Initially the customer could not open the Software Portal on computers in remote trusted domains. The portal would time out trying to load when the SW Portal Settings option "Publish software across all trusted domains" is selected. We unchecked the "Publish software across all trusted domains" option and added the mult-string key to "HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\SWM" and named it includeDomainList. We set the value equal to the two domains that we wanted the portal to check against. This worked and the portal loads across both domains. See KB 154374. However, when he attempts to publish software to a user or group on the remote domain it fails with a banner error on the software resource saying: "Software Portal settings do not allow publishing of software for users or groups that are outside of the Notification Server domain. Remove 'remote_domain\user' or change the Software Portal settings." The a.logs contain the following warning: Severity: 2 Process: w3wp (5500) Thread: 8 Module: w3wp.exe Source: Altiris.SoftwareManagementSolution.Controls.UserPortal.ctrlSoftwarePublishing.Va lidateUserInput Description: Software Portal configuration doesn't allow to publish software for users or groups outside of NS domain. Remove 'remote_domain\user' or change the configuration of Software Portal. So with the SW Portal Settings option "Publish software across all trusted domains" selected the remote domain users cannot load the portal but software can be published to them. And when deselecting the "Publish software across all trusted domains" option and adding the includeDomainList to the registry per KB 154374 the portal will load on the computers on the remote domain but no software can be published to users or groups in the remote domain. We need to be able to both publish software to remote domain users and groups and load the portal on the clients in the remote domain.
Severity: 2
Process: w3wp (5500)
Thread: 8
Module: w3wp.exe
Source:
Altiris.SoftwareManagementSolution.Controls.UserPortal.ctrlSoftwarePublishing.Va
lidateUserInput
Description: Software Portal configuration doesn't allow to publish software
for users or groups outside of NS domain. Remove 'remote_domain\user' or change
the configuration of Software Portal.
Unknown.
We deleted and recreated the "HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\SWM" registry key and this time it works.
------------------------------------------------------------------------------------------------------
Without the "Publish software across all trusted domains" option selected we could not publish software to users in remote domains. Yet those remote users could load the Software Portal.
After selecting the "Publish software across all trusted domains" option we could publish software to users in remote domains. However, those remote users could no longer load the Software Portal.
So we de-selected the "Publish software across all trusted domains" option. The users in the remote domain can again load the Software Portal.
And we created the "HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\SWM" registry key as outlined in KB 154374. This extends the SMP's local domain to include the domains entered into the "includeDomainList" so we can now publish software to those remote domains.