BusinessObjects Board

Dashboard Design, query, and crossdomain.xml

I have been fighting this issue for a while. We are at version 6.0.0.0, build 14,0,2,364. I am testing using a query in dashboard design and it works fine when I preview it. When I put on our test server I get a LO 2170 error (crossdomain.xml). I have modified the crossdomain.xml file, but I still get the error. The dashboard will work it I open up the crossdomain.xml to possible outside attacks, but our security team will not allow such a wide open policy file. I am open to suggestions (the server name has been changed for security reasons). I have checked tomcat and I can see the modified crossdomain.xml file and I have used fiddler to see that it is seeing the cross domain.xml file.

crossdomain.xml

  <?xml version="1.0" ?> 
  <!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd"> 
  <cross-domain-policy>
   <site-control permitted-cross-domain-policies="all" /> 
   <allow-http-request-headers-from domain="all" headers="" secure="false" /> 
   <allow-access-from domain="*.tcweb" secure="false" /> 
   <allow-access-from domain="*.tularehhssa.org" secure="false" /> 
   <allow-access-from domain="http://ourserver.website_for_webservices.tcweb:8080/dswsbobje/services/XcelsiusWebServices" secure="false" /> 
  </cross-domain-policy>

Error Message

Connection Type: Web Service

File URL: http://ourserver:8080/BOE/portal/1205101020/Xcelsius/opendoc/documentDownload?iDocID=56597&lang=en_US&appKind=InfoView&xcelsiusViewAction&CELastModified=1347982899500

External Data URL: http://ourserver.website_for_webservices.tcweb:8080/dswsbobje/services/XcelsiusWebServices

Connection Type: Web Service

File URL: http://ourserver:8080/BOE/portal/1205101020/Xcelsius/opendoc/documentDownload?iDocID=56597&lang=en_US&appKind=InfoView&xcelsiusViewAction&CELastModified=1347982899500

External Data URL: http://ourserver.website_for_webservices.tcweb:8080/dswsbobje/services/XcelsiusWebServices


kevlray :us: (BOB member since 2010-06-23)

Hello, kevlray.

When creating the crossdomain.xml for access to your SAP Crystal Dashboard Design (Xcelsius) dashboard, try using the following string for headers

<allow-http-request-headers-from domain="*" headers="*" secure="false" />  

Also, you may visit the Adobe web site http://kb2.adobe.com/cps/142/tn_14213.html to find more information about the creation of the crossdomain.xml file.


IAI_Trainer17 (BOB member since 2012-11-28)

I have tried that already. And I have read several documents regarding the creation of the crossdomain.xml file. So far the only thing that works is to use the crossdomain.xml that basically has no security (but not allowed by our security team).


kevlray :us: (BOB member since 2010-06-23)

We finally have a solution. Interesting enough the crossdomain.xml was fine. Our server was not being qualified with a domain, thus it had no domain. Example: http:\ourserver:8080/BOE/BI, now is http:\ourserver.domain:8080/BOE/BI


kevlray :us: (BOB member since 2010-06-23)

Hello,

I’m facing this problem after migrating from BI XI3 to BI4 :

Do you have any idea about the solution please :hb: I can’t view my dashboards anymore !!

Thank you in advance


paradise1990 (BOB member since 2014-04-22)