Channel Security error on MapManager

[weeyeo]

I run into this error message on MapManager for ArcGIS View for Flex web application v3.5  when try to open web application to public to use.  I tested this on internal web browser and it works fine only happen if public try to access the site. 
Here is the error message I got:

MyLayer layer failed to load:  Fault code:
Channel.Security.Error

Fault.info:Security error accessing url

Fault details:  Destination: Default:HTTP

I have crossdomain.xml on C:\inetpub\wwwroot folder

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
    <site-control permitted-cross-domain-policies="all"/>
    <allow-access-from domain="*" secure="false"/>
    <allow-http-request-headers-from domain="*" headers="*" secure="false"/>
</cross-domain-policy>

Besides that, I have another custom flex web application open to public using the same secure map services, proxy, and crossdomain without any error or problem at all. Only on ArcGIS Viewer for Flex web application got error message.
Have any ideas for this error message?  Thanks.

[RobertScheitlin__GISP]

Stephanie,

What would be the reason for being able to view the service in ArcGIS.com or ArcGIS Desktop, but not in a browser?

Because ArcGIS.com use the JavaScript API and Desktop used a SOAP protocol and Flex has security setup that requires either a proxy or a crossdomain.xml be on the server that contains your ArcGIS Server.

So the question is do you have your crossdomain.xml be on the server that contains your ArcGIS Server?
Can you access it using http://<machinename>/crossdomain.xml?

[StephanieLong]

Stephanie,



Because ArcGIS.com use the JavaScript API and Desktop used a SOAP protocol and Flex has security setup that requires either a proxy or a crossdomain.xml be on the server that contains your ArcGIS Server.

So the question is do you have your crossdomain.xml be on the server that contains your ArcGIS Server?
Can you access it using http://<machinename>/crossdomain.xml?

Thanks for the speedy response!
Yes, I have the following crossdomain settings; ArcGIS Server on the same machine.  Yes, I can access http://<machinename>/crossdomain.xml from my server machine and my other machine.

It reads:

  <?xml version="1.0" ?>
- <cross-domain-policy>
  <allow-access-from domain="*" secure="false" />
  <site-control permitted-cross-domain-policies="all" />
  <allow-http-request-headers-from domain="*" headers="*" secure="false" />
  </cross-domain-policy>


-Stephanie

[RobertScheitlin__GISP]

Stephanie,

   So you mention that you have web adaptor installed. So you are omitting :6080 from your urls then right? Can you get to the ArcGIS Server REST Endpoint for your layer using the web adaptor url (i.e. no :6080) from the other machine?

[StephanieLong]

Stephanie,

   So you mention that you have web adaptor installed. So you are omitting :6080 from your urls then right? Can you get to the ArcGIS Server REST Endpoint for your layer using the web adaptor url (i.e. no :6080) from the other machine?

Yes, I am able to access the following from my other machine:    http://<machinename>/arcgis/rest/services/Mapping/US/MapServer/1

My 6080 is not accessible.

[RobertScheitlin__GISP]

Stephanie,

   It sounds like everythig should be fine then... Do you have the ability to use Fiddler or some other http traffic tool to see what http request is failing? I may be time for you to call tech support.

[StephanieLong]

Stephanie,

   It sounds like everythig should be fine then... Do you have the ability to use Fiddler or some other http traffic tool to see what http request is failing? I may be time for you to call tech support.

I was afraid you would say that!
Thanks for your help, it is much appreciated!

Also, just a note if anyone else wants to offer up help: I am able to view the layers on my server machine in a browser.  Just not on my desktop machine in a browser.

Thanks again!!

-Steph

[BezayeTesfaye]

Stephanie,

solved the problem? I got the same issue?

Can you share the solution if you sort it out?

hope to hear form you

Beza

[GabrielYarlequé]

I am running into the same problem. ALready copied the crossdomain.xml files to the suggested locations. What is the workaround this issue? also what is the difference between using this:

<?xml version="1.0"?>

<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">

<cross-domain-policy>

    <site-control permitted-cross-domain-policies="all"/>

    <allow-access-from domain="*"/>

</cross-domain-policy>

and this:

<?xml version="1.0" ?>

<cross-domain-policy>

   <allow-access-from domain="*" secure="false"/>

   <site-control permitted-cross-domain-policies="all"/>

   <allow-http-request-headers-from domain="*" headers="*"/>

   <allow-https-request-headers-from domain="*" headers="*"/>

</cross-domain-policy>

...thanks a lot!