CF 2021, sandbox breaks application service

Question

I have created two VMs(windows 2012r2 and 2019), fully updated, onto vmware. I have installed coldfusion 2021 enterprise(trial), x64, update 2 on both. I have selected production + secure profile, .net/pdf/solr and the default options for the rest. Right after the installation when I log into CF administrator and click enable sandbox security and restart the CF application service after that, it times out and I have to change the config for sbs in neo-security.xml to be abe to start the service again. This happanes on both VMs with fresh windows installations and fresh CF installations. The lockdown tool does not make any difference. The logs do not contain any useful information, the service just times out. The jvm.config file looks fine to me. The timeout is 240 seconds.

Am I missing anything here? What can I try to get this working?

Priyank Shrivastava. · Accepted Answer

Hello,Here is the information you requested, plus some additional information. I intentionally left the services to run as Local System.Below you can see the permissions:C:\ColdFusion2021>icacls .\.\ WIN-OSIN7QA52N5\Administrator:(OI)(CI)(F)NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)BUILTIN\Administrators:(I)(OI)(CI)(F)BUILTIN\Users:(I)(OI)(CI)(RX)BUILTIN\Users:(I)(CI)(AD)BUILTIN\Users:(I)(CI)(WD)CREATOR OWNER:(I)(OI)(CI)(IO)(F)Successfully processed 1 files; Failed processing 0 files C:\ColdFusion2021\cfusion\bin>whoamiwin-osin7qa52n5\administratorC:\ColdFusion2021\cfusion\bin>time /t10:42 AMC:\ColdFusion2021\cfusion\bin>.\cfstart.batOct 28, 2021 10:42:46 AM org.apache.catalina.core.AprLifecycleListener lifecycleEventINFO: The Apache Tomcat Native library which allows using OpenSSL was not found on the java.library.path: [C:\ColdFusion2021\cfusion\lib;C:\ColdFusion2021\cfusion\jintegra\bin;C:\ColdFusion2021\cfusion\jintegra\bin\international;C:\ColdFusion2021\jre\bin]Oct 28, 2021 10:42:47 AM org.apache.coyote.AbstractProtocol initINFO: Initializing ProtocolHandler ["http-nio-8500"]Oct 28, 2021 10:42:47 AM org.apache.coyote.AbstractProtocol initINFO: Initializing ProtocolHandler ["ajp-nio-127.0.0.1-8020"]Oct 28, 2021 10:42:47 AM org.apache.catalina.core.StandardService startInternalINFO: Starting service [Catalina]Oct 28, 2021 10:42:47 AM org.apache.catalina.core.StandardEngine startInternalINFO: Starting Servlet engine: [Apache Tomcat/9.0.50]Oct 28, 2021 10:42:48 AM org.apache.catalina.core.ApplicationContext logINFO: ColdFusionStartUpServlet: ColdFusion: Starting application servicesOct 28, 2021 10:42:48 AM org.apache.catalina.core.ApplicationContext logINFO: ColdFusionStartUpServlet: ColdFusion: VM version = 11.0.11+9-LTS-194Oct 28, 2021 10:42:49 AM Information [main] - Starting logging...Oct 28, 2021 10:42:49 AM Information [main] - Starting license...Oct 28, 2021 10:42:49 AM Information [main] - Evaluation Edition enabledOct 28, 2021 10:42:49 AM Information [main] - Starting crypto...Oct 28, 2021 10:42:49 AM Information [main] - Installed JSafe JCE provider: Version 6.21 Crypto-J 6.2.1, EMC Corporation. JsafeJCE Security Provider (implements RSA, DSA, ECDSA, Diffie-Hellman, ECDH, AES, DES, Triple DES, DESX, RC2, RC4, RC5, PBE, MD2, MD5, RIPEMD160, SHA1, SHA224, SHA256, SHA384, SHA512, HMAC-MD5, HMAC-RIPEMD160, HMAC-SHA1, HMAC-SHA224, HMAC-SHA256, HMAC-SHA384, HMAC-SHA512, HMACDRBG, HASHDRBG, CTRDRBG, FIPS186PRNG, SHA1PRNG, MD5PRNG; RFC 3394, RFC 5649 AES Key Wrap; X.509 CertificateFactory; PKCS12, PKCS15 KeyStore; X.509V1, PKIX, PKIX-SuiteB, PKIX-SuiteBTLS CertPathValidators; X.509V1, PKIX, PKIX-SuiteB, PKIX-SuiteBTLS CertPathBuilders; LDAP, Collection CertStores)Oct 28, 2021 10:42:49 AM Information [main] - Starting security...Oct 28, 2021 10:42:50 AM Information [main] - Starting scheduler...Oct 28, 2021 10:42:50 AM Information [main] - Starting WatchService...Oct 28, 2021 10:42:50 AM Information [main] - Starting runtime...Oct 28, 2021 10:42:54 AM Information [main] - Starting client...Oct 28, 2021 10:42:54 AM Information [main] - Starting archive...Oct 28, 2021 10:42:54 AM Information [main] - Starting CloudConfig...Oct 28, 2021 10:42:54 AM Information [main] - Starting VendorCredential...Oct 28, 2021 10:42:54 AM Information [main] - Starting rest...Oct 28, 2021 10:42:54 AM Information [main] - Starting registry...Oct 28, 2021 10:42:54 AM Information [main] - Package adminapi started...Oct 28, 2021 10:42:54 AM Information [main] - Package administrator started...Oct 28, 2021 10:42:54 AM Information [main] - Package redissessionstorage started...Oct 28, 2021 10:42:54 AM Information [main] - Package debugger started...Oct 28, 2021 10:42:54 AM Information [main] - Package zip started...Oct 28, 2021 10:42:54 AM Information [main] - Package image started...Oct 28, 2021 10:42:54 AM Information [main] - Package caching started...Oct 28, 2021 10:42:54 AM Information [main] - Package cfmongodb started...Oct 28, 2021 10:42:54 AM Information [main] - Package mail started...Oct 28, 2021 10:42:54 AM Information [main] - Package spreadsheet started...Oct 28, 2021 10:42:55 AM Information [main] - Package axis started...Oct 28, 2021 10:42:55 AM Information [main] - Package chart started...Oct 28, 2021 10:42:55 AM Information [main] - Package feed started...Oct 28, 2021 10:42:55 AM Information [main] - Package print started...Oct 28, 2021 10:42:56 AM Information [main] - Package search started...Oct 28, 2021 10:42:56 AM Information [main] - Package document started...Oct 28, 2021 10:42:56 AM Information [main] - Package presentation started...Oct 28, 2021 10:42:56 AM Information [main] - Package eventgateways started...Oct 28, 2021 10:42:56 AM Information [main] - Event Gateway Disabled.Oct 28, 2021 10:42:56 AM Information [main] - Package dotnet started...Oct 28, 2021 10:42:57 AM Information [main] - Package pmtagent started...Oct 28, 2021 10:42:57 AM Information [main] - Package htmltopdf started...Oct 28, 2021 10:42:57 AM Information [main] - Package awslambda started...Oct 28, 2021 10:42:57 AM Information [main] - Package com started...Oct 28, 2021 10:42:57 AM Information [main] - Package saml started...Oct 28, 2021 10:42:57 AM Information [main] - Package awss3 started...Oct 28, 2021 10:42:57 AM Information [main] - Package awss3legacy started...Oct 28, 2021 10:42:57 AM Information [Thread-13] - PDFg service manager http://127.0.0.1:8993/PDFgServlet/ registered.Oct 28, 2021 10:42:57 AM Information [main] - Package azureblob started...Oct 28, 2021 10:42:58 AM Information [main] - Package pdf started...Oct 28, 2021 10:42:58 AM Information [main] - Package websocket started...Oct 28, 2021 10:42:58 AM Information [main] - Package orm started...Oct 28, 2021 10:42:58 AM Information [main] - Package ormsearch started...Oct 28, 2021 10:42:58 AM Information [main] - Package ajax started...Oct 28, 2021 10:42:58 AM Information [main] - Package derby started...Oct 28, 2021 10:42:58 AM Information [main] - Package oracle started...Oct 28, 2021 10:42:58 AM Information [main] - Package mysql started...Oct 28, 2021 10:42:58 AM Information [main] - Package db2 started...Oct 28, 2021 10:42:58 AM Information [main] - Package sybase started...Oct 28, 2021 10:42:58 AM Information [main] - Package postgresql started...Oct 28, 2021 10:42:58 AM Information [main] - Package sqlserver started... PS C:\Users\Administrator> Get-Service -Name *coldfusion*Status Name DisplayName------ ---- -----------Running ColdFusion 2021... ColdFusion 2021 .NET ServiceStopped ColdFusion 2021... ColdFusion 2021 Application ServerRunning ColdFusion 2021... ColdFusion 2021 ODBC AgentRunning ColdFusion 2021... ColdFusion 2021 ODBC ServerRunning ColdFusion2021A... ColdFusion 2021 Add-on ServicesHi, Can you please add this argument in jvm.config and let me know if that helps. Charlie answered this in other thread. I am giving link below.-Djdk.lang.Process.allowAmbiguousCommands=truehttps://community.adobe.com/t5/coldfusion-discussions/coldfusion-2021-conflict-between-sandbox-security-and-java-11-0-11/m-p/12207456

Priyank Shrivastava. · Answer

Hi, That's strange behaviour. Let me verify this and get back to you.

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded