NMI-Enabled Open Source Collaboration Tools for Virtual Organizations

该项目追求NMI集成的一套协作工具，以支持虚拟组织的身份验证和授权功能的重点。 身份验证和授权子系统的功能可以分为建立身份、应用访问控制规则和提供系统特定帐户。Shibboleth体系结构支持身份验证和授权的联合管理，但它不提供帐户配置。系统特定帐户是分配和跟踪系统内资源的工具。如今，这些帐户的分配通常是手动完成的，所涉及的工作量可能会成为协作的障碍;自动化的帐户配置使虚拟组织的形成变得更容易。该项目针对启用NM I的系统集成有以下具体目标：（1）NMI-使开放源代码邮件列表应用程序的Web界面包括模块化身份验证，附件的优雅处理，和使用数字签名而没有“Invalid Signature”错误;（2）启用包含WebDAV协议的开放源代码内容管理系统的NMI;（3）通过LDAP中的可移植POSIX用户帐户对象自动提供NMI授权的系统帐户;（4）原型化支持匪I的用户空间文件系统，用于基于用户身份动态供应文件和资源，而不管用户位置如何;（5）成立一个第二代因特网计算机辅助工程工具工作组，审查该项目，并利用承诺为这项活动提供的第二代因特网组织和行政支助，为改进工作提供反馈意见;“以及（7）为被选定参加NMI试验台活动的虚拟组织成员提供Shibboleth服务，以加快NMI的采用-NMI和该项目对NMI的贡献在更广泛的社会中非常重要。跨组织边界的合作甚至发生在小型非营利组织中，这些组织组成了市或州委员会来解决共同感兴趣的问题。这些组织将通过将其现有的计算机系统连接在一起来共享信息，而只需很少的额外管理开销，就可以获得巨大的好处。

This project pursues the NMI integration of a set of collaboration tools to support virtual organizations with an emphasis on authentication and authorization functionality. Authentication and authorization subsystem functionality can be categorized as establishing identity, applying access control rules, and provisioning system specific accounts. The Shibboleth architecture supports federated administration of authentication and authorization, but it does not provide account provisioning. System-specific accounts are the vehicle for allocation and tracking of resources within the system. Allocation of these accounts is frequently accomplished manually today and the amount of work involved can serve as a barrier to collaboration; automated account provisioning makes it easier for virtual organizations to form.This project has the following specific goals for NMI-enabled system integration: (1)NMI-enable the web interface to an open source mailing list application to include modular authentication, graceful handling of attachments, and use of digital signatures without the "Invalid Signature" error; (2)NMI-enable an open source Content Management System that incorporates the WebDAV protocol; (3) Automatically provision NMI-authorized system accounts via portable POSIX user account objects in LDAP; (4) Prototype an NMI-enabled user space file system for dynamic provisioning of files and resources based on user identity, regardless of user location; (5) Form an Internet2 MACE-TOOLS Working Group to review the project and provide feedback for improvement using the pledged Internet2 organizational and administrative support for this activity; (6) Disseminate information on "How to NMI-enable Applications and Systems;" and (7) Provide Shibboleth services for members of virtual organizations selected for the NMI testbed activities to speed the adoption of NMI-enabled collaboration tools.NMI and the contributions of this project to NMI are important in broader society. Collaborations across organizational boundaries occur even in small non-profit groups who form city or state-wide committees to address issues of common interest. These organizations would benefit tremendously by tying together their existing computer systems to share information with very little additional administrative overhead.