Loading...
1# SPDX-License-Identifier: GPL-2.0-only
2config SUNRPC
3 tristate
4 depends on MULTIUSER
5
6config SUNRPC_GSS
7 tristate
8 select OID_REGISTRY
9 depends on MULTIUSER
10
11config SUNRPC_BACKCHANNEL
12 bool
13 depends on SUNRPC
14
15config SUNRPC_SWAP
16 bool
17 depends on SUNRPC
18
19config RPCSEC_GSS_KRB5
20 tristate "Secure RPC: Kerberos V mechanism"
21 depends on SUNRPC && CRYPTO
22 depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS
23 depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES
24 default y
25 select SUNRPC_GSS
26 help
27 Choose Y here to enable Secure RPC using the Kerberos version 5
28 GSS-API mechanism (RFC 1964).
29
30 Secure RPC calls with Kerberos require an auxiliary user-space
31 daemon which may be found in the Linux nfs-utils package
32 available from http://linux-nfs.org/. In addition, user-space
33 Kerberos support should be installed.
34
35 If unsure, say Y.
36
37config SUNRPC_DISABLE_INSECURE_ENCTYPES
38 bool "Secure RPC: Disable insecure Kerberos encryption types"
39 depends on RPCSEC_GSS_KRB5
40 default n
41 help
42 Choose Y here to disable the use of deprecated encryption types
43 with the Kerberos version 5 GSS-API mechanism (RFC 1964). The
44 deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC,
45 and DES-CBC-MD4. These types were deprecated by RFC 6649 because
46 they were found to be insecure.
47
48 N is the default because many sites have deployed KDCs and
49 keytabs that contain only these deprecated encryption types.
50 Choosing Y prevents the use of known-insecure encryption types
51 but might result in compatibility problems.
52
53config SUNRPC_DEBUG
54 bool "RPC: Enable dprintk debugging"
55 depends on SUNRPC && SYSCTL
56 select DEBUG_FS
57 help
58 This option enables a sysctl-based debugging interface
59 that is be used by the 'rpcdebug' utility to turn on or off
60 logging of different aspects of the kernel RPC activity.
61
62 Disabling this option will make your kernel slightly smaller,
63 but makes troubleshooting NFS issues significantly harder.
64
65 If unsure, say Y.
66
67config SUNRPC_XPRT_RDMA
68 tristate "RPC-over-RDMA transport"
69 depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS
70 default SUNRPC && INFINIBAND
71 select SG_POOL
72 help
73 This option allows the NFS client and server to use RDMA
74 transports (InfiniBand, iWARP, or RoCE).
75
76 To compile this support as a module, choose M. The module
77 will be called rpcrdma.ko.
78
79 If unsure, or you know there is no RDMA capability on your
80 hardware platform, say N.
1config SUNRPC
2 tristate
3
4config SUNRPC_GSS
5 tristate
6 select OID_REGISTRY
7
8config SUNRPC_BACKCHANNEL
9 bool
10 depends on SUNRPC
11
12config SUNRPC_SWAP
13 bool
14 depends on SUNRPC
15
16config RPCSEC_GSS_KRB5
17 tristate "Secure RPC: Kerberos V mechanism"
18 depends on SUNRPC && CRYPTO
19 depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS
20 depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES
21 depends on CRYPTO_ARC4
22 default y
23 select SUNRPC_GSS
24 help
25 Choose Y here to enable Secure RPC using the Kerberos version 5
26 GSS-API mechanism (RFC 1964).
27
28 Secure RPC calls with Kerberos require an auxiliary user-space
29 daemon which may be found in the Linux nfs-utils package
30 available from http://linux-nfs.org/. In addition, user-space
31 Kerberos support should be installed.
32
33 If unsure, say Y.
34
35config SUNRPC_DEBUG
36 bool "RPC: Enable dprintk debugging"
37 depends on SUNRPC && SYSCTL
38 help
39 This option enables a sysctl-based debugging interface
40 that is be used by the 'rpcdebug' utility to turn on or off
41 logging of different aspects of the kernel RPC activity.
42
43 Disabling this option will make your kernel slightly smaller,
44 but makes troubleshooting NFS issues significantly harder.
45
46 If unsure, say Y.
47
48config SUNRPC_XPRT_RDMA_CLIENT
49 tristate "RPC over RDMA Client Support"
50 depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS
51 default SUNRPC && INFINIBAND
52 help
53 This option allows the NFS client to support an RDMA-enabled
54 transport.
55
56 To compile RPC client RDMA transport support as a module,
57 choose M here: the module will be called xprtrdma.
58
59 If unsure, say N.
60
61config SUNRPC_XPRT_RDMA_SERVER
62 tristate "RPC over RDMA Server Support"
63 depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS
64 default SUNRPC && INFINIBAND
65 help
66 This option allows the NFS server to support an RDMA-enabled
67 transport.
68
69 To compile RPC server RDMA transport support as a module,
70 choose M here: the module will be called svcrdma.
71
72 If unsure, say N.