MX 7 won't restart unless I change the user it runs as

Report · Mar 28, 2008

We've had this happen to two servers now and I'm just waiting for it to happen to the third.

Afte a while, Coldfusion MX 7 will not restart. If we change the user the service runs as to "Administrator" it will run, but now longer under the "SYSTEM" user it was always running under before.

On;y after hours of working on this and upsetting a LOT of clients did we discover it would run by changing the users.

WTF. Anyone know why it seems that all of our MX 7 installations eventually get to this point?

Thanks

Mike

Report · Mar 28, 2008

I think your SYSTEM account would have some issues with NTFS rights.

I can easily say that "never" run CF in any "administrator account. :)

Here is a technote about running CF with a different user.

http://www.adobe.com/go/tn_17279

In Response To Oğuz Demirkapı · Mar 31, 2008

quote:

Originally posted by: Oguz.Demirkapi
I think your SYSTEM account would have some issues with NTFS rights.

I can easily say that "never" run CF in any "administrator account. :)

Here is a technote about running CF with a different user.

http://www.adobe.com/go/tn_17279

Yeah, there's "best practice" and then there is reality. And the reality of it is; even if you don't give CF an admin account, you still have to expose it to enough of your system that a lot of damage can still occur (giving it full control of the Windows install directory is a prime example).

In Response To Oğuz Demirkapı · Apr 01, 2008

ke4pym wrote:
> Yeah, there's "best practice" and then there is reality. And the reality of
> it is; even if you don't give CF an admin account, you still have to expose it
> to enough of your system that a lot of damage can still occur (giving it full
> control of the Windows install directory is a prime example).

I think we live in different realities then. My reality is that CF runs
under an unprivileged account (local group "Users") and I have the
following permissions on my windows directory:

C:\>cacls c:\WINDOWS
c:\WINDOWS BUILTIN\Users:R
BUILTIN\Users:(OI)(CI)(IO)(special access:)
GENERIC_READ
GENERIC_EXECUTE

Jochem

--
Jochem van Dieten
Adobe Community Expert for ColdFusion

In Response To Newsgroup_User · Apr 01, 2008

Perhaps you should consider writing for Adobe then. Because from the technote article above:

"Add the user account that ColdFusion is running under. This account should have "Full Control" permissions for the following items:

* WebDocument Directory
* c:\cfusion or c:\cfusionmx (and all subdirectories)
* c:\winnt
* c:\winnt\system32"

Not to throw this thread off track or anything...

Report · Mar 31, 2008

Does anyone have an idea why Coldfusion will not longer run under "Local System" as it always had before? This is the default account it runs when it gets installed.

I'd obviously rather NOT run it under administrator but at this point I have no other option.

Thanks for the replies BTW.

Report · Apr 01, 2008

mikechyu wrote:
> Does anyone have an idea why Coldfusion will not longer run under "Local
> System" as it always had before?

What error is in your cfusion-out.log when you try to run it as "Local
System"?

Jochem

--
Jochem van Dieten
Adobe Community Expert for ColdFusion

In Response To Newsgroup_User · Apr 01, 2008

each time I would start it the three lines would appear:

Starting Macromedia JRun 4.0 (Build 92909), coldfusion server
03/28 15:13:31 warning Unable to open C:\CFusionMX7\runtime/lib/license.properties
03/28 15:13:33 info JRun Naming Service listening on *:2920

Then it would hang indefinitely.

After changing it to run as "Administrator" I would get:

