Ajas, the answer is that it's ABSOLUTELY NOT the case. When you get ANY release of CF, it DOES NOT come with all the updates. And as for 9.0.1 specifically, there were 4 CHFs and many individual security fixes since it was released. The same is true for all releases. FWIW, I addressed this issue you're raising in a 2010 blog entry (with more detail): CFMyths: When I download CF to install it from scratch, it has the latest fixes/updaters http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_inst aller_includes_all_updates I do mention there where you can find the CHFs: http://helpx.adobe.com/coldfusion/kb/hot-fixes-coldfusion-9.html. Of course, do be careful applying them, as things can break. I discuss that at length here: CF911: Are you finding CF (or CF Admin) busted after applying a hotfix? A few possible reasons http://www.carehart.org/blog/client/index.cfm/2011/10/21/why_chfs_may_break There is some good news for you, though, Ajas: if you do apply CF 9.0.1 CHF4, you will get all the individual, cumulative, AND security hotfixes at once. That latter point is new in CF 901 CHF4, in that it includes security updates. Previously, CHFs only included the previous hotfixes, not security updates. I realize that may sound great, but it can be a blessing and a curse. For many people, when they apply all security updates, they find that things do break. I discussed that as part of another entry: CF911: New Adobe document about #ColdFusion security hotfixes: required reading, I'd say http://www.carehart.org/blog/client/index.cfm/2013/5/21/new_adobe_summary_of _security_hotfix_tweaks I do realize that many folks, especially who don't spend much time in all this stuff, can easily misunderstand things, which is of course why I write the things I do, and in the depth I do. Finally, with all due (and sincere) respect to Ajas, when someone of his experience, so otherwise knowledgeable in the ways of CF administration (judging from his emails here and elsewhere) asks such a question, we really do have to shudder to think what the average developer/admin is assuming :-( I guess that's partly why I'm so busy in my CF server troubleshooting! But as you guys here see, I try (and try) to point out resources to help people avoid such problems and misconceptions.at least for those with the temerity to read more than a paragraph! :-) Fortunately Ajas has always been up to the challenge, so I trust both that he will have read to this point, and that he will take the information to hear (and accept my comment of the last paragraph in the spirit intended). More than that, I trust that he will now help others who may ever raise this same question. Hope others may get a chance to do the same. We're all in this together. :-) /charlie From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed Sent: Wednesday, November 06, 2013 3:35 PM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7 In terms of security, for CF 9.0.1, do I need to install anything like hotfixes patches? I thought everything was included in the 9.0.1 updates, is that not the case? Can someone point me to link for hotfixes security patches for CF 9.0.1. Thanks, Ajas Mohammed / - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7
Thanks again, I kind of knew I was asking for trouble with that question. :=) I totally understand what you are referring to, in fact, I would take it as part complement, when you refer to my posts. I wouldnt take offense to your email, I have learned a lot from Esp Your emails. I might have missed obvious but my main concern was if the last hot fix was cumulative or not. I could not confirm it via adobe site earlier, maybe I was rushing through it. Your comments make sense. Thanks again, On Nov 6, 2013 9:47 PM, Charlie Arehart char...@carehart.org wrote: Wow, Ajas, the answer is that it’s ABSOLUTELY NOT “the case”. When you get ANY release of CF, it DOES NOT come with “all the updates”. And as for 9.0.1 specifically, there were 4 CHFs and many individual security fixes since it was released. The same is true for all releases. FWIW, I addressed this issue you’re raising in a 2010 blog entry (with more detail): “CFMyths: When I download CF to install it from scratch, it has the latest fixes/updaters http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_installer_includes_all_updates I do mention there where you can find the CHFs: http://helpx.adobe.com/coldfusion/kb/hot-fixes-coldfusion-9.html. Of course, do be careful applying them, as things can break. I discuss that at length here: “CF911: Are you finding CF (or CF Admin) busted after applying a hotfix? A few possible reasons” http://www.carehart.org/blog/client/index.cfm/2011/10/21/why_chfs_may_break There is some good news for you, though, Ajas: if you do apply CF 9.0.1 CHF4, you will get all the individual, cumulative, AND security hotfixes at once. That latter point is new in CF 901 CHF4, in that it includes security updates. Previously, CHFs only included the previous hotfixes, not security updates. I realize that may sound