---
document: modulemd
version: 2
data:
  name: idm
  stream: "DL1"
  version: 8050020220619132347
  context: c4480fab
  summary: The Red Hat Enterprise Linux Identity Management system module
  description: >-
    RHEL IdM is an integrated solution to provide centrally managed Identity (users,
    hosts, services), Authentication (SSO, 2FA), and Authorization (host access control,
    SELinux user roles, services). The solution provides features for further integration
    with Linux based clients (SUDO, automount) and integration with Active Directory
    based infrastructures (Trusts).
  license:
    module:
    - MIT
  xmd:
    mbs:
      buildrequires:
        389-ds:
          context: 71de4e11
          filtered_rpms:
          - cockpit-389-ds-0:1.4.3.23-12.module+oc8.5.0+86+b90064db
          koji_tag: module-389-ds-1.4-8050020220619122728-71de4e11
          ref: 534e4fcaac7486f314e69b46fea7e0e32394fdf4
          stream: 1.4
          version: 8050020220619122728
        httpd:
          context: c7643c7d
          filtered_rpms: []
          koji_tag: module-httpd-2.4-8050020220617094858-c7643c7d
          ref: bc193837304c00808f9dc839aa7a0712f19d8d44
          stream: 2.4
          version: 8050020220617094858
        pki-core:
          context: da9ebc32
          filtered_rpms: []
          koji_tag: module-pki-core-10.6-8050020220619134022-da9ebc32
          ref: a17947251defe2319de6e9ffa0e38f1223330432
          stream: 10.6
          version: 8050020220619134022
        pki-deps:
          context: c7643c7d
          filtered_rpms:
          - glassfish-jaxb-codemodel-annotation-compiler-0:2.2.11-11.module+oc8.5.0+93+6026a600
          - msv-javadoc-1:2013.6.1-11.module+oc8.5.0+93+6026a600
          - relaxngcc-0:1.12-14.module+oc8.5.0+93+6026a600
          - jakarta-commons-httpclient-javadoc-1:3.1-28.module+oc8.5.0+93+6026a600
          - msv-xsdlib-1:2013.6.1-11.module+oc8.5.0+93+6026a600
          - jackson-core-javadoc-0:2.10.0-1.module+oc8.5.0+93+6026a600
          - glassfish-jaxb-codemodel-0:2.2.11-11.module+oc8.5.0+93+6026a600
          - msv-msv-1:2013.6.1-11.module+oc8.5.0+93+6026a600
          - xerces-j2-demo-0:2.11.0-34.module+oc8.5.0+93+6026a600
          - bea-stax-javadoc-0:1.2.0-16.module+oc8.5.0+93+6026a600
          - xml-commons-apis-javadoc-0:1.4.01-25.module+oc8.5.0+93+6026a600
          - slf4j-log4j12-0:1.7.25-4.module+oc8.5.0+93+6026a600
          - log4j-over-slf4j-0:1.7.25-4.module+oc8.5.0+93+6026a600
          - slf4j-sources-0:1.7.25-4.module+oc8.5.0+93+6026a600
          - xml-commons-resolver-javadoc-0:1.2-26.module+oc8.5.0+93+6026a600
          - bea-stax-0:1.2.0-16.module+oc8.5.0+93+6026a600
          - jackson-annotations-javadoc-0:2.10.0-1.module+oc8.5.0+93+6026a600
          - msv-rngconv-1:2013.6.1-11.module+oc8.5.0+93+6026a600
          - jackson-module-jaxb-annotations-javadoc-0:2.7.6-4.module+oc8.5.0+93+6026a600
          - xalan-j2-javadoc-0:2.7.1-38.module+oc8.5.0+93+6026a600
          - xalan-j2-demo-0:2.7.1-38.module+oc8.5.0+93+6026a600
          - xerces-j2-javadoc-0:2.11.0-34.module+oc8.5.0+93+6026a600
