Wednesday, January 06, 2010

What if you forget the ColdFusion Admin Password?

Imagine suppose you have forgotten the admin password and cannot log in to ColdFusion Administrator. Here is a solution for this, follow the below steps.

1. Make a backup copy of CF_HOME\lib\neo-security.xml file

In case of multi-server editions, the path is:
C:\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\lib\neo-security.xml
2. Open the neo-security.xml file in a text editor and change 'true' to 'false' for the admin.security.enabled variable tag. For example, search the file for "admin.security.enabled" and change the entry as follows:


3. Restart the ColdFusion application server.

You should now be able to bypass the login to the ColdFusion administrator. You can reset the password by choosing Security > Administrator.

0 comments:

Wiredwizrd

in memphis, tn morgan todd Located in Raleigh, NC Morgan Todd has over 15+ years experience, as a Sr. IT Analyst and Freelance Developer Working in lead positions with various high energy companies, and Marketing Firms Securing and Developing enterprise level applications A Professional Penetration Tester, performing code review and pen testing for PCI_DSS, HEPA, and SOXS compliance, functionality, and best practices. for various corporate clients.