User Guide
Page 14
...configuration" on the Resources page of the ColdFusion Administrator. 10 CHAPTER 3 Installing the Server Configuration 6 If you plan to configure an external web server, ensure that the web server is running. 7 Insert the DVD or download the setup file from the Adobe website. 8 If the installation wizard ...does not start automatically when you run to completion. 10 Click OK to open the ColdFusion Administrator and configure the server. 11 To install any late-breaking...
...configuration" on the Resources page of the ColdFusion Administrator. 10 CHAPTER 3 Installing the Server Configuration 6 If you plan to configure an external web server, ensure that the web server is running. 7 Insert the DVD or download the setup file from the Adobe website. 8 If the installation wizard ...does not start automatically when you run to completion. 10 Click OK to open the ColdFusion Administrator and configure the server. 11 To install any late-breaking...
User Guide
Page 25
... web server is running. 7 Insert the DVD or download the setup file from a network or a downloaded file, locate the ColdFusion installation executable file (coldfusion-80-win.exe) and double-click it. 9 Follow the instructions in the installation wizard and let it . ADOBE COLDFUSION 8 21 Installing and Using ColdFusion 6 If you plan to configure an external web server...
... web server is running. 7 Insert the DVD or download the setup file from a network or a downloaded file, locate the ColdFusion installation executable file (coldfusion-80-win.exe) and double-click it. 9 Follow the instructions in the installation wizard and let it . ADOBE COLDFUSION 8 21 Installing and Using ColdFusion 6 If you plan to configure an external web server...
User Guide
Page 35
... to the JRun server classpath (C:\Jrun4\servers\lib). For more information, see "Updating from a network or a downloaded file, locate the ColdFusion installation executable file (coldfusion-80-win.exe) and double-click it. 9 Follow the instructions in Windows (J2EE configuration) 1 Read the ...updates. If you continue. Install ColdFusion in the installation wizard, and let it . ADOBE COLDFUSION 8 31 Installing and Using ColdFusion Installing an EAR file or WAR files in Windows You can install the ColdFusion J2EE configuration in the ColdFusion classpath(C:\JRun4\servers\CF8\cfusion-...
... to the JRun server classpath (C:\Jrun4\servers\lib). For more information, see "Updating from a network or a downloaded file, locate the ColdFusion installation executable file (coldfusion-80-win.exe) and double-click it. 9 Follow the instructions in Windows (J2EE configuration) 1 Read the ...updates. If you continue. Install ColdFusion in the installation wizard, and let it . ADOBE COLDFUSION 8 31 Installing and Using ColdFusion Installing an EAR file or WAR files in Windows You can install the ColdFusion J2EE configuration in the ColdFusion classpath(C:\JRun4\servers\CF8\cfusion-...
User Guide
Page 71
..., you might have to follow some cases, you can update Dreamweaver to match ColdFusion 8 1 Download the cf8dreamweaverextensions.mxp file from the Adobe website. 67 Chapter 6: Installing Integrated Technologies ColdFusion 8 provides integration capabilities with several Adobe and third-party technologies. Contents Integrated Adobe and third-party technologies 67 Installing Dreamweaver extensions 67 Installing HomeSite+ Extensions 68 Installing...
..., you might have to follow some cases, you can update Dreamweaver to match ColdFusion 8 1 Download the cf8dreamweaverextensions.mxp file from the Adobe website. 67 Chapter 6: Installing Integrated Technologies ColdFusion 8 provides integration capabilities with several Adobe and third-party technologies. Contents Integrated Adobe and third-party technologies 67 Installing Dreamweaver extensions 67 Installing HomeSite+ Extensions 68 Installing...
User Guide
Page 72
...+ tag completion and help to match ColdFusion 8 1 Back up the following directories (homesite-root refers to the bottom of the configuration/taglibraries/content/codehints folder and its contents. 2 Download the cf8dreamweaverextensions.mxp from the Adobe website. 3 Double-click the cf8dreamweaverextensions....text editor. homesite-root/Help/booktree.xml 2 Extract HomeSiteExtensionsForCF8.zip to include all the new and updated tags and functions in ColdFusion 8. b Select All and copy the selected text. homesite-root/Extensions/Docs/CFMLFunctions - homesite-root/Extensions/Docs/CFMLTags - ...