          - glassfish-jax-rs-api-javadoc-0:2.0.1-6.module+oc8.5.0+93+6026a600
          - glassfish-jaxb-txw-parent-0:2.2.11-11.module+oc8.5.0+93+6026a600
          - apache-commons-collections-testframework-0:3.2.2-10.module+oc8.5.0+93+6026a600
          - xml-commons-apis-manual-0:1.4.01-25.module+oc8.5.0+93+6026a600
          - fasterxml-oss-parent-0:26-6.module+oc8.5.0+93+6026a600
          - msv-manual-1:2013.6.1-11.module+oc8.5.0+93+6026a600
          - velocity-demo-0:1.7-24.module+oc8.5.0+93+6026a600
          - jcl-over-slf4j-0:1.7.25-4.module+oc8.5.0+93+6026a600
          - glassfish-jaxb-parent-0:2.2.11-11.module+oc8.5.0+93+6026a600
          - jakarta-commons-httpclient-demo-1:3.1-28.module+oc8.5.0+93+6026a600
          - jackson-jaxrs-providers-datatypes-0:2.9.9-1.module+oc8.5.0+93+6026a600
          - xalan-j2-manual-0:2.7.1-38.module+oc8.5.0+93+6026a600
          - xml-stylebook-javadoc-0:1.0-0.25.b3_xalan2.svn313293.module+oc8.5.0+93+6026a600
          - msv-xmlgen-1:2013.6.1-11.module+oc8.5.0+93+6026a600
          - jackson-jaxrs-providers-parent-0:2.9.9-1.module+oc8.5.0+93+6026a600
          - glassfish-jax-rs-api-0:2.0.1-6.module+oc8.5.0+93+6026a600
          - jackson-databind-javadoc-0:2.10.0-1.module+oc8.5.0+93+6026a600
          - glassfish-jaxb-bom-0:2.2.11-11.module+oc8.5.0+93+6026a600
          - glassfish-jaxb-0:2.2.11-11.module+oc8.5.0+93+6026a600
          - glassfish-jaxb-bom-ext-0:2.2.11-11.module+oc8.5.0+93+6026a600
          - apache-commons-net-javadoc-0:3.6-3.module+oc8.5.0+93+6026a600
          - slf4j-jcl-0:1.7.25-4.module+oc8.5.0+93+6026a600
          - slf4j-manual-0:1.7.25-4.module+oc8.5.0+93+6026a600
          - stax-ex-javadoc-0:1.7.7-8.module+oc8.5.0+93+6026a600
          - slf4j-ext-0:1.7.25-4.module+oc8.5.0+93+6026a600
          - jakarta-commons-httpclient-manual-1:3.1-28.module+oc8.5.0+93+6026a600
          - glassfish-jaxb-runtime-parent-0:2.2.11-11.module+oc8.5.0+93+6026a600
          - jul-to-slf4j-0:1.7.25-4.module+oc8.5.0+93+6026a600
          - relaxngcc-javadoc-0:1.12-14.module+oc8.5.0+93+6026a600
          - glassfish-jaxb-external-parent-0:2.2.11-11.module+oc8.5.0+93+6026a600
          - glassfish-jaxb-api-javadoc-0:2.2.12-8.module+oc8.5.0+93+6026a600
          - relaxngDatatype-javadoc-0:2011.1-7.module+oc8.5.0+93+6026a600
          - apache-commons-lang-javadoc-0:2.6-21.module+oc8.5.0+93+6026a600
          - apache-commons-collections-javadoc-0:3.2.2-10.module+oc8.5.0+93+6026a600
          - xalan-j2-xsltc-0:2.7.1-38.module+oc8.5.0+93+6026a600
          - resteasy-javadoc-0:3.0.26-6.module+oc8.5.0+93+6026a600
          - jackson-bom-0:2.10.0-1.module+oc8.5.0+93+6026a600
          - jackson-parent-0:2.10-1.module+oc8.5.0+93+6026a600
          - msv-demo-1:2013.6.1-11.module+oc8.5.0+93+6026a600
          - jackson-jaxrs-providers-javadoc-0:2.9.9-1.module+oc8.5.0+93+6026a600
          - xml-stylebook-demo-0:1.0-0.25.b3_xalan2.svn313293.module+oc8.5.0+93+6026a600
          - glassfish-jaxb-rngom-0:2.2.11-11.module+oc8.5.0+93+6026a600
          - glassfish-fastinfoset-javadoc-0:1.2.13-9.module+oc8.5.0+93+6026a600
          - velocity-javadoc-0:1.7-24.module+oc8.5.0+93+6026a600
