]> andersk Git - gssapi-openssh.git/blame - openssh/configure.ac
andersk / gssapi-openssh.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
merge hpn12v17
[gssapi-openssh.git] / openssh / configure.ac
CommitLineData
3c0ef626 1# $Id$
12a403af 2#
3# Copyright (c) 1999-2004 Damien Miller
4#
5# Permission to use, copy, modify, and distribute this software for any
6# purpose with or without fee is hereby granted, provided that the above
7# copyright notice and this permission notice appear in all copies.
8#
9# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
3c0ef626 16
2ce0bfe4 17AC_INIT(OpenSSH, Portable, openssh-unix-dev@mindrot.org)
4b6dae8f 18AC_REVISION($Revision$)
3c0ef626 19AC_CONFIG_SRCDIR([ssh.c])
20
21AC_CONFIG_HEADER(config.h)
22AC_PROG_CC
23AC_CANONICAL_HOST
24AC_C_BIGENDIAN
25
26# Checks for programs.
7cac2b65 27AC_PROG_AWK
3c0ef626 28AC_PROG_CPP
29AC_PROG_RANLIB
30AC_PROG_INSTALL
4b6dae8f 31AC_PROG_EGREP
3c0ef626 32AC_PATH_PROG(AR, ar)
7e82606e 33AC_PATH_PROG(CAT, cat)
34AC_PATH_PROG(KILL, kill)
3c0ef626 35AC_PATH_PROGS(PERL, perl5 perl)
bfe49944 36AC_PATH_PROG(SED, sed)
3c0ef626 37AC_SUBST(PERL)
38AC_PATH_PROG(ENT, ent)
39AC_SUBST(ENT)
3c0ef626 40AC_PATH_PROG(TEST_MINUS_S_SH, bash)
41AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
42AC_PATH_PROG(TEST_MINUS_S_SH, sh)
350391c5 43AC_PATH_PROG(SH, sh)
7e82606e 44AC_SUBST(TEST_SHELL,sh)
45
46dnl for buildpkg.sh
47AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
48 [/usr/sbin${PATH_SEPARATOR}/etc])
49AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
50 [/usr/sbin${PATH_SEPARATOR}/etc])
51AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
08822d99 52if test -x /sbin/sh; then
53 AC_SUBST(STARTUP_SCRIPT_SHELL,/sbin/sh)
54else
55 AC_SUBST(STARTUP_SCRIPT_SHELL,/bin/sh)
56fi
3c0ef626 57
58# System features
59AC_SYS_LARGEFILE
60
61if test -z "$AR" ; then
62 AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
63fi
64
65# Use LOGIN_PROGRAM from environment if possible
66if test ! -z "$LOGIN_PROGRAM" ; then
08822d99 67 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM",
68 [If your header files don't define LOGIN_PROGRAM,
69 then use this (detected) from environment and PATH])
3c0ef626 70else
71 # Search for login
72 AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
73 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
74 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
75 fi
76fi
77
540d72c3 78AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
79if test ! -z "$PATH_PASSWD_PROG" ; then
08822d99 80 AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG",
81 [Full path of your "passwd" program])
540d72c3 82fi
83
3c0ef626 84if test -z "$LD" ; then
85 LD=$CC
86fi
87AC_SUBST(LD)
8b32eddc 88
3c0ef626 89AC_C_INLINE
2ce0bfe4 90
91AC_CHECK_DECL(LLONG_MAX, have_llong_max=1, , [#include <limits.h>])
92
540d72c3 93if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
2ce0bfe4 94 CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wuninitialized"
08822d99 95 GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'`
2ce0bfe4 96 case $GCC_VER in
97 1.*) ;;
98 2.8* | 2.9*) CFLAGS="$CFLAGS -Wsign-compare" ;;
99 2.*) ;;
08822d99 100 3.*) CFLAGS="$CFLAGS -Wsign-compare" ;;
101 4.*) CFLAGS="$CFLAGS -Wsign-compare -Wno-pointer-sign" ;;
102 *) ;;
2ce0bfe4 103 esac
104
105 if test -z "$have_llong_max"; then
106 # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
107 unset ac_cv_have_decl_LLONG_MAX
108 saved_CFLAGS="$CFLAGS"
109 CFLAGS="$CFLAGS -std=gnu99"
110 AC_CHECK_DECL(LLONG_MAX,
111 [have_llong_max=1],
112 [CFLAGS="$saved_CFLAGS"],
113 [#include <limits.h>]
114 )
115 fi
116fi
117
540d72c3 118AC_ARG_WITH(rpath,
119 [ --without-rpath Disable auto-added -R linker paths],
120 [
8b32eddc 121 if test "x$withval" = "xno" ; then
540d72c3 122 need_dash_r=""
123 fi
124 if test "x$withval" = "xyes" ; then
125 need_dash_r=1
126 fi
127 ]
128)
129
240debe0 130# Allow user to specify flags
131AC_ARG_WITH(cflags,
132 [ --with-cflags Specify additional flags to pass to compiler],
133 [
134 if test -n "$withval" && test "x$withval" != "xno" && \
135 test "x${withval}" != "xyes"; then
136 CFLAGS="$CFLAGS $withval"
137 fi
138 ]
139)
140AC_ARG_WITH(cppflags,
141 [ --with-cppflags Specify additional flags to pass to preprocessor] ,
142 [
143 if test -n "$withval" && test "x$withval" != "xno" && \
144 test "x${withval}" != "xyes"; then
145 CPPFLAGS="$CPPFLAGS $withval"
146 fi
147 ]
148)
149AC_ARG_WITH(ldflags,
150 [ --with-ldflags Specify additional flags to pass to linker],
151 [
152 if test -n "$withval" && test "x$withval" != "xno" && \
153 test "x${withval}" != "xyes"; then
154 LDFLAGS="$LDFLAGS $withval"
155 fi
156 ]
157)
158AC_ARG_WITH(libs,
159 [ --with-libs Specify additional libraries to link with],
160 [
161 if test -n "$withval" && test "x$withval" != "xno" && \
162 test "x${withval}" != "xyes"; then
163 LIBS="$LIBS $withval"
164 fi
165 ]
166)
167AC_ARG_WITH(Werror,
168 [ --with-Werror Build main code with -Werror],
169 [
170 if test -n "$withval" && test "x$withval" != "xno"; then
171 werror_flags="-Werror"
172 if test "x${withval}" != "xyes"; then
173 werror_flags="$withval"
174 fi
175 fi
176 ]
177)
178
179AC_CHECK_HEADERS( \
180 bstring.h \
181 crypt.h \
182 crypto/sha2.h \
183 dirent.h \
184 endian.h \
185 features.h \
186 fcntl.h \
187 floatingpoint.h \
188 getopt.h \
189 glob.h \
190 ia.h \
191 iaf.h \
192 limits.h \
193 login.h \
194 maillock.h \
195 ndir.h \
196 net/if_tun.h \
197 netdb.h \
198 netgroup.h \
199 pam/pam_appl.h \
200 paths.h \
201 pty.h \
202 readpassphrase.h \
203 rpc/types.h \
204 security/pam_appl.h \
205 sha2.h \
206 shadow.h \
207 stddef.h \
208 stdint.h \
209 string.h \
210 strings.h \
211 sys/audit.h \
212 sys/bitypes.h \
213 sys/bsdtty.h \
214 sys/cdefs.h \
215 sys/dir.h \
216 sys/mman.h \
217 sys/ndir.h \
218 sys/prctl.h \
219 sys/pstat.h \
220 sys/select.h \
221 sys/stat.h \
222 sys/stream.h \
223 sys/stropts.h \
224 sys/strtio.h \
225 sys/sysmacros.h \
226 sys/time.h \
227 sys/timers.h \
228 sys/un.h \
229 time.h \
230 tmpdir.h \
231 ttyent.h \
232 unistd.h \
233 usersec.h \
234 util.h \
235 utime.h \
236 utmp.h \
237 utmpx.h \
238 vis.h \
239)
240
241# lastlog.h requires sys/time.h to be included first on Solaris
242AC_CHECK_HEADERS(lastlog.h, [], [], [
243#ifdef HAVE_SYS_TIME_H
244# include <sys/time.h>
245#endif
246])
247
248# sys/ptms.h requires sys/stream.h to be included first on Solaris
249AC_CHECK_HEADERS(sys/ptms.h, [], [], [
250#ifdef HAVE_SYS_STREAM_H
251# include <sys/stream.h>
252#endif
253])
254
255# login_cap.h requires sys/types.h on NetBSD
256AC_CHECK_HEADERS(login_cap.h, [], [], [
257#include <sys/types.h>
258])
259
30460aeb 260# Messages for features tested for in target-specific section
261SIA_MSG="no"
262SPC_MSG="no"
263
3c0ef626 264# Check for some target-specific stuff
265case "$host" in
266*-*-aix*)
30460aeb 267 # Some versions of VAC won't allow macro redefinitions at
268 # -qlanglevel=ansi, and autoconf 2.60 sometimes insists on using that
269 # particularly with older versions of vac or xlc.
270 # It also throws errors about null macro argments, but these are
271 # not fatal.
272 AC_MSG_CHECKING(if compiler allows macro redefinitions)
273 AC_COMPILE_IFELSE(
274 [AC_LANG_SOURCE([[
275#define testmacro foo
276#define testmacro bar
277int main(void) { exit(0); }
278 ]])],
279 [ AC_MSG_RESULT(yes) ],
280 [ AC_MSG_RESULT(no)
281 CC="`echo $CC | sed 's/-qlanglvl\=ansi//g'`"
282 LD="`echo $LD | sed 's/-qlanglvl\=ansi//g'`"
283 CFLAGS="`echo $CFLAGS | sed 's/-qlanglvl\=ansi//g'`"
284 CPPFLAGS="`echo $CPPFLAGS | sed 's/-qlanglvl\=ansi//g'`"
285 ]
286 )
287
540d72c3 288 AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
256cb466 289 if (test -z "$blibpath"); then
540d72c3 290 blibpath="/usr/lib:/lib"
3c0ef626 291 fi
256cb466 292 saved_LDFLAGS="$LDFLAGS"
30460aeb 293 if test "$GCC" = "yes"; then
294 flags="-Wl,-blibpath: -Wl,-rpath, -blibpath:"
295 else
296 flags="-blibpath: -Wl,-blibpath: -Wl,-rpath,"
297 fi
298 for tryflags in $flags ;do
256cb466 299 if (test -z "$blibflags"); then
300 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
301 AC_TRY_LINK([], [], [blibflags=$tryflags])
302 fi
303 done
304 if (test -z "$blibflags"); then
305 AC_MSG_RESULT(not found)
306 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
307 else
308 AC_MSG_RESULT($blibflags)
309 fi
310 LDFLAGS="$saved_LDFLAGS"
7cac2b65 311 dnl Check for authenticate. Might be in libs.a on older AIXes
08822d99 312 AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE, 1,
313 [Define if you want to enable AIX4's authenticate function])],
d03f4262 314 [AC_CHECK_LIB(s,authenticate,
315 [ AC_DEFINE(WITH_AIXAUTHENTICATE)
316 LIBS="$LIBS -ls"
317 ])
318 ])
dfddba3d 319 dnl Check for various auth function declarations in headers.
320 AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
8b32eddc 321 passwdexpired, setauthdb], , , [#include <usersec.h>])
7cac2b65 322 dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
dfddba3d 323 AC_CHECK_DECLS(loginfailed,
7cac2b65 324 [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
325 AC_TRY_COMPILE(
326 [#include <usersec.h>],
327 [(void)loginfailed("user","host","tty",0);],
328 [AC_MSG_RESULT(yes)
08822d99 329 AC_DEFINE(AIX_LOGINFAILED_4ARG, 1,
330 [Define if your AIX loginfailed() function
331 takes 4 arguments (AIX >= 5.2)])],
7cac2b65 332 [AC_MSG_RESULT(no)]
333 )],
334 [],
335 [#include <usersec.h>]
336 )
337 AC_CHECK_FUNCS(setauthdb)
30460aeb 338 AC_CHECK_DECL(F_CLOSEM,
339 AC_DEFINE(HAVE_FCNTL_CLOSEM, 1, [Use F_CLOSEM fcntl for closefrom]),
340 [],
341 [ #include <limits.h>
342 #include <fcntl.h> ]
343 )
dfddba3d 344 check_for_aix_broken_getaddrinfo=1
08822d99 345 AC_DEFINE(BROKEN_REALPATH, 1, [Define if you have a broken realpath.])
346 AC_DEFINE(SETEUID_BREAKS_SETUID, 1,
347 [Define if your platform breaks doing a seteuid before a setuid])
348 AC_DEFINE(BROKEN_SETREUID, 1, [Define if your setreuid() is broken])
349 AC_DEFINE(BROKEN_SETREGID, 1, [Define if your setregid() is broken])
3c0ef626 350 dnl AIX handles lastlog as part of its login message
08822d99 351 AC_DEFINE(DISABLE_LASTLOG, 1, [Define if you don't want to use lastlog])
352 AC_DEFINE(LOGIN_NEEDS_UTMPX, 1,
353 [Some systems need a utmpx entry for /bin/login to work])
354 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV,
355 [Define to a Set Process Title type if your system is
356 supported by bsd-setproctitle.c])
357 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
358 [AIX 5.2 and 5.3 (and presumably newer) require this])
30460aeb 359 AC_DEFINE(PTY_ZEROREAD, 1, [read(1) can return 0 for a non-closed fd])
3c0ef626 360 ;;
361*-*-cygwin*)
bfe49944 362 check_for_libcrypt_later=1
0b90ac93 363 LIBS="$LIBS /usr/lib/textreadmode.o"
08822d99 364 AC_DEFINE(HAVE_CYGWIN, 1, [Define if you are on Cygwin])
365 AC_DEFINE(USE_PIPES, 1, [Use PIPES instead of a socketpair()])
366 AC_DEFINE(DISABLE_SHADOW, 1,
367 [Define if you want to disable shadow passwords])
368 AC_DEFINE(IP_TOS_IS_BROKEN, 1,
369 [Define if your system choked on IP TOS setting])
370 AC_DEFINE(NO_X11_UNIX_SOCKETS, 1,
371 [Define if X11 doesn't support AF_UNIX sockets on that system])
372 AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT, 1,
373 [Define if the concept of ports only accessible to
374 superusers isn't known])
375 AC_DEFINE(DISABLE_FD_PASSING, 1,
376 [Define if your platform needs to skip post auth
377 file descriptor passing])
3c0ef626 378 ;;
379*-*-dgux*)
380 AC_DEFINE(IP_TOS_IS_BROKEN)
540d72c3 381 AC_DEFINE(SETEUID_BREAKS_SETUID)
382 AC_DEFINE(BROKEN_SETREUID)
383 AC_DEFINE(BROKEN_SETREGID)
3c0ef626 384 ;;
385*-*-darwin*)
0b90ac93 386 AC_DEFINE(BROKEN_GETADDRINFO, 1, [Define if getaddrinfo is broken)])
387 AC_DEFINE(BROKEN_GETADDRINFO)
29d88157 388 AC_DEFINE(SETEUID_BREAKS_SETUID)
389 AC_DEFINE(BROKEN_SETREUID)
390 AC_DEFINE(BROKEN_SETREGID)
08822d99 391 AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1,
392 [Define if your resolver libs need this for getrrsetbyname])
30460aeb 393 AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
394 AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
395 [Use tunnel device compatibility to OpenBSD])
396 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
397 [Prepend the address family to IP tunnel traffic])
f713db99 398 AC_MSG_CHECKING(if we have the Security Authorization Session API)
399 AC_TRY_COMPILE([#include <Security/AuthSession.h>],
400 [SessionCreate(0, 0);],
401 [ac_cv_use_security_session_api="yes"
402 AC_DEFINE(USE_SECURITY_SESSION_API, 1,
403 [platform has the Security Authorization Session API])
404 LIBS="$LIBS -framework Security"
405 AC_MSG_RESULT(yes)],
406 [ac_cv_use_security_session_api="no"
407 AC_MSG_RESULT(no)])
408 AC_MSG_CHECKING(if we have an in-memory credentials cache)
409 AC_TRY_COMPILE(
410 [#include <Kerberos/Kerberos.h>],
411 [cc_context_t c;
412 (void) cc_initialize (&c, 0, NULL, NULL);],
413 [AC_DEFINE(USE_CCAPI, 1,
414 [platform uses an in-memory credentials cache])
415 LIBS="$LIBS -framework Security"
416 AC_MSG_RESULT(yes)
417 if test "x$ac_cv_use_security_session_api" = "xno"; then
418 AC_MSG_ERROR(*** Need a security framework to use the credentials cache API ***)
419 fi],
420 [AC_MSG_RESULT(no)]
421 )
422 ;;
30460aeb 423*-*-dragonfly*)
424 SSHDLIBS="$SSHDLIBS -lcrypt"
3c0ef626 425 ;;
2ce0bfe4 426*-*-hpux*)
427 # first we define all of the options common to all HP-UX releases
3c0ef626 428 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
429 IPADDR_IN_DISPLAY=yes
3c0ef626 430 AC_DEFINE(USE_PIPES)
08822d99 431 AC_DEFINE(LOGIN_NO_ENDOPT, 1,
432 [Define if your login program cannot handle end of options ("--")])
350391c5 433 AC_DEFINE(LOGIN_NEEDS_UTMPX)
08822d99 434 AC_DEFINE(LOCKED_PASSWD_STRING, "*",
435 [String used in /etc/passwd to denote locked account])
7cac2b65 436 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
08822d99 437 MAIL="/var/mail/username"
d03f4262 438 LIBS="$LIBS -lsec"
2ce0bfe4 439 AC_CHECK_LIB(xnet, t_error, ,
440 AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
441
442 # next, we define all of the options specific to major releases
443 case "$host" in
444 *-*-hpux10*)
445 if test -z "$GCC"; then
446 CFLAGS="$CFLAGS -Ae"
447 fi
448 ;;
449 *-*-hpux11*)
08822d99 450 AC_DEFINE(PAM_SUN_CODEBASE, 1,
451 [Define if you are using Solaris-derived PAM which
452 passes pam_messages to the conversation function
453 with an extra level of indirection])
454 AC_DEFINE(DISABLE_UTMP, 1,
455 [Define if you don't want to use utmp])
2ce0bfe4 456 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
457 check_for_hpux_broken_getaddrinfo=1
458 check_for_conflicting_getspnam=1
459 ;;
460 esac
461
462 # lastly, we define options specific to minor releases
463 case "$host" in
464 *-*-hpux10.26)
08822d99 465 AC_DEFINE(HAVE_SECUREWARE, 1,
466 [Define if you have SecureWare-based
467 protected password database])
2ce0bfe4 468 disable_ptmx_check=yes
469 LIBS="$LIBS -lsecpw"
470 ;;
471 esac
3c0ef626 472 ;;
473*-*-irix5*)
3c0ef626 474 PATH="$PATH:/usr/etc"
08822d99 475 AC_DEFINE(BROKEN_INET_NTOA, 1,
476 [Define if you system's inet_ntoa is busted
477 (e.g. Irix gcc issue)])
540d72c3 478 AC_DEFINE(SETEUID_BREAKS_SETUID)
479 AC_DEFINE(BROKEN_SETREUID)
480 AC_DEFINE(BROKEN_SETREGID)
08822d99 481 AC_DEFINE(WITH_ABBREV_NO_TTY, 1,
482 [Define if you shouldn't strip 'tty' from your
483 ttyname in [uw]tmp])
7cac2b65 484 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
3c0ef626 485 ;;
486*-*-irix6*)
3c0ef626 487 PATH="$PATH:/usr/etc"
08822d99 488 AC_DEFINE(WITH_IRIX_ARRAY, 1,
489 [Define if you have/want arrays
490 (cluster-wide session managment, not C arrays)])
491 AC_DEFINE(WITH_IRIX_PROJECT, 1,
492 [Define if you want IRIX project management])
493 AC_DEFINE(WITH_IRIX_AUDIT, 1,
494 [Define if you want IRIX audit trails])
495 AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS, 1,
496 [Define if you want IRIX kernel jobs])])
3c0ef626 497 AC_DEFINE(BROKEN_INET_NTOA)
29d88157 498 AC_DEFINE(SETEUID_BREAKS_SETUID)
499 AC_DEFINE(BROKEN_SETREUID)
500 AC_DEFINE(BROKEN_SETREGID)
08822d99 501 AC_DEFINE(BROKEN_UPDWTMPX, 1, [updwtmpx is broken (if present)])
350391c5 502 AC_DEFINE(WITH_ABBREV_NO_TTY)
7cac2b65 503 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
3c0ef626 504 ;;
505*-*-linux*)
506 no_dev_ptmx=1
507 check_for_libcrypt_later=1
7cac2b65 508 check_for_openpty_ctty_bug=1
08822d99 509 AC_DEFINE(DONT_TRY_OTHER_AF, 1, [Workaround more Linux IPv6 quirks])
510 AC_DEFINE(PAM_TTY_KLUDGE, 1,
511 [Work around problematic Linux PAM modules handling of PAM_TTY])
512 AC_DEFINE(LOCKED_PASSWD_PREFIX, "!",
513 [String used in /etc/passwd to denote locked account])
7cac2b65 514 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
08822d99 515 AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM,
516 [Define to whatever link() returns for "not supported"
517 if it doesn't return EOPNOTSUPP.])
dfddba3d 518 AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
08822d99 519 AC_DEFINE(USE_BTMP)
3c0ef626 520 inet6_default_4in6=yes
7cac2b65 521 case `uname -r` in
522 1.*|2.0.*)
08822d99 523 AC_DEFINE(BROKEN_CMSG_TYPE, 1,
524 [Define if cmsg_type is not passed correctly])
7cac2b65 525 ;;
526 esac
08822d99 527 # tun(4) forwarding compat code
528 AC_CHECK_HEADERS(linux/if_tun.h)
529 if test "x$ac_cv_header_linux_if_tun_h" = "xyes" ; then
530 AC_DEFINE(SSH_TUN_LINUX, 1,
531 [Open tunnel devices the Linux tun/tap way])
532 AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
533 [Use tunnel device compatibility to OpenBSD])
534 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
535 [Prepend the address family to IP tunnel traffic])
536 fi
3c0ef626 537 ;;
538mips-sony-bsd|mips-sony-newsos4)
4b6dae8f 539 AC_DEFINE(NEED_SETPGRP, 1, [Need setpgrp to acquire controlling tty])
3c0ef626 540 SONY=1
3c0ef626 541 ;;
542*-*-netbsd*)
d03f4262 543 check_for_libcrypt_before=1
8b32eddc 544 if test "x$withval" != "xno" ; then
540d72c3 545 need_dash_r=1
546 fi
08822d99 547 AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
548 AC_CHECK_HEADER([net/if_tap.h], ,
549 AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
550 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
551 [Prepend the address family to IP tunnel traffic])
3c0ef626 552 ;;
553*-*-freebsd*)
554 check_for_libcrypt_later=1
08822d99 555 AC_DEFINE(LOCKED_PASSWD_PREFIX, "*LOCKED*", [Account locked with pw(1)])
556 AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
557 AC_CHECK_HEADER([net/if_tap.h], ,
558 AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
3c0ef626 559 ;;
29d88157 560*-*-bsdi*)
561 AC_DEFINE(SETEUID_BREAKS_SETUID)
562 AC_DEFINE(BROKEN_SETREUID)
563 AC_DEFINE(BROKEN_SETREGID)
564 ;;
3c0ef626 565*-next-*)
566 conf_lastlog_location="/usr/adm/lastlog"
567 conf_utmp_location=/etc/utmp
568 conf_wtmp_location=/usr/adm/wtmp
569 MAIL=/usr/spool/mail
08822d99 570 AC_DEFINE(HAVE_NEXT, 1, [Define if you are on NeXT])
3c0ef626 571 AC_DEFINE(BROKEN_REALPATH)
572 AC_DEFINE(USE_PIPES)
08822d99 573 AC_DEFINE(BROKEN_SAVED_UIDS, 1, [Needed for NeXT])
3c0ef626 574 ;;
2ce0bfe4 575*-*-openbsd*)
576 AC_DEFINE(HAVE_ATTRIBUTE__SENTINEL__, 1, [OpenBSD's gcc has sentinel])
08822d99 577 AC_DEFINE(HAVE_ATTRIBUTE__BOUNDED__, 1, [OpenBSD's gcc has bounded])
578 AC_DEFINE(SSH_TUN_OPENBSD, 1, [Open tunnel devices the OpenBSD way])
30460aeb 579 AC_DEFINE(SYSLOG_R_SAFE_IN_SIGHAND, 1,
580 [syslog_r function is safe to use in in a signal handler])
2ce0bfe4 581 ;;
3c0ef626 582*-*-solaris*)
8b32eddc 583 if test "x$withval" != "xno" ; then
12a403af 584 need_dash_r=1
585 fi
3c0ef626 586 AC_DEFINE(PAM_SUN_CODEBASE)
587 AC_DEFINE(LOGIN_NEEDS_UTMPX)
08822d99 588 AC_DEFINE(LOGIN_NEEDS_TERM, 1,
589 [Some versions of /bin/login need the TERM supplied
590 on the commandline])
3c0ef626 591 AC_DEFINE(PAM_TTY_KLUDGE)
08822d99 592 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
593 [Define if pam_chauthtok wants real uid set
594 to the unpriv'ed user])
7cac2b65 595 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
596 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
08822d99 597 AC_DEFINE(SSHD_ACQUIRES_CTTY, 1,
598 [Define if sshd somehow reacquires a controlling TTY
599 after setsid()])
30460aeb 600 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd
601 in case the name is longer than 8 chars])
7cac2b65 602 external_path_file=/etc/default/login
3c0ef626 603 # hardwire lastlog location (can't detect it on some versions)
604 conf_lastlog_location="/var/adm/lastlog"
605 AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
606 sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
607 if test "$sol2ver" -ge 8; then
608 AC_MSG_RESULT(yes)
609 AC_DEFINE(DISABLE_UTMP)
08822d99 610 AC_DEFINE(DISABLE_WTMP, 1,
611 [Define if you don't want to use wtmp])
3c0ef626 612 else
613 AC_MSG_RESULT(no)
614 fi
30460aeb 615 AC_ARG_WITH(solaris-contracts,
616 [ --with-solaris-contracts Enable Solaris process contracts (experimental)],
617 [
618 AC_CHECK_LIB(contract, ct_tmpl_activate,
619 [ AC_DEFINE(USE_SOLARIS_PROCESS_CONTRACTS, 1,
620 [Define if you have Solaris process contracts])
621 SSHDLIBS="$SSHDLIBS -lcontract"
622 AC_SUBST(SSHDLIBS)
623 SPC_MSG="yes" ], )
624 ],
625 )
3c0ef626 626 ;;
627*-*-sunos4*)
628 CPPFLAGS="$CPPFLAGS -DSUNOS4"
629 AC_CHECK_FUNCS(getpwanam)
630 AC_DEFINE(PAM_SUN_CODEBASE)
3c0ef626 631 conf_utmp_location=/etc/utmp
632 conf_wtmp_location=/var/adm/wtmp
633 conf_lastlog_location=/var/adm/lastlog
634 AC_DEFINE(USE_PIPES)
635 ;;
636*-ncr-sysv*)
3c0ef626 637 LIBS="$LIBS -lc89"
e9702f7d 638 AC_DEFINE(USE_PIPES)
7cac2b65 639 AC_DEFINE(SSHD_ACQUIRES_CTTY)
29d88157 640 AC_DEFINE(SETEUID_BREAKS_SETUID)
641 AC_DEFINE(BROKEN_SETREUID)
642 AC_DEFINE(BROKEN_SETREGID)
3c0ef626 643 ;;
644*-sni-sysv*)
3c0ef626 645 # /usr/ucblib MUST NOT be searched on ReliantUNIX
540d72c3 646 AC_CHECK_LIB(dl, dlsym, ,)
08822d99 647 # -lresolv needs to be at the end of LIBS or DNS lookups break
648 AC_CHECK_LIB(resolv, res_query, [ LIBS="$LIBS -lresolv" ])
3c0ef626 649 IPADDR_IN_DISPLAY=yes
650 AC_DEFINE(USE_PIPES)
651 AC_DEFINE(IP_TOS_IS_BROKEN)
540d72c3 652 AC_DEFINE(SETEUID_BREAKS_SETUID)
653 AC_DEFINE(BROKEN_SETREUID)
654 AC_DEFINE(BROKEN_SETREGID)
7cac2b65 655 AC_DEFINE(SSHD_ACQUIRES_CTTY)
656 external_path_file=/etc/default/login
3c0ef626 657 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
658 # Attention: always take care to bind libsocket and libnsl before libc,
659 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
660 ;;
dfddba3d 661# UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
3c0ef626 662*-*-sysv4.2*)
3c0ef626 663 AC_DEFINE(USE_PIPES)
7cac2b65 664 AC_DEFINE(SETEUID_BREAKS_SETUID)
665 AC_DEFINE(BROKEN_SETREUID)
666 AC_DEFINE(BROKEN_SETREGID)
8b32eddc 667 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
08822d99 668 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
3c0ef626 669 ;;
dfddba3d 670# UnixWare 7.x, OpenUNIX 8
3c0ef626 671*-*-sysv5*)
2ce0bfe4 672 check_for_libcrypt_later=1
673 AC_DEFINE(UNIXWARE_LONG_PASSWORDS, 1, [Support passwords > 8 chars])
3c0ef626 674 AC_DEFINE(USE_PIPES)
7cac2b65 675 AC_DEFINE(SETEUID_BREAKS_SETUID)
676 AC_DEFINE(BROKEN_SETREUID)
677 AC_DEFINE(BROKEN_SETREGID)
08822d99 678 AC_DEFINE(PASSWD_NEEDS_USERNAME)
2ce0bfe4 679 case "$host" in
680 *-*-sysv5SCO_SV*) # SCO OpenServer 6.x
681 TEST_SHELL=/u95/bin/sh
08822d99 682 AC_DEFINE(BROKEN_LIBIAF, 1,
683 [ia_uinfo routines not supported by OS yet])
30460aeb 684 AC_DEFINE(BROKEN_UPDWTMPX)
08822d99 685 ;;
686 *) AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
2ce0bfe4 687 ;;
688 esac
3c0ef626 689 ;;
690*-*-sysv*)
3c0ef626 691 ;;
dfddba3d 692# SCO UNIX and OEM versions of SCO UNIX
3c0ef626 693*-*-sco3.2v4*)
dfddba3d 694 AC_MSG_ERROR("This Platform is no longer supported.")
