Red Hat NETSCAPE MANAGEMENT SYSTEM 4.5 Bedienungsanleitung PDF herunterladen (Seite 8)

Security

If you are hosting ColdFusion sites created from untrusted developers, a rogue developer may be able to

capture Web server passwords. The information is passed in the CGI.HTTP_AUTHORIZATION variable

and is decipherable by a well-known algorithm. This situation can be a security problem if you use basic

Web server authentication, you host multiple Web sites, and there are untrusted developers.

To prevent all browser clients from being able to view debug information by passing the MODE=DEBUG

query parameter (for example, http://www.allaire.com/xxx.cfm?mode=debug), add the IP address 127.0.0.1

to the Restrict debug output to selected IP addresses list on the Debugging page of the ColdFusion

Administrator. You should also include any additional IP addresses for which you wish to view debugging

information. [13983]

The SiteMinder service in the ColdFusion Advanced Security feature requires an IP address to work

properly. If you are not on a network, you may see errors in the Advanced Security feature, such as

"Security Policy Action Failed" messages. See Knowledge Base article #14378 for a workaround. [14665]

If the ColdFusion Advanced Security feature is configured to use a database, and the database server is

restarted, or the connection to it is lost, you need to restart the Advanced Security (SiteMinder) and

ColdFusion services. If you do not restart these services, ColdFusion will use cached security settings until

the timeout has expired, and then attempt to refresh the cache. This will result in silent security errors until

the Advanced Security services and ColdFusion have been stopped, then restarted. Note that you should

restart the Advanced Security services first, and then stop and start the ColdFusion services.

Data sources

You should not use the data source name "Registry" when creating an external data source for client

variables. A data store named "Registry" already exists for the option of storing client variables in the

registry.

In order to insert or update CLOBs where the text length is greater than 4K with CF 4.5.1 while going

against an Oracle database, you must use the Merant Oracle 8 ODBC driver version 3.6, available from

Merant Merant. The Merant driver is shipped with ColdFusion for Linux and Solaris but not for Windows

NT.

Searching

In the ColdFusion Administrator a limitation in the Verity implementation may cause problems if you repair

a Verity collection and then attempt another action such as a purge before the repair has completed

processing. In the event that a problem does occur, you should delete the affected collection, re-create it,

and then re-populate the collection with the original content. The safest approach is this: During a repair,

NO OTHER ACTION should be taken.

When creating a Verity collection, make sure the collection directory name contains no spaces.

Using brackets ([ ]) in the CRITERIA attribute of CFSEARCH causes an error in CFSEARCH. [7183]

Tags

CFEXECUTE captures program output from the child program's "standard output" file, but not from its

"standard error" file. Since many programs send error diagnostic output to "standard error," a program may

seem to have produced no output when it did, in fact, produce diagnostics.

Workarounds include:

1. Within the child program, redirect error messages and diagnostics to the standard output file.

2. Use a wrapper program or shell script that redirects the child program's standard output and

standard error streams to the wrapper's standard output stream. Then use CFEXECUTE to invoke

this wrapper. [12869]

In ColdFusion 4.5, the site-wide "Missing template" handler (selected via the Administrator) will not install

itself as a default MISSINGINCLUDE handler, which would handle missing template errors from

CFINCLUDE or CFMODULE tags. To install the site-wide template as a MISSINGINCLUDE handler,

include this tag in your Application.cfm:

Page 8 of 26Release Notes - ColdFusion Server 4.5.1

08/22/2000file://C:\TEMP\cfserver451_release_notes.htm

1 2 3 4 5 6 7 8 9 10 11 12 13 ... 25 26

Kommentare zu diesen Handbüchern

Keine Kommentare

Red Hat NETSCAPE MANAGEMENT SYSTEM 4.5 Bedienungsanleitung Seite 8

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Betriebssysteme Red Hat NETSCAPE MANAGEMENT SYSTEM 4.5