topic Re: Channel Security error on MapManager in ArcGIS Viewer for Flex Questions

Channel Security error on MapManager

weeyeo — Wed, 08 Jan 2014 18:04:48 GMT

I run into this error message on MapManager for ArcGIS View for Flex web application v3.5 when try to open web application to public to use. I tested this on internal web browser and it works fine only happen if public try to access the site.
Here is the error message I got:

MyLayer layer failed to load: Fault code:
Channel.Security.Error

Fault.info:Security error accessing url

Fault details: Destination: Default:HTTP

I have crossdomain.xml on C:\inetpub\wwwroot folder

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
    <site-control permitted-cross-domain-policies="all"/>
    <allow-access-from domain="*" secure="false"/>
    <allow-http-request-headers-from domain="*" headers="*" secure="false"/>
</cross-domain-policy>

Besides that, I have another custom flex web application open to public using the same secure map services, proxy, and crossdomain without any error or problem at all. Only on ArcGIS Viewer for Flex web application got error message.
Have any ideas for this error message? Thanks.

Re: Channel Security error on MapManager

RobertScheitlin__GISP — Wed, 08 Jan 2014 18:09:35 GMT

wee y,

Are you using the publiclly accessable REST URLs for all your layer urls?

Re: Channel Security error on MapManager

weeyeo — Wed, 08 Jan 2014 18:21:44 GMT

All my map services are secured and is not open to public. I have a custom flex web application which is in older version (Flex 1.3) that open to public and able to access all secured map services through proxy. The only different is the web application in newer(ArcGIS viewer for Flex v3.5) and older version.
Thinking might be cross domain but older version works fine. Thanks.

Re: Channel Security error on MapManager

RobertScheitlin__GISP — Wed, 08 Jan 2014 18:27:48 GMT

wee y,

What I mean is in your main config.xml if you don't have an fully qualified address like:

http://machinename:8080/arcgis/rest/services/myMapservice

what you need (secured map service or not)
http://www.yourdomain.com:8080/arcgis/rest/services/myMapService

Re: Channel Security error on MapManager

weeyeo — Wed, 08 Jan 2014 19:07:14 GMT

Here is the url on my config.xml file:
http://servername/agsGIS/rest/services/Election/MapServer and I am using the same url on my custom flex application, the map services show up. Even thought url not using something you mentioned "http://www.yourdomain.com:8080/arcgis/rest/services/myMapService".
My questions, is the configuration on ArcGIS viewer for Flex have to use different setting on REST URL? Thanks.

Re: Channel Security error on MapManager

RobertScheitlin__GISP — Wed, 08 Jan 2014 19:23:44 GMT

wee y,

You are going to get security errors when your app is running on a url like: http://www.weey.com/mygisapp/index.html and then your main config has a url like http://servername/agsGIS/rest/services/Election/MapServer. As Flex see this as two different sources. That is why you need to have your config.xml use a url like http://www.weey.com/agsGIS/rest/services/Election/MapServer or like you did back in your old public app, use a proxy page.

Re: Channel Security error on MapManager

weeyeo — Thu, 09 Jan 2014 11:25:39 GMT

Actually I am using proxy on both old public web application and current new ArcGIS view for Flex v 3.5. Beside that, use the same REST url. I used Fiddler to see the network traffic, I found that, crossdomain.xml being highlight with DNS Lookup Failed message. My old Flex api site didn't see crossdomain issue and able to use proxy.
Do you think I missed some setting and configuration part on ArcGIS Viewer for Flex application?
Thank you for your time.

Re: Channel Security error on MapManager

RobertScheitlin__GISP — Thu, 09 Jan 2014 12:50:28 GMT

wee y,

Well you have two issue then. One is that you likely do not have your proxy configured correctly for the new site and second is you have the crossdomain.xml DNS lookup issue. I have given you advice already on how to avoid the need for the proxy.

You need to work with IT/System Admin to discover why you are having the DNS lookup issue.

Is your ArcGIS server and your web server on the same machine?

Have you read the documentation about using a proxy and where to add it in the main config.xml?

http://resources.arcgis.com/en/help/flex-viewer/concepts/index.html#/Using_a_proxy_page/01m30000000w000000/

Re: Channel Security error on MapManager

weeyeo — Thu, 09 Jan 2014 14:14:33 GMT

Found out is the httpproxy on config.xml problem. Everything is working now. Thank you very much.

Re: Channel Security error on MapManager

StephanieLong — Fri, 10 Jan 2014 15:46:43 GMT

Hello,

I am experiencing a similar issue and hope to get some help here in this thread.

I am using Flexviewer 3.0 on a virtual machine with 2008 R2 and AGS 10.2.1. I have Web Adaptor installed.

