ABOUT THIS BOOK Administering ColdFusion MX is intended for anyone who needs to configure and manage their ColdFusion development environment. Contents Developer resources ....................vi About Macromedia ColdFusion MX documentation..........vii Getting answers ....................viii Contacting Macromedia ..................viii...
Developer resources Macromedia, Inc. is committed to setting the standard for customer support in developer education, documentation, technical support, and professional services. The Macromedia website is designed to give you quick access to the entire range of online resources. The following table shows the locations of these resources: Resource Description Macromedia...
The print and online versions are organized to let you quickly locate the information that you need. The ColdFusion online documentation is provided in HTML and Adobe Acrobat formats. Printed and online documentation set The ColdFusion documentation set consists of the following titles:...
Viewing online documentation All ColdFusion documentation is available online in HTML and Adobe Acrobat Portable Document Format (PDF) files. To view the HTML documentation, open the following URL on the web server running ColdFusion: http://web_root/cfdocs/dochome.htm. ColdFusion documentation in Acrobat format is available on the ColdFusion product CD-ROM.
CHAPTER 1 Administering ColdFusion This chapter presents an overview of the ColdFusion Administrator and how you can use it to manage your development environment. For procedures, see the Administrator’s online Help. Contents About the ColdFusion Administrator ..............2 Accessing user assistance ..................2 Administrator layout....................
About the ColdFusion Administrator The ColdFusion Administrator provides a browser-based interface for managing your ColdFusion environment. You can configure many settings to provide optimal levels of security and functionality. The available options are based on your edition of ColdFusion: Standard, Professional, or Enterprise. The default location for the ColdFusion Administrator login page is: http://servername/cfide/Administrator/index.cfm In the previous URL, servername is the fully qualified domain name of your web server.
Administrator layout The home page of the ColdFusion Administrator includes links to Documentation, the Macromedia Servers TechNotes Knowledge Base, Release Notes, Version Information, online Help, and Code Examples: The tasks that you perform in the ColdFusion Administrator are grouped into the following sections.
For more information about each section, see Chapter 2, “Basic ColdFusion MX Administration” on page Server Settings section The Server Settings section contains the following areas: Manage the number of simultaneous requests, request timeouts, Settings whitespace, and handlers. Manage caching options for memory, database connection time, the Caching number of cached queries, and using a trusted template cache.
Debugging & Logging section The Debugging & Logging section contains the following pages: Enable and configure information to help you diagnose Debugging Settings ColdFusion page failures. You can return information on items such as template stack, database activity, and variable values. Control which IP addresses receive debug messages.
Initial administration tasks Immediately after installing ColdFusion MX, you might have to perform some or all of the administrative tasks described in the following table: Task Description Establish ColdFusion applications require data source connections to query and database write to databases. To create, verify, edit, and delete database connections connections, use the Data Sources pages in the Administrator.
Server Settings section The Server Settings section lets you manage client and memory variables, mappings, charting, and archiving. You also configure mail and Java settings in this section. Settings page The Settings page of the ColdFusion Administrator contains configuration options that you can set or enable to manage ColdFusion MX.
Setting Description Trusted cache Enable this option if you want ColdFusion MX to use cached templates without checking whether they changed. For sites that are not updated frequently, using this option minimizes file system overhead. Limit the maximum Enable this option by entering a value to limit the maximum number number of cached of cached queries that the server maintains.
Page 19
The following table compares these storage options: Storage type Advantages Disadvantages Data source Can use existing data Requires database transaction to source read/write variables Portable: not tied to the More complex to implement host system or operating system Simple implementation Users can configure browsers to Browser cookies disallow cookies...
Creating client variable tables Use the following sample ColdFusion page as a model for creating client variable database tables in your own database. However, keep in mind that not all databases support the same column data type names. For the proper data type, see your database documentation.
You can specify maximum and default timeout values for session and application variables. Unless you define a timeout value in Application.cfm, application variables expire in two days. Session variables expire when user sessions end. To change these behaviors, enter new default and maximum timeout values on the Memory Variables page of the Administrator.
Page 22
Mail Connection Settings area Select preferences for handling mail logs, as described in the following table: Setting Description Mail Server Lets you enter a valid mail server for sending dynamic SMTP mail messages in the text box. You can enter an Internet address, such as mail.company.com or the IP address of the mail server, such as 127.0.0.1.