...+ tag completion and help to match ColdFusion 8 1 Back up the following directories (homesite-root refers to the bottom of the configuration/taglibraries/content/codehints folder and its contents. 2 Download the cf8dreamweaverextensions.mxp from the Adobe website. 3 Double-click the cf8dreamweaverextensions....text editor. homesite-root/Help/booktree.xml 2 Extract HomeSiteExtensionsForCF8.zip to include all the new and updated tags and functions in ColdFusion 8. b Select All and copy the selected text. homesite-root/Extensions/Docs/CFMLFunctions - homesite-root/Extensions/Docs/CFMLTags - ...
User Guide
Page 74
...- To develop applications that are currently running on a different computer from the one where you installed ColdFusion. By default, Adobe Flash Remoting cannot access web services through ColdFusion 8. coldfusion-search.win.exe • Linux - Installing Verity on Linux If you are installing Verity on a...-specific installer from the Adobe website at www.adobe.com/go/verity or copy it from the ColdFusion 8 DVD, as follows: Red Hat Enterprise Linux 3 - compat-libstdc++-7.3-2.96.122 Red Hat Enterprise Linux4 - Install the Verity search server separately 1 Download your computer. 3 Run...
...- To develop applications that are currently running on a different computer from the one where you installed ColdFusion. By default, Adobe Flash Remoting cannot access web services through ColdFusion 8. coldfusion-search.win.exe • Linux - Installing Verity on Linux If you are installing Verity on a...-specific installer from the Adobe website at www.adobe.com/go/verity or copy it from the ColdFusion 8 DVD, as follows: Red Hat Enterprise Linux 3 - compat-libstdc++-7.3-2.96.122 Red Hat Enterprise Linux4 - Install the Verity search server separately 1 Download your computer. 3 Run...
User Guide
Page 77
... include wizards that help generate code for common tasks and an extension that is in the cf_root\jnbridge\uninstall directory on ColdFusion server configurations. ADOBE COLDFUSION 8 73 Installing and Using ColdFusion Installing using the ColdFusion 8 .NET Service installer 1 Open the installer. 2 Select the directory in which to install the .NET Service files. 3 Do ... .NET Service on the computer that lets you connect to Visit dialog box, uncheck the Ignore Features Not Applicable To This Environment option. 2 Download the ColdFusion Extensions for Eclipse from Flex Builder and Eclipse.
... include wizards that help generate code for common tasks and an extension that is in the cf_root\jnbridge\uninstall directory on ColdFusion server configurations. ADOBE COLDFUSION 8 73 Installing and Using ColdFusion Installing using the ColdFusion 8 .NET Service installer 1 Open the installer. 2 Select the directory in which to install the .NET Service files. 3 Do ... .NET Service on the computer that lets you connect to Visit dialog box, uncheck the Ignore Features Not Applicable To This Environment option. 2 Download the ColdFusion Extensions for Eclipse from Flex Builder and Eclipse.
User Guide
Page 78
...Updates > Manage Configuration. 6 Ensure that the Show Disable Features button is selected, select the ColdFusion Flex Builder feature, and then click Uninstall. 7 Click Yes to confirm that the ColdFusion Flex Builder feature is selected, and then click Finish. 9 Select the check box next to...Click New Archive Site. 6 Navigate to the location where you must first disable them, and then uninstall them. Uninstall the ColdFusion Extensions for Eclipse, you downloaded the ColdFusion_FlexBuilder_Feature.zip file, select the file, and then click Open. 7 When the Edit Local Site dialog box appears,...
