Question about host identifier definition

Hi,
I've created a webgate and define the "Preferred HTTP Host" as the hostname where the web app is deployed. It seems ok that the webgate will protect the URL containing the hostname. But after I've authenticated, when I change the hostname to the IP address directly in the same explorer and request the resource again, it will ask me to re-authenticate. In my expectation, I don't need to re-authenticate....
Is there anything wrong with my host identifiers defintion? I've already added the corresponding IP address into the host identifier list.
Please help to give me some advice, thanks.

Hi,
The host identifiers are OK, this is happening because the web server first sets the cookie for the servername, and does not accept it for the n.n.n.n name - effectively you are using different domains (from a cookie perspective), even though it is the same web server. To solve it, you could just put the server name in the Challenge Redirect parameter in the authentication scheme to
http://servername.mydomain.com
and then OAM will set the cookies as necessary, exactly the same as configuring OAM for multi-domain SSO.
Regards,
Colin

Similar Messages

  • Questions about  hosting and integration of jsp

    hi,
    I have been searching about jsp for a while and i need to ask some question which confuse me.
    First, I have been looking for hosting for jsp but i haven't yet found a useful one.
    And hosting is pretty expensive than php hosting especially in turkey. Do you suggest some international hosting which price is agreable. Also I couldnt find any commercial site (except ibm, java.sun) which is implemented in jsp, if you know some, give some instance.
    Php is much more widespread than jsp. but it still has some disadvantages of being opensource. but lately, I have read an article about sun has started to support php, According to this supprort, can php has an advantage on jsp.

    Dear dudushr,
    This is not at all a pbm.
    what u can do is,
    write ur servlet class and configure that in ur web.xml.(put servlet class in ur WEB-INF/classes dir)
    now in the action part of form tag call the url (just configured in web.xml) for this servlet.
    after executing the query and doing further process within the servlet ,use RequestDispatcher's forward method to pass this values to ur jsp.
    try it and let me know..
    cheers..
    kuttus
    .

  • Question about host and local machine and applet

    hello,
    I have a question. I'm writing an applet program that will write a specific file in its working directory in the host machine.
    1)How can i get the working directory of the applet?
    2)How should i specify the path for writing on a file in the applet directory?

    >
    Can an applet write a text file to its own path in the server(or in a folder in its own path)>No. Or at least, not without help from the server.

  • E-Commerce Gateway Question about Interface File Definition.

    Hello Gurus,
    Does anyone know if Oracle e-Commerce Gateway (11.5.10.2) deliver the Interface File Definition for Inbound Purchase Orders (850/ORDERS) - _'IN: Purchase Orders (850/ORDERS)'_ out of the box?
    I see Interface File Definition for OPM Purchase Order along with a bunch of other trx sets (like ASNI, INI, INO) but not Purchase Orders (850/ORDERS) in the instance that I am working... so just wanted to verify.
    Thanks
    Dave

    Following are some of the pros of using XML Gateway:
    1) XML is being accepted and more and more technologies are moving towards XML, so that "seems" to a future ready solution
    2) XML processing is real-time.
    3) Most of the maps for universally accepted standards are seeded in Oracle.
    4) You can use Oracle Supplier Network(Free service provided by Oracle) with your XML gateway to transmit/receive xml documents to a supplier who may or may not be accepting the format you are generating(e.g. if your PO is in OAG standard and your supplier is accepting cXML format, OSN takes care of translating your document)
    You might want to consider these points while deciding the technology.
    Nitin S. Darji

  • Question about hosting - Flex/Coldfusion

    I'm wanting to use Flex to display Coldfusion info.
    just went through the tutorial at http://www.adobe.com/devnet/flex/articles/fcf_getting_started_coldfusion_flex_02.html and I got the example to work on my local machine. I was also able to do the same with my own data. But the example uses remoting services and I don't know what my hosting providers have on their servers.
    I'm using CrystalTech.com, which is an Adobe partner. But they said they didn't offer Flash remoting on their shared servers.
    I'm not sure if Flash remoting is what I need to get Flash to access the cfc's.
    Can someone tell me if I need to switch hosts (which would be a real pain) and look for a host that has Flash remoting or if that is even what I need?
    Thanks,
    Richie

    A bit odd.. I haven't come across any shared hosting with Remoting disabled yet.
    Have you tried accessing the remoting gateway?
    Should be something like:
    http://yourdomain.com/flex2gateway/
    You normally get to see a blank page.
    If remoting is disabled, you should still be able to access Coldfusion CFC's as webservices.
    To achieve this, simply add "?wsdl" to the url of the cfc - without the quotes.
    Here's an example:
    http://muzakdeezign.com/services/be/pylos/site/NewsSelect.cfc?wsdl
    In Flex you access them using a WebService tag instead of a RemoteObject tag.

  • Basic questions about hosting

    hi everyone, i hope i am posting in the correct forum...
    i have just finished a website (designed with dreamweaver) and i am ready to upload it online. the website is very simple (html), has no flash or animations, only pictures and has a total 50MB worth of files.
    i am having many troubles deciding how to book a suitable hosting and monthly traffic for the website. I hear that 1GB monthly traffic limit might be enough. I don´t know how this exactly works but what i think is that if someone visits the website and checks every single picture, is that already 50MB traffic just from that one visit??
    plus, i am overload with options from different hosting providers and it´s very hard to know which are over priced and which are the most reliable ones. it´d be great to know from other people´s experience which are the best providers.

    Hi--
    I don´t know how this exactly works but what
    i think is that if someone visits the website and
    checks every single picture, is that already 50MB
    traffic just from that one visit??
    Yes, that's pretty much right. It might be somewhat less than 50MB, though. Some website elements, like your style sheet, might be cached by the visitor. In that case, they might only load once per visit, reducing the traffic counted against you.
    charlie

  • Security question about hosting multple websites at ~/Sites

    Hi All, I wish to host multiple websites from my server running Mac OS X Server 10.4. I just wanted to know if there are any security risks involved in having sites running from the path ~/Sites. ie /Users/username/Sites/ I am running the machine as a standalone server with port forwarding from my router. Other: Running PHP 4 and MySQL 4 aswell. Is this the wrong way to host sites? If so, do you have any suggestions for other paths that may be more secure? Would it be more secure to host them from the default location /Library/WebServer/Documents? I have FTP set up so that authenticated users see home directory only and have set up users home directories as /Users/username/Sites in the workgroup manager. Is there a better way to set this whole thing up? Am I screwing it from the start? Thanks in advance...

    If the user directories are just for hosting sites, the user's won't be using them to store their stuff with an expectations of privacy, there's no inherent insecurity doing it this way. If the users were using their home directories, then it may come as a shock that the read and browse permissions have to be turned on so that the web server can get to the Sites folder to serve pages.
    MySQL is a popular database. I would venture to say that most database insecurity is the fault of the DBA, not the database itself.
    PHP scripts are listed in the security ezines a lot. I don't know whether PHP is inherently insecure, so simple that people who really don't know how to program can program with it or other reasons.
    OSX server isn't an OS I'd trust exposed to the Internet. Apple's done things that make it at least very hard, if not impossible (I haven't really sat down and fought it) to lock it down well.
    Roger

  • Question about 'hosts: cluster' entry in /etc/nsswitch.conf

    Hi~
    my system have "hosts: cluster files dns" entry in /etc/nsswitch.conf.
    I know 'files' to see the '/etc/hosts'.
    I want to know that 'cluster' to see 'what file'.
    Thanks,

    'cluster' denotes internal lookups, i.e. no file on the file system. If I recall correctly, it allows the system to look up the cluster interconnect private addresses.
    Tim
    ---

  • OAM - Preferred HTTP Host vs Host Identifiers

    Hi all,
    I think I am missing something regarding Preferred HTTP Hosts and Host Identifiers. This is what the documentation says about them:
    "The Access System offers two methods for identifying Web servers that are hosting protected resources:
    * Preferred Host
    * Host Identifiers
    You can specify either a Preferred Host or a Host Identifier"
    However, regarding the Preferred HTTP Host, it also says it is a required field when configuring a WebGate and that the Preferred HTTP Host must be one of the entered in the Host Identifier List.
    So I guess that when one intends to use Host Identifiers, the preferred host identifier must be defined as well, but somehow it will be ignored and the Host Identifier will be used instead?
    Any help would be greatly appreciated.
    Thanks

    Regarding the 'required' field - this is a bug (maybe someone will come out of the wood work and disagree with me?) - what version of the product are you working with?
    The theory goes like this: Host Identifiers are the line between the real world network and the inner workings of the product. If you want OAM to deliver AAA services, then you have to successfully cross this line. You successfully cross this line by issuing a HTTP request with a host component that matches one of the values in a Host Identifier's Host Name Variations list (If you want to avoid OAM AAA Services, you deliberately avoid this matching). One thing to be clear about - Host Identifiers are not optional if you are protecting HTTP resources. They are required.
    Clearly, there is a security concern at play based on this thinking. What if you forget to add an addressable pattern to the variations list and someone walks around your security by IP address or localhost, for example? Preferred HTTP Host instructs the WebGate plugin to explicitly set the host component of every request to the value specified. Usually you intend this to match a value in the Host Name Variations list and your worries are gone.
    There are some web architectures using virtual hosting where you deliberately do not want to mutate all host values into the same string - that's why this field should not be required.
    The way to manage security risk when not using the Preferred HTTP Host is to combine the use of Host Name Variation values with the Deny On Not Protected flag on the WebGate. This way, the system will only allow traffic that you have specifically configured to be exposed.
    Hope that all makes sense and helps somewhat.
    Mark

  • Hello , I want to ask some question about ipads \  How powerful is the iPad?  How useful is it for reading books, newspaper or magazines or for surfing the web? Can you identify any shortcomings of the device?   please help me :(

    Hello ,
    I want to ask some question about ipads \
    How powerful is the iPad? 
    How useful is it for reading books, newspaper or magazines or for surfing the web?
    Can you identify any shortcomings of the device?  
    please help me

    it's less powerful than your average computer. THink of it like a netbook but with a better processor.
    It'll do fine for surfing (although if you browse a lot of flash based sites you will need to get a third party browser since safari doesn't accommodate it)
    You may do OK on reading books, papers or magazines, especially if they have apps, but the ipad's screen is backlit, so it doesn't work well outdoors and you may need to fiddle with the brightness so that you don't get eye strain (it's just like doing too much reading from a computer screen)
    I would say the biggest short comings are data transfer. Apple's preferred work flow is that everything is done via iTunes or the internet....well people dont' always have 100% reliable always on internet access so you can find yourself in a situation where you can't get things on/off the iPad.
    By and large, it's a good device for day to day stuff, but is not a computer replacement.

  • Another BW question about filter in the query definition

    Hi ,
    I have another question about filter in the query definition.
    <u>Question:</u>
    Which of the following objects can be filtered in the query definition?
    A. characteristic
    B. Key figure
    C. Structure
    D. Units
    E. Hierarchy
    My answer is A,B,D,E.
    The answer in the book is A,B,D
    Can anybody tell me which one is wrong?
    Thanks in advance,
    Liu Jia

    HI
    1.The answer could be A,B,D.you can not apply filters on hierarchies
    2.Whenever there is a change in Attribute data(like Location,Num etc...)that has to be reflected in all aggregates of the cube.Thsi can be done by running "ATTRIBUTE CHANGE RUN".
    sri