Charting Settings page The ColdFusion charting and graphing engine lets you produce highly customizable business graphics, in a variety of formats, using the tag. You use the Charting cfchart page in the Administrator to control characteristics of the engine. The following table describes the caching and thread settings for the ColdFusion charting and graphing engine: Setting Description...
Archives and Deployment page The Archives and Deployment page includes tools that let you archive and deploy ColdFusion applications, configuration settings, data source information, and other types of information to back up your files quickly and easily. The complete list of archivable information includes the following: Name and file location Server settings...
Data & Services section The Data & Services section of the Administrator is the interface between you, ColdFusion MX, data sources, and Verity search and indexing features. The following table describes some common tasks that you can perform in the Data & Services section of the Administrator: Task Description...
You use the buttons along the bottom of the Connected Verity Collections table to perform the following actions: Action Description Index Analyzes the files in a collection and assembles metadata and pointers to the files. Repair Re-indexes a collection to fix broken links and update indexes. Optimize Reclaims space left by deleted and changed files by consolidating collection indexes for faster searching.
Debugging & Logging section You use the Debugging Settings and Debugging IPs pages of the Administrator to configure ColdFusion MX to provide debugging information for every application page requested by a browser. You specify debugging preferences using the pages as follows: On the Debugging Settings page, select debugging output options.
Page 28
Setting Description Enable Performance Monitoring* Enables the standard NT Performance Monitor application to display information about a running ColdFusion Application Server. Enable CFSTAT* Shows performance information on platforms that do not support the NT Performance Monitor.For more information, see “Using the cfstat utility” on page * Restart ColdFusion MX after changing this setting.
Page 29
Metric abbreviation Metric name Description AvgReq Time Average request A running average of the time, in milliseconds, time that ColdFusion spends to process a request (including queued time). Lower values, which you can achieve with efficient CFML, are better. AvgDB Time Average database A running average of the time ColdFusion transaction time...
The following figure shows cfstat output in a Windows 2000 environment: Debugging IP Addresses page You use the Debugging IP Addresses page to restrict debugging output to one or more IP addresses. You can add and remove IP addresses. Note: If you do not specify IP addresses, and debugging options are active, debugging output displays for all users.
Setting Description Log all CORBA Log all CORBA calls. calls Enable logging Log ColdFusion Executive task scheduling. for scheduled tasks * Restart ColdFusion MX after changing this setting. Log Files page The Log Files page of the Administrator lets you perform operations on log files, such as searching, viewing, downloading, archiving, and deleting.
Scheduled Tasks page You use the Scheduled Tasks page to schedule the execution of local and remote web pages and to generate static HTML pages. The scheduling facility is useful for applications that do not require user interactions or customized output. ColdFusion developers use this facility to schedule daily sales reports, corporate directories, statistical reports, and so on.
Extensions section You use the Extensions section of the Administrator to configure ColdFusion MX to work with other technologies, such as Java and CORBA. This section contains the Java Applets, CFX Tags, Custom Tag Paths, and CORBA Connectors pages. Java Applets page The Java Applets page of the Administrator lets you register applets and edit and delete applet registrations.
Page 34
The following table contains information about the libraries and connectors: Operating Vendor ColdFusion ORB library System connector Windows NT Borland VisiBroker 4.5 coldfusion.runtime.corba. vbjorb.jar VisibrokerConnector (embedded) Solaris Borland VisiBroker 4.5 coldfusion.runtime.corba. vbjorb.jar VisibrokerConnector (embedded) HP-UX Borland VisiBroker 4.5 coldfusion.runtime.corba. vbjorb.jar VisibrokerConnector (embedded) Note: Macromedia will provide implementations of the connectors for some of the popular...
Security section The Security section of the Administrator lets you configure the security frameworks of ColdFusion MX. For more information on security, see Chapter 4, “Administering Security” on page CF Admin Password page You use the CF Admin Password page of the Administrator to enable and disable password-restricted access to the Administrator, and to change the Administrator password.
Custom Extensions You can extend the functionality of the ColdFusion Administrator by adding links to other web applications and sites. These links appear under the Custom Extensions section in the left navigation pane of the Administrator. Note: You must create a link for the Custom Extensions section to appear in the Administrator.
