Cold fusion 10 root access to start stop

hi there,
urgent help required,,, we got new Linux server and need to install CF 10 on them,,,as we were told by our former team that we need to have vtier sudo access on the server. Now the team that provides access is saying that if a server has vtier account, CF should be started/stopped using vtier account only and root access to vtier will not be provided. As per them, if sudo access to vtier is must for starting/stopiing CF, then there is need to install/configure the CF for vtier account only....vtier account is runtime user...and in filesystem it is /opt/app/<vtierName>.
I checked the start/stop script for CF and found this:
1-     it is clearly mentioned that one must be root to start CF. (highlighted in RED)
if [ "`uname`" = "Darwin" ]; then
            # nothing, on OSX we don't care about the user name.  We assume that the user running it has permission to do everything
IS_MAC="true"
elif [ ! $ID -eq 0 ]; then
echo "You must be root to start ColdFusion ."
        exit 1
fi
2- Where it actually tries to start CF with CFSTART, it looks for /sbin/runuser, if it finds out that it start CF with ‘/sbin/runuser –s’ with RUNTIME_USER that is already defined in script as vtier account.
Linux)
OS=Linux
PSCMD="ps -ef"
LD_LIBRARY_PATH="$CF_DIR/lib:$CF_DIR/lib/_ilnx21/bin:$JAVA_LIBRARY_PATH"
SUCMDFILE=su
if [ -x /sbin/runuser ]; then
SUCMDFILE=/sbin/runuser
fi
        CFSTART='$SUCMDFILE -s /bin/sh $RUNTIME_USER -c "export LD_LIBRARY_PATH=$LD_LIBRARY_PATH; cd $CF_DIR/bin; nohup $JAVA_EXECUTABLE -classpath $CLASSPATH $JVM_ARGS com.adobe.coldfusion.bootstrap.Bootstrap -start &"'
        CFSTOP='$SUCMDFILE -s /bin/sh $RUNTIME_USER -c "env -i; cd $CF_DIR/bin;$JAVA_EXECUTABLE -classpath $CLASSPATH $JVM_ARGS_NODEBUG com.adobe.coldfusion.bootstrap.Bootstrap -stop"'
I tried to modify the script, commented the root part condition as in point 1, but looks not possible to amend the part 2 where it actually starts the CF.
Now my question is:
1- Do we really need root access to vtier account (runtime user) to start/stop CF?
2- If we really don't need root access, how can we modify the script and/or do other changes?
Your help is much appreciated.

Hi
Can you show us the screenshot of permissions of wwwroot folder and sub-directory folder?
Also, can you create a new site in IIS and create the same directory structure however assign permisison as Everyone and then test the behavior. As you have configured the connector with All then you need not to create the connector once again. The reason why CFIDE and jakarta are working fine because they are not the actual directories, they are virtual. So in conclusion, the issue seems like the .cfm present inside the subdirectories are not working fine.
It seems like .htm is working fine within the subdirectory.
HTH
Thanks
VJ

Similar Messages

  • Is root required to start/stop/restart mysql?

    I'm trying to have all users in the mysql be able to start/stop/restart mysql. I'm currently getting permission denied for the /var/lib/mysql folder even though I'm logged in as a user that is a member of the mysql group (and mysql is the owner of the directory)
    Is what I am trying to achieve possible?
    I'm not sure if this is related but I am also unable to start mysql from rc.d on bootup, but once I am logged in I can use the root user to start it up.
    Thank you!

    /etc/rc.d/mysqld wrote:/usr/bin/mysqld_safe --user=mysql &>/dev/null &
    Doesn't mysqld get started as mysql user by default?
    Did you modify any of mysql's configuration files while trying to do this? I imagine that would cause troubles for you.
    Post anything else you think is relevant, too.

