xref: /illumos-gate/usr/src/cmd/fs.d/nfs/etc/nfssec.conf (revision 7c478bd95313f5f23a4c958a745db2134aa03244)
1*7c478bd9Sstevel@tonic-gate# CDDL HEADER START
2*7c478bd9Sstevel@tonic-gate#
3*7c478bd9Sstevel@tonic-gate# The contents of this file are subject to the terms of the
4*7c478bd9Sstevel@tonic-gate# Common Development and Distribution License, Version 1.0 only
5*7c478bd9Sstevel@tonic-gate# (the "License").  You may not use this file except in compliance
6*7c478bd9Sstevel@tonic-gate# with the License.
7*7c478bd9Sstevel@tonic-gate#
8*7c478bd9Sstevel@tonic-gate# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9*7c478bd9Sstevel@tonic-gate# or http://www.opensolaris.org/os/licensing.
10*7c478bd9Sstevel@tonic-gate# See the License for the specific language governing permissions
11*7c478bd9Sstevel@tonic-gate# and limitations under the License.
12*7c478bd9Sstevel@tonic-gate#
13*7c478bd9Sstevel@tonic-gate# When distributing Covered Code, include this CDDL HEADER in each
14*7c478bd9Sstevel@tonic-gate# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15*7c478bd9Sstevel@tonic-gate# If applicable, add the following below this CDDL HEADER, with the
16*7c478bd9Sstevel@tonic-gate# fields enclosed by brackets "[]" replaced with your own identifying
17*7c478bd9Sstevel@tonic-gate# information: Portions Copyright [yyyy] [name of copyright owner]
18*7c478bd9Sstevel@tonic-gate#
19*7c478bd9Sstevel@tonic-gate# CDDL HEADER END
20*7c478bd9Sstevel@tonic-gate#
21*7c478bd9Sstevel@tonic-gate# Copyright 2001 Sun Microsystems, Inc.  All rights reserved.
22*7c478bd9Sstevel@tonic-gate# Use is subject to license terms.
23*7c478bd9Sstevel@tonic-gate#
24*7c478bd9Sstevel@tonic-gate#ident	"%Z%%M%	%I%	%E% SMI"
25*7c478bd9Sstevel@tonic-gate#
26*7c478bd9Sstevel@tonic-gate# The NFS Security Service Configuration File.
27*7c478bd9Sstevel@tonic-gate#
28*7c478bd9Sstevel@tonic-gate# Each entry is of the form:
29*7c478bd9Sstevel@tonic-gate#
30*7c478bd9Sstevel@tonic-gate#       <NFS_security_mode_name> <NFS_security_mode_number> \
31*7c478bd9Sstevel@tonic-gate#		<GSS_mechanism_name> <GSS_quality_of_protection> <GSS_services>
32*7c478bd9Sstevel@tonic-gate#
33*7c478bd9Sstevel@tonic-gate#
34*7c478bd9Sstevel@tonic-gate# The "-" in <GSS_mechanism_name> signifies that this is not a GSS mechanism.
35*7c478bd9Sstevel@tonic-gate# A string entry in <GSS_mechanism_name> is required for using RPCSEC_GSS
36*7c478bd9Sstevel@tonic-gate# services.  <GSS_quality_of_protection> and <GSS_services> are optional.
37*7c478bd9Sstevel@tonic-gate# White space is not an acceptable value.
38*7c478bd9Sstevel@tonic-gate#
39*7c478bd9Sstevel@tonic-gate# default security mode is defined at the end.  It should be one of
40*7c478bd9Sstevel@tonic-gate# the flavor numbers defined above it.
41*7c478bd9Sstevel@tonic-gate#
42*7c478bd9Sstevel@tonic-gatenone		0	-	-	-	# AUTH_NONE
43*7c478bd9Sstevel@tonic-gatesys		1	-	-	-	# AUTH_SYS
44*7c478bd9Sstevel@tonic-gatedh		3	-	-	-	# AUTH_DH
45*7c478bd9Sstevel@tonic-gate#
46*7c478bd9Sstevel@tonic-gate# Uncomment the following lines to use Kerberos V5 with NFS
47*7c478bd9Sstevel@tonic-gate#
48*7c478bd9Sstevel@tonic-gate#krb5		390003	kerberos_v5	default	-		# RPCSEC_GSS
49*7c478bd9Sstevel@tonic-gate#krb5i		390004	kerberos_v5	default	integrity	# RPCSEC_GSS
50*7c478bd9Sstevel@tonic-gate#krb5p		390005	kerberos_v5	default	privacy		# RPCSEC_GSS
51*7c478bd9Sstevel@tonic-gatedefault		1	-	-	-			# default is AUTH_SYS
52