xref: /openbmc/linux/fs/smb/server/Kconfig (revision 856caabf)
1config SMB_SERVER
2	tristate "SMB3 server support (EXPERIMENTAL)"
3	depends on INET
4	depends on MULTIUSER
5	depends on FILE_LOCKING
6	select NLS
7	select NLS_UTF8
8	select CRYPTO
9	select CRYPTO_MD5
10	select CRYPTO_HMAC
11	select CRYPTO_ECB
12	select CRYPTO_LIB_DES
13	select CRYPTO_SHA256
14	select CRYPTO_CMAC
15	select CRYPTO_SHA512
16	select CRYPTO_AEAD2
17	select CRYPTO_CCM
18	select CRYPTO_GCM
19	select ASN1
20	select OID_REGISTRY
21	select CRC32
22	default n
23	help
24	  Choose Y here if you want to allow SMB3 compliant clients
25	  to access files residing on this system using SMB3 protocol.
26	  To compile the SMB3 server support as a module,
27	  choose M here: the module will be called ksmbd.
28
29	  You may choose to use a samba server instead, in which
30	  case you can choose N here.
31
32	  You also need to install user space programs which can be found
33	  in ksmbd-tools, available from
34	  https://github.com/cifsd-team/ksmbd-tools.
35	  More detail about how to run the ksmbd kernel server is
36	  available via the README file
37	  (https://github.com/cifsd-team/ksmbd-tools/blob/master/README).
38
39	  ksmbd kernel server includes support for auto-negotiation,
40	  Secure negotiate, Pre-authentication integrity, oplock/lease,
41	  compound requests, multi-credit, packet signing, RDMA(smbdirect),
42	  smb3 encryption, copy-offload, secure per-user session
43	  establishment via Kerberos or NTLMv2.
44
45if SMB_SERVER
46
47config SMB_SERVER_SMBDIRECT
48	bool "Support for SMB Direct protocol"
49	depends on SMB_SERVER=m && INFINIBAND && INFINIBAND_ADDR_TRANS || SMB_SERVER=y && INFINIBAND=y && INFINIBAND_ADDR_TRANS=y
50	select SG_POOL
51	default n
52
53	help
54	  Enables SMB Direct support for SMB 3.0, 3.02 and 3.1.1.
55
56	  SMB Direct allows transferring SMB packets over RDMA. If unsure,
57	  say N.
58
59endif
60
61config SMB_SERVER_CHECK_CAP_NET_ADMIN
62	bool "Enable check network administration capability"
63	depends on SMB_SERVER
64	default y
65
66	help
67	  Prevent unprivileged processes to start the ksmbd kernel server.
68
69config SMB_SERVER_KERBEROS5
70	bool "Support for Kerberos 5"
71	depends on SMB_SERVER
72	default n
73