Skip to main content
C
cassadinechik
Participant
September 30, 2020
Question

Problem with ColdFusion 2018 Update 10

  • September 30, 2020
  • 1 reply
  • 442 views

Working on a Windows server with Apache 2.4 -

 

Installed 2018 with update 10 about three weeks ago on our test server. After working through getting all the new security to work, it has now stopped after about a week and a half running smooth. Get the 403 error.

The only error I see is 

[Wed Sep 30 19:42:57 2020] [1568:1836] [warn] ajp_process_callback::jk_ajp_common.c (2218): (cfusion) AJP13 protocol: Reuse is set to false

in the mod_jk log. 

It was running without the secret in the workers.properties file (it was in server.xml while working), but I tried adding it, no difference. I added the suggested line allowedRequestAttributesPattern=".*" to server.xml, which I did not have before. No difference. If anyone has any other ideas, I would welcome them. I am no sys admin 🙂 

This topic has been closed for replies.

1 reply

BKBK
Community Expert
BKBKCommunity Expert
Community Expert
October 1, 2020

I would advise you to first look for a solution not involving allowedRequestAttributesPattern. Use this attribute only as a last resort. It carries a risk, as it could allow illegal attributes in the Tomcat request.

 

You could really begin by just setting the secret. For example:

 

in workers.properties

worker.cf_instance_name.secret=ED4412AC-B055-41C6-8247-CBCAE6230964

 

in server.xml of the instance

<Connector port="8018" redirectPort="8451" protocol="AJP/1.3" connectionTimeout="60000" address="127.0.0.1" tomcatAuthentication="false" secret="ED4412AC-B055-41C6-8247-CBCAE6230964" packetSize="65535" maxThreads="500"/>

C
cassadinechikAuthor
Participant
October 6, 2020

I have the secret set both places. I should have said that. Sadly, still getting a 403 😞 

BKBK
Community Expert
BKBKCommunity Expert
Community Expert
October 6, 2020

Did you upgrade the connector?

See https://helpx.adobe.com/coldfusion/kb/coldfusion-2018-update-8.html (scroll down to "Troubleshooting" section).

2 alternative ways to upgrade the connector:

1) Launch the tool C:\ColdFusion2018\cfusion\runtime\bin\wsconfig.exe, select the connector and press on the Upgrade button.

2) Using cd in MS DOS, navigate  to C:\ColdFusion2018\cfusion\runtime\bin. Then run the DOS command

wsconfig -upgrade

Doing so will upgrade all the connectors.

Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices