ColdFusion caching WSDL credentials

We are running ColdFusion 9 (version 9.0.1.274733) on Windows 2003 with IIS 6. The server is shared across a few different groups within our organization each with more than one active development project currently underway. 3 of the projects are attempting to consume a .Net webservice hosted on another server. The webservice is using basic authentication to identifiy who is accessing the service. Our problem is that when ColdFusion accesses the service the first time it caches the WSDL proxy/stubs along with the username and password. This presents a problem when the next application attempts to access the service. The second attempt can access the service but since ColdFusion is using the credentials ofthe first application the second application gets permission problems from the application behind the service. Example is application A hits the service with username A this is followed by application B with username B but IIS sees username A, application C does the same thing, IIS sees the access attempt with username A. If we clear the WSDL from the admin or use the refreshWSDL attribute it works one time, with subsequent access attempts using the first set of credentials. Forcing each application to always use the refreshWSDL attribute kind of defeats the purpose of caching.
So my question is this:
Is there any way to get ColdFusion to NOT cache the username/password information when it creates the stubs?

Have you tried creating multiple named instances of the webservice via the cf administrator? I haven't tried it but it looks like you should be able to assign a different username/password to each instance. Then in your code just instantiate it by the name rather than the wsdl url, eg.
<cfset svc = createobject("webservice", "mywebsvc_appA") />

Similar Messages

ColdFusion caching SQL Server credentials?

I have been using ColdFusion's storedProc() service for a while with no issue. However, I have run into a scenario where I have a local stored procedure executing a remote stored procedure. When I attempt this via ColdFusion, I receive a very cryptic error:
The DBMS has returned the command code 224...
The following is the code I am using:
variables.storedProcService = new storedProc();
variables.storedProcService.clear();
variables.storedProcService.setAttributes(datasource="DATASOURCE", procedure="STOREDPROCNAME");
variables.storedProcService.addParam(cfsqltype="CF_SQL_INTEGER", type="in", value=0);
variables.storedProcService.execute();
However, executing the exact same procedures from SQL Server Management Studio results in no issues.
Then, when I use the following code:
variables.storedProcService = new storedProc();
variables.storedProcService.clear();
variables.storedProcService.setAttributes(datasource="DATASOURCE", procedure="STOREDPROCNAME", username="USERNAME", password="PASSWORD");
variables.storedProcService.addParam(cfsqltype="CF_SQL_INTEGER", type="in", value=0);
variables.storedProcService.execute();
The execution runs without issue. My question is this, does ColdFusion cache SQL Server/Datasource credentials? Why does it [seem to] not use the credentials I provided in Jrun?

HiTopp wrote:
variables.storedProcService = new storedProc();
variables.storedProcService.clear();
variables.storedProcService.setAttributes(datasource="DATASOURCE", procedure="STOREDPROCNAME", username="USERNAME", password="PASSWORD");
variables.storedProcService.addParam(cfsqltype="CF_SQL_INTEGER", type="in", value=0);
variables.storedProcService.execute();
The execution runs without issue.
I can actually just include the password attribute and the stored procedure runs just fine.

Coldfusion caching pdf files

Hi all:)
I'm having trouble with coldfusion caching pdf files that we use to populate. Even when we replace the files the old ones are still being used

In what way are they caching? What do you mean by "used"?
What's some code that demonstrates this?
Adam

Is it possible to Cache Proxy Credentials in J2RE

Our users access the internet through a proxy server that requires authentication. When users access an internet site that contains Java content the J2RE requests for Proxy credentials. I underestand why this happens but have the following questions...
1. Is it possible to get J2RE to cache the credentials for future use? This would save users typing their login info each time they access a site with Java content.
2. Is J2RE able to use the cached proxy credentials used by Internet Explorer? This would save the user having to authenticate more than once to the proxy server.
Any suggestions or explanations are greatly appreciated.
Cheers,
Timshel

This would not be a direct fault of forms; this is a SQL*Net problem (the forms runtime is communicating with the database over 500km via SQL*Net). Try the same with SQL*Plus...pulling data over small bandwith networks via SQL*Net doesn't make much fun (and I doubt SQL*Net is designed for this).
Next thing is I wouldn't even consider to expose the database at this level in the network; the clients don't need to know about the database, they just need the application server, so you only need to expose the application server to the public and keep your database behind bars.
@OP if you are experiencing performance problems this might be related to network roundtrips;
what I would do is to check for unnecessary roundtrips and enable networkstats in the formsweb.cfg (search the forum for "networkstats") to see the actual roundtrips. Another thing would be to create a little testform and see if at least dummy forms are performing well. If even the dummy forms have bad performance your connection is too poor to run webforms over them (and you can spare you the pain of searching unnecessary roundtrips).
cheers

Coldfusion webservice wsdl tag order

Hi
I've created a web service that interogates a database and
spits out an xml document. It has a number of input parameters and
just one output value (the xml document).
When I test this using coldfusion everything works fine.
However when my client tries to invoke the web service it says that
the return value doesn't exist.
I've looked at the wsdl files generated by coldfusion and
there does seem to be a difference in the order of the message tags
produced that I think must be causing the error.
In one webservice he can view the order is: request,
exception, response
In the one that he can't access properly the order is:
response, exception, request.
Does anyone else know how to resolve this issue? Or am I
looking in the wrong place?

To change the order is necesary use PI module

Measure speed increase after coldfusion caching

Hi,
How can I measure how much faster my server is responding
after page is cached. I don't have access to coldfusion
administrator. Is there anyway I can measure server response to
page requested before caching & after caching?
thank you.

Hi,
You can use cftimer to see the time it took to execute the
code.
Prasanth

Caching WSDL, generating strongly typed web service classes

Hi All,
I come from an ASP.NET background. Visual Studio provides a
great tool for generating proxy classes based on a WSDL XML
document. What's so great about this is that you are able to have
strongly type classes (with intellisense in the IDE), compile time
type checking, and so forth.
What this means is that if I have a web service that defines
the method getColors, and takes two parameters; let's say an
enumerated type, "primary" or "secondary" for the first parameter,
and "hex" or "english" for the second parameter (also an enumerated
type), Visual Studio will generate a proxy class for me that will
give me type hinting. I'll see that the "getColors" method takes
two parameters, and it will even show the the possible values for
the enumerated type.
Is there anything like this in Flex?
-Josh

Hi Josh,
Flex Builder 3 includes the "Import Web Service (WSDL)"
wizard which is a tool that will generate proxy classes from a WSDL
file. This tool is included in the latest engineering drop, but is
not available in the latest beta build. You can access it via
File>Import>Flex>Import Web Service (WSDL) or by accessing
the Data>Import Web Service (WSDL)... menu option.
Plus, using the web services manager tool (accessible via
Data>Manage Web Services...) you can generate proxy classes for
more than one WSDL file by adding more WSDLs to your project,
remove the generated classes by deleting the WSDL from your project
or regenerate the proxy classes by using the Update option.
Using the proxy classes you benefit from code hinting of
operations the web service exposes, code hinting on the operation
parameters and their types, you get strongly typed results and
more.
Give these tools a try. We will appreciate any feedback
you'll provide.

Caching credentials for webauth in ISE 1.2?

We are providing internet access through a Guest portal. The portal is provided by the ISE through webauth and the user is created through the ISE Sponsor Portal.
When an account is created and the enduser logs in to it, I would like for the ISE to cache the credentials for that user for a period of time; at least 1 or more days before it prompts them to log back in again. Right now, if a user disconnects for a short period and then goes to reconnet, it prompts for the username/password again.
Where (and how) in the ISE do you configure that?
Thank you.

Thanks for the quick reply Charles. I am reading through the details of it now.
It looks like DRW basically registers the MAC of a connecting device in an identity store and then allows that device to connect. Does it still match the MAC to a guest user so that we can set time profiles against it and does it expire like the guest accounts do?
Any ETA on the release of ISE 1.3?

Cached credentials are not working on the lock screen (Windows 7)

Hello all,
We are having a difficult time trying to troubleshoot a problem with credential caching seemingly not working on the lock screen for our laptop users. Users are instructed to logon to the laptop while connected to the domain to cache their credentials. The
user then leaves the network, and is able to log in to the laptop using cached credentials. The laptop locks either due to a manual lock, or due to an inactivity timer. The user tries to relog and is presented with the error “no logon servers available to
service the request.” Users are reporting the problem from both home and public networks. We have been able to recreate the issue by logging on the laptop while in the office and setting our internal wireless network to manually connect, and then simply clicking
start > shutdown arrow > lock. Many users have reported that they were able to get back into the laptop after a hard shut down, but would be unable to log in again if they returned to the lock screen. One user has reported that selecting other credentials
> switch user > other user while on the lock screen and then entering in his DC credentials would allow him to get back into the laptop. I was unable to recreate this workaround on our test machine. I also tried to logon using the switch user account
with the “.\username” method to see if that would look for cached credentials. One user has reported that he was unable to hard shut down the computer to get back in. He also reported that he tried to pull the battery and give it time before trying again.
We have set the value for “Interactive logon: Number of previous logons to cache” to 50. The status of “Interactive Logon: Require Domain Controller to unlock workstation” is disabled. We have tried to turn the Wi-Fi switch off and then back on while on
the lock screen. Error logs that we think are related to the problem include – Event ID:5719, NETLOGON and Event ID:4343, NlaSvc error 0x4C6 and error 0x51
I have a slightly sinking feeling it has something to do with NLA thinking that they are connected to a domain while on the lock screen, but this is pure speculation. Thanks for reading my post and any potential solutions are greatly appreciated!

