Admin/Reseller/User architecture Questions

IT_Architect

Verified User
Joined
Feb 27, 2006
Messages
1,088
I'm new to DirectAdmin, so I need your help.

Scenario:
- The system was set up with the admin user, and it has a domain assigned of say rich1.com. Actually, that domain doesn't belong to admin, it belongs to reseller Rich, but it was setup that way nonetheless.
- The first thing we do is create a backup admin named sysadmin in case something happens to the first one.
- Next I create a reseller named Rich. Rich is a reseller, but his domain is not on this server. We cannot leave the blank empty, thus we type in his real domain or will it send it look for it locally?
- Rich will create domains Rich2, but is also responsible for Rich1.

Questions:
- Can the users on Rich2.com e-mail someone at Rich.com when there is a problem?
- Do admins and resellers need to have a real domain?

Thanks!
 
IT_Architect said:
- Can the users on Rich2.com e-mail someone at Rich.com when there is a problem?
It would depend on what the problem was, it should work as long as it's not a problem affecting mail services...
You might want to consider using DA's ticket system or a system off the server.

- Do admins and resellers need to have a real domain?

No. A domain is not required to create an admin or reseller, but you can enter fake domains if it's absolutely necassary.
 
No. A domain is not required to create an admin or reseller
I'll have to wait until my site is back up I guess to see, but when I tried it, I couldn't save the record because it said it was too short. When I get it back up I will try it.

Another thing I noticed is that you cannot rename anything. Normally, databases are held together with artificial data so that renaming doesn't break anything. In DA, if I change the name, I get two accounts that are the same, one with a different name. Thus I'm guessing that DA does not use artificial data to connect things together.

On security, I noticed that it doesn't use https That surprises me.
 
No. A domain is not required to create an admin or reseller
Administrator, no. A Reseller one is required according to what I remember and according to the demo on the DirectAdmin sites. So does that then create a domain on the server?
 
From the docs
This is the domain name of the Reseller's web site. Because a Reseller is also a User, he/she must have a web site. Enter the domain name without the "http://" or "www."
A reseller is a user, but so is an admin, and and admin doesn't need one. I'm an OOP programmer, and even if the property exists for the object, the value can be null just as it must be for admin. The way it current is, either the reseller must have his domain on this particular server, or we will need to have dummy domains for resellers on every server. Fortunately, it appears as though the email addresss does not have to agree with the domain. Otherwise the reseller would not be reachable if his real domain were hosted on another server since the domain would be resolved resolved locally, and the email undeliverable, or go to a mail box that is unattended.

The next question is, can multiple reseller share the same dummy domain. I'm guessing not.
 
Rather elegant, in fact. The reseller, on the host, on the domain.

I think that's elegant :) .

Jeff
 
I think that's elegant .
Elegant on your part, I agree. Having that be a requirement in DirectAdmin is the part I think is ugly.

I appreciate the thought you put into the work-around and sharing it with me. I'm sorry I didn't clarify that in my reply. I can certainly see why you interpreted it the way that you did.

Thanks again!
 
I'm trying to get a handle on the logic of DA. Please correct any errors in my thinking.

Hierarchy
- Admin to reseller I have down I think.
- Reseller requires a fake domain since he may be reseller on more than one server. It would be impossible for him to use a legitimate domain because you wouldn't be able to e-mail him since the server would find the domain locally and never go external to resolve.
- You give IP addresses to resellers from the admin level. You cannot take the address from one reseller/admin and give it to another. You must first delete it from one, and then give it to another.
- Resellers create users. Resellers can give IP addresses to users, not domains.
- A user creates a domain, and it automatically uses the assigned address on the domain created. Subsequent domains use the same address, so if you want to have a user manage multiple domains, they must either all share that address or there must be different users, or.... you must assign that user another IP address...or can you assign the user the shared and he can also use that? I don't see a place where he can choose which IP for which domain.

Navigation
- And admin cannot perform reseller functions unless he logs in as the reseller. You can do that automatically by listing resellers, then clicking on the reseller, then clicking on modify reseller, then clicking on login as reseller.
- A reseller cannot modify user information. He must login as the user. This can be done a little differently than the admin to reseller by clicking on list users then click on the user, then click on login as user.
- Once in as the user, you click on one of the domains that the user created. You can ensure which one you are on by referencing the menu on the right hand side. If you want to change domains, you click on the home button, and select another one.
- You do not have rights granted to you at lower levels that were not previously granted from the level above even if you started out admin?
- You can only go down from admin to reseller to user, and never back?
- Use the back button, but don't backup too far or you will get "page not found" or you don't have rights errors. If you get messed up, click the home button.
- MySQL databases are created at the domain level and you can have as many as the user is allowed. However, each database can only have one database user, so that would mean the user must have dba privileges?
- If someone is an admin, and you don't create a reseller, then the admin since he is also a user, can easily traverse and setup his own domains because each login is implicitly a user. However, once you have out-of-house hosters, then you must have at least one reseller so that you can create users under him.
- The navigational issues of travelling to lower levels is not encountered by users, only by resellers and admins.

