Application Server Solutions for Microsoft IIS and ASP.NET
       solutions   products   partners   company   support   downloads         store
ServletExec Self-Help: FAQ
Back to Search >  Back to Search Results

Faq ID 281
Product BlueDragon
Category Admin Console, Security
Question How can I secure the BlueDragon Admin UI in BlueDragon?
Answer The following are some suggestions:

  1. Password protection:
    Password-protect access to the admin pages by configuring and admin password on the "License & Security" page of the BlueDragon Admin UI

  2. IP Filtering
    Access to the BlueDragon Admin UI can be restricted to particular client computers. To list the ips which will be allowed access, simply add them in a comma-separated list in the BlueDragon Admin UI under License & Security tab. Use the Help button at the top of the License & Security page for specific examples when configuring this option.

  3. Remove the Admin Pages
    You can entirely remove the Admin UI by removing or renaming the .bda file for the Admin UI which is located in the config folder of the BlueDragon installation.
    For example, with BD .NET this would be a file named either admin11.bda or admin20.bda. BlueDragon.NET uses one other other, depending on which version of the .NET framework (1.1 or 2.0) is being used.
    See BD FAQ #332 for info on how to switch .NET framework versions.
    With BD JX, the name of the file is just admin.bda

    If you choose this option, be aware that you must then manually make any changes to the global or individual BlueDragon.xml file (whose location for a given web site or web app is discussed in the BlueDragon/.NET documentation).

  4. Rename the Admin Console
    It is indeed possible to rename the url used to access the BlueDragon Admin console. The default is to append /bluedragon/admin.cfm to the URL for the web site or given virtual directory (or directory configured as a web application, as discussed in the documentation). You can change the path used to call up the Admin console by manually editing the bluedragon.xml.

    (Notice that there is no /bluedragon/admin.cfm file in the web application. BlueDragon uses an internal mechanism, driven by configuration within the bluedragon.xml, to control the URL to be used.)

    Within the <server> <file> element, there is an <application name="admin"> node:

        <application name="admin">
    [...other elements may follow this ...]

    You can simply change the <context> element to something other than bluedragon, then use that in the URL to call up the Admin console (still adding the /admin.cfm after that when typing the URL in the browser, not by adding it in the XML above).

    If you wanted to change the admin console URL for all web apps on the server, apply this change in the global bluedragon.xml admin file.

    Finally, if you change the bluedragon.xml file, you must restart the affected web app for the changes to take effect. See the documentation on how to restart web apps.

company media information terms of use privacy policy contact us