RE: [cobalt-users] RAQ2 FTP/Email Problems and missing accounts

["Fay, Sean" <webmaster@xxxxxxxxxxxxxxx>]

>> thinks that FTP, POP3 and IMAP are not working although I can send and
>> receive email and ftp. I believe this happened on the 24th of December
but
>> what happened I dont know. Telnet is off, I have portsentry installed and
>> I'm just at a loss...

> Have you checked DNS ? All the other things depend on names resolving
> properly...

Yeah, it's up and running fine. The main site on the server is the one with
problems. It's responding fine in every aspect except that the user accounts
for that site (the main site running the server) aren't working unless I
delete and re-add them. All virtual sites I'm hosting seem to be fine and
unaffected as far as I can tell. I'm still receiving emails on those.

It's odd, because on the warning messages on the screen say that FTP, POP3
and IMAP are down but SMTP is up.

> Look in your log files, they often have usefull clues about why things
> aren't working, (/var/log/messages , /var/log/maillog) 
> Try restarting services by hand and see if you get messages about things

I ran /etc/rc.d/init.d/sendmail stop   and 
	/etc/rc.d/init.d/sendmail start 
Everything went fine. No hiccups there. I even did 
	/etc/rc.d/init.d/named stop 	and
	/etc/rc.d/init.d/named start 

And again, got no errors. I guess I should be happy that everything went as
planned.

In /var/log/messages, I see this over and over every 15 minutes:

Dec 26 03:00:04 aurora1 proftpd[8409]: aurora1.auroraweb.net
(aurora1.auroraweb.net[208.234.1.203]) - FTP session opened.
Dec 26 03:00:04 aurora1 proftpd[8409]: aurora1.auroraweb.net
(aurora1.auroraweb.net[208.234.1.203]) - no such user 'active_monitor'
Dec 26 03:00:04 aurora1 proftpd[8409]: aurora1.auroraweb.net
(aurora1.auroraweb.net[208.234.1.203]) - no such user 'active_monitor'
Dec 26 03:00:04 aurora1 proftpd[8409]: aurora1.auroraweb.net
(aurora1.auroraweb.net[208.234.1.203]) - FTP session closed.

In /var/log/maillog, I see "User unknown" for actual accounts of mine on the
main server account. Those accounts are listed in the web interface.

> Have you added any email aliases lately? If you do strange things with
> email aliases you can also confuse the machine, and it may decide that all
> mail for some donain (or the entire machine) is supposed to go somewhere
> else, perhaps somewhere that doesn't exist , you can look through
> etc/virtusertable, see if anything in it looks really weird ;(it shouldn't
> be empty btw, it should have at least one entry per domain name)

I haven't personally added anything for the main account or any of my
virtual sites. I do host sites for others but no one but me has root or
admin rights. They all have site admin rights. I looked in
/etc/virtusertable and it looks pretty normal. Normal pattern...

Thanks!

Sean