From: Michael Oliver <moliver@(email surpressed)>
Subject: unable to grab license over site-site vpn
   Date: Wed, 30 Sep 2009 13:03:50 -0400

09/30,13:02:00 LICENSE    no servers could validate license (30 sec retries)


Any ideas?

Michael Oliver wrote:
> I have two networks connected via a site to site vpn.  The two sites are 
> on different private subnets but can both see each other.  Other 
> services work perfectly (ie. DNS (forward and reverse), http, nfs, ldap, 
> etc...)  However although computers on Site #2 can rush -ping computers 
> on Site#1, computers on site #2 cannot retrieve a license.  Here is the 
> error I'm getting:
> 
> 09/30,13:02:00 LICENSE    Read from ns2[10.1.1.1] failed: read error: 
> BinaryRead(8192): recv() 0 bytes from ns2[10.1.1.1]
> 
> 09/30,13:02:00 LICENSE    no servers could validate license (30 sec retries)

	Is there a NAT'ing firewall in the mix?

	If so, that could be the problem; Rush looks at the IP packets
	to determine the return address in order to make replies, so if
	there's a NAT'ing firewall rewriting the return address to be
	the firewall's own, that could be the issue.

	Is 10.1.1.1 the correct IP address for ns2?
	Also, what are the hostnames and IP addresses of the machines
	at either end (license server and client), and can you show
	the 'rush -lah' report from both of these machines.

	If you prefer, you may want to reply to me via private email
	with this info if you don't want it to be public.

	Definitely you should be able to make this work, as there
	are several customers doing this (VPN WAN setups sharing licenses).

-- 
Greg Ercolano, erco@(email surpressed)
Seriss Corporation
Rush Render Queue, http://seriss.com/rush/
Tel: (Tel# suppressed)
Fax: (Tel# suppressed)
Cel: (Tel# suppressed)

Hi Michael,

	Just tried calling you in NY, but I guess you already left.
	Was hoping I could help you out by phone.. were you able
	to get it to work, or would you like me to talk to one
	of the guys still at the NYC facility?

	BTW, I know the names of good freelance guys in NYC who
	are familiar with Rush and film/video systems administration.

-- 
Greg Ercolano, erco@(email surpressed)
Seriss Corporation
Rush Render Queue, http://seriss.com/rush/
Tel: (Tel# suppressed)
Fax: (Tel# suppressed)
Cel: (Tel# suppressed)

Followup: We hooked up offline; think we found the problem was
a hostname lookup issue.

Apparently a notebook was used in the test which lived at site #1
and had a site#1 hostname/IP. When moved to site #2, the site#2 IP
was assigned, but the hostname stayed the same. This caused the LA office
license server to fail the license checkout because the hostname in
the license checkout no longer matched the IP address.

Michael's going to try a follow up making sure the hostname/IP
match up at site #2.