MACROMEDIA COLFUSION MX 7-CFML Podręcznik Użytkownika Pobierz pdf (Strona 34)

BlueDragon 7.1: Deploying CFML on ASP.NET and the Microsoft .NET Framework 29

sources. These datasource connections use native ADO.NET drivers for optimal performance.

See the User Guide for more details on configuring and managing datasources. For other infor-

mation on advantageous differences regarding datasources in the .NET edition, see section 4.2.

5.4 Securing the BlueDragon Admin Console

This section applies to BlueDragon.NET when deployed on IIS 5.1 on Windows XP or IIS 6.0

on Windows Server 2003; it does not apply to BlueDragon.NET when deployed on IIS 7.0 on

Windows Server 2008 or Windows Vista.

There are several ways in which you may want to secure the BlueDragon admin console, as dis-

cussed in this section.

5.4.1 No Admin Console Password Defined Upon Installation

Note that upon installation there is no default password defined for the BlueDragon Admin con-

sole(s). It’s critical that before deploying on a public-facing server you set a password for your

web site and any virtual directory or directory declared in IIS to be an application. Use the admin

console’s available General>License & Security link which has a field for entering the

Administration Console Password.

5.4.2 Changing the Admin Console URL Path

As explained at the start of this chapter, the BlueDragon Admin UI is accessed with

/bluedragon/admin.cfm, appended to the URL for the web site, virtual directory, or direc-

tory declared in IIS to be an application.

What if you would like to hide or change the default URL path for the Admin console, for secu-

rity purposes? As discussed in section 5.2.4, there is no directory you can rename as you may

have from your prior ColdFusion experience. You can rename the path to be used, however, by

manually editing the appropriate bluedragon.xml file, whose location for a given web appli-

cation is discussed in section 5.2.2.

In this file, under the <file><application name="admin"> node, simply change the value

of the <context> element from bluedragon to something else. If it was changed to

/bdadmin, then the path to append to the site/application URL would be

/bdadmin/admin.cfm.

5.4.3 Restricting Admin Access by IP Address

As a further security precaution, you can control who may access the Admin Console by way of

IP address filtering, either by changing values in the admin console itself (under

General>License & Security, in the field Allow IPs) or by editing the

bluedragon.xml file itself (as discussed in 5.2.2), modifying the entry for

<server><file><application name="admin"><name>admin</name><allowedips>

</allowedips>

The value list provided may be either an address or a range (including support for asterisks, as in

192.*.*.*). If you want to provide a list of addresses or ranges, separate them with commas.

1 2 ... 29 30 31 32 33 34 35 36 37 38 39 ... 55 56

Brak uwag

MACROMEDIA COLFUSION MX 7-CFML Podręcznik Użytkownika Strona 34