LiveDocs Comments - coldfusion - 6 - CFML_Reference - Tags-pt165.htm

coldfusion/6/CFML_Reference/Tags-pt165.htm

mwaddell — 2003-08-12T08:00:49

I have been unable to obtain usable data from any binary encoded LDAP attributes, CFMX reports the IsBinary as NO.

coldfusion/6/CFML_Reference/Tags-pt165.htm

Olivier Boël — 2003-05-17T10:08:00

Got an answer!!!

It is definitely a regression, and we are opening a bug report on it. However, there is bug number yet, and I have no idea when it will be resolved.

coldfusion/6/CFML_Reference/Tags-pt165.htm

Olivier Boël — 2003-05-08T10:57:00

MX comes with bugs :

The following code works fine with CF 4.5 but only shows the first value of multi-value fileds (example : memberOf) when executed by (MX Updater 3) although I tried different values for the SEPARATOR option :

SERVER = "epluxsdc01.ep.parl.union.eu"
USERNAME = "CN=username,OU=Users,OU=EICI,DC=ep,DC=parl,DC=union,DC=eu"
PASSWORD = "password"
ACTION = "QUERY"
NAME = "ADRESULTS"
START = #start#
FILTER = #filter#
SCOPE = "subtree"
ATTRIBUTES = "*">

#name#

#value#

Bug reported to MM. Still no reaction...

coldfusion/6/CFML_Reference/Tags-pt165.htm

uzma — 2003-05-01T06:04:00

The discussion helped but not completely

coldfusion/6/CFML_Reference/Tags-pt165.htm

devin — 2003-04-23T20:10:00

After useing keytool -import you must restart the coldfusionMX server.

To get the x509 file.

Go to the ldap sever with Microsoft Exploder like this.
https//your.ldapserver.com:636

* Double click on the lock icon
* Goto details tab
* Click on COPY TO FILE
* Choose base64 option and save the file
* now you have a file to use with the import command.

coldfusion/6/CFML_Reference/Tags-pt165.htm

draum — 2002-08-23T20:31:00

It appears that "separator" attribute is ignored when updating multi-value attributes. Also, when using SSL over LDAP you *must* specify the port number (636).

coldfusion/6/CFML_Reference/Tags-pt165.htm

ctina — 2002-07-19T20:28:00

Update from Macromedia, re public servers:
There is a list of public servers at this URL:
http://www.emailman.com/ldap/public.html
For example:
University of Guelph
(Some users have reported that the ldap.bigfoot.com server, used in the example code, is not available)
Christina Lamkin, CF documentation team

coldfusion/6/CFML_Reference/Tags-pt165.htm

sgilson102 — 2002-07-01T20:00:00

Comment: The following is from the Documentation Additions
Technote 22993 at
http://www.macromedia.com/v1/handlers/index.cfm?ID=22993&Method=Full:

-------------
You no longer need a Netscape Cert7 format certificate store file
(cert7.db) to make a secure LDAP (SSL v2) connection. You can now omit
the second token of the string for the secure attribute of the cfldap
tag that was formally used to specify the location of the cert7.db file,
and just use SECURE="CFSSL_BASIC" instead. This is because cfldap SSL
support in ColdFusion MX now uses Java Secure Socket Extension (JSSE),
and JSSE does not accept cert7.db as a keystore.

This is how it works: ColdFusion MX uses Java Native Directory Interface
(JNDI), the LDAP provider, and an SSL package to create the client side
of an SSL communication. The LDAP server provides the server side. The
LDAP server that cfldap is connecting to using SSL holds an SSL server
certificate. During the initial SSL connection, the LDAP server presents
its server certificate to the client. If the client trusts this
certificate, the SSL connection is established and secure LDAP
communication can begin.

The simplest way to establish this trust is to store the server's
certificate in the jre/lib/security/cacerts keystore of the JRE used
with ColdFusion MX. This certificate is different from cert7.db?this
certificate must be in X.509 format to import it. The simplest way to
import to the client's keystore is to use the keytool command to import
the server's cert into the cacerts store in /jre/lib/security. For
example, enter the following:

keytool -import -keystore cacerts -alias ldap -file ldap.crt

(The keytool utility is in the jre/bin directory and the initial
password is "change it").
-------------------

Kristi Jabbour
Senior Technical Writer
Macromedia

coldfusion/6/CFML_Reference/Tags-pt165.htm

rbils@amkor.com — 2002-06-27T20:51:00

This sentence is not correct:

To use the security = "CFSSL_BASIC" option, you must copy the cert7.db and/or key3.db key files to the default directory location of a user-installed LDAP directory; on Windows, the directory is C:\cfusion\ldap.

There is no C:\cfusion\ldap in CF MX. So, the question remains, what is the default directory in MX for LDAP cert dbs?

coldfusion/6/CFML_Reference/Tags-pt165.htm

rbils@amkor.com — 2002-06-27T20:35:00

The filterconfig attribute mentioned in the history section does not exist in any versions of ColdFusion. Not sure why it is mentioned or what it refers to.