Highlighted

CF 2018 auto-lockdown tool not recognizing credentials?

Explorer ,
Aug 08, 2018

Copy link to clipboard

Copied

We've installed CF 2018 but are having an issue running the Auto-lockdown tool for 2018 Server.  It won't accept the CF admin credentials we put in as valid.  We've confirmed multiple times including copy/paste from notepad into both CF admin and into Auto-lockdown tool and CF Admin logs in fine.  Just Auto-lockdown won't accept.  Anyone else hit this?

Here's the OMG moment...

You can't use the symbol & in your cf admin password for when doing the lockdown!!!!!

It's ok for cf and you can login to the admin but the lockdown tool won't accept it...

Views

426

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more

CF 2018 auto-lockdown tool not recognizing credentials?

Explorer ,
Aug 08, 2018

Copy link to clipboard

Copied

We've installed CF 2018 but are having an issue running the Auto-lockdown tool for 2018 Server.  It won't accept the CF admin credentials we put in as valid.  We've confirmed multiple times including copy/paste from notepad into both CF admin and into Auto-lockdown tool and CF Admin logs in fine.  Just Auto-lockdown won't accept.  Anyone else hit this?

Here's the OMG moment...

You can't use the symbol & in your cf admin password for when doing the lockdown!!!!!

It's ok for cf and you can login to the admin but the lockdown tool won't accept it...

Views

427

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Aug 08, 2018 0
Explorer ,
Aug 08, 2018

Copy link to clipboard

Copied

I have tried setting the cf admin login to both "use a single password only" as well as the "separate user name and password authentication".  Neither makes a difference...

No one else hit this?

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Aug 08, 2018 0
Explorer ,
Aug 08, 2018

Copy link to clipboard

Copied

To add a little info... we've tried re-installing CF 2018 again (after uninstall and reboot) and still same issue.  We did realize though that when we install CF 2018 installer isn't giving us that screen that ties the install to iis... instead we have to use wsconfig.exe after we install to add the connection.  Perhaps the cause of that is related to our issue?

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Aug 08, 2018 0
New Here ,
Aug 09, 2018

Copy link to clipboard

Copied

Hi Fred,

Can you share the the content of the logs generated?

The log file will be generated in [CF Home]\lockdown\cfusion\Logs directory

File name starts with Server......

Also, what profile have to installed lockdown with?

Finally, what port are you supplying for the administrator? Is the internal webserver port (something like 8500/8501 etc) or the webserver port (80 or 443)?

Server Auto-Lockdown will work only for the internal webserver ports as according to the lockdown guide, we don't want the users to be opening ColdFusion Administrator using the webserver ports

Thanks,

Kailash

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Aug 09, 2018 0
Explorer ,
Aug 09, 2018

Copy link to clipboard

Copied

Hi Kailash and Pete,

I looked through the logs and did find one error there in the other file that starts with Adobe_Coldfusion...

Custom Action:       com.adobe.ia.action.iis.WebserverValidator
Status: ERROR
Additional Notes: ERROR -class com.adobe.ia.action.iis.WebserverValidator.install() runtime exception:

For the profile I installed CF with Production + Secure.

And for port I'm using 8500 which gives me the admin fine if I pull it up in a browser and I can use the credentials there without issue.

I'm wondering as noted above if related to the same reason why we don't get the iis setup screens during cf install but instead had to go in after and run wsconfig.exe.  Is there something about our IIS setup that perhaps isn't right/complete?

Thanks both of you for your help!

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Aug 09, 2018 0
New Here ,
Aug 09, 2018

Copy link to clipboard

Copied

Hi Fred,

Lets get on a call to better understand this issue. Can you share your email and a suitable time for you (along with your timezone)?

We sit in the IST time zone

Thanks,

Kailash

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Aug 09, 2018 0
Explorer ,
Aug 09, 2018

Copy link to clipboard

Copied

OMG... might have this figured out... will update shortly!

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Aug 09, 2018 0
Explorer ,
Aug 09, 2018

Copy link to clipboard

Copied

Here's the OMG moment...

You can't use the symbol & in your cf admin password for when doing the lockdown!!!!!

It's ok for cf and you can login to the admin but the lockdown tool won't accept it...

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Aug 09, 2018 1
Explorer ,
Aug 09, 2018

Copy link to clipboard

Copied

P.S. - Thanks to Sandip at Adobe who mentioned there were issues originally with ? in password which made me re-asses the password usage of &.  Thanks Sandip for your tireless help the past few days working through various issues.  Amazing support from Adobe.  Nice to see after using/praising CF since around 1996...

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Aug 09, 2018 0
Enthusiast ,
Aug 09, 2018

Copy link to clipboard

Copied

Good to know Fred, thanks for sharing the details.

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Aug 09, 2018 0
Explorer ,
Aug 09, 2018

Copy link to clipboard

Copied

No worries Pete.  Hopefully can avoid someone else hitting their head against their desk in the future.

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Aug 09, 2018 0
New Here ,
Aug 09, 2018

Copy link to clipboard

Copied

Thanks for the information fred.

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Aug 09, 2018 0
Explorer ,
Aug 09, 2018

Copy link to clipboard

Copied

No worries Kbihani1.  Now if can only solve my other issue (see other thread)... hitting head against desk...

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Aug 09, 2018 0
Enthusiast ,
Aug 09, 2018

Copy link to clipboard

Copied

I have run the lockdown installers several times and I haven't hit that issue yet. So I would guess that it is not really that your password is incorrect, but rather it is having trouble with something else. When you do hit an error with the lockdown installer it is not always very obvious what the problem is. Certainly dig into the logs as Kailash mentioned that usually helps.

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Aug 09, 2018 0
ralf_g1 LATEST
New Here ,
Nov 11, 2019

Copy link to clipboard

Copied

And here is another limitation, at least at win 2012 R2: The password for the user for the CF service must not be longer than 14 characters. If the password is longer than 14 chars, the auto lockdown will not be able to assign the user to the cf service and will not complete.

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
Reply
Loading...
Nov 11, 2019 0