Cannot connect when Host and Viewer are in different AD Domains.

Products

• CA Client Automation - Asset Management
• CA Client Automation - IT Client Manager
• CA Client Automation
• CA Client Automation - Remote Control

Issue/Introduction

A new domain was added to the environment. Client automation was rolled out to the PC's in this domain reporting to Scalability servers in the existing environment.

AM and SD functions correctly but when attempting to connect from an RC viewer in the existing domain to an RC host in the new domain the following error is received.

The Remote Control Management Server is not available to validate the credentials supplied.

Environment

Client Automation - All versions

Cause

There was no trust relationship established between the 2 domains.

The host first authenticates the supplied credentials against AD to verify the username and password are correct. After this the host tells the scalability server to validate that the user is allowed to remote control the Host. The host therefore needs to be able to authenticate the users credentials in the original domain and this requires a 2 way trust relationship.

Resolution

Create a 2 way trust relationship between the 2 domains.