great, but it can be a blessing and a curse. For many people, when they apply all security updates, they find that things do break. I discussed that as part of another entry: “CF911: New Adobe document about #ColdFusion security hotfixes: required reading, I'd say” http://www.carehart.org/blog/client/index.cfm/2013/5/21/new_adobe_summary_of_security_hotfix_tweaks I do realize that many folks, especially who don’t spend much time in all this stuff, can easily misunderstand things, which is of course why I write the things I do, and in the depth I do. Finally, with all due (and sincere) respect to Ajas, when someone of his experience, so otherwise knowledgeable in the ways of CF administration (judging from his emails here and elsewhere) asks such a question, we really do have to shudder to think what the average developer/admin is assuming :-( I guess that’s partly why I’m so busy in my CF server troubleshooting! But as you guys here see, I try (and try) to point out resources to help people avoid such problems and misconceptions…at least for those with the temerity to read more than a paragraph! :-) Fortunately Ajas has always been up to the challenge, so I trust both that he will have read to this point, and that he will take the information to hear (and accept my comment of the last paragraph in the spirit intended). More than that, I trust that he will now help others who may ever raise this same question. Hope others may get a chance to do the same. We’re all in this together. :-) /charlie *From:* ad...@acfug.org [mailto:ad...@acfug.org] *On Behalf Of *Ajas Mohammed *Sent:* Wednesday, November 06, 2013 3:35 PM *To:* discussion@acfug.org *Subject:* Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7 In terms of security, for CF 9.0.1, do I need to install anything like hotfixes patches? I thought everything was included in the 9.0.1 updates, is that not the case? Can someone point me to link for hotfixes security patches for CF 9.0.1. Thanks, Ajas Mohammed / - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink http://www.fusionlink.com -
RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7
Ajas, that was so with IIS 6 but no longer so with IIS 7 (particularly without running in IIS 6 compat mode, as you indicated). In IIS 7, the settings no longer propagate to newly added sites. You do have to run the wsconfig tool to either do a remove/re-add of all sites, or you can individually connect the new sites to CF (as you did). And in that case, it WOULD create a new folder under wsconfig, as that is one per connection between IIS (one or all sites) and CF. /charlie From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed Sent: Monday, November 04, 2013 5:35 PM To: discussion@acfug.org Subject: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7 We have brand new servers with CF 9.0.1 Windows 2008 R2 IIS 7 (removed IIS 6 comptability from IIS before install). After the CF 9.0.1 installation, I believe I had to run wsconfig the first time to configure connectors for ALL IIS 7 sites. All was perfect. Recently, 2 new sites were added and I had to run wsconfig tool again. I was under the impression that any new site will take the settings from default site which was set properly for IIS 7. Anyway, after running wsconfig for these new 2 sites, now I have folders 1,2,3 under D:\ColdFusion9\runtime\lib\wsconfig which surprised me. Is this normal? also why these 2 sites didnt go under folder 1 like other sites? Thanks, Ajas. - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7
Thank you sir. You are the best!!!. Do you see any issues with these separate folders? Plus what about the whole logic about concurrent requests and IIS bug? In this case without the fix (maxworkerthreads=25) and default worker process (1) and seperate application pools for all sites plus 2nd folder and 3 folder as well, does it mean this 1. 25 default setting for concurrent req (bug) x for all sites and 25 x for 2nd folder and 25 x for 3rd folder = 75 or 2. 25 max requests for all sites , 2nd folder site, 3 folder site = 25 max requests overall Thanks, Ajas Mohammed / iUseDropbox(http://db.tt/63Lvone9) http://ajashadi.blogspot.com We cannot become what we need to be, remaining what we are. No matter what, find a way. Because thats what winners do. You can't improve what you don't measure. Quality is never an accident; it is always the result of high intention, sincere effort, intelligent direction and skillful execution; it represents the wise choice of many alternatives. On Mon, Nov 4, 2013 at 7:54 PM, Charlie Arehart char...@carehart.orgwrote: Ajas, that was so with IIS 6 but no longer so with IIS 7 (particularly without running in IIS 6 compat mode, as you indicated). In IIS 7, the settings no longer propagate to newly added sites. You do have to run the wsconfig tool to either do a remove/re-add of “all sites”, or you can individually connect the new sites to CF (as you did). And in that case, it WOULD create a new folder under wsconfig, as that is one per “connection” between IIS (one or all sites) and CF. /charlie *From:* ad...