Change ColdFusion Admin password

[LouieWarren]

I have a rarely used server that I now need to start using.   I upgraded to CF 10 last year.   I assigned a password and was able to add all the patches available.  I logged out and haven't needed to login since.  I am now having to set up another connection.  When I attempted to login, I used the password that I had stored in a spreadsheet I have on the server; so I know it's good.   I used the password reset tool in the bin directory.  It asks me if I want to change the admin password or change admin component; I select change admin password.   I change the password and verify it.  It then asks me to change the RDS password, which I do.  All examples I've seen show a message coming back saying it was changed.  Mine does not give that message.  Instead, after the RDS password confirmation, it exits the tool and the password is never changed.   The one thing I don't really understand is why the password is no longer valid when no one but me has been on this server since the last time I used it.   Can anyone help me understand what I've done wrong?   Thanx.

[haxtbh]

This might be due to the mimeType extension in the web.config. This does affect CF11, cannot remember if it affects CF10 though. Worth a quick check if you are sure the password is correct.

Can you give this a go:

• Navigate to the webroot of your site.
• Take a backup of web.config and open it with text editor (notepad etc)
• Comment the entry for mimeType extension of ".air" like <!--<mimeMap fileExtension=".air" mimeType="application/vnd.adobe.air-application-installer-package+zip" />-->
• Save the file and restart IIS.
• Launch CF Admin and try to login.

[LouieWarren]

Here is the file.  I don't see what you're talking about.

<configuration>

  <system.web>

    <customErrors mode="On" />

    <httpHandlers>

      <add verb="*" path="*.asax" type="System.Web.HttpForbiddenHandler, System.Web, Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

      <add verb="*" path="*.ascx" type="System.Web.HttpForbiddenHandler, System.Web, Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

      <add verb="*" path="*.ashx" type="System.Web.HttpForbiddenHandler, System.Web, Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

      <add verb="*" path="*.asmx" type="System.Web.HttpForbiddenHandler, System.Web, Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

      <add verb="*" path="*.aspx" type="System.Web.HttpForbiddenHandler, System.Web, Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

    </httpHandlers>

  </system.web>

</configuration>

[haxtbh]

What version of IIS are you using? What mode are you running your application pool in if IIS 7+ ?

[LouieWarren]

The server is Windows Server 2003, so 6.

[haxtbh]

Right Click on the website in IIS and go to Properties. Go to the HTTP Headers tab and click the Mime Types button at the bottom.

Do you see  ".air"  "application/vnd.adobe.air-application-installer-package+zip" in the list?

[LouieWarren]

Nothing in the list.  It's completely blank

[Anit_Kumar]

Here are possible workarounds, you may try:-

• Try an alternate browser (issue primarily occurs with IE).
• Try alternative address http://127.0.0.1:port_no/CFIDE/administrator/index.cfm or http://localhost:port_no/CFIDE/administrator/index.cfm or http://ip:port_no/CFIDE/administrator/index.cfm.
• Try the passwordreset.bat and then try with the same ip or loopbak ip address.
• Try a different server and remotely access the server http://ip:port no.
• Enable internal/built port for ColdFusion and then try http://localhost:8500/CFIDE/administrator/index.cfm, where 8500 is the internal port for ColdFusion.

        Note:- Enabling internal/built port would require a ColdFusion Application Server restart.

The possible reason of this behavior is the CFID and CFTOKEN getting changed from the request start to request end. To find the cause, you can try running Charles Tool and follow the below steps:-

1. First of all stop all http request.
2. Close all browsers.
3. Install Charles proxy.
4. Start Charles proxy.
5. Requests few times for http request (The CF Admin URL) to record its in-depth in Charles session/file.
6. Then save those Charles session/file and review them for error/mistake in component and interface.

Hope this helps

Regards,

Anit Kumar