3c0ef626 695 ;;
dfddba3d 696# SCO OpenServer 5.x
3c0ef626 697*-*-sco3.2v5*)
bfe49944 698 if test -z "$GCC"; then
699 CFLAGS="$CFLAGS -belf"
700 fi
3c0ef626 701 LIBS="$LIBS -lprot -lx -ltinfo -lm"
702 no_dev_ptmx=1
3c0ef626 703 AC_DEFINE(USE_PIPES)
350391c5 704 AC_DEFINE(HAVE_SECUREWARE)
3c0ef626 705 AC_DEFINE(DISABLE_SHADOW)
d03f4262 706 AC_DEFINE(DISABLE_FD_PASSING)
7cac2b65 707 AC_DEFINE(SETEUID_BREAKS_SETUID)
708 AC_DEFINE(BROKEN_SETREUID)
709 AC_DEFINE(BROKEN_SETREGID)
710 AC_DEFINE(WITH_ABBREV_NO_TTY)
7e82606e 711 AC_DEFINE(BROKEN_UPDWTMPX)
08822d99 712 AC_DEFINE(PASSWD_NEEDS_USERNAME)
3c0ef626 713 AC_CHECK_FUNCS(getluid setluid)
714 MANTYPE=man
7e82606e 715 TEST_SHELL=ksh
3c0ef626 716 ;;
d03f4262 717*-*-unicosmk*)
08822d99 718 AC_DEFINE(NO_SSH_LASTLOG, 1,
719 [Define if you don't want to use lastlog in session.c])
540d72c3 720 AC_DEFINE(SETEUID_BREAKS_SETUID)
721 AC_DEFINE(BROKEN_SETREUID)
722 AC_DEFINE(BROKEN_SETREGID)
d03f4262 723 AC_DEFINE(USE_PIPES)
724 AC_DEFINE(DISABLE_FD_PASSING)
725 LDFLAGS="$LDFLAGS"
726 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
727 MANTYPE=cat
728 ;;
7cac2b65 729*-*-unicosmp*)
540d72c3 730 AC_DEFINE(SETEUID_BREAKS_SETUID)
731 AC_DEFINE(BROKEN_SETREUID)
732 AC_DEFINE(BROKEN_SETREGID)
7cac2b65 733 AC_DEFINE(WITH_ABBREV_NO_TTY)
734 AC_DEFINE(USE_PIPES)
735 AC_DEFINE(DISABLE_FD_PASSING)
736 LDFLAGS="$LDFLAGS"
540d72c3 737 LIBS="$LIBS -lgen -lacid -ldb"
7cac2b65 738 MANTYPE=cat
739 ;;
3c0ef626 740*-*-unicos*)
540d72c3 741 AC_DEFINE(SETEUID_BREAKS_SETUID)
742 AC_DEFINE(BROKEN_SETREUID)
743 AC_DEFINE(BROKEN_SETREGID)
3c0ef626 744 AC_DEFINE(USE_PIPES)
d03f4262 745 AC_DEFINE(DISABLE_FD_PASSING)
746 AC_DEFINE(NO_SSH_LASTLOG)
747 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
748 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
749 MANTYPE=cat
3c0ef626 750 ;;
751*-dec-osf*)
752 AC_MSG_CHECKING(for Digital Unix SIA)
753 no_osfsia=""
754 AC_ARG_WITH(osfsia,
755 [ --with-osfsia Enable Digital Unix SIA],
756 [
757 if test "x$withval" = "xno" ; then
758 AC_MSG_RESULT(disabled)
759 no_osfsia=1
760 fi
761 ],
762 )
763 if test -z "$no_osfsia" ; then
764 if test -f /etc/sia/matrix.conf; then
765 AC_MSG_RESULT(yes)
08822d99 766 AC_DEFINE(HAVE_OSF_SIA, 1,
767 [Define if you have Digital Unix Security
768 Integration Architecture])
769 AC_DEFINE(DISABLE_LOGIN, 1,
770 [Define if you don't want to use your
771 system's login() call])
bfe49944 772 AC_DEFINE(DISABLE_FD_PASSING)
3c0ef626 773 LIBS="$LIBS -lsecurity -ldb -lm -laud"
30460aeb 774 SIA_MSG="yes"
3c0ef626 775 else
776 AC_MSG_RESULT(no)
08822d99 777 AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin",
778 [String used in /etc/passwd to denote locked account])
3c0ef626 779 fi
780 fi
7cac2b65 781 AC_DEFINE(BROKEN_GETADDRINFO)
29d88157 782 AC_DEFINE(SETEUID_BREAKS_SETUID)
783 AC_DEFINE(BROKEN_SETREUID)
784 AC_DEFINE(BROKEN_SETREGID)
3c0ef626 785 ;;
786
4b6dae8f 787*-*-nto-qnx*)
3c0ef626 788 AC_DEFINE(USE_PIPES)
789 AC_DEFINE(NO_X11_UNIX_SOCKETS)
08822d99 790 AC_DEFINE(MISSING_NFDBITS, 1, [Define on *nto-qnx systems])
791 AC_DEFINE(MISSING_HOWMANY, 1, [Define on *nto-qnx systems])
792 AC_DEFINE(MISSING_FD_MASK, 1, [Define on *nto-qnx systems])
4b6dae8f 793 AC_DEFINE(DISABLE_LASTLOG)
30460aeb 794 AC_DEFINE(SSHD_ACQUIRES_CTTY)
795 enable_etc_default_login=no # has incompatible /etc/default/login
3c0ef626 796 ;;
2ce0bfe4 797
798*-*-ultrix*)
08822d99 799 AC_DEFINE(BROKEN_GETGROUPS, 1, [getgroups(0,NULL) will return -1])
800 AC_DEFINE(BROKEN_MMAP, 1, [Ultrix mmap can't map files])
4b6dae8f 801 AC_DEFINE(NEED_SETPGRP)
2ce0bfe4 802 AC_DEFINE(HAVE_SYS_SYSLOG_H, 1, [Force use of sys/syslog.h on Ultrix])
803 ;;
804
805*-*-lynxos)
806 CFLAGS="$CFLAGS -D__NO_INCLUDE_WARN__"
08822d99 807 AC_DEFINE(MISSING_HOWMANY)
2ce0bfe4 808 AC_DEFINE(BROKEN_SETVBUF, 1, [LynxOS has broken setvbuf() implementation])
809 ;;
3c0ef626 810esac
811
7cac2b65 812AC_MSG_CHECKING(compiler and flags for sanity)
dfddba3d 813AC_RUN_IFELSE(
814 [AC_LANG_SOURCE([
7cac2b65 815#include <stdio.h>
816int main(){exit(0);}
dfddba3d 817 ])],
7cac2b65 818 [ AC_MSG_RESULT(yes) ],
819 [
820 AC_MSG_RESULT(no)
821 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
dfddba3d 822 ],
823 [ AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
7cac2b65 824)
825
2ce0bfe4 826dnl Checks for header files.
3c0ef626 827# Checks for libraries.
828AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
829AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
830
7cac2b65 831dnl IRIX and Solaris 2.5.1 have dirname() in libgen
832AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
833 AC_CHECK_LIB(gen, dirname,[
834 AC_CACHE_CHECK([for broken dirname],
835 ac_cv_have_broken_dirname, [
836 save_LIBS="$LIBS"
837 LIBS="$LIBS -lgen"
08822d99 838 AC_RUN_IFELSE(
839 [AC_LANG_SOURCE([[
7cac2b65 840#include <libgen.h>
841#include <string.h>
842
843int main(int argc, char **argv) {
844 char *s, buf[32];
845
846 strncpy(buf,"/etc", 32);
847 s = dirname(buf);
848 if (!s || strncmp(s, "/", 32) != 0) {
849 exit(1);
850 } else {
851 exit(0);
852 }
853}
08822d99 854 ]])],
855 [ ac_cv_have_broken_dirname="no" ],
856 [ ac_cv_have_broken_dirname="yes" ],
7cac2b65 857 [ ac_cv_have_broken_dirname="no" ],
7cac2b65 858 )
859 LIBS="$save_LIBS"
860 ])
861 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
862 LIBS="$LIBS -lgen"
863 AC_DEFINE(HAVE_DIRNAME)
864 AC_CHECK_HEADERS(libgen.h)
865 fi
866 ])
867])
868
3c0ef626 869AC_CHECK_FUNC(getspnam, ,
870 AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
08822d99 871AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME, 1,
872 [Define if you have the basename function.]))
3c0ef626 873
874dnl zlib is required
875AC_ARG_WITH(zlib,
876 [ --with-zlib=PATH Use zlib in PATH],
8b32eddc 877 [ if test "x$withval" = "xno" ; then
878 AC_MSG_ERROR([*** zlib is required ***])
879 elif test "x$withval" != "xyes"; then
3c0ef626 880 if test -d "$withval/lib"; then
881 if test -n "${need_dash_r}"; then
882 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
883 else
884 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
885 fi
886 else
887 if test -n "${need_dash_r}"; then
888 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
889 else
890 LDFLAGS="-L${withval} ${LDFLAGS}"
891 fi
892 fi
893 if test -d "$withval/include"; then
894 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
895 else
896 CPPFLAGS="-I${withval} ${CPPFLAGS}"
897 fi
8b32eddc 898 fi ]
3c0ef626 899)
900
540d72c3 901AC_CHECK_LIB(z, deflate, ,
902 [
903 saved_CPPFLAGS="$CPPFLAGS"
904 saved_LDFLAGS="$LDFLAGS"
905 save_LIBS="$LIBS"
906 dnl Check default zlib install dir
907 if test -n "${need_dash_r}"; then
908 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
909 else
910 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
911 fi
912 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
913 LIBS="$LIBS -lz"
914 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
915 [
916 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
917 ]
918 )
919 ]
920)
921AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
922
923AC_ARG_WITH(zlib-version-check,
924 [ --without-zlib-version-check Disable zlib version check],
925 [ if test "x$withval" = "xno" ; then
926 zlib_check_nonfatal=1
927 fi
928 ]
929)
930
8b32eddc 931AC_MSG_CHECKING(for possibly buggy zlib)
dfddba3d 932AC_RUN_IFELSE([AC_LANG_SOURCE([[
8b32eddc 933#include <stdio.h>
540d72c3 934#include <zlib.h>
935int main()
936{
8b32eddc 937 int a=0, b=0, c=0, d=0, n, v;
938 n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
939 if (n != 3 && n != 4)
540d72c3 940 exit(1);
8b32eddc 941 v = a*1000000 + b*10000 + c*100 + d;
942 fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
943
944 /* 1.1.4 is OK */
945 if (a == 1 && b == 1 && c >= 4)
540d72c3 946 exit(0);
8b32eddc 947
2ce0bfe4 948 /* 1.2.3 and up are OK */
949 if (v >= 1020300)
8b32eddc 950 exit(0);
951
540d72c3 952 exit(2);
953}
dfddba3d 954 ]])],
8b32eddc 955 AC_MSG_RESULT(no),
956 [ AC_MSG_RESULT(yes)
540d72c3 957 if test -z "$zlib_check_nonfatal" ; then
958 AC_MSG_ERROR([*** zlib too old - check config.log ***
959Your reported zlib version has known security problems. It's possible your
960vendor has fixed these problems without changing the version number. If you
961are sure this is the case, you can disable the check by running
962"./configure --without-zlib-version-check".
2ce0bfe4 963If you are in doubt, upgrade zlib to version 1.2.3 or greater.
8b32eddc 964See http://www.gzip.org/zlib/ for details.])
540d72c3 965 else
966 AC_MSG_WARN([zlib version may have security problems])
967 fi
dfddba3d 968 ],
969 [ AC_MSG_WARN([cross compiling: not checking zlib version]) ]
540d72c3 970)
3c0ef626 971
3c0ef626 972dnl UnixWare 2.x
540d72c3 973AC_CHECK_FUNC(strcasecmp,
3c0ef626 974 [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
975)
08822d99 976AC_CHECK_FUNCS(utimes,
d03f4262 977 [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
978 LIBS="$LIBS -lc89"]) ]
3c0ef626 979)
980
981dnl Checks for libutil functions
982AC_CHECK_HEADERS(libutil.h)
08822d99 983AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN, 1,
984 [Define if your libraries define login()])])
3c0ef626 985AC_CHECK_FUNCS(logout updwtmp logwtmp)
986
987AC_FUNC_STRFTIME
988
3c0ef626 989# Check for ALTDIRFUNC glob() extension
990AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
991AC_EGREP_CPP(FOUNDIT,
992 [
993 #include <glob.h>
994 #ifdef GLOB_ALTDIRFUNC
995 FOUNDIT
996 #endif
540d72c3 997 ],
3c0ef626 998 [
08822d99 999 AC_DEFINE(GLOB_HAS_ALTDIRFUNC, 1,
1000 [Define if your system glob() function has
1001 the GLOB_ALTDIRFUNC extension])
3c0ef626 1002 AC_MSG_RESULT(yes)
1003 ],
1004 [
1005 AC_MSG_RESULT(no)
1006 ]
1007)
1008
1009# Check for g.gl_matchc glob() extension
1010AC_MSG_CHECKING(for gl_matchc field in glob_t)
30460aeb 1011AC_TRY_COMPILE(
1012 [ #include <glob.h> ],
1013 [glob_t g; g.gl_matchc = 1;],
540d72c3 1014 [
08822d99 1015 AC_DEFINE(GLOB_HAS_GL_MATCHC, 1,
1016 [Define if your system glob() function has
1017 gl_matchc options in glob_t])
540d72c3 1018 AC_MSG_RESULT(yes)
1019 ],
1020 [
1021 AC_MSG_RESULT(no)
1022 ]
3c0ef626 1023)
1024
30460aeb 1025AC_CHECK_DECLS(GLOB_NOMATCH, , , [#include <glob.h>])
1026
3c0ef626 1027AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
dfddba3d 1028AC_RUN_IFELSE(
1029 [AC_LANG_SOURCE([[
3c0ef626 1030#include <sys/types.h>
1031#include <dirent.h>
d03f4262 1032int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
dfddba3d 1033 ]])],
540d72c3 1034 [AC_MSG_RESULT(yes)],
3c0ef626 1035 [
1036 AC_MSG_RESULT(no)
08822d99 1037 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME, 1,
1038 [Define if your struct dirent expects you to
1039 allocate extra space for d_name])
dfddba3d 1040 ],
8b32eddc 1041 [
dfddba3d 1042 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
1043 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
3c0ef626 1044 ]
1045)
1046
1c89237d 1047# Check whether the user wants GSSAPI mechglue support
1048AC_ARG_WITH(mechglue,
bec32dad 1049 [ --with-mechglue=PATH Build with GSSAPI mechglue library],
1c89237d 1050 [
1051 AC_MSG_CHECKING(for mechglue library)
bec32dad 1052
1053 if test -e ${withval}/libgssapi.a ; then
1054 mechglue_lib=${withval}/libgssapi.a
1055 elif test -e ${withval}/lib/libgssapi.a ; then
1056 mechglue_lib=${withval}/lib/libgssapi.a
1057 else
1058 AC_MSG_ERROR("Can't find libgssapi in ${withval}");
1c89237d 1059 fi
bec32dad 1060 LIBS="$LIBS ${mechglue_lib}"
1061 AC_MSG_RESULT(${mechglue_lib})
1062
1c89237d 1063 AC_CHECK_LIB(dl, dlopen, , )
1064 if test $ac_cv_lib_dl_dlopen = yes; then
bec32dad 1065 LDFLAGS="$LDFLAGS -ldl -Wl,-Bsymbolic"
1c89237d 1066 fi
bec32dad 1067
1c89237d 1068 AC_DEFINE(GSSAPI)
08822d99 1069 AC_DEFINE(MECHGLUE, 1, [Define this if you're building with GSSAPI MechGlue.])
