nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Channel.Security.Error from ArcGIS Sever MapManager

ThomasMcCracken

Hi everyone,

I get an error window when I open my Flex Viewer application that says:

"Layername layer failed to load: Fault code: Channel.Security.Error
Fault info: Security error accessing url
Fault details: Destination: DefaultHTTP

The crossdomain.xml is on the GIS and web server and is correct. In fact, another
GIS Server with the exact same crossdomain.xml brings in the service in the app just fine. I tested using both SOAP and REST services and get the same result. I also get the same error from my local web client on my machine rather than the web server so I'm not sure what's going on. Any suggestions?

Thanks,

Thomas McCracken
GIS Analyst
Georgia Power Company

Find more posts tagged with

Accepted answers

ThomasMcCracken

After setting Secure='false' for both domain and headers my services are now working in the viewer perfectly.

All comments

RobertScheitlin__GISP

So he tried in the root of the web server (i.e. wwwroot for IIS)? Are you guys using a reverse proxy?

VincentMiller

Our network administrator cannot figure out this problem He doesn't know where to place the crossdomain.xml file. He's tried several locations, but he cannot figure it out. Please help him!!

MichalKalafarski

Problem solved.

In my case (HTTPS only, selfsignedcertificate) helped:

1) Setting up ssl in IIS 7.5 (https://*:443)
2) Configuring ArcGIS WebAdaptor, in GIS Server Url field: https://<number ip>:6443
3) Editing crossdomain.xml

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
    <site-control permitted-cross-domain-policies="all"/>
    <allow-access-from domain="*" secure="false"/>
    <allow-http-request-headers-from domain="*" headers="*" secure="false"/>
</cross-domain-policy>

4) In ArcGIS Viewer for Flex 3.5 I added services from https://<number ip>/<webadaptor name>/rest/services (URL address with "localhost" or "server name" will work but only on server machine).

StephanieSnider

kalafarskim,
Here's the set of instructions that I followed for installing a trusted certificate. There's a bit of vodoo involved with how the certificate is created and provided by the issuer, but you should receive three certificates - local, intermediate and root. They are all "one" certificate but different levels. You need to import all levels, but the "root" certificate is the main one. It is not an exact science, but this is the ESRI recommended way of doing it. Good Luck!

http://resources.arcgis.com/en/help/main/10.1/index.html#/Enabling_SSL_using_a_new_CA_signed_certificate/0154000005wr000000/

MichalKalafarski

chiliblast,
Are you working with secure map services? If so, are you using a trusted certificate or a self-signed certificate? I had errors working with the Flex Viewer using a connection to ArcGIS Server with just a self-signed certificate. We had to switch to using a "trusted certificate" on the ArcGIS Server (server hosting the map services) in order for the Flex Viewer (on another server) to accept the secure map service without errors.

I'm new with configuration certificates. Can you write step by step how to switch self-signed certificate to trusted certificate?

StephanieSnider

chiliblast,
Are you working with secure map services? If so, are you using a trusted certificate or a self-signed certificate? I had errors working with the Flex Viewer using a connection to ArcGIS Server with just a self-signed certificate. We had to switch to using a "trusted certificate" on the ArcGIS Server (server hosting the map services) in order for the Flex Viewer (on another server) to accept the secure map service without errors.

UmarSharif

I am developing a flex application. I am trying to get xml data from cross domain. Data service is at linux machine. It works fine in development mode. But as I host swf file even on same development machine, it gives channelsecurity.error I have placed crossdomain.xml at root of the flex server and it is working ok. But still I am getting channelsecurity.error

PiotrSkworzec

Hi,

I have the same problem with crossdomain.xml.
I've been using ArcViewer for FLEX.
All my REST services are on HTTPS server.
I can see my services on my browser i.e. https://myserver/ArcGIS/rest/services/TEST1/MapServer
I can also see in my browser https://myserver/crossdomain.xml

When I run Filddler I recieve crossdomain.xml 403 error. Why?
Firebug says crossdomain.xml aborted.

Crossdomain.xml

<cross-domain-policy>
     <site-control permitted-cross-domain-policies="all"/>
     <allow-access-from domain="*" to-ports="*"/>
     <allow-http-request-headers-from domain="*" headers="*"/>
</cross-domain-policy>

I have Windows Server IIS7.5 ASP.NET 3.5

StephanieSnider

I had to also allow headers in my cross domain file. This worked for me:

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
<allow-access-from domain="*" to-ports="*" />
<allow-http-request-headers-from domain="*" headers="*"/>
</cross-domain-policy>

This suggestion comes from the Adobe Community Forums at http://forums.adobe.com/thread/223999. Also after updating the crossdomain file, I recycled the default app pool in IIS. Closed and reopened the ArcGIS Viewer for Flex 3.1. No more channel security error.

RobertScheitlin__GISP

Michael,

Well the problem is definitely not 3.0 as I am using a reverse proxy (Apache) and FV 3.0 and it is running fine. The biggest mistake people make when using a reverse proxy is they use the internal server name in their Flex Viewer main config.xml instead of the external fully qualified server name that they are suppose to use. If you already have the external name of your ArcGIS Server configured in your main config.xml them let me know and I will attempt to provide more guidance.