I would appreciate any pointers that you might have to correct or simplify my thinking.

Thanks!
 
IT_Architect said:
- Admin to reseller I have down I think.
- Reseller requires a fake domain since he may be reseller on more than one server. It would be impossible for him to use a legitimate domain because you wouldn't be able to e-mail him since the server would find the domain locally and never go external to resolve.
Reseller can have a real domain; lots of us have multiple domain names.

You should never host a domain on multiple servers unless you know what you're doing and why, since as you point out there can be unintended consequences. That said, DA allows you to host email on a different server; you can change the MX record using the MX Records page at the user-level, and uncheck the Use this server to handle my emails box.

I don't want to raise any more cans of worms in this thread, but personally I prefer allowing a reseller setup without a domain. But I didn't design DA; I just support it :) .
- You give IP addresses to resellers from the admin level. You cannot take the address from one reseller/admin and give it to another. You must first delete it from one, and then give it to another.
I think you understand it better than I do :) :) .
- Resellers create users. Resellers can give IP addresses to users, not domains.
That's correct.
- A user creates a domain, and it automatically uses the assigned address on the domain created. Subsequent domains use the same address, so if you want to have a user manage multiple domains, they must either all share that address or there must be different users, or.... you must assign that user another IP address...or can you assign the user the shared and he can also use that?
A user can only use one address, shared or owned. If your user needs multiple IP#s he must be a reseller at this time. Personally I don't mind that limitation because I don't give out IP#s without justification, but the difference could be important to you.
I don't see a place where he can choose which IP for which domain.
Because he can't have more than one.
- And admin cannot perform reseller functions unless he logs in as the reseller. You can do that automatically by listing resellers, then clicking on the reseller, then clicking on modify reseller, then clicking on login as reseller.
Yes. Actually a lot of platforms do it that way including the Cobalt RaQs and Plesk PSA, though they do it transparently. Note that you can only login without passwords one level deeper than where you start. If you start as Admin, then click to login as reseller, then click again to login as user you'll be asked for a pasword. If you don't know the password you can login this way:

User: admin|username
Password <admin-password>
- A reseller cannot modify user information. He must login as the user. This can be done a little differently than the admin to reseller by clicking on list users then click on the user, then click on login as user.
Yes.
- Once in as the user, you click on one of the domains that the user created. You can ensure which one you are on by referencing the menu on the right hand side.
That's actually skin dependent.
If you want to change domains, you click on the home button, and select another one.
That's also skin-dependent. In most skins you click on Domain Administration or Domain Setup.
- You do not have rights granted to you at lower levels that were not previously granted from the level above even if you started out admin?
The only right I can think of that you don't have is the right to go back to being the previous user. To do that you have to logout, and you'll automatically be at the previous user level (probably reseller in your example).
- You can only go down from admin to reseller to user, and never back?
You can go down one level, and up one level. To go down one level, you login as you've already pointed out. To go up one level you logout of the level you're in.

Note that if you go from Admin to reseller, and then to user (using the password trick I've noted above) then a logout will take you back to admin, not to user.
- Use the back button, but don't backup too far or you will get "page not found" or you don't have rights errors. If you get messed up, click the home button.
Yes. See my points above.
- MySQL databases are created at the domain level and you can have as many as the user is allowed. However, each database can only have one database user, so that would mean the user must have dba privileges?
Database users have dba privileges. They have nothing to do with any other users.
- If someone is an admin, and you don't create a reseller, then the admin since he is also a user, can easily traverse and setup his own domains because each login is implicitly a user. However, once you have out-of-house hosters, then you must have at least one reseller so that you can create users under him.
Not if I understand you correctly. Any admin is also a reseller and a site user. Any reseller is also a site user.
- The navigational issues of travelling to lower levels is not encountered by users, only by resellers and admins.
That's correct.
I would appreciate any pointers that you might have to correct or simplify my thinking.
I hope I've made things a bit clearer, and not the opposite :) . If I may quote Harry Belafonte out of context (from his "Man Piaba" song):

"It was clear as mud, but it covered the ground, and the confusion made my brain go round."

Jeff
 
If you start as Admin, then click to login as reseller, then click again to login as user you'll be asked for a pasword. If you don't know the password you can login this way:

I'll look for that, but I can go top to bottom without being asked for a password.

Now for the real question, which is the best skin to use?

Thanks!
 
Back
Top