CHAPTER 3 Data Source Management This chapter describes the configuration options for ColdFusion data sources. For basic information on data sources and connecting to databases, see Developing ColdFusion MX Applications with CFML. Contents About JDBC......................30 Adding data sources ....................32 Connecting to DB2 UDB for OS/390..............
About JDBC JDBC is a Java API (Application Programming Interface, an interface between application programs and the operating system) that you use to execute SQL statements. JDBC enables an application, such as ColdFusion, to interact with a variety of relational databases, without using interfaces that are database- and platform-specific.
Supplied drivers The following table shows the database drivers supplied with ColdFusion and where you can find more information: Driver Type Reference DB2 UDB for OS/390 “Connecting to DB2 UDB for OS/390” on page 36 DB2 Universal Database 6.2, 7.2 “Connecting to DB2 Universal Database 6.2, 7.2”...
Adding data sources In the ColdFusion Administrator, you configure your data sources to communicate with ColdFusion. Once you add a data source to the Administrator, you access it by name in any CFML tag that establishes database connections; for example, .
Page 41
3 Select a Driver from the drop-down list box; for example, Microsoft SQL Server. 4 Click Add. A form for additional DSN information appears. The available fields in this form depend on the Driver that you selected. 5 In the Database field, enter the name of the database; for example, Northwind. 6 In the Server field, enter the network name or IP address of the server that hosts the database, and enter any required Port value;...
Page 42
9 (Optional) Click Show Advanced Settings to specify any ColdFusion-specific settings; for example, to configure which SQL commands will interact with this data source. 10 Create Submit to create the data source. ColdFusion automatically verifies that it can connect to the data source. Chapter 3 Data Source Management...
Page 43
11 (Optional) To verify this data source later, click the verify icon: Note: To check the status of all data sources available to ColdFusion, click Verify All Connections. Specifying connection string arguments You can use the ColdFusion Administrator to specify connection string arguments for data sources that use the Microsoft Access,ODBC Socket, MYSQL, or DB2 drivers.
Connecting to DB2 UDB for OS/390 Use the settings in the following table to connect ColdFusion to DB2 UDB for OS/390 data sources: Setting Description CF Data Source The data source name (DSN) used by ColdFusion to connect to the Name data source.
Connecting to DB2 Universal Database 6.2, 7.2 Use the settings in the following table to connect ColdFusion to DB2 Universal Database 6.2, 7.2 data sources: Setting Description CF Data Source The data source name (DSN) used by ColdFusion to connect to the Name data source.
Connecting to Informix 9.x Use the settings in the following table to connect ColdFusion to Informix 9.x data sources: Setting Description CF Data Source The data source name (DSN) used by ColdFusion to connect to the Name data source. Database The database to which this data source connects.
Connecting to Microsoft Access Use the settings in the following table to connect ColdFusion to Microsoft Access data sources: Setting Description CF Data Source The data source name (DSN) used by ColdFusion to connect to the Name data source. Database File The password required to connect to the data source.
Page 48
Setting Description Disable Connections If selected, suspends all client connections. Login Timeout (sec) The number of seconds before ColdFusion times out the data source connection login attempt. CLOB Select to return the entire contents of any CLOB/Text columns in the database for this data source. If unchecked, ColdFusion retrieves the amount specified in the Long Text Buffer setting.
Connecting to Microsoft SQL Server 7.x, 2000 Use the settings in the following table to connect ColdFusion to Microsoft SQL Server 7.x, 2000 data sources: Setting Description CF Data Source The data source name (DSN) used by ColdFusion to connect to the Name data source.
Page 50
Setting Description BLOB Select to return the entire contents of any BLOB/Image columns in the database for this data source. If unchecked, ColdFusion retrieves the amount specified in the Blob Buffer setting. LongText Buffer (chr) The default buffer size, used if Enable Long Text Retrieval(CLOB) is not selected.
Connecting to MySQL Use the settings in the following table to connect ColdFusion to MySQL data sources: Setting Description CF Data Source The data source name (DSN) used by ColdFusion to connect to the Name data source. Database The database to which this data source connects. Server The name of the server that hosts the database that you want to use.
