CF 2021, sandbox breaks application service

[default48iyxje0kvsm]

I have created two VMs(windows 2012r2 and 2019), fully updated, onto vmware. I have installed coldfusion 2021 enterprise(trial), x64, update 2 on both. I have selected production + secure profile, .net/pdf/solr and the default options for the rest. Right after the installation when I log into CF administrator and click enable sandbox security and restart the CF application service after that, it times out and I have to change the config for sbs in neo-security.xml to be abe to start the service again. This happanes on both VMs with fresh windows installations and fresh CF installations. The lockdown tool does not make any difference. The logs do not contain any useful information, the service just times out. The jvm.config file looks fine to me. The timeout is 240 seconds.

Am I missing anything here? What can I try to get this working?

[Priyank Shrivastava.]

Hi,

That's strange behaviour. Let me verify this and get back to you.

[Priyank Shrivastava.]

Hi,

I tried the scenario with same exact steps on Win2012R2 server and Win2019 server and did not encounter the problem. 

Can you please try these steps and let me know what you see in the console.

1. Launch the command prompt as administrator>Navigate to ColdFusion2021\cfusion\bin folder

and type the command "cfstart".

2. Please share what you see in the console, if there is any error, please post it here. 

[default48iyxje0kvsm]

Hello,

Here is the information you requested, plus some additional information. I intentionally left the services to run as Local System.

Below you can see the permissions:

C:\ColdFusion2021>icacls .\
.\ WIN-OSIN7QA52N5\Administrator:(OI)(CI)(F)
NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)
BUILTIN\Administrators:(I)(OI)(CI)(F)
BUILTIN\Users:(I)(OI)(CI)(RX)
BUILTIN\Users:(I)(CI)(AD)
BUILTIN\Users:(I)(CI)(WD)
CREATOR OWNER:(I)(OI)(CI)(IO)(F)

