ColdFusion Security Example

http://help.adobe.com/en_US/ColdFusion/9.0/Developing/WSc3ff6d0ea77859461172e0811cbec22c24 -7c30.html
I followed above link to create a user login function.
I want to it shows user welcome message and set login input invisible and give user logout button to logout.
It gives me login form, but it does not show welcome message and login input still on the form.
Here is my code which is exatly from above link.
Can you please help me to see any mistake in my code or modify the code to make login to show welcome message and invisible login input and give user logout button?
Your help and information is great appreciated,
Regards,
Iccsi,
<cffunction
name="OnRequestStart"
access="public"
returntype="boolean"
output="false"
hint="Fires at first part of page processing.">
<!---Define arguments.--->
<cfargument
name="TargetPage"
type="string"
required="true"
/>
<cfif IsDefined("Form.logout")>
    <cflogout>
</cfif>
<cflogin>
   <cfif not isdefined("cflogin")>
      <cfinclude template="loginform.cfm">
      <cfinclude template="index.cfm">
      <cfabort>
   <cfelse>
              <cfif cflogin.name IS "" OR cflogin.password IS "">
          <cfoutput>
            <h2>You must enter text in both the user name and password fields.</h2>
          </cfoutput>
          <cfinclude template="Common/loginform.cfm">
          <cfinclude template="index.cfm">
          <cfabort>
         <cfelse>
           <cfstoredproc procedure="MySP" datasource="MySource">
           <cfprocparam value="#cflogin.name#" cfsqltype="cf_sql_char">
           <cfprocparam value="#cflogin.password#" cfsqltype="cf_sql_char">
           <cfprocresult name="myUser" resultset="1">
           </cfstoredproc>
           <cfif myUser.UserRoles NEQ "">
             <cfloginuser name="#cflogin.name#" password="#cflogin.password#" roles="#myUser.UserRoles#">
            <cfelse>
              <cfoutput>
               <h2>Your login information is not valid.<br>
                Please try again</h2>
              </cfoutput>
              <cfinclude template="loginform.cfm">
              <cfinclude template="index.cfm">
              <cfabort>
           </cfif>
         </cfif>
       </cfif>
    </cflogin>     
    <cfif GetAuthUser() NEQ "">
            <cfoutput>
               <form action="securitytest.cfm" method="post">
         <input type="Submit" Name="Logout" Value="Logout">
       </cfoutput>
    </cfif>  
<!--- Return out. --->
<cfreturn true />
</cffunction>

Hi,
Thank you for letting us know. We are checking these.
Regards,
Anit Kumar

Similar Messages

  • Does ColdFusion : Security Bulletin APSB10-11 apply to MX 7.0.2

    I contacted adobe phone support and was directed to post my question to the forum because adobe doesn't provide phone support for server products.
    So, Does ColdFusion : Security Bulletin APSB10-11 apply to MX 7.0.2?
    In the Security Bulleting it reads like it does:
    Summary
    Important vulnerabilities have been identified in ColdFusion 8.0, 8.0.1, 9.0 and earlier versions for Windows, Macintosh and UNIX. The vulnerabilities could lead to cross-site scripting and information disclosure.
    source: http://www.adobe.com/support/security/bulletins/apsb10-11.html
    However, there are no solutions in the technote:
    Issue
    Note: This technote and the attachments have been updated on 05/13/2010. All ColdFusion users should review the technote again. An issue when this security fix was applied with Cumulative Hot Fix 4 for ColdFusion 8.0.1 has been identified and resolved. The issue was caused by a naming conflict.
    ColdFusion 9.0, 8.0.1 and 8.0 are affected with the issue mentioned in the security bulletin APSB10-11. This technote provides fixes for the security issues along with the installation instructions.
    source: http://kb2.adobe.com/cps/841/cpsid_84102.html
    Additionally, does anyone know if Cold Fusion MX 7.0.2 is a supported product?
    Thank you any help will be benifitial.

    I contacted adobe phone support and was directed to post my question to the forum because adobe doesn't provide phone support for server products.
    I have had phone support from them, and they were quite helpful.  Do you mean they don't do free phone support?  No, they don't.
    I cannot believe they suggested you raise an issue on the forum.  That's just sh!t.  There's no other way of describing that.
    Additionally, does anyone know if Cold Fusion MX 7.0.2 is a supported product?
    http://www.adobe.com/support/products/enterprise/eol/eol_matrix.html#63
    Only for "Extended support", whatever that is.
    [searches]
    Hmmm... http://www.adobe.com/support/programs/policies/terms_customer.html:
    Extended Support. If version of software held by Customer at time of renewal has been end-of-lifed during the next renewal term, Customer may renew to Extended Support, provided that Extended Support is available for such software version.  Information about Software that has been or soon will be end-of-lifed and Extended Support availability dates by product version are published at www.adobe.com/support. If Customer elects to purchase Extended Support, the Annual Support Fee shall be twenty-five (25%) percent of the license fee paid for the Software (if such fee cannot be established, the percentage would be based on the then-current list price of the license fee for the Software), however in no event shall the amount be less than the last renewal prior to renewing under Extended Support.
    If extended support is renewed, the renewal fee would be the Annual Support Fee paid for the prior year increased by the applicable Consumer Price Index (CPI)*, for the 12-month period preceding the renewal date. Should Customer upgrade to the next major version of the Software (e.g., upgrade from 4.0 to 5.0), the Annual Support Fee for the upgraded version shall be the lesser of twenty percent (20%) of the then current list price of the license fee for such upgraded version, or the Annual Support Fee for the last renewal prior to renewing under Extended Support increased by the applicable Consumer Price Index (CPI)*, for the 12-month period preceding the renewal date.
    So there you go.  It's something you'd have to be paying for anyhow, and my reading of that is that it's too late to get it now anyhow.
    I think this will also mean that you're definitely out of luck in regards to any sort of patching going on for CFMX7.
    Adam

  • Enabling ORM causes coldfusion.security.SecurityManager$UnauthenticatedCredentialsException

    I'm working on a Windows 2008 Enterprise server with ColdFusion 9 Standard datasourcing MySQL 5.1. When I enable ORM in my application.cfc I receive the following error:
    coldfusion.security.SecurityManager$UnauthenticatedCredentialsException
         at coldfusion.security.SecurityManager.authenticateAdmin(SecurityManager.java:1826)
         at coldfusion.featurerouter.handler.standard.StandardSecurityManager.authenticateAdmin(StandardSecurityManager.java:47)
         at coldfusion.sql.Executive.getDatasource(Executive.java:439)
         at coldfusion.orm.hibernate.HibernateConfiguration.initHibernateConfiguration(HibernateConfiguration.java:160)
         at coldfusion.orm.hibernate.HibernateConfiguration.<init>(HibernateConfiguration.java:141)
         at coldfusion.orm.hibernate.ConfigurationManager.initConfiguration(ConfigurationManager.java:69)
         at coldfusion.orm.hibernate.HibernateProvider.InitializeORMForApplication(HibernateProvider.java:182)
         at coldfusion.orm.hibernate.HibernateProvider.beforeApplicationStart(HibernateProvider.java:85)
         at coldfusion.filter.ApplicationFilter.fireBeforeAppStartEvent(ApplicationFilter.java:475)
         at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:221)
         at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48)
         at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40)
         at coldfusion.filter.PathFilter.invoke(PathFilter.java:87)
         at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70)
         at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28)
         at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38)
         at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46)
         at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38)
         at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22)
         at coldfusion.filter.CachingFilter.invoke(CachingFilter.java:53)
         at coldfusion.CfmServlet.service(CfmServlet.java:200)
         at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89)
         at jrun.servlet.FilterChain.doFilter(FilterChain.java:86)
         at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42)
         at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46)
         at jrun.servlet.FilterChain.doFilter(FilterChain.java:94)
         at jrun.servlet.FilterChain.service(FilterChain.java:101)
         at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106)
         at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42)
         at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:286)
         at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543)
         at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203)
         at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320)
         at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428)
         at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266)
         at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66)
    I have confirmed the following:
    CF 9 ORM does work on my development environment for this same application.
    This error only occurs when I enable ORM for the CF application on this server.
    I previously thought that the MySQL user for ColdFusion may not have valid permissions. However, giving that user all permissions still did not fix the error.
    ORM was working for this same application in the past. One conclusion may be an issue with the latest CF hotfix provided by Adobe (which I did install about a month ago). However, I can confirm that the application did work AFTER that install.
    Any suggestions on how to get ORM working would be much appreciated!

