Today was a day of mixed results. Firstly, trying to get Sandboxing working with multiple CFMX instances failed horribly - no matter what I tried I couldn’t get it to work, nor for that matter could a fellow CF’er. The default instance worked fine (with a few tweaks). I think we’ll be knocking on a few MM folk mailboxes cos we’re both convinced it doesn’t work….
As for Verity - success there! In our previous Solaris, CF6 environment we were able to have two CFs talking to the same verity collection but now with CFMX7 it appears this is not possible. I’ve got another day of playing with it tomorrow and probably a massive blog posting tomorrow recounting my exploits but this new verity stuff is pretty cool! I’m not sure what I’ve managed to setup right now, rather I do but i’m not sure the benefits of it - when I’ve figured it out I’ll be back here…
May 31st, 2005 at 9:28 pm
After talking to the ‘other’ CFer involved, it looks like some sort of bizarre Windows permissions issue since he is completely unable to start a second instance (and gets an "Access Denied" error). JRun is not even starting up so it hasn’t gotten to any CFMX code by that point.
June 1st, 2005 at 4:38 am
If you remove the 3 additional JVM arguments that are required for Sandboxing then the additional instances will start up (with their custom jvm.config file).
It’s the addition of the security manager that is causing the error. Why? It’s Windows of course
June 1st, 2005 at 5:02 am
exactly what I’m experiencing. The instance starts fine without the sandboxing arguments as soon as they’re added it barfs. The service is running as the same user in both instances, so the service is able to run as that user without the sandboxing arguments.
June 1st, 2005 at 1:35 pm
Hmm, when you have both instances running, are there really two separate JVM processes running? The only way I can imagine the security arguments on one ‘instance’ interfering with another ‘instance’ is if Windows isn’t really keeping the two JVMs completely separate. I mean, if they’re really separate, they shouldn’t care what arguments each has, right?
Just to check, you’re starting this from the command line with ./jrun -config foo.config -start instancename (rather than ./jrunsvc)?
June 1st, 2005 at 1:41 pm
definitely two instances running when started individually. I see two jrun.exe in taskmanager both running as the specified user. I’ve been using jrunsvc but i will try as you suggest later.
June 2nd, 2005 at 3:19 am
Sean,
exactly the same message when you try and start via jrun or jrunsvc, just it gets written to the console;
C:\JRun4\bin>jrun -config jvm.config_1 -start cfusion7_1
Exception in thread "main" java.lang.ExceptionInInitializerError
Caused by: java.security.AccessControlException: access denied (java.util.Proper
tyPermission jrun.home read)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
at java.lang.System.getProperty(Unknown Source)
at jrunx.kernel.JRun.<clinit>(JRun.java:52)
C:\JRun4\bin>