Lucee server admin - cannot access /lucee/admin/server.cfm

dev support
1

Hi,

I made changes to the Lucee admin under Security > Access. Under CFML Environment I changed File access from all to local.

After that I wanted to change the location of my WEB-INF directory so I made changes to the param-value tag under the CFMLServlet section in the file /opt/lucee/tomcat/conf/web.xml. After that I restarted Lucee but when I tried to access the admin I got a http 500 error.

Then I went back on the changes in the web.xml file, restarted Lucee again and now I can access lucee/admin/web.cfm (I get the login screen), but when I try to access /lucee/admin/server.cfm I get this error: can’t access [/opt/lucee/tomcat/lucee-server/context/userdata] directory must be inside [/opt/lucee/tomcat/webapps/ROOT], access is prohibited by security manager.

Does anybody know why this is happening?

Thanks!

OS: AlmaLinux 8.4
Java Version: 11.0.6 (AdoptOpenJDK) 64bit
Tomcat Version: Apache Tomcat/9.0.31
Lucee Version: 5.3.8.206

1 Like
2

stop lucee / tomcat
remove the WEB-INF file(s) in webroot and where you had something changed
start lucee
the WEB-INF will be recreated with the correct permissions.

3

https://luceeserver.atlassian.net/browse/LDEV-3906

4

Thank you Terry,

Removing the WEB-INF folders didn’t solve my issue.
I had to manually change the administrator file access in the …/lucee-server/context/lucee-server.xml file.

5

Thank you for the reply @Zackster!

This link helped me realize that setting the file access = local (under Security > Access in the Lucee Admin) caused my issue.

6

Kennt jemand die Stelle in der Konfigurationsdatei? Ich bin blind…