---

document: modulemd

version: 2

data:

  name: idm

  stream: client

  summary: RHEL IdM long term support client module

  description: >-

    RHEL IdM is an integrated solution to provide centrally managed Identity (users,

    hosts, services), Authentication (SSO, 2FA), and Authorization (host access control,

    SELinux user roles, services). The solution provides features for further integration

    with Linux based clients (SUDO, automount) and integration with Active Directory

    based infrastructures (Trusts).

    This module stream supports only client side of RHEL IdM solution

  license:

    module:

    - MIT

  dependencies:

  - buildrequires:

      389-ds: [1.4]

      httpd: [2.4]

      pki-core: [10.6]

      platform: [el8.1.0]

    requires:

      platform: [el8]

  references:

    community: https://www.freeipa.org/

    documentation: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/index

    tracker: https://pagure.io/freeipa/issues

  profiles:

    common:

      description: A default profile for RHEL IdM client

      rpms:

      - ipa-client

  api:

    rpms:

    - ipa-client

    - ipa-client-common

    - ipa-client-debuginfo

    - ipa-common

    - ipa-debuginfo

    - ipa-debugsource

    - ipa-python-compat

    - python3-ipaclient

    - python3-ipalib

    - python3-jwcrypto

    - python3-pyusb

    - python3-qrcode

    - python3-qrcode-core

    - python3-yubico

  filter:

    rpms:

    - bind-dyndb-ldap

    - bind-dyndb-ldap-debuginfo

    - bind-dyndb-ldap-debugsource

    - custodia

    - ipa-server

    - ipa-server-common

    - ipa-server-debuginfo

    - ipa-server-dns

    - ipa-server-trust-ad

    - ipa-server-trust-ad-debuginfo

    - opendnssec

    - opendnssec-debuginfo

    - opendnssec-debugsource

    - python3-custodia

    - python3-ipaserver

    - slapi-nis

    - slapi-nis-debuginfo

    - slapi-nis-debugsource

    - softhsm

    - softhsm-debuginfo

    - softhsm-debugsource

    - softhsm-devel

  components:

    rpms:

      bind-dyndb-ldap:

        rationale: Driver for BIND to store DNS information in LDAP

        ref: 24b8886fd42fb8a6f71fd5b6f7d3f107ab32f912

      custodia:

        rationale: Remote access to secrets and credentials in IdM topology

        ref: 021e1242b2b3278855b6dd456081a36a2a09805f

        buildorder: 2

      ipa:

        rationale: Module API

        ref: 645cee1e2c9b5eb37bdeede34be4bbf61be04e23

      opendnssec:

        rationale: An implementation of DNSSEC support for IdM integrated DNS server

        ref: 1afa759b4ec2b246176c9c7914a539ea339b7f8f

      python-jwcrypto:

        rationale: JSON Web Cryptographic Tokens used by Custodia

        ref: 9d27e51a5724e549f2d33602bb75539e70b05b95

        buildorder: 1

      python-qrcode:

        rationale: QR code generator for IdM two-factor authentication

        ref: ee64e46fa4051fda939a71abaf15b540e3fcb520

      python-yubico:

        rationale: Support for Yubikey-based tokens for IdM two-factor authentication

        ref: ceb8768db937e08794817ad905ea748ff8ca0e48

        buildorder: 2

      pyusb:

        rationale: Python USB support to access USB tokens for IdM two-factor authentication

        ref: ad586f2d793e73d20bed53df94ec24ccef550adb

        buildorder: 1

      slapi-nis:

        rationale: Compatibility plugin to serve legacy clients

        ref: 5392d37de6cf13bbb2c182a8499ed9d32aa8c106

        arches: [aarch64, ppc64le, s390x, x86_64]

      softhsm:

        rationale: Software version of a PKCS#11 Hardware Security Module

        ref: 7a7b1ec20a73f141dc2cde28112a90d0e09d6a39

...