          - slf4j-javadoc-0:1.7.25-4.module+oc8.5.0+93+6026a600
          - glassfish-jaxb-codemodel-parent-0:2.2.11-11.module+oc8.5.0+93+6026a600
          - xsom-javadoc-0:0-19.20110809svn.module+oc8.5.0+93+6026a600
          - xmlstreambuffer-javadoc-0:1.5.4-8.module+oc8.5.0+93+6026a600
          - xml-stylebook-0:1.0-0.25.b3_xalan2.svn313293.module+oc8.5.0+93+6026a600
          - velocity-manual-0:1.7-24.module+oc8.5.0+93+6026a600
          koji_tag: module-pki-deps-10.6-8050020220620032327-c7643c7d
          ref: a7ed80afea0c1ad755f13d4ae7165fb43b43ed1b
          stream: 10.6
          version: 8050020220620032327
        platform:
          context: 00000000
          filtered_rpms: []
          koji_tag: module-oc-8.5.0-build
          ref: virtual
          stream: oc8.5.0
          stream_collision_modules: 
          ursine_rpms: 
          version: 2
      commit: b610f5a4a940be59d7097126c6e4b4e60a932c49
      mse: TRUE
      rpms:
        bind-dyndb-ldap:
          ref: 950a1c57362cc760edb22b28ed75c42f1c04c5d6
        custodia:
          ref: b1ea3a7c0de42af9808f6d259b0ffeb3f9bb2574
        ipa:
          ref: 79dfeb6ea0068e191c7f58735c6ecf8079f9c204
        ipa-healthcheck:
          ref: 0c04471e50042d4f1ac4ea63d5daefcfaa1f079c
        opendnssec:
          ref: cf30f3e6a0791ea8c91dd336e1876f83972aafcc
        python-jwcrypto:
          ref: 5f3d50736c2d246ad88b0a098363a3ea8f7f6213
        python-kdcproxy:
          ref: a641b7c9b2096950c1a1eff72089c9ae6cdb0355
        python-qrcode:
          ref: 7e409fc1186ff4e7f9e5bfcd6c291fe1636a44ef
        python-yubico:
          ref: 6f4fee9a9768b161ecd8bfec3ef185f64818c4cf
        pyusb:
          ref: c6815003754f405f20cdc2d3529dd51ddf965ec2
        slapi-nis:
          ref: 6172882edb09ab4ea0f3e16d80c20cd6e1924ad1
        softhsm:
          ref: dae4a0930540a3d0ded6d7166113042e1a9816c5
      scmurl: https://gitee.com/src-opencloudos-modules/idm.git?#b610f5a4a940be59d7097126c6e4b4e60a932c49
      ursine_rpms:
      - fasterxml-oss-parent-0:26-6.module_el8.4.0+595+e59c9af2.noarch
      - glassfish-fastinfoset-javadoc-0:1.2.13-9.module_el8.4.0+595+e59c9af2.noarch
      - glassfish-jaxb-bom-0:2.2.11-11.module_el8.4.0+595+e59c9af2.noarch
      - glassfish-jaxb-bom-ext-0:2.2.11-11.module_el8.4.0+595+e59c9af2.noarch
      - apache-commons-collections-testframework-0:3.2.2-10.module_el8.0.0+30+832da3a1.noarch
      - jackson-annotations-javadoc-0:2.10.0-1.module_el8.4.0+595+e59c9af2.noarch
      - jackson-bom-0:2.10.0-1.module_el8.4.0+595+e59c9af2.noarch
      - bea-stax-0:1.2.0-16.module_el8.4.0+595+e59c9af2.noarch
      - glassfish-jaxb-api-javadoc-0:2.2.12-8.module_el8.4.0+595+e59c9af2.noarch
      - bea-stax-javadoc-0:1.2.0-16.module_el8.4.0+595+e59c9af2.noarch
      - slf4j-sources-0:1.7.25-4.module_el8.5.0+922+9f7ad99e.noarch
      - msv-demo-1:2013.6.1-11.module_el8.4.0+595+e59c9af2.noarch
      - jackson-core-javadoc-0:2.10.0-1.module_el8.4.0+595+e59c9af2.noarch
      - relaxngDatatype-javadoc-0:2011.1-7.module_el8.4.0+595+e59c9af2.noarch
      - glassfish-jaxb-0:2.2.11-11.module_el8.4.0+595+e59c9af2.noarch
