cffile and different network domains

[Guest]

Hello,

We currently have a document system that is controlled by coldfusion.  Basically, all the documents (ie pdf, xls, doc) reside in a directory on a server specifically designated as a fileshare server.  The web server(s), which runs coldfusion 9.0.1 sit on the same network as the fileshare and the coldfusion app is set up using a domain user to access the fileshare.  We access the fileshare using the cffile tag, save a copy of the document on the local webserver and then pass it down using the cfcontent tag.

To tighten security, we want to move the fileshare into a different domain, once we do that we won't be able to use cffile to access the server since it will be in a different network domain.  What options do we have to access the file share?  Will we have to do something with cfhttp or cfftp?  I am concerned that using either will cause performance hits compared to what we do now.  Any advice would be helpful.

Thanks

Scav.

[Owainnorth]

Yup, if you don't have file-level access it's CFFTP or CFHTTP. No way of telling the speed without testing it though.

[Reed_Powell-ttnmOb]

Moving the fileshare to another domain should not cause a problem - you just need to add the domain account that CF is running under to list of users with access to the directories you are using on the fileshare.  Don't forget to also add it to the users allowed to use the share that you are using to access the fileserver.  Another approach is to greate a global group, give it access to the directories and share on the fileserver, and then add the CF user account to that group.

good luck

reed

[Reed_Powell-ttnmOb]

WHen you say "different network domain" just what to you mean?  A different domain in the NT security sense, or a totally disconnected physical network?  My response presumed the former.  As long as the two networks have connectivity and a common AD then you should be able to do what I said.

-reed

[Guest]

The domains are virtual domains on the same network, but 1 domain is the DMZ and the other is behind firewall.  No file level ports between them.  Looks like we will need to do cfhttp or cfftp.

[mtnhomes]

Forgive me, we are facing a similar issue - what is "common AD"? We are trying to add CFFILE connectivity between a "cloud server" and a physical server within the same hosting network (intermedia.net). Previously we had the CFFILE tag working very well between two physical servers, but on the same domain. Any suggestion?