1c89237d 1070 GSSAPI="mechglue"
1071
1c89237d 1072 ]
1073)
1074
1075
5598e598 1076# Check whether the user wants GSI (Globus) support
1077gsi_path="no"
1078AC_ARG_WITH(gsi,
483bcdbd 1079 [ --with-gsi Enable Globus GSI authentication support],
5598e598 1080 [
1081 gsi_path="$withval"
1082 ]
1083)
1084
1085AC_ARG_WITH(globus,
483bcdbd 1086 [ --with-globus Enable Globus GSI authentication support],
5598e598 1087 [
1088 gsi_path="$withval"
1089 ]
1090)
1091
483bcdbd 1092AC_ARG_WITH(globus-static,
1093 [ --with-globus-static Link statically with Globus GSI libraries],
1094 [
1095 gsi_static="-static"
9e6effad 1096 if test "x$gsi_path" = "xno" ; then
6e098d39 1097 gsi_path="$withval"
1098 fi
483bcdbd 1099 ]
1100)
1101
5fb9fc74 1102# Check whether the user has a Globus flavor type
1103globus_flavor_type="no"
1104AC_ARG_WITH(globus-flavor,
483bcdbd 1105 [ --with-globus-flavor=TYPE Specify Globus flavor type (ex: gcc32dbg)],
5fb9fc74 1106 [
1107 globus_flavor_type="$withval"
9e6effad 1108 if test "x$gsi_path" = "xno" ; then
e78b0188 1109 gsi_path="yes"
1110 fi
5fb9fc74 1111 ]
1112)
1113
5598e598 1114if test "x$gsi_path" != "xno" ; then
1115 # Globus GSSAPI configuration
22798398 1116 AC_MSG_CHECKING(for Globus GSI)
08822d99 1117 AC_DEFINE(GSI, 1, [Define if you want GSI/Globus authentication support.])
5598e598 1118
1c89237d 1119 if test "$GSSAPI" -a "$GSSAPI" != "mechglue"; then
483bcdbd 1120 AC_MSG_ERROR([Previously configured GSSAPI library conflicts with Globus GSI.])
1c89237d 1121 fi
1122 if test -z "$GSSAPI"; then
1123 AC_DEFINE(GSSAPI)
1124 GSSAPI="GSI"
1125 fi
1126
8b1f0dfd 1127 if test "x$gsi_path" = "xyes" ; then
1128 if test -z "$GLOBUS_LOCATION" ; then
483bcdbd 1129 AC_MSG_ERROR(GLOBUS_LOCATION environment variable must be set.)
8b1f0dfd 1130 else
1131 gsi_path="$GLOBUS_LOCATION"
1132 fi
1133 fi
483bcdbd 1134 GLOBUS_LOCATION="$gsi_path"
1135 export GLOBUS_LOCATION
1136 if test ! -d "$GLOBUS_LOCATION" ; then
1137 AC_MSG_ERROR(Cannot find Globus installation. Set GLOBUS_LOCATION environment variable.)
5598e598 1138 fi
5598e598 1139
22798398 1140 if test "x$globus_flavor_type" = "xno" ; then
1141 AC_MSG_ERROR(--with-globus-flavor=TYPE must be specified)
1142 fi
1143 if test "x$globus_flavor_type" = "xyes" ; then
1144 AC_MSG_ERROR(--with-globus-flavor=TYPE must specify a flavor type)
5598e598 1145 fi
5fb9fc74 1146
22798398 1147 GLOBUS_INCLUDE="${gsi_path}/include/${globus_flavor_type}"
1148 if test ! -d "$GLOBUS_INCLUDE" ; then
1149 AC_MSG_ERROR(Cannot find Globus flavor-specific include directory: ${GLOBUS_INCLUDE})
1150 fi
1151 GSI_CPPFLAGS="-I${GLOBUS_INCLUDE}"
bed23354 1152
1153 if test -x ${gsi_path}/bin/globus-makefile-header ; then
483bcdbd 1154 GSI_LIBS=`${gsi_path}/bin/globus-makefile-header --flavor=${globus_flavor_type} ${gsi_static} globus_gss_assist | perl -n -e 'if (/GLOBUS_PKG_LIBS = (.*)/){print $1;}'`
bed23354 1155 elif test -x ${gsi_path}/sbin/globus-makefile-header ; then
483bcdbd 1156 GSI_LIBS=`${gsi_path}/sbin/globus-makefile-header --flavor=${globus_flavor_type} ${gsi_static} globus_gss_assist | perl -n -e 'if (/GLOBUS_PKG_LIBS = (.*)/){print $1;}'`
5fb9fc74 1157 else
bed23354 1158 AC_MSG_ERROR(Cannot find globus-makefile-header: Globus installation is incomplete)
22798398 1159 fi
1dca09f1 1160 if test -n "${need_dash_r}"; then
1161 GSI_LDFLAGS="-L${gsi_path}/lib -R{gsi_path}/lib"
1162 else
1163 GSI_LDFLAGS="-L${gsi_path}/lib"
1164 fi
22798398 1165 if test -z "$GSI_LIBS" ; then
bed23354 1166 AC_MSG_ERROR(globus-makefile-header failed)
5fb9fc74 1167 fi
5598e598 1168
540d72c3 1169 AC_DEFINE(HAVE_GSSAPI_H)
1170
5598e598 1171 LIBS="$LIBS $GSI_LIBS"
1172 LDFLAGS="$LDFLAGS $GSI_LDFLAGS"
1c89237d 1173 CPPFLAGS="$CPPFLAGS $GSI_CPPFLAGS"
22798398 1174
1175 # test that we got the libraries OK
1176 AC_TRY_LINK(
1177 [],
1178 [],
1179 [
1180 AC_MSG_RESULT(yes)
1181 ],
1182 [
1183 AC_MSG_ERROR(link with Globus libraries failed)
1184 ]
1185 )
fd34c71f 1186 AC_CHECK_FUNCS(globus_gss_assist_map_and_authorize)
1ca858e9 1187 INSTALL_GSISSH="yes"
1188else
1189 INSTALL_GSISSH=""
5598e598 1190fi
1ca858e9 1191AC_SUBST(INSTALL_GSISSH)
1192# End Globus/GSI section
5598e598 1193
7e82606e 1194AC_MSG_CHECKING([for /proc/pid/fd directory])
1195if test -d "/proc/$$/fd" ; then
08822d99 1196 AC_DEFINE(HAVE_PROC_PID, 1, [Define if you have /proc/$pid/fd])
7e82606e 1197 AC_MSG_RESULT(yes)
1198else
1199 AC_MSG_RESULT(no)
1200fi
1201
3c0ef626 1202# Check whether user wants S/Key support
540d72c3 1203SKEY_MSG="no"
3c0ef626 1204AC_ARG_WITH(skey,
dfddba3d 1205 [ --with-skey[[=PATH]] Enable S/Key support (optionally in PATH)],
3c0ef626 1206 [
1207 if test "x$withval" != "xno" ; then
1208
1209 if test "x$withval" != "xyes" ; then
1210 CPPFLAGS="$CPPFLAGS -I${withval}/include"
1211 LDFLAGS="$LDFLAGS -L${withval}/lib"
1212 fi
1213
08822d99 1214 AC_DEFINE(SKEY, 1, [Define if you want S/Key support])
3c0ef626 1215 LIBS="-lskey $LIBS"
540d72c3 1216 SKEY_MSG="yes"
8b32eddc 1217
e9702f7d 1218 AC_MSG_CHECKING([for s/key support])
08822d99 1219 AC_LINK_IFELSE(
1220 [AC_LANG_SOURCE([[
e9702f7d 1221#include <stdio.h>
1222#include <skey.h>
d03f4262 1223int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
08822d99 1224 ]])],
e9702f7d 1225 [AC_MSG_RESULT(yes)],
3c0ef626 1226 [
e9702f7d 1227 AC_MSG_RESULT(no)
3c0ef626 1228 AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
1229 ])
12a403af 1230 AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
1231 AC_TRY_COMPILE(
1232 [#include <stdio.h>
1233 #include <skey.h>],
1234 [(void)skeychallenge(NULL,"name","",0);],
1235 [AC_MSG_RESULT(yes)
08822d99 1236 AC_DEFINE(SKEYCHALLENGE_4ARG, 1,
1237 [Define if your skeychallenge()
1238 function takes 4 arguments (NetBSD)])],
12a403af 1239 [AC_MSG_RESULT(no)]
1240 )
3c0ef626 1241 fi
1242 ]
1243)
1244
1245# Check whether user wants TCP wrappers support
1246TCPW_MSG="no"
1247AC_ARG_WITH(tcp-wrappers,
dfddba3d 1248 [ --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
3c0ef626 1249 [
1250 if test "x$withval" != "xno" ; then
1251 saved_LIBS="$LIBS"
1252 saved_LDFLAGS="$LDFLAGS"
1253 saved_CPPFLAGS="$CPPFLAGS"
8b32eddc 1254 if test -n "${withval}" && \
1255 test "x${withval}" != "xyes"; then
3c0ef626 1256 if test -d "${withval}/lib"; then
1257 if test -n "${need_dash_r}"; then
1258 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1259 else
1260 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1261 fi
1262 else
1263 if test -n "${need_dash_r}"; then
1264 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1265 else
1266 LDFLAGS="-L${withval} ${LDFLAGS}"
1267 fi
1268 fi
1269 if test -d "${withval}/include"; then
1270 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1271 else
1272 CPPFLAGS="-I${withval} ${CPPFLAGS}"
1273 fi
1274 fi
e9702f7d 1275 LIBWRAP="-lwrap"
1276 LIBS="$LIBWRAP $LIBS"
3c0ef626 1277 AC_MSG_CHECKING(for libwrap)
1278 AC_TRY_LINK(
1279 [
12a403af 1280#include <sys/types.h>
1281#include <sys/socket.h>
1282#include <netinet/in.h>
3c0ef626 1283#include <tcpd.h>
1284 int deny_severity = 0, allow_severity = 0;
1285 ],
1286 [hosts_access(0);],
1287 [
1288 AC_MSG_RESULT(yes)
08822d99 1289 AC_DEFINE(LIBWRAP, 1,
1290 [Define if you want
1291 TCP Wrappers support])
e9702f7d 1292 AC_SUBST(LIBWRAP)
3c0ef626 1293 TCPW_MSG="yes"
1294 ],
1295 [
1296 AC_MSG_ERROR([*** libwrap missing])
1297 ]
1298 )
e9702f7d 1299 LIBS="$saved_LIBS"
3c0ef626 1300 fi
1301 ]
1302)
1303
dfddba3d 1304# Check whether user wants libedit support
1305LIBEDIT_MSG="no"
1306AC_ARG_WITH(libedit,
1307 [ --with-libedit[[=PATH]] Enable libedit support for sftp],
1308 [ if test "x$withval" != "xno" ; then
8b32eddc 1309 if test "x$withval" != "xyes"; then
08822d99 1310 CPPFLAGS="$CPPFLAGS -I${withval}/include"
1311 if test -n "${need_dash_r}"; then
1312 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1313 else
1314 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1315 fi
8b32eddc 1316 fi
dfddba3d 1317 AC_CHECK_LIB(edit, el_init,
08822d99 1318 [ AC_DEFINE(USE_LIBEDIT, 1, [Use libedit for sftp])
dfddba3d 1319 LIBEDIT="-ledit -lcurses"
1320 LIBEDIT_MSG="yes"
1321 AC_SUBST(LIBEDIT)
1322 ],
8b32eddc 1323 [ AC_MSG_ERROR(libedit not found) ],
1324 [ -lcurses ]
dfddba3d 1325 )
2ce0bfe4 1326 AC_MSG_CHECKING(if libedit version is compatible)
1327 AC_COMPILE_IFELSE(
1328 [AC_LANG_SOURCE([[
1329#include <histedit.h>
1330int main(void)
1331{
1332 int i = H_SETSIZE;
1333 el_init("", NULL, NULL, NULL);
1334 exit(0);
1335}
1336 ]])],
1337 [ AC_MSG_RESULT(yes) ],
1338 [ AC_MSG_RESULT(no)
1339 AC_MSG_ERROR(libedit version is not compatible) ]
1340 )
dfddba3d 1341 fi ]
1342)
1343
1344AUDIT_MODULE=none
1345AC_ARG_WITH(audit,
1346 [ --with-audit=module Enable EXPERIMENTAL audit support (modules=debug,bsm)],
1347 [
1348 AC_MSG_CHECKING(for supported audit module)
1349 case "$withval" in
1350 bsm)
1351 AC_MSG_RESULT(bsm)
1352 AUDIT_MODULE=bsm
1353 dnl Checks for headers, libs and functions
1354 AC_CHECK_HEADERS(bsm/audit.h, [],
30460aeb 1355 [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)],
1356 [
1357#ifdef HAVE_TIME_H
1358# include <time.h>
1359#endif
1360 ]
1361)
dfddba3d 1362 AC_CHECK_LIB(bsm, getaudit, [],
1363 [AC_MSG_ERROR(BSM enabled and required library not found)])
1364 AC_CHECK_FUNCS(getaudit, [],
1365 [AC_MSG_ERROR(BSM enabled and required function not found)])
1366 # These are optional
1367 AC_CHECK_FUNCS(getaudit_addr)
08822d99 1368 AC_DEFINE(USE_BSM_AUDIT, 1, [Use BSM audit module])
dfddba3d 1369 ;;
1370 debug)
1371 AUDIT_MODULE=debug
1372 AC_MSG_RESULT(debug)
08822d99 1373 AC_DEFINE(SSH_AUDIT_EVENTS, 1, Use audit debugging module)
dfddba3d 1374 ;;
2ce0bfe4 1375 no)
1376 AC_MSG_RESULT(no)
1377 ;;
dfddba3d 1378 *)
1379 AC_MSG_ERROR([Unknown audit module $withval])
1380 ;;
1381 esac ]
1382)
1383
bfe49944 1384dnl Checks for library functions. Please keep in alphabetical order
2ce0bfe4 1385AC_CHECK_FUNCS( \
1386 arc4random \
08822d99 1387 asprintf \
2ce0bfe4 1388 b64_ntop \
1389 __b64_ntop \
1390 b64_pton \
1391 __b64_pton \
1392 bcopy \
1393 bindresvport_sa \
1394 clock \
1395 closefrom \
1396 dirfd \
1397 fchmod \
1398 fchown \
1399 freeaddrinfo \
1400 futimes \
1401 getaddrinfo \
1402 getcwd \
1403 getgrouplist \
1404 getnameinfo \
1405 getopt \
1406 getpeereid \
1407 _getpty \
1408 getrlimit \
1409 getttyent \
1410 glob \
1411 inet_aton \
1412 inet_ntoa \
1413 inet_ntop \
1414 innetgr \
1415 login_getcapbool \
1416 md5_crypt \
1417 memmove \
1418 mkdtemp \
1419 mmap \
1420 ngetaddrinfo \
1421 nsleep \
1422 ogetaddrinfo \
1423 openlog_r \
1424 openpty \
1425 prctl \
1426 pstat \
1427 readpassphrase \
1428 realpath \
1429 recvmsg \
1430 rresvport_af \
1431 sendmsg \
1432 setdtablesize \
1433 setegid \
1434 setenv \
1435 seteuid \
1436 setgroups \
1437 setlogin \
1438 setpcred \
1439 setproctitle \
1440 setregid \
1441 setreuid \
1442 setrlimit \
1443 setsid \
1444 setvbuf \
1445 sigaction \
1446 sigvec \
1447 snprintf \
1448 socketpair \
1449 strdup \
1450 strerror \
1451 strlcat \
1452 strlcpy \
1453 strmode \
1454 strnvis \
1455 strtonum \
1456 strtoll \
1457 strtoul \
1458 sysconf \
1459 tcgetpgrp \
1460 truncate \
1461 unsetenv \
1462 updwtmpx \
08822d99 1463 vasprintf \
2ce0bfe4 1464 vhangup \
1465 vsnprintf \
1466 waitpid \
bfe49944 1467)
1468
29d88157 1469# IRIX has a const char return value for gai_strerror()
1470AC_CHECK_FUNCS(gai_strerror,[
1471 AC_DEFINE(HAVE_GAI_STRERROR)
1472 AC_TRY_COMPILE([
1473#include <sys/types.h>
1474#include <sys/socket.h>
1475#include <netdb.h>
1476
1477const char *gai_strerror(int);],[
1478char *str;
1479
1480str = gai_strerror(0);],[
1481 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
1482 [Define if gai_strerror() returns const char *])])])
1483
08822d99 1484AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP, 1,
1485 [Some systems put nanosleep outside of libc]))
bfe49944 1486
7cac2b65 1487dnl Make sure prototypes are defined for these before using them.
