500 server errors

[wittsiepe]

Hello,

we have an application running for several months without any problems. During the last days I often get a 500 Server error and find this in the log files. All other applications on the server work without any problems. The error is not always, but very often. I reinstalled the database connections but the error still remains.

29067	May 25, 2017 09:04:42 AM Information [ajp-nio-8016-exec-7] - access denied (""java.io.FilePermission"" ""C:\ColdFusion2016\cfusion\wwwroot\WEB-INF\classes\macromedia\sqlserverutil\userDefaults.properties"" ""read"")
29068	May 25, 2017 09:04:43 AM Information [ajp-nio-8016-exec-7] - client variable JDBC GET - retry 1
29069	May 25, 2017 09:04:43 AM Information [ajp-nio-8016-exec-7] - access denied (""java.io.FilePermission"" ""C:\ColdFusion2016\cfusion\wwwroot\WEB-INF\classes\macromedia\sqlserverutil\userDefaults.properties"" ""read"")
29070	May 25, 2017 09:04:43 AM Information [ajp-nio-8016-exec-7] - client variable JDBC GET - retry 2
29071	May 25, 2017 09:04:43 AM Information [ajp-nio-8016-exec-7] - access denied (""java.io.FilePermission"" ""C:\ColdFusion2016\cfusion\wwwroot\WEB-INF\classes\macromedia\sqlserverutil\userDefaults.properties"" ""read"")
29072	May 25, 2017 09:04:43 AM Information [ajp-nio-8016-exec-7] - client variable JDBC GET - retry 3
29073	May 25, 2017 09:04:43 AM Information [ajp-nio-8016-exec-7] - access denied (""java.io.FilePermission"" ""C:\ColdFusion2016\cfusion\wwwroot\WEB-INF\classes\macromedia\sqlserverutil\userDefaults.properties"" ""read"")
29074	May 25, 2017 09:04:43 AM Warning [ajp-nio-8016-exec-7] - Failed to load CLIENT variables from datasource mydata - access denied (""java.io.FilePermission"" ""C:\ColdFusion2016\cfusion\wwwroot\WEB-INF\classes\macromedia\sqlserverutil\userDefaults.properties"" ""read"")
29075	May 25, 2017 09:04:44 AM Information [ajp-nio-8016-exec-7] - Operation failed on the mydata data source. - Operation failed on the mydata data source. Reason of failure java.sql.SQLException: access denied (""java.io.FilePermission"" ""C:\ColdFusion2016\cfusion\wwwroot\WEB-INF\classes\macromedia\sqlserverutil\userDefaults.properties"" ""read"") <br>The error occurred on line 23.
29076	May 25, 2017 09:04:44 AM Error [ajp-nio-8016-exec-7] - Operation failed on the mydata data source.Reason of failure java.sql.SQLException: access denied (""java.io.FilePermission"" ""C:\ColdFusion2016\cfusion\wwwroot\WEB-INF\classes\macromedia\sqlserverutil\userDefaults.properties"" ""read"") The specific sequence of files included or processed is: C:\inetpub\wwwroot\myapp\index.cfm, line: 23

System is:

System Information

Server Details

Server Product ColdFusion 2016

Version 2016.0.04.302561

Tomcat Version 8.5.11.0

Edition Standard 

Operating System Windows Server 2012 R2 

OS Version 6.3 

Update Level C:/ColdFusion2016/cfusion/lib/updates/chf20160004.jar 

Adobe Driver Version 5.1.4 (Build 0001) 

Java Version 1.8.0_72  

Thank you for your help

[BKBK]

What is \macromedia\sqlserverutil\userDefaults.properties doing there? Looks like a bug to me. Report it.

In the meantime, you could test as follows.

Stop ColdFusion 2016.

Go to C:\ColdFusion2016\cfusion\wwwroot\WEB-INF\classes\; move the macromedia folder (by cutting and pasting) to your desktop.

Restart ColdFusion.

Verify if things are now running normally. For example, run the ColdFusion Administrator and open a test CFM page.

Examine the logs.

[wittsiepe]

I could identify the problem. I activated sandbox security and enabled access to the required datasources. The datasource is also needed for clientstorage. Sandbox security does not work and leads to the error.

[mr-t]

We got the same error after enabling sandbox security.

To get around it we just added "\ColdFusion2016\cfusion\wwwroot\WEB-INF\classes\" and "\ColdFusion2016\cfusion\wwwroot\WEB-INF\classes\-" with read only permission to sandbox configuration and that seem to resolve the error.

The odd thing is - there is not macromedia folder in "\ColdFusion2016\cfusion\wwwroot\WEB-INF\classes\" folder, so not sure what Coldfusion is looking for when datasource is created for the first time.

We also observed that before we added "...\classes" folder configuration to sandbox security, if we do connection verification first from CF administrator we do not get this error.