    The only way I could resolve this error was to reinstall ColdFusion. I've even updated CF9 with the latest hotfix and it's running fine. I'll wait and see how it goes.

  • Subscribe to only coldfusion security bulletins

    How can I subscribe to *ONLY* coldfusion security bulletins.  Preferably CF9 only.
    thanks,
    jbee

    Is Microsoft is still releasing security bulletins for pre-SP1 Windows Server 2008 R2?  My guess is no.  The "service pack support end date" is listed as 4/9/2013.
    Which is exactly what that date means. No more updates for the previous SP level(s) of the product; no more
    support for systems running the previous SP level(s) of the product.
    But the admin thinks pre-SP1 is still eligible for security bulletins until the end of its Extended Support
    The 'admin' is incorrect, and this behavior is no different than it has been since the updates for Windows Server 2003 Service Pack 1 were cut off in April 2007. Following the cutoff date, updates are explicitly coded to ignore older SP level(s) of the product.
    This should be very easy to prove to your 'admin'. Show your 'admin' a WS2008R2 *RTM* machine in the WSUS console with one of those current updates released after April 2013 and observe very closely the
    Not Applicable status that is reported, and have the 'admin' contemplate why that is. Or, if no WSUS, just scan WU and try to find anything released after April 2013 in the list of available updates (assuming there are actually
    any available updates at all).
    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

  • Web server–based authentication user security example

    This question was posted in response to the following article: http://help.adobe.com/en_US/ColdFusion/9.0/Developing/WSc3ff6d0ea77859461172e0811cbec22c24 -7c35.html

    Any chance of a working example?

  • Logon/security examples and tutorials and missing one

    So far, I have found examples on Sun's site for:
    DB based security
    http://developers.sun.com/prodtech/javatools/jscreator/reference/techart/signon_app.html
    JAAS security (bottom right of screen)
    http://developers.sun.com/prodtech/javatools/jscreator/ea/jsc2/learning/tutorials/index.html
    But suprisingly, I can not find any examples/tutorials on using container-based security (such as Tomcat/J2EE/Sun's own App Server).
    To be concise, I do not see how to use web.xml's <security-constraint> tags via BASIC or FORM auth for security.
    Does anyone have any more links to be added to this thread, hopefully including the infamous missing j_security_check login with JSF?
    Thanky,
    -D

    Hi,
    My case:
    My login.jsp uses <html:form action="/postLogin" method="post"> and is inturn redirected to LoginAction action class. In the execute method of this class, after a bunch of statements, I have
    return new ActionForward("j_security_check");
    My web.xml looks something like -
    <form-login-config>
    <form-login-page>/login.do</form-login-page>
    <form-error-page>/denied.do</form-error-page>
    </form-login-config>
    <welcome-file-list>
    <welcome-file>index.jsp</welcome-file>
    </welcome-file-list>
    What happens now is that when I try to access http://localhost:8080/..../login.do, it takes me to index.jsp by default.
    My problem is, I have a third field (dropdown) in the login page - depending on which my landing page must change. How can I do this (I want to retain the container based authentication)? Please reply as I have been working on this for quite sometime without a solution :(
    Thanks in adv
    Sri

  • Coldfusion secure FTP & digital certificates

    Hello !
    I am currently in the process of developing a corporate CF intranet site that is behind a corporate firewall and part of the application will need to send a data file (FTP put) to a remote FTP server using secured FTP (FTPS). I have never used Coldfusion before for either secured or unsecured FTP.  I am planning on using the CFFTP tag to open the connection and send the data file but I have a number of other questions regarding the use & installation of the digital certificates.:
    Current development environment setup:
    CF version 9 standard edition running on Windows Server 2008 R2
    Microsoft IIS 7
    Current production environment setup:
    CF version 9  enterprise edition running on Windows Server 2008 R2
    Microsoft IIS 7
    1.  The data file that is being created must be sent to a finanacial institution and they will be providing a digital certificate (p12 format) to me.  What do I do with that certificate once I get it ?  I have installed SSL certificates before on http web sites with IIS without any issues but I am not sure what to do with the certificate for secured FTP.  Do I import the certificate into IIS using the MMC snap on or does the certificate need to be integrated into Coldfusion in some other way and if so, what needs to be done ?
    2.  What other steps need to be prior to being able to use the CFFTP tag for a secured FTP send ?
    I would appreciate as much help as possible as I haven't used CF for FTP before.
    Thank you.

    Dave,
    Thank you for answering.
    1.  I have imported the certificate into the cacerts file by using the following command:
         keytool -import -keystore ../lib/security/cacerts -alias x  -file c:\downloads\y
         where x was the alias name I assigned and y was the certificate name (extension of 'der').
    I tried importing a p12 and p7b certificate but neither of those worked.  I received the message 'Not a valid X.509 Certificate' from the command.  I then successfully imported a Base64 certificate (der).  I believe the certificate has been successfully imported because I ran the following and it shows the MD5 fingerprint:
         keytool -list -alias x -keystore ../lib/security/cacerts
         where x is my alias name I assigned in the original import
    2.  I then ran the following CFM command replacing the '*'s with the appropriate server name, user name, and password
         <cfftp action="open" connection="conn1" secure="yes" server="********" username="******" password="*****" port="21"
         </cfftp>
         I am getting the CF error
    An error occurred while establishing an sFTP connection.
    Verify your connection attributes: username, password, server, fingerprint, port, key, connection, proxyServer, and secure (as applicable). Error: User Authentication failed.
    Any suggestions or help would be appreciated.
    Thank you.

  • Coldfusion Security hotfix hf901-00002 - esapiconfig log error

    Just patched two new CENTOS 5.5 servers running jrun/CF EE 901 installs.  Start up trace message throws errors for:
    java.io.FileNotFoundException: ../logs/esapiconfig.log affecting log4j
    Manually added the missing log file - still no joy.
    Any ideas?

    The security hotfix was updated on March 7th, see http://www.petefreitag.com/item/787.cfm I think the update resolves this issue

  • Securing ColdFusion 10

    We are preparing to upgrade to ColdFusion 10 from ColdFusion 8.  We are particulary interested in best practices for securing the installation, in particular securing the administrator on external facing systems.
    The installation will be in a Solaris environment using Oracle iPlanet Web Server.
    Can anyone provide such best practices, experiences or suggestions?
    Thanks in advance.

    Yes, there are many. (While you refer to CF10, I’ll assume you’re also open to general guidelines that apply to all releases of CF10.)
    First is the “Adobe ColdFusion 9 server lockdown guide file”, at http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/products/coldfusion/pdfs/910 25512-cf9-lockdownguide-wp-ue.pdf.
    There is also the “ColdFusion 8 developer security guidelines file”, at ColdFusion 8 developer security guidelines file.
    Both of these are listed at the bottom of (because they’re older) of the CF Security center site:
    http://www.adobe.com/devnet/coldfusion/security.html
    As for CF10 security, there have been many changes, discussed among other places here: http://www.adobe.com/devnet/coldfusion/articles/security-improvements.html (which is also listed on that security center). It also has preso recordings and more.
    As for CF security in general, the “go to guy” for that (who in fact wrote that Lockdown guide) is Pete Freitag, who with his company Foundeo (foundeo.com) offer still other resources (info and tools), among which the most important is the free HackMyCF.com service (which offers additional commercial features), which can scan your server and identify vulnerabilities and recommends fixes.
    Finally, as for your root question of securing your Admin, that’s best done by either securing its access with your external web server (iPlanet, in your case) which can involve requiring basic, digest, or other additional authentication (beyond CF’s password), limiting IP addresses that can access it, and more. Those are features of the web server, though, not CF.
    On the other hand, some resort to NOT allowing access to the CF Admin (via that external web server) and let it be accessed only via CF’s internal web server (Tomcat’s web server, in CF10). Because by default that works on a port other than 80 (8500, for instance), that would be blocked on your server unless opened in your firewall. Surprisingly, I find that this idea is not discussed in either of the first two guides above. But the CF documentation (both the Installing, and the Configuring and Administering manuals) does discuss the internal web server.
    Hope that helps.
    /charlie

