{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "sssd-idp-0.2.9.4-19.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T02:24:06.585354077Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/sssd-idp-0.2.9.4-19.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-sssd-idp-2.9.4",
      "name": "sssd-idp",
      "licenseConcluded": "GPL-3.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7f1a07c0e356e55146637c9b953135fa11b59c316af84c28d56c7b0cdbbc13ec"
        }
      ],
      "description": "This package provides Kerberos plugins that are required to enable\nauthentication against external identity providers. Additionally a helper\nprogram to handle the OAuth 2.0 Device Authorization Grant is provided.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/sssd-idp@2.9.4-19.oe2403sp4?arch=x86_64&epoch=0&upstream=sssd-2.9.4-19.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/SSSD/sssd/",
      "licenseDeclared": "GPL-3.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Kerberos plugins and OIDC helper for external identity providers.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.9.4-19.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-e2fsprogs-1.47.0",
      "name": "e2fsprogs",
      "licenseConcluded": "GPLv2+ and LGPLv2 and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0ddb99c89bf62029f1bdc51c316c9b47790c820e084a22c3e2eb44d54764242a"
        }
      ],
      "description": "The e2fsprogs package consists of a lot of tools for users to create,\ncheck, modify, and correct any inconsistencies in second extended file\nsystem.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/e2fsprogs@1.47.0-12.oe2403sp4?arch=x86_64&epoch=0&upstream=e2fsprogs-1.47.0-12.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://e2fsprogs.sourceforge.net/",
      "licenseDeclared": "GPLv2+ and LGPLv2 and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Second extended file system management tools",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.47.0-12.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b136cc1d6c94e7df3b522b541c89c22084f0ce440f1b9714ed930f664b10ea04"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jansson-2.14",
      "name": "jansson",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "eb0cd73d18910b2a73530fed90f18a2e392ff76a82aa62ee3716fd5938773141"
        }
      ],
      "description": "Jansson is a C library for encoding, decoding and manipulating JSON data.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jansson@2.14-4.oe2403sp4?arch=x86_64&epoch=0&upstream=jansson-2.14-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.digip.org/jansson/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A C library for encoding, decoding and manipulating JSON data",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.14-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jose-14",
      "name": "jose",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f2f8bb5fe1646bc9b48bc2c4f9db973c4ed55df821999509a0b0c499d05ae1d5"
        }
      ],
      "description": "José is a C-language implementation of the Javascript Object\nSigning and Encryption standards. José provides a command-line\nutility which encompasses most of the JOSE features. This allows\nfor easy integration into your project and one-off scripts.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jose@14-1.oe2403sp4?arch=x86_64&epoch=0&upstream=jose-14-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/latchset/jose",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "José is a command line utility for performing various tasks on JSON  objects",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:14-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-krb5-libs-1.21.2",
      "name": "krb5-libs",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "02fd78c6ebe121b7d6acdfc736a7b179de596083a9652a632a4d64acbf62617e"
        }
      ],
      "description": "This package contains the shared libraries needed by Kerberos 5.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/krb5-libs@1.21.2-20.oe2403sp4?arch=x86_64&epoch=0&upstream=krb5-1.21.2-20.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://web.mit.edu/kerberos/www/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The non-admin shared libraries used by Kerberos 5",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.21.2-20.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcurl-8.4.0",
      "name": "libcurl",
      "licenseConcluded": "curl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "770cd5a6c6bfb3c08b1a9610375e2f421679b9783d6937a0021fdab3f74cf4c8"
        }
      ],
      "description": "A library for getting files from web servers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcurl@8.4.0-30.oe2403sp4?arch=x86_64&epoch=0&upstream=curl-8.4.0-30.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://curl.se/",
      "licenseDeclared": "curl",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A library for getting files from web servers",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.4.0-30.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libtalloc-2.4.1",
      "name": "libtalloc",
      "licenseConcluded": "LGPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "89f9afeb9dbc0a824a21a89791ff4fb08508eef56bd5effe3efa0f5ee8dde9ed"
        }
      ],
      "description": "A hierarchical, reference counted memory pool system with destructors",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libtalloc@2.4.1-1.oe2403sp4?arch=x86_64&epoch=0&upstream=libtalloc-2.4.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://talloc.samba.org/talloc/doc/html/index.html",
      "licenseDeclared": "LGPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A memory pool system",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.4.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-opengauss-6.0.0",
      "name": "opengauss",
      "licenseConcluded": "MulanPSL-2.0 and MIT and BSD and zlib and TCL and Apache-2.0 and BSL-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "70082f1b6c65cd775f681c659b67af7941038b5d9c51a38ec8738ee1881f6fa6"
        }
      ],
      "description": "openGauss kernel : openGauss is an open source relational database management system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/opengauss@6.0.0-27.oe2403sp4?arch=x86_64&epoch=0&upstream=opengauss-6.0.0-27.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitee.com/opengauss/openGauss-server",
      "licenseDeclared": "MulanPSL-2.0 and MIT and BSD and zlib and TCL and Apache-2.0 and BSL-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "openGauss is an open source relational database management system",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.0.0-27.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-popt-1.19",
      "name": "popt",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "de7f6e44f674409350b2a1f0d6ca6b8e58c2103f758af07bb173f1be5d377809"
        }
      ],
      "description": "The popt library exists essentially for parsing command line options. Some\nspecific advantages of popt are no global variables (allowing multiple passes\nin parsing argv), parsing an arbitrary array of argv-style elements (allowing\nparsing of command-line-strings from any source), a standard method of option\naliasing, ability to exec external option filters, and automatic generation\nof help and usage messages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/popt@1.19-4.oe2403sp4?arch=x86_64&epoch=0&upstream=popt-1.19-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/rpm-software-management/popt/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "C library for parsing command line parameters",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.19-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-sssd-common-2.9.4",
      "name": "sssd-common",
      "licenseConcluded": "GPL-3.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2442e9e6ce0dee0b7f829903c7ca6d1673e2c029bf9218037c1a6d331e0a544f"
        }
      ],
      "description": "Common files for the SSSD. The common package includes all the files needed\nto run a particular back end, however, the back ends are packaged in separate\nsubpackages such as sssd-ldap.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/sssd-common@2.9.4-19.oe2403sp4?arch=x86_64&epoch=0&upstream=sssd-2.9.4-19.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/SSSD/sssd/",
      "licenseDeclared": "GPL-3.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Common files for the SSSD",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.9.4-19.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-libs-255",
      "name": "systemd-libs",
      "licenseConcluded": "LGPLv2+ and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b3dcafdf1560755cf4b2937271d1f2c44c09a57e670c980551917912e708209a"
        }
      ],
      "description": "Libraries for systemd and udev.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd-libs@255-59.oe2403sp4?arch=x86_64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "licenseDeclared": "LGPLv2+ and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "systemd libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-59.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-sssd-idp-2.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-e2fsprogs-1.47.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sssd-idp-2.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sssd-idp-2.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jansson-2.14"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sssd-idp-2.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jose-14"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sssd-idp-2.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-krb5-libs-1.21.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sssd-idp-2.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcurl-8.4.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sssd-idp-2.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libtalloc-2.4.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sssd-idp-2.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-opengauss-6.0.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sssd-idp-2.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-popt-1.19"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sssd-idp-2.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-sssd-common-2.9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sssd-idp-2.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-libs-255"
    }
  ]
}
