document: modulemd
version: 2
data:
    stream: DL1
    summary: The Red Hat Enterprise Linux Identity Management system module
    description: RHEL IdM is an integrated solution to provide centrally managed Identity (users, hosts, services), Authentication (SSO, 2FA), and Authorization (host access control, SELinux user roles, services). The solution provides features for further integration with Linux based clients (SUDO, automount) and integration with Active Directory based infrastructures (Trusts).
    license:
        module:
            - MIT
    dependencies:
        - buildrequires:
            389-ds:
                - "1.4"
            httpd:
                - "2.4"
            pki-core:
                - "10.6"
            platform:
                - el8
          requires:
            389-ds:
                - "1.4"
            httpd:
                - "2.4"
            pki-core:
                - "10.6"
            platform:
                - el8
    references:
        community: https://www.freeipa.org/
        documentation: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/index
        tracker: https://pagure.io/freeipa/issues
    profiles:
        adtrust:
            description: RHEL IdM Server Integration with Active Directory
            rpms:
                - ipa-healthcheck
                - ipa-healthcheck-core
                - ipa-server-trust-ad
        client:
            description: RHEL IdM Client
            rpms:
                - ipa-client
        common:
            description: A default profile for RHEL IdM client
            rpms:
                - ipa-client
        dns:
            description: RHEL IdM with integrated DNS server and integrated CA
            rpms:
                - ipa-healthcheck
                - ipa-healthcheck-core
                - ipa-server
                - ipa-server-dns
        server:
            description: Base RHEL IdM Server with integrated CA and no integrated DNS
            rpms:
                - ipa-healthcheck
                - ipa-healthcheck-core
                - ipa-server
    components:
        rpms:
            bind-dyndb-ldap:
                rationale: Driver for BIND to store DNS information in LDAP
                ref: 145648c36019ea7e2c71f5f6f75ca66d177559d7
            custodia:
                rationale: Remote access to secrets and credentials in IdM topology
                ref: abacb6acd3a1051af6aced52d5842a2775c0ead0
                buildorder: 2
            ipa:
                rationale: Module API
                ref: 56241593d18624de349143deed55f18838978c83
            ipa-healthcheck:
                rationale: A tool to detect issues in IdM clusters
                ref: 352317298a0fa6b2afd2a091b2622b247863ba71
                buildorder: 3
            opendnssec:
                rationale: An implementation of DNSSEC support for IdM integrated DNS server
                ref: 1d5275988f907ad4a1689fd71995453172bfcede
            python-jwcrypto:
                rationale: JSON Web Cryptographic Tokens used by Custodia
                ref: 3d915419a9bad7634b917fda36223d46c30fbca9
                buildorder: 1
            python-kdcproxy:
                rationale: MS-KKDCP (kerberos proxy) WSGI module
                ref: d1154157c7c380b60ebb049ce1979750ad4bcf09
            python-qrcode:
                rationale: QR code generator for IdM two-factor authentication
                ref: efdf3340626aafa2bc086a49e8d1c109b2c43c5a
            python-yubico:
                rationale: Support for Yubikey-based tokens for IdM two-factor authentication
                ref: 25fb1fcd0ef57f7b5c2252df7fd08c61e6e7fdd1
                buildorder: 2
            pyusb:
                rationale: Python USB support to access USB tokens for IdM two-factor authentication
                ref: 10336f28395119becde70d88959b09c4f45eb128
                buildorder: 1
            slapi-nis:
                rationale: Compatibility plugin to serve legacy clients
                ref: 075f2acb286789aa05868918957a1bdc3bdd6775
                arches:
                    - aarch64
                    - ppc64le
                    - s390x
                    - x86_64
            softhsm:
                rationale: Software version of a PKCS#11 Hardware Security Module
                ref: dc2b46d32a310eb3555ed6c3980e33e585997c4f