Connecting to ODBC Socket Use the settings in the following table to connect ColdFusion to ODBC Socket data sources: Setting Description CF Data Source The data source name (DSN) used by ColdFusion to connect to the Name data source. ODBC DSN Select the ODBC DSN to which you want ColdFusion to connect.
Connecting to Oracle R3 (8.1.7), Oracle 9i Use the settings in the following table to connect ColdFusion to Oracle R3 (8.1.7), Oracle 9i data sources: Setting Description CF Data Source The data source name (DSN) used by ColdFusion to connect to the Name data source.
Connecting to other data sources Use the settings in the following table to connect ColdFusion to data sources that do not appear in the drop-down list of drivers: Setting Description CF Data Source The data source name (DSN) used by ColdFusion to connect to the Name data source.
Connecting to Sybase 11.5, 11.9, 12.0, and 12.5 Use the settings in the following table to connect ColdFusion to Sybase 11.5, 11.9, 12.0, and 12.5 data sources: Setting Description CF Data Source The data source name (DSN) used by ColdFusion to connect to the Name data source.
Page 56
Setting Description BLOB Select to return the entire contents of any BLOB/Image columns in the database for this data source. If unchecked, ColdFusion retrieves the amount specified in the Blob Buffer setting. LongText Buffer (chr) The default buffer size, used if Enable Long Text Retrieval(CLOB) is not selected.
CHAPTER 4 Administering Security ColdFusion security lets you secure a number of ColdFusion MX resources with password access and perform sandbox security. This chapter describes configuration options for ColdFusion security. Contents About ColdFusion security ..................50 Using sandbox security ..................53...
About ColdFusion security Security is especially important in web-based applications, such as those you develop in ColdFusion. You implement security throughout your ColdFusion environment, in ColdFusion Markup Language (CFML) and in the ColdFusion Administrator. ColdFusion has two main security categories: user (or programmatic) and sandbox (file and directory-based).
In the Enterprise Edition of ColdFusion MX, when you click the Security > Sandbox Security page link, it opens the following page: Default security behavior The ColdFusion Administrator installs with secure access enabled. The password that you enter during installation is saved as the default. When you open the Administrator for the first time, you are prompted to enter the password.
Page 60
ColdFusion Administrator password protection Password protection for accessing the ColdFusion Administrator helps guard against unauthorized modifications of ColdFusion MX, and Macromedia highly recommends using passwords. You can disable password protection by clearing the check box on the Security > CF Admin Password page. You can also change the password on that page by entering a new password twice.
Using sandbox security Sandbox security uses the location of your ColdFusion pages to control access to ColdFusion resources. A sandbox is a designated directory of your site to which you apply security restrictions. By default, a subdirectory (or child directory) inherits the sandbox settings of the directory one level above it (the parent directory).
Page 62
The following table shows the relationship between file path and the affected files or directories: File path Affected files or directories C:\foo\bar.txt C:\foo\bar.txt C:\pat\- C:\pat\riots\c.txt C:\pat\riots2\d.txt C:\pat\a.txt C:\pat\* C:\pat\riots\ C:\pat\riots2\ C:\pat\a.txt C:\pat\ C:\pat\ The following table shows the relationship between permissions of a file and of a directory: Permission Affect on files...
Adding a sandbox The Root Security Content is the default sandbox for your ColdFusion MX server. If your security requirements are minimal and you do not need additional sandboxes, configure the default sandbox so that the child directories will inherit its security settings. To add a sandbox: 1 Open the Security >...
Configuring a sandbox You use the ColdFusion Administrator to configure a sandbox. To configure a sandbox: 1 Open the Security > Sandbox Security page in the ColdFusion Administrator. 2 In the list of Defined Directory Permissions, click the name or the Edit icon for the directory that you want to edit.
Page 65
5 To disable tags, in the left column of the CFTags tab, highlight the tags, and click the right arrow. By default, ColdFusion pages in this sandbox can access all listed tags. 6 Click the CFFunctions tab. 7 To disable functions, in the left column of the CFFunctions tab, highlight the functions, and click the right arrow.
Page 66
11 Select the permissions. For example, select the Read check box for ColdFusion pages within the mytestapps sandbox to read files in the C:\pix directory. Note: This behavior differs from other tabs, such as CFTags, where you select items to disable.