  • Locking down coldfusion for security threats

    Hi,
    We were looking to lockdown our coldfusion server from outside threats and have lookd at multiple forums for it. Most of them were referring to run coldfusion under an unprivileged user account (other than administrator).
    Has anyone done similar kind of configuration before as we haven't got any clue how to do this. We will appreciate if someone could write down all the steps to do it.
    Thanks
    Steve Jordan
    http://hyve.com

    Depending on the version you are running, Adobe has lockdown guides for securing ColdFusion.
    ColdFusion 10: http://www.adobe.com/content/dam/Adobe/en/products/coldfusion/pdfs/cf10/cf10-lockdown-guid e.pdf
    ColdFusion 9: http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/products/coldfusion/pdfs/910 25512-cf9-lockdownguide-wp-ue.pdf
    They were written for Adobe by Pete Freitag of Foundeo.  Pete is a ColdFusion security guru.
    -Carl

  • Memory leak after upgrading to ColdFusion 10

    We recently upgraded from CF8 to CF10 and we're running into some issues.  We started off getting a lot of OutOfMemory errors with the default heap settings. Chaning them to 768MB/1280MB which has helped, but we're still running into occasional OOM issues.  We took a heapdump as the instance was having problems today with blocked threads and noticed the heap usage was near the max so it was probably going to run out of memory soon too.  Below is what the eclipse memory analyzer tool found as a possible leak suspect.  Does anyone have any suggestions on where to go from here?  Not sure if it's an issue with CF itself or something in the app.  Thanks
    Description
    One instance of "coldfusion.runtime.ClientScopeServiceImpl" loaded by "coldfusion.bootstrap.BootstrapClassLoader @ 0x120bbaf0" occupies 838,847,880 (88.33%) bytes. The memory is accumulated in one instance of "java.util.HashMap$Entry[]" loaded by "<system class loader>".
    Keywords
    coldfusion.runtime.ClientScopeServiceImpl
    java.util.HashMap$Entry[]
    coldfusion.bootstrap.BootstrapClassLoader @ 0x120bbaf0
    Shortest Paths To the Accumulation Point
    Class Name
    Shallow Heap
    Retained Heap
    java.util.HashMap$Entry[524288] @ 0x3b88e058
    2,097,168
    838,843,064
    table java.util.HashMap @ 0x1212d2f8
    48
    838,843,112
    sharedClientScopeMap coldfusion.runtime.ClientScopeServiceImpl @ 0x1212af08
    88
    838,847,880
    <Java Local> org.apache.tomcat.util.threads.TaskThread @ 0x100f16d8 ajp-bio-51010-exec-20 Thread
    112
    21,624
    <Java Local> org.apache.tomcat.util.threads.TaskThread @ 0x103df100 ajp-bio-51010-exec-36 Thread
    112
    19,552
    <Java Local> org.apache.tomcat.util.threads.TaskThread @ 0x1043f0e0 ajp-bio-51010-exec-72 Thread
    112
    19,392
    <Java Local> org.apache.tomcat.util.threads.TaskThread @ 0x10a8eec0 ajp-bio-51010-exec-83 Thread
    112
    22,288
    <Java Local> org.apache.tomcat.util.threads.TaskThread @ 0x10befce8 ajp-bio-51010-exec-54 Thread
    112
    18,256
    <Java Local> org.apache.tomcat.util.threads.TaskThread @ 0x11d35e18 ajp-bio-51010-exec-5 Thread
    112
    23,776
    <Java Local> org.apache.tomcat.util.threads.TaskThread @ 0x121b97e0 ajp-bio-51010-exec-68 Thread
    112
    18,160
    <Java Local> org.apache.tomcat.util.threads.TaskThread @ 0x123c4f88 ajp-bio-51010-exec-74 Thread
    112
    18,816
    <Java Local> org.apache.tomcat.util.threads.TaskThread @ 0x123c5078 ajp-bio-51010-exec-27 Thread
    112
    19,784
    <Java Local> org.apache.tomcat.util.threads.TaskThread @ 0x12693f30 ajp-bio-51010-exec-75 Thread
    112
    19,208
    <Java Local> org.apache.tomcat.util.threads.TaskThread @ 0x126e7ff8 ajp-bio-51010-exec-26 Thread
    112
    19,200
    <Java Local> org.apache.tomcat.util.threads.TaskThread @ 0x1297dd60 ajp-bio-51010-exec-78 Thread
    112
    20,592
    <Java Local> org.apache.tomcat.util.threads.TaskThread @ 0x12d3a818 ajp-bio-51010-exec-73 Thread
    112
    21,304
    service class coldfusion.runtime.AppHelper @ 0x12fae868 »
    112
    1,032
    clientScope class coldfusion.server.ServiceFactory @ 0x11047060 »
    96
    55,184
    Total: 15 entries
    Accumulated Objects
    Class Name
    Shallow Heap
    Retained Heap
    Percentage
    coldfusion.runtime.ClientScopeServiceImpl @ 0x1212af08
    88
    838,847,880
    88.33%
    java.util.HashMap @ 0x1212d2f8
    48
    838,843,112
    88.33%
    java.util.HashMap$Entry[524288] @ 0x3b88e058
    2,097,168
    838,843,064
    88.33%
    java.util.HashMap$Entry @ 0x25370040
    24
    51,409,128
    5.41%
    java.util.HashMap$Entry @ 0x1b878cf8
    24
    12,173,192
    1.28%
    java.util.HashMap$Entry @ 0x15d049c8
    24
    10,685,760
    1.13%
    java.util.HashMap$Entry @ 0x41af3d98
    24
    10,587,208
    1.11%
    java.util.HashMap$Entry @ 0x3ff95918
    24
    10,443,664
    1.10%
    java.util.HashMap$Entry @ 0x43c422b0
    24
    9,886,280
    1.04%
    java.util.HashMap$Entry @ 0x3eec68a8
    24
    9,723,216
    1.02%
    java.util.HashMap$Entry @ 0x230c3078
    24
    9,254,288
    0.97%
    java.util.HashMap$Entry @ 0x2e36cab8
    24
    6,494,488
    0.68%
    java.util.HashMap$Entry @ 0x45e499e8
    24
    6,178,320
    0.65%
    java.util.HashMap$Entry @ 0x2a91c258
    24
    4,008,048
    0.42%
    java.util.HashMap$Entry @ 0x4260ee28
    24
    3,542,552
    0.37%
    java.util.HashMap$Entry @ 0x3dfb9e98
    24
    3,503,072
    0.37%
    java.util.HashMap$Entry @ 0x43f354a0
    24
    2,908,120
    0.31%
    java.util.HashMap$Entry @ 0x1adfb600
    24
    2,197,056
    0.23%
    java.util.HashMap$Entry @ 0x4469eee0
    24
    2,050,528
    0.22%
    java.util.HashMap$Entry @ 0x4443dea8
    24
    2,034,224
    0.21%
    java.util.HashMap$Entry @ 0x41b79ff0
    24
    1,846,808
    0.19%
    java.util.HashMap$Entry @ 0x40931b50
    24
    1,846,784
    0.19%
    java.util.HashMap$Entry @ 0x40c62310
    24
    1,846,784
    0.19%
    Total: 20 entries
    480
    162,619,520
    0.171
    Accumulated Objects by Class
    Label
    Number of Objects
    Used Heap Size
    Retained Heap Size
    java.util.HashMap$Entry
    First 10 of 190,465 objects
    190,465
    4,571,160
    836,711,024
    java.lang.String
    First 10 of 253 objects
    253
    6,072
    26,408
    java.lang.reflect.Method
    First 10 of 57 objects
    57
    4,560
    4,560
    coldfusion.runtime.ClientScope
    All 1 objects
    1
    56
    2,632
    java.lang.Class[]
    First 10 of 73 objects
    73
    1,248
    1,248
    coldfusion.runtime.ClientScopeKey
    All 1 objects
    1
    24
    24
    java.lang.Class
    All 2 objects
    2
    0
    0
    Total: 7 entries
    190,852
    4,583,120
    836,745,896