  • Few questions about apex + epg and cookie blocked by IE6

    Hi,
    I would like to ask a few questions about apex and epg.
    I have already installed and configured apex 3.2 on oracle 10g (on my localhost - computer name 'chen_rong', ip address -192.168.88.175 ), and enable anonymous access xdb http server.
    now,
    1. I can access 'http://chen_rong' , 'http://localhost' , 'http://192.168.88.175' without input username / password for realm 'XDB' in IE6;
    2. I can access 'http://localhost/apex/apex_admin' , 'http://192.168.88.175/apex/apex_admin' , and I can be redirected into apex administation page after input admin/<my apex admin password> for realm 'APEX' in IE6;
    3. I can access 'http://chen_rong/apex/apex_admin' in IE6, but after input admin/password , I can not be redirected into administation page, because the cookie was blocked by IE6.
    then, the first question is :
    Q1: What is the difference among 'http://chen_rong' , 'http://localhost' , 'http://192.168.88.175' ? I have already include site 'chen_rong' into my trusted stes! why the cookie was blocked by IE6. I have already tried firefox and google browser, both of them were ok for 'chen_rong', no cookie blocked from site 'chen_rong'!
    and,
    1. I have tried to use the script in attachment to test http authentication and also want to catch the cookie by utl_http .
    2. please review the script for me.
    3. I did:
    SQL> exec show_url('http://localhost/apex/apex_admin/','ADMIN','Passw0rd');
    HTTP response status code: 401
    HTTP response reason phrase: Unauthorized
    Please supplied the required Basic authentication username/password for realm XDB for the Web page.
    Web page http://localhost/apex/apex_admin/ is protected.
    MS-Author-Via: DAV
    DAV: 1,2,<http://www.oracle.com/xdb/webdav/props>
    Server: Oracle XML DB/Oracle Database
    WWW-Authenticate: Basic realm="XDB"
    Date: Tue, 04 Aug 2009 02:25:15 GMT
    Content-Type: text/html; charset=GBK
    Content-Length: 147
    ======================================
    PL/SQL procedure successfully completed
    4. I also did :
    SQL> exec show_url('http://localhost/apex/apex_admin/','ANONYMOUS','ANONYMOUS');
    HTTP response status code: 500
    HTTP response reason phrase: Internal Server Error
    Check if the Web site is up.
    PL/SQL procedure successfully completed
    SQL> exec show_url('http://localhost/apex/apex_admin/','SYSTEM','apexsite');
    HTTP response status code: 401
    HTTP response reason phrase: Unauthorized
    Please supplied the required Basic authentication username/password for realm APEX for the Web page.
    Web page http://localhost/apex/apex_admin/ is protected.
    Content-Type: text/html
    Content-Length: 147
    WWW-Authenticate: Basic realm="APEX"
    ======================================
    PL/SQL procedure successfully completed
    my second questions is :
    Q2: After I entered into realm 'XDB', I still need went into realm'APEX'. how could I change the script show_url to accomplish these two tasks and successfully get the cookie from site.
    the show_url script is as following:
    CREATE OR REPLACE PROCEDURE show_url
    (url IN VARCHAR2,
    username IN VARCHAR2 DEFAULT NULL,
    password IN VARCHAR2 DEFAULT NULL)
    AS
    req UTL_HTTP.REQ;
    resp UTL_HTTP.RESP;
    name VARCHAR2(256);
    value VARCHAR2(1024);
    data VARCHAR2(255);
    my_scheme VARCHAR2(256);
    my_realm VARCHAR2(256);
    my_proxy BOOLEAN;
    cookies UTL_HTTP.COOKIE_TABLE;
    secure VARCHAR2(1);
    BEGIN
    -- When going through a firewall, pass requests through this host.
    -- Specify sites inside the firewall that don't need the proxy host.
