xref: /onnv-gate/usr/src/cmd/fs.d/nfs/etc/nfssec.conf (revision 0:68f95e015346)
1*0Sstevel@tonic-gate# CDDL HEADER START
2*0Sstevel@tonic-gate#
3*0Sstevel@tonic-gate# The contents of this file are subject to the terms of the
4*0Sstevel@tonic-gate# Common Development and Distribution License, Version 1.0 only
5*0Sstevel@tonic-gate# (the "License").  You may not use this file except in compliance
6*0Sstevel@tonic-gate# with the License.
7*0Sstevel@tonic-gate#
8*0Sstevel@tonic-gate# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9*0Sstevel@tonic-gate# or http://www.opensolaris.org/os/licensing.
10*0Sstevel@tonic-gate# See the License for the specific language governing permissions
11*0Sstevel@tonic-gate# and limitations under the License.
12*0Sstevel@tonic-gate#
13*0Sstevel@tonic-gate# When distributing Covered Code, include this CDDL HEADER in each
14*0Sstevel@tonic-gate# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15*0Sstevel@tonic-gate# If applicable, add the following below this CDDL HEADER, with the
16*0Sstevel@tonic-gate# fields enclosed by brackets "[]" replaced with your own identifying
17*0Sstevel@tonic-gate# information: Portions Copyright [yyyy] [name of copyright owner]
18*0Sstevel@tonic-gate#
19*0Sstevel@tonic-gate# CDDL HEADER END
20*0Sstevel@tonic-gate#
21*0Sstevel@tonic-gate# Copyright 2001 Sun Microsystems, Inc.  All rights reserved.
22*0Sstevel@tonic-gate# Use is subject to license terms.
23*0Sstevel@tonic-gate#
24*0Sstevel@tonic-gate#ident	"%Z%%M%	%I%	%E% SMI"
25*0Sstevel@tonic-gate#
26*0Sstevel@tonic-gate# The NFS Security Service Configuration File.
27*0Sstevel@tonic-gate#
28*0Sstevel@tonic-gate# Each entry is of the form:
29*0Sstevel@tonic-gate#
30*0Sstevel@tonic-gate#       <NFS_security_mode_name> <NFS_security_mode_number> \
31*0Sstevel@tonic-gate#		<GSS_mechanism_name> <GSS_quality_of_protection> <GSS_services>
32*0Sstevel@tonic-gate#
33*0Sstevel@tonic-gate#
34*0Sstevel@tonic-gate# The "-" in <GSS_mechanism_name> signifies that this is not a GSS mechanism.
35*0Sstevel@tonic-gate# A string entry in <GSS_mechanism_name> is required for using RPCSEC_GSS
36*0Sstevel@tonic-gate# services.  <GSS_quality_of_protection> and <GSS_services> are optional.
37*0Sstevel@tonic-gate# White space is not an acceptable value.
38*0Sstevel@tonic-gate#
39*0Sstevel@tonic-gate# default security mode is defined at the end.  It should be one of
40*0Sstevel@tonic-gate# the flavor numbers defined above it.
41*0Sstevel@tonic-gate#
42*0Sstevel@tonic-gatenone		0	-	-	-	# AUTH_NONE
43*0Sstevel@tonic-gatesys		1	-	-	-	# AUTH_SYS
44*0Sstevel@tonic-gatedh		3	-	-	-	# AUTH_DH
45*0Sstevel@tonic-gate#
46*0Sstevel@tonic-gate# Uncomment the following lines to use Kerberos V5 with NFS
47*0Sstevel@tonic-gate#
48*0Sstevel@tonic-gate#krb5		390003	kerberos_v5	default	-		# RPCSEC_GSS
49*0Sstevel@tonic-gate#krb5i		390004	kerberos_v5	default	integrity	# RPCSEC_GSS
50*0Sstevel@tonic-gate#krb5p		390005	kerberos_v5	default	privacy		# RPCSEC_GSS
51*0Sstevel@tonic-gatedefault		1	-	-	-			# default is AUTH_SYS
52