Re: [cobalt-users] RAQ4R - Mail lock error 3 - now cannot su to root

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Todd Kirk wrote:

> Sorry about a long post in advance but Sun Support is useless and need
> to describe what is going on here. Also currently all users on the RAQ4R
> cannot send/receive any mail!

...<info about specific problems stripped>...

Sounds like one of two possibilities... either a hack, or a full root
partition.  Both can have these symptoms.

> Currently the only thing any Sun Support is telling me is to OS restore
> the box. I am really wanting to avoid this and frankly see no reason why
> I should have to, I am confident no hacker has been in the box.

How can you be so confident?

> All
> patches are installed, it is a genuine RAQ4R and only custom apps are
> ADJE webmail 4.0, MRTG & IPChains

How full is the root partition?

Sun is telling you to do an OS restore because the alternative is for
you to spend some money.  You can boot into your system from a terminal
connected into the serial port, and look for problems; you can remove
the hard disk and investigate it manually, you can try several other
expensive, time-consuming, labor intensive tricks.

If I had the same problem I'd look at the hard disk space, look for
error messages, and then move the drive to another box for analysis
(after restoring a complete CMU to a clean OS install on a spare hard
drive.  If you have neither local access nor a complete backup, then
unfortunately your options are more limited <frown>.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net
P. O. Box 52672, Riverside, CA  92517
voice: (909) 778-9980  *  fax: (702) 548-9484