their organization. Internet2 reserves the right to make final
decisions about participation in the Federation.</p>
- <p>Participation in the Federation is limited to the period during which
- an organization is learning about Shibboleth and federated operations. Upon
- completion of this period, the organization is expected to join a
- Federation (or some other management solution) that meets its long-term
- operational needs.
- </p>
- <p>By joining InQueue, an organization agrees that the Federation can list their name on the Federation web site as a member of the Federation.</p>
+ <p>InQueue is intended to serve as a primary federation
+ for an organization only during the period an
+ organization is learning about Shibboleth and federated
+ operations. Upon completion of this period, the
+ organization is expected to join a Federation (or some
+ other management solution) that meets its long-term
+ operational needs. </p>
+
+ <p>By joining InQueue, an organization agrees that the
+ Federation can list their name on the Federation web
+ site as a member of the Federation.</p>
- <p>In joining InQueue, an organization will make a good faith effort to maintain a web page describing their use of Shibboleth. This page will be linked from the Federation member list.</p>
+ <p>In joining InQueue, an organization will make a good
+ faith effort to maintain a web page describing their use
+ of Shibboleth. This page will be linked from the
+ Federation member list.</p>
+
</blockquote>
<h4>2.2 Data management</h4>
HEPKI Test CA</a></li>
<li><a href="http://www.cren.net/crenca/">CREN CA</a></li>
</ul>
+
+ <p>For origins, OpenSSL must also be configured to use the
+ appropriate set of trusted roots for the issuance of SSL
+ certificates that Shibboleth trusts. For InQueue, this list may
+ be obtained from <span
+ class="fixedwidth">http://wayf.internet2.edu/InQueue/ca-bundle.
+ crt</span>. This list should then be copied for <span
+ class="fixedwidth">mod_ssl</span>, which will typically need to
+ be to <span
+ class="fixedwidth">/conf/ssl.crt/ca-bundle.crt</span>. This
+ list of CA's is <b>not</b> rigorous nor secure and may contain
+ CA's which have no level of assurance or are questionable.</p>
</blockquote>
<h4>2.4 Attributes</h4>
<h4>3. Joining InQueue</h4>
- <blockquote><p>To join InQueue, origins <a href="mailto:shib-support@internet2.edu?subject=Shib%20Origin%20Site%%0D%20%2020Application"> submit a request to
- shib-support@internet2.edu</a> containing the following
+ <blockquote><p>To join InQueue, origins <a href="mailto:inqueue-support@internet2.edu?subject=Shib%20Origin%20Site%%0D%20%2020Application"> submit a request to
+ inqueue-support@internet2.edu</a> containing the following
information:</p></blockquote>
<blockquote>
<li>(optional) Briefly describe the organization's planned uses of Shibboleth.
</ul></blockquote>
- <blockquote><p>To join InQueue, targets must <a href="mailto:shib-support@internet2.edu?subject=Shib%20Target%20Site%%0D%20%2020Application"> submit a basic application to
- shib-support@internet2.edu</a> containing the following
+ <blockquote><p>To join InQueue, targets must <a href="mailto:inqueue-support@internet2.edu?subject=Shib%20Target%20Site%%0D%20%2020Application"> submit a basic application to
+ inqueue-support@internet2.edu</a> containing the following
information:</p></blockquote>
<blockquote>