| # SPDX-License-Identifier: GPL-2.0-only | |
| config SUNRPC | |
| tristate | |
| depends on MULTIUSER | |
| config SUNRPC_GSS | |
| tristate | |
| select OID_REGISTRY | |
| depends on MULTIUSER | |
| config SUNRPC_BACKCHANNEL | |
| bool | |
| depends on SUNRPC | |
| config SUNRPC_SWAP | |
| bool | |
| depends on SUNRPC | |
| config RPCSEC_GSS_KRB5 | |
| tristate "Secure RPC: Kerberos V mechanism" | |
| depends on SUNRPC && CRYPTO | |
| depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS | |
| depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES | |
| default y | |
| select SUNRPC_GSS | |
| help | |
| Choose Y here to enable Secure RPC using the Kerberos version 5 | |
| GSS-API mechanism (RFC 1964). | |
| Secure RPC calls with Kerberos require an auxiliary user-space | |
| daemon which may be found in the Linux nfs-utils package | |
| available from http://linux-nfs.org/. In addition, user-space | |
| Kerberos support should be installed. | |
| If unsure, say Y. | |
| config SUNRPC_DISABLE_INSECURE_ENCTYPES | |
| bool "Secure RPC: Disable insecure Kerberos encryption types" | |
| depends on RPCSEC_GSS_KRB5 | |
| default n | |
| help | |
| Choose Y here to disable the use of deprecated encryption types | |
| with the Kerberos version 5 GSS-API mechanism (RFC 1964). The | |
| deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC, | |
| and DES-CBC-MD4. These types were deprecated by RFC 6649 because | |
| they were found to be insecure. | |
| N is the default because many sites have deployed KDCs and | |
| keytabs that contain only these deprecated encryption types. | |
| Choosing Y prevents the use of known-insecure encryption types | |
| but might result in compatibility problems. | |
| config SUNRPC_DEBUG | |
| bool "RPC: Enable dprintk debugging" | |
| depends on SUNRPC && SYSCTL | |
| select DEBUG_FS | |
| help | |
| This option enables a sysctl-based debugging interface | |
| that is be used by the 'rpcdebug' utility to turn on or off | |
| logging of different aspects of the kernel RPC activity. | |
| Disabling this option will make your kernel slightly smaller, | |
| but makes troubleshooting NFS issues significantly harder. | |
| If unsure, say Y. | |
| config SUNRPC_XPRT_RDMA | |
| tristate "RPC-over-RDMA transport" | |
| depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS | |
| default SUNRPC && INFINIBAND | |
| select SG_POOL | |
| help | |
| This option allows the NFS client and server to use RDMA | |
| transports (InfiniBand, iWARP, or RoCE). | |
| To compile this support as a module, choose M. The module | |
| will be called rpcrdma.ko. | |
| If unsure, or you know there is no RDMA capability on your | |
| hardware platform, say N. |