19098c24fSAlexey Dobriyanconfig SUNRPC 29098c24fSAlexey Dobriyan tristate 32813893fSIulia Manda depends on MULTIUSER 49098c24fSAlexey Dobriyan 59098c24fSAlexey Dobriyanconfig SUNRPC_GSS 69098c24fSAlexey Dobriyan tristate 7f783288fSChuck Lever select OID_REGISTRY 82813893fSIulia Manda depends on MULTIUSER 99098c24fSAlexey Dobriyan 109e00abc3STrond Myklebustconfig SUNRPC_BACKCHANNEL 119e00abc3STrond Myklebust bool 129e00abc3STrond Myklebust depends on SUNRPC 139e00abc3STrond Myklebust 14a564b8f0SMel Gormanconfig SUNRPC_SWAP 15a564b8f0SMel Gorman bool 16a564b8f0SMel Gorman depends on SUNRPC 17a564b8f0SMel Gorman 189098c24fSAlexey Dobriyanconfig RPCSEC_GSS_KRB5 19e3b2854fSTrond Myklebust tristate "Secure RPC: Kerberos V mechanism" 20df486a25STrond Myklebust depends on SUNRPC && CRYPTO 21e3b2854fSTrond Myklebust depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS 22e3b2854fSTrond Myklebust depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES 23e3b2854fSTrond Myklebust depends on CRYPTO_ARC4 24df486a25STrond Myklebust default y 259098c24fSAlexey Dobriyan select SUNRPC_GSS 269098c24fSAlexey Dobriyan help 279098c24fSAlexey Dobriyan Choose Y here to enable Secure RPC using the Kerberos version 5 289098c24fSAlexey Dobriyan GSS-API mechanism (RFC 1964). 299098c24fSAlexey Dobriyan 309098c24fSAlexey Dobriyan Secure RPC calls with Kerberos require an auxiliary user-space 319098c24fSAlexey Dobriyan daemon which may be found in the Linux nfs-utils package 329098c24fSAlexey Dobriyan available from http://linux-nfs.org/. In addition, user-space 339098c24fSAlexey Dobriyan Kerberos support should be installed. 349098c24fSAlexey Dobriyan 35df486a25STrond Myklebust If unsure, say Y. 36e27d359eSTrond Myklebust 37*fe9a2705SChuck Leverconfig CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES 38*fe9a2705SChuck Lever bool "Secure RPC: Disable insecure Kerberos encryption types" 39*fe9a2705SChuck Lever depends on RPCSEC_GSS_KRB5 40*fe9a2705SChuck Lever default n 41*fe9a2705SChuck Lever help 42*fe9a2705SChuck Lever Choose Y here to disable the use of deprecated encryption types 43*fe9a2705SChuck Lever with the Kerberos version 5 GSS-API mechanism (RFC 1964). The 44*fe9a2705SChuck Lever deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC, 45*fe9a2705SChuck Lever and DES-CBC-MD4. These types were deprecated by RFC 6649 because 46*fe9a2705SChuck Lever they were found to be insecure. 47*fe9a2705SChuck Lever 48*fe9a2705SChuck Lever N is the default because many sites have deployed KDCs and 49*fe9a2705SChuck Lever keytabs that contain only these deprecated encryption types. 50*fe9a2705SChuck Lever Choosing Y prevents the use of known-insecure encryption types 51*fe9a2705SChuck Lever but might result in compatibility problems. 52*fe9a2705SChuck Lever 53e27d359eSTrond Myklebustconfig SUNRPC_DEBUG 54e27d359eSTrond Myklebust bool "RPC: Enable dprintk debugging" 55e27d359eSTrond Myklebust depends on SUNRPC && SYSCTL 56b4b9d2ccSJeff Layton select DEBUG_FS 57e27d359eSTrond Myklebust help 58e27d359eSTrond Myklebust This option enables a sysctl-based debugging interface 59e27d359eSTrond Myklebust that is be used by the 'rpcdebug' utility to turn on or off 60e27d359eSTrond Myklebust logging of different aspects of the kernel RPC activity. 61e27d359eSTrond Myklebust 62e27d359eSTrond Myklebust Disabling this option will make your kernel slightly smaller, 63e27d359eSTrond Myklebust but makes troubleshooting NFS issues significantly harder. 64e27d359eSTrond Myklebust 65e27d359eSTrond Myklebust If unsure, say Y. 662e8c12e1SJeff Layton 67ffe1f0dfSChuck Leverconfig SUNRPC_XPRT_RDMA 68ffe1f0dfSChuck Lever tristate "RPC-over-RDMA transport" 69533d1daeSArnd Bergmann depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS 702e8c12e1SJeff Layton default SUNRPC && INFINIBAND 71f13193f5SChuck Lever select SG_POOL 722e8c12e1SJeff Layton help 73ffe1f0dfSChuck Lever This option allows the NFS client and server to use RDMA 74ffe1f0dfSChuck Lever transports (InfiniBand, iWARP, or RoCE). 752e8c12e1SJeff Layton 76ffe1f0dfSChuck Lever To compile this support as a module, choose M. The module 77ffe1f0dfSChuck Lever will be called rpcrdma.ko. 782e8c12e1SJeff Layton 79ffe1f0dfSChuck Lever If unsure, or you know there is no RDMA capability on your 80ffe1f0dfSChuck Lever hardware platform, say N. 81