1*4882a593Smuzhiyun# SPDX-License-Identifier: GPL-2.0-only 2*4882a593Smuzhiyunconfig SUNRPC 3*4882a593Smuzhiyun tristate 4*4882a593Smuzhiyun depends on MULTIUSER 5*4882a593Smuzhiyun 6*4882a593Smuzhiyunconfig SUNRPC_GSS 7*4882a593Smuzhiyun tristate 8*4882a593Smuzhiyun select OID_REGISTRY 9*4882a593Smuzhiyun depends on MULTIUSER 10*4882a593Smuzhiyun 11*4882a593Smuzhiyunconfig SUNRPC_BACKCHANNEL 12*4882a593Smuzhiyun bool 13*4882a593Smuzhiyun depends on SUNRPC 14*4882a593Smuzhiyun 15*4882a593Smuzhiyunconfig SUNRPC_SWAP 16*4882a593Smuzhiyun bool 17*4882a593Smuzhiyun depends on SUNRPC 18*4882a593Smuzhiyun 19*4882a593Smuzhiyunconfig RPCSEC_GSS_KRB5 20*4882a593Smuzhiyun tristate "Secure RPC: Kerberos V mechanism" 21*4882a593Smuzhiyun depends on SUNRPC && CRYPTO 22*4882a593Smuzhiyun depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS 23*4882a593Smuzhiyun depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES 24*4882a593Smuzhiyun default y 25*4882a593Smuzhiyun select SUNRPC_GSS 26*4882a593Smuzhiyun help 27*4882a593Smuzhiyun Choose Y here to enable Secure RPC using the Kerberos version 5 28*4882a593Smuzhiyun GSS-API mechanism (RFC 1964). 29*4882a593Smuzhiyun 30*4882a593Smuzhiyun Secure RPC calls with Kerberos require an auxiliary user-space 31*4882a593Smuzhiyun daemon which may be found in the Linux nfs-utils package 32*4882a593Smuzhiyun available from http://linux-nfs.org/. In addition, user-space 33*4882a593Smuzhiyun Kerberos support should be installed. 34*4882a593Smuzhiyun 35*4882a593Smuzhiyun If unsure, say Y. 36*4882a593Smuzhiyun 37*4882a593Smuzhiyunconfig SUNRPC_DISABLE_INSECURE_ENCTYPES 38*4882a593Smuzhiyun bool "Secure RPC: Disable insecure Kerberos encryption types" 39*4882a593Smuzhiyun depends on RPCSEC_GSS_KRB5 40*4882a593Smuzhiyun default n 41*4882a593Smuzhiyun help 42*4882a593Smuzhiyun Choose Y here to disable the use of deprecated encryption types 43*4882a593Smuzhiyun with the Kerberos version 5 GSS-API mechanism (RFC 1964). The 44*4882a593Smuzhiyun deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC, 45*4882a593Smuzhiyun and DES-CBC-MD4. These types were deprecated by RFC 6649 because 46*4882a593Smuzhiyun they were found to be insecure. 47*4882a593Smuzhiyun 48*4882a593Smuzhiyun N is the default because many sites have deployed KDCs and 49*4882a593Smuzhiyun keytabs that contain only these deprecated encryption types. 50*4882a593Smuzhiyun Choosing Y prevents the use of known-insecure encryption types 51*4882a593Smuzhiyun but might result in compatibility problems. 52*4882a593Smuzhiyun 53*4882a593Smuzhiyunconfig SUNRPC_DEBUG 54*4882a593Smuzhiyun bool "RPC: Enable dprintk debugging" 55*4882a593Smuzhiyun depends on SUNRPC && SYSCTL 56*4882a593Smuzhiyun select DEBUG_FS 57*4882a593Smuzhiyun help 58*4882a593Smuzhiyun This option enables a sysctl-based debugging interface 59*4882a593Smuzhiyun that is be used by the 'rpcdebug' utility to turn on or off 60*4882a593Smuzhiyun logging of different aspects of the kernel RPC activity. 61*4882a593Smuzhiyun 62*4882a593Smuzhiyun Disabling this option will make your kernel slightly smaller, 63*4882a593Smuzhiyun but makes troubleshooting NFS issues significantly harder. 64*4882a593Smuzhiyun 65*4882a593Smuzhiyun If unsure, say Y. 66*4882a593Smuzhiyun 67*4882a593Smuzhiyunconfig SUNRPC_XPRT_RDMA 68*4882a593Smuzhiyun tristate "RPC-over-RDMA transport" 69*4882a593Smuzhiyun depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS 70*4882a593Smuzhiyun default SUNRPC && INFINIBAND 71*4882a593Smuzhiyun select SG_POOL 72*4882a593Smuzhiyun help 73*4882a593Smuzhiyun This option allows the NFS client and server to use RDMA 74*4882a593Smuzhiyun transports (InfiniBand, iWARP, or RoCE). 75*4882a593Smuzhiyun 76*4882a593Smuzhiyun To compile this support as a module, choose M. The module 77*4882a593Smuzhiyun will be called rpcrdma.ko. 78*4882a593Smuzhiyun 79*4882a593Smuzhiyun If unsure, or you know there is no RDMA capability on your 80*4882a593Smuzhiyun hardware platform, say N. 81