<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<!-- IST CMS Migration - DO NOT MIGRATE - please leave this comment in place -->
<html><head>
<!-- change text within TITLE tags to the title of your page -->
<title>MIT IS&T: MIT Touchstone, enabling an application</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<!-- insert "keywords" and "description" meta tags here -->
<!-- Page Last Modified: 08/19/2008 -->
<meta name="Author" content="Paul Hill">
<meta name="keywords" content="authentication, Shibboleth, InCommon, certificates, Touchstone, webauth, account, accounts, kerberos, username, FAQ, answers, help, registering, registration">
<meta name="description" content="MIT Touchstone home page includes links for information about MIT Touchstone, web authentication, Shibboleth, InCommon, developer support, integration support, and more">
<link rel="stylesheet" href="http://web.mit.edu/ist/styles/isstyles.css" type="text/css">
<script language="JavaScript" type="text/javascript" src="http://web.mit.edu/ist/scripts/rollover.js"></script>
</head>
<body bgcolor="#FFFFFF" text="#000000" link="#006699" vlink="#666666" alink="#000000" marginwidth="0" marginheight="0">
<!--begin Information Services and Technology topnav -->
<table width="100%" border="0" cellpadding="0" cellspacing="0" bgcolor="#993333">
<form method="get" action="http://search.mit.edu/search">
<tr>
<!-- Begin image shims for accessibility purposes -->
<td height="73" rowspan="2" align="left" valign="top" nowrap class="islogobg"><a href="#subnavigation" accesskey="4"><img src="http://web.mit.edu/ist/images/header_logo-5px-shim.gif" width="5" height="73" border="0" alt="Skip to content Accesskey=4" /></a><a href="#subnavigation" accesskey="3"><img src="http://web.mit.edu/ist/images/header_logo-5px-shim.gif" width="5" height="73" border="0" alt="Skip to sub-navigation Accesskey=N" /></a><a href="http://web.mit.edu/ist/accessibility.html" accesskey="7"><img src="http://web.mit.edu/ist/images/header_logo-3px-shim.gif" width="3" height="73" border="0" alt="View our Accessibility Options" /></a></td>
<!-- End image shims for accessibility purposes -->
<td width="207" height="73" rowspan="2" align="left" valign="top" class="islogobg"><a href="http://web.mit.edu/ist/index.html"><img src="http://web.mit.edu/ist/images/header_is.gif" width="207" height="73" alt="MIT Information Services and Technology" border="0" /></a></td>
<td width="100%" height="43" align="left" valign="middle" nowrap="nowrap" bgcolor="#FFFFFF" class="topnav"><a href="http://web.mit.edu/ist/index.html" class="topnav" accesskey="2" title="Access Key: Alt (or control) + 2">Home</a><img src="http://web.mit.edu/ist/images/spacer.gif" width="5" height="8" alt="" />
<a href="http://web.mit.edu/ist/about/index.html" class="topnav" title="about IS&T, and our contact info">About
IS&T</a><img src="http://web.mit.edu/ist/images/spacer.gif" width="5" height="8" alt="" /> <a href="http://web.mit.edu/ist/contact.html" class="topnav" accesskey="0" title="Access Key: Alt (or control) + 0">Contact IS&T</a><img src="http://web.mit.edu/ist/images/spacer.gif" width="5" height="8" alt="" /> <a href="http://web.mit.edu/ist/sitemap.html" class="topnav" accesskey="6" title="Access Key: Alt (or control) + 6">Site Map</a><img src="http://web.mit.edu/ist/images/spacer.gif" width="15" height="8" alt="" /></td>
<td width="50%" height="43" align="right" valign="middle" nowrap="nowrap" bgcolor="#FFFFFF" class="topnav">
<!-- Begin search fields -->
<img src="http://web.mit.edu/ist/images/spacer.gif" width="3" height="1" alt="" >
<span class="search">Search</span>
<label for="search" accesskey="s"><input id="search" name="q" type="text" size="10" class="quicklinks"></label><img src="http://web.mit.edu/ist/images/spacer.gif"
width="1" height="1" alt=""><input type="hidden" name="proxyreload" value="1"><input
type="hidden" name="site" value="ist"><input type="hidden" name="client" value="ist"> <input type="hidden" name="output" value="xml_no_dtd"><input
type="hidden" name="proxystylesheet" value="http://web.mit.edu/ist/styles/google-ist2.xsl"><label for="go">
<input id="go" name="submit" type="image" src="http://web.mit.edu/ist/images/icon_go.gif" alt="Go" align="top" > </label>
<a href="http://web.mit.edu/ist/search/" class="topnav" accesskey="5" title="Access Key: Alt (or control) + 5">Advanced Search</a>
