NMI-Enabled Open Source Collaboration Tools for Virtual Organizations

该项目追求一组协作工具的NMI集成，以支持强调身份验证和授权功能的虚拟组织。身份验证和授权子系统的功能可分为建立身份、应用访问控制规则和配置特定于系统的帐户。Shibboleth体系结构支持身份验证和授权的联合管理，但它不提供帐户供应。特定于系统的帐户是分配和跟踪系统内资源的工具。如今，这些账户的分配通常是手工完成的，所涉及的工作量可能成为协作的障碍；自动帐户配置使虚拟组织的形成更加容易。本项目对nmi支持的系统集成有以下具体目标：(1)nmi支持开放源码邮件列表应用程序的web界面，包括模块化认证，对附件的优雅处理，以及使用数字签名而不会出现“无效签名”错误；(2) nmi -启用包含WebDAV协议的开源内容管理系统；(3)通过LDAP中的便携式POSIX用户帐户对象自动提供nmi授权的系统帐户；(4)一个基于nmi的用户空间文件系统原型，用于根据用户身份动态提供文件和资源，而不考虑用户的位置；(5)成立互联网第二版MACE-TOOLS工作小组，利用承诺的互联网第二版组织及行政支援，检讨项目，并提供反馈意见，以作出改善；(6)传播有关“如何启用NMI应用程序和系统”的信息；(7)为选择用于NMI测试平台活动的虚拟组织成员提供Shibboleth服务，以加速采用启用NMI的协作工具。NMI和这个项目对NMI的贡献在更广泛的社会中是重要的。跨组织边界的合作甚至发生在小型非营利组织中，他们组成城市或州范围的委员会来解决共同感兴趣的问题。通过将现有的计算机系统捆绑在一起共享信息，这些组织将获得巨大的收益，而额外的管理开销很少。

This project pursues the NMI integration of a set of collaboration tools to support virtual organizations with an emphasis on authentication and authorization functionality. Authentication and authorization subsystem functionality can be categorized as establishing identity, applying access control rules, and provisioning system specific accounts. The Shibboleth architecture supports federated administration of authentication and authorization, but it does not provide account provisioning. System-specific accounts are the vehicle for allocation and tracking of resources within the system. Allocation of these accounts is frequently accomplished manually today and the amount of work involved can serve as a barrier to collaboration; automated account provisioning makes it easier for virtual organizations to form.This project has the following specific goals for NMI-enabled system integration: (1)NMI-enable the web interface to an open source mailing list application to include modular authentication, graceful handling of attachments, and use of digital signatures without the "Invalid Signature" error; (2)NMI-enable an open source Content Management System that incorporates the WebDAV protocol; (3) Automatically provision NMI-authorized system accounts via portable POSIX user account objects in LDAP; (4) Prototype an NMI-enabled user space file system for dynamic provisioning of files and resources based on user identity, regardless of user location; (5) Form an Internet2 MACE-TOOLS Working Group to review the project and provide feedback for improvement using the pledged Internet2 organizational and administrative support for this activity; (6) Disseminate information on "How to NMI-enable Applications and Systems;" and (7) Provide Shibboleth services for members of virtual organizations selected for the NMI testbed activities to speed the adoption of NMI-enabled collaboration tools.NMI and the contributions of this project to NMI are important in broader society. Collaborations across organizational boundaries occur even in small non-profit groups who form city or state-wide committees to address issues of common interest. These organizations would benefit tremendously by tying together their existing computer systems to share information with very little additional administrative overhead.