document: modulemd
version: 2
data:
    stream: DL1
    summary: The Red Hat Enterprise Linux Identity Management system module
    description: RHEL IdM is an integrated solution to provide centrally managed Identity (users, hosts, services), Authentication (SSO, 2FA), and Authorization (host access control, SELinux user roles, services). The solution provides features for further integration with Linux based clients (SUDO, automount) and integration with Active Directory based infrastructures (Trusts).
    license:
        module:
            - MIT
    dependencies:
        - buildrequires:
            389-ds:
                - "1.4"
            httpd:
                - "2.4"
            pki-core:
                - "10.6"
            platform:
                - el8
          requires:
            389-ds:
                - "1.4"
            httpd:
                - "2.4"
            pki-core:
                - "10.6"
            platform:
                - el8
    references:
        community: https://www.freeipa.org/
        documentation: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/index
        tracker: https://pagure.io/freeipa/issues
    profiles:
        adtrust:
            description: RHEL IdM Server Integration with Active Directory
            rpms:
                - ipa-healthcheck
                - ipa-healthcheck-core
                - ipa-server-trust-ad
        client:
            description: RHEL IdM Client
            rpms:
                - ipa-client
        common:
            description: A default profile for RHEL IdM client
            rpms:
                - ipa-client
        dns:
            description: RHEL IdM with integrated DNS server and integrated CA
            rpms:
                - ipa-healthcheck
                - ipa-healthcheck-core
                - ipa-server
                - ipa-server-dns
        server:
            description: Base RHEL IdM Server with integrated CA and no integrated DNS
            rpms:
                - ipa-healthcheck
                - ipa-healthcheck-core
                - ipa-server
    components:
        rpms:
            bind-dyndb-ldap:
                rationale: Driver for BIND to store DNS information in LDAP
                ref: cb5675e74684f51367c65765480d4b2cdbbdd8c1
            custodia:
                rationale: Remote access to secrets and credentials in IdM topology
                ref: d346965c2dd4b38b34ad168d7cd2ce2b3e7f28ae
                buildorder: 2
            ipa:
                rationale: Module API
                ref: 5d967fa010e4eedcdf54d4ada37e003b0ffd4ee9
            ipa-healthcheck:
                rationale: A tool to detect issues in IdM clusters
                ref: 5e1b9c98f715c2df36e0185b39cc8eaa3069e9de
                buildorder: 3
            opendnssec:
                rationale: An implementation of DNSSEC support for IdM integrated DNS server
                ref: b3e5b5183fb1384806948c8dc02f2422059933b9
            python-jwcrypto:
                rationale: JSON Web Cryptographic Tokens used by Custodia
                ref: c1f7843567fbb83737fa65ae443de17ce865e0ad
                buildorder: 1
            python-kdcproxy:
                rationale: MS-KKDCP (kerberos proxy) WSGI module
                ref: d10470c1c691e745445edd9b85c326b738b653eb
            python-qrcode:
                rationale: QR code generator for IdM two-factor authentication
                ref: 3132dc75d3c79659a60ac0e3a99a8409e6b77d6f
            python-yubico:
                rationale: Support for Yubikey-based tokens for IdM two-factor authentication
                ref: f5ad9077e445a397a63e8cf419e47ac946ab7b12
                buildorder: 2
            pyusb:
                rationale: Python USB support to access USB tokens for IdM two-factor authentication
                ref: 2942b7fd8af541865bc2b3fd00c35c63cc544a25
                buildorder: 1
            slapi-nis:
                rationale: Compatibility plugin to serve legacy clients
                ref: 4057a93608b226e4ffcff622acc21703033724ee
                arches:
                    - aarch64
                    - ppc64le
                    - s390x
                    - x86_64
            softhsm:
                rationale: Software version of a PKCS#11 Hardware Security Module
                ref: 5733a6cadfd2a32ed82914af6d5a738e3081c89a