@acfug.org [mailto:ad...@acfug.org] *On Behalf Of *Ajas Mohammed *Sent:* Monday, November 04, 2013 5:35 PM *To:* discussion@acfug.org *Subject:* [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7 We have brand new servers with CF 9.0.1 Windows 2008 R2 IIS 7 (removed IIS 6 comptability from IIS before install). After the CF 9.0.1 installation, I believe I had to run wsconfig the first time to configure connectors for ALL IIS 7 sites. All was perfect. Recently, 2 new sites were added and I had to run wsconfig tool again. I was under the impression that any new site will take the settings from default site which was set properly for IIS 7. Anyway, after running wsconfig for these new 2 sites, now I have folders 1,2,3 under D:\ColdFusion9\runtime\lib\wsconfig which surprised me. Is this normal? also why these 2 sites didnt go under folder 1 like other sites? Thanks, Ajas. - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink http://www.fusionlink.com -
RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7
Thanks for the kind regards. As for your question, that's something I've always wondered myself. :-) In fact, you will see that on the Adobe blog entry about that maxworkerthreads bug (from a few years ago) that I had asked this question specifically, and I never got an answer. I always wanted to test it, but never got around to it. If you may do some testing determine it, please do let us know. To quote Dances with Wolves, I'd consider that a good trade. :-) /charlie From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed Sent: Monday, November 04, 2013 10:53 PM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7 Thank you sir. You are the best!!!. Do you see any issues with these separate folders? Plus what about the whole logic about concurrent requests and IIS bug? In this case without the fix (maxworkerthreads=25) and default worker process (1) and seperate application pools for all sites plus 2nd folder and 3 folder as well, does it mean this 1. 25 default setting for concurrent req (bug) x for all sites and 25 x for 2nd folder and 25 x for 3rd folder = 75 or 2. 25 max requests for all sites , 2nd folder site, 3 folder site = 25 max requests overall Thanks, Ajas Mohammed / - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
RE: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7
You will continue to see it using jrun_iis6_wildcard. That's not incorrect (but potentially confusing, yes). /charlie From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed Sent: Tuesday, November 05, 2013 12:01 AM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7 Again thanks. I think I am guessing that the correct answer to this is 75 because of different application pools. I could be wrong though, like you said better to do practical test and figure out what happens. One thing I found which is weird I have jrun_iis6_wildcard instead of jrun_iis7_wildcard, this is really surprising to me. We had iis6 comparability initially and then removed it and re installed cf 9.0.1 ran connector again for all sites. Thanks, Ajas Mohammed / iUseDropbox( http://db.tt/63Lvone9 http://db.tt/63Lvone9) http://ajashadi.blogspot.com We cannot become what we need to be, remaining what we are. No matter what, find a way. Because thats what winners do. You can't improve what you don't measure. Quality is never an accident; it is always the result of high intention, sincere effort, intelligent direction and skillful execution; it represents the wise choice of many alternatives. On Mon, Nov 4, 2013 at 11:42 PM, Charlie Arehart char...@carehart.org wrote: Thanks for the kind regards. As for your question, that's something I've always wondered myself. :-) In fact, you will see that on the Adobe blog entry about that maxworkerthreads bug (from a few years ago) that I had asked this question specifically, and I never got an answer. I always wanted to test it, but never got around to it. If you may do some testing determine it, please do let us know. To quote Dances with Wolves, I'd consider that a good trade. :-) /charlie From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Ajas Mohammed Sent: Monday, November 04, 2013 10:53 PM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] wsconfig - CF 9.0.1 Windows 2008 R2 IIS 7 Thank you sir. You are the best!!!. Do you see any issues with these separate folders? Plus what about the whole logic about concurrent requests and IIS bug? In this case without the fix (maxworkerthreads=25) and default worker process (1) and seperate application pools for all sites plus 2nd folder and 3 folder as well, does it mean this 1. 25 default setting for concurrent req (bug) x for all sites and 25 x for 2nd folder and 25 x for 3rd folder = 75 or 2. 25 max requests for all sites , 2nd folder site, 3 folder site = 25 max requests overall Thanks, Ajas Mohammed / - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink http://www.fusionlink.com - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
