Skip to main content
webmandman8
Inspiring
July 3, 2014
Answered

Submitting cfadmin login password I get "an invalid method (http verb) is being used."

  • July 3, 2014
  • 1 reply
  • 1296 views

This is occuring after a fresh install of IIS, and the cfadmin website is configured via WSCONFIG. I followed all the user permission recommendations from Pete's CF11 Lockdown Guide with the exception of the IIS configuration(still haven't removed handler mappings and haven't added any URL deny sequences under Request Filtering). Which eventually I will because that's the goal.

This is what I get after I submit my username and password. the last http request that is made is to /CFIDE/administrator/enter.cfm, which responds with 405.0 Method Not Allowed (invalid method http verb)

After I can keep going back to the login page with no problem. I'm accessing the cfadmin on Internet Explorer logged in as an administrator user of the web server(2012) itself.

This topic has been closed for replies.
Correct answer Priyank Shrivastava.

tribule, sorry man, I had already moved on to the next reinstall. and now I'm getting:

Calling LoadLibraryEx on ISAPI filter "E:\..\..\..\config\wsconfig\1\isapi_redirect.dll" failed

Detailed Error Information:

Module   IIS Web Core
Notification   BeginRequest
Handler   Not yet determined
Error Code   0x80070005
Config Error   Cannot read configuration file due to insufficient permissions
Config File   \\?\E:\..\..\..\cfusion\wwwroot\CFIDE\web.config

Ah, so here I go changing the user permissions...geez.


Hi,

In order to test this just add proper permission to the ColdFusion11 config directory. It is unable to read the dll.

Thanks,

Priyank

1 reply

webmandman8
Inspiring
July 3, 2014

Error message when a user visits a website that is hosted on a server that is running Internet Information Services 7.0:…

The resolutions here were not applicable since I already had the correct settings.

Legend
July 3, 2014

Did you check IIS settings and ensure GET and POST are permitted methods (and are both enabled). The "Handler Mappings" section of IIS for your website will handle this.

Legend
July 3, 2014

Yes, All verbs are being accepted for cfmHandler, cfcHandler, StaticFile, ISAPI-dll, CGI-exe and the rest of the handlers supplied by the WSCONFIG.


Could it be a loopback check in IIS? Have you tried using the IP of. the server or 127.0.0.1 to get to the CFAdmin instead? What do web logs show as the verb used to access the page?