47
CONFIGURING AND ADMINISTERING COLDFUSION 10
Using the ColdFusion Administrator
L
ast
u
p
dated
7/9/2
01
2
Configurable seed for password encryption
The Administrator has option to specify a new seed value to encrypt data source passwords. To modify the default seed
value assigned by ColdFusion or to change the value you specified,
1
In the Password Seed section, specify the new seed value between 8-500 characters.
2
Click Submit Changes.
Note:
When you modify the seed value, all data source connections are reset. Therefore, Adobe recommends that you
perform this task when the server is idle or at the initial phase (after installation).
RDS page
Use the RDS page to enable and disable password-restricted RDS access to server resources from Adobe Macromedia
Dreamweaver MX , Adobe Macromedia H , ColdFusion Extensions for Eclipse, or the ColdFusion Report
Builder, and to change the RDS password.
You can also configure all users to use a single RDS password, or allow only users defined in the User Manager to have
access through RDS. The minimum character limit is 5 and the maximum character limit is 50.
In ColdFusion 10, you can enable/disable RDS using ColdFusion Administrator. That is, you can modify the settings
that you made at the time of installation using ColdFusion Administrator.
The RDS page on the ColdFusion Administrator (Security > RDS) lets you enable/disable RDS service.
Sandbox security page
You use the Sandbox Security page (called Resource Security in the Standard Edition) to specify security permissions
for data sources, tags, functions, files, directories, IP addresses, ports, and runtime permissions.
Sandbox security uses the location of your ColdFusion pages to determine functionality. A
sandbox
is a designated area
(CFM files or directories that contain CFM files) of your site to which you apply security restrictions. By default, a
subdirectory (or
child
directory) inherits the sandbox settings of the directory one level above it (the
parent
directory).
If you define sandbox settings for a subdirectory, you override the sandbox settings inherited from the parent
directory.
Use sandbox security to control access to the following:
•
Data sources
•
Tags
•
Functions
•
Files and directories
•
IP addresses and ports
You can also edit runtime permissions for ColdFusion pages.
Note:
If you have enabled sandbox security and want to use the Administrator API, enable access to the CFIDE/adminapi
directory.
For details, see “
Using sandbox security
” on page 114.