I'd try them over here.
Windows IT Pro forums on TechNet
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Caching AD login credentials not working with 10.5.5

Hello all,
We are trying to add our Mac clients running OSX 10.5.5 as workstations in our Windows Domain (we are running AD in Windows 2003 native mode). I can add the Mac workstation to authenticate against the domain but login will only work if the Mac client is connected to our network.
On a Windows laptop that is a member of the domain, if you are off the network and it can't reach a domain controller it will used cached credentials.
I read that this should work in chapter 6 titled "Active Directory Integration" in the document linked off of Apple's site named "Leveraging Active Directory on a Mac OS X".
Here is the link to that doc http://www.bombich.com/mactips/activedir.html
Here are the steps I followed to add the Mac client to the domain.
1. On the Mac go to "Applications" --> "Utilities"
--> "Directory Utility".
2. Click on "Services" and check off the Active Directory
plugin.
3. Double click the Active Directory plugin and enter in the
following
"Active Directory Forest:" Leave as default
"Active Directory Domain:" wheatonma.edu
"Computer ID:" computername_here
View the Advanced Options and enter in the following.
Under "User Experience" check the "force local home directory on startup disk" option.
I selected the Create mobile account at logon field so that Mac users can logon
with cached credentials when they can't reach a domain controller or are away from the network.
I deselected the Require Confirmation field, because I want all the Mac users on this machine
to use mobile accounts.
Also uncheck the next option "Use UNC path from Active Directory to derive network home location"
Also uncheck the "Default user shell".
Under the "Mappings" tab check off "Map UID to attribute" and change the attribute to "sAMAccountName".
Under the "Administrative" tab uncheck the option "Prefer this domain server".
Also under this tab make sure the "Allow Administration by:" option is checked
off and the following 3 entries should be added (along with the new owner of the mac)
WC\domain admins
WC\enterprise admins
WC\bgibson
Click "Bind" and it will ask you for the local admin's password, enter it.
It will then ask you for the following
Username: Enter in the domain admin username
Password: Active Directory password for the user above.
Computer OU: ou=wheatonmacintoshclients,dc=wheatonma,dc=edu
Check off the option named "use for authentication" and uncheck the "use for contacts". Hit "OK".
4. Exit out of the Directory Utility and reboot the computer. Login using the "other" name
and enter in your domain username and Active Directory password.
We do not want to setup an Open Directory and sync data from our domain controllers. All we really need is the ability for the Mac client to authenticate into the system.
Thanks

Hi Templeton, thanks for the suggestion. I had been on that site before. I had called Apple as part of our school's support package and they had suggested that we look at that site... I should have mentioned it earlier. I have the new 10.5.5 laptop binding to AD okay but only when it is plugged into the network. It still will not cache the credentials for when I am offline and trying to login.

Caching of WSDL

Hello !
I am using WS client on WL 8.1. My classes are generated by ant. In constructor I give the url to WSDL of the Webservices. When WS server is down I get an error java.io.FileNotFoundException: Response: '404: Not Found' for url. I understand this. But when WS server is up I still get this error, until i restart my Weblogic. I beleive, that this is problem of caching WSDL. How can I clear that cache ? Thanks for any help .....

I don't think that something locks the web service. it is obviously connected to some kind of cache.
example for service url:
1) http://server.domain:port/.......
2) http://server:port/.......
system that defined with number 1 doesn't see the changes even if I create new system.
If I create now system with url from section 2 it will see the change. this is why I'm sure that it caches the URL of the web service somewhere.

XMLHttpRequest caches credentials incorrectly.

