112
CONFIGURING AND ADMINISTERING COLDFUSION 10
Administering Security
L
ast
u
p
dated
7/9/2
01
2
Enhancing ColdFusion Security on Windows
To enhance security for the ColdFusion server on Windows, restrict access to the following files to selected ColdFusion
users:
•
/cfusion/lib/seed.properties
•
/cfusion/lib/password.properties
•
/cfusion/lib/license.properties
•
/cfusion/bin/passwordreset.bat
•
/cfusion/bin/cf-passwordreset.jar
Exposing services to users
ColdFusion exposes many existing enterprise services as web services. You can access these services using SOAP and
AMF/Flash remoting.
The following are the exposed services:
•
cfpdf
•
cfImage
•
cfdocument
•
cfmail
•
cfpop
•
cfchart
•
upload service
You can secure the exposed services to prevent access by unknown applications or users. This can be done by
configuring the client IP address range to which services are accessible. Also, you can set up user access control for the
services.
On the Security > User Manager page, you can select the services available to a user from the Exposed Services section.
By default, all the services are listed in the Prohibited Services drop-down list. Press CTRL and select the services that
you want the user to avail and click the << button.
Now, click Edit User to implement the changes to the user settings.
Configure IP address to access exposed services
To configure IP addresses to access exposed services:
1
Go to Security > Allowed IP Addresses
2
To add an IP address, specify the IP address in the IP addresses field and click Add.
3
To remove an IP address, select the IP address from the View/Remove Selected IP Addresses for Exposed Services list.
4
Click Remove Selected to remove the IP addresses.