In a Trusted Domain Environment the Software Portal does not work properly in Software Management

Products

• IT Management Suite
• Software Management Solution

Issue/Introduction

In a Trusted Domain Environment the Software Portal times out in Software Management, for instance, in ITMS 8.5+ users were able to view the Software Portal, but there is an error generated when the selection is made that results in an error. The Console shows:

A problem occurred while creating aepplication request. Try again or contact IT Helpdesk for assistance

There was a time out error after several minutes when waiting for the Portal to load and the NS Logs in ITMS 8.5 showed the Error message: 

MainController failure.  User DOMAIN\USER logged in from machine SystemName is not eligible to request software SoftwareNam

Environment

ITMS 8.x

Cause

In complex domain environments, sometimes the process of working through all domains when loading the Portal can cause a timeout.

Resolution

In ITMS 8.5 RU2 and later, use the Software Portal Settings page to set what domains to publish the portal to. The setting is shown below:

Check the box "Allow software publishing across the following trusted domains:" and select the radio button for "Specified trusted domains". Enter the domain names as needed.

NOTE: You do not need to enter short names, as the code will enumerate all variations based on the FQDN provided.

Back in ITMS environment versions 7.1 SP1 to 8.5 RU1, it was possible to enable/disable Software publishing information to trusted domains from the Software Portal settings page. Also, there is a registry key for this feature that allows you to define domains that should be included in analyzing when loading the Software Portal.

If trusted domains analyzing is disabled, then users can define a domain list in the windows registry that will extend the list of domains that will be analyzed when Software Portal is opened. It's a registry multi-string value "IncludeDomainList" in "HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\SWM" registry key. Domains enumerated in this list will "extend" the NS domain. Any software published for NS domain can be also published for users and groups that are in domains from the include domain list.  For example If the "Publish Software across all trusted domains" option is disabled and IncludeDomainList is defined -  the administrator is able to publish Software/MDP for users that are in NS domain and in domains from "IncludeDomainList".

IncludeDomainList must have FQDN - Fully Qualified Domain Name (long) and NetBIOS (short) domain names as shown here:

example.com
example

NOTE: If Trusted Domains is enabled on the NS Server then, this registry key is ignored.   Administrators can publish Software resource\Managed Delivery Policies for Users / Groups that are inside NS domain and all trusted domains, not only those domains that are defined in IncludeDomainList.