pdf ifilter sp_fulltext_service settings dilemma

I've read Mr. Cotter's article on full-text search and as with several other
folks, he mentions the use of the following commands to allow the adobe pdf
ifilter to be used.
exec sp_fulltext_service 'load_os_resources', 1;
exec sp_fulltext_service 'verify_signature', 0;
This works fine. However, a few articles I've read suggest that after you
have added the ifilter, you should restore these less secure values back to
exec sp_fulltext_service 'load_os_resources', 0;
exec sp_fulltext_service 'verify_signature', 1;
Because I want to keep my SQL Server secure, I have run these statements.
However after stopping and starting SQL Server or rebooting, the pdf ifilter
is no longer available to SQL Server full text search. Therefore, no new
pdf's are indexed. Is this the expected behavior? If so, What good is it to
restore the values if you can't index new documents. On the other hand, how
can you justify the security risk by not restoring the values to their more
secure state? Am I missing something here?
Can you direct me to the articles which suggest you can re-enable the
verification of the signatures. My understanding is that these signatures
are verified each time SQL Server or MSFTESQL starts. This is the suggested
behavior.
The danger is that one of the iFilters you load could be a victim of a
buffer overflow or another exploit . While the risk of this happening if
real it is really quite unlikely.
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com
"Dlorbecki" <Dlorbecki@.discussions.microsoft.com> wrote in message
news:DCB580BC-BAC1-47EB-A2A0-F67958DEA29E@.microsoft.com...
> I've read Mr. Cotter's article on full-text search and as with several
> other
> folks, he mentions the use of the following commands to allow the adobe
> pdf
> ifilter to be used.
> exec sp_fulltext_service 'load_os_resources', 1;
> exec sp_fulltext_service 'verify_signature', 0;
> This works fine. However, a few articles I've read suggest that after you
> have added the ifilter, you should restore these less secure values back
> to
> exec sp_fulltext_service 'load_os_resources', 0;
> exec sp_fulltext_service 'verify_signature', 1;
> Because I want to keep my SQL Server secure, I have run these statements.
> However after stopping and starting SQL Server or rebooting, the pdf
> ifilter
> is no longer available to SQL Server full text search. Therefore, no new
> pdf's are indexed. Is this the expected behavior? If so, What good is it
> to
> restore the values if you can't index new documents. On the other hand,
> how
> can you justify the security risk by not restoring the values to their
> more
> secure state? Am I missing something here?
|||Here's one link:
http://activeobjects.blogspot.com/2006/01/sharepoint-services-sql-2005-and-pdf.html
Are you saying not to run the latter two commands? My experience is that
after you do, the pdf ifilter does not function for new documents. However,
then you have the dilemma of the security hole.
"Hilary Cotter" wrote:

> Can you direct me to the articles which suggest you can re-enable the
> verification of the signatures. My understanding is that these signatures
> are verified each time SQL Server or MSFTESQL starts. This is the suggested
> behavior.
> The danger is that one of the iFilters you load could be a victim of a
> buffer overflow or another exploit . While the risk of this happening if
> real it is really quite unlikely.
> --
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
> Looking for a FAQ on Indexing Services/SQL FTS
> http://www.indexserverfaq.com
> "Dlorbecki" <Dlorbecki@.discussions.microsoft.com> wrote in message
> news:DCB580BC-BAC1-47EB-A2A0-F67958DEA29E@.microsoft.com...
>
>
sql

Patch needed for Q178642

Hi there,
Could anyone tell me if there's a patch for the above
mention article?
Thank you
Regards,Keith
Have you tried to search on www.microsoft.com?
"Keith" <leong@.nti.com.my> wrote in message
news:38a601c34059$5d3b72f0$a601280a@.phx.gbl...
> Hi there,
> Could anyone tell me if there's a patch for the above
> mention article?
> Thank you
> Regards,
>

Patch Level

What patch level is:
Microsoft SQL Server 7.00 - 7.00.1141
It SP4 but what Q article is also installed. Looked
everywhere and all I can find is 7.00.1094 which is
SP4+Q815495
Thanks in advanceHi,
I tried looking and could not find anything either.
But there is back door approach: you could look at the
patches installed on the server by going to through the
control panel and going through Add or Remove Programs.
You will be able to see any hot fixes that are installed
on your machine. You could then narrow your search.
hth
DeeJay
>--Original Message--
>What patch level is:
>Microsoft SQL Server 7.00 - 7.00.1141
>It SP4 but what Q article is also installed. Looked
>everywhere and all I can find is 7.00.1094 which is
>SP4+Q815495
>Thanks in advance
>.
>|||It should be 828090
Rand
This posting is provided "as is" with no warranties and confers no rights.

PATCH for Article 817326

I am desperately looking for the patch across the internet
cause i really need this fix basically for WINDOWS
platform listed as follows:
Msbase.jar v 2.2.0030
Mssqlserver.jar v 2.2.0030
Msutil.jar v 2.2.0030
Please advise where can i extract all these patches.
DondonYou need to contact Microsoft product support. As the article states, the
fix is only available directly through them. You won't readily find them on
the Internet because of this.
"Dondon" <dondon@.newspage.com.sg> wrote in message
news:016701c38707$3bd80700$a001280a@.phx.gbl...
> I am desperately looking for the patch across the internet
> cause i really need this fix basically for WINDOWS
> platform listed as follows:
> Msbase.jar v 2.2.0030
> Mssqlserver.jar v 2.2.0030
> Msutil.jar v 2.2.0030
> Please advise where can i extract all these patches.
> Dondon