0001 # SPDX-License-Identifier: GPL-2.0-only
0002 config SUNRPC
0003 tristate
0004 depends on MULTIUSER
0005
0006 config SUNRPC_GSS
0007 tristate
0008 select OID_REGISTRY
0009 depends on MULTIUSER
0010
0011 config SUNRPC_BACKCHANNEL
0012 bool
0013 depends on SUNRPC
0014
0015 config SUNRPC_SWAP
0016 bool
0017 depends on SUNRPC
0018
0019 config RPCSEC_GSS_KRB5
0020 tristate "Secure RPC: Kerberos V mechanism"
0021 depends on SUNRPC && CRYPTO
0022 depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS
0023 depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES
0024 default y
0025 select SUNRPC_GSS
0026 help
0027 Choose Y here to enable Secure RPC using the Kerberos version 5
0028 GSS-API mechanism (RFC 1964).
0029
0030 Secure RPC calls with Kerberos require an auxiliary user-space
0031 daemon which may be found in the Linux nfs-utils package
0032 available from http://linux-nfs.org/. In addition, user-space
0033 Kerberos support should be installed.
0034
0035 If unsure, say Y.
0036
0037 config SUNRPC_DISABLE_INSECURE_ENCTYPES
0038 bool "Secure RPC: Disable insecure Kerberos encryption types"
0039 depends on RPCSEC_GSS_KRB5
0040 default n
0041 help
0042 Choose Y here to disable the use of deprecated encryption types
0043 with the Kerberos version 5 GSS-API mechanism (RFC 1964). The
0044 deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC,
0045 and DES-CBC-MD4. These types were deprecated by RFC 6649 because
0046 they were found to be insecure.
0047
0048 N is the default because many sites have deployed KDCs and
0049 keytabs that contain only these deprecated encryption types.
0050 Choosing Y prevents the use of known-insecure encryption types
0051 but might result in compatibility problems.
0052
0053 config SUNRPC_DEBUG
0054 bool "RPC: Enable dprintk debugging"
0055 depends on SUNRPC && SYSCTL
0056 select DEBUG_FS
0057 help
0058 This option enables a sysctl-based debugging interface
0059 that is be used by the 'rpcdebug' utility to turn on or off
0060 logging of different aspects of the kernel RPC activity.
0061
0062 Disabling this option will make your kernel slightly smaller,
0063 but makes troubleshooting NFS issues significantly harder.
0064
0065 If unsure, say Y.
0066
0067 config SUNRPC_XPRT_RDMA
0068 tristate "RPC-over-RDMA transport"
0069 depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS
0070 default SUNRPC && INFINIBAND
0071 select SG_POOL
0072 help
0073 This option allows the NFS client and server to use RDMA
0074 transports (InfiniBand, iWARP, or RoCE).
0075
0076 To compile this support as a module, choose M. The module
0077 will be called rpcrdma.ko.
0078
0079 If unsure, or you know there is no RDMA capability on your
0080 hardware platform, say N.