]>
Commit | Line | Data |
---|---|---|
ec8f24b7 | 1 | # SPDX-License-Identifier: GPL-2.0-only |
9098c24f AD |
2 | config SUNRPC |
3 | tristate | |
2813893f | 4 | depends on MULTIUSER |
9098c24f AD |
5 | |
6 | config SUNRPC_GSS | |
7 | tristate | |
f783288f | 8 | select OID_REGISTRY |
2813893f | 9 | depends on MULTIUSER |
9098c24f | 10 | |
9e00abc3 TM |
11 | config SUNRPC_BACKCHANNEL |
12 | bool | |
13 | depends on SUNRPC | |
14 | ||
a564b8f0 MG |
15 | config SUNRPC_SWAP |
16 | bool | |
17 | depends on SUNRPC | |
a564b8f0 | 18 | |
9098c24f | 19 | config RPCSEC_GSS_KRB5 |
e3b2854f | 20 | tristate "Secure RPC: Kerberos V mechanism" |
df486a25 | 21 | depends on SUNRPC && CRYPTO |
e3b2854f TM |
22 | depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS |
23 | depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES | |
df486a25 | 24 | default y |
9098c24f | 25 | select SUNRPC_GSS |
9098c24f AD |
26 | help |
27 | Choose Y here to enable Secure RPC using the Kerberos version 5 | |
28 | GSS-API mechanism (RFC 1964). | |
29 | ||
30 | Secure RPC calls with Kerberos require an auxiliary user-space | |
31 | daemon which may be found in the Linux nfs-utils package | |
32 | available from http://linux-nfs.org/. In addition, user-space | |
33 | Kerberos support should be installed. | |
34 | ||
df486a25 | 35 | If unsure, say Y. |
e27d359e | 36 | |
4368d77a | 37 | config SUNRPC_DISABLE_INSECURE_ENCTYPES |
fe9a2705 CL |
38 | bool "Secure RPC: Disable insecure Kerberos encryption types" |
39 | depends on RPCSEC_GSS_KRB5 | |
40 | default n | |
41 | help | |
42 | Choose Y here to disable the use of deprecated encryption types | |
43 | with the Kerberos version 5 GSS-API mechanism (RFC 1964). The | |
44 | deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC, | |
45 | and DES-CBC-MD4. These types were deprecated by RFC 6649 because | |
46 | they were found to be insecure. | |
47 | ||
48 | N is the default because many sites have deployed KDCs and | |
49 | keytabs that contain only these deprecated encryption types. | |
50 | Choosing Y prevents the use of known-insecure encryption types | |
51 | but might result in compatibility problems. | |
52 | ||
e27d359e TM |
53 | config SUNRPC_DEBUG |
54 | bool "RPC: Enable dprintk debugging" | |
55 | depends on SUNRPC && SYSCTL | |
b4b9d2cc | 56 | select DEBUG_FS |
e27d359e TM |
57 | help |
58 | This option enables a sysctl-based debugging interface | |
59 | that is be used by the 'rpcdebug' utility to turn on or off | |
60 | logging of different aspects of the kernel RPC activity. | |
61 | ||
62 | Disabling this option will make your kernel slightly smaller, | |
63 | but makes troubleshooting NFS issues significantly harder. | |
64 | ||
65 | If unsure, say Y. | |
2e8c12e1 | 66 | |
ffe1f0df CL |
67 | config SUNRPC_XPRT_RDMA |
68 | tristate "RPC-over-RDMA transport" | |
533d1dae | 69 | depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS |
2e8c12e1 | 70 | default SUNRPC && INFINIBAND |
f13193f5 | 71 | select SG_POOL |
2e8c12e1 | 72 | help |
ffe1f0df CL |
73 | This option allows the NFS client and server to use RDMA |
74 | transports (InfiniBand, iWARP, or RoCE). | |
2e8c12e1 | 75 | |
ffe1f0df CL |
76 | To compile this support as a module, choose M. The module |
77 | will be called rpcrdma.ko. | |
2e8c12e1 | 78 | |
ffe1f0df CL |
79 | If unsure, or you know there is no RDMA capability on your |
80 | hardware platform, say N. |