OS: Windows 11
Java Version: AdoptOpenJDK 11.0.4
Tomcat Version: 9.0.14
Lucee Version: lucee-5.4.5.23
Web Server: IIS
I’m attempting to update my dev machine from Lucee 5.4.3.2 to 6.0.1.83. My initial hurdle was no updates for Lucee or Extensions appearing in the admin. Both pages initially either showed errors or loaded fine but simply did not indicate updates available.
After looking at several posts on here, I downloaded the 6.0.1.83.lco file. Accessing the admin (http://127.0.0.1:8888/lucee/admin/server.cfm) resulted in a “can’t access [C:\lucee\tomcat\lucee-server\context\userdata] directory must be inside [C:\lucee\tomcat\webapps\ROOT | C:\dir1 | C:\dir2 | C:\dir3] access is prohibited by security manager” error. The admin root context file access was set to “all”. The General context was set to “local” and listed those three additional directories. I have several other contexts, but they don’t list those specific custom directories.
I pulled the .lco file, restarted Lucee, logged into the admin, and set the General context file access to “all”, and tried restarting with the .lco file in place again. Same result, including listing those three custom directories which no longer appeared anywhere in my lucee-server.xml file. Setting the root context file access to “local” and adding custom directories also resulted in an error, including the same list of acceptable custom directorie on the error page, even though the root context listed different directories. Adding the “C:\lucee\tomcat\lucee-server\context\userdata” directory to either the General or root context didn’t change anything.
I then removed the 6.0.1.83.lco and dropped in a 5.4.5.23.lco file. This worked beautifully, updating Lucee and a number of its extensions. However, though there were no errors on the admin update pages, they still listed no updates available.
I dropped in the 6.0.1.83.lco file, and I’m back where I started, with the security manager error.
My first question is, does the update process cache security settings somewhere? Nothing I do to the server file access settings (or the lucee-server.xml file) seems to modify the directories Lucee sees as available to the update process.
My second question is, do .lco files work for major version updates?
My third question is…help?
Of note: This is a dry run for eventually updating a live server, so minimally invasive solutions preferred. Thanks!
1 post - 1 participant