14:41  iuso: citadel looks like a breath of fresh air (visually and conceptually) after all kinds of tear jerking moments i've spent with this project
14:41  iuso: i hope i can get this thing off the ground
14:41  dothebart: yep, once you've done that with citadel, you're wondering how everybody else can do such a big hype about having configured it ;-)
14:42  dothebart: btw, the outlook connector is just getting adopted.
14:42  dothebart: most probably it will be available in the next weeks.
14:42  iuso: i'm looking out for that (bad pun intended)
14:43  dothebart: right now you can just do it with funambowl, which is not that easy.
14:43  iuso: our objective is to convince outlook-using employees to get used to a nice web interface
14:43  dothebart: ah ;-)
14:44  iuso: and to make that pleasant for them we'll try to fit single sign-on in the picture
14:44  iuso: i.e. so that opening the front page will automagically log you in if you have a krb5 session
14:44  iuso: i've my fingers crossed in hopes that this is possible with apache...
14:45  dothebart: oh, gssapi?
14:45  iuso: no idea :) and if i think of those things now i'll get a headache
14:45  iuso: first things first
14:46  dothebart: if you do .htaccess auth with your apache with the ldap account, the users will never see the citadel login screen.
14:46  iuso: so, chkpwd works. but i'm still unable to log in with my ldap account
14:46  dothebart: hm... are you shure it retrieves the right uid?
14:46  iuso: re: yeah that would be perfect, i'm looking forward to that stuff after this initial trouble
14:47  iuso: no, can't really be sure about anything now... i've developed a sudden hunger for logs
14:47  dothebart: ldap & system auth are the difficult things to make citadel do.
14:47  dothebart: ;]
14:47  dothebart: logfile reading is allways a good idea.
14:48  dothebart: maybe you should start the citserver as non-deamon with -x
14:48  dothebart: 7
14:49  iuso: 'citserver -x 7'?
14:49  dothebart: -x7
14:49  dothebart: hit the backspace instead of enter...
14:49  dothebart: you can shut it down with sendcommand down
14:52  iuso: http://pastebin.ca/386181
14:54  dothebart: did you try to login on webcit with that user?
14:54  dothebart: that should be the first thing you try.
14:55  iuso: yep
14:55  iuso: that's what that log output is from
14:55  dothebart: hm.
14:56  dothebart: and that user is available in the ldap tree?
14:56  dothebart: so you can do su myuser ?
14:58  iuso: yeah
14:59  iuso: logging via ssh, su'ing and chkpwd (with the uid 1040) works
15:00  dothebart: hm.
15:00  iuso: but my work for today is more or less finished, i gotta run in a few
15:01  dothebart: you should ask bipolar. he's more familiar to that part...
15:01  iuso: ok, i'll get back to this tomorrow
15:02  iuso: thanks, and see you