  • How to Disable Cold Fusion MX 6

    Hello All,
    Hopefully this is a simple answer.  We have a Cold Fusion 6.1 install on Windows 2003 R2 server that we are looking to decomission but still continue to run IIS.  This is a production box so I want to be as unobtrusive as possible.  Can someone tell me or point me to how I would disable cold fusion cleanly?  I attempted to stop the service once before and after about a day, IIS started complaining and ground to a halt.  Any suggestions would be appreciated as I move forward.
    Joe

    First, run the web server configuration tool to disconnect CF from IIS. Then, you can stop the CF services and/or uninstall CF in its entirety. I don't know if you have a desktop icon for the web server configuration tool, but it's available within the CF install directory as wsconfig.exe (which is really just a wrapper for wsconfig.jar).
    Dave Watts, CTO, Fig Leaf Software
    http://www.figleaf.com/
    http://training.figleaf.com/

  • Cold Fusion Websites fails

    I have site on a Cold Fusion MX Version: 6,1,0,hf45343_611
    running on A Windows 2000 server and IIS5 using a Microsoft SQL
    2000 Cluster in the backend. When ever the cluster fails over the
    websites fail. I then have to restart the 3 Cold Fusion Services
    and do an IIS reset. Is there a setting that I can use to avoid
    having to reset the services on the webserver?

    Hi Upen,
    Thanks for your response. It is a 64 bit machine and the setup is also 64 bit.
    I would like to mention some points related to my deployment scenario:
    We have a Windows server 2008 R2 Standard edition on Server machine.
    I have a .net website appliaction deployed and running on this.
    One of our third party vendor is developing Cold fusion application.
    This Cold fusion application will be integrated in our .net website.
    Deployment and configuration of Cold Fusion application and server wil be done by Third Party vendor.
    I need to install Cold fusion and give access to Third party.
    Issue when I install cold Fusion using default settings, my .net Website does not get loaded.
    In Mozila and Chrome Browser I get blank Page with only Background image given in Body tab of page is getting displayed.
    In IE Browser Page with background image given in Body tab of plus this text ' <script> src="" 'is getting displayed.
    Regards,
    Sarfaraj Shaikh

  • Cold Fusion Language

    I need to acquire cold fusion language to access online teaching opportunities. I am assuming adobe will allow me some app for CFML. Please advise. I am new to this so all information needs to be very basic. Thanks.
    D. Rhodes

    Not sure what you are looking for. Check the online help for CF builder and the CF dev center.
    Mylenium

  • Allow a user access to start and stop a particular service in Solaris 11 using RBAC controls

    So, using svcbundle I created a service called "oracle" that starts and shutdown a db. I'm aware of how to grant RBAC access to be a "service operator" to be able to control start/stop ALL services. But I'd like to grant a user access to start and stop JUST this service.
    in this document on page 15, it states that it's possible to do this kind of granularity but doesn't explain how to do it step by step.
    how does one achieve this?
    thanks.

    You need to add a property group such as
    <property_group name='general' type='framework'>
      <!-- to start stop oracle -->
      <propval name='action_authorization' type='astring'
      value='solaris.smf.manage.oracle' />
    </property_group>
    Then add the solaris.smf.manage.oracle authorization to the user profile.
    As an example, see Less known Solaris features: RBAC and Privileges - Part 2: Role based access control - c0t0d0s0.org

  • How start, stop and access BAM?