7cac2b65 1488AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
2ce0bfe4 1489AC_CHECK_DECL(strsep,
1490 [AC_CHECK_FUNCS(strsep)],
1491 [],
1492 [
1493#ifdef HAVE_STRING_H
1494# include <string.h>
1495#endif
1496 ])
3c0ef626 1497
7cac2b65 1498dnl tcsendbreak might be a macro
1499AC_CHECK_DECL(tcsendbreak,
1500 [AC_DEFINE(HAVE_TCSENDBREAK)],
540d72c3 1501 [AC_CHECK_FUNCS(tcsendbreak)],
7cac2b65 1502 [#include <termios.h>]
1503)
3c0ef626 1504
7e82606e 1505AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
1506
30460aeb 1507AC_CHECK_DECLS(SHUT_RD, , ,
1508 [
1509#include <sys/types.h>
1510#include <sys/socket.h>
1511 ])
1512
1513AC_CHECK_DECLS(O_NONBLOCK, , ,
1514 [
1515#include <sys/types.h>
1516#ifdef HAVE_SYS_STAT_H
1517# include <sys/stat.h>
1518#endif
1519#ifdef HAVE_FCNTL_H
1520# include <fcntl.h>
1521#endif
1522 ])
1523
1524AC_CHECK_DECLS(writev, , , [
1525#include <sys/types.h>
1526#include <sys/uio.h>
1527#include <unistd.h>
1528 ])
1529
540d72c3 1530AC_CHECK_FUNCS(setresuid, [
1531 dnl Some platorms have setresuid that isn't implemented, test for this
1532 AC_MSG_CHECKING(if setresuid seems to work)
dfddba3d 1533 AC_RUN_IFELSE(
1534 [AC_LANG_SOURCE([[
540d72c3 1535#include <stdlib.h>
1536#include <errno.h>
1537int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
dfddba3d 1538 ]])],
540d72c3 1539 [AC_MSG_RESULT(yes)],
08822d99 1540 [AC_DEFINE(BROKEN_SETRESUID, 1,
1541 [Define if your setresuid() is broken])
dfddba3d 1542 AC_MSG_RESULT(not implemented)],
1543 [AC_MSG_WARN([cross compiling: not checking setresuid])]
540d72c3 1544 )
1545])
1546
1547AC_CHECK_FUNCS(setresgid, [
1548 dnl Some platorms have setresgid that isn't implemented, test for this
1549 AC_MSG_CHECKING(if setresgid seems to work)
dfddba3d 1550 AC_RUN_IFELSE(
1551 [AC_LANG_SOURCE([[
540d72c3 1552#include <stdlib.h>
1553#include <errno.h>
1554int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
dfddba3d 1555 ]])],
540d72c3 1556 [AC_MSG_RESULT(yes)],
08822d99 1557 [AC_DEFINE(BROKEN_SETRESGID, 1,
1558 [Define if your setresgid() is broken])
dfddba3d 1559 AC_MSG_RESULT(not implemented)],
1560 [AC_MSG_WARN([cross compiling: not checking setresuid])]
540d72c3 1561 )
1562])
1563
3c0ef626 1564dnl Checks for time functions
1565AC_CHECK_FUNCS(gettimeofday time)
1566dnl Checks for utmp functions
1567AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1568AC_CHECK_FUNCS(utmpname)
1569dnl Checks for utmpx functions
1570AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1571AC_CHECK_FUNCS(setutxent utmpxname)
1572
540d72c3 1573AC_CHECK_FUNC(daemon,
08822d99 1574 [AC_DEFINE(HAVE_DAEMON, 1, [Define if your libraries define daemon()])],
1575 [AC_CHECK_LIB(bsd, daemon,
1576 [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
3c0ef626 1577)
1578
540d72c3 1579AC_CHECK_FUNC(getpagesize,
08822d99 1580 [AC_DEFINE(HAVE_GETPAGESIZE, 1,
1581 [Define if your libraries define getpagesize()])],
1582 [AC_CHECK_LIB(ucb, getpagesize,
1583 [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
3c0ef626 1584)
1585
1586# Check for broken snprintf
1587if test "x$ac_cv_func_snprintf" = "xyes" ; then
1588 AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
dfddba3d 1589 AC_RUN_IFELSE(
1590 [AC_LANG_SOURCE([[
3c0ef626 1591#include <stdio.h>
d03f4262 1592int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
dfddba3d 1593 ]])],
540d72c3 1594 [AC_MSG_RESULT(yes)],
3c0ef626 1595 [
1596 AC_MSG_RESULT(no)
08822d99 1597 AC_DEFINE(BROKEN_SNPRINTF, 1,
1598 [Define if your snprintf is busted])
3c0ef626 1599 AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
dfddba3d 1600 ],
1601 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
3c0ef626 1602 )
1603fi
1604
08822d99 1605# If we don't have a working asprintf, then we strongly depend on vsnprintf
1606# returning the right thing on overflow: the number of characters it tried to
1607# create (as per SUSv3)
1608if test "x$ac_cv_func_asprintf" != "xyes" && \
1609 test "x$ac_cv_func_vsnprintf" = "xyes" ; then
1610 AC_MSG_CHECKING([whether vsnprintf returns correct values on overflow])
1611 AC_RUN_IFELSE(
1612 [AC_LANG_SOURCE([[
1613#include <sys/types.h>
1614#include <stdio.h>
1615#include <stdarg.h>
1616
1617int x_snprintf(char *str,size_t count,const char *fmt,...)
1618{
1619 size_t ret; va_list ap;
1620 va_start(ap, fmt); ret = vsnprintf(str, count, fmt, ap); va_end(ap);
1621 return ret;
1622}
1623int main(void)
1624{
1625 char x[1];
1626 exit(x_snprintf(x, 1, "%s %d", "hello", 12345) == 11 ? 0 : 1);
1627} ]])],
1628 [AC_MSG_RESULT(yes)],
1629 [
1630 AC_MSG_RESULT(no)
1631 AC_DEFINE(BROKEN_SNPRINTF, 1,
1632 [Define if your snprintf is busted])
1633 AC_MSG_WARN([****** Your vsnprintf() function is broken, complain to your vendor])
1634 ],
1635 [ AC_MSG_WARN([cross compiling: Assuming working vsnprintf()]) ]
1636 )
1637fi
1638
1639# On systems where [v]snprintf is broken, but is declared in stdio,
1640# check that the fmt argument is const char * or just char *.
1641# This is only useful for when BROKEN_SNPRINTF
1642AC_MSG_CHECKING([whether snprintf can declare const char *fmt])
1643AC_COMPILE_IFELSE([AC_LANG_SOURCE([[#include <stdio.h>
1644 int snprintf(char *a, size_t b, const char *c, ...) { return 0; }
1645 int main(void) { snprintf(0, 0, 0); }
1646 ]])],
1647 [AC_MSG_RESULT(yes)
1648 AC_DEFINE(SNPRINTF_CONST, [const],
1649 [Define as const if snprintf() can declare const char *fmt])],
1650 [AC_MSG_RESULT(no)
1651 AC_DEFINE(SNPRINTF_CONST, [/* not const */])])
1652
7e82606e 1653# Check for missing getpeereid (or equiv) support
1654NO_PEERCHECK=""
1655if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1656 AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1657 AC_TRY_COMPILE(
1658 [#include <sys/types.h>
1659 #include <sys/socket.h>],
1660 [int i = SO_PEERCRED;],
8b32eddc 1661 [ AC_MSG_RESULT(yes)
08822d99 1662 AC_DEFINE(HAVE_SO_PEERCRED, 1, [Have PEERCRED socket option])
8b32eddc 1663 ],
7e82606e 1664 [AC_MSG_RESULT(no)
1665 NO_PEERCHECK=1]
1666 )
1667fi
1668
bfe49944 1669dnl see whether mkstemp() requires XXXXXX
1670if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1671AC_MSG_CHECKING([for (overly) strict mkstemp])
08822d99 1672AC_RUN_IFELSE(
1673 [AC_LANG_SOURCE([[
bfe49944 1674#include <stdlib.h>
1675main() { char template[]="conftest.mkstemp-test";
1676if (mkstemp(template) == -1)
1677 exit(1);
1678unlink(template); exit(0);
1679}
08822d99 1680 ]])],
bfe49944 1681 [
1682 AC_MSG_RESULT(no)
1683 ],
540d72c3 1684 [
bfe49944 1685 AC_MSG_RESULT(yes)
08822d99 1686 AC_DEFINE(HAVE_STRICT_MKSTEMP, 1, [Silly mkstemp()])
bfe49944 1687 ],
1688 [
1689 AC_MSG_RESULT(yes)
1690 AC_DEFINE(HAVE_STRICT_MKSTEMP)
540d72c3 1691 ]
bfe49944 1692)
1693fi
1694
7cac2b65 1695dnl make sure that openpty does not reacquire controlling terminal
1696if test ! -z "$check_for_openpty_ctty_bug"; then
1697 AC_MSG_CHECKING(if openpty correctly handles controlling tty)
08822d99 1698 AC_RUN_IFELSE(
1699 [AC_LANG_SOURCE([[
7cac2b65 1700#include <stdio.h>
1701#include <sys/fcntl.h>
1702#include <sys/types.h>
1703#include <sys/wait.h>
1704
1705int
1706main()
1707{
1708 pid_t pid;
1709 int fd, ptyfd, ttyfd, status;
1710
1711 pid = fork();
1712 if (pid < 0) { /* failed */
1713 exit(1);
1714 } else if (pid > 0) { /* parent */
1715 waitpid(pid, &status, 0);
540d72c3 1716 if (WIFEXITED(status))
7cac2b65 1717 exit(WEXITSTATUS(status));
1718 else
1719 exit(2);
1720 } else { /* child */
1721 close(0); close(1); close(2);
1722 setsid();
1723 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1724 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1725 if (fd >= 0)
1726 exit(3); /* Acquired ctty: broken */
1727 else
1728 exit(0); /* Did not acquire ctty: OK */
1729 }
1730}
08822d99 1731 ]])],
7cac2b65 1732 [
1733 AC_MSG_RESULT(yes)
1734 ],
1735 [
1736 AC_MSG_RESULT(no)
1737 AC_DEFINE(SSHD_ACQUIRES_CTTY)
08822d99 1738 ],
1739 [
1740 AC_MSG_RESULT(cross-compiling, assuming yes)
7cac2b65 1741 ]
1742 )
1743fi
1744
8b32eddc 1745if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1746 test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
12a403af 1747 AC_MSG_CHECKING(if getaddrinfo seems to work)
08822d99 1748 AC_RUN_IFELSE(
1749 [AC_LANG_SOURCE([[
12a403af 1750#include <stdio.h>
1751#include <sys/socket.h>
1752#include <netdb.h>
1753#include <errno.h>
1754#include <netinet/in.h>
1755
1756#define TEST_PORT "2222"
1757
1758int
1759main(void)
1760{
1761 int err, sock;
1762 struct addrinfo *gai_ai, *ai, hints;
1763 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1764
1765 memset(&hints, 0, sizeof(hints));
1766 hints.ai_family = PF_UNSPEC;
1767 hints.ai_socktype = SOCK_STREAM;
1768 hints.ai_flags = AI_PASSIVE;
1769
1770 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1771 if (err != 0) {
1772 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1773 exit(1);
1774 }
1775
1776 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1777 if (ai->ai_family != AF_INET6)
1778 continue;
1779
1780 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1781 sizeof(ntop), strport, sizeof(strport),
1782 NI_NUMERICHOST|NI_NUMERICSERV);
1783
1784 if (err != 0) {
1785 if (err == EAI_SYSTEM)
1786 perror("getnameinfo EAI_SYSTEM");
1787 else
1788 fprintf(stderr, "getnameinfo failed: %s\n",
1789 gai_strerror(err));
1790 exit(2);
1791 }
1792
1793 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1794 if (sock < 0)
1795 perror("socket");
1796 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1797 if (errno == EBADF)
1798 exit(3);
1799 }
1800 }
1801 exit(0);
1802}
08822d99 1803 ]])],
12a403af 1804 [
1805 AC_MSG_RESULT(yes)
1806 ],
1807 [
1808 AC_MSG_RESULT(no)
1809 AC_DEFINE(BROKEN_GETADDRINFO)
08822d99 1810 ],
1811 [
1812 AC_MSG_RESULT(cross-compiling, assuming yes)
12a403af 1813 ]
1814 )
1815fi
1816
8b32eddc 1817if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1818 test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
dfddba3d 1819 AC_MSG_CHECKING(if getaddrinfo seems to work)
08822d99 1820 AC_RUN_IFELSE(
1821 [AC_LANG_SOURCE([[
dfddba3d 1822#include <stdio.h>
1823#include <sys/socket.h>
1824#include <netdb.h>
1825#include <errno.h>
1826#include <netinet/in.h>
1827
1828#define TEST_PORT "2222"
1829
1830int
1831main(void)
1832{
1833 int err, sock;
1834 struct addrinfo *gai_ai, *ai, hints;
1835 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1836
1837 memset(&hints, 0, sizeof(hints));
1838 hints.ai_family = PF_UNSPEC;
1839 hints.ai_socktype = SOCK_STREAM;
1840 hints.ai_flags = AI_PASSIVE;
1841
1842 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1843 if (err != 0) {
1844 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1845 exit(1);
1846 }
1847
1848 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1849 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1850 continue;
1851
1852 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1853 sizeof(ntop), strport, sizeof(strport),
1854 NI_NUMERICHOST|NI_NUMERICSERV);
1855
1856 if (ai->ai_family == AF_INET && err != 0) {
1857 perror("getnameinfo");
1858 exit(2);
1859 }
1860 }
1861 exit(0);
1862}
08822d99 1863 ]])],
dfddba3d 1864 [
1865 AC_MSG_RESULT(yes)
08822d99 1866 AC_DEFINE(AIX_GETNAMEINFO_HACK, 1,
1867 [Define if you have a getaddrinfo that fails
1868 for the all-zeros IPv6 address])
dfddba3d 1869 ],
1870 [
1871 AC_MSG_RESULT(no)
1872 AC_DEFINE(BROKEN_GETADDRINFO)
08822d99 1873 ],
30460aeb 1874 [
08822d99 1875 AC_MSG_RESULT(cross-compiling, assuming no)
dfddba3d 1876 ]
1877 )
1878fi
1879
1880if test "x$check_for_conflicting_getspnam" = "x1"; then
1881 AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1882 AC_COMPILE_IFELSE(
1883 [
1884#include <shadow.h>
1885int main(void) {exit(0);}
1886 ],
1887 [
1888 AC_MSG_RESULT(no)
1889 ],
1890 [
1891 AC_MSG_RESULT(yes)
1892 AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1893 [Conflicting defs for getspnam])
1894 ]
1895 )
1896fi
1897
3c0ef626 1898AC_FUNC_GETPGRP
1899
350391c5 1900# Search for OpenSSL
1901saved_CPPFLAGS="$CPPFLAGS"
1902saved_LDFLAGS="$LDFLAGS"
3c0ef626 1903AC_ARG_WITH(ssl-dir,
1904 [ --with-ssl-dir=PATH Specify path to OpenSSL installation ],
1905 [
1906 if test "x$withval" != "xno" ; then
dfddba3d 1907 case "$withval" in
1908 # Relative paths
1909 ./*|../*) withval="`pwd`/$withval"
1910 esac
350391c5 1911 if test -d "$withval/lib"; then
1912 if test -n "${need_dash_r}"; then
1913 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1914 else
1915 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
3c0ef626 1916 fi
1917 else
350391c5 1918 if test -n "${need_dash_r}"; then
1919 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1920 else
1921 LDFLAGS="-L${withval} ${LDFLAGS}"
3c0ef626 1922 fi
1923 fi
350391c5 1924 if test -d "$withval/include"; then
1925 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
3c0ef626 1926 else
350391c5 1927 CPPFLAGS="-I${withval} ${CPPFLAGS}"
3c0ef626 1928 fi
1929 fi
350391c5 1930 ]
1931)
22798398 1932if test -z "$GSI_LIBS" ; then
540d72c3 1933LIBS="-lcrypto $LIBS"
22798398 1934fi
08822d99 1935AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL, 1,
1936 [Define if your ssl headers are included
1937 with #include <openssl/header.h>]),
3c0ef626 1938 [
350391c5 1939 dnl Check default openssl install dir
1940 if test -n "${need_dash_r}"; then
1941 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
3c0ef626 1942 else
350391c5 1943 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
3c0ef626 1944 fi
350391c5 1945 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1946 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1947 [
1948 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1949 ]
1950 )
1951 ]
1952)
1953
d03f4262 1954# Determine OpenSSL header version
1955AC_MSG_CHECKING([OpenSSL header version])
dfddba3d 1956AC_RUN_IFELSE(
1957 [AC_LANG_SOURCE([[
d03f4262 1958#include <stdio.h>
1959#include <string.h>
1960#include <openssl/opensslv.h>
1961#define DATA "conftest.sslincver"
1962int main(void) {
540d72c3 1963 FILE *fd;
1964 int rc;
d03f4262 1965
540d72c3 1966 fd = fopen(DATA,"w");
1967 if(fd == NULL)
1968 exit(1);
d03f4262 1969
1970 if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1971 exit(1);
1972
1973 exit(0);