<!-- End search fields -->
<img src="http://web.mit.edu/ist/images/spacer.gif" width="20" height="8" alt="" /></td>
</tr>
<tr>
<td height="30" colspan="2" align="right" valign="top" nowrap="nowrap" class="headerbg"><a href="http://web.mit.edu/ist/start/index.html" onMouseOver="img1.src=img1ovr.src;" onMouseOut="img1.src=img1off.src;"><img src="http://web.mit.edu/ist/images/header_start_up.gif" width="163" height="30" name="img1" border="0" alt="Getting Started" /></a><a href="http://web.mit.edu/ist/services/index.html" onMouseOver="img2.src=img2ovr.src;" onMouseOut="img2.src=img2off.src;"><img src="http://web.mit.edu/ist/images/header_service_up.gif" width="167" height="30" alt="Getting Services by Topic or Alphabetically " border="0" name="img2" /></a><a href="http://web.mit.edu/ist/help/index.html" onMouseOver="img3.src=img3ovr.src;" onMouseOut="img3.src=img3off.src;"><img src="http://web.mit.edu/ist/images/header_help_up.gif" width="137" height="30" alt="Getting Help" border="0" name="img3" /></a></td>
</tr>
</form>
</table>
<!-- end Information Services and Technology topnav -->
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<!-- page main content -->
<td height="40">
<h1><img src="http://web.mit.edu/ist/images/spacer.gif" alt="" width="13" height="35" />
<a id="startcontent" name="startcontent"></a>MIT Touchstone: enabling an application
</h1>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td width="13"><img src="http://web.mit.edu/ist/images/spacer.gif" alt="" width="13" height="2" /></td>
<td width="100%"> <table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<td width="100%" height="2" class="dottedbg"><img src="http://web.mit.edu/ist/images/spacer.gif" width="1" height="2" alt="" /></td>
</tr>
</table></td>
<td width="22"><img src="http://web.mit.edu/ist/images/spacer.gif" width="22" height="2" alt="" /></td>
</tr>
</table></td>
</tr>
</table>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr> <td width="220" align="left" valign="top">
<!-- Circular top left image -->
<img src="http://web.mit.edu/ist/images/circle_sm_email_image.gif" width="194" height="186" alt="" />
<!--Announcements -->
<a id="subnavigation" name="subnavigation"></a>
<img src="http://web.mit.edu/ist/images/title_links.gif" width="206" height="20" alt="Related topics" />
<table width="220" border="0" cellspacing="0" cellpadding="0">
<tr>
<td width="28"><img src="http://web.mit.edu/ist/images/spacer.gif" alt="" width="28" height="10" /></td>
<td width="160" valign="top">
<p><a href="http://mit.edu/touchstone/"><strong>MIT Touchstone</strong></a></p>
<p><a href="http://shibboleth.internet2.edu/"><strong>Shibboleth® at Internet 2</strong></a></p>
</td>
<td width="30"><img src="http://web.mit.edu/ist/images/spacer.gif" alt="" width="30" height="8" /></td>
</tr>
</table></td>
<!-- page intro -->
<td align="left" valign="top">
<p>In order to make your application use MIT Touchstone, or Shibboleth, for authentication, several steps have to be performed.
MIT Information Services offers consulting services to make this process easier. However, many people at MIT are able to perform
each of these simple steps with minimal intervention from IS&T.
</p>
<p>
The boxes below are intended to help guide you through your configuration.
</p>
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<td align="left" valign="top" width="50%">
<table width="100%" border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFCC">
<tr>
<td width="15" height="22" align="left" valign="top" bgcolor="#4C4C4C">
<img src="http://web.mit.edu/ist/images/table_l_endcap.gif" width="15" height="22" alt="" />
</td>
<td width="100%" height="22" nowrap="nowrap" class="subjectheads">
Installing, or building, the Shibboleth SP software for your system
</td>
<!-- about this topic -->
<td width="15" height="22" align="right" valign="top" bgcolor="#4C4C4C"><img src="http://web.mit.edu/ist/images/table_r_endcap.gif" width="15" height="22" alt="" /></td>
</tr>
<tr align="left" valign="top">
<td width="15" class="border-l-b">
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
</td>
<td width="100%" class="border-b">
<p><strong>
Shibboleth SP version information
</strong></p>
<p>
IS&T is currently supporting customers intending to use Shibboleth 1.3x. We expect to start supporting Shibboleth 2.x based SPs
in the late Spring of 2009.