MichaelZierten

Hi There

We have a offsite contractor building Flex application for our company. He hosts application on his server and ArcGIS server is on our
internal server. He uses map services by with external IP and crossdomain file. He built on version 2.3.1 and everything was working fine. Recently he migrated to Flexviewer version 3.0 and we are getting the same error:

[RPC Fault faultString="Security error accessing url" faultCode="Channel.Security.Error" faultDetail="Destination: DefaultHTTP"]

It is working fine on his end but we are getting this error. The directory with 2.3.1 is working fine and we can see all the map services

Thanks

I have had the same experience. I am using this with a reverse proxy, and I am experiencing the same error with Flexviewer 3.0 applications. It appears to be an issue with 3.0. I have tried it with crossdomain.xml on the reverse proxy machine and with an apache config that points it to the internal server.

DeeptiPuri

Hi There

We have a offsite contractor building Flex application for our company. He hosts application on his server and ArcGIS server is on our
internal server. He uses map services by with external IP and crossdomain file. He built on version 2.3.1 and everything was working fine. Recently he migrated to Flexviewer version 3.0 and we are getting the same error:

[RPC Fault faultString="Security error accessing url" faultCode="Channel.Security.Error" faultDetail="Destination: DefaultHTTP"]

It is working fine on his end but we are getting this error. The directory with 2.3.1 is working fine and we can see all the map services

Thanks

Bakht_AliMohammad_Khan

My problem is solved.. by replacing local host with machine name

url="http://Bakht-PC/ArcGIS/rest/services/Qasiba_BoundaryNew/MapServer"/>

Thanks...

Bakht_AliMohammad_Khan

ok. Thanks you very much.. I will try once again..

RobertScheitlin__GISP

Bakht Ali Mohammad Khan,

You need to use a tool like fiddler or firebug and see if the request for the crossdomain.xml is successful or not. Also you need to be sure you are not mixing ip addresses and machine names you have to use one or the other.

Bakht_AliMohammad_Khan

Thanks you very much.. I do the same as you give instructions and replaced the crossdomain.xml file in wwwroot folder on my server but nothing happen. I have still this problem.

RobertScheitlin__GISP

Bakht Ali Mohammad Khan,

As the link i my last post has all you need is :

<?xml version="1.0"?> <!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd"> <cross-domain-policy>     <site-control permitted-cross-domain-policies="all"/>     <allow-access-from domain="*"/> </cross-domain-policy>

The above needs to be in a file names crossdomain.xml (not cross-domain.xml) in your C:\inetpub\wwwroot folder. That is it.

Bakht_AliMohammad_Khan

rscheitlin Thanks you for response.
Please still some problem to me.
My web files are located in : C:\inetpub\wwwroot
My Machine name is GISSERVER.
I am using .NET.
My ip is 192.165.4.100
   other systems 101, 102, 103.
The cross-domain.xml file is as....

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
    <site-control permitted-cross-domain-policies="all"/>
    <allow-access-from domain="*"/>
</cross-domain-policy>    ( please clearly mark what I write here allow-access-from domain="*">
</cross-domain-policy>

Thanks..

RobertScheitlin__GISP

Bakht Ali Mohammad Khan,

The crossdomain.xml needs to be one the machine that has ArcGIS Server on it.

Find info concerning crossdomain.xml in the documentation:

http://help.arcgis.com/en/webapi/flex/help/017p/017p0000001w000000.htm

Bakht_AliMohammad_Khan

After setting Secure='false' for both domain and headers my services are now working in the viewer perfectly....

Please mention the path for The crossdomain.xml file. where to past it and also mention it will be on the server machine or on all other hosts machines.

Secondly from where I can get The crossdomain.xml file because it is not available in my flex viewer 2.5.

Thanks...

ThomasMcCracken

After setting Secure='false' for both domain and headers my services are now working in the viewer perfectly.

ThomasMcCracken

How are you setting the security equal to false in the crossdomain xml file? Is it a tag within cross-domain policy? Does it work for all your web services or just random ones?

TimTaylor2

Fiddler is indicating issues with the crossdomain file, this error seems to only occur on access from an external domain but affects access to a seemingly random set of services within the map

Replaced the crossdomain file with a new one with security = false and the issue seems to stop for a set amount of time but reoccurs

ThomasMcCracken

Thanks. It's worth a shot; if I find anything I'll make sure to post it.

RobertScheitlin__GISP

Thomas,

The last thing that I suggest before telling you to call esri tech support is you can try a HTTP traffic utility like fiddler to watch for what URL requests are not returning.

http://fiddler2.com/fiddler2/

ThomasMcCracken

That's right. We use the server name and the crossdomain policy has the * wildcard.

I did not realize that about ArcMap/Catalog. That's good to know, thanks.

RobertScheitlin__GISP

Thomas,

actually the fact that it works in ArcMap and ArcCatalog has little relevance as they both use SOAP and not the REST endpoint.
So you are not using localhost and you are not specifying the IP address in one place and the server name in another, such as IP in the crossdomain and servername in the url for the layer?

ThomasMcCracken

Yes, I can get to the rest endpoint and the services work within ArcMap/Catalog.

RobertScheitlin__GISP

So guys,

When you type the REST URL of one of your map services in the address bar of your browser does it bring up the REST Service Directory?

i.e. http://gislap134/ArcGIS/rest/services/highway/MapServer (do not use local host and you can not mix and match IP addresses and machine names).

ThomasMcCracken

No, I haven't found a solution yet. I'm setting up ArcGIS Server on another server with IT now to see what results we get. We tested with another internal server before with someone else's services and they came in fine. We also tried using mxd's and msd's and got the same result with both. SOAP/REST didn't matter either. If I figure anything out I'll post it, but as of now I haven't a clue.

Thomas

TimTaylor2

Have you found a solution to this, I am running into the same problem even after setting the crossdomain security policy to false

Join the Conversation

Signed in members can post, follow updates, and more. New here? Register a free account.

Quick Links

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.