14:41 iuso: citadel looks like a breath of fresh air (visually and conceptually) after all kinds of tear jerking moments i've spent with this project
14:41 iuso: i hope i can get this thing off the ground
14:41 dothebart: yep, once you've done that with citadel, you're wondering how everybody else can do such a big hype about having configured it ;-)
14:42 dothebart: btw, the outlook connector is just getting adopted.
14:42 dothebart: most probably it will be available in the next weeks.
14:42 iuso: i'm looking out for that (bad pun intended)
14:43 dothebart: right now you can just do it with funambowl, which is not that easy.
14:43 iuso: our objective is to convince outlook-using employees to get used to a nice web interface
14:43 dothebart: ah ;-)
14:44 iuso: and to make that pleasant for them we'll try to fit single sign-on in the picture
14:44 iuso: i.e. so that opening the front page will automagically log you in if you have a krb5 session
14:44 iuso: i've my fingers crossed in hopes that this is possible with apache...
14:45 dothebart: oh, gssapi?
14:45 iuso: no idea :) and if i think of those things now i'll get a headache
14:45 iuso: first things first
14:46 dothebart: if you do .htaccess auth with your apache with the ldap account, the users will never see the citadel login screen.
14:46 iuso: so, chkpwd works. but i'm still unable to log in with my ldap account
14:46 dothebart: hm... are you shure it retrieves the right uid?
14:46 iuso: re: yeah that would be perfect, i'm looking forward to that stuff after this initial trouble
14:47 iuso: no, can't really be sure about anything now... i've developed a sudden hunger for logs
14:47 dothebart: ldap & system auth are the difficult things to make citadel do.
14:47 dothebart: ;]
14:47 dothebart: logfile reading is allways a good idea.
14:48 dothebart: maybe you should start the citserver as non-deamon with -x
14:48 dothebart: 7
14:49 iuso: 'citserver -x 7'?
14:49 dothebart: -x7
14:49 dothebart: hit the backspace instead of enter...
14:49 dothebart: you can shut it down with sendcommand down
14:52 iuso: http://pastebin.ca/386181
14:54 dothebart: did you try to login on webcit with that user?
14:54 dothebart: that should be the first thing you try.
14:55 iuso: yep
14:55 iuso: that's what that log output is from
14:55 dothebart: hm.
14:56 dothebart: and that user is available in the ldap tree?
14:56 dothebart: so you can do su myuser ?
14:58 iuso: yeah
14:59 iuso: logging via ssh, su'ing and chkpwd (with the uid 1040) works
15:00 dothebart: hm.
15:00 iuso: but my work for today is more or less finished, i gotta run in a few
15:01 dothebart: you should ask bipolar. he's more familiar to that part...
15:01 iuso: ok, i'll get back to this tomorrow
15:02 iuso: thanks, and see you