    -- UTL_HTTP.SET_PROXY('proxy.example.com', 'corp.example.com');
    -- Ask UTL_HTTP not to raise an exception for 4xx and 5xx status codes,
    -- rather than just returning the text of the error page.
    UTL_HTTP.SET_RESPONSE_ERROR_CHECK(FALSE);
    -- Begin retrieving this Web page.
    req := UTL_HTTP.BEGIN_REQUEST(url);
    -- Identify yourself.
    -- Some sites serve special pages for particular browsers.
    UTL_HTTP.SET_HEADER(req, 'User-Agent', 'Mozilla/4.0');
    -- Specify user ID and password for pages that require them.
    IF (username IS NOT NULL) THEN
    UTL_HTTP.SET_AUTHENTICATION(req, username, password, 'Basic', false);
    END IF;
    -- Start receiving the HTML text.
    resp := UTL_HTTP.GET_RESPONSE(req);
    -- Show status codes and reason phrase of response.
    DBMS_OUTPUT.PUT_LINE('HTTP response status code: ' || resp.status_code);
    DBMS_OUTPUT.PUT_LINE
    ('HTTP response reason phrase: ' || resp.reason_phrase);
    -- Look for client-side error and report it.
    IF (resp.status_code >= 400) AND (resp.status_code <= 499) THEN
    -- Detect whether page is password protected
    -- and you didn't supply the right authorization.
    IF (resp.status_code = UTL_HTTP.HTTP_UNAUTHORIZED) THEN
    UTL_HTTP.GET_AUTHENTICATION(resp, my_scheme, my_realm, my_proxy);
    IF (my_proxy) THEN
    DBMS_OUTPUT.PUT_LINE('Web proxy server is protected.');
    DBMS_OUTPUT.PUT('Please supply the required ' || my_scheme ||
    ' authentication username/password for realm ' || my_realm ||
    ' for the proxy server.');
    ELSE
    DBMS_OUTPUT.PUT_LINE('Please supplied the required ' || my_scheme ||
    ' authentication username/password for realm ' || my_realm ||
    ' for the Web page.');
    DBMS_OUTPUT.PUT_LINE('Web page ' || url || ' is protected.');
    END IF;
    ELSE
    DBMS_OUTPUT.PUT_LINE('Check the URL.');
    END IF;
    -- UTL_HTTP.END_RESPONSE(resp);
    -- RETURN;
    -- Look for server-side error and report it.
    ELSIF (resp.status_code >= 500) AND (resp.status_code <= 599) THEN
    DBMS_OUTPUT.PUT_LINE('Check if the Web site is up.');
    UTL_HTTP.END_RESPONSE(resp);
    RETURN;
    END IF;
    -- HTTP header lines contain information about cookies, character sets,
    -- and other data that client and server can use to customize each
    -- session.
    FOR i IN 1..UTL_HTTP.GET_HEADER_COUNT(resp) LOOP
    UTL_HTTP.GET_HEADER(resp, i, name, value);
    DBMS_OUTPUT.PUT_LINE(name || ': ' || value);
    END LOOP;
    -- Read lines until none are left and an exception is raised.
    --LOOP
    -- UTL_HTTP.READ_LINE(resp, value);
    -- DBMS_OUTPUT.PUT_LINE(value);
    --END LOOP;
    UTL_HTTP.GET_COOKIES(cookies);
    dbms_output.put_line('======================================');
    FOR i in 1..cookies.count LOOP
    IF (cookies(i).secure) THEN
    secure := 'Y';
    ELSE
    secure := 'N';
    END IF;
    -- INSERT INTO my_cookies
    -- VALUES (my_session_id, cookies(i).name, cookies(i).value,
    -- cookies(i).domain,
    -- cookies(i).expire, cookies(i).path, secure, cookies(i).version);
    dbms_output.put_line('site:'||url);
    dbms_output.put_line('cookies:');
    dbms_output.put_line('name:'||cookies(i).name);
    dbms_output.put_line('value:'||cookies(i).value);
    dbms_output.put_line('domain:'||cookies(i).domain);
    dbms_output.put_line('expire:'||cookies(i).expire);
    dbms_output.put_line('path:'||cookies(i).path);
    dbms_output.put_line('secure:'||secure);
    dbms_output.put_line('version:'||cookies(i).version);
    END LOOP;
    UTL_HTTP.END_RESPONSE(resp);
    EXCEPTION
    WHEN UTL_HTTP.END_OF_BODY THEN
    UTL_HTTP.END_RESPONSE(resp);
    END;
    /

