In addition to looking out the window, I'm now able to check what may be expected en route. After getting totally soaked several times while biking to work I can see the benefits. Now I just need to move the computer to the living room...

See the Testbed project site for more information on the plug-in.

Obviously, the whole apartment thingy has taken quite a lot of time. Our son, Akseli, is also growing rapidly - I think I should order my... ermh... his Lego Robotics Invention System soon.

So, it's been busy, and if I can do my math, it will be for some time. I'm not expecting to blog all that much in the coming months, but try to keep the habit from dying altogether.

I will miss both my fellow co-workers, whom I've become close friends with, and the community, that I've become to love. However, as a forever optimistic person, I hope to meet everyone again for a pivo (or three).

In the end I'd also like to say thank you to all the clients I've worked with. You have made it the most amazing, interesting and busiest four years of my life.

May the Amerigard be with you, and thanks for all the fish!

To force Aegir to support single sign-on together with NTLM, the following changes must be made (DISCLAIMER: The changes have been tested with a Aegir-1.0.3 installation. I tested Aegir with both NTLM authentication and regular Nemein_Authentication, and found that everything were working properly. However, the tests included only articles and attachments - there may be some other hidden problems elsewhere. So, keep another admin interface handy in case your Aegir brakes!):

• Turn on authentication in the Aegir host record. NOTE: I'm using sitegrouped Aegir (www.example.com:8001/aegir) and have SG0 Aegir (www.example.com:8002/aegir_sg0) available under separate host.

• Modify Nemein_Authentication library

  • Snippet: /Nemein_Authentication/Functions

    • function auth_by_cookies()

       // Disable cookie checking when the basic auth is in use and user is set, place this right in the beginning
       if ($GLOBALS['midgard']->auth && $GLOBALS['midgard']->user) {
           return false;
       }
      

• Modify Aegir libraries

  • Snippet: /AegirCore/lib/auth

    // Provide alternative authentication routine for the basic auth, add this right after if ($logout) clause
    } elseif ($GLOBALS['midgard']->auth) {
        $aegir_user = mgd_get_person($GLOBALS['midgard']->user);
        $mgd_login['uid'] = $aegir_user->id;
    }
    

  • Snippet: /AegirCore/lib/auth_functions

    • function aegir_sitegroup_reauth($sitegroup)

      // Provide fallback routine for the basic auth, place this right in the beginning
      if ($GLOBALS['midgard']->auth && $GLOBALS['midgard']->user) {
          return;
      }
      

  • Page: /Aegir CMS/rcs

    // Provide a fallback for the $currentuser check
    if (!$currentuser) {
        if (!$currentuser = mgd_get_person($GLOBALS['midgard']->user)) {
            quitit();
        }
    }
    // Provide fallback for the basic auth
    if (strtolower($currentuser->username) != strtolower($set["username"])
        && !$currentuser) {
        echo "cookie problem?";
        exit;
    }
    

After the changes you can point your browser directly to to http://www.example.com/aegir/newframeset/ to get single sign-on authentication. In case you want to compare your code, I made an RTF file that shows changed parts of code in bold.

Update 2005-04-25: The link to the RTF had a typo. Thanks Solt!