1974}
dfddba3d 1975 ]])],
d03f4262 1976 [
1977 ssl_header_ver=`cat conftest.sslincver`
1978 AC_MSG_RESULT($ssl_header_ver)
1979 ],
1980 [
1981 AC_MSG_RESULT(not found)
1982 AC_MSG_ERROR(OpenSSL version header not found.)
dfddba3d 1983 ],
1984 [
1985 AC_MSG_WARN([cross compiling: not checking])
d03f4262 1986 ]
1987)
1988
1989# Determine OpenSSL library version
1990AC_MSG_CHECKING([OpenSSL library version])
dfddba3d 1991AC_RUN_IFELSE(
1992 [AC_LANG_SOURCE([[
d03f4262 1993#include <stdio.h>
1994#include <string.h>
1995#include <openssl/opensslv.h>
1996#include <openssl/crypto.h>
1997#define DATA "conftest.ssllibver"
1998int main(void) {
540d72c3 1999 FILE *fd;
2000 int rc;
d03f4262 2001
540d72c3 2002 fd = fopen(DATA,"w");
2003 if(fd == NULL)
2004 exit(1);
d03f4262 2005
2006 if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
2007 exit(1);
2008
2009 exit(0);
2010}
dfddba3d 2011 ]])],
d03f4262 2012 [
2013 ssl_library_ver=`cat conftest.ssllibver`
2014 AC_MSG_RESULT($ssl_library_ver)
2015 ],
2016 [
2017 AC_MSG_RESULT(not found)
2018 AC_MSG_ERROR(OpenSSL library not found.)
dfddba3d 2019 ],
2020 [
2021 AC_MSG_WARN([cross compiling: not checking])
d03f4262 2022 ]
2023)
3c0ef626 2024
0b90ac93 2025AC_ARG_WITH(openssl-header-check,
2026 [ --without-openssl-header-check Disable OpenSSL version consistency check],
2027 [ if test "x$withval" = "xno" ; then
2028 openssl_check_nonfatal=1
2029 fi
2030 ]
2031)
2032
e9702f7d 2033# Sanity check OpenSSL headers
2034AC_MSG_CHECKING([whether OpenSSL's headers match the library])
dfddba3d 2035AC_RUN_IFELSE(
2036 [AC_LANG_SOURCE([[
e9702f7d 2037#include <string.h>
2038#include <openssl/opensslv.h>
d03f4262 2039int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
dfddba3d 2040 ]])],
e9702f7d 2041 [
2042 AC_MSG_RESULT(yes)
2043 ],
2044 [
2045 AC_MSG_RESULT(no)
0b90ac93 2046 if test "x$openssl_check_nonfatal" = "x"; then
2047 AC_MSG_ERROR([Your OpenSSL headers do not match your
2048library. Check config.log for details.
2049If you are sure your installation is consistent, you can disable the check
2050by running "./configure --without-openssl-header-check".
2051Also see contrib/findssl.sh for help identifying header/library mismatches.
2052])
2053 else
2054 AC_MSG_WARN([Your OpenSSL headers do not match your
2055library. Check config.log for details.
7cac2b65 2056Also see contrib/findssl.sh for help identifying header/library mismatches.])
0b90ac93 2057 fi
dfddba3d 2058 ],
2059 [
2060 AC_MSG_WARN([cross compiling: not checking])
e9702f7d 2061 ]
2062)
2063
30460aeb 2064AC_MSG_CHECKING([if programs using OpenSSL functions will link])
2065AC_LINK_IFELSE(
2066 [AC_LANG_SOURCE([[
2067#include <openssl/evp.h>
2068int main(void) { SSLeay_add_all_algorithms(); }
2069 ]])],
2070 [
2071 AC_MSG_RESULT(yes)
2072 ],
2073 [
2074 AC_MSG_RESULT(no)
2075 saved_LIBS="$LIBS"
2076 LIBS="$LIBS -ldl"
2077 AC_MSG_CHECKING([if programs using OpenSSL need -ldl])
2078 AC_LINK_IFELSE(
2079 [AC_LANG_SOURCE([[
2080#include <openssl/evp.h>
2081int main(void) { SSLeay_add_all_algorithms(); }
2082 ]])],
2083 [
2084 AC_MSG_RESULT(yes)
2085 ],
2086 [
2087 AC_MSG_RESULT(no)
2088 LIBS="$saved_LIBS"
2089 ]
2090 )
2091 ]
2092)
2093
2094AC_ARG_WITH(ssl-engine,
2095 [ --with-ssl-engine Enable OpenSSL (hardware) ENGINE support ],
2096 [ if test "x$withval" != "xno" ; then
2097 AC_MSG_CHECKING(for OpenSSL ENGINE support)
2098 AC_TRY_COMPILE(
2099 [ #include <openssl/engine.h>],
2100 [
240debe0 2101ENGINE_load_builtin_engines();ENGINE_register_all_complete();
30460aeb 2102 ],
2103 [ AC_MSG_RESULT(yes)
2104 AC_DEFINE(USE_OPENSSL_ENGINE, 1,
2105 [Enable OpenSSL engine support])
2106 ],
2107 [ AC_MSG_ERROR(OpenSSL ENGINE support not found)]
2108 )
2109 fi ]
2110)
2111
08822d99 2112# Check for OpenSSL without EVP_aes_{192,256}_cbc
2113AC_MSG_CHECKING([whether OpenSSL has crippled AES support])
30460aeb 2114AC_LINK_IFELSE(
08822d99 2115 [AC_LANG_SOURCE([[
2116#include <string.h>
2117#include <openssl/evp.h>
4b6dae8f 2118int main(void) { exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);}
08822d99 2119 ]])],
2120 [
2121 AC_MSG_RESULT(no)
2122 ],
2123 [
2124 AC_MSG_RESULT(yes)
2125 AC_DEFINE(OPENSSL_LOBOTOMISED_AES, 1,
2126 [libcrypto is missing AES 192 and 256 bit functions])
2127 ]
2128)
2129
540d72c3 2130# Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
2131# because the system crypt() is more featureful.
2132if test "x$check_for_libcrypt_before" = "x1"; then
2133 AC_CHECK_LIB(crypt, crypt)
2134fi
2135
2136# Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
2137# version in OpenSSL.
7cac2b65 2138if test "x$check_for_libcrypt_later" = "x1"; then
3c0ef626 2139 AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
2140fi
2141
30460aeb 2142# Search for SHA256 support in libc and/or OpenSSL
2143AC_CHECK_FUNCS(SHA256_Update EVP_sha256)
2144
2ce0bfe4 2145AC_CHECK_LIB(iaf, ia_openinfo)
e9702f7d 2146
2147### Configure cryptographic random number support
2148
2149# Check wheter OpenSSL seeds itself
2150AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
dfddba3d 2151AC_RUN_IFELSE(
2152 [AC_LANG_SOURCE([[
e9702f7d 2153#include <string.h>
2154#include <openssl/rand.h>
d03f4262 2155int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
dfddba3d 2156 ]])],
e9702f7d 2157 [
2158 OPENSSL_SEEDS_ITSELF=yes
2159 AC_MSG_RESULT(yes)
2160 ],
2161 [
2162 AC_MSG_RESULT(no)
2163 # Default to use of the rand helper if OpenSSL doesn't
2164 # seed itself
2165 USE_RAND_HELPER=yes
dfddba3d 2166 ],
2167 [
2168 AC_MSG_WARN([cross compiling: assuming yes])
2169 # This is safe, since all recent OpenSSL versions will
8b32eddc 2170 # complain at runtime if not seeded correctly.
dfddba3d 2171 OPENSSL_SEEDS_ITSELF=yes
e9702f7d 2172 ]
2173)
2174
30460aeb 2175# Check for PAM libs
2176PAM_MSG="no"
2177AC_ARG_WITH(pam,
2178 [ --with-pam Enable PAM support ],
2179 [
2180 if test "x$withval" != "xno" ; then
2181 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
2182 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
2183 AC_MSG_ERROR([PAM headers not found])
2184 fi
2185
2186 saved_LIBS="$LIBS"
2187 AC_CHECK_LIB(dl, dlopen, , )
2188 AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
2189 AC_CHECK_FUNCS(pam_getenvlist)
2190 AC_CHECK_FUNCS(pam_putenv)
2191 LIBS="$saved_LIBS"
2192
2193 PAM_MSG="yes"
2194
2195 LIBPAM="-lpam"
2196 AC_DEFINE(USE_PAM, 1,
2197 [Define if you want to enable PAM support])
2198
2199 if test $ac_cv_lib_dl_dlopen = yes; then
2200 case "$LIBS" in
2201 *-ldl*)
2202 # libdl already in LIBS
2203 ;;
2204 *)
2205 LIBPAM="$LIBPAM -ldl"
2206 ;;
2207 esac
2208 fi
2209 AC_SUBST(LIBPAM)
2210 fi
2211 ]
2212)
2213
2214# Check for older PAM
2215if test "x$PAM_MSG" = "xyes" ; then
2216 # Check PAM strerror arguments (old PAM)
2217 AC_MSG_CHECKING([whether pam_strerror takes only one argument])
2218 AC_TRY_COMPILE(
2219 [
2220#include <stdlib.h>
2221#if defined(HAVE_SECURITY_PAM_APPL_H)
2222#include <security/pam_appl.h>
2223#elif defined (HAVE_PAM_PAM_APPL_H)
2224#include <pam/pam_appl.h>
2225#endif
2226 ],
2227 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
2228 [AC_MSG_RESULT(no)],
2229 [
2230 AC_DEFINE(HAVE_OLD_PAM, 1,
2231 [Define if you have an old version of PAM
2232 which takes only one argument to pam_strerror])
2233 AC_MSG_RESULT(yes)
2234 PAM_MSG="yes (old library)"
2235 ]
2236 )
2237fi
e9702f7d 2238
2239# Do we want to force the use of the rand helper?
2240AC_ARG_WITH(rand-helper,
2241 [ --with-rand-helper Use subprocess to gather strong randomness ],
2242 [
2243 if test "x$withval" = "xno" ; then
540d72c3 2244 # Force use of OpenSSL's internal RNG, even if
e9702f7d 2245 # the previous test showed it to be unseeded.
2246 if test -z "$OPENSSL_SEEDS_ITSELF" ; then
2247 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
2248 OPENSSL_SEEDS_ITSELF=yes
2249 USE_RAND_HELPER=""
2250 fi
2251 else
2252 USE_RAND_HELPER=yes
2253 fi
2254 ],
8b32eddc 2255)
e9702f7d 2256
2257# Which randomness source do we use?