</p>
<p><strong>Using installers:</strong></p>
<p>
RPMs are available from Internet2 for <a href="http://shibboleth.internet2.edu/downloads/shibboleth/cppsp/1.3.1/RPMS/i386/RHE/">RHEL 4 and 5</a>.
</p>
<p>
An installer for <a href="http://shibboleth.internet2.edu/downloads/shibboleth/cppsp/1.3.1/win32/">IIS</a> is also available from Internet2.
</p>
<p>
Some other Linux distributions also maintain binary installers available from the OS distribution point. If you have questions
about other distributions please contact touchstone-support and indicate what operating distribution and version you are using.
</p>
<p><strong>Building from source:</strong></p>
<p>
The Touchstone team maintains a
<a href="http://web.mit.edu/touchstone/shibboleth/source/shibboleth-sp-sources.tgz">source tarball</a>
of tbe Shibboleth SP, including all of
its immediate prerequisites (curl, log4shib, xerces-c, xml-security-c, and opensaml),
and a script to perform the entire build, in the touchstone locker,
in /mit/touchstone/shibboleth/source/shibboleth-sp-sources.tgz.
</p>
<p>
The script can build the software on Linux and Solaris systems; note that you will to need to have
Apache httpd (preferably 2.x, though 1.3 should also work) and OpenSSL (0.9.7 or higher) installed
on the system, including their development packages. On Solaris systems, you must have the native
Sun C/C++ compiler installed; Athena Solaris machines have this available, via attachandrun scripts
and the sunsoft locker, but this requires that you have AFS tokens for the athena cell. Solaris machines
must also have GNU make (gmake) installed.
</p>
<p>
To build from this, create a build directory, and unpack the source tarball into it; use the build-sp.sh script as follows:
</P>
<strong>
<pre>
- sh build/build-sp.sh [-a <apxs_path>] [-p <install_prefix>] [-s openssl_prefix]
</pre>
</strong>
<p>
</p>
<p>
The -a option argument is the path to the Apache apxs executable, e.g. /usr/local/apache2/bin/apxs
(defaults to using the apxs in the PATH). The -p option specifies the install prefix
(defaults to /usr/local/shibboleth). The -s option specifies the install location of the version of
OpenSSL you want to build against, e.g. /usr/local/ssl (defaults to finding OpenSSL in standard system library locations).
</P>
<p>
Once you have built the software successfully, you will need to configure and customize it for use.
</P>
</td>
<td width="15" class="border-r-b">
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
</td>
</tr>
</table>
</td>
<!-- Supported Software -->
<td width="15">
<img src="http://web.mit.edu/ist/images/spacer.gif" width="15" height="1" alt="" />
</td>
<tr>
<td width="50%" align="left" valign="top">
<table width="100%" border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFCC">
<tr>
<td align="left" valign="top" width="15" bgcolor="#4C4C4C">
<img src="http://web.mit.edu/ist/images/table_l_endcap.gif" width="15" height="22" alt="" />
</td>
<td width="100%" nowrap="nowrap" class="subjectheads">
Configuration and customization for use
</td>
<br>
<td align="right" valign="top" width="15" bgcolor="#4C4C4C">
<img src="http://web.mit.edu/ist/images/table_r_endcap.gif" width="15" height="22" alt="" />
</td>
</tr>
<tr align="left" valign="top">
<td width="15" class="border-l-b">
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
</td>
<td width="100%" class="border-b">
<p>
<strong>Note:</strong>
The gen-shib.sh procedure described below currently works only on Linux and Solaris systems; it should be portable to other UNIX-based systems without too much effort.
</p>
<p>
When you have successfully built and installed the Shibboleth SP, you will need to configure
things to work against our test and pilot IdPs. We have some template files and a script in
AFS (the touchstone locker) to generate the needed config files from the templates: cd to
shibboleth's etc directory ($prefix/etc/shibboleth), and copy in the following files
from /mit/touchstone/shibboleth/config/shibboleth-sp/ (or just copy all files from the directory):
</p>
<ul>
<li>AAP.xml.in</li>
<li>shibboleth.xml.in</li>
<li>MIT-metadata.xml</li>
<li>protectnetwork-metadata.xml</li>
<li>gen-shib.sh</li>
</ul>
<p>
On Solaris, also copy:
</p>
<ul>
<li>shibd.in </li>
<li>shibd-wrapper.in</li>
</ul>
<p>
Then run the gen-shib.sh script:
</p>
<strong>
<pre>
sh ./gen-shib.sh
</pre>
</strong>
<p>
and answer its prompts, which will hopefully be clear. <strong>Remember that the certificate it wants should be
enabled for client as well as server use.</strong> Any MIT server certificates that have been created after July of 2008
will be enabled for client as well as server use.
