Coldfusion: Difference between revisions

From RavenWiki
Jump to navigationJump to search
m (→‎Installation: Updated link to ravencfc.zip)
Line 4: Line 4:
* Download the [http://raven.cam.ac.uk/project/java-toolkit/ Raven Java Toolkit] and extract webauth-toolkit.jar to runtime\jre\lib\ext in the Coldfusion installation directory.
* Download the [http://raven.cam.ac.uk/project/java-toolkit/ Raven Java Toolkit] and extract webauth-toolkit.jar to runtime\jre\lib\ext in the Coldfusion installation directory.
* Restart the Coldfusion service.
* Restart the Coldfusion service.
* Download [http://www.emma.cam.ac.uk/files/ravencfc.zip ravencfc.zip] and extract to the directory you wish to protect.  It should contain 4 files: application.cfc, webauth.cfc, index.cfm and pubkey2.crt.
* Download [http://www.emma.cam.ac.uk/files/raven/ravencfc.zip ravencfc.zip] and extract to the directory you wish to protect.  It should contain 4 files: application.cfc, webauth.cfc, index.cfm and pubkey2.crt.
* All Coldfusion files at or below the directory should now be protected. If you wish to protect binaries etc. then combined use of the Apache/IIS module to protect those directories is suggested.
* All Coldfusion files at or below the directory should now be protected. If you wish to protect binaries etc. then combined use of the Apache/IIS module to protect those directories is suggested.



Revision as of 14:13, 20 March 2013

Tom Corder (tac21) has written a Coldfusion wrapper for the Raven Java Toolkit.

Installation

  • Download the Raven Java Toolkit and extract webauth-toolkit.jar to runtime\jre\lib\ext in the Coldfusion installation directory.
  • Restart the Coldfusion service.
  • Download ravencfc.zip and extract to the directory you wish to protect. It should contain 4 files: application.cfc, webauth.cfc, index.cfm and pubkey2.crt.
  • All Coldfusion files at or below the directory should now be protected. If you wish to protect binaries etc. then combined use of the Apache/IIS module to protect those directories is suggested.

Notes

  • General disclaimer: the files above have been put together for demonstration purposes.
  • The installation has been tested with Coldfusion MX 7.02, 8, 9 and 10.
  • It is good practice to move the webauth.cfc file to a non-public filepath on production servers.