Performance Monitor error wtf?

[markireland]

What is going on here?

We are on Solaris.

"Error","jrpp-3495","03/12/08","09:26:31",,"The current user is not authorized to invoke this method. "
coldfusion.runtime.CustomException: The current user is not authorized to invoke this method.
at coldfusion.tagext.lang.ThrowTag.doStartTag(ThrowTag.java:124)
at coldfusion.runtime.CfJspPage._emptyTag(CfJspPage.java:2644)
at cfaccessmanager2ecfc131535872$funcCHECKADMINROLES.runFunction(E:\cf8_final\cfusion\wwwroot\CFIDE\adminapi\accessmanager.cfc:48)
at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:418)
at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47)
at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:324)
at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:56)
at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:277)
at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:192)
at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:448)
at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:308)
at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2260)
at cfservermonitoring2ecfc1089727812$funcGETTIMEDOUTREQUESTS.runFunction(E:\cf8_final\cfusion\wwwroot\CFIDE\adminapi\servermonitoring.cfc:407)

[Libby_H]

I am having the same error -

"Error","jrpp-1","03/17/08","10:20:15",,"The current user is not authorized to invoke this method. "
coldfusion.runtime.CustomException: The current user is not authorized to invoke this method.
at coldfusion.tagext.lang.ThrowTag.doStartTag(ThrowTag.java:124)
at coldfusion.runtime.CfJspPage._emptyTag(CfJspPage.java:2640)
at cfaccessmanager2ecfc131535872$funcCHECKADMINROLES.runFunction(E:\cf8_final\cfusion\wwwroot\CFIDE\adminapi\accessmanager.cfc:48)
at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:418)
at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47)
at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:324)
at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:56)
at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:277)
at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:192)
at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:448)
at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:308)
at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2261)
at cfservermonitoring2ecfc1089727812$funcGETALERTSTATUS.runFunction(E:\cf8_final\cfusion\wwwroot\CFIDE\adminapi\servermonitoring.cfc:2167)
at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:418)
at coldfusion.runtime.UDFMethod$ReturnTypeFilter.invoke(UDFMethod.java:360)
at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:324)
at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:56)
at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:277)
at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:192)
at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:448)
at coldfusion.flash.filter.CFCInvokeFilter.invoke(CFCInvokeFilter.java:147)
at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:279)
at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40)
at coldfusion.flash.filter.CFCInvokePathFilter.invoke(CFCInvokePathFilter.java:70)
at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28)
at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38)
at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22)
at coldfusion.flash.messaging.ColdFusionAdapter.invoke(ColdFusionAdapter.java:223)
at flex.messaging.services.RemotingService.serviceMessage(RemotingService.java:173)
at flex.messaging.MessageBroker.routeMessageToService(MessageBroker.java:1165)
at flex.messaging.endpoints.AbstractEndpoint.serviceMessage(AbstractEndpoint.java:757)
at flex.messaging.endpoints.amf.MessageBrokerFilter.invoke(MessageBrokerFilter.java:117)
at flex.messaging.endpoints.amf.LegacyFilter.invoke(LegacyFilter.java:158)
at flex.messaging.endpoints.amf.SessionFilter.invoke(SessionFilter.java:48)
at flex.messaging.endpoints.amf.BatchProcessFilter.invoke(BatchProcessFilter.java:67)
at flex.messaging.endpoints.amf.SerializationFilter.invoke(SerializationFilter.java:145)
at flex.messaging.endpoints.AMFEndpoint.service(AMFEndpoint.java:122)
at flex.messaging.MessageBrokerServlet.service(MessageBrokerServlet.java:424)
at coldfusion.flex.ColdFusionMessageBrokerServlet.service(ColdFusionMessageBrokerServlet.java:50)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89)
at jrun.servlet.FilterChain.doFilter(FilterChain.java:86)
at coldfusion.filter.FlashRequestControlFilter.doFilter(FlashRequestControlFilter.java:71)
at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46)
at jrun.servlet.FilterChain.doFilter(FilterChain.java:94)
at jrun.servlet.FilterChain.service(FilterChain.java:101)
at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106)
at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42)
at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:284)
at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543)
at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203)
at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320)
at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428)
at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266)
at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66)

Interesting that it is referencing E:\cf8_final\cfusion\wwwroot\CFIDE\adminapi\servermonitoring.cfc; I never had that directory setup during installation.

I did install the security bulletin regarding CF8 logs invalid admin interface log-in attempts. Could this be associated?

[Guest]

CF8 allows multiple usernames/passwords to access the CFAdmin. It would appear you are using a user other than admin. These additional users can have their permissions limited. It would appear your users have "server monitoring" prohibited. Speak to your admins.

The path specified in the error is from the original compile of the CFML.

[Libby_H]

Well, I guess I'm confused. I installed and setup my CF8 environment, and did not setup any additional users. The User Name field is still grayed-out.

[Guest]

I am confused also. Do you have sandbox security turned on? Are you using developer, standard or enterprise?

[Libby_H]

Sorry - I assumed too much. My environment is Windows 2003 R2 SP2, Enterprise Edition with cumulative hotfix 3 and Security Bulletin for invalid login attempts loaded, J2SDK 1.4.2_17, no sandbox security, with an Access (yes, I know) database.

[markireland]

"Error","jrpp-3495","03/12/08","09:26:31",,"The current user is not authorized to invoke this method. "

We are using Enterprise on Solaris. We do not have any additonal users (username is greyed out and says 'admin')

[Daverms]

Hi,

Go through this technote. It may help you...

[Libby_H]

I'm using single server configuration, not Multiserver Configuration or J2EE Configuration. Thanks anyways.

[Guest]

Please test after each of the following:
1)Temporarily turn of admin security and test the monitor.
2)Recreate your password in using the admin security page. You can even use your current password.

Did you setup these instances of CF8 from scratch or were they migrations (settings) from a previous release?

[Libby_H]

Interesting. I tried to turn off security (going into the security settings in CF Administrator, then clicking on 'No authentication needed (not recommended) ', then saved. After that, I clicked on the 'logout' button at the top right, but it won't let me logout - it keeps me logged in and at the same page.

I set up the instance of CF8 from scratch. I orginally tried an upgrade from CF MX 6.1, but had problems with my scheduled tasks and IIS. So I un-installed CF8 and CF MX 6.1, rebooted, and then installed CF8.

[Guest]

Sounds like you may have a bad lib\neo-security.xml. Perhaps it is the problem with both of these issues. Can you copy one from another CF8 instance?

[Libby_H]

I've checked both my test and production environment, and the neo-security.xml and neo-security.bak files all seem to be the same. I've viewed them in notepad, but maybe that's not the best product to use to compare the contents.

[Libby_H]

Interesting - I've checked my log files and have only found the one instance of this error, so maybe something that had been suggested to me fixed the initial issue. For me (at least), I'll continue to monitor the logs for this error and will be back if I encounter them again. Thanks for eveyones suggestions.