Issue

When using an external web server with Macromedia ColdFusion MX, it's possible to enable verbose web server connector logging. The information that is logged with this feature can be useful when troubleshooting issues with the web server connector. This logging is available for ColdFusion MX Server configuration or ColdFusion MX in the J2EE configuration on JRun.

NOTE: Verbose logging should be used only as needed and should not be used for an extended period of time in a production environment since this not only produces large logs but also impacts performance. It is also possible for an attacker to exploit a buffer overflow in the verbose logging module and crash the web server.

Solution

Follow the instructions below to enable verbose connector logging for your web server.

Note: The web server must be restarted in order for changes to take effect.

IIS

Modify the jrun.ini (or jrun_iis6_wildcard.ini on Windows 2003) file located in the appropriate subdirectory undercf_root\runtime\lib\wsconfig\, for example \CFusionMX\runtime\lib\wsconfig\1. Set Verbose to true. Log data will be stored in the same directory as the jrun.ini file and will be labeled according to the date (for example, jrun040525.log). Note that if you have more than one web server configured for use with ColdFusion, each web server will have its own numbered configuration directory.

For example:

verbose=true scriptpath=/JRunScripts/jrun.dll serverstore=C:/CFusionMX/runtime/lib/wsconfig/2/jrunserver.store bootstrap=127.0.0.1:51010 apialloc=false ssl=false ignoresuffixmap=true #errorurl=<optionally redirect to this URL on errors> 

Apache

Modify the JRun Settings section in the Apache httpd.conf file. Set JRunConfig Verbose to true. Log data is written to the Apache error.log file.

For example:

 # JRun Settings LoadModule jrun_module "C:/CFusionMX/runtime/lib/wsconfig/1/mod_jrun20.so"<IfModule mod_jrun20.c> JRunConfig Verbose true     JRunConfig Apialloc false     JRunConfig Ssl false     JRunConfig Ignoresuffixmap false     JRunConfig Serverstore "C:/CFusionMX/runtime/lib/wsconfig/1/jrunserver.store"     JRunConfig Bootstrap 127.0.0.1:51010     #JRunConfig Errorurl <optionally redirect to this URL on errors>     AddHandler jrun-handler .jsp .jws .cfm .cfml .cfc</IfModule mod_jrun20.c> 

iPlanet 6

Set verbose to true in the iPlanet magnus.conf file. Log data is written to the iPlanet error.log file.

For example:

 Init fn="load-modules" shlib="C:/CFusionMX/runtime/lib/wsconfig/3/jrun_nsapi35.dll" funcs="jruninit,jrunfilter,jrunservice" Init fn="jruninit" serverstore="C:/CFusionMX/runtime/lib/wsconfig/3/jrunserver.store" bootstrap="127.0.0.1:51010"verbose="true" apialloc="false" ssl="false" ignoresuffixmap="false" 

Additional Information

• JRun 3.x: How to Read Verbose JRun Connector Logs

Products affected