Skip to main content
A
Anonymous
March 30, 2012
Question

cffile and different network domains

  • March 30, 2012
  • 2 replies
  • 1712 views

Hello,

We currently have a document system that is controlled by coldfusion.  Basically, all the documents (ie pdf, xls, doc) reside in a directory on a server specifically designated as a fileshare server.  The web server(s), which runs coldfusion 9.0.1 sit on the same network as the fileshare and the coldfusion app is set up using a domain user to access the fileshare.  We access the fileshare using the cffile tag, save a copy of the document on the local webserver and then pass it down using the cfcontent tag.

To tighten security, we want to move the fileshare into a different domain, once we do that we won't be able to use cffile to access the server since it will be in a different network domain.  What options do we have to access the file share?  Will we have to do something with cfhttp or cfftp?  I am concerned that using either will cause performance hits compared to what we do now.  Any advice would be helpful.

Thanks

Scav.

This topic has been closed for replies.

2 replies

R
Reed_Powell-ttnmOb
Inspiring
March 30, 2012

Moving the fileshare to another domain should not cause a problem - you just need to add the domain account that CF is running under to list of users with access to the directories you are using on the fileshare.  Don't forget to also add it to the users allowed to use the share that you are using to access the fileserver.  Another approach is to greate a global group, give it access to the directories and share on the fileserver, and then add the CF user account to that group.

good luck

reed

R
Reed_Powell-ttnmOb
Inspiring
March 30, 2012

WHen you say "different network domain" just what to you mean?  A different domain in the NT security sense, or a totally disconnected physical network?  My response presumed the former.  As long as the two networks have connectivity and a common AD then you should be able to do what I said.

-reed

A
Anonymous
March 30, 2012

The domains are virtual domains on the same network, but 1 domain is the DMZ and the other is behind firewall.  No file level ports between them.  Looks like we will need to do cfhttp or cfftp.

Owainnorth
Owainnorth
Inspiring
March 30, 2012

Yup, if you don't have file-level access it's CFFTP or CFHTTP. No way of telling the speed without testing it though.

Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices