xref: /illumos-gate/usr/src/cmd/fs.d/nfs/etc/nfssec.conf (revision afab0816ecb604f0099a09ad8ee398f0d7b77b1c)
1# CDDL HEADER START
2#
3# The contents of this file are subject to the terms of the
4# Common Development and Distribution License, Version 1.0 only
5# (the "License").  You may not use this file except in compliance
6# with the License.
7#
8# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9# or http://www.opensolaris.org/os/licensing.
10# See the License for the specific language governing permissions
11# and limitations under the License.
12#
13# When distributing Covered Code, include this CDDL HEADER in each
14# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15# If applicable, add the following below this CDDL HEADER, with the
16# fields enclosed by brackets "[]" replaced with your own identifying
17# information: Portions Copyright [yyyy] [name of copyright owner]
18#
19# CDDL HEADER END
20#
21# Copyright 2001 Sun Microsystems, Inc.  All rights reserved.
22# Use is subject to license terms.
23#
24#ident	"%Z%%M%	%I%	%E% SMI"
25#
26# The NFS Security Service Configuration File.
27#
28# Each entry is of the form:
29#
30#       <NFS_security_mode_name> <NFS_security_mode_number> \
31#		<GSS_mechanism_name> <GSS_quality_of_protection> <GSS_services>
32#
33#
34# The "-" in <GSS_mechanism_name> signifies that this is not a GSS mechanism.
35# A string entry in <GSS_mechanism_name> is required for using RPCSEC_GSS
36# services.  <GSS_quality_of_protection> and <GSS_services> are optional.
37# White space is not an acceptable value.
38#
39# default security mode is defined at the end.  It should be one of
40# the flavor numbers defined above it.
41#
42none		0	-	-	-	# AUTH_NONE
43sys		1	-	-	-	# AUTH_SYS
44dh		3	-	-	-	# AUTH_DH
45#
46# Uncomment the following lines to use Kerberos V5 with NFS
47#
48#krb5		390003	kerberos_v5	default	-		# RPCSEC_GSS
49#krb5i		390004	kerberos_v5	default	integrity	# RPCSEC_GSS
50#krb5p		390005	kerberos_v5	default	privacy		# RPCSEC_GSS
51default		1	-	-	-			# default is AUTH_SYS
52