Re: [cobalt-users] moving users from group to another group

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Julius wrote:

> yes, I've seen that one, written by Jeff B.

Julius, my intent is to be helpful, and NOT cause you any aggravation as
previous replies of mine seem to have caused you; I'm going to pick and
choose carefully what I answer here, and how I answer it...

> but here is the problem, I can create users this way,
> but I cannot derive the data from postgres databases
> for the domain name, so I have to create them as default
> for option -d
> when i give it one in the commandline, it will not find
> a valid domain name. Long story, but it isn't there.

The postgreSQL database is bad; I thought we'd agreed on that a long
time ago; I believe I've previously recommend a complete system restore;
you've decided that's not viable for you, but that's what most of us,
I'd bet, when faced with the same problem, have done or would do.  It
takes us about fifteen minutes a site to save and restore a site
manually when CMU isn't working, and that's after a lot of practice <wry
grin>.  I know it's time-consuming, but I think you've spent more time
than that by now.

> since I've done a quotaoff for /dev/hda4 and
> cobalt's postgresql need at least some quotum,
> it can't work without one.

I don't think it's working now.

Do you want to turn off the Cobalt gui entirely and run the box
completely manually?  If you do, let me know; I have some notes on that
somewhere.  But if so you won't be able to use any of the Cobalt tools;
not even the cobalt/adduser.

> the main trouble is; editing site quota/settings
> through use of the commandline seems impossible.

Why?  Because the Cobalt system is somehow overriding them?  You can fix
that by deleting the Cobalt gui, if you really don't want to use it.

> But when trying to move them I got a strange
> "mail relay denied" error when sending email
> to the domain. I have not been able to solve this yet.

You can trace mail delivery through your box if you need to; we do it
all the time.  It's a pretty specialized task and requires a lot of
familiarity with how email works, but you can do it and find out why. 
My first guess is that the domain isn't properly recognized in the
local-host-names file or is incorrectly listed in access file, or you've
changed these manually and not either rebuilt the database or restarted
sendmail as required.  But it could be something else entirely,
including a DNS error.

> somehow it goes loopy in the redirecting domains
> and aliases department, I guess.
> I've seen it before, the "relaying denied" thing,
> entering the correct host/domain or email alias
> seemed to solve it back then. I can't remember
> which one it was, and i don't know where to set it
> using the commandline.

See above, but you really do have to know what you're doing with
sendmail.

> As soon as I do solve that issue, I might be out of
> problems altogether on this RaQ.

As long as you realize it won't any longer be running as a RaQ, but
rather as some kind of hybrid, and you really won't be able to get much
help from any of us here.

> I'd like to point out
> that Sun Cobalt should emphasize more that a RaQ4i
> should have at least ONE virtual site created,
> and cannot run without one.

I know several people who've successfully run RaQs without a virtual
site, and there's no reason why the RaQ "sauce" requires one.  We
recommend that all sites on the RaQ be virtual sites simply because
exploits are generally written for main sites and not for virtual sites,
but on the Raq even the "main" site runs as a virtual site; there really
isn't a "main site" as apache would configure it.

> I really don't know how
> I got to have users created under /home/sites/home/users
> while the default site should have been under .../site1/users
> What is the default site for anyway, if one will never
> use it because it's all based on virtual entries?

You can use it.  Lots of our clients do.  I don't know what originally
caused your problem, and I understand you cannot use it now, but that
doesn't mean it can't be used by anyone else.

> OK, thanks for more input.

You're welcome.  I hope you can find something usefull in this reply as
well.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net
P. O. Box 52672, Riverside, CA  92517
voice: (909) 778-9980  *  fax: (702) 548-9484