    I use oracle database enterprise edtion 10.2.0.3. I have already figured out the epg on 10.2.0.3 to support apex 3.2.
    And as I described above, the apex site works fine for ip address , and localhost. but the cookie will be blocked by IE6, if I want to access the site by 'http://computername:port/apex/apex_admin'. This problem does not occured in firefox and google browser. Could someone give me answer?

  • Some basic questions about rmi registry  context  "bind" and "lookup"

    We have more processing to do than can be accomplished with a single computer. To solve the problem I've implemented a distributed computing solution using RMI. (The first time I saw RMI was about 2 weeks ago, so please bear with me!)
    The implementation is a proof of concept not a fully fleshed out system. I have one "Workunit Distributor" computer and any number of "Data Processor" computers all on the same lan segment. "Workunit Distributor" and "Data Processor" computers are both RMI client and server to each other. The "Data Processor" computers are given the ip address and name of the "Data Distributor" on the commandline when they start. They communicate their willingness to receive and process a workunit to the ""Workunit Distributor" via a RMI call. Work units are sent to available "DataProcessors" and results are eventually returned to the "WorkunitDistributor" (minutes or hours later). The model program works quite well, and appears to be capable of doing the processing we need to get done.
    But now that it seems viable, I've been asked to make it a little more scalable, flexible and self configuring. In particular, instead of one "Workunit Distributor", any number of "Workunit Distributors" should be allowed to show up or disappear from the lan at any time and the system should continue to function. I've worked out a good scheme for how this can be done, but I have a couple of questions about the RMI registry (registries?). I'm trying to keep from implementing some functionality that may already be available as a library or subsystem.
    With my current model design, each computer binds to its own registry with a unique name. For instance:
    CRDataProcessorImpl crdpi = new CRDataProcessorImpl(svr);
    Context crDataProcessingContext = new InitialContext();
    crDataProcessingContext.bind("rmi:"+hostName, crdpi);
    Currently the "Data Processors" get the info they need for a Context lookup() of the one and only "Workunit Distributor" from the commandline. And the info the "Workunit Distributor" needs to do a Context lookup() of a "DataProcessor" is passed to it from each "DataProcessor" via a RMI call.
    But in the newer (yet to be implemented) scheme where any and all "Workunit Distributors" show up and disappear whenever they feel like, the naming bootstrapping scheme described above won't work.
    I can imagine a few ways of solving this problem. For instance, having "Workunit Distributors" multicast their contact information on the lan and have a worker thread on each "Data Processor" keep track of the naming information that was multicast. Another alternative (more organized, but more complex) might be to have a dedicated host with a "well known" address and port that "Workunit Distributors" and "Data Processors" could all go to, to register or look up at an application level. Sort of a "domain name service" for RMI. But both these schemes look like a lot of work to implement , debug and maintain.
    The BEST thing would be if there was one plain vanilla RMI registry that was usable by all RMI enabled computers instead of having each computer have its own local name registry. In volume 2 of the Core Java2 book it says that every registry must be local. I'm only hoping there's been progress since the book was published and now a central rmi registry is available.
    If you have any ideas about this I'd like to hear what you know.
    Thanks in advance for any advice.
    Lenny Wintfeld
    ps - I don't believe web services, as full featured as it is, is a useful alternative. I'm moving 100's (in the future possibly 1000's) of megabytes back an forth for processing.

    The local bind/rebind/unbind restriction is still there and it will always be there.
    I would look at
    (a) RMI/IIOP, where you use COSNaming as a registry, which doesn't have that registriction, and which also has location-independent object identifiers
    (b) Jini.

