---
document: modulemd
version: 2
data:
  stream: DL1
  summary: The Red Hat Enterprise Linux Identity Management system module
  description: >-
    RHEL IdM is an integrated solution to provide centrally managed Identity (users,
    hosts, services), Authentication (SSO, 2FA), and Authorization (host access control,
    SELinux user roles, services). The solution provides features for further integration
    with Linux based clients (SUDO, automount) and integration with Active Directory
    based infrastructures (Trusts).
  license:
    module:
    - MIT
  dependencies:
  - buildrequires:
      389-ds: [1.4]
      httpd: [2.4]
      pki-core: [10.6]
      platform: [el8]
    requires:
      389-ds: [1.4]
      httpd: [2.4]
      pki-core: [10.6]
      platform: [el8]
  references:
    community: https://www.freeipa.org/
    documentation: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/index
    tracker: https://pagure.io/freeipa/issues
  profiles:
    adtrust:
      description: RHEL IdM Server Integration with Active Directory
      rpms:
      - ipa-healthcheck
      - ipa-healthcheck-core
      - ipa-server-trust-ad
    client:
      description: RHEL IdM Client
      rpms:
      - ipa-client
    common:
      description: A default profile for RHEL IdM client
      rpms:
      - ipa-client
    dns:
      description: RHEL IdM with integrated DNS server and integrated CA
      rpms:
      - ipa-healthcheck
      - ipa-healthcheck-core
      - ipa-server
      - ipa-server-dns
    server:
      description: Base RHEL IdM Server with integrated CA and no integrated DNS
      rpms:
      - ipa-healthcheck
      - ipa-healthcheck-core
      - ipa-server
  components:
    rpms:
      bind-dyndb-ldap:
        rationale: Driver for BIND to store DNS information in LDAP
        ref: changed/i8c-stream-DL1/bind-dyndb-ldap-11.6-4.module+el8.8.0+17351+9a3fb056
      custodia:
        rationale: Remote access to secrets and credentials in IdM topology
        ref: changed/i8c-stream-DL1/custodia-0.6.0-3.module+el8.1.0+4098+f286395e
        buildorder: 2
      ipa:
        rationale: Module API
        ref: changed/i8c-stream-DL1/ipa-4.9.11-5.module+el8.8.0+18146+a1d8660b
      ipa-healthcheck:
        rationale: A tool to detect issues in IdM clusters
        ref: changed/i8c-stream-DL1/ipa-healthcheck-0.12-1.module+el8.8.0+17582+6bf5bf91
        buildorder: 3
      opendnssec:
        rationale: An implementation of DNSSEC support for IdM integrated DNS server
        ref: changed/i8c-stream-DL1/opendnssec-2.1.7-1.module+el8.4.0+9007+5084bdd8
      python-jwcrypto:
        rationale: JSON Web Cryptographic Tokens used by Custodia
        ref: changed/i8c-stream-DL1/python-jwcrypto-0.5.0-1.1.module+el8.7.0+15842+306cbc83
        buildorder: 1
      python-kdcproxy:
        rationale: MS-KKDCP (kerberos proxy) WSGI module
        ref: changed/i8c-stream-DL1/python-kdcproxy-0.4-5.module+el8.2.0+4691+a05b2456
      python-qrcode:
        rationale: QR code generator for IdM two-factor authentication
        ref: changed/i8c-stream-DL1/python-qrcode-5.1-12.module+el8.1.0+4098+f286395e
      python-yubico:
        rationale: Support for Yubikey-based tokens for IdM two-factor authentication
        ref: changed/i8c-stream-DL1/python-yubico-1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5
        buildorder: 2
      pyusb:
        rationale: Python USB support to access USB tokens for IdM two-factor authentication
        ref: changed/i8c-stream-DL1/pyusb-1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5
        buildorder: 1
      slapi-nis:
        rationale: Compatibility plugin to serve legacy clients
        ref: changed/i8c-stream-DL1/slapi-nis-0.60.0-1.module+el8.7.0+16405+581a7c1e
        arches: [aarch64, ppc64le, s390x, x86_64]
      softhsm:
        rationale: Software version of a PKCS#11 Hardware Security Module
        ref: changed/i8c-stream-DL1/softhsm-2.6.0-5.module+el8.4.0+10227+076cd560
...