Adobe 38043740 Lockdown Guide - Page 56

Add a connector shared secret, 4.3.6 Additional Tomcat Security Considerations

Get Adobe 38043740 - ColdFusion Standard - Mac PDF manuals and user guides
UPC - 883919135168
View all Adobe 38043740 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 56 highlights

Please note: Changing the port setting may cause the shutdown of the ColdFusion Service on Windows to fail, you may need to kill the process manually to stop ColdFusion. The Linux shutdown script should still work properly when the port is changed. 4.3.5 Add a connector shared secret Specify a shared secret for the AJP connector by editing {cf.instance.home}/runtime/conf/server.xml Look for a line similar to: Add a requiredSecret attribute with a random strong password: Next edit the corresponding workers.properties file, eg {cf.home}/config/wsconfig/1/workers.properties and add a line: worker.cfusion.secret=yourSecret 4.3.6 Additional Tomcat Security Considerations Consult the Tomcat 7 Security Considerations document (http://tomcat.apache.org/tomcat-7.0-doc/securityhowto.html) for additional tomcat specific security settings. 4.3.7 Additional File Security Considerations Pay careful attention to the file permissions of sensitive configuration files located in {cf.instance.home}/lib/ such as password.properties, seed.properties and all neo-*.xml files. In addition the files located in {cf.instance.home}/runtime/conf/ contain important configuration files utilized by the Tomcat container. 56

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
56
Please note:
Changing the port setting may cause the shutdown of the ColdFusion Service on Windows
to fail, you may need to kill the process manually to stop ColdFusion. The Linux shutdown script
should still work properly when the port is changed.
4.3.5 Add a connector shared secret
Specify a shared secret for the AJP connector by editing
{cf.instance.home}/runtime/conf/server.xml
Look for a line similar to:
<Connector port="8012" protocol="AJP/1.3" redirectPort="8445"
tomcatAuthentication="false" />
Add a
requiredSecret
attribute with a random strong password:
<Connector port="8012" protocol="AJP/1.3" redirectPort="8445"
tomcatAuthentication="false" requiredSecret="yourSecret" />
Next edit the corresponding
workers.properties
file, eg
{cf.home}/config/wsconfig/1/workers.properties
and add a line:
worker.cfusion.secret=yourSecret
4.3.6 Additional Tomcat Security Considerations
Consult the Tomcat 7 Security Considerations document (
howto.html
) for additional tomcat specific security settings.
4.3.7 Additional File Security Considerations
Pay careful attention to the file permissions of sensitive configuration files located in
{cf.instance.home}/lib/
such as
password.properties
,
seed.properties
and all
neo-*.xml
files. In addition the files located in
{cf.instance.home}/runtime/conf/
contain important configuration
files utilized by the Tomcat container.