---
document: modulemd
version: 2
data:
  name: idm
  stream: "DL1"
  summary: The Red Hat Enterprise Linux Identity Management system module
  description: >-
    RHEL IdM is an integrated solution to provide centrally managed Identity (users,
    hosts, services), Authentication (SSO, 2FA), and Authorization (host access control,
    SELinux user roles, services). The solution provides features for further integration
    with Linux based clients (SUDO, automount) and integration with Active Directory
    based infrastructures (Trusts).
  license:
    module:
    - MIT
  dependencies:
  - buildrequires:
      389-ds: [1.4]
      httpd: [2.4]
      pki-core: [10.6]
      platform: [el8.8.0]
    requires:
      389-ds: [1.4]
      httpd: [2.4]
      pki-core: [10.6]
      platform: [el8]
  references:
    community: https://www.freeipa.org/
    documentation: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/index
    tracker: https://pagure.io/freeipa/issues
  profiles:
    adtrust:
      description: RHEL IdM Server Integration with Active Directory
      rpms:
      - ipa-healthcheck
      - ipa-healthcheck-core
      - ipa-server-trust-ad
    client:
      description: RHEL IdM Client
      rpms:
      - ipa-client
    common:
      description: A default profile for RHEL IdM client
      rpms:
      - ipa-client
    dns:
      description: RHEL IdM with integrated DNS server and integrated CA
      rpms:
      - ipa-healthcheck
      - ipa-healthcheck-core
      - ipa-server
      - ipa-server-dns
    server:
      description: Base RHEL IdM Server with integrated CA and no integrated DNS
      rpms:
      - ipa-healthcheck
      - ipa-healthcheck-core
      - ipa-server
  components:
    rpms:
      bind-dyndb-ldap:
        rationale: Driver for BIND to store DNS information in LDAP
        ref: 677a71cec2ff609c50e93cab1508f0c380a6a5ec
      custodia:
        rationale: Remote access to secrets and credentials in IdM topology
        ref: 3e36f334a88b7492234af55861dcc6a6b8c26ffc
        buildorder: 2
      ipa:
        rationale: Module API
        ref: d75e1e2ac69c17dcc10c7ade830baf8eabf9c5db
      ipa-healthcheck:
        rationale: A tool to detect issues in IdM clusters
        ref: 4d58743e8f3af4d3f89ce085f163758cf711c232
        buildorder: 3
      opendnssec:
        rationale: An implementation of DNSSEC support for IdM integrated DNS server
        ref: d0dd4952a8c2e7fe867eef12fb525e55e6eeb5fc
      python-jwcrypto:
        rationale: JSON Web Cryptographic Tokens used by Custodia
        ref: e9b9b33a759d48803f340a093e6c0cf5b1fe1474
        buildorder: 1
      python-kdcproxy:
        rationale: MS-KKDCP (kerberos proxy) WSGI module
        ref: 68b28b48ee00ddef71c995f0fa5fd78f9f3e33be
      python-qrcode:
        rationale: QR code generator for IdM two-factor authentication
        ref: 04dbcfa1acef36bad9bfe6e8bf24c3a8495ea91f
      python-yubico:
        rationale: Support for Yubikey-based tokens for IdM two-factor authentication
        ref: f75795097e8d2aa9bfbd4d6e8827b987915bffa4
        buildorder: 2
      pyusb:
        rationale: Python USB support to access USB tokens for IdM two-factor authentication
        ref: 3b6cbc9fbe5ee192ef3b3f9048d4f4f243ace381
        buildorder: 1
      slapi-nis:
        rationale: Compatibility plugin to serve legacy clients
        ref: a0a8fcd6c43f30b2ea116e02f043d8b79aeff28f
        arches: [aarch64, ppc64le, s390x, x86_64]
      softhsm:
        rationale: Software version of a PKCS#11 Hardware Security Module
        ref: 4454b913b6f65a2a6a4eca6e2392d0bfb4a04dae
...