security service is not available - coldfusion

I've installed ColdFusion 11 in my workstation, connnected CF with IIS webserver. Also upgraded CF11 to its 13th update. It was ran fine on the day I've installed ColdFusion. But from the next day, when I launch ColdFusion administrator or, any cfm pages from the webroot directory, it is giving the following error.
HTTP Error 500.0 - The Security service is not available.
While checking coldfusion logs, I found the following message,
coldfusion.server.ServiceFactory$ServiceNotAvailableException: The
Security service is not available.
It happened twice, last time also same problem, but I've uninstalled and reinstalled, now again same problem.
So how can we fix the above error and make the CF to work?

Related

404 not found after installed cyberpanal

I try to install cyberpanal in digitalocean droplet, but it does not install successfully.
After that when i visited my website a '404 not found' default page from LiteSpeed is shown. Also the Apache is not running
Sample Image
If you have an issue with installing the CyberPanel, please consider launching a CyberPanel from the marketplace directly. It should be much easier for you to setup a server.
CyberPanel uses OpenLiteSpeed as a default web server, so you should not expect an Apache run by default.
Before visiting the page, did you create a website on the control panel yet? If not, then a returned 404 status code is expected.
More, https://cyberpanel.net/docs/2-creating-website/
If you have more question for CyberPanel, I'd recommend you ask in their forum https://community.cyberpanel.net/

Django app on Windows Server 2012 - HTTP Error 500.0 - The FastCGI process exited unexpectedly

I setup a django "hello world" app IIS (Windows Server 2012). The application is run successfully using the Django web server. However, when I tried to install in on IIS (following the instructions provided here) I get an HTTP 500 error with the message "python.exe - The FastCGI process exited unexpectedly".
I have seen numerous related posts on stackoverflow, but nothing seems to work for me. Based on the guidance
I have checked file permissions on both the app and virtual environment folder but they in my opinion this should not be the issue as the users IUSR and IIS_IUSRS can Read & execute, Read and List folder contents.
I have tried also to run wfastcgi-enable based on the instructions provided by this post but I get the error "ensure your user has sufficient privileges and try again". Please note that I tried running it both from an "elevated" command line and also power shell with no results.
I have reinstalled python to make sure it is installed for "all users" (as suggested by this post) but I get an error "0x80070659 - This installation is forbidden by system policy".
I looked in the Event viewer but I could not find something useful.
My questions:
Is there a specific log that I should check? How could I find it?
My django app does not have a web.config file. Should I create one?
My setup: Windows Server 2012 R2, IIS 8.5, Python 3.9.1

bootstrap/autoload.php - Failed to open stream: permission denied

I'm working with a website running on laravel. The site works fine on my local through Homestead, no problems.
Recently, I pushed the git repo up to a server that never had this site running on it before. I set everything up right (had some nginx config issues for a while, but got those all sorted out). Nginx has the public folder set as the site root, so it hits the proper index page when you load the page.
What I'm getting is a 500 error. My error logs reveal the following is the reason:
site_root/public/../bootstrap/autoload.php - Failed to open stream: permission denied
in
site_root/public/index.php on line 22
I can confirm that the bootstrap folder and the autoload.php file are both accessible by the web user, and have permissions that should allow access.
I've read a few cases online of people solving this issue with a 'composer install'. I tried updating composer, doing an install, and dumping its cache. I also tried removing the vendor folder (which had been a part of the git repo), and running composer install to regenerate it. None of these have worked. Happy to supply any info that will help. This is Laravel 5.2 running on Ubuntu Server 14.04 with nginx, all on an AWS box.
Solved it. This was actually an issue with site-wide permissions. They were set to 770 instead of 775. I suspect that I can and should restrict them more. For now, I'm just happy to have it loading again.
Moral of the story is to check your permissions site-wide, not necessarily just on the file which gives you the fatal error. You may continue to get the same fatal error, despite permissions being wide-open on the mentioned file. If so, look for permissions issues elsewhere.

Error "Failed Signature verification" while attempting to update via CF10 Administrator

When you attempt to apply any hot fixes via the ColdFusion 10 Administrator you continuously get:
Error occurred while installing the update:
Failed Signature verification
You may have even validated the files and manually and placed them in the hf-updates directory at which point the CF10 admin page still shows the "Install" option, but again you receive the same error.
This error means you've forgotten to apply the ColdFusion 10 Mandatory Update which updates the certificate used to validate install packages.
From Adobe's website:
All ColdFusion updates are now signed with the new code signing
certificate because of a code signing certificate revocation. This
mandatory Update ensures that your current installation of ColdFusion
10 is updated with the new code signing certificate. This update is
also required for proper functioning of the auto update functionality
in ColdFusion 10. Adobe strongly recommends that you apply this
update.
Once the update has been installed (you can find the JAR install instructions here) the service will be restarted and you will be able to apply subsequent updates via the ColdFusion administrator.
Edit:
Run the command prompt as Administrator:
Navigate to your jar file, and run the following command to run jar file:
D:\>java -jar cf10_mdt_updt.jar
#UncleSol,
I also encountered the issue after having installed the mandatory update (cf10_mdt_updt.jar). After successfully applying the mandatory update, CF wanted to apply update 12 as the first update, which is where I encountered this issue, so I downloaded and manually installed Update 11 from this page:
https://helpx.adobe.com/coldfusion/kb/coldfusion-10-updates.html (installed in exactly the same manner as NotJustClarkKent's instructions)
After manually installing update 11, I was able to use the CF Updater to install the rest of my updates.
Hope that helps.

Coldfusion JRUN 4 Server - how to stop it

I got halfway through installing a security patch for CF801 ent (http://kb2.adobe.com/cps/890/cpsid_89094.html) on a windows 2k8 server + iis.
I made a backup copy of the WEB-INF directory as instructed. Then I tried to merge the new WEB-INF provided by Adobe. It hung up on one particular file (C:\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\lib\cfmx_bootstrap.jar), with the error:
Cannot delete output file (above file).
So, I tried renaming the file and got the error:
The action can't be completed because the file is open in jrun.exe.
I have stopped the server via JRUN launcher, so where could the file still be open. I tried rebooting the server in case there was something still running in the background. Error persists.
I'm new to enterprise multiserver installs, so I may be missing something basic.
Resolved: Stopping the server instance via JRUN Launcher doesn't shut the coldfusion server. I needed to stop it in services, which I tried originally, but I wasn't used to the way CF with JRUN was appearing in the services (It appears as "Macromedia JRUN CFusion Server", whereas I had been looking for services beginning with "ColdFusion" or "Adobe"). Once I found the service and stopped it, I was able to overwrite the file.
Offhand, I would try setting all the ColdFusion services to start manually instead of automatically, and reboot. Install the security pack, set the services back to start automatically, and reboot again.
HTH.