| # SPDX-License-Identifier: GPL-2.0-only |
| config SUNRPC |
| tristate |
| depends on MULTIUSER |
| |
| config SUNRPC_GSS |
| tristate |
| select OID_REGISTRY |
| depends on MULTIUSER |
| |
| config SUNRPC_BACKCHANNEL |
| bool |
| depends on SUNRPC |
| |
| config SUNRPC_SWAP |
| bool |
| depends on SUNRPC |
| |
| config RPCSEC_GSS_KRB5 |
| tristate "Secure RPC: Kerberos V mechanism" |
| depends on SUNRPC && CRYPTO |
| depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS |
| depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES |
| depends on CRYPTO_ARC4 |
| default y |
| select SUNRPC_GSS |
| help |
| Choose Y here to enable Secure RPC using the Kerberos version 5 |
| GSS-API mechanism (RFC 1964). |
| |
| Secure RPC calls with Kerberos require an auxiliary user-space |
| daemon which may be found in the Linux nfs-utils package |
| available from http://linux-nfs.org/. In addition, user-space |
| Kerberos support should be installed. |
| |
| If unsure, say Y. |
| |
| config CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES |
| bool "Secure RPC: Disable insecure Kerberos encryption types" |
| depends on RPCSEC_GSS_KRB5 |
| default n |
| help |
| Choose Y here to disable the use of deprecated encryption types |
| with the Kerberos version 5 GSS-API mechanism (RFC 1964). The |
| deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC, |
| and DES-CBC-MD4. These types were deprecated by RFC 6649 because |
| they were found to be insecure. |
| |
| N is the default because many sites have deployed KDCs and |
| keytabs that contain only these deprecated encryption types. |
| Choosing Y prevents the use of known-insecure encryption types |
| but might result in compatibility problems. |
| |
| config SUNRPC_DEBUG |
| bool "RPC: Enable dprintk debugging" |
| depends on SUNRPC && SYSCTL |
| select DEBUG_FS |
| help |
| This option enables a sysctl-based debugging interface |
| that is be used by the 'rpcdebug' utility to turn on or off |
| logging of different aspects of the kernel RPC activity. |
| |
| Disabling this option will make your kernel slightly smaller, |
| but makes troubleshooting NFS issues significantly harder. |
| |
| If unsure, say Y. |
| |
| config SUNRPC_XPRT_RDMA |
| tristate "RPC-over-RDMA transport" |
| depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS |
| default SUNRPC && INFINIBAND |
| select SG_POOL |
| help |
| This option allows the NFS client and server to use RDMA |
| transports (InfiniBand, iWARP, or RoCE). |
| |
| To compile this support as a module, choose M. The module |
| will be called rpcrdma.ko. |
| |
| If unsure, or you know there is no RDMA capability on your |
| hardware platform, say N. |