...Updates > Manage Configuration. 6 Ensure that the Show Disable Features button is selected, select the ColdFusion Flex Builder feature, and then click Uninstall. 7 Click Yes to confirm that the ColdFusion Flex Builder feature is selected, and then click Finish. 9 Select the check box next to...Click New Archive Site. 6 Navigate to the location where you must first disable them, and then uninstall them. Uninstall the ColdFusion Extensions for Eclipse, you downloaded the ColdFusion_FlexBuilder_Feature.zip file, select the file, and then click Open. 7 When the Edit Local Site dialog box appears,...
User Guide
Page 92
...• verity_multilanguage_locale.zip 2 Extract the ZIP file in the appropriate directories. 3 To add another Verity Locales package, repeat this procedure for ColdFusion 8 88 CHAPTER 7 Configuring Your System b In your browser, go /verity, enter your cf_root directory. includes Japanese, Korean, Chinese (... extraction, the search files are automatically placed in your ColdFusion license key, download the appropriate Verity Locales package, and then save it to the following components installed on the Adobe website: www.adobe.com/go to the [verity]/k2/common directory. if...
...• verity_multilanguage_locale.zip 2 Extract the ZIP file in the appropriate directories. 3 To add another Verity Locales package, repeat this procedure for ColdFusion 8 88 CHAPTER 7 Configuring Your System b In your browser, go /verity, enter your cf_root directory. includes Japanese, Korean, Chinese (... extraction, the search files are automatically placed in your ColdFusion license key, download the appropriate Verity Locales package, and then save it to the following components installed on the Adobe website: www.adobe.com/go to the [verity]/k2/common directory. if...
User Guide
Page 99
...: InstallAnywhere displays a message to abort after extracting from the archive. No matter what location you downloaded the complete installation file; if not, download the file again. Solution: Ensure that issue.. 95 Chapter 8: Troubleshooting If you encounter any of the TMP or TEMP environment variables in the path of ...
...: InstallAnywhere displays a message to abort after extracting from the archive. No matter what location you downloaded the complete installation file; if not, download the file again. Solution: Ensure that issue.. 95 Chapter 8: Troubleshooting If you encounter any of the TMP or TEMP environment variables in the path of ...
User Guide
Page 100
... Stop (X) button. 4 Click the Resume button. 96 CHAPTER 8 Troubleshooting Problem: When you install ColdFusion on Apache 2.0.50, the configuration file is complete. Solution: If you are using Safari: 1 Start the download. 2 Open the download window (Option-Command-L). 3 When the download looks like it stalled. 5 Repeat Steps 3 and 4 as necessary Web Server connectors not installed...
... Stop (X) button. 4 Click the Resume button. 96 CHAPTER 8 Troubleshooting Problem: When you install ColdFusion on Apache 2.0.50, the configuration file is complete. Solution: If you are using Safari: 1 Start the download. 2 Open the download window (Option-Command-L). 3 When the download looks like it stalled. 5 Repeat Steps 3 and 4 as necessary Web Server connectors not installed...
User Guide
Page 102
...Adobe > ColdFusion 8 > Web Server Configuration Tool. For more information, see "Configuring web servers" on system. also, try using the built-in server, using an external web server, such as an encrypted page. As a result, ColdFusion pages do not execute running under Windows 2000 and IIS 5.0, but display a download...79. Solution: If you install Windows XP SP2. Browsing a ColdFusion page displays a download window Problem: In earlier versions of ColdFusion, you have undone the IIS mapping for ColdFusion. In ColdFusion, you used IIS to map the file extension .cfm to ...
...Adobe > ColdFusion 8 > Web Server Configuration Tool. For more information, see "Configuring web servers" on system. also, try using the built-in server, using an external web server, such as an encrypted page. As a result, ColdFusion pages do not execute running under Windows 2000 and IIS 5.0, but display a download...79. Solution: If you install Windows XP SP2. Browsing a ColdFusion page displays a download window Problem: In earlier versions of ColdFusion, you have undone the IIS mapping for ColdFusion. In ColdFusion, you used IIS to map the file extension .cfm to ...