  • Question about PageMaker files

    Can my old Mac Pagemaker files be open and used in the newer Mac with OS 10.6.8 which my Granddaughter has given me?  If so, with all InDesign versions?  I'm an old **** and this is the first time I'm trying to use a Discussion Group.  How do I know when there is an answer?  Do I have to keep this website open, or check back sometime, or will I receive an Email or phone call?  Please let me know by means other that this site, to get started with.  My Email is [removed by forum host] Thank you,  Gerda May
    Message was edited by: Peter Spier

    Dear Peter (if I be so personal).  First, thank you for deleting my Email
    address on the post and saving me a lot of spam.  Further, you were most
    gracious in sending more specifics in regard to the answer of my question about
    using PM files in InDesign.
    However, I am trying hard to understand your instructions to unembed "links" and
    bring them up to date.  However, I have no idea of what links are, are they
    something I would have intentionally done or are they automatic, and something
    of which I have no control over?  How do I locate them?  Are these procedures
    also necessity for using my old Photoshop 6 files?
    I only use 2 Programs: PageMaker 6.5 and Photoshop 6.  I have inherited a newer
    Mac with OS 10.6.8 which has only the basic Mac programs in it.  As you can
    guess, I need to identify which are the proper newer programs to obtain for it,
    with the least bit of effort and understanding.   
    I use PageMaker to write letters, and compose stories for printing in a Club
    magazine.  I also resurrect previous stories, that I've stored through the
    years.
    In Photoshop, I fix up new and old pictures for inclusion in stories and also
    resurrect previous photos I've stored on an external Hard Drive, or placed on a
    CD.
    If you would be so kind to steer me in the right direction, I will be most
    appreciative.  Trying to understand computer things is hard for me, and often
    times unsuccessful.  Please just smile and don't laugh, I'll bet you can't take
    shorthand or bake Dutch cookies, either!  Looking forward to some instructions,
    if you have the time, with many regards, Gerda May.

  • Getting Started with CFBuilder - A Question About Project Settings

    Hello All,
    I'm just getting my feet wet with CFBuilder and giving it a spin after over a decade's worth of experience with Dreamweaver and I have a question about setting up my work environment.
    First of all, I have two computers that I mainly work from.  My home desktop computer, and a laptop for when I'm on the road.  I keep all of my web site project files syncronized between the two computers using Dropbox.
    I've noticed that when I create a new project in CFBuilder it stores a few files in my project root like ".project" and "settings.xml".  It looks like "settings.xml" stores information about which CFBuilder web server should be used for the project.  Unfortunately this messes things up for me a bit because on my desktop a web site project url might be:  http://desktop/myProject/ and on my laptop the project url could be http://laptop/myProject.
    The reason this isn't a problem in Dreamweaver is because dreamwevaer stores its configuration/preferences outside of my project folders so I can essentially define any testing server I want for both the desktop and laptop.
    Is there a way to configure CFBuilder to store project settings outside of the project folder?  Or does anyone have a suggestion for someone like me who syncronizes their project files from their laptop to their desktop?
    Thanks in advance for helping out a CFBuilder noob.

    I would recommend using a distributed version control system (DVCS) with a hosted service, such as using Git/Mercurial and Github/BitBucket/UnFuddle.  With Git, you can use a .ignore file to specify files/folders that you want to exclude from being stored in version control (I also exclude my CFBuilder project files from my repositories).  You would then sync your local Git repositories with your service of choice, and they would be accessible from any machine. 
    There are many advantages of using Git and a hosted service over just Dropbox:
    Each computer has a complete copy of the code repository, including all code changes over the history of your project.
    You store code modifications in "commits", or small entries in the DVCS.
    Commits can contain user-defined descriptions that help you identify what you did at each step of your development process
    You can roll back commits if you break something in your code.
    You can create "branches" of your code when you want to work on a specific feature of your application, and that branch is kept in isolation from other branches until you are ready to merge it back into the main production code branch.
    You can have public or private hosted repositories on the various services, enabling you to work with a team or participate in open-source development.
    There are Eclipse plugins available for CFBuilder that provide GUI tools for working with Git and hosted repositories (unless you are comfortable with using the command-line to do all your Git interactions).
    I don't think you can separate the project settings from the project in CFBuilder.

Maybe you are looking for