Skip navigation
Currently Being Moderated

cffile and different network domains

Mar 30, 2012 6:09 AM

Hello,

 

We currently have a document system that is controlled by coldfusion.  Basically, all the documents (ie pdf, xls, doc) reside in a directory on a server specifically designated as a fileshare server.  The web server(s), which runs coldfusion 9.0.1 sit on the same network as the fileshare and the coldfusion app is set up using a domain user to access the fileshare.  We access the fileshare using the cffile tag, save a copy of the document on the local webserver and then pass it down using the cfcontent tag.

 

To tighten security, we want to move the fileshare into a different domain, once we do that we won't be able to use cffile to access the server since it will be in a different network domain.  What options do we have to access the file share?  Will we have to do something with cfhttp or cfftp?  I am concerned that using either will cause performance hits compared to what we do now.  Any advice would be helpful.

 

Thanks

Scav.

 
Replies
  • Currently Being Moderated
    Mar 30, 2012 6:11 AM   in reply to Scavanger26

    Yup, if you don't have file-level access it's CFFTP or CFHTTP. No way of telling the speed without testing it though.

     
    |
    Mark as:
  • Currently Being Moderated
    Mar 30, 2012 6:37 AM   in reply to Scavanger26

    Moving the fileshare to another domain should not cause a problem - you just need to add the domain account that CF is running under to list of users with access to the directories you are using on the fileshare.  Don't forget to also add it to the users allowed to use the share that you are using to access the fileserver.  Another approach is to greate a global group, give it access to the directories and share on the fileserver, and then add the CF user account to that group.

     

    good luck

    reed

     
    |
    Mark as:
  • Currently Being Moderated
    Mar 30, 2012 6:39 AM   in reply to Reed Powell

    WHen you say "different network domain" just what to you mean?  A different domain in the NT security sense, or a totally disconnected physical network?  My response presumed the former.  As long as the two networks have connectivity and a common AD then you should be able to do what I said.

    -reed

     
    |
    Mark as:
  • Currently Being Moderated
    Dec 7, 2013 4:54 PM   in reply to Reed Powell

    Forgive me, we are facing a similar issue - what is "common AD"? We are trying to add CFFILE connectivity between a "cloud server" and a physical server within the same hosting network (intermedia.net). Previously we had the CFFILE tag working very well between two physical servers, but on the same domain. Any suggestion?

     
    |
    Mark as:

More Like This

  • Retrieving data ...

Bookmarked By (0)

Answers + Points = Status

  • 10 points awarded for Correct Answers
  • 5 points awarded for Helpful Answers
  • 10,000+ points
  • 1,001-10,000 points
  • 501-1,000 points
  • 5-500 points