cross domain scripting problem

hi - i'm having problem cross domain scripting. i've got admin interface @ www.admin.mydomain.com , it's trying access shim movie @ www.mydomain.com. i've tried possible permutations of crossdomain.xml , system.security.allowdomain. swfs authored in flash8 i've switched flash10 , publishing them flash10 - error messages when debugging more complete. i'm using actionscript 2.
i've had put crossdomain.xml on root of server , on root of subdomain (with permitted-cross-domain-policies = "all") otherwise admin swf complains when root crossdomain.xml tries access it. i'm explicitly calling system.security.loadpolicyfile in both movies. i've tried setting system.security.allowdomain(_parent._url) in shim movie , system.security.allowdomain(_shim_mc._url) in admin swf (which in subdomain). removed of sandbox error messages (eg
*** security sandbox violation ***
securitydomain ' http://www.mydomain.com/shim.swf' tried access incompatible context ' http://www.admin.mydomain.com/' )
that getting when shim loaded admin whenever cross scripting occurs same error messages. don't believe should necessary call system.security.allowdomain every time cross-script, @ least i've never read anywhere , i've read fair amount of tutorials, helpfiles, whitepapers etc try , understand happening. maybe i'm wrong - can help? below crossdomain.xml

<?xml version="1.0"?>
<!doctype cross-domain-policy system
" http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">

<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
<allow-access-from domain="*.mydomain.com" to-ports="80"/>
<allow-access-from domain="*.admin.mydomain.com" to-ports="80"/>
<allow-access-from domain="www.admin.mydomain.com" to-ports="*"/>
<allow-access-from domain="www.mydomain.com" to-ports="*" />
</cross-domain-policy>

More discussions in ActionScript 1 and 2

adobe