| Thomas Gleixner | ec8f24b | 2019-05-19 13:07:45 +0100 | [diff] [blame] | 1 | # SPDX-License-Identifier: GPL-2.0-only |
| Alexey Dobriyan | 9098c24 | 2009-01-22 11:11:56 +0300 | [diff] [blame] | 2 | config SUNRPC |
| 3 | tristate |
| Iulia Manda | 2813893 | 2015-04-15 16:16:41 -0700 | [diff] [blame] | 4 | depends on MULTIUSER |
| Alexey Dobriyan | 9098c24 | 2009-01-22 11:11:56 +0300 | [diff] [blame] | 5 | |
| 6 | config SUNRPC_GSS |
| 7 | tristate |
| Chuck Lever | f783288 | 2013-03-16 15:54:52 -0400 | [diff] [blame] | 8 | select OID_REGISTRY |
| Iulia Manda | 2813893 | 2015-04-15 16:16:41 -0700 | [diff] [blame] | 9 | depends on MULTIUSER |
| Alexey Dobriyan | 9098c24 | 2009-01-22 11:11:56 +0300 | [diff] [blame] | 10 | |
| Trond Myklebust | 9e00abc | 2011-07-13 19:20:49 -0400 | [diff] [blame] | 11 | config SUNRPC_BACKCHANNEL |
| 12 | bool |
| 13 | depends on SUNRPC |
| 14 | |
| Mel Gorman | a564b8f | 2012-07-31 16:45:12 -0700 | [diff] [blame] | 15 | config SUNRPC_SWAP |
| 16 | bool |
| 17 | depends on SUNRPC |
| Mel Gorman | a564b8f | 2012-07-31 16:45:12 -0700 | [diff] [blame] | 18 | |
| Alexey Dobriyan | 9098c24 | 2009-01-22 11:11:56 +0300 | [diff] [blame] | 19 | config RPCSEC_GSS_KRB5 |
| Trond Myklebust | e3b2854 | 2011-04-15 12:58:56 -0400 | [diff] [blame] | 20 | tristate "Secure RPC: Kerberos V mechanism" |
| Trond Myklebust | df486a2 | 2010-08-17 17:42:45 -0400 | [diff] [blame] | 21 | depends on SUNRPC && CRYPTO |
| Trond Myklebust | e3b2854 | 2011-04-15 12:58:56 -0400 | [diff] [blame] | 22 | depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS |
| 23 | depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES |
| 24 | depends on CRYPTO_ARC4 |
| Trond Myklebust | df486a2 | 2010-08-17 17:42:45 -0400 | [diff] [blame] | 25 | default y |
| Alexey Dobriyan | 9098c24 | 2009-01-22 11:11:56 +0300 | [diff] [blame] | 26 | select SUNRPC_GSS |
| Alexey Dobriyan | 9098c24 | 2009-01-22 11:11:56 +0300 | [diff] [blame] | 27 | help |
| 28 | Choose Y here to enable Secure RPC using the Kerberos version 5 |
| 29 | GSS-API mechanism (RFC 1964). |
| 30 | |
| 31 | Secure RPC calls with Kerberos require an auxiliary user-space |
| 32 | daemon which may be found in the Linux nfs-utils package |
| 33 | available from http://linux-nfs.org/. In addition, user-space |
| 34 | Kerberos support should be installed. |
| 35 | |
| Trond Myklebust | df486a2 | 2010-08-17 17:42:45 -0400 | [diff] [blame] | 36 | If unsure, say Y. |
| Trond Myklebust | e27d359 | 2012-03-18 14:07:42 -0400 | [diff] [blame] | 37 | |
| Anna Schumaker | 4368d77 | 2019-06-19 17:24:10 -0400 | [diff] [blame] | 38 | config SUNRPC_DISABLE_INSECURE_ENCTYPES |
| Chuck Lever | fe9a270 | 2019-02-11 11:24:43 -0500 | [diff] [blame] | 39 | bool "Secure RPC: Disable insecure Kerberos encryption types" |
| 40 | depends on RPCSEC_GSS_KRB5 |
| 41 | default n |
| 42 | help |
| 43 | Choose Y here to disable the use of deprecated encryption types |
| 44 | with the Kerberos version 5 GSS-API mechanism (RFC 1964). The |
| 45 | deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC, |
| 46 | and DES-CBC-MD4. These types were deprecated by RFC 6649 because |
| 47 | they were found to be insecure. |
| 48 | |
| 49 | N is the default because many sites have deployed KDCs and |
| 50 | keytabs that contain only these deprecated encryption types. |
| 51 | Choosing Y prevents the use of known-insecure encryption types |
| 52 | but might result in compatibility problems. |
| 53 | |
| Trond Myklebust | e27d359 | 2012-03-18 14:07:42 -0400 | [diff] [blame] | 54 | config SUNRPC_DEBUG |
| 55 | bool "RPC: Enable dprintk debugging" |
| 56 | depends on SUNRPC && SYSCTL |
| Jeff Layton | b4b9d2c | 2014-11-26 14:44:43 -0500 | [diff] [blame] | 57 | select DEBUG_FS |
| Trond Myklebust | e27d359 | 2012-03-18 14:07:42 -0400 | [diff] [blame] | 58 | help |
| 59 | This option enables a sysctl-based debugging interface |
| 60 | that is be used by the 'rpcdebug' utility to turn on or off |
| 61 | logging of different aspects of the kernel RPC activity. |
| 62 | |
| 63 | Disabling this option will make your kernel slightly smaller, |
| 64 | but makes troubleshooting NFS issues significantly harder. |
| 65 | |
| 66 | If unsure, say Y. |
| Jeff Layton | 2e8c12e | 2014-03-18 19:45:47 -0400 | [diff] [blame] | 67 | |
| Chuck Lever | ffe1f0d | 2015-06-04 11:21:42 -0400 | [diff] [blame] | 68 | config SUNRPC_XPRT_RDMA |
| 69 | tristate "RPC-over-RDMA transport" |
| Arnd Bergmann | 533d1da | 2018-05-25 23:29:59 +0200 | [diff] [blame] | 70 | depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS |
| Jeff Layton | 2e8c12e | 2014-03-18 19:45:47 -0400 | [diff] [blame] | 71 | default SUNRPC && INFINIBAND |
| Chuck Lever | f13193f | 2017-04-09 13:06:16 -0400 | [diff] [blame] | 72 | select SG_POOL |
| Jeff Layton | 2e8c12e | 2014-03-18 19:45:47 -0400 | [diff] [blame] | 73 | help |
| Chuck Lever | ffe1f0d | 2015-06-04 11:21:42 -0400 | [diff] [blame] | 74 | This option allows the NFS client and server to use RDMA |
| 75 | transports (InfiniBand, iWARP, or RoCE). |
| Jeff Layton | 2e8c12e | 2014-03-18 19:45:47 -0400 | [diff] [blame] | 76 | |
| Chuck Lever | ffe1f0d | 2015-06-04 11:21:42 -0400 | [diff] [blame] | 77 | To compile this support as a module, choose M. The module |
| 78 | will be called rpcrdma.ko. |
| Jeff Layton | 2e8c12e | 2014-03-18 19:45:47 -0400 | [diff] [blame] | 79 | |
| Chuck Lever | ffe1f0d | 2015-06-04 11:21:42 -0400 | [diff] [blame] | 80 | If unsure, or you know there is no RDMA capability on your |
| 81 | hardware platform, say N. |