    Hi Sharma,
    Here's the settings summary from the console.  The OOM issue is now happening about 1-2 times weekly after increasing the heap size.  Before that it was almost daily.  It seems we can go about 75-85 hours before we restart due to either OOM or blocked threads.
    Settings Summary
    Server Settings > Settings Summary
    Report generated on Sep 25, 2014 12:08 PM
    This report shows the status of all ColdFusion configuration settings. To display the area of the ColdFusion Administrator where you can edit the group settings, click any of the groups in the report.
    System Information
    Server Details
    Server Product ColdFusion
    Version ColdFusion 10,286680
    Edition Enterprise 
    Operating System Windows 2003 
    OS Version 5.2 
    Update Level /D:/ColdFusion10/cfusion/lib/updates/chf10000012.jar 
    Adobe Driver Version 4.1 (Build 0001) 
    JVM Details
    Java Version 1.7.0_15 
    Java Vendor Oracle Corporation 
    Java Vendor URL http://java.oracle.com/ 
    Java Home D:\ColdFusion10\jre 
    Java File Encoding Cp1252 
    Java Default Locale en_US 
    File Separator \ 
    Path Separator ; 
    Line Separator Chr(13) 
    User Name SYSTEM 
    User Home C:\Documents and Settings\Default User 
    User Dir D:\ColdFusion10\cfusion\bin 
    Java VM Specification Version 1.7 
    Java VM Specification Vendor Oracle Corporation 
    Java VM Specification Name Java Virtual Machine Specification 
    Java VM Version 23.7-b01 
    Java VM Vendor Oracle Corporation 
    Java VM Name Java HotSpot(TM) Server VM 
    Java Specification Version 1.7 
    Java Specification Vendor Oracle Corporation 
    Java Specification Name Java Platform API Specification 
    Java Class Version 51.0 
    CF Server Java Class Path ;D:/ColdFusion10/cfusion/lib/updates/chf10000012.jar;  D:/ColdFusion10/cfusion/lib/ant-launcher.jar;  D:/ColdFusion10/cfusion/lib/ant.jar;  D:/ColdFusion10/cfusion/lib/antlr-2.7.6.jar;  D:/ColdFusion10/cfusion/lib/apache-solr-core.jar;  D:/ColdFusion10/cfusion/lib/apache-solr-solrj.jar;  D:/ColdFusion10/cfusion/lib/asm-all-3.1.jar;  D:/ColdFusion10/cfusion/lib/asn1.jar;  D:/ColdFusion10/cfusion/lib/axis.jar;  D:/ColdFusion10/cfusion/lib/backport-util-concurrent.jar;  D:/ColdFusion10/cfusion/lib/bcel-5.1-jnbridge.jar;  D:/ColdFusion10/cfusion/lib/bcel.jar;  D:/ColdFusion10/cfusion/lib/bcmail-jdk14-139.jar;  D:/ColdFusion10/cfusion/lib/bcprov-jdk14-139.jar;  D:/ColdFusion10/cfusion/lib/cdo.jar;  D:/ColdFusion10/cfusion/lib/cdohost.jar;  D:/ColdFusion10/cfusion/lib/certj.jar;  D:/ColdFusion10/cfusion/lib/cf-acrobat.jar;  D:/ColdFusion10/cfusion/lib/cf-assembler.jar;  D:/ColdFusion10/cfusion/lib/cf-logging.jar;  D:/ColdFusion10/cfusion/lib/cf4was.jar;  D:/ColdFusion10/cfusion/lib/cf4was_ae.jar;  D:/ColdFusion10/cfusion/lib/cfusion-req.jar;  D:/ColdFusion10/cfusion/lib/cfusion.jar;  D:/ColdFusion10/cfusion/lib/chart.jar;  D:/ColdFusion10/cfusion/lib/clibwrapper_jiio.jar;  D:/ColdFusion10/cfusion/lib/commons-beanutils-1.8.0.jar;  D:/ColdFusion10/cfusion/lib/commons-codec-1.3.jar;  D:/ColdFusion10/cfusion/lib/commons-collections-3.2.1.jar;  D:/ColdFusion10/cfusion/lib/commons-compress-1.0.jar;  D:/ColdFusion10/cfusion/lib/commons-digester-2.0.jar;  D:/ColdFusion10/cfusion/lib/commons-discovery-0.4.jar;  D:/ColdFusion10/cfusion/lib/commons-httpclient-3.1.jar;  D:/ColdFusion10/cfusion/lib/commons-lang-2.4.jar;  D:/ColdFusion10/cfusion/lib/commons-logging-1.1.1.jar;  D:/ColdFusion10/cfusion/lib/commons-logging-api-1.1.1.jar;  D:/ColdFusion10/cfusion/lib/commons-net-3.0.1.jar;  D:/ColdFusion10/cfusion/lib/commons-vfs2-2.0.jar;  D:/ColdFusion10/cfusion/lib/crystal.jar;  D:/ColdFusion10/cfusion/lib/derby.jar;  D:/ColdFusion10/cfusion/lib/derbyclient.jar;  D:/ColdFusion10/cfusion/lib/derbynet.jar;  D:/ColdFusion10/cfusion/lib/derbyrun.jar;  D:/ColdFusion10/cfusion/lib/derbytools.jar;  D:/ColdFusion10/cfusion/lib/dom4j-1.6.1.jar;  D:/ColdFusion10/cfusion/lib/dpHibernate.jar;  D:/ColdFusion10/cfusion/lib/ehcache-core-2.5.1.jar;  D:/ColdFusion10/cfusion/lib/ehcache-web-2.0.4.jar;  D:/ColdFusion10/cfusion/lib/esapi-2.0.1.jar;  D:/ColdFusion10/cfusion/lib/EWSAPI-1.1.5.jar;  D:/ColdFusion10/cfusion/lib/FCSj.jar;  D:/ColdFusion10/cfusion/lib/flashgateway.jar;  D:/ColdFusion10/cfusion/lib/flex-messaging-common.jar;  D:/ColdFusion10/cfusion/lib/flex-messaging-core.jar;  D:/ColdFusion10/cfusion/lib/flex-messaging-opt.jar;  D:/ColdFusion10/cfusion/lib/flex-messaging-proxy.jar;  D:/ColdFusion10/cfusion/lib/flex-messaging-remoting.jar;  D:/ColdFusion10/cfusion/lib/flex-rds-server.jar;  D:/ColdFusion10/cfusion/lib/geronimo-stax-api_1.0_spec-1.0.1.jar;  D:/ColdFusion10/cfusion/lib/hibernate3.jar;  D:/ColdFusion10/cfusion/lib/httpclient-4.1.1.jar;  D:/ColdFusion10/cfusion/lib/httpclient-cache-4.1.1.jar;  D:/ColdFusion10/cfusion/lib/httpclient.jar;  D:/ColdFusion10/cfusion/lib/httpcore_4.1.2.jar;  D:/ColdFusion10/cfusion/lib/httpmime-4.1.1.jar;  D:/ColdFusion10/cfusion/lib/ib6addonpatch.jar;  D:/ColdFusion10/cfusion/lib/ib6core.jar;  D:/ColdFusion10/cfusion/lib/ib6http.jar;  D:/ColdFusion10/cfusion/lib/ib6swing.jar;  D:/ColdFusion10/cfusion/lib/ib6util.jar;  D:/ColdFusion10/cfusion/lib/im.jar;  D:/ColdFusion10/cfusion/lib/iText.jar;  D:/ColdFusion10/cfusion/lib/iTextAsian.jar;  D:/ColdFusion10/cfusion/lib/izmado.jar;  D:/ColdFusion10/cfusion/lib/jai_codec.jar;  D:/ColdFusion10/cfusion/lib/jai_core.jar;  D:/ColdFusion10/cfusion/lib/jai_imageio.jar;  D:/ColdFusion10/cfusion/lib/jakarta-oro-2.0.6.jar;  D:/ColdFusion10/cfusion/lib/jakarta-slide-webdavlib-2.1.jar;  D:/ColdFusion10/cfusion/lib/java-xmlbuilder-0.4.jar;  D:/ColdFusion10/cfusion/lib/javasysmon-0.3.3.jar;  D:/ColdFusion10/cfusion/lib/jax-qname.jar;  D:/ColdFusion10/cfusion/lib/jaxb-api.jar;  D:/ColdFusion10/cfusion/lib/jaxb-impl.jar;  D:/ColdFusion10/cfusion/lib/jaxb-libs.jar;  D:/ColdFusion10/cfusion/lib/jaxb-xjc.jar;  D:/ColdFusion10/cfusion/lib/jaxrpc.jar;  D:/ColdFusion10/cfusion/lib/jcifs-1.3.15.jar;  D:/ColdFusion10/cfusion/lib/jdom.jar;  D:/ColdFusion10/cfusion/lib/jeb.jar;  D:/ColdFusion10/cfusion/lib/jersey-core.jar;  D:/ColdFusion10/cfusion/lib/jersey-server.jar;  D:/ColdFusion10/cfusion/lib/jersey-servlet.jar;  D:/ColdFusion10/cfusion/lib/jets3t-0.8.1.jar;  D:/ColdFusion10/cfusion/lib/jetty-continuation-7.0.0.v20091005.jar;  D:/ColdFusion10/cfusion/lib/jetty-http-7.0.0.v20091005.jar;  D:/ColdFusion10/cfusion/lib/jetty-io-7.0.0.v20091005.jar;  D:/ColdFusion10/cfusion/lib/jetty-security-7.0.0.v20091005.jar;  D:/ColdFusion10/cfusion/lib/jetty-server-7.0.0.v20091005.jar;  D:/ColdFusion10/cfusion/lib/jetty-servlet-7.0.0.v20091005.jar;  D:/ColdFusion10/cfusion/lib/jetty-servlets-7.0.0.v20091005.jar;  D:/ColdFusion10/cfusion/lib/jetty-util-7.0.0.v20091005.jar;  