I've found what I believe to be a bug in FireFox 4 on Windows. I've not tested on any other operating systems.
I have developed a Web application that uses HTTP Basic authentication. To allow for a customizable log on screen, I'm using XMLHttpRequest to send log on credentials to the server from an HTML form.
Briefly, it works like this:
1. My JavaScript function is called "onsubmit" of a form. The function returns false to cancel the actual form submit.
2. The JavaScript function collects the user/password entered on the form and passes them on the open() method of XMLHttpRequest.
3. On successful response from the server (200 OK), the script redirects into the application, as you are now logged on and FireFox caches the credentials to the HTTP Basic realm used by the application.
4. On unsuccessful response from the server (403 Not Authorized, in my case), a message is displayed on the page to indicate invalid user/password.
This code relies on a server-side CGI script to intelligently send the 401 response and WWW-Authenticate header as needed. Briefly, it works like this:
1. Apache is configured to NOT require authentication for this script, although all other URLs in the application are configured for HTTP Basic authentication.
2. The CGI script looks at the "Authorization" header.
3. If the "Authorization" header is not present, the CGI script sends the "WWW-Authenticate" header and the "401 Authorization Required" status.
4. If the "Authorization" header is present, the CGI script decodes the user/password from it and validates them. If valid, a 200 OK is sent. If not valid, a 403 Not Authorized is sent.
This is a common technique for using both HTTP Basic authentication and a custom log on form. The technique is very similar to that described in technical detail here:
http://www.peej.co.uk/articles/http-auth-with-html-forms.html
It works beautifully to allow the JavaScript to handle the invalid user/password without FireFox popping up its own log on box.
The trouble (and where I think I've found a bug) is this:
Once FireFox 4 has sent credentials and gotten either the 200 or 403 response, it caches those credentials permanently in the FireFox session!
For example:
1. The user comes to the log on form and enters the credentials incorrectly the first time.
2. The user then corrects the credentials and submits again.
3. FireFox 4 sends the Authorization header with the bad credentials from step 1! Even though the XMLHttpRequest.open() call specifies different credentials.
I'm very sure this is a bug because:
1. In FireFox 3 this does not happen. FireFox 3 sends the actual credentials that are passed to XMLHttpRequest.open() every time.
2. FireFox 4's own log on box does not suffer from this problem. It should be no different with XMLHttpRequest.
3. No other browser suffers from this problem.
If this actually appears to be a bug, how to I go about submitting a bug report?

Try this two steps, and EWS works fine. No popup temperately.
1.De-selecting "Enable Integrated Windows Authentication" in Internet Explorer(Tools, Internet Options, Advanced, scroll down to the "Security"section).
2.If you delete both the client certificate from the Personal certificate store and the credential from Credential Manager, Lync 2010
will prompt the user for credentials, and re-authenticate the user using NTLM v2. After successful authentication, a new client certificate appears in the user’s Personal certificate store,and subsequent sign-ins will be authenticated using TLS-DSK.
Pasted from <http://blogs.technet.com/b/nexthop/archive/2012/11/28/lync-2010-client-authentication.aspx>
Best regards,
Lester Chen

Windows XP SP3 cached domain user credentials are not updating after password change over VPN

We have a bunch of sales people who stay on the road indefinitely, using Windows XP SP3 domain joined laptops.
When they change their domain user password, while connected through the VPN, the cached credentials are not updating locally on their laptops. This causes issues at their next Windows login, where they have to use their prior password to gain access
to the OS. Then when they connect through the VPN client, they have to use their new password. We have already tried Microsoft KB 829652 (which was rolled up with SP3 anyways).
I have found several work arounds, but I would like to attack the root cause.

You have to recache the credentials if you change the password. You may have to get the user to log in locally. Then connect to VPN. Once connected to vpn, have them do a run as on any program...I usually use notepad or internet explorer (this will
cache their credentials with the updated password.).

How do I prevent users from caching their sign in credentials on OWA page

I am using Forms based authentication and want to prevent users from caching their credentials on the OWA page.
Is there an easy way?

Hi,
Forms-based authentication enables a sign-in page for Outlook Web App that uses a cookie to store a user's encrypted sign-in credentials in the Internet browser. So this authentication method will force to cache their credentials in the Internet
browser for some time. The workaround is what Willard Martin suggested.
Refer from
http://technet.microsoft.com/en-us/library/bb430796(v=exchg.141).aspx
Best Regards.

If you cache credentials in Safari how long does it last for on iOS?

Can anyone verify how long cached login credentials last in Safari, and when they get cleared without user intervention?
I have been reading other posts relating to a change that was made to Safari but not sure if it is related "Several people have reported problems that Safari’s cache prevents them from browsing a web site’s current version; instead Safari loads pages from previous cached files (iPad, iPhone or iPod Touch). It has also been reported that clearing cache, cookies and history does not fix this problem."
Any help is greatly appreciated.

Mine just quit, it froze in the rebooting screen and does nothing else, please help. How can I restore it to factory state

ColdFusion caching WSDL credentials

Similar Messages

Maybe you are looking for