      - velocity-demo-0:1.7-24.module_el8.5.0+922+9f7ad99e.noarch
      - mod_md-1:2.0.8-8.module_el8.3.0+452+00a0bbdd.x86_64
      - xml-commons-apis-javadoc-0:1.4.01-25.module_el8.5.0+922+9f7ad99e.noarch
      - jackson-module-jaxb-annotations-javadoc-0:2.7.6-4.module_el8.4.0+595+e59c9af2.noarch
      - jcl-over-slf4j-0:1.7.25-4.module_el8.5.0+922+9f7ad99e.noarch
      - slf4j-javadoc-0:1.7.25-4.module_el8.5.0+922+9f7ad99e.noarch
      - xerces-j2-javadoc-0:2.11.0-34.module_el8.5.0+922+9f7ad99e.noarch
      - glassfish-jax-rs-api-0:2.0.1-6.module_el8.4.0+595+e59c9af2.noarch
      - slf4j-jcl-0:1.7.25-4.module_el8.5.0+922+9f7ad99e.noarch
      - apache-commons-collections-javadoc-0:3.2.2-10.module_el8.0.0+30+832da3a1.noarch
      - xml-stylebook-0:1.0-0.25.b3_xalan2.svn313293.module_el8.4.0+595+e59c9af2.noarch
      - glassfish-jaxb-rngom-0:2.2.11-11.module_el8.4.0+595+e59c9af2.noarch
      - msv-xmlgen-1:2013.6.1-11.module_el8.4.0+595+e59c9af2.noarch
      - xalan-j2-xsltc-0:2.7.1-38.module_el8.5.0+922+9f7ad99e.noarch
      - glassfish-jaxb-external-parent-0:2.2.11-11.module_el8.4.0+595+e59c9af2.noarch
      - xmlstreambuffer-javadoc-0:1.5.4-8.module_el8.4.0+595+e59c9af2.noarch
      - glassfish-jaxb-runtime-parent-0:2.2.11-11.module_el8.4.0+595+e59c9af2.noarch
      - glassfish-jaxb-parent-0:2.2.11-11.module_el8.4.0+595+e59c9af2.noarch
      - jakarta-commons-httpclient-manual-1:3.1-28.module_el8.0.0+30+832da3a1.noarch
      - velocity-manual-0:1.7-24.module_el8.5.0+922+9f7ad99e.noarch
      - log4j-over-slf4j-0:1.7.25-4.module_el8.5.0+922+9f7ad99e.noarch
      - jackson-jaxrs-providers-parent-0:2.9.9-1.module_el8.4.0+595+e59c9af2.noarch
      - msv-xsdlib-1:2013.6.1-11.module_el8.4.0+595+e59c9af2.noarch
      - glassfish-jaxb-codemodel-0:2.2.11-11.module_el8.4.0+595+e59c9af2.noarch
      - apache-commons-lang-javadoc-0:2.6-21.module_el8.0.0+30+832da3a1.noarch
      - relaxngcc-javadoc-0:1.12-14.module_el8.5.0+981+19284cf3.noarch
      - jackson-databind-javadoc-0:2.10.0-1.module_el8.4.0+782+1d1c31a0.noarch
      - apache-commons-net-javadoc-0:3.6-3.module_el8.5.0+922+9f7ad99e.noarch
      - xml-commons-resolver-javadoc-0:1.2-26.module_el8.5.0+922+9f7ad99e.noarch
      - slf4j-ext-0:1.7.25-4.module_el8.5.0+922+9f7ad99e.noarch
      - slf4j-log4j12-0:1.7.25-4.module_el8.5.0+922+9f7ad99e.noarch
      - xml-commons-apis-manual-0:1.4.01-25.module_el8.5.0+922+9f7ad99e.noarch
      - xml-stylebook-demo-0:1.0-0.25.b3_xalan2.svn313293.module_el8.4.0+595+e59c9af2.noarch
      - glassfish-jaxb-codemodel-annotation-compiler-0:2.2.11-11.module_el8.4.0+595+e59c9af2.noarch
      - slf4j-manual-0:1.7.25-4.module_el8.5.0+922+9f7ad99e.noarch
      - xml-stylebook-javadoc-0:1.0-0.25.b3_xalan2.svn313293.module_el8.4.0+595+e59c9af2.noarch
      - glassfish-jax-rs-api-javadoc-0:2.0.1-6.module_el8.4.0+595+e59c9af2.noarch
      - xalan-j2-javadoc-0:2.7.1-38.module_el8.5.0+922+9f7ad99e.noarch
      - msv-rngconv-1:2013.6.1-11.module_el8.4.0+595+e59c9af2.noarch
      - relaxngcc-0:1.12-14.module_el8.5.0+981+19284cf3.noarch
      - jakarta-commons-httpclient-javadoc-1:3.1-28.module_el8.0.0+30+832da3a1.noarch