</P>
<p>
The $prefix/etc/shibboleth directory will contain apache.config, apache2.config, and apache22.config, which contain needed
and example directives for Apache 1.3, Apache 2.0, and Apache 2.2, respectively; copy and/or include the appropriate file
in your Apache config, and customize as needed. The directory also contains a shibd init script for Red Hat (shibd-redhat)
and Debian (shibd-debian) systems. On Red Hat machines, copy shibd-redhat to /etc/init.d/shibd, make sure it is executable,
add it as a managed service with "chkconfig --add shibd", and enable it for run levels 3, 4, and 5 ("chkconfig --level 345 shibd on").
On Solaris machines, the gen-shib.sh script will generate a shibd init script (from shibd.in); this should be installed
into /etc/init.d, and configured to start at boot time, <strong>after</strong> httpd has started.
</p>
<p>
<strong>NOTE:</strong>
shibd is a daemon that must be running, so make sure it is started at boot time, after Apache httpd has been started.
</P>
<p>
The Shibboleth Apache module logs by default to $prefix/var/log/httpd/native.log. <strong>This file must be writable by Apache</strong>,
which may require that you set its directory's ownership and/or permissions to allow write access by the user Apache is
configured to run under. You may also choose to change the location of the file, by modifying the log4j.appender.native_log.fileName
setting in $prefix/etc/shibboleth/native.logger.
</P>
<p>
For information on configuring Shibboleth to protect content, see
the <a href="https://spaces.internet2.edu/display/SHIB/SPProtectionConfig">Shibboleth wiki</a> at Internet2, as well as
the information in the sections below.
</p>
<p>
You will probably also want to customize the error pages and support contact information listed in the Errors element
in $prefix/etc/shibboleth/shibboleth.xml (search for "You should customize these pages!"), e.g.:
</p>
<blockquote>
<p>
<Errors session="/usr/local/shibboleth/etc/shibboleth/sessionError.html"
metadata="/usr/local/shibboleth/etc/shibboleth/metadataError.html"
rm="/usr/local/shibboleth/etc/shibboleth/rmError.html"
access="/usr/local/shibboleth/etc/shibboleth/accessError.html"
ssl="/usr/local/shibboleth/etc/shibboleth/sslError.html"
supportContact="root@localhost"
logoLocation="/shibboleth-sp/logo.jpg"
styleSheet="/shibboleth-sp/main.css"/>
<p>
The pages are used as follows:
</p>
<ul>
<li>
session
<p>
displayed if a session cannot be created after successful authentication,
for example if shibd is not running. In a standard configuration, you can
force this page to be displayed by visiting the server's /Shibboleth.sso location, e.g.:
<strong>https://my-sp.mit.edu/Shibboleth.sso</strong>
<p>
</li>
<li>
metadata
<p>
displayed in certain cases where there is no valid metadata
for an identity provider. This should not happen using our
standard configuration; it should only be possible when
using the Artifact profile, or "lazy sessions", and there
is a configuration problem. You can force the page to be
displayed by visiting:
<strong>https://my-sp.mit.edu/Shibboleth.sso?providerId=NoSuchIdP</strong>
</P>
</li>
<li>
rm
<p>
displayed when an exception occurs when exporting assertions into
request headers. This indicates a software problem, and should
not happen.
</p>
</li>
<li>
access
<p>
displayed for access control failures. This should only
happen if you have access control directives in the Apache
configuration for your Shibboleth-protected content. You
can force the page to be displayed by adding an access
control directive that is certain to fail, for example
"require NoSuchAlias" (remember to remove this configuration
when you have completed testing).
</P>
</li>
<li>
ssl
<p>
displayed when a POST is attempted using http instead of https,
and RedirectToSSL is in effect. This should not happen on a
properly configured server.
</p>
</li>
</ul>
</P>
</blockquote>
</td>
<td width="15" class="border-r-b">
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
</td>
</tr>
</table>
<br />
<table width="100%" border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFCC">
<tr>
<td align="left" valign="top" width="15" bgcolor="#4C4C4C">
<img src="http://web.mit.edu/ist/images/table_l_endcap.gif" width="15" height="22" alt="" />
</td>
<td width="100%" align="left" valign="middle" nowrap="nowrap" class="subjectheads">
Example code and configuration information for third party applications
</td>
<!-- Related Services -->
<td align="right" valign="top" width="15" bgcolor="#4C4C4C">
<img src="http://web.mit.edu/ist/images/table_r_endcap.gif" width="15" height="22" alt="" />
</td>
</tr>
<tr align="left" valign="top">
<td width="15" class="border-l-b">
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
</td>
<td width="100%" class="border-b">
<p>
We have some pointers to example code written in various lanaguages. We do expect the examples to increase
over time. We are also creating some local documentation that covers the configuration of third party software.
However, users are encouraged to look at resources outside of MIT as well. If you do find useful information please
do bring it to our attention.
</p>
<p>
Some simple examples:
<ul>
<li>
<a href="http://wikis.mit.edu/confluence/display/TOUCHSTONE/Sample+Source+Code+-+The+SAML+Assertion">Display</a> the results of the SAML assertion in various languages.
</li>
</ul>
</p>
<p></p>
<p>
Third party applications:
<ul>
<li>
<a href="https://wikis.mit.edu/confluence/display/TOUCHSTONE/Drupal">Drupal</a>
</li>
</ul>
</p>
</td>
<td width="15" class="border-r-b"><img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" /><img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" /><img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
</td>
</tr>
</table>
<br />
<table width="100%" border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFCC">
<tr>
<td align="left" valign="top" width="15" bgcolor="#4C4C4C">
<img src="http://web.mit.edu/ist/images/table_l_endcap.gif" width="15" height="22" alt="" />
</td>
<td width="100%" align="left" valign="middle" nowrap="nowrap" class="subjectheads">
Support Resources
</td>
<!-- Support Resources -->
<td align="right" valign="top" width="15" bgcolor="#4C4C4C">
<img src="http://web.mit.edu/ist/images/table_r_endcap.gif" width="15" height="22" alt="" />
</td>
</tr>
<tr align="left" valign="top">
<td width="15" class="border-l-b">
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
<img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
</td>
<td class="border-b"> <p><strong>Consulting Services:</strong></p>
<p>
Consulting service may be arranged by sending mail to touchstone-support. This will open an RT case
and a person will be assigned to work with you.
</p>
<p><strong>Training:</strong></p>
<p>We are intending to offer some hands on training during IAP 2009. Space will be limited. The time
and location has yet been determined.
</p>
<p><strong>Who to Contact:</strong></p>
<p>
Web: <a href="http://mit.edu/touchstone">MIT Touchstone</a><br>
Email: <a href="mailto:touchstone-support@mit.edu">touchstone-support@mit.edu<br>
</p>
</td>
<td width="15" class="border-r-b"><img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" /><img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" /><img src="http://web.mit.edu/ist/images/spacer.gif" width="14" height="1" alt="" />
</td>
</tr>
</table></td>
</tr>
</table></td>
<td width="22"><img src="http://web.mit.edu/ist/images/spacer.gif" width="22" height="10" alt="" /></td>
</tr>
</table>
<!-- begin Information Services and Technology footer -->
<table border="0" cellspacing="0" cellpadding="0">
<tr>
<td height="16" colspan="3"> </td>
</tr>
<tr valign="top" align="left">
<td width="13"> </td>
<td width="207" valign="middle"><a href="http://web.mit.edu"><img src="http://web.mit.edu/ist/images/footer_mit_logo.gif" width="62" height="36" alt="MIT" border="0" /></a></td>
<td><small><a href="http://web.mit.edu/ist/index.html" accesskey="2" title="Access Key: Alt (or control) + 2">Home</a> | <a href="http://web.mit.edu/ist/start/index.html" title="learn the basics of computing and communications">Getting Started</a> | <a href="http://web.mit.edu/ist/services/index.html" title="find information, products, and services">Getting Services</a> | <a href="http://web.mit.edu/ist/help/index.html" accesskey="8" title="Access Key: Alt (or control) + 8">Getting Help</a> | <a href="http://web.mit.edu/ist/about/index.html" title="about IS&T, and our contact info">About IS&T</a>
<a href="http://web.mit.edu/ist/accessibility.html" accesskey="7" title="Access Key: Alt (or control) + 7">Accessibility</a><br /> |
Ask a <a href="http://web.mit.edu/ist/help/index.html">technology question</a> or send a <a href="http://web.mit.edu/ist/contact.html" accesskey="0" title="Access Key: Alt (or control) + 0">comment about this web page.</a><a href="http://web.mit.edu/ist/accessibility.html" accesskey="0"></a></small></td>
</tr>
</table>
<br />
<!-- Begin MIT-use only web reporting counter -->
<img src="http://counter.mit.edu/tally" width="1" height="1" alt="">
<!-- End MIT-use only web reporting counter -->
<!-- end Information Services and Technology footer -->
</body>