8b32eddc 2258if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
e9702f7d 2259 # OpenSSL only
08822d99 2260 AC_DEFINE(OPENSSL_PRNG_ONLY, 1,
2261 [Define if you want OpenSSL's internally seeded PRNG only])
e9702f7d 2262 RAND_MSG="OpenSSL internal ONLY"
2263 INSTALL_SSH_RAND_HELPER=""
2264elif test ! -z "$USE_RAND_HELPER" ; then
2265 # install rand helper
2266 RAND_MSG="ssh-rand-helper"
2267 INSTALL_SSH_RAND_HELPER="yes"
2268fi
2269AC_SUBST(INSTALL_SSH_RAND_HELPER)
2270
2271### Configuration of ssh-rand-helper
2272
2273# PRNGD TCP socket
2274AC_ARG_WITH(prngd-port,
2275 [ --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT],
2276 [
2277 case "$withval" in
2278 no)
2279 withval=""
2280 ;;
2281 [[0-9]]*)
2282 ;;
2283 *)
2284 AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
2285 ;;
2286 esac
2287 if test ! -z "$withval" ; then
2288 PRNGD_PORT="$withval"
08822d99 2289 AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT,
2290 [Port number of PRNGD/EGD random number socket])
e9702f7d 2291 fi
2292 ]
2293)
2294
2295# PRNGD Unix domain socket
2296AC_ARG_WITH(prngd-socket,
2297 [ --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
2298 [
2299 case "$withval" in
2300 yes)
2301 withval="/var/run/egd-pool"
2302 ;;
2303 no)
2304 withval=""
2305 ;;
2306 /*)
2307 ;;
2308 *)
2309 AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
2310 ;;
2311 esac
2312
2313 if test ! -z "$withval" ; then
2314 if test ! -z "$PRNGD_PORT" ; then
2315 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
2316 fi
2317 if test ! -r "$withval" ; then
2318 AC_MSG_WARN(Entropy socket is not readable)
2319 fi
2320 PRNGD_SOCKET="$withval"
08822d99 2321 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET",
2322 [Location of PRNGD/EGD random number socket])
e9702f7d 2323 fi
2324 ],
2325 [
2326 # Check for existing socket only if we don't have a random device already
2327 if test "$USE_RAND_HELPER" = yes ; then
2328 AC_MSG_CHECKING(for PRNGD/EGD socket)
2329 # Insert other locations here
2330 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
2331 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
2332 PRNGD_SOCKET="$sock"
2333 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
2334 break;
2335 fi
2336 done
2337 if test ! -z "$PRNGD_SOCKET" ; then
2338 AC_MSG_RESULT($PRNGD_SOCKET)
2339 else
2340 AC_MSG_RESULT(not found)
2341 fi
2342 fi
2343 ]
2344)
2345
2346# Change default command timeout for hashing entropy source
2347entropy_timeout=200
2348AC_ARG_WITH(entropy-timeout,
2349 [ --with-entropy-timeout Specify entropy gathering command timeout (msec)],
2350 [
8b32eddc 2351 if test -n "$withval" && test "x$withval" != "xno" && \
2352 test "x${withval}" != "xyes"; then
e9702f7d 2353 entropy_timeout=$withval
2354 fi
8b32eddc 2355 ]
e9702f7d 2356)
08822d99 2357AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout,
2358 [Builtin PRNG command timeout])
e9702f7d 2359
276b07a3 2360SSH_PRIVSEP_USER=sshd
350391c5 2361AC_ARG_WITH(privsep-user,
2362 [ --with-privsep-user=user Specify non-privileged user for privilege separation],
2363 [
8b32eddc 2364 if test -n "$withval" && test "x$withval" != "xno" && \
2365 test "x${withval}" != "xyes"; then
276b07a3 2366 SSH_PRIVSEP_USER=$withval
350391c5 2367 fi
8b32eddc 2368 ]
350391c5 2369)
08822d99 2370AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER",
2371 [non-privileged user for privilege separation])
276b07a3 2372AC_SUBST(SSH_PRIVSEP_USER)
350391c5 2373
2374# We do this little dance with the search path to insure
2375# that programs that we select for use by installed programs
2376# (which may be run by the super-user) come from trusted
2377# locations before they come from the user's private area.
2378# This should help avoid accidentally configuring some
2379# random version of a program in someone's personal bin.
2380
2381OPATH=$PATH
2382PATH=/bin:/usr/bin
2383test -h /bin 2> /dev/null && PATH=/usr/bin
2384test -d /sbin && PATH=$PATH:/sbin
2385test -d /usr/sbin && PATH=$PATH:/usr/sbin
2386PATH=$PATH:/etc:$OPATH
2387
540d72c3 2388# These programs are used by the command hashing source to gather entropy
e9702f7d 2389OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
2390OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
2391OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
2392OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
2393OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
2394OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
2395OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
2396OSSH_PATH_ENTROPY_PROG(PROG_W, w)
2397OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
2398OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
2399OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
2400OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
2401OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
2402OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
2403OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
2404OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
350391c5 2405# restore PATH
2406PATH=$OPATH
e9702f7d 2407
2408# Where does ssh-rand-helper get its randomness from?
2409INSTALL_SSH_PRNG_CMDS=""
2410if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
2411 if test ! -z "$PRNGD_PORT" ; then
2412 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
2413 elif test ! -z "$PRNGD_SOCKET" ; then
2414 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
2415 else
2416 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
2417 RAND_HELPER_CMDHASH=yes
2418 INSTALL_SSH_PRNG_CMDS="yes"
2419 fi
2420fi
2421AC_SUBST(INSTALL_SSH_PRNG_CMDS)
2422
2423
3c0ef626 2424# Cheap hack to ensure NEWS-OS libraries are arranged right.
2425if test ! -z "$SONY" ; then
2426 LIBS="$LIBS -liberty";
2427fi
2428
08822d99 2429# Check for long long datatypes
2430AC_CHECK_TYPES([long long, unsigned long long, long double])
2431
2432# Check datatype sizes
3c0ef626 2433AC_CHECK_SIZEOF(char, 1)
2434AC_CHECK_SIZEOF(short int, 2)
2435AC_CHECK_SIZEOF(int, 4)
2436AC_CHECK_SIZEOF(long int, 4)
2437AC_CHECK_SIZEOF(long long int, 8)
2438
350391c5 2439# Sanity check long long for some platforms (AIX)
2440if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
2441 ac_cv_sizeof_long_long_int=0
2442fi
2443
08822d99 2444# compute LLONG_MIN and LLONG_MAX if we don't know them.
2445if test -z "$have_llong_max"; then
2446 AC_MSG_CHECKING([for max value of long long])
2447 AC_RUN_IFELSE(
2448 [AC_LANG_SOURCE([[
2449#include <stdio.h>
2450/* Why is this so damn hard? */
2451#ifdef __GNUC__
2452# undef __GNUC__
2453#endif
2454#define __USE_ISOC99
2455#include <limits.h>
2456#define DATA "conftest.llminmax"
30460aeb 2457#define my_abs(a) ((a) < 0 ? ((a) * -1) : (a))
2458
2459/*
2460 * printf in libc on some platforms (eg old Tru64) does not understand %lld so
2461 * we do this the hard way.
2462 */
2463static int
2464fprint_ll(FILE *f, long long n)
2465{
2466 unsigned int i;
2467 int l[sizeof(long long) * 8];
2468
2469 if (n < 0)
2470 if (fprintf(f, "-") < 0)
2471 return -1;
2472 for (i = 0; n != 0; i++) {
2473 l[i] = my_abs(n % 10);
2474 n /= 10;
2475 }
2476 do {
2477 if (fprintf(f, "%d", l[--i]) < 0)
2478 return -1;
2479 } while (i != 0);
2480 if (fprintf(f, " ") < 0)
2481 return -1;
2482 return 0;
2483}
2484
08822d99 2485int main(void) {
2486 FILE *f;
2487 long long i, llmin, llmax = 0;
2488
2489 if((f = fopen(DATA,"w")) == NULL)
2490 exit(1);
2491
2492#if defined(LLONG_MIN) && defined(LLONG_MAX)
2493 fprintf(stderr, "Using system header for LLONG_MIN and LLONG_MAX\n");
2494 llmin = LLONG_MIN;
2495 llmax = LLONG_MAX;
2496#else
2497 fprintf(stderr, "Calculating LLONG_MIN and LLONG_MAX\n");
2498 /* This will work on one's complement and two's complement */
2499 for (i = 1; i > llmax; i <<= 1, i++)
2500 llmax = i;
2501 llmin = llmax + 1LL; /* wrap */
2502#endif
2503
2504 /* Sanity check */
2505 if (llmin + 1 < llmin || llmin - 1 < llmin || llmax + 1 > llmax
30460aeb 2506 || llmax - 1 > llmax || llmin == llmax || llmin == 0
2507 || llmax == 0 || llmax < LONG_MAX || llmin > LONG_MIN) {
08822d99 2508 fprintf(f, "unknown unknown\n");
2509 exit(2);
2510 }
2511
30460aeb 2512 if (fprint_ll(f, llmin) < 0)
08822d99 2513 exit(3);
30460aeb 2514 if (fprint_ll(f, llmax) < 0)
2515 exit(4);
2516 if (fclose(f) < 0)
2517 exit(5);
08822d99 2518 exit(0);
2519}
2520 ]])],
2521 [
2522 llong_min=`$AWK '{print $1}' conftest.llminmax`
2523 llong_max=`$AWK '{print $2}' conftest.llminmax`
2524
08822d99 2525 AC_MSG_RESULT($llong_max)
2526 AC_DEFINE_UNQUOTED(LLONG_MAX, [${llong_max}LL],
2527 [max value of long long calculated by configure])
2528 AC_MSG_CHECKING([for min value of long long])
2529 AC_MSG_RESULT($llong_min)
2530 AC_DEFINE_UNQUOTED(LLONG_MIN, [${llong_min}LL],
2531 [min value of long long calculated by configure])
2532 ],
2533 [
2534 AC_MSG_RESULT(not found)
2535 ],
2536 [
2537 AC_MSG_WARN([cross compiling: not checking])
2538 ]
2539 )
2540fi
2541
2542
3c0ef626 2543# More checks for data types
2544AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
2545 AC_TRY_COMPILE(
540d72c3 2546 [ #include <sys/types.h> ],
2547 [ u_int a; a = 1;],
3c0ef626 2548 [ ac_cv_have_u_int="yes" ],
2549 [ ac_cv_have_u_int="no" ]
2550 )
2551])
2552if test "x$ac_cv_have_u_int" = "xyes" ; then
08822d99 2553 AC_DEFINE(HAVE_U_INT, 1, [define if you have u_int data type])
3c0ef626 2554 have_u_int=1
2555fi
2556
2557AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
2558 AC_TRY_COMPILE(
540d72c3 2559 [ #include <sys/types.h> ],
2560 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
3c0ef626 2561 [ ac_cv_have_intxx_t="yes" ],
2562 [ ac_cv_have_intxx_t="no" ]
2563 )
2564])
2565if test "x$ac_cv_have_intxx_t" = "xyes" ; then
08822d99 2566 AC_DEFINE(HAVE_INTXX_T, 1, [define if you have intxx_t data type])
3c0ef626 2567 have_intxx_t=1
2568fi
2569
2570if (test -z "$have_intxx_t" && \
540d72c3 2571 test "x$ac_cv_header_stdint_h" = "xyes")
3c0ef626 2572then
2573 AC_MSG_CHECKING([for intXX_t types in stdint.h])
2574 AC_TRY_COMPILE(
540d72c3 2575 [ #include <stdint.h> ],
2576 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
3c0ef626 2577 [
2578 AC_DEFINE(HAVE_INTXX_T)
2579 AC_MSG_RESULT(yes)
2580 ],
2581 [ AC_MSG_RESULT(no) ]
2582 )
2583fi
2584
2585AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
2586 AC_TRY_COMPILE(
d03f4262 2587 [
2588#include <sys/types.h>
2589#ifdef HAVE_STDINT_H
2590# include <stdint.h>
2591#endif
2592#include <sys/socket.h>
2593#ifdef HAVE_SYS_BITYPES_H
2594# include <sys/bitypes.h>
2595#endif
540d72c3 2596 ],
2597 [ int64_t a; a = 1;],
3c0ef626 2598 [ ac_cv_have_int64_t="yes" ],
2599 [ ac_cv_have_int64_t="no" ]
2600 )
2601])
2602if test "x$ac_cv_have_int64_t" = "xyes" ; then
08822d99 2603 AC_DEFINE(HAVE_INT64_T, 1, [define if you have int64_t data type])
e9702f7d 2604fi
2605
3c0ef626 2606AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
2607 AC_TRY_COMPILE(
540d72c3 2608 [ #include <sys/types.h> ],
2609 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
3c0ef626 2610 [ ac_cv_have_u_intxx_t="yes" ],
2611 [ ac_cv_have_u_intxx_t="no" ]
2612 )
2613])
2614if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
08822d99 2615 AC_DEFINE(HAVE_U_INTXX_T, 1, [define if you have u_intxx_t data type])
3c0ef626 2616 have_u_intxx_t=1
2617fi
2618
2619if test -z "$have_u_intxx_t" ; then
2620 AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
2621 AC_TRY_COMPILE(
540d72c3 2622 [ #include <sys/socket.h> ],
2623 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
3c0ef626 2624 [
2625 AC_DEFINE(HAVE_U_INTXX_T)
2626 AC_MSG_RESULT(yes)
2627 ],
2628 [ AC_MSG_RESULT(no) ]
2629 )
2630fi
2631
2632AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
2633 AC_TRY_COMPILE(
540d72c3 2634 [ #include <sys/types.h> ],
2635 [ u_int64_t a; a = 1;],
3c0ef626 2636 [ ac_cv_have_u_int64_t="yes" ],
2637 [ ac_cv_have_u_int64_t="no" ]
2638 )
2639])
2640if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
08822d99 2641 AC_DEFINE(HAVE_U_INT64_T, 1, [define if you have u_int64_t data type])
3c0ef626 2642 have_u_int64_t=1
2643fi
2644
e9702f7d 2645if test -z "$have_u_int64_t" ; then
2646 AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
2647 AC_TRY_COMPILE(
540d72c3 2648 [ #include <sys/bitypes.h> ],
e9702f7d 2649 [ u_int64_t a; a = 1],
2650 [
2651 AC_DEFINE(HAVE_U_INT64_T)
2652 AC_MSG_RESULT(yes)
2653 ],
2654 [ AC_MSG_RESULT(no) ]
2655 )
2656fi
2657
3c0ef626 2658if test -z "$have_u_intxx_t" ; then
2659 AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
2660 AC_TRY_COMPILE(
2661 [
2662#include <sys/types.h>
540d72c3 2663 ],
2664 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
3c0ef626 2665 [ ac_cv_have_uintxx_t="yes" ],
2666 [ ac_cv_have_uintxx_t="no" ]
2667 )
2668 ])
2669 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
08822d99 2670 AC_DEFINE(HAVE_UINTXX_T, 1,
2671 [define if you have uintxx_t data type])
3c0ef626 2672 fi
2673fi
2674
2675if test -z "$have_uintxx_t" ; then
2676 AC_MSG_CHECKING([for uintXX_t types in stdint.h])
2677 AC_TRY_COMPILE(
540d72c3 2678 [ #include <stdint.h> ],
2679 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
3c0ef626 2680 [
2681 AC_DEFINE(HAVE_UINTXX_T)
2682 AC_MSG_RESULT(yes)
2683 ],
2684 [ AC_MSG_RESULT(no) ]
2685 )
2686fi
2687
2688if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
540d72c3 2689 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
3c0ef626 2690then
2691 AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
2692 AC_TRY_COMPILE(
2693 [
2694#include <sys/bitypes.h>
540d72c3 2695 ],
3c0ef626 2696 [
2697 int8_t a; int16_t b; int32_t c;
2698 u_int8_t e; u_int16_t f; u_int32_t g;
2699 a = b = c = e = f = g = 1;
540d72c3 2700 ],
3c0ef626 2701 [
2702 AC_DEFINE(HAVE_U_INTXX_T)
2703 AC_DEFINE(HAVE_INTXX_T)
2704 AC_MSG_RESULT(yes)
2705 ],
2706 [AC_MSG_RESULT(no)]
540d72c3 2707 )
3c0ef626 2708fi
2709
2710
2711AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
2712 AC_TRY_COMPILE(
2713 [
2714#include <sys/types.h>
2715 ],
2716 [ u_char foo; foo = 125; ],
2717 [ ac_cv_have_u_char="yes" ],
2718 [ ac_cv_have_u_char="no" ]
2719 )
2720])
2721if test "x$ac_cv_have_u_char" = "xyes" ; then
08822d99 2722 AC_DEFINE(HAVE_U_CHAR, 1, [define if you have u_char data type])
3c0ef626 2723fi
2724
2725TYPE_SOCKLEN_T
2726
e9702f7d 2727AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
2728
dfddba3d 2729AC_CHECK_TYPES(in_addr_t,,,
2730[#include <sys/types.h>
2731#include <netinet/in.h>])
2732
3c0ef626 2733AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
2734 AC_TRY_COMPILE(
2735 [
2736#include <sys/types.h>
2737 ],
2738 [ size_t foo; foo = 1235; ],
