Skip to main content
Inspiring
May 2, 2025
Answered

Ubuntu coldfusion2025 PDFManager not working

  • May 2, 2025
  • 3 replies
  • 4213 views

I am trying to get the PDF manager to work on coldfusion 2025 (developer addition) running on Ubuntu with Apache web server. I did the full GUI install (ColdFusion_2025_GUI_WWEJ_linux64.bin ) select developer addition, all add ons etc. Did no install the separate addons download. So jetty is instslled under cfusion.

After installation I can verify the PDF  Manager ( in my case the install changed the port to 8999). Like some other post I have seen I was seeing the unregistered in the log. Selecting edit and saving without any changes allowed me to verify and provided the reghistered log item:

May 2, 2025 07:15:06 AM Information [http-nio-8500-exec-4] - PDFg service manager http://127.0.0.1:8997/PDFgServlet/ unregistered.
May 2, 2025 07:15:06 AM Information [http-nio-8500-exec-4] - PDFg service manager http://127.0.0.1:8997/PDFgServlet/ registered.

I do have it connected to appache anbd the web root is set so in a file called test.cfm I have:

<cfhtmltopdf>
<h1>Hello World</h1>
</cfhtmltopdf>

When I naviage here (http://localhost/library/pfdf/test.cfm) the server tings about it and finally display this:

http://localhost/library/pfdf/test.cfm?&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__&__

 

There is nothig written to the coldfusion or Jetty logs!! I an at a loss as to why. Previously I have used windows with no issues. But I need it to run on linux for a customer. Does any body have any ideas as to what is going on?

Correct answer iclark3509

Charlie, thank you for your help and here are my final notes:

 

To summarize, we had wanted to setup on Red Hat Enterprise Servers a single instance of the PDF Manager to handle calls from multiple ColdFusion servers ( currently running coldfusion 2023).

 

If you follow the Adobe instructions you will get the fonts that go in usr/share/fonts, but what you will not see is that first the PDFReactor underlying the remote pdf service requires a JVM flag -Djava.awt.headless=true, that goes in to jetty start.ini file. You also need to edit the jetty/etc/jetty-ipaccess.xml file on that server to add the IP of any cf server that needs to access the PDF service.

 

The next big items are the required ports. From the client to the PDF Manager server, you need 8995 (default for 2023 but it could be different). The one that there is no apparent documentation on is that port 5500 on the calling cf server must be reachable from the pdf service machine. This is the one that had been giving me issues.  This is used to receive the rendered PDF from the PDF Manager.

 

And I made sure the firewall had this port open, but it still did not connect. I initially thought it might be still some other firewall or gateway machine blocking it.

 

But while trying to set a web server connection between ColdFusion and Apache and getting 503 error messages, I saw references to "SELinux". This is a security layer on Red Hat Linux servers that was enabled without my knowledge, which was blocking the port.

 

As soon as port 5500 was opened up in SELINUX, my connector worked and so did the remote PDF generation.

 

While I did waste a lot of time on these port issues, as a developer I did get our Linux Admins to think about giving the developers more insight into what was configured on the virtual servers so hopefully going forward we will have more insight and visibility.

 

Ian

3 replies

Charlie Arehart
Community Expert
July 28, 2025

Readers who come here to the bottom of this multi-page list of replies should take note that Ian had raised in late July a new issue about remote PDF services issues. Some good news is that it seems he's come to a resolution on that, but given the threaded nature of this UI it's not here at the end (or even on this currently second page) but instead in another discussion.

See the couple of messages between us above and below this one of his where he reported seeming to have made real progress, especially dealing with firewall matter which I suspected was at issue--regarding the port 5500 that the remote add-on service calls back to (in the CF instance trying to create the PDF). Much more on this there.

I just want to add this here for those who may "jump to the bottom" to find the conclusion. I realize that it's possible that in time still other new messages may appear here, but I'm writing this on the preumption this may just as likely remain as the "last message" in the thread here. 🙂

/Charlie (troubleshooter, carehart. org)
iclark3509AuthorCorrect answer
Inspiring
August 13, 2025

Charlie, thank you for your help and here are my final notes:

 

To summarize, we had wanted to setup on Red Hat Enterprise Servers a single instance of the PDF Manager to handle calls from multiple ColdFusion servers ( currently running coldfusion 2023).

 

If you follow the Adobe instructions you will get the fonts that go in usr/share/fonts, but what you will not see is that first the PDFReactor underlying the remote pdf service requires a JVM flag -Djava.awt.headless=true, that goes in to jetty start.ini file. You also need to edit the jetty/etc/jetty-ipaccess.xml file on that server to add the IP of any cf server that needs to access the PDF service.

 

The next big items are the required ports. From the client to the PDF Manager server, you need 8995 (default for 2023 but it could be different). The one that there is no apparent documentation on is that port 5500 on the calling cf server must be reachable from the pdf service machine. This is the one that had been giving me issues.  This is used to receive the rendered PDF from the PDF Manager.

 

And I made sure the firewall had this port open, but it still did not connect. I initially thought it might be still some other firewall or gateway machine blocking it.

 

But while trying to set a web server connection between ColdFusion and Apache and getting 503 error messages, I saw references to "SELinux". This is a security layer on Red Hat Linux servers that was enabled without my knowledge, which was blocking the port.

 

As soon as port 5500 was opened up in SELINUX, my connector worked and so did the remote PDF generation.

 

While I did waste a lot of time on these port issues, as a developer I did get our Linux Admins to think about giving the developers more insight into what was configured on the virtual servers so hopefully going forward we will have more insight and visibility.

 

Ian

Charlie Arehart
Community Expert
August 13, 2025

Great to see the concluding summary and to hear that the key was first that port 5500 (which readers can find I introduced and discussed more above) and then that selinux was blocking it even once you'd opened it in your firewall (this is the first mention of that here, so thanks). 

 

These are indeed all valuable things for folks (and Adobe) to consider about enabling remote pdf services, especially when they are on different machines or using selinux. I hope the additional discussion of diagnosing the problem may help others, especially when the port numbers maybe different (for any of several reasons, also discussed above).

 

Best of all, glad it's resolved for you. When you first raised this new part of the discussion in May, you seemed on the verge of feeling you'd need to move off of CF, or perhaps only for pdf services. Surely many get to that point, and some may feel justified or even encouraged by that prospect (or alternatives they may find).

 

Given that Adobe licenses PDF Reactor as the underlying engine for cfhtmltopdf (since cf2023), which would be VERY expensive for us to do on our own, I'm all the more happy that we all on this thread have contributed key knowledge to the community. Indeed, I hope to do a blog post with my own summary of the conclusion, as some won't have the stomach to wade through all this, or may not even see your summary--which I will mark now as another "answer" for this thread. 🙂 

/Charlie (troubleshooter, carehart. org)
Inspiring
June 9, 2025

I did not get an answer from Adobe but I found that PDFReactor required a JVM setting if it was not running with a graphicl inferface. So in the jetty start.ini I added -Djava.awt.headless=true restarted Jetty and it worked. Ubuntu has a GUI so it kind of threw me as to why this would work. But in did. This was on a developer addition of ColdFusion2025. I then had a docker container with coldfusion2023 that had the same issue. I checked it heare and it worked as well.

So for now this appears to be resolved.

Inspiring
July 25, 2025

So the saga continues.

I cannot get a remote PDF Manager to produce a PDF for me. All effirts so far have resulted in a generic coldfusion error "error occurred while generating  PDF". In jerry with no debugging on I can see the post with a 500 error code.

Debugging with org.eclipse.jetty.server.LEVEL=DEBUG  (gibrd tyhe atatched output for today). Looks like the post worked but beyond that I cannot tell what the debug is telling me. 

The was two winodws machines one runnning wndows 10 the other 11. To get this far I had to turn McAfee and windows defender off. I also tried windos to Ubuntu but here ran into IPV6 Issues.

For work I need this t work on Red Hat enterprise Linux. I have to have administraotrs make chances for me. At the moment I have not tried the debugging but get the same 500 error. 

At this point I am redy to give up and recommend we do not try to use this. Which is a shame as we are close to ginging up on cold fusion altogether and this is another nail in the coffin.

Inspiring
July 28, 2025

Ian, you're almost there.

First, you say in reply to me, "No reference to ther port 5500 starting??", but note it was indeed the first line of the logging you quoted:

Jul 28, 2025 07:59:27 AM Information [Thread-24] - Enabling port 5500 to serve and receive content from remote PDFg service.

And then also the last line of all that logging:

Jul 28, 2025 08:35:44 AM Information [http-nio-8500-exec-2] - Enabling port 5500 to serve and receive content from remote PDFg service

So we're halfway home, I think. I would assert now that the problem is that the remote server can't reach that port on the cf server. I know you said you turned off defender. Let's not stop there.

 

1) First, did you then do the steps I proposed (for after addressing FW issues) to again try to enable and verify the remote pdf service, in the cf admin of the server doing the cfhtmltopdf? 

 

2) If you may say you did (or now do) that and things still don't work, see then also my final suggestion to make sure the jetty request log is still reporting a 500. It may have changed to now a 403 status code, which would be a different problem (one that's new to recent cf updates, which I can elaborate on if needed).

 

3) Also, let's not have you hang your hat on merely having disabled defender. Let's confirm simply if the remote pdf server CAN reach that port 5500 on the cf server. 

 

Go to the remote pdf server, and in the jetty request log find the request getting a 500 status code (on the pdfgservlet call from the cf server requesting a pdf). Note the ip address shown for that line (in the first couple of columns): this will be the ip address of the cf server sending the pdf request. 

 

Now, test if that remote pdf server (in your case, itself another cf instance on the remote machine) can reach port 5500 on the originating cf server. There are several ways to do that, from old school telnet (now disabled by default in windows) to curl (now built into windows) to powershell:

Curl thatip:5500

Or

powershell Test-NetConnection thatip -port 5500

Do any of those show a failed connection?

 

If so, that's why the attempt to use that as a remote pdf service fails (sadly, without ANY tracking in the logs on the cf side, and just a blank page shown the user).

 

4) Finally, if adding a rule in the defender firewall for port 5500 (to open it initially to all) doesn't work (along with later limiting it to access from the ip of that remote server), then it would seem you may have yet another firewall in the way, on either end

 

If the two machines aren't in the same network, that's definitely possible. For instance, if the cf machine is in your home and the remote pdf server (your other cf instance) is at work, your home router could be blocking port 5500. Or the work machine might even use a firewall that blocks OUTBOUND calls to non standard ports. (Indeed, see if you can simply access the cf admin of each machine from a browser in the other.) 

 

If you fix that (get the port to be accessible), don't forget to repeat the steps in my point 1, or check if you're now suffering the problem in my point 2.

 

Then let us know what you find. I appreciate it's frustrating and feels fiddly. As I said, the two-way communication with remote pdf services is unexpected to most, and little-documented. And many who persevere to solve it don't bother explaining how they did: they just get on with other priorities, as I'm sure you'd like to! 🙂 

 

I think you could be really very close to resolving this.


Charlie,

I think you have found the issue:

curl 192.168.86.48:5500
curl : Unable to connect to the remote server
At line:1 char:1
+ curl 192.168.86.48:5500
+ ~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (System.Net.HttpWebRequest:HttpWebRequest) [Invoke-WebRequest], WebExc
eption
+ FullyQualifiedErrorId : WebCmdletWebResponseException,Microsoft.PowerShell.Commands.InvokeWebRequestCommand

 

I have a google mesk WiFi Network. So while I hae turn off McAfee and windows defender I think it might be blocking the port. I'll see if I can figure out how to open it and report back

Thanks again.

I also have something to tell the admins at work what to look for as they were concentrating on the 8995 port and not looking at the 5500. I am supposed Adobe Support did not methion this to them.

Ian

Community Manager
May 2, 2025

@iclark3509 Please reach out to cfsup@adobe.com

 

Thanks,

Abhishek

BKBK
Community Expert
May 7, 2025

@iclark3509  and @AbhishekJha , I hope you did eventually identify and resolve the issue. If so, could you please share?