document: modulemd
version: 2
data:
  stream: DL1
  summary: The Red Hat Enterprise Linux Identity Management system module
  description: RHEL IdM is an integrated solution to provide centrally managed Identity
    (users, hosts, services), Authentication (SSO, 2FA), and Authorization (host access
    control, SELinux user roles, services). The solution provides features for further
    integration with Linux based clients (SUDO, automount) and integration with Active
    Directory based infrastructures (Trusts).
  license:
    module:
    - MIT
  dependencies:
  - buildrequires:
      389-ds:
      - "1.4"
      httpd:
      - "2.4"
      pki-core:
      - "10.6"
      platform:
      - el8
    requires:
      389-ds:
      - "1.4"
      httpd:
      - "2.4"
      pki-core:
      - "10.6"
      platform:
      - el8
  references:
    community: https://www.freeipa.org/
    documentation: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/index
    tracker: https://pagure.io/freeipa/issues
  profiles:
    adtrust:
      description: RHEL IdM Server Integration with Active Directory
      rpms:
      - ipa-healthcheck
      - ipa-healthcheck-core
      - ipa-server-trust-ad
    client:
      description: RHEL IdM Client
      rpms:
      - ipa-client
    common:
      description: A default profile for RHEL IdM client
      rpms:
      - ipa-client
    dns:
      description: RHEL IdM with integrated DNS server and integrated CA
      rpms:
      - ipa-healthcheck
      - ipa-healthcheck-core
      - ipa-server
      - ipa-server-dns
    server:
      description: Base RHEL IdM Server with integrated CA and no integrated DNS
      rpms:
      - ipa-healthcheck
      - ipa-healthcheck-core
      - ipa-server
  components:
    rpms:
      bind-dyndb-ldap:
        rationale: Driver for BIND to store DNS information in LDAP
        ref: f48214fec3dcb4de0544a9dd699a81953c39e8d0
      custodia:
        rationale: Remote access to secrets and credentials in IdM topology
        ref: 289de3cec00159e70ff3d93042f79ec85d247dcb
        buildorder: 2
      ipa:
        rationale: Module API
        ref: 77ebaec3b26dc72adfda12eb8ee28a8fcaeb3433
      ipa-healthcheck:
        rationale: A tool to detect issues in IdM clusters
        ref: bb054d922d6a5b809c678659100f5c0ae7f215ca
        buildorder: 3
      opendnssec:
        rationale: An implementation of DNSSEC support for IdM integrated DNS server
        ref: 307fe506e30ba710dbddeb38b9def6af49ee7f01
      python-jwcrypto:
        rationale: JSON Web Cryptographic Tokens used by Custodia
        ref: a3c76afcaae9e6a13d56b51f3a602208118bd1c2
        buildorder: 1
      python-kdcproxy:
        rationale: MS-KKDCP (kerberos proxy) WSGI module
        ref: 37624b4edcfad0fdf75685d20c27c5e275fcc48c
      python-qrcode:
        rationale: QR code generator for IdM two-factor authentication
        ref: f533b2f27d3c4233265cc931a584725780ec940c
      python-yubico:
        rationale: Support for Yubikey-based tokens for IdM two-factor authentication
        ref: 7cd0f6e23793f92666eef7c900472d3977e79c29
        buildorder: 2
      pyusb:
        rationale: Python USB support to access USB tokens for IdM two-factor authentication
        ref: 5a04549ed70027bfc66ac91ddde213b74ce9d0c4
        buildorder: 1
      slapi-nis:
        rationale: Compatibility plugin to serve legacy clients
        ref: 2000926e7ca824e52dbcb2cacf5490062b9f6f68
        arches:
        - aarch64
        - ppc64le
        - s390x
        - x86_64
      softhsm:
        rationale: Software version of a PKCS#11 Hardware Security Module
        ref: d142fbda9687370ba5c06022c7f3cdf30509cc09