Starting Macromedia JRun 4.0 (Build 92909), coldfusion server
03/28 15:26:24 warning Unable to open C:\CFusionMX7\runtime/lib/license.properties
03/28 15:26:25 info JRun Naming Service listening on *:2920
03/28 15:26:25 warning No sessionSecret has been specified in jrun.xml. Installing a self generated sessionSecret.
03/28 15:26:28 info No JDBC data sources have been configured for this server (see jrun-resources.xml)
03/28 15:26:28 info JRun Proxy Server listening on *:51011
03/28 15:26:28 info Deploying enterprise application "Macromedia ColdFusion MX" from: file:/C:/CFusionMX7/
03/28 15:26:29 info Deploying web application "Macromedia Coldfusion MX" from: file:/C:/CFusionMX7/
03/28 15:26:42 INFO License Service: Flex 1.5 CF Edition enabled
03/28 15:26:42 INFO Starting Flex 1.5 CF Edition
03/28 15:26:43 user JSPServlet: init
03/28 15:26:44 user MessageBrokerServlet: init
03/28 15:26:48 user CFMxmlServlet: init
03/28 15:26:48 user CFMxmlServlet: Macromedia Flex Build: 87315.134646
03/28 15:26:48 INFO Macromedia Flex Build: 87315.134646
03/28 15:26:51 user ColdFusionStartUpServlet: init
03/28 15:26:51 user ColdFusionStartUpServlet: ColdFusion MX: Starting application services
03/28 15:26:51 user ColdFusionStartUpServlet: ColdFusion MX: VM version = 1.4.2_09-b05
03/28 15:26:53 Information [main] - C:\CFusionMX7\logs\server.log initialized
03/28 15:26:53 Information [main] - Starting logging...
03/28 15:26:53 Information [main] - Starting crypto...
03/28 15:26:59 Information [main] - Starting license...
03/28 15:26:59 Information [main] - Starting License server ...
03/28 15:27:00 Information [main] - Starting scheduler...
03/28 15:27:00 Information [main] - Starting WatchService...
03/28 15:27:00 Information [main] - Starting debugging...
03/28 15:27:01 Information [main] - Starting sql...
03/28 15:27:18 Information [main] - Pool Manager Started
03/28 15:27:19 Information [main] - Starting mail...
03/28 15:27:20 Information [main] - CORBA Configuration not enabled
03/28 15:27:20 Information [main] - Starting cron...
03/28 15:27:20 Information [main] - Starting registry...
03/28 15:27:20 Information [main] - Starting client...
03/28 15:27:20 Information [main] - Starting xmlrpc...
03/28 15:27:22 Information [main] - Starting graphing...
03/28 15:27:32 Information [main] - Starting verity...
03/28 15:27:32 Information [main] - Starting archive...
03/28 15:27:32 Information [main] - Starting document...
03/28 15:27:33 Information [main] - Starting eventgateway...
03/28 15:27:34 Information [main] - C:\CFusionMX7\logs\eventgateway.log initialized
03/28 15:27:34 Information [main] - Starting Event Backend Handlers
03/28 15:27:34 Information [main] - Initialized EventRequestDispatcher with a Thread Pool size of 10
03/28 15:27:34 Information [main] - Initializing EventRequestHandler
03/28 15:27:34 Information [main] - Starting Event Gateways
RMI Registry started and listening on port 1099
03/28 15:27:34 Information [main] - Starting FlexAssembler...
03/28 15:27:34 Information [main] - ColdFusion started
03/28 15:27:34 user ColdFusionStartUpServlet: ColdFusion MX: application services are now available
03/28 15:27:34 user CFSwfServlet: init
03/28 15:27:34 user CFCServlet: init
03/28 15:27:36 user FlashGateway: init
03/28 15:27:37 user CFFormGateway: init
03/28 15:27:37 user CFInternalServlet: init
Server coldfusion ready (startup time: 77 seconds)

This is repeatable on BOTH machines by switching back to the "Local System" account and then to the "Administrator" account.

Since this is now happening on TWO machines I have a hard time believing Adobe hasn't identified what the problem is. Maybe they have, a post to a hotfix would be GREATLY appreciated :)

Thanks again

Mike

Report · Apr 01, 2008

Have you (or anyone else) tinkered with any NTFS level permissions on your servers? I would venture a guess that SYSTEM has been removed from something that CF needs to start.

In Response To Deleted User · Apr 01, 2008

This article may help you setup the necessary permissions for the CF service.
http://www.adobe.com/go/tn_17279

Edit: Sorry for the duplication, I realize now that Oguz.Demirkapi has already posted this link.

In Response To JR__Bob__Dobbs-qSBHQ2 · Apr 10, 2008

Here's another symptom. over time it takes longer and longer to restart coldfusion. Eventually it wont start at all even if we change the timeout to 10 minutes.

Change the user to Administrator and it fires right up.

It's not like one day CF started right up and the next it didn't. It was a slow process to get to the point where it wouldn't start. This is why I initially thought maybe the logs were holding it back.

No one on this form has experienced this? We are getting this on THREE machines now. I had to restart our third to unflush DNS (stupid default settings in java.security. Thanks Macromedia! - it's MX7) and lo and behold, our third cf server will not start user the SYSTEM account.

Mike

In Response To Deleted User · Apr 07, 2008

Checked permissions on all folders. Permissions are fine. System has full access to everyything on the drive.

So completely stumped by this it's making me crazy.

Thanks