Multiple machines, same domain, help please

From: Aaron Sallade (aaron@dctechservices.com)
Date: 02/27/02


From: "Aaron Sallade" <aaron@dctechservices.com>
Date: Wed, 27 Feb 2002 13:50:40 -0800

Hi all.
I know this isnt specifically firewall related, but to be honest, this
newsgroup has had the most intelligent answers and timely responses of any I
frequent, so I thoughtI'd give it a whirl:

I am trying to prevent the cross domain scripting security restriction error
I receive when I use boxA to call cgi on BoxB.

BoxA is NT IIS
BoxB is Linux Apache
I own both machines and both are on the same network, but with seperate
domain names.

When using an IFrame on box a to call a cgi script on BoxB, I cannot acces
through code the contents in the IFrame, because they are now technicaly on
boxB (seperate domain). I understand the reason for this, to prevent someone
from creating an invisible frameset and silently routing victims to another
site, while capturing keystrokes, page content etc.

My question is this. How should I configure the domains on BoxB so that both
machines are technically part of the same domain. this would be the
equivilent of adding "document.domain=domainA.com" to domain B(boxB)
scripts.

I think it should be as follows:

BoxA www.domainA.com
BoxB cgi.domainA.com

Is this correct?
Please advise.

Regards,
Aaron Sallade