2739 [ ac_cv_have_size_t="yes" ],
2740 [ ac_cv_have_size_t="no" ]
2741 )
2742])
2743if test "x$ac_cv_have_size_t" = "xyes" ; then
08822d99 2744 AC_DEFINE(HAVE_SIZE_T, 1, [define if you have size_t data type])
3c0ef626 2745fi
2746
2747AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
2748 AC_TRY_COMPILE(
2749 [
2750#include <sys/types.h>
2751 ],
2752 [ ssize_t foo; foo = 1235; ],
2753 [ ac_cv_have_ssize_t="yes" ],
2754 [ ac_cv_have_ssize_t="no" ]
2755 )
2756])
2757if test "x$ac_cv_have_ssize_t" = "xyes" ; then
08822d99 2758 AC_DEFINE(HAVE_SSIZE_T, 1, [define if you have ssize_t data type])
3c0ef626 2759fi
2760
2761AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
2762 AC_TRY_COMPILE(
2763 [
2764#include <time.h>
2765 ],
2766 [ clock_t foo; foo = 1235; ],
2767 [ ac_cv_have_clock_t="yes" ],
2768 [ ac_cv_have_clock_t="no" ]
2769 )
2770])
2771if test "x$ac_cv_have_clock_t" = "xyes" ; then
08822d99 2772 AC_DEFINE(HAVE_CLOCK_T, 1, [define if you have clock_t data type])
3c0ef626 2773fi
2774
2775AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
2776 AC_TRY_COMPILE(
2777 [
2778#include <sys/types.h>
2779#include <sys/socket.h>
2780 ],
2781 [ sa_family_t foo; foo = 1235; ],
2782 [ ac_cv_have_sa_family_t="yes" ],
2783 [ AC_TRY_COMPILE(
2784 [
2785#include <sys/types.h>
2786#include <sys/socket.h>
2787#include <netinet/in.h>
2788 ],
2789 [ sa_family_t foo; foo = 1235; ],
2790 [ ac_cv_have_sa_family_t="yes" ],
2791
2792 [ ac_cv_have_sa_family_t="no" ]
2793 )]
2794 )
2795])
2796if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
08822d99 2797 AC_DEFINE(HAVE_SA_FAMILY_T, 1,
2798 [define if you have sa_family_t data type])
3c0ef626 2799fi
2800
2801AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
2802 AC_TRY_COMPILE(
2803 [
2804#include <sys/types.h>
2805 ],
2806 [ pid_t foo; foo = 1235; ],
2807 [ ac_cv_have_pid_t="yes" ],
2808 [ ac_cv_have_pid_t="no" ]
2809 )
2810])
2811if test "x$ac_cv_have_pid_t" = "xyes" ; then
08822d99 2812 AC_DEFINE(HAVE_PID_T, 1, [define if you have pid_t data type])
3c0ef626 2813fi
2814
2815AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
2816 AC_TRY_COMPILE(
2817 [
2818#include <sys/types.h>
2819 ],
2820 [ mode_t foo; foo = 1235; ],
2821 [ ac_cv_have_mode_t="yes" ],
2822 [ ac_cv_have_mode_t="no" ]
2823 )
2824])
2825if test "x$ac_cv_have_mode_t" = "xyes" ; then
08822d99 2826 AC_DEFINE(HAVE_MODE_T, 1, [define if you have mode_t data type])
3c0ef626 2827fi
2828
2829
2830AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
2831 AC_TRY_COMPILE(
2832 [
2833#include <sys/types.h>
2834#include <sys/socket.h>
2835 ],
2836 [ struct sockaddr_storage s; ],
2837 [ ac_cv_have_struct_sockaddr_storage="yes" ],
2838 [ ac_cv_have_struct_sockaddr_storage="no" ]
2839 )
2840])
2841if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
08822d99 2842 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE, 1,
2843 [define if you have struct sockaddr_storage data type])
3c0ef626 2844fi
2845
2846AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2847 AC_TRY_COMPILE(
2848 [
2849#include <sys/types.h>
2850#include <netinet/in.h>
2851 ],
2852 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2853 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2854 [ ac_cv_have_struct_sockaddr_in6="no" ]
2855 )
2856])
2857if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
08822d99 2858 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6, 1,
2859 [define if you have struct sockaddr_in6 data type])
3c0ef626 2860fi
2861
2862AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2863 AC_TRY_COMPILE(
2864 [
2865#include <sys/types.h>
2866#include <netinet/in.h>
2867 ],
2868 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2869 [ ac_cv_have_struct_in6_addr="yes" ],
2870 [ ac_cv_have_struct_in6_addr="no" ]
2871 )
2872])
2873if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
08822d99 2874 AC_DEFINE(HAVE_STRUCT_IN6_ADDR, 1,
2875 [define if you have struct in6_addr data type])
3c0ef626 2876fi
2877
2878AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2879 AC_TRY_COMPILE(
2880 [
2881#include <sys/types.h>
2882#include <sys/socket.h>
2883#include <netdb.h>
2884 ],
2885 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2886 [ ac_cv_have_struct_addrinfo="yes" ],
2887 [ ac_cv_have_struct_addrinfo="no" ]
2888 )
2889])
2890if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
08822d99 2891 AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1,
2892 [define if you have struct addrinfo data type])
3c0ef626 2893fi
2894
2895AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2896 AC_TRY_COMPILE(
540d72c3 2897 [ #include <sys/time.h> ],
2898 [ struct timeval tv; tv.tv_sec = 1;],
3c0ef626 2899 [ ac_cv_have_struct_timeval="yes" ],
2900 [ ac_cv_have_struct_timeval="no" ]
2901 )
2902])
2903if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
08822d99 2904 AC_DEFINE(HAVE_STRUCT_TIMEVAL, 1, [define if you have struct timeval])
3c0ef626 2905 have_struct_timeval=1
2906fi
2907
bfe49944 2908AC_CHECK_TYPES(struct timespec)
2909
2910# We need int64_t or else certian parts of the compile will fail.
8b32eddc 2911if test "x$ac_cv_have_int64_t" = "xno" && \
2912 test "x$ac_cv_sizeof_long_int" != "x8" && \
2913 test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
bfe49944 2914 echo "OpenSSH requires int64_t support. Contact your vendor or install"
2915 echo "an alternative compiler (I.E., GCC) before continuing."
2916 echo ""
2917 exit 1;
3c0ef626 2918else
2919dnl test snprintf (broken on SCO w/gcc)
dfddba3d 2920 AC_RUN_IFELSE(
2921 [AC_LANG_SOURCE([[
3c0ef626 2922#include <stdio.h>
2923#include <string.h>
2924#ifdef HAVE_SNPRINTF
2925main()
2926{
2927 char buf[50];
2928 char expected_out[50];
2929 int mazsize = 50 ;
2930#if (SIZEOF_LONG_INT == 8)
2931 long int num = 0x7fffffffffffffff;
2932#else
2933 long long num = 0x7fffffffffffffffll;
2934#endif
2935 strcpy(expected_out, "9223372036854775807");
2936 snprintf(buf, mazsize, "%lld", num);
2937 if(strcmp(buf, expected_out) != 0)
540d72c3 2938 exit(1);
3c0ef626 2939 exit(0);
2940}
2941#else
2942main() { exit(0); }
2943#endif
dfddba3d 2944 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
2945 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
3c0ef626 2946 )
2947fi
3c0ef626 2948
2949dnl Checks for structure members
2950OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2951OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2952OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2953OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2954OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
2955OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
2956OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2957OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
2958OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
2959OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2960OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2961OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2962OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
2963OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2964OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2965OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2966OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
2967
2968AC_CHECK_MEMBERS([struct stat.st_blksize])
08822d99 2969AC_CHECK_MEMBER([struct __res_state.retrans], [], [AC_DEFINE(__res_state, state,
2970 [Define if we don't have struct __res_state in resolv.h])],
2971[
2972#include <stdio.h>
2973#if HAVE_SYS_TYPES_H
2974# include <sys/types.h>
2975#endif
2976#include <netinet/in.h>
2977#include <arpa/nameser.h>
2978#include <resolv.h>
2979])
3c0ef626 2980
2981AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2982 ac_cv_have_ss_family_in_struct_ss, [
2983 AC_TRY_COMPILE(
2984 [
2985#include <sys/types.h>
2986#include <sys/socket.h>
2987 ],
2988 [ struct sockaddr_storage s; s.ss_family = 1; ],
2989 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2990 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2991 )
2992])
2993if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
08822d99 2994 AC_DEFINE(HAVE_SS_FAMILY_IN_SS, 1, [Fields in struct sockaddr_storage])
3c0ef626 2995fi
2996
2997AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2998 ac_cv_have___ss_family_in_struct_ss, [
2999 AC_TRY_COMPILE(
3000 [
3001#include <sys/types.h>
3002#include <sys/socket.h>
3003 ],
3004 [ struct sockaddr_storage s; s.__ss_family = 1; ],
3005 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
3006 [ ac_cv_have___ss_family_in_struct_ss="no" ]
3007 )
3008])
3009if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
08822d99 3010 AC_DEFINE(HAVE___SS_FAMILY_IN_SS, 1,
3011 [Fields in struct sockaddr_storage])
3c0ef626 3012fi
3013
3014AC_CACHE_CHECK([for pw_class field in struct passwd],
3015 ac_cv_have_pw_class_in_struct_passwd, [
3016 AC_TRY_COMPILE(
3017 [
3018#include <pwd.h>
3019 ],
3020 [ struct passwd p; p.pw_class = 0; ],
3021 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
3022 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
3023 )
3024])
3025if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
08822d99 3026 AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD, 1,
3027 [Define if your password has a pw_class field])
3c0ef626 3028fi
3029
3030AC_CACHE_CHECK([for pw_expire field in struct passwd],
3031 ac_cv_have_pw_expire_in_struct_passwd, [
3032 AC_TRY_COMPILE(
3033 [
3034#include <pwd.h>
3035 ],
3036 [ struct passwd p; p.pw_expire = 0; ],
3037 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
3038 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
3039 )
3040])
3041if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
08822d99 3042 AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD, 1,
3043 [Define if your password has a pw_expire field])
3c0ef626 3044fi
3045
3046AC_CACHE_CHECK([for pw_change field in struct passwd],
3047 ac_cv_have_pw_change_in_struct_passwd, [
3048 AC_TRY_COMPILE(
3049 [
3050#include <pwd.h>
3051 ],
3052 [ struct passwd p; p.pw_change = 0; ],
3053 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
3054 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
3055 )
3056])
3057if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
08822d99 3058 AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD, 1,
3059 [Define if your password has a pw_change field])
3c0ef626 3060fi
3061
541874c2 3062dnl make sure we're using the real structure members and not defines
350391c5 3063AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
3064 ac_cv_have_accrights_in_msghdr, [
dfddba3d 3065 AC_COMPILE_IFELSE(
350391c5 3066 [
3067#include <sys/types.h>
3068#include <sys/socket.h>
3069#include <sys/uio.h>
541874c2 3070int main() {
3071#ifdef msg_accrights
dfddba3d 3072#error "msg_accrights is a macro"
541874c2 3073exit(1);
3074#endif
3075struct msghdr m;
3076m.msg_accrights = 0;
3077exit(0);
3078}
350391c5 3079 ],
350391c5 3080 [ ac_cv_have_accrights_in_msghdr="yes" ],
3081 [ ac_cv_have_accrights_in_msghdr="no" ]
3082 )
3083])
3084if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
08822d99 3085 AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR, 1,
3086 [Define if your system uses access rights style
3087 file descriptor passing])
350391c5 3088fi
3089
3090AC_CACHE_CHECK([for msg_control field in struct msghdr],
3091 ac_cv_have_control_in_msghdr, [
dfddba3d 3092 AC_COMPILE_IFELSE(
350391c5 3093 [
3094#include <sys/types.h>
3095#include <sys/socket.h>
3096#include <sys/uio.h>
541874c2 3097int main() {
3098#ifdef msg_control
dfddba3d 3099#error "msg_control is a macro"
541874c2 3100exit(1);
3101#endif
3102struct msghdr m;
3103m.msg_control = 0;
3104exit(0);
3105}
350391c5 3106 ],
350391c5 3107 [ ac_cv_have_control_in_msghdr="yes" ],
3108 [ ac_cv_have_control_in_msghdr="no" ]
3109 )
3110])
3111if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
08822d99 3112 AC_DEFINE(HAVE_CONTROL_IN_MSGHDR, 1,
3113 [Define if your system uses ancillary data style
3114 file descriptor passing])
350391c5 3115fi
3116
3c0ef626 3117AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
540d72c3 3118 AC_TRY_LINK([],
3119 [ extern char *__progname; printf("%s", __progname); ],
3c0ef626 3120 [ ac_cv_libc_defines___progname="yes" ],
3121 [ ac_cv_libc_defines___progname="no" ]
3122 )
3123])
3124if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
08822d99 3125 AC_DEFINE(HAVE___PROGNAME, 1, [Define if libc defines __progname])
3c0ef626 3126fi
3127
350391c5 3128AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
3129 AC_TRY_LINK([
3130#include <stdio.h>
540d72c3 3131],
3132 [ printf("%s", __FUNCTION__); ],
350391c5 3133 [ ac_cv_cc_implements___FUNCTION__="yes" ],
3134 [ ac_cv_cc_implements___FUNCTION__="no" ]
3135 )
3136])
3137if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
08822d99 3138 AC_DEFINE(HAVE___FUNCTION__, 1,
3139 [Define if compiler implements __FUNCTION__])
350391c5 3140fi
3141
3142AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
3143 AC_TRY_LINK([
3144#include <stdio.h>
540d72c3 3145],
3146 [ printf("%s", __func__); ],
350391c5 3147 [ ac_cv_cc_implements___func__="yes" ],
3148 [ ac_cv_cc_implements___func__="no" ]
3149 )
3150])
3151if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
08822d99 3152 AC_DEFINE(HAVE___func__, 1, [Define if compiler implements __func__])
3153fi
3154
3155AC_CACHE_CHECK([whether va_copy exists], ac_cv_have_va_copy, [
3156 AC_TRY_LINK(
3157 [#include <stdarg.h>
3158 va_list x,y;],
3159 [va_copy(x,y);],
3160 [ ac_cv_have_va_copy="yes" ],
3161 [ ac_cv_have_va_copy="no" ]
3162 )
3163])
3164if test "x$ac_cv_have_va_copy" = "xyes" ; then
3165 AC_DEFINE(HAVE_VA_COPY, 1, [Define if va_copy exists])
3166fi
3167
3168AC_CACHE_CHECK([whether __va_copy exists], ac_cv_have___va_copy, [
3169 AC_TRY_LINK(
3170 [#include <stdarg.h>
3171 va_list x,y;],
3172 [__va_copy(x,y);],
3173 [ ac_cv_have___va_copy="yes" ],
3174 [ ac_cv_have___va_copy="no" ]
3175 )
3176])
3177if test "x$ac_cv_have___va_copy" = "xyes" ; then
3178 AC_DEFINE(HAVE___VA_COPY, 1, [Define if __va_copy exists])
350391c5 3179fi
3180
3c0ef626 3181AC_CACHE_CHECK([whether getopt has optreset support],
3182 ac_cv_have_getopt_optreset, [
3183 AC_TRY_LINK(
3184 [
3185#include <getopt.h>
3186 ],
3187 [ extern int optreset; optreset = 0; ],
3188 [ ac_cv_have_getopt_optreset="yes" ],
3189 [ ac_cv_have_getopt_optreset="no" ]
3190 )
3191])
3192if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
08822d99 3193 AC_DEFINE(HAVE_GETOPT_OPTRESET, 1,
3194 [Define if your getopt(3) defines and uