Highlighted

403 Forbidden Access after installing Update 14

Community Beginner ,
Sep 27, 2020

Copy link to clipboard

Copied

I installed ColdFusion update 14 and all of my ColdFusion websites ( except the administrator website ) return a 403. Please help. This is a WIndows Server 2012 ColdFusion 2016 build. Re-installing is not an option. I have removed the update for now until I can find a solution.

 

HTTP Status 403 – Forbidden


Type Status Report

Description The server understood the request but refuses to authorize it.


Apache Tomcat/8.5.42

Adobe Community Professional
Correct answer by Charlie Arehart | Adobe Community Professional

You will indeed get the same error, because the updates are indeed cumulative. Your frustration is understandable and shared. But as is explained in the technote bkbk pointed to (or elaborated in my blog posts), that update (and update 8 to cf2018, bit from March 2020) will cause this error FOR SECURITY REASONS (forced on us by Tomcat), until one also updates the wsconfig to match the security change implemented by the cf update.

 

Is it frustrating? Yes. Is it documented in the technote? Yes. But most folks don't read the update technotes. And even then, the discussion there is rather meager. These are reasons I wrote my posts, to help folks and try to explain it all. Most important, that first post I offered tried to share the least one needed to know--but I could have made it still less verbose. My other post elaborates on the issues, for those needing more. 

 

And this problem will affect folks using cf for years to come (until Adobe creates a new installer for cf2018 that includes the then latest updates out it the box--and if they would do that for cf2016, whose updates end in 2021).

 

The good news is that for most, simply upgrading the connector (as outlined in those resources) will solve the "problems" introduced with those March 2020 cf updates. And if that's not enough, they outline the couple of additional config changes that may be needed, again due to Tomcat issues. 

Views

131

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more

403 Forbidden Access after installing Update 14

Community Beginner ,
Sep 27, 2020

Copy link to clipboard

Copied

I installed ColdFusion update 14 and all of my ColdFusion websites ( except the administrator website ) return a 403. Please help. This is a WIndows Server 2012 ColdFusion 2016 build. Re-installing is not an option. I have removed the update for now until I can find a solution.

 

HTTP Status 403 – Forbidden


Type Status Report

Description The server understood the request but refuses to authorize it.


Apache Tomcat/8.5.42

Adobe Community Professional
Correct answer by Charlie Arehart | Adobe Community Professional

You will indeed get the same error, because the updates are indeed cumulative. Your frustration is understandable and shared. But as is explained in the technote bkbk pointed to (or elaborated in my blog posts), that update (and update 8 to cf2018, bit from March 2020) will cause this error FOR SECURITY REASONS (forced on us by Tomcat), until one also updates the wsconfig to match the security change implemented by the cf update.

 

Is it frustrating? Yes. Is it documented in the technote? Yes. But most folks don't read the update technotes. And even then, the discussion there is rather meager. These are reasons I wrote my posts, to help folks and try to explain it all. Most important, that first post I offered tried to share the least one needed to know--but I could have made it still less verbose. My other post elaborates on the issues, for those needing more. 

 

And this problem will affect folks using cf for years to come (until Adobe creates a new installer for cf2018 that includes the then latest updates out it the box--and if they would do that for cf2016, whose updates end in 2021).

 

The good news is that for most, simply upgrading the connector (as outlined in those resources) will solve the "problems" introduced with those March 2020 cf updates. And if that's not enough, they outline the couple of additional config changes that may be needed, again due to Tomcat issues. 

Views

132

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Sep 27, 2020 0
Adobe Community Professional ,
Sep 27, 2020

Copy link to clipboard

Copied

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Sep 27, 2020 0
Adobe Community Professional ,
Sep 27, 2020

Copy link to clipboard

Copied

Hi Charlie, funnily enough, your link is itself giving me a 503 error. 

BKBK_0-1601275967293.png

 

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Sep 27, 2020 0
Adobe Community Professional ,
Sep 28, 2020

Copy link to clipboard

Copied

Try again. It's Adobe's site, where I'd posted that blog entry. It worked when I posted it and works now. 

 

But if it still fails for you, it's a shorter version of a more extended post I did here:

 

https://www.carehart.org/blog/client/index.cfm/2019/11/13/when_how_update_cf_web_connector

/Charlie (server troubleshooter, carehart.org)

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Sep 28, 2020 1
Adobe Community Professional ,
Sep 28, 2020

Copy link to clipboard

Copied

Thanks, Charlie. Both links work now! 🙂

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Sep 28, 2020 0
Adobe Community Professional ,
Sep 27, 2020

Copy link to clipboard

Copied

Why install Update 14 anyway? The current update level of ColdFusion 2016 is 16, and updates are cumulative.

 

If I were you I would apply Update 16.  If you continue to get 403 or 503 errors, go to the page https://helpx.adobe.com/coldfusion/kb/coldfusion-2016-update-14.html . Scroll down to the "Troubleshooting" section and apply the suggestions there.

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Sep 27, 2020 0
Community Beginner ,
Sep 28, 2020

Copy link to clipboard

Copied

Thanks BKBK. I did not know they were cumulative. I will install update 16 and see if we are good to go and let you know. 

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Sep 28, 2020 0
Community Beginner ,
Sep 28, 2020

Copy link to clipboard

Copied

I installed update 16 and the same forbidden error returns. "The server understood the request but refuses to authorize it." 

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Sep 28, 2020 0
Adobe Community Professional ,
Sep 28, 2020

Copy link to clipboard

Copied

You will indeed get the same error, because the updates are indeed cumulative. Your frustration is understandable and shared. But as is explained in the technote bkbk pointed to (or elaborated in my blog posts), that update (and update 8 to cf2018, bit from March 2020) will cause this error FOR SECURITY REASONS (forced on us by Tomcat), until one also updates the wsconfig to match the security change implemented by the cf update.

 

Is it frustrating? Yes. Is it documented in the technote? Yes. But most folks don't read the update technotes. And even then, the discussion there is rather meager. These are reasons I wrote my posts, to help folks and try to explain it all. Most important, that first post I offered tried to share the least one needed to know--but I could have made it still less verbose. My other post elaborates on the issues, for those needing more. 

 

And this problem will affect folks using cf for years to come (until Adobe creates a new installer for cf2018 that includes the then latest updates out it the box--and if they would do that for cf2016, whose updates end in 2021).

 

The good news is that for most, simply upgrading the connector (as outlined in those resources) will solve the "problems" introduced with those March 2020 cf updates. And if that's not enough, they outline the couple of additional config changes that may be needed, again due to Tomcat issues. 

/Charlie (server troubleshooter, carehart.org)

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Sep 28, 2020 0
Community Beginner ,
Sep 28, 2020

Copy link to clipboard

Copied

Adobe says to "upgrade the connectors" and gives little information on how to do that. Can anyone assist in the steps needed to upgrade the connectors using the wsconfig tool?

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Sep 28, 2020 0
Community Beginner ,
Sep 28, 2020

Copy link to clipboard

Copied

I figured out how to upgrade the connectors and we are now working! Woohoo. To do this, run the wsconfig.exe found in your ColdFusion install directory. Then select the IIS web site you want to upgrade the connectors for. It takes about 20 seconds to complete the update.

 

Thanks all for the links.

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Sep 28, 2020 1
Adobe Community Professional ,
Sep 28, 2020

Copy link to clipboard

Copied

Great to hear, and glad to help. I was writing my last note (how to upgrade the connectors) while you were sharing the good news. Thanks also for marking one of my answers as correct, though I hope readers will see and succeed in getting to the first link first. 🙂 

/Charlie (server troubleshooter, carehart.org)

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Sep 28, 2020 0
BKBK LATEST
Adobe Community Professional ,
Sep 28, 2020

Copy link to clipboard

Copied

Hi Pokermon

Glad to hear you're up and running! 🙂

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Sep 28, 2020 0
Adobe Community Professional ,
Sep 28, 2020

Copy link to clipboard

Copied

I offer more on how to update the connectors here:

 

https://www.carehart.org/blog/client/index.cfm/2019/11/13/when_how_update_cf_web_connector

/Charlie (server troubleshooter, carehart.org)

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Sep 28, 2020 0