xref: /linux/fs/smb/server/Kconfig (revision 63e62baaa72e1aceb422f64a50408bc9b02a6022)
1config SMB_SERVER
2	tristate "SMB3 server support"
3	depends on INET
4	depends on MULTIUSER
5	depends on FILE_LOCKING
6	select NLS
7	select NLS_UTF8
8	select NLS_UCS2_UTILS
9	select CRYPTO
10	select CRYPTO_MD5
11	select CRYPTO_HMAC
12	select CRYPTO_ECB
13	select CRYPTO_LIB_ARC4
14	select CRYPTO_LIB_DES
15	select CRYPTO_LIB_SHA256
16	select CRYPTO_SHA256
17	select CRYPTO_CMAC
18	select CRYPTO_SHA512
19	select CRYPTO_AEAD2
20	select CRYPTO_CCM
21	select CRYPTO_GCM
22	select ASN1
23	select OID_REGISTRY
24	select CRC32
25	default n
26	help
27	  Choose Y here if you want to allow SMB3 compliant clients
28	  to access files residing on this system using SMB3 protocol.
29	  To compile the SMB3 server support as a module,
30	  choose M here: the module will be called ksmbd.
31
32	  You may choose to use a samba server instead, in which
33	  case you can choose N here.
34
35	  You also need to install user space programs which can be found
36	  in ksmbd-tools, available from
37	  https://github.com/cifsd-team/ksmbd-tools.
38	  More detail about how to run the ksmbd kernel server is
39	  available via the README file
40	  (https://github.com/cifsd-team/ksmbd-tools/blob/master/README).
41
42	  ksmbd kernel server includes support for auto-negotiation,
43	  Secure negotiate, Pre-authentication integrity, oplock/lease,
44	  compound requests, multi-credit, packet signing, RDMA(smbdirect),
45	  smb3 encryption, copy-offload, secure per-user session
46	  establishment via Kerberos or NTLMv2.
47
48if SMB_SERVER
49
50config SMB_SERVER_SMBDIRECT
51	bool "Support for SMB Direct protocol"
52	depends on SMB_SERVER=m && INFINIBAND && INFINIBAND_ADDR_TRANS || SMB_SERVER=y && INFINIBAND=y && INFINIBAND_ADDR_TRANS=y
53	select SG_POOL
54	default n
55
56	help
57	  Enables SMB Direct support for SMB 3.0, 3.02 and 3.1.1.
58
59	  SMB Direct allows transferring SMB packets over RDMA. If unsure,
60	  say N.
61
62endif
63
64config SMB_SERVER_CHECK_CAP_NET_ADMIN
65	bool "Enable check network administration capability"
66	depends on SMB_SERVER
67	default y
68
69	help
70	  Prevent unprivileged processes to start the ksmbd kernel server.
71
72config SMB_SERVER_KERBEROS5
73	bool "Support for Kerberos 5"
74	depends on SMB_SERVER
75	default y
76