Successfully processed 1 files; Failed processing 0 files

C:\ColdFusion2021\cfusion\bin>whoami
win-osin7qa52n5\administrator

C:\ColdFusion2021\cfusion\bin>time /t
10:42 AM

C:\ColdFusion2021\cfusion\bin>.\cfstart.bat
Oct 28, 2021 10:42:46 AM org.apache.catalina.core.AprLifecycleListener lifecycleEvent
INFO: The Apache Tomcat Native library which allows using OpenSSL was not found on the java.library.path: [C:\ColdFusion2021\cfusion\lib;C:\ColdFusion
2021\cfusion\jintegra\bin;C:\ColdFusion2021\cfusion\jintegra\bin\international;C:\\ColdFusion2021\\jre\bin]
Oct 28, 2021 10:42:47 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["http-nio-8500"]
Oct 28, 2021 10:42:47 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["ajp-nio-127.0.0.1-8020"]
Oct 28, 2021 10:42:47 AM org.apache.catalina.core.StandardService startInternal
INFO: Starting service [Catalina]
Oct 28, 2021 10:42:47 AM org.apache.catalina.core.StandardEngine startInternal
INFO: Starting Servlet engine: [Apache Tomcat/9.0.50]
Oct 28, 2021 10:42:48 AM org.apache.catalina.core.ApplicationContext log
INFO: ColdFusionStartUpServlet: ColdFusion: Starting application services
Oct 28, 2021 10:42:48 AM org.apache.catalina.core.ApplicationContext log
INFO: ColdFusionStartUpServlet: ColdFusion: VM version = 11.0.11+9-LTS-194
Oct 28, 2021 10:42:49 AM Information [main] - Starting logging...
Oct 28, 2021 10:42:49 AM Information [main] - Starting license...
Oct 28, 2021 10:42:49 AM Information [main] - Evaluation Edition enabled
Oct 28, 2021 10:42:49 AM Information [main] - Starting crypto...
Oct 28, 2021 10:42:49 AM Information [main] - Installed JSafe JCE provider: Version 6.21 Crypto-J 6.2.1, EMC Corporation. JsafeJCE Security Provider (
implements RSA, DSA, ECDSA, Diffie-Hellman, ECDH, AES, DES, Triple DES, DESX, RC2, RC4, RC5, PBE, MD2, MD5, RIPEMD160, SHA1, SHA224, SHA256, SHA384, S
HA512, HMAC-MD5, HMAC-RIPEMD160, HMAC-SHA1, HMAC-SHA224, HMAC-SHA256, HMAC-SHA384, HMAC-SHA512, HMACDRBG, HASHDRBG, CTRDRBG, FIPS186PRNG, SHA1PRNG, MD
5PRNG; RFC 3394, RFC 5649 AES Key Wrap; X.509 CertificateFactory; PKCS12, PKCS15 KeyStore; X.509V1, PKIX, PKIX-SuiteB, PKIX-SuiteBTLS CertPathValidato
rs; X.509V1, PKIX, PKIX-SuiteB, PKIX-SuiteBTLS CertPathBuilders; LDAP, Collection CertStores)
Oct 28, 2021 10:42:49 AM Information [main] - Starting security...
Oct 28, 2021 10:42:50 AM Information [main] - Starting scheduler...
Oct 28, 2021 10:42:50 AM Information [main] - Starting WatchService...
Oct 28, 2021 10:42:50 AM Information [main] - Starting runtime...
Oct 28, 2021 10:42:54 AM Information [main] - Starting client...
Oct 28, 2021 10:42:54 AM Information [main] - Starting archive...
Oct 28, 2021 10:42:54 AM Information [main] - Starting CloudConfig...
Oct 28, 2021 10:42:54 AM Information [main] - Starting VendorCredential...
Oct 28, 2021 10:42:54 AM Information [main] - Starting rest...
Oct 28, 2021 10:42:54 AM Information [main] - Starting registry...
Oct 28, 2021 10:42:54 AM Information [main] - Package adminapi started...
Oct 28, 2021 10:42:54 AM Information [main] - Package administrator started...
Oct 28, 2021 10:42:54 AM Information [main] - Package redissessionstorage started...
Oct 28, 2021 10:42:54 AM Information [main] - Package debugger started...
Oct 28, 2021 10:42:54 AM Information [main] - Package zip started...
Oct 28, 2021 10:42:54 AM Information [main] - Package image started...
Oct 28, 2021 10:42:54 AM Information [main] - Package caching started...
Oct 28, 2021 10:42:54 AM Information [main] - Package cfmongodb started...
Oct 28, 2021 10:42:54 AM Information [main] - Package mail started...
Oct 28, 2021 10:42:54 AM Information [main] - Package spreadsheet started...
Oct 28, 2021 10:42:55 AM Information [main] - Package axis started...
Oct 28, 2021 10:42:55 AM Information [main] - Package chart started...
Oct 28, 2021 10:42:55 AM Information [main] - Package feed started...
Oct 28, 2021 10:42:55 AM Information [main] - Package print started...
Oct 28, 2021 10:42:56 AM Information [main] - Package search started...
Oct 28, 2021 10:42:56 AM Information [main] - Package document started...
Oct 28, 2021 10:42:56 AM Information [main] - Package presentation started...
Oct 28, 2021 10:42:56 AM Information [main] - Package eventgateways started...
Oct 28, 2021 10:42:56 AM Information [main] - Event Gateway Disabled.
Oct 28, 2021 10:42:56 AM Information [main] - Package dotnet started...
Oct 28, 2021 10:42:57 AM Information [main] - Package pmtagent started...
Oct 28, 2021 10:42:57 AM Information [main] - Package htmltopdf started...
Oct 28, 2021 10:42:57 AM Information [main] - Package awslambda started...
Oct 28, 2021 10:42:57 AM Information [main] - Package com started...
Oct 28, 2021 10:42:57 AM Information [main] - Package saml started...
Oct 28, 2021 10:42:57 AM Information [main] - Package awss3 started...
Oct 28, 2021 10:42:57 AM Information [main] - Package awss3legacy started...
Oct 28, 2021 10:42:57 AM Information [Thread-13] - PDFg service manager http://127.0.0.1:8993/PDFgServlet/ registered.
Oct 28, 2021 10:42:57 AM Information [main] - Package azureblob started...
Oct 28, 2021 10:42:58 AM Information [main] - Package pdf started...
Oct 28, 2021 10:42:58 AM Information [main] - Package websocket started...
Oct 28, 2021 10:42:58 AM Information [main] - Package orm started...
Oct 28, 2021 10:42:58 AM Information [main] - Package ormsearch started...
Oct 28, 2021 10:42:58 AM Information [main] - Package ajax started...
Oct 28, 2021 10:42:58 AM Information [main] - Package derby started...
Oct 28, 2021 10:42:58 AM Information [main] - Package oracle started...
Oct 28, 2021 10:42:58 AM Information [main] - Package mysql started...
Oct 28, 2021 10:42:58 AM Information [main] - Package db2 started...
Oct 28, 2021 10:42:58 AM Information [main] - Package sybase started...
Oct 28, 2021 10:42:58 AM Information [main] - Package postgresql started...
Oct 28, 2021 10:42:58 AM Information [main] - Package sqlserver started...

PS C:\Users\Administrator> Get-Service -Name *coldfusion*

Status Name DisplayName
------ ---- -----------
Running ColdFusion 2021... ColdFusion 2021 .NET Service
Stopped ColdFusion 2021... ColdFusion 2021 Application Server
Running ColdFusion 2021... ColdFusion 2021 ODBC Agent
Running ColdFusion 2021... ColdFusion 2021 ODBC Server
Running ColdFusion2021A... ColdFusion 2021 Add-on Services

[Priyank Shrivastava. · Accepted solution]

Hi,

Can you please add this argument in jvm.config and let me know if that helps. Charlie answered this in other thread. I am giving link below.

-Djdk.lang.Process.allowAmbiguousCommands=true

https://community.adobe.com/t5/coldfusion-discussions/coldfusion-2021-conflict-between-sandbox-secur...

[default48iyxje0kvsm]

Thanks Priyank. This fixed the problem I am having.