    Hi,
    I have installed BAM and now I do not know how to start and stop the application. Also I am not able to access to the home page.
    I installed BAM by double clicking the setup.exe file. After following all the installation steps, a new folder has been created in my C drive (C:\OracleBAM). Inside that folder, there is another one called ClientForBAM. Should I have other folder besides the client? Inside the ClientForBAM there are lots of folders.
    In the Windows Start menu I have a new group called Oracle_ClientForBAM32100. From there, I can access to:
    - Configuration and Migration Tools
    - Desarrollo de Aplicaciones (sql plus)
    - Herramientas de Configuracion y de Migracion (Net manager)
    - Herramientas de Gestion Integradas (Wallet Manager)
    - Oracle Instalation Products
    So, there is no menu option to start, stop or access to BAM. I've read documentation about this and saw that the home url was: http://simge-eai-dev:8081/oraclebam (my host is simge-eai-dev, and my port 8081) But when I type that url in my browser I get the following error:
    Error HTTP 404 - No se encontró el archivo o directorio. (file or directory not found)
    Servicios de Internet Information Server (IIS)
    I looked at the logs and I found this in the sqlnet.log
    Fatal NI connect error 12514, connecting to:
    DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=simge-eai-dev)(PORT=1521))(CONNECT_DATA=(SERVER=DEDICATED)(SERVICE_NAME=SIMGE)(CID=(PROGRAM=C:\oracle\product\10.2.0\db_1\bin\nmupm.exe)(HOST=SIMGE-EAI-DEV)(USER=SYSTEM))))
    This in the operf10.log
    2/18/2008 15:2:27 UPI_CONNECT failure: error 28000 Hostname SOASUITE Username SYSTEM =(ADDRESS=(PROTOCOL=BEQ)(PROGRAM=oracle10)(ARGV0=oracle10orcl)(ARGS='(DESCRIPTION=(LOCAL=YES)(ADDRESS=(PROTOCOL=beq)))')))(CONNECT_DATA=(SID=ORCL)))
    Can anybody help me with this? How can I know if the BAM is running or not?
    Thanks in advance,
    Zaloa

    Finally I found out what was happening.
    Only the client was installed because in order to install the whole thing, it is necessary to execute the setup file twice.
    The first time, the client is installed and the second time, the server.
    Regards,
    Zaloa

  • Cold Fusion service stops unexpectedly

    With Cold Fusion MX 7.0.2, the service stops unexpectedly. In
    doing this, the WWW service stops, as well. I have not found a
    thing reagrding this problem. This has been happening for a while,
    and on serveral of my servers. We run Windows 2000 with IIS4.0.
    Adobe seems to not have a clue, which really bothers me.

    You need to find out what is going on as your server stops or
    hangs. First, confirm that coldfusion has really stopped. Turn on
    the internal JRun webserver on one of your servers. Next time the
    site 'stops', try to connect to coldfusion administrator using the
    internal webserver -
    http://localhost:8500/cfide/administrator/index.cfm.
    If this connection works, then CFMX is actually still running. So,
    then it would appear your issue is IIS or the connector between IIS
    and CFMX. Confirm you are running the latest connector. Check the
    connector logs.
    If cfmx has truly stopped there are several things to do:
    check the cfusionmx7\logs. Does the
    application or server log show lots of errors just prior to the
    stoppage. Is the application log full of errors - clean them
    up.
    check the cfusionmx7\runtime\logs for
    errors, especially just prior to the stoppage
    Run
    thread dump - is there
    a common template running in each of your traces during your
    hangs
    What is your technical support incident number with Adobe? I
    will be glad to work with that engineer. Email me your incident
    information directly.

  • UAG 2010 SP4 Cold Fusion Web Application "You Are Not Authorized To Access This Application" error

    Hi folks,
    2010 UAG SP4 publishing a web app that is a Cold Fusion login page.
    The portal trunk is set to not verify URLs and open with that page directly rather than a Portal page, I also have it set to not install client components, basically using UAG as a reverse proxy with some other items. 
    The published app does not require authentication and all users are authorized the path is as follows:
    /index.cfm?FuseAction=Security.Login
    And the hostname is set as www.apps.x.x.edu name removed but is correct. UAG has an http to https redirection and it requires https. 
    The Portal Link has https://xxxx as the address which is correct as it is using an SSL connection to the backend web server and I can reach the page successfully from the UAG server by simply browsing. 
    I previously had the application launching within the portal but the client does not want the extra step so I removed the portal interaction all together and while I had the application launching within the portal, it worked. I'm not certain what changed
    to make it fail, though. 
    In the Web Monitor I receive this error:
    A request on trunk nonuvaportal; Secure=1 failed because of an unknown application. The URL is /index.cfm?FuseAction=Security.Login. The source IP address is 137.54.129.238. The user is .
    Any help or tips or advice would be superb.
    Thanks,
    Justin

    And an update, I did another application publishing on a separate trunk/portal to a similar page
    /index.cfm?FuseAction=Programs.Home
    And I get the same error. Is there a switch/setting/policy I am missing to allow it to run those?

  • Cold Fusion / developer edition

    hey guys
    sorry to ask you this but it has been hanging over my head
    for a long period of time.
    I have been unable to get my mind around the concept of "the
    developer edition of Cold Fusion". from what i have learnt , i can
    use it locally only. Does that mean that i wont be able to transfer
    my cold fusion files onto a webhosting that supports ColdFusion??
    Am i expected to present "my license to ColdFusion" to my web
    provider every time I upload a website onto a webhosting?
    Please someone explain to me what happens when i upload my
    coldfusion-based website onto a webhosting. Will it stop working or
    will my code get corrupted??
    Cheers
    Maros

    Hi Maros
    There are a few of things you will need to be aware of when
    you move to the
    server. First, be sure the mapping on the server is the same
    as it is
    locally, this especially concerns CFCs. In Dreamweaver if you
    drag a CFC
    function onto a page Dreamweaver will map the dot path to the
    CFC including
    the folder your site is in within the ColdFusion8\wwwroot
    folder, naturally
    this folder doesn't exist on your server since the entire
    site is directly
    in your root folder. Be sure to address this before going
    live.
    Also, make sure you move your database to the server and set
    up the DSN,
    using the exact same DSN name you used locally.
    Finally, make sure your host supports the same version of CF
    as you have
    locally as well as the database if you are using MySQL or SQL
    Server. If you
    are using Access, be sure your host server is a Windows
    sever.
    Doing this should make for a smooth transition.
    Lawrence Cramer *Adobe Community Ace*
    Cartweaver.com
    ASP, PHP, and ColdFusion Shopping Carts For Dreamweaver

  • I'm unable to connect to database thru cold fusion

    I'm unable to connect to database thru cold fusion. it
    sometiems give me an error that your uname is undefined , soemtimes
    it gives ur index page not found so i created index page also but
    still im unable to connect to database n update my records..plz
    help me out..im a fresher in cold fusion

    I am having a similar problem having CFMX 7.02 verify my SQL
    Server 2005 Data Sources.
    I am using the sa account for CF to access the db's. But i
    get the following error:
    Connection verification failed for data source: myDatabase
    java.sql.SQLException: [Macromedia][SQLServer JDBC
    Driver]Error establishing socket. Connection refused: connect
    The root cause was that: java.sql.SQLException:
    [Macromedia][SQLServer JDBC Driver]Error establishing socket.
    Connection refused: connect
    Every role in SQL Server has the sa grantor Grant enabled. I
    can also login to SQL Server with the sa account w/o a hitch.
    I don't know what else to do. The server information is set
    to the ServerName port 1433, datasource name and database name are
    the same as the database name in sql server, and the username and
    password are set for the sa account.
    Thanks!

  • Using non-administrator user to start/stop services

    We have Crystal Report Server (BOE XI) running on Windows platform.
    Our customer's policy dictates that operator ID are to be use to manage starting/stopping of Crytal Report Server. The operator ID has no administrator rights and it has no access to the Microsoft Management Console.
    Would it be possible to use non-administrator ID to start/stop Crystal Report Server services? Appreciate if anyone could share on the configuration.
    Thank you.

    salafrance wrote:A simple way would be to write a small C program to run systemctl setuid root.
    So perhaps like this?
    #include <stdlib.h>
    #include <unistd.h>
    int main(void)
    execl("/usr/bin/systemctl", "systemctl", "start", "calibre", NULL);
    return(EXIT_SUCCESS);
    compiled it, then "chown root:root test", "chmod u+s test" and it worked.
    But is this safe? I have absolutely no knowledge about potential security issues...
    I also have thought about periodically restarting calibre, but on the Raspberry Pi, with it's slow ARM, the start takes ages and the processor is completely busy with that task for some minutes.
    And that's the reason why I also want to avoid starting an entire second systemd session... Or is this not that resource intensive?