D:/ColdFusion10/cfusion/lib/jetty-xml-7.0.0.v20091005.jar;  D:/ColdFusion10/cfusion/lib/jintegra.jar;  D:/ColdFusion10/cfusion/lib/jnbcore.jar;  D:/ColdFusion10/cfusion/lib/jpedal.jar;  D:/ColdFusion10/cfusion/lib/js.jar;  D:/ColdFusion10/cfusion/lib/jsch-0.1.44m.jar;  D:/ColdFusion10/cfusion/lib/jsr107cache.jar;  D:/ColdFusion10/cfusion/lib/jsr311-api-1.1.1.jar;  D:/ColdFusion10/cfusion/lib/jta.jar;  D:/ColdFusion10/cfusion/lib/jutf7-0.9.0.jar;  D:/ColdFusion10/cfusion/lib/ldap.jar;  D:/ColdFusion10/cfusion/lib/ldapbp.jar;  D:/ColdFusion10/cfusion/lib/log4j-1.2.15.jar;  D:/ColdFusion10/cfusion/lib/lucene-analyzers-3.4.0.jar;  D:/ColdFusion10/cfusion/lib/lucene-core-3.4.0.jar;  D:/ColdFusion10/cfusion/lib/lucene-highlighter-3.4.0.jar;  D:/ColdFusion10/cfusion/lib/lucene-memory-3.4.0.jar;  D:/ColdFusion10/cfusion/lib/lucenedemo.jar;  D:/ColdFusion10/cfusion/lib/macromedia_drivers.jar;  D:/ColdFusion10/cfusion/lib/mail.jar;  D:/ColdFusion10/cfusion/lib/metadata-extractor-2.4.0-beta-1.jar;  D:/ColdFusion10/cfusion/lib/mlibwrapper_jai.jar;  D:/ColdFusion10/cfusion/lib/msapps.jar;  D:/ColdFusion10/cfusion/lib/mysql-connector-java-commercial-5.1.17-bin.jar;  D:/ColdFusion10/cfusion/lib/namespace.jar;  D:/ColdFusion10/cfusion/lib/nekohtml.jar;  D:/ColdFusion10/cfusion/lib/netty-3.2.5.Final.jar;  D:/ColdFusion10/cfusion/lib/ooxml-schemas.jar;  D:/ColdFusion10/cfusion/lib/pdfencryption.jar;  D:/ColdFusion10/cfusion/lib/poi-contrib.jar;  D:/ColdFusion10/cfusion/lib/poi-ooxml-schemas.jar;  D:/ColdFusion10/cfusion/lib/poi-ooxml.jar;  D:/ColdFusion10/cfusion/lib/poi-scratchpad.jar;  D:/ColdFusion10/cfusion/lib/poi.jar;  D:/ColdFusion10/cfusion/lib/portlet_20.jar;  D:/ColdFusion10/cfusion/lib/postgresql-8.3-604.jdbc3.jar;  D:/ColdFusion10/cfusion/lib/quartz.jar;  D:/ColdFusion10/cfusion/lib/relaxngDatatype.jar;  D:/ColdFusion10/cfusion/lib/ri_generic.jar;  D:/ColdFusion10/cfusion/lib/rome-cf.jar;  D:/ColdFusion10/cfusion/lib/saaj.jar;  D:/ColdFusion10/cfusion/lib/saxon9he.jar;  D:/ColdFusion10/cfusion/lib/serializer.jar;  D:/ColdFusion10/cfusion/lib/slf4j-api-1.5.6.jar;  D:/ColdFusion10/cfusion/lib/slf4j-log4j12-1.5.6.jar;  D:/ColdFusion10/cfusion/lib/smack.jar;  D:/ColdFusion10/cfusion/lib/smpp.jar;  D:/ColdFusion10/cfusion/lib/STComm.jar;  D:/ColdFusion10/cfusion/lib/tagsoup-1.2.jar;  D:/ColdFusion10/cfusion/lib/tika-core-0.6.jar;  D:/ColdFusion10/cfusion/lib/tika-parsers-0.6.jar;  D:/ColdFusion10/cfusion/lib/tools.jar;  D:/ColdFusion10/cfusion/lib/tt-bytecode.jar;  D:/ColdFusion10/cfusion/lib/wc50.jar;  D:/ColdFusion10/cfusion/lib/webchartsJava2D.jar;  D:/ColdFusion10/cfusion/lib/wsdl4j-1.6.2.jar;  D:/ColdFusion10/cfusion/lib/wsrp4j-commons-0.5-SNAPSHOT.jar;  D:/ColdFusion10/cfusion/lib/wsrp4j-producer.jar;  D:/ColdFusion10/cfusion/lib/xalan.jar;  D:/ColdFusion10/cfusion/lib/xercesImpl.jar;  D:/ColdFusion10/cfusion/lib/xml-apis.jar;  D:/ColdFusion10/cfusion/lib/xmlbeans-2.3.0.jar;  D:/ColdFusion10/cfusion/lib/xmpcore.jar;  D:/ColdFusion10/cfusion/lib/xsdlib.jar;  D:/ColdFusion10/cfusion/lib/;  D:/ColdFusion10/cfusion/lib/axis2/axiom-api-1.2.13.jar;  D:/ColdFusion10/cfusion/lib/axis2/axiom-dom-1.2.13.jar;  D:/ColdFusion10/cfusion/lib/axis2/axiom-impl-1.2.13.jar;  D:/ColdFusion10/cfusion/lib/axis2/axis2-adb-1.7.0.jar;  D:/ColdFusion10/cfusion/lib/axis2/axis2-adb-codegen-1.7.0.jar;  D:/ColdFusion10/cfusion/lib/axis2/axis2-codegen-1.7.0.jar;  D:/ColdFusion10/cfusion/lib/axis2/axis2-jaxws-1.7.0.jar;  D:/ColdFusion10/cfusion/lib/axis2/axis2-kernel-1.7.0.jar;  D:/ColdFusion10/cfusion/lib/axis2/axis2-transport-http-1.7.0.jar;  D:/ColdFusion10/cfusion/lib/axis2/axis2-transport-local-1.7.0.jar;  D:/ColdFusion10/cfusion/lib/axis2/commons-fileupload-1.2.jar;  D:/ColdFusion10/cfusion/lib/axis2/commons-io-1.4.jar;  D:/ColdFusion10/cfusion/lib/axis2/geronimo-ws-metadata_2.0_spec-1.1.2.jar;  D:/ColdFusion10/cfusion/lib/axis2/httpcore-4.0.jar;  D:/ColdFusion10/cfusion/lib/axis2/neethi-3.0.2.jar;  D:/ColdFusion10/cfusion/lib/axis2/woden-api-1.0.jar;  D:/ColdFusion10/cfusion/lib/axis2/woden-impl-commons-1.0.jar;  D:/ColdFusion10/cfusion/lib/axis2/woden-impl-dom-1.0.jar;  D:/ColdFusion10/cfusion/lib/axis2/wsdl4j-1.6.2.jar;  D:/ColdFusion10/cfusion/lib/axis2/wstx-asl-3.2.9.jar;  D:/ColdFusion10/cfusion/lib/axis2/XmlSchema-1.4.8.jar;  D:/ColdFusion10/cfusion/lib/axis2/;  D:/ColdFusion10/cfusion/gateway/lib/examples.jar;  D:/ColdFusion10/cfusion/gateway/lib/;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/flex/jars/cfgatewayadapter.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/flex/jars/concurrent.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/flex/jars/;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/cfform/jars/batik-awt-util.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/cfform/jars/batik-css.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/cfform/jars/batik-ext.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/cfform/jars/batik-transcoder.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/cfform/jars/batik-util.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/cfform/jars/commons-discovery.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/cfform/jars/commons-logging.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/cfform/jars/concurrent.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/cfform/jars/flex.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/cfform/jars/jakarta-oro-2.0.7.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/cfform/jars/jcert.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/cfform/jars/jnet.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/cfform/jars/jsse.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/cfform/jars/oscache.jar;  D:/ColdFusion10/cfusion/wwwroot/WEB-INF/cfform/jars/; 
    Java Class Path D:\\ColdFusion10\\cfusion\lib\oosdk\lib;
    D:\\ColdFusion10\\cfusion\lib\oosdk\classes;
    D:\ColdFusion10\cfusion\bin\..\runtime\bin\tomcat-juli.jar;
    D:\ColdFusion10\cfusion\bin\cf-bootstrap.jar 
    Java Ext Dirs D:\ColdFusion10\jre\lib\ext;C:\WINDOWS\Sun\Java\lib\ext 
    Printer Details
    Default Printer
    Printers
    Server Information
    General Settings
    Timeout requests Yes 
    Enable Per App Settings Yes 
    Request Time Limit 120 seconds
    Use UUID for CFToken Yes 
    Disable Service Factory No 
    Protect serialized JSON No 
    Protect Serialized JSON Prefix // 
    Missing Template Handler /404b.cfm 
    Site-wide Error Handler /errorCatch.cfm 
    Enable HTTP status codes Yes 
    Enable Global Script Protection Yes 
    ORMSearch Index Directory 
    Default CFForm ScriptSrc Directory /CFIDE/scripts/ 
    Google Map Key 
    Maximum size of post data 100 MB
    Request Throttle Threshold 4 MB
