document: modulemd
version: 2
data:
    stream: client
    summary: RHEL IdM long term support client module
    description: |-
        RHEL IdM is an integrated solution to provide centrally managed Identity (users, hosts, services), Authentication (SSO, 2FA), and Authorization (host access control, SELinux user roles, services). The solution provides features for further integration with Linux based clients (SUDO, automount) and integration with Active Directory based infrastructures (Trusts).
        This module stream supports only client side of RHEL IdM solution
    license:
        module:
            - MIT
    dependencies:
        - buildrequires:
            389-ds:
                - "1.4"
            httpd:
                - "2.4"
            pki-core:
                - "10.6"
            platform:
                - el8
          requires:
            platform:
                - el8
    references:
        community: https://www.freeipa.org/
        documentation: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/index
        tracker: https://pagure.io/freeipa/issues
    profiles:
        common:
            description: A default profile for RHEL IdM client
            rpms:
                - ipa-client
    api:
        rpms:
            - ipa-client
            - ipa-client-common
            - ipa-client-debuginfo
            - ipa-common
            - ipa-debuginfo
            - ipa-debugsource
            - ipa-python-compat
            - ipa-healthcheck-core
            - python3-ipaclient
            - python3-ipalib
            - python3-jwcrypto
            - python3-pyusb
            - python3-qrcode
            - python3-qrcode-core
            - python3-yubico
    filter:
        rpms:
            - bind-dyndb-ldap
            - bind-dyndb-ldap-debuginfo
            - bind-dyndb-ldap-debugsource
            - custodia
            - ipa-server
            - ipa-server-common
            - ipa-server-debuginfo
            - ipa-server-dns
            - ipa-server-trust-ad
            - ipa-server-trust-ad-debuginfo
            - ipa-healthcheck
            - opendnssec
            - opendnssec-debuginfo
            - opendnssec-debugsource
            - python3-custodia
            - python3-ipaserver
            - python3-ipatests
            - slapi-nis
            - slapi-nis-debuginfo
            - slapi-nis-debugsource
            - softhsm
            - softhsm-debuginfo
            - softhsm-debugsource
            - softhsm-devel
    components:
        rpms:
            bind-dyndb-ldap:
                rationale: Driver for BIND to store DNS information in LDAP
                ref: 1164cec74890179133a27cb214c20f2c1589abb6
            custodia:
                rationale: Remote access to secrets and credentials in IdM topology
                ref: b5eafaf60d971325c16ed263862a49b0f7bb081f
                buildorder: 2
            ipa:
                rationale: Module API
                ref: 82afb9cc21110a6dc642857245b364ec6b7a5b4e
            ipa-healthcheck:
                rationale: A tool to detect issues in IdM clusters
                ref: 7d96088ca440ac419af99f6448467d2cfdc38e90
                buildorder: 3
            opendnssec:
                rationale: An implementation of DNSSEC support for IdM integrated DNS server
                ref: 4c9fbc55d127afb0d7840bfc24a01eeb6e804de9
            python-jwcrypto:
                rationale: JSON Web Cryptographic Tokens used by Custodia
                ref: fbe0d3020ccdd7bc0a6d955ff8f3292d91613f09
                buildorder: 1
            python-qrcode:
                rationale: QR code generator for IdM two-factor authentication
                ref: 0d70664ad6a03678320c862bc9ecc90b36d822c0
            python-yubico:
                rationale: Support for Yubikey-based tokens for IdM two-factor authentication
                ref: c5ba6a76f2ceda2e8b21be1accffb40a3a0c562a
                buildorder: 2
            pyusb:
                rationale: Python USB support to access USB tokens for IdM two-factor authentication
                ref: 49b533722a3d3fe7221a1532fa37a3e8ce0c2b68
                buildorder: 1
            slapi-nis:
                rationale: Compatibility plugin to serve legacy clients
                ref: a74f65a0d626dd6d49e787bbda6334ba301cacec
                arches:
                    - aarch64
                    - ppc64le
                    - s390x
                    - x86_64
            softhsm:
                rationale: Software version of a PKCS#11 Hardware Security Module
                ref: d60752bc754dd3325794ba2fb180f0bf616cab29