  • Cannot browse server following installation of hotfix 4 to Cold Fusion 9.0.1

    Hi
    I've been tasked with updating a ColdFusion 9.0.1 installation to the latest patches.  I've started with Hotfix 4.  The installation appeared to go OK, and the services started after I applied the update.  However, when I went to moved onto the next update (APSB13-10) starting by browsing to the update file I ran into a problem.  When I click on the "browse server" button to locate the .jar file for the next update I encounter an error:  "Unable to authenticate on RDS server using current security information".  I've also found that if I try to put the full path into the Update File line and hit "Submit Changes" it errors.
    This seems to be the same problem as http://forums.adobe.com/message/5256752#5256752, but there's no solution to the problem in that discussion.
    I've checked the RDS settings, and RDS is unchecked.  I notice that this screen is different from the pre-upgrade screen, but this seems to be as a result of, I think, APSB13-03, which is included in HotFix 4.  If I try to make any changes on this screen it errors and logs me out of the Cold Fusion administrator.  I've tried commenting out the RDS section in the web.xml file, but this gives me a different error.
    I'm doing this on an isolated test server which has no access to the network.  If I revert to the snapshot I took before the upgrade attempt ColdFusion runs as expected.
    Any ideas what might be the problem?  Thanks in advance.

    In case it helps anyone I've realised what I was doing wrong here.
    The main “problem” was that one of the updates included in Cumulative Hotfix 4 is APSB13-03 (http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix-apsb13-03.html).  I knew this changed the behaviour of RDS but my knowledge prior to this work of ColdFusion and in particular RDS was very limited, and so I didn't understand the implications of this hotfix.  What this update does is disable RDS by default; I wasn't really aware what the RDS status of my server was prior to the update, partly because before this update there is no "disable RDS" tick box to show whether it is enabled or disabled.  With RDS disabled, you can't browse as the update instructions require you to do.  Obviously RDS was enabled on my setup without me realising it.
    My understanding of this wasn't helped by the fact that when I tried to paste a path into the box and hit the "update" button I got a different error, which I described in my original post.  Similarly if I tried to change RDS settings, or do pretty much anything in the administrator, it failed and logged me out in the same way.  It seemed to me that the whole thing was broken by the updates and I didn't know how to fix it.
    So, following the excellent advice of Charlie Arehart in two articles: http://www.carehart.org/blog/client/index.cfm/2010/12/12/cfmyths_cumulative_hotfixes and http://www.carehart.org/blog/client/index.cfm/2011/10/21/why_chfs_may_break, I went back to the start and installed the cumulative hotfixes one by one.  Although I don't think I actually needed to do this, as Hotfix 4 seems to contain all the previous hotfixes, it did help me realise that the browsing/RDS issue and the error and logout when I tried to do anything in the administrator were two different problems. After further bit of googling I found people suggesting that you should use https to access the administrator, but the shortcut I had was taking me to http (as far as I know I was using the default shortcut).  I found that by going to https the problem of being logged out when trying to do anything disappeared and I could put a UNC path in to update the .jar file for the next update.  I also was now able to enable RDS for single password and could browse like the hotfix instructions advise.  I've since disabled RDS and accepted the inability to browse as a "feature", happy that it's more secure as a result.
    So my “problems” were largely self-inflicted due to my own ignorance of the product, but it wasn’t helped by Adobe’s apparent inability to grasp that there may be similarly ignorant people attempting these updates.  It would have been nice to see some guidance from them.  Furthermore, the cumulative hotfix 4 page (http://helpx.adobe.com/coldfusion/kb/cumulative-hotfix-4-coldfusion-901.html) doesn’t even mention RDS, let alone that the default behaviour changes.  It’s only when you check the individual hotfix information that you can see the information that helped me to realise where I was going wrong.
    As for using https not http; great, but if I’m right that my shortcut is the default out-of-the-box shortcut, where’s the information to advise to change to using https as a result of one of the hotfixes included in hotfix 4 (originally, I think, hotfix 2)?  It’s certainly not mentioned on the page for cumulative hotfix 4. 

  • Cold Fusion Application Server

    Hello all,
    I'm having the weirdest issue with our CF server. They do not
    run. However when I start Cold Fusion Application Server, I cannot
    login to any of my backend admins. I suspect that it is because it
    tries to set an application variable. Then I check for to see if
    there the app var is set, if not it redirects to the login page.
    I am guessing that the app var is not being set. If I stop
    Cold Fusion Application Server, everything works fine.
    I don't want to have reinstall CF 5 (on Windows 2000 srv).
    Any ideas???
    thanks

    DettCom,
    I had a similar problem to this, but I don't know if you have
    the same configuration (it was on CF 6.1). I don't know a whole lot
    on CF 5.
    I was storing client variables in the cdata/cglobal tables,
    and one variable's string ended up longer than I had planned for
    (although it was, in fact, correct). I had to increase the size of
    the "data" field in CDATA.
    Also, anything in the logs? (I know you probably would have
    mentioned if there were).
    - Mike

  • How to check/start/stop hardening Service?

    Dear All,
    I want to check on Solaris 10 whether it has hardening service or not, and also want to start/stop this service.
    Please give any idea or advice.
    Thanks and regards,
    Heng

    Hi Heng,
    System hardening requirements changes from environment. So It should be designed to suit your infrastructure. The topic is too big to discuss here.
    I will give some examples of major things done in hardening.
    User level Security.
    1) Password complexity
    2) Restrict multiple login attempts.
    3) Log all failed login attempts
    4) configure pam module
    5) Use RBAC to deligate
    6) Restrict root login to console only.
    7) disable passwordless logins to any users
    8) disable services like rsh rlogin and related services and restrict access through ssh only.
    9) ENABLE & Configure BSM
    10) Enable Auditing
    11) disable/lock all unused system accounts.
    12) enable password encryption (/etc/shadow)
    Network Security
    1) Disable all unwanted services. (svcadm disable service on solaris 10)
    2) disable unused nonsecure services like telnet, ftp etc.
    3) tcpwrapers (restrict the network communication to the required subnets only)
    4) disable unwanted inetd services
    etc etc etc... discussed very few things from the normal hardening, and these things vary from environment to environment.
    Regards
    JKGN
    Edited by: 878434 on May 25, 2012 1:16 AM

Maybe you are looking for

  • App store version same one sold in Apple stores?

    Is the $80 version of Aperture offered in the App Store the same as the $199 version sold in the Apple stores or is is a modified (stripped down) version?

  • TV out pictures

    I heard that the quility is bad when you connect your 5G ipod to a tv. I didnt want to hear this! DANG! Is this true, or is the image on the screen still veiwable? or really bad. Can someone post pictures of there ipod hooked up to a TV? Is the A/V c

  • Cannot connect to service manager portal wcf service

    I only get this error on one request offering.  Everything else on the portal works fine.  This RO worked until I update one of the user prompts.  The prompt is a query result that is configured to return domain users only of display name equals the

  • How do I fix the herky jerky video?

    I am running a Dell Optiplex 320 with pentium D. 3.0 GHz, 2MB ram, with NVIDIA 512 MB video card. How do I fix the herky jerky video?

  • Procedure and function

    hi folks,            procedure and function are doing a same job then why we using function,please give explanation in real time scenario ...