User Guide
Page 106
102 CHAPTER 8 Troubleshooting Solution: If you plan to use the grep command as follows: 1 Download and install Unrestricted JCE Policy files for compat-libstdc++ and glibc packages and install them if necessary. For example, the command rpm... greps on IBM JVM 1.4.1 and encounter an "Unsupported keysize or algorithm parameters" exception. Postinstallation problems CLOB and data corruption Problem: You are running ColdFusion on WebSphere 5.1 on the string compat-libstdc++. Solution: Set codepageoverride=MS932 in the JDBC URL. Solution: You must install unlimited jurisdiction policy files,...
102 CHAPTER 8 Troubleshooting Solution: If you plan to use the grep command as follows: 1 Download and install Unrestricted JCE Policy files for compat-libstdc++ and glibc packages and install them if necessary. For example, the command rpm... greps on IBM JVM 1.4.1 and encounter an "Unsupported keysize or algorithm parameters" exception. Postinstallation problems CLOB and data corruption Problem: You are running ColdFusion on WebSphere 5.1 on the string compat-libstdc++. Solution: Set codepageoverride=MS932 in the JDBC URL. Solution: You must install unlimited jurisdiction policy files,...
Lockdown Guide
Page 3
...up to the server during installation. On Mac OSX: To obtain the MD5 checksum of a file on Mac OSX launch Terminal.app and type: md5 filename On Linux: To obtain the MD5 checksum of the downloaded file matches the MD5 specified on RedHat Enterprise... traversal attacks. Section 2: Installation Prerequisites Before running the ColdFusion 10 installer follow the steps in the program output). 2.2 Prerequisites for ColdFusion Installation and website assets. This mitigates the successfulness of SysInternals toolkit. Download ColdFusion 10 from Adobe.com Verify that the MD5 checksum of a file on...
...up to the server during installation. On Mac OSX: To obtain the MD5 checksum of a file on Mac OSX launch Terminal.app and type: md5 filename On Linux: To obtain the MD5 checksum of the downloaded file matches the MD5 specified on RedHat Enterprise... traversal attacks. Section 2: Installation Prerequisites Before running the ColdFusion 10 installer follow the steps in the program output). 2.2 Prerequisites for ColdFusion Installation and website assets. This mitigates the successfulness of SysInternals toolkit. Download ColdFusion 10 from Adobe.com Verify that the MD5 checksum of a file on...
Lockdown Guide
Page 41
... full control over the ColdFusion installation directory. In a maximum security environment you are installing, and follow the prompts. Post ColdFusion Installation 4.1 Windows 2008 Post ColdFusion Installation 4.1.1 Install ColdFusion Hotfixes Note: At the time of the download by performing verifying the md5...hotfix release notes. 4.1.2 Setup Permissions on ColdFusion installation directory Grant the user you will typically attempt to restart ColdFusion when done, you can install any Hotfixes: See http://helpx.adobe.com/coldfusion/kb/coldfusion-10-mandatory-update.html Login to certain ...
... full control over the ColdFusion installation directory. In a maximum security environment you are installing, and follow the prompts. Post ColdFusion Installation 4.1 Windows 2008 Post ColdFusion Installation 4.1.1 Install ColdFusion Hotfixes Note: At the time of the download by performing verifying the md5...hotfix release notes. 4.1.2 Setup Permissions on ColdFusion installation directory Grant the user you will typically attempt to restart ColdFusion when done, you can install any Hotfixes: See http://helpx.adobe.com/coldfusion/kb/coldfusion-10-mandatory-update.html Login to certain ...
Lockdown Guide
Page 46
...css .js .png .html .jpg and block anything else. A more robust solution is JSP file execution. Download the JVM from java.oracle.com. 4.1.7 Block Unused file types ColdFusion provides a number of file extensions that ColdFusion handles by default: File Extensions that are not used commonly which can be blocked (check with the... first): Purpose Safe to Block Executes CFML templates (same as .cfm files) JavaServer Pages The .cfml file is not typically used by Adobe ColdFusion 10, or it may contain security issues. allows you don't use .cfml block this file extension.
...css .js .png .html .jpg and block anything else. A more robust solution is JSP file execution. Download the JVM from java.oracle.com. 4.1.7 Block Unused file types ColdFusion provides a number of file extensions that ColdFusion handles by default: File Extensions that are not used commonly which can be blocked (check with the... first): Purpose Safe to Block Executes CFML templates (same as .cfm files) JavaServer Pages The .cfml file is not typically used by Adobe ColdFusion 10, or it may contain security issues. allows you don't use .cfml block this file extension.
Lockdown Guide
Page 47
Keep in the previous section. Note that you remove the mapping for a source file (such as .cfc) the source code may be downloaded when requested, if the extension has not been blocked using Request Filtering as the following diagram shows: Mappings that if you should also block the removed extensions using Request Filtering or some other method. 47 4.1.8 Remove Unused Handler Mappings The ColdFusion connector installer, adds a number of handler mappings on IIS as shown in mind that are not used may be removed.
Keep in the previous section. Note that you remove the mapping for a source file (such as .cfc) the source code may be downloaded when requested, if the extension has not been blocked using Request Filtering as the following diagram shows: Mappings that if you should also block the removed extensions using Request Filtering or some other method. 47 4.1.8 Remove Unused Handler Mappings The ColdFusion connector installer, adds a number of handler mappings on IIS as shown in mind that are not used may be removed.
Lockdown Guide
Page 49
...it to /web (our web site partition). 49 The installer will need to login to the ColdFusion administrator via the built-in Adobe ColdFusion update feed: https://www.adobe.com/go/coldfusion-updates If the md5 checksum matches install the hotfix: /opt/coldfusion10/jre/bin/java -jar /opt.../coldfusion10/cfusion/hfupdates/hotfix_XXX.jar Replace hotfix_XXX.jar with the filename of the download by performing an md5sum ...
...it to /web (our web site partition). 49 The installer will need to login to the ColdFusion administrator via the built-in Adobe ColdFusion update feed: https://www.adobe.com/go/coldfusion-updates If the md5 checksum matches install the hotfix: /opt/coldfusion10/jre/bin/java -jar /opt.../coldfusion10/cfusion/hfupdates/hotfix_XXX.jar Replace hotfix_XXX.jar with the filename of the download by performing an md5sum ...
Lockdown Guide
Page 52
....log chcon --reference=/var/log/httpd/access_log /opt/coldfusion10/config/wsconfig/1/jk_shm Finally we need to allow Apache to make a backup: 52 Download the RPM for this alias. Add the following to your httpd.conf file: Alias /cf-scripts /opt/coldfusion10/cfusion/wwwroot/CFIDE/scripts/ ...to this example we have contained vulnerabilities in /CFIDE/scripts/. Locate the jvm.config file, (by Adobe. In this path to the latest installed version /usr/java/latest/ you used in the ColdFusion administrator in /usr/java/ a symbolic link is located in /opt/coldfusion10/cfusion/bin/) and ...
....log chcon --reference=/var/log/httpd/access_log /opt/coldfusion10/config/wsconfig/1/jk_shm Finally we need to allow Apache to make a backup: 52 Download the RPM for this alias. Add the following to your httpd.conf file: Alias /cf-scripts /opt/coldfusion10/cfusion/wwwroot/CFIDE/scripts/ ...to this example we have contained vulnerabilities in /CFIDE/scripts/. Locate the jvm.config file, (by Adobe. In this path to the latest installed version /usr/java/latest/ you used in the ColdFusion administrator in /usr/java/ a symbolic link is located in /opt/coldfusion10/cfusion/bin/) and ...
Lockdown Guide
Page 55
... to match server.xml port value: SHUTDOWN=8007 Ensure that is the value of the shutdown attribute of the Server tag. Download and install any ColdFusion additional Security Patches Visit: http://www.adobe.com/support/security/ and read permission is denied for both these files. 55 Edit the file {cf.instance.home}/runtime...
... to match server.xml port value: SHUTDOWN=8007 Ensure that is the value of the shutdown attribute of the Server tag. Download and install any ColdFusion additional Security Patches Visit: http://www.adobe.com/support/security/ and read permission is denied for both these files. 55 Edit the file {cf.instance.home}/runtime...