    Request Throttle Memory 200 MB
    Request Tuning
    Simultaneous request limit 20 
    Flash Remoting request limit 5 
    Web Service request limit 20 
    CFC request limit 20 
    CFThread Pool Size 10 
    Maximum number of report threads 8 
    Request Queue Timeout 120 seconds
    Request Queue Timeout Page 
    Caching
    Template cache size 150 templates
    Enable trusted cache No 
    Cached query limit 500
    Save Class Files Yes 
    Client Variable Settings
    Default client variable store ecom 
    Purge Interval 1 hours 7 minutes 
    Client Stores
    Registry 
    Type REGISTRY 
    Description System registry. 
    Purge data after time limit Yes 
    Time limit 90 days
    Disable global updates No 
    ecom 
    Type JDBC 
    Description 
    Purge data after time limit No 
    Time limit 2 days
    Disable global updates Yes 
    Cookie 
    Type COOKIE 
    Description Client based text file. 
    Purge data after time limit Yes 
    Time limit 10 days
    Disable global updates No 
    Memory Variables
    J2EE Sessions No 
    Application Variables
    Enable Application Variables Yes 
    Default Timeout 2,0,0,0 
    Maximum Timeout 2,0,0,0 
    Session Variables
    Enable session variables Yes 
    Default Timeout 0,0,20,0 
    Maximum Timeout 2,0,0,0 
    ColdFusion Mappings
    /gateway   D:\ColdFusion10\cfusion\gateway\cfc 
    /CFIDE   D:\ColdFusion10\cfusion\wwwroot\CFIDE 
    Mail Connection Settings
    Default Server Port 25 
    Connection Timeout 60 seconds
    Spool Interval 30 seconds
    Mail Delivery Threads 10 
    Maintain Connection to Mail Server Yes 
    Spool Messages To disk
    Max Messages Spooled to Memory 50000 
    Default CFMail Charset UTF-8 
    Use SSL Connection No 
    Use TLS No 
    Default Mail Server
    smtp.example.com
    Server smtp.example.com
    Port 25 
    Username 
    Password 
    Backup Mail Servers
    smtp-backup.example.com
    Server smtp-backup.example.com
    Port 25 
    Username 
    Password 
    Mail Logging Settings
    Log Severity warning 
    Log all E-mail messages sent by ColdFusion Yes 
    Charting
    Cache Type disk images
    Maximum number of images in cache 50 images
    Maximum number of charting threads 4 
    Disk cache location D:\ColdFusion10\cfusion\charting\cache 
    Data & Services
    Database Data Sources
    GES 
    CF data source name GES 
    Description 
    Driver MSSQLServer 
    JDBC URL jdbc:macromedia:sqlserver://MSSQL:1433;databaseName=GES;SelectMethod=direct;sendStringPar ametersAsUnicode=false;querytimeout=0;MaxPooledStatements=100
    Username sa 
    Login timeout 30 seconds
    Long text buffer size 64000 
    Timeout 1200 seconds 
    Maintain connections Yes 
    Interval 420 seconds
    Restricted SQL operations 
    Disable connections No 
    cfcodeexplorer 
    CF data source name cfcodeexplorer 
    Description 
    Driver Apache Derby Embedded 
    JDBC URL jdbc:derby:D:\ColdFusion10\cfusion\db\cfcodeexplorer;create=false 
    Username 
    Login timeout 30 seconds 
    Long text buffer size 64000 
    Timeout 1200 seconds
    Maintain connections Yes 
    Interval 420 seconds 
    Restricted SQL operations 
    Disable connections No 
    ecom 
    CF data source name ecom 
    Description 
    Driver 
    JDBC URL jdbc:macromedia:oracle://10.10.120.13:1521;serviceName=ecom;alternateServers=(10.10.120.1 4:1521);loadBalancing=true
    Username user 
    Login timeout 30 seconds
    Long text buffer size 64000 
    Timeout 1200 seconds 
    Maintain connections Yes 
    Interval 420 seconds
    Restricted SQL operations 
    Disable connections No 
    cfbookclub 
    CF data source name cfbookclub 
    Description 
    Driver Apache Derby Embedded 
    JDBC URL jdbc:derby:D:\ColdFusion10\cfusion\db\bookclub;create=false 
    Username 
    Login timeout 30 seconds 
    Long text buffer size 64000 
    Timeout 1200 seconds
    Maintain connections Yes 
    Interval 420 seconds 
    Restricted SQL operations 
    Disable connections No 
    ecomd 
    CF data source name ecomd 
    Description 
    Driver Oracle 
    JDBC URL jdbc:macromedia:oracle://ORACLE:1521;SID=ecomd;AuthenticationMethod=userIDPassword;sendSt ringParametersAsUnicode=false;querytimeout=0;MaxPooledStatements=100
    Username ges 
    Login timeout 30 seconds
    Long text buffer size 64000 
    Timeout 1200 seconds 
    Maintain connections Yes 
    Interval 420 seconds
    Restricted SQL operations 
    Disable connections No 
    GES_New 
    CF data source name GES 
    Description 
    Driver MSSQLServer 
    JDBC URL jdbc:macromedia:sqlserver://MSSQL\MSSQL:1433;databaseName=GES;SelectMethod=direct;sendStr ingParametersAsUnicode=false;querytimeout=0;MaxPooledStatements=100
    Username user 
    Login timeout 30 seconds 
    Long text buffer size 64000 
    Timeout 1200 seconds
    Maintain connections Yes 
    Interval 420 seconds 
    Restricted SQL operations 
    Disable connections No 
    E1_Oracle 
    CF data source name E1 
    Description 
    Driver Oracle 
    JDBC URL jdbc:macromedia:oracle://ORACLE:1516;SID=E1;AuthenticationMethod=userIDPassword;sendStrin gParametersAsUnicode=false;querytimeout=0;MaxPooledStatements=100
    Username user
    Login timeout 30 seconds
    Long text buffer size 64000 
    Timeout 1200 seconds 
    Maintain connections Yes 
    Interval 420 seconds
    Restricted SQL operations 
    Disable connections No 
    cfdocexamples 
    CF data source name cfdocexamples 
    Description 
    Driver Apache Derby Embedded 
    JDBC URL jdbc:derby:D:\ColdFusion10\cfusion\db\cfdocexamples;create=false 
    Username 
    Login timeout 30 seconds 
    Long text buffer size 64000 
    Timeout 1200 seconds
    Maintain connections Yes 
    Interval 420 seconds 
    Restricted SQL operations 
    Disable connections No 
    cfartgallery 
    CF data source name cfartgallery 
    Description 
    Driver Apache Derby Embedded 
    JDBC URL jdbc:derby:D:\ColdFusion10\cfusion\db\artgallery;create=false 
    Username 
    Login timeout 30 seconds
    Long text buffer size 64000 
    Timeout 1200 seconds 
    Maintain connections Yes 
    Interval 420 seconds
    Restricted SQL operations 
    Disable connections No 
    Web Services
    Debugging & Logging
    Debugging Settings
    Enable debugging No 
    Enable Robust Exception Information No 
    Display format classic.cfm 
    Execution times Yes 
    Execution time format summary 
    Execution time highlight threshold 250 ms
    Database activity Yes 
    Exception information Yes 
    Tracing information Yes 
    Timer Information No 
    Variables Yes 
    Variables
    Application Yes 
    CGI Yes 
    Client Yes 
    Cookie Yes 
