Loading...
1# SPDX-License-Identifier: GPL-2.0-only
2config SUNRPC
3 tristate
4 depends on MULTIUSER
5
6config SUNRPC_GSS
7 tristate
8 select OID_REGISTRY
9 depends on MULTIUSER
10
11config SUNRPC_BACKCHANNEL
12 bool
13 depends on SUNRPC
14
15config SUNRPC_SWAP
16 bool
17 depends on SUNRPC
18
19config RPCSEC_GSS_KRB5
20 tristate "Secure RPC: Kerberos V mechanism"
21 depends on SUNRPC && CRYPTO
22 depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS
23 depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES
24 default y
25 select SUNRPC_GSS
26 help
27 Choose Y here to enable Secure RPC using the Kerberos version 5
28 GSS-API mechanism (RFC 1964).
29
30 Secure RPC calls with Kerberos require an auxiliary user-space
31 daemon which may be found in the Linux nfs-utils package
32 available from http://linux-nfs.org/. In addition, user-space
33 Kerberos support should be installed.
34
35 If unsure, say Y.
36
37config SUNRPC_DISABLE_INSECURE_ENCTYPES
38 bool "Secure RPC: Disable insecure Kerberos encryption types"
39 depends on RPCSEC_GSS_KRB5
40 default n
41 help
42 Choose Y here to disable the use of deprecated encryption types
43 with the Kerberos version 5 GSS-API mechanism (RFC 1964). The
44 deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC,
45 and DES-CBC-MD4. These types were deprecated by RFC 6649 because
46 they were found to be insecure.
47
48 N is the default because many sites have deployed KDCs and
49 keytabs that contain only these deprecated encryption types.
50 Choosing Y prevents the use of known-insecure encryption types
51 but might result in compatibility problems.
52
53config SUNRPC_DEBUG
54 bool "RPC: Enable dprintk debugging"
55 depends on SUNRPC && SYSCTL
56 select DEBUG_FS
57 help
58 This option enables a sysctl-based debugging interface
59 that is be used by the 'rpcdebug' utility to turn on or off
60 logging of different aspects of the kernel RPC activity.
61
62 Disabling this option will make your kernel slightly smaller,
63 but makes troubleshooting NFS issues significantly harder.
64
65 If unsure, say Y.
66
67config SUNRPC_XPRT_RDMA
68 tristate "RPC-over-RDMA transport"
69 depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS
70 default SUNRPC && INFINIBAND
71 select SG_POOL
72 help
73 This option allows the NFS client and server to use RDMA
74 transports (InfiniBand, iWARP, or RoCE).
75
76 To compile this support as a module, choose M. The module
77 will be called rpcrdma.ko.
78
79 If unsure, or you know there is no RDMA capability on your
80 hardware platform, say N.
1config SUNRPC
2 tristate
3 depends on MULTIUSER
4
5config SUNRPC_GSS
6 tristate
7 select OID_REGISTRY
8 depends on MULTIUSER
9
10config SUNRPC_BACKCHANNEL
11 bool
12 depends on SUNRPC
13
14config SUNRPC_SWAP
15 bool
16 depends on SUNRPC
17
18config RPCSEC_GSS_KRB5
19 tristate "Secure RPC: Kerberos V mechanism"
20 depends on SUNRPC && CRYPTO
21 depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS
22 depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES
23 depends on CRYPTO_ARC4
24 default y
25 select SUNRPC_GSS
26 help
27 Choose Y here to enable Secure RPC using the Kerberos version 5
28 GSS-API mechanism (RFC 1964).
29
30 Secure RPC calls with Kerberos require an auxiliary user-space
31 daemon which may be found in the Linux nfs-utils package
32 available from http://linux-nfs.org/. In addition, user-space
33 Kerberos support should be installed.
34
35 If unsure, say Y.
36
37config SUNRPC_DEBUG
38 bool "RPC: Enable dprintk debugging"
39 depends on SUNRPC && SYSCTL
40 select DEBUG_FS
41 help
42 This option enables a sysctl-based debugging interface
43 that is be used by the 'rpcdebug' utility to turn on or off
44 logging of different aspects of the kernel RPC activity.
45
46 Disabling this option will make your kernel slightly smaller,
47 but makes troubleshooting NFS issues significantly harder.
48
49 If unsure, say Y.
50
51config SUNRPC_XPRT_RDMA
52 tristate "RPC-over-RDMA transport"
53 depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS
54 default SUNRPC && INFINIBAND
55 help
56 This option allows the NFS client and server to use RDMA
57 transports (InfiniBand, iWARP, or RoCE).
58
59 To compile this support as a module, choose M. The module
60 will be called rpcrdma.ko.
61
62 If unsure, or you know there is no RDMA capability on your
63 hardware platform, say N.