When I open my flex map in a browser on another machine, I get the attached error message. It opens/displays just fine when I go to my rest services and choose to open it in ArcGIS.com or ArcGIS Desktop.

My REST URL is accessible from this other machine as well. It is http://<machinename>/ags/rest/services

I have my crossdomain.xml in the wwwroot and rootapp folders as well.

What would be the reason for being able to view the service in ArcGIS.com or ArcGIS Desktop, but not in a browser?

Thanks for any help you can provide.

-Stephanie

Re: Channel Security error on MapManager

RobertScheitlin__GISP — Fri, 10 Jan 2014 15:56:23 GMT

Stephanie,

What would be the reason for being able to view the service in ArcGIS.com or ArcGIS Desktop, but not in a browser?

Because ArcGIS.com use the JavaScript API and Desktop used a SOAP protocol and Flex has security setup that requires either a proxy or a crossdomain.xml be on the server that contains your ArcGIS Server.

So the question is do you have your crossdomain.xml be on the server that contains your ArcGIS Server?
Can you access it using http://<machinename>/crossdomain.xml?

Re: Channel Security error on MapManager

StephanieLong — Fri, 10 Jan 2014 16:00:47 GMT

Stephanie,

Because ArcGIS.com use the JavaScript API and Desktop used a SOAP protocol and Flex has security setup that requires either a proxy or a crossdomain.xml be on the server that contains your ArcGIS Server.

So the question is do you have your crossdomain.xml be on the server that contains your ArcGIS Server?
Can you access it using http://<machinename>/crossdomain.xml?

Thanks for the speedy response!
Yes, I have the following crossdomain settings; ArcGIS Server on the same machine. Yes, I can access http://<machinename>/crossdomain.xml from my server machine and my other machine.

It reads:

<?xml version="1.0" ?>
- <cross-domain-policy>
<allow-access-from domain="*" secure="false" />
<site-control permitted-cross-domain-policies="all" />
<allow-http-request-headers-from domain="*" headers="*" secure="false" />
</cross-domain-policy>

-Stephanie

Re: Channel Security error on MapManager

RobertScheitlin__GISP — Fri, 10 Jan 2014 16:07:02 GMT

Stephanie,

So you mention that you have web adaptor installed. So you are omitting :6080 from your urls then right? Can you get to the ArcGIS Server REST Endpoint for your layer using the web adaptor url (i.e. no :6080) from the other machine?

Re: Channel Security error on MapManager

StephanieLong — Fri, 10 Jan 2014 16:10:21 GMT

Stephanie,

So you mention that you have web adaptor installed. So you are omitting :6080 from your urls then right? Can you get to the ArcGIS Server REST Endpoint for your layer using the web adaptor url (i.e. no :6080) from the other machine?

Yes, I am able to access the following from my other machine: http://<machinename>/arcgis/rest/services/Mapping/US/MapServer/1

My 6080 is not accessible.

Re: Channel Security error on MapManager

RobertScheitlin__GISP — Fri, 10 Jan 2014 16:14:56 GMT

Stephanie,

It sounds like everythig should be fine then... Do you have the ability to use Fiddler or some other http traffic tool to see what http request is failing? I may be time for you to call tech support.

Re: Channel Security error on MapManager

StephanieLong — Fri, 10 Jan 2014 16:34:58 GMT

Stephanie,

It sounds like everythig should be fine then... Do you have the ability to use Fiddler or some other http traffic tool to see what http request is failing? I may be time for you to call tech support.

I was afraid you would say that!
Thanks for your help, it is much appreciated!

Also, just a note if anyone else wants to offer up help: I am able to view the layers on my server machine in a browser. Just not on my desktop machine in a browser.

Thanks again!!

-Steph

Re: Channel Security error on MapManager

BezayeTesfaye — Wed, 12 Nov 2014 15:10:04 GMT

Stephanie,

solved the problem? I got the same issue?

Can you share the solution if you sort it out?

hope to hear form you

Beza

Re: Channel Security error on MapManager

GabrielYarlequé — Fri, 12 Dec 2014 21:46:20 GMT

I am running into the same problem. ALready copied the crossdomain.xml files to the suggested locations. What is the workaround this issue? also what is the difference between using this:

<?xml version="1.0"?>

<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">

<cross-domain-policy>

<site-control permitted-cross-domain-policies="all"/>

<allow-access-from domain="*"/>

</cross-domain-policy>

and this:

<?xml version="1.0" ?>

<cross-domain-policy>

<allow-access-from domain="*" secure="false"/>

<site-control permitted-cross-domain-policies="all"/>

<allow-http-request-headers-from domain="*" headers="*"/>

<allow-https-request-headers-from domain="*" headers="*"/>

</cross-domain-policy>

...thanks a lot!