    Form Yes 
    Request Yes 
    Server No 
    Session No 
    URL Yes 
    Debugging IP Addresses
    Debugging IP Address Restrictions 
    Line Debugger Settings
    Allow Line Debugging NO 
    Debugger Port 5005 
    Max Simultaneous Debugging Sessions 5 
    Logging Settings
    Log directory D:\ColdFusion10\cfusion\logs 
    Maximum file size 5000 KB
    Maximum number of archives 10 
    Log slow pages Yes 
    Slow page time limit 60 seconds
    Log CORBA calls No 
    Log scheduled tasks No 
    Schedule Tasks & Probes
    Scheduled Tasks
    Auto Replenish Notify S9 Order Min Levels Reached 
    Start Date 9/2/2014 
    End Date 
    Interval Daily 
    Start Time 2:05:00 AM 
    URL http://server1.example.com/index.cfm?fuseaction=rfid.SendReplenishEmails 
    Username 
    Timeout 
    Proxy Server 
    Proxy Port 80 
    Save output to file No 
    Publish path 
    Publish filename 
    Resolve URLs No 
    Auto Replenish Notify Customer Badge Replenishment 
    Start Date 9/2/2014 
    End Date 
    Interval Daily 
    Start Time 2:00:00 AM 
    URL http://server1.example.com/uri1/act_notifyUserBadge.cfm 
    Username 
    Timeout 
    Proxy Server 
    Proxy Port 80 
    Save output to file No 
    Publish path 
    Publish filename 
    Resolve URLs No 
    Auto Replenish 
    Start Date 9/2/2014 
    End Date 
    Interval Daily 
    Start Time 2:10:00 AM 
    URL http://server1.example.com/uri1/uri2/uri3/Replenish2.cfm 
    Username 
    Timeout 
    Proxy Server 
    Proxy Port 80 
    Save output to file No 
    Publish path 
    Publish filename 
    Resolve URLs No 
    Contact Updates and Registrations 
    Start Date 9/2/2014 
    End Date 
    Interval 65 
    Start Time 12:05:00 AM 
    URL http://server1.example.com/index.cfm?fuseaction=intCRM.sendCRMObjects 
    Username 
    Timeout 
    Proxy Server 
    Proxy Port 80 
    Save output to file No 
    Publish path 
    Publish filename 
    Resolve URLs No 
    System Probes
    Extensions
    Java Applets
    CFX Tags
    cfx_xml2cfx 
    Tag name cfx_xml2cfx 
    Description
    Type CPP 
    Server library c:\cfusion8\cfx\xml2cfx\cfx_xml2cfx.dll 
    Keep library loaded true 
    Procedure ProcessTagRequest 
    cfx_encrypt_aes 
    Tag name cfx_encrypt_aes 
    Description DB encryption library
    Type CPP 
    Server library C:\cfusion8\cfx\aes\cfx_encrypt_aes.dll 
    Keep library loaded true 
    Procedure ProcessTagRequest 
    cfx_exec 
    Tag name cfx_exec 
    Description
    Type CPP 
    Server library c:\CFusion8\cfx\exec\cfx_exec.dll 
    Keep library loaded true 
    Procedure ProcessTagRequest 
    Custom Tag Paths
    D:\web\app1\app2\app3\activedit3 
    D:\ColdFusion10\cfusion/CustomTags 
    D:\ColdFusion8\CustomTags 
    CORBA
    Selected connector [ none] 
    Connectors
    Event Gateways
    Settings
    Enable Event Gateway Yes 
    Thread Pool Size 10 
    Max Queue Size 25000 
    Gateway Types
    SMS 
    Description Handles SMS text messaging 
    Class coldfusion.eventgateway.sms.SMSGateway 
    Timeout 30 seconds 
    Kill On Timeout Yes 
    XMPP 
    Description Handles XMPP instant messaging 
    Class coldfusion.eventgateway.im.XMPPGateway 
    Timeout 30 seconds
    Kill On Timeout Yes 
    SAMETIME 
    Description Handles Lotus SAMETIME instant messaging 
    Class coldfusion.eventgateway.im.SAMETIMEGateway 
    Timeout 30 seconds 
    Kill On Timeout Yes 
    DirectoryWatcher 
    Description Watches a directory for file changes 
    Class examples.watcher.DirectoryWatcherGateway 
    Timeout 30 seconds
    Kill On Timeout Yes 
    Socket 
    Description Listens on a socket 
    Class examples.socket.SocketGateway 
    Timeout 30 seconds 
    Kill On Timeout Yes 
    CFML 
    Description Handles asynchronous events through CFCs 
    Class coldfusion.eventgateway.cfml.CfmlGateway 
    Timeout 30 seconds
    Kill On Timeout Yes 
    JMS 
    Description Handles Java Messaging Service messages 
    Class examples.JMS.JMSGateway 
    Timeout 30 seconds 
    Kill On Timeout Yes 
    ActiveMQ 
    Description Handles Apache ActiveMQ JMS messages 
    Class examples.ActiveMQ.JMSGateway 
    Timeout 30 seconds
    Kill On Timeout Yes 
    DataServicesMessaging 
    Description Handles Data Services Messaging messages 
    Class coldfusion.eventgateway.flex.FlexMessagingGateway 
    Timeout 30 seconds 
    Kill On Timeout No 
    FMS 
    Description Handles Flash Media Server shared objects 
    Class coldfusion.eventgateway.fms.FMSGateway 
    Timeout 30 seconds
    Kill On Timeout Yes 
    DataManagement 
    Description Notifies Data Management Services of data changes 
    Class coldfusion.eventgateway.flex.FlexDataManagementGateway 
    Timeout 30 seconds 
    Kill On Timeout Yes 
    Security
    CF Admin Authentication
    Enable authentication for the ColdFusion Administrator Yes 
    Allow access to ColdFusion Administrator with a Single password No 
    RDS Authentication
    Enable authentication for RDS access Yes 
    Allow access through RDS with Single password Yes 
    Security Sandboxes
    Enable ColdFusion Security No 
    jvm.config
    # VM configuration
    # Where to find JVM, if {java.home}/jre exists then that JVM is used
    # if not then it must be the path to the JRE itself
    java.home=D:\\ColdFusion10\\jre
    application.home=D:\\ColdFusion10\\cfusion
    # If no java.home is specified a VM is located by looking in these places in this
    # order:
    #  1) ../runtime/jre
    #  2) registry (windows only)
    #  3) JAVA_HOME env var plus jre (ie $JAVA_HOME/jre)
    #  4) java.exe in path
    # Arguments to VM
    java.args=-server  -Xms768m -Xmx1280m -XX:MaxPermSize=192m -XX:+UseParallelGC -Xbatch -Dcoldfusion.home={application.home} -Dcoldfusion.rootDir={application.home} -Dcoldfusion.libPath={application.home}/lib -Dorg.apache.coyote.USE_CUSTOM_STATUS_MSG_IN_HEADER=true -Dcoldfusion.jsafe.defaultalgo=FIPS186Random -Dges.config.serverEnvironment=prod2 -Dges.config.webServerHostName=server1.example.com -Dcom.sun.management.jmxremote.port=8880 -Dcom.sun.management.jmxremote.authenticate=false -Dcom.sun.management.jmxremote.ssl=false -Dcoldfusion.classPath={application.home}/lib/updates,{application.home}/lib,{application .home}/lib/axis2,{application.home}/gateway/lib/,{application.home}/wwwroot/WEB-INF/flex/j ars,{application.home}/wwwroot/WEB-INF/cfform/jars
    # Comma separated list of shared library path
    java.library.path={application.home}/lib,{application.home}/jintegra/bin,{application.home }/jintegra/bin/international,{application.home}/lib/oosdk/classes/win
    java.class.path={application.home}/lib/oosdk/lib,{application.home}/lib/oosdk/classes