      - xerces-j2-demo-0:2.11.0-34.module_el8.5.0+922+9f7ad99e.noarch
      - stax-ex-javadoc-0:1.7.7-8.module_el8.4.0+595+e59c9af2.noarch
      - glassfish-jaxb-codemodel-parent-0:2.2.11-11.module_el8.4.0+595+e59c9af2.noarch
      - jackson-jaxrs-providers-datatypes-0:2.9.9-1.module_el8.4.0+595+e59c9af2.noarch
      - jakarta-commons-httpclient-demo-1:3.1-28.module_el8.0.0+30+832da3a1.noarch
      - msv-manual-1:2013.6.1-11.module_el8.4.0+595+e59c9af2.noarch
      - velocity-javadoc-0:1.7-24.module_el8.5.0+922+9f7ad99e.noarch
      - xalan-j2-demo-0:2.7.1-38.module_el8.5.0+922+9f7ad99e.noarch
      - xsom-javadoc-0:0-19.20110809svn.module_el8.4.0+595+e59c9af2.noarch
      - xalan-j2-manual-0:2.7.1-38.module_el8.5.0+922+9f7ad99e.noarch
      - jackson-parent-0:2.10-1.module_el8.4.0+595+e59c9af2.noarch
      - jackson-jaxrs-providers-javadoc-0:2.9.9-1.module_el8.4.0+595+e59c9af2.noarch
      - jul-to-slf4j-0:1.7.25-4.module_el8.5.0+922+9f7ad99e.noarch
      - resteasy-javadoc-0:3.0.26-6.module_el8.4.0+595+e59c9af2.noarch
      - msv-msv-1:2013.6.1-11.module_el8.4.0+595+e59c9af2.noarch
      - msv-javadoc-1:2013.6.1-11.module_el8.4.0+595+e59c9af2.noarch
      - glassfish-jaxb-txw-parent-0:2.2.11-11.module_el8.4.0+595+e59c9af2.noarch
  dependencies:
  - buildrequires:
      389-ds: [1.4]
      httpd: [2.4]
      pki-core: [10.6]
      platform: [oc8.5.0]
    requires:
      389-ds: [1.4]
      httpd: [2.4]
      pki-core: [10.6]
      platform: [oc8]
  references:
    community: https://www.freeipa.org/
    documentation: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/index
    tracker: https://pagure.io/freeipa/issues
  profiles:
    adtrust:
      description: RHEL IdM Server Integration with Active Directory
      rpms:
      - ipa-healthcheck
      - ipa-healthcheck-core
      - ipa-server-trust-ad
    client:
      description: RHEL IdM Client
      rpms:
      - ipa-client
    common:
      description: A default profile for RHEL IdM client
      rpms:
      - ipa-client
    dns:
      description: RHEL IdM with integrated DNS server and integrated CA
      rpms:
      - ipa-healthcheck
      - ipa-healthcheck-core
      - ipa-server
      - ipa-server-dns
    server:
      description: Base RHEL IdM Server with integrated CA and no integrated DNS
      rpms:
      - ipa-healthcheck
      - ipa-healthcheck-core
      - ipa-server
  components:
    rpms:
      bind-dyndb-ldap:
        rationale: Driver for BIND to store DNS information in LDAP
        repository: git+https://gitee.com/src-opencloudos-rpms/bind-dyndb-ldap
        cache: http://pkgs.fedoraproject.org/repo/pkgs/bind-dyndb-ldap
        ref: 950a1c57362cc760edb22b28ed75c42f1c04c5d6
        arches: [aarch64, x86_64]
      custodia:
        rationale: Remote access to secrets and credentials in IdM topology
        repository: git+https://gitee.com/src-opencloudos-rpms/custodia
        cache: http://pkgs.fedoraproject.org/repo/pkgs/custodia
        ref: b1ea3a7c0de42af9808f6d259b0ffeb3f9bb2574
        buildorder: 2
        arches: [aarch64, x86_64]
      ipa:
        rationale: Module API
        repository: git+https://gitee.com/src-opencloudos-rpms/ipa
        cache: http://pkgs.fedoraproject.org/repo/pkgs/ipa
        ref: 79dfeb6ea0068e191c7f58735c6ecf8079f9c204
        arches: [aarch64, x86_64]
      ipa-healthcheck:
        rationale: A tool to detect issues in IdM clusters
        repository: git+https://gitee.com/src-opencloudos-rpms/ipa-healthcheck
        cache: http://pkgs.fedoraproject.org/repo/pkgs/ipa-healthcheck
        ref: 0c04471e50042d4f1ac4ea63d5daefcfaa1f079c
        buildorder: 3
        arches: [aarch64, x86_64]
      opendnssec:
        rationale: An implementation of DNSSEC support for IdM integrated DNS server
        repository: git+https://gitee.com/src-opencloudos-rpms/opendnssec
        cache: http://pkgs.fedoraproject.org/repo/pkgs/opendnssec
        ref: cf30f3e6a0791ea8c91dd336e1876f83972aafcc
        arches: [aarch64, x86_64]
      python-jwcrypto:
        rationale: JSON Web Cryptographic Tokens used by Custodia
        repository: git+https://gitee.com/src-opencloudos-rpms/python-jwcrypto
        cache: http://pkgs.fedoraproject.org/repo/pkgs/python-jwcrypto
        ref: 5f3d50736c2d246ad88b0a098363a3ea8f7f6213
        buildorder: 1
        arches: [aarch64, x86_64]
      python-kdcproxy:
        rationale: MS-KKDCP (kerberos proxy) WSGI module
        repository: git+https://gitee.com/src-opencloudos-rpms/python-kdcproxy
        cache: http://pkgs.fedoraproject.org/repo/pkgs/python-kdcproxy
        ref: a641b7c9b2096950c1a1eff72089c9ae6cdb0355
        arches: [aarch64, x86_64]
      python-qrcode:
        rationale: QR code generator for IdM two-factor authentication
        repository: git+https://gitee.com/src-opencloudos-rpms/python-qrcode
        cache: http://pkgs.fedoraproject.org/repo/pkgs/python-qrcode
        ref: 7e409fc1186ff4e7f9e5bfcd6c291fe1636a44ef
        arches: [aarch64, x86_64]
      python-yubico:
        rationale: Support for Yubikey-based tokens for IdM two-factor authentication
        repository: git+https://gitee.com/src-opencloudos-rpms/python-yubico
        cache: http://pkgs.fedoraproject.org/repo/pkgs/python-yubico
        ref: 6f4fee9a9768b161ecd8bfec3ef185f64818c4cf
        buildorder: 2
        arches: [aarch64, x86_64]
      pyusb:
        rationale: Python USB support to access USB tokens for IdM two-factor authentication
        repository: git+https://gitee.com/src-opencloudos-rpms/pyusb
        cache: http://pkgs.fedoraproject.org/repo/pkgs/pyusb
        ref: c6815003754f405f20cdc2d3529dd51ddf965ec2
        buildorder: 1
        arches: [aarch64, x86_64]
      slapi-nis:
        rationale: Compatibility plugin to serve legacy clients
        repository: git+https://gitee.com/src-opencloudos-rpms/slapi-nis
        cache: http://pkgs.fedoraproject.org/repo/pkgs/slapi-nis
        ref: 6172882edb09ab4ea0f3e16d80c20cd6e1924ad1
        arches: [aarch64, ppc64le, s390x, x86_64]
      softhsm:
        rationale: Software version of a PKCS#11 Hardware Security Module
        repository: git+https://gitee.com/src-opencloudos-rpms/softhsm
        cache: http://pkgs.fedoraproject.org/repo/pkgs/softhsm
        ref: dae4a0930540a3d0ded6d7166113042e1a9816c5
        arches: [aarch64, x86_64]
...