  • Links not Working on ColdFusion Support Center

    Does anyone know why none of the links to the articles here are not working?  http://www.adobe.com/support/coldfusion/security.html
    For example... the article... Top Five ColdFusion Security Issues
    http://www.adobe.com/devnet/server_archive/articles/top5_cf_security_issues.html
    This is also true of the TechNotes
    Thanks.

    Hi,
    Thank you for letting us know. We are checking these.
    Regards,
    Anit Kumar

  • Hf801-00002 Breaks ColdFusion

    I have a ColdFusion 8.0.1 server with Cumulative Hot Fix 4 installed. I installed the hotfix for APSB11-04 yesterday and now any use of the cfNTauthenticate tag generates errors.
    I have a CFM that contains only the following code:
    <cfntauthenticate
        username="test"
        password="test"
        domain="test"
    />
    When I try to execute the CFM I get a "JRun Servlet Error" with a stack trace that starts like this:
    ROOT CAUSE:
    java.lang.NoClassDefFoundError: Could not initialize class coldfusion.security.NTAuthentication
         at coldfusion.tagext.security.NTAuthenticateTag.doStartTag(NTAuthenticateTag.java:161)
         at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:2661)
    I then created a separate CFM with the following code:
    <cfobject
        class = "coldfusion.security.NTAuthentication"
        type = "Java"
        name = "test"
        action = "create"
    />
    Which executes without generating any errors. If I remove hf801-00002.jar from {cf-root}/lib/updates and restart the ColdFusion service then the cfNTauthenticate example above will execute without any problem. The only other JAR in my {cf-root}/lib/updates folder is chf8010004.jar. Enabling or disabling the "Disable access to internal ColdFusion Java components" option in ColdFusion Administrator does not affect the situation. Nor does using the latest JRE versus the JRE that shipped with CF8.0.1.
    I have a custom tag that uses jrun.security.NTAuth to recreate cfNTauthenticate's functionality in place as a workaround at the moment, but I would like to know if there's anything I can do to resolve this issue.

    Some further notes. The very first time I try to run code with cfNTauthenticate after the CF service is restarted I get the following stack trace:
    ROOT CAUSE:
    java.lang.ExceptionInInitializerError
         at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
         at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
         at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
         at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
         at coldfusion.runtime.java.JavaProxy.CreateObject(JavaProxy.java:168)
         at coldfusion.runtime.java.JavaProxy.invoke(JavaProxy.java:75)
         at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2272)
    Caused by: java.security.AccessControlException: access denied (java.io.FilePermission C:\ColdFusion8\runtime\..\lib\cfwindowslogin.dll read)
         at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
         at java.security.AccessController.checkPermission(AccessController.java:546)
         at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
         at java.lang.SecurityManager.checkRead(SecurityManager.java:871)
         at java.io.File.exists(File.java:731)
         at coldfusion.bootstrap.BootstrapClassLoader.findLibrary(BootstrapClassLoader.java:165)
         at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1705)
         at java.lang.Runtime.loadLibrary0(Runtime.java:823)
         at java.lang.System.loadLibrary(System.java:1028)
         at coldfusion.security.NTAuthentication.<clinit>(NTAuthentication.java:147)
         ... 37 more
    After the first attempt, all future attempts generate the error given in my previous post.
    I went back into the ColdFusion Administrator and disabled sandbox security and restarted the service. This time my cfNTauthenticate tag ran fine without any problems on the server with the hf801-00002 hotfix.
    I then reenabled sandbox security and went into the Files/Dir tab and added a rule that allows read access to c:\coldfusion8\lib\cfwindowslogin.dll and restarted the CF service. My cfNTauthenticate code worked.
    So now my question is if I have sandbox security enabled, what rules do I need to add to keep ColdFusion working? Is there any documentation on that?
    In the past I've had to add rules for c:\coldfusion8\runtime\servers\coldfusion\server-inf\temp\- (where file uploads are temporarily stored) and C:\ColdFusion8\wwwroot\- and c:\coldfusion8\customtags\. I'm trying to keep the server as locked down as possible, which is why I'm trying to avoid a rule to just allow read access to everything in c:\coldfusion8\. Any suggestions would be appreciated.

  • I downloaded a document and now it is secured and I cannot edit it

    Every new adobe document that I download is secured I don't understand why?

    susanp1515 wrote:
    Yes they are opening secured, example I am a realtor I create a contract and save it when I go back to edit it now it doesn't allow me to make changes. But I've done it before, that's why I'm confused I think I just did an adobe update and then the problem started.
    Still not much info to go on but if I had to guess, it sounds like you may be using Adobe Acrobat (Pro or Standard) or some other pdf generating software to create the pdf and then trying to edit it using Adobe Acrobat Reader which basically cannot edit files.
    To be sure we would need more info...
    How exactly are you creating these files (describe your process)?
    What do you mean by it doesn't allow you to make changes? What kind of changes are you trying to make? What happens when you try and make them?
    What version of Adobe Acrobat or Adobe Acrobat Reader do you have?
    When you open the pdf, what software is being used to open it?

  • Flex 3 and ColdFusion MX 702

    I have seen a few posts on similar problems in the Flex 2
    forums, but unfortunately no solution that would help me!
    Everything is working perfectly if I run Flex 3 on the same
    server as Cf is installed but if I try to set up the Flex project
    on my workstation I only get "Invalid root. The WEB-INF/flex folder
    must contain either flex-config.xml or services-config.xml."!
    So, obviously there is something wrong in how I specify the
    web root and url. I am running the J2EE version of CF and the IIS
    instead of the built-in webserver. I have tried so many different
    settings, changing the location of the config file, switching to
    the cf webserver, verifying that I can browse to the same location
    and that the flash2gateway is correct...
    Does anyone know how I should configure this correctly?
    Hi, Johan

    Hi Eastweb,
    I presume you have Flex Builder Beta 3. I think you should
    choose CF with ColdFusion Flash Remoting on the first page of the
    wizard. Second page of the wizard you should select:
    - Deployed to J2EE server;
    - Web root - browse to IIS web root folder
    - uncheck ColdFusion WAR is located in Web root and browse to
    WAR folder of the deployed ColdFusion (for example
    C:\JRun4\servers\cfusion\cfusion-ear\cfusion-war\).
    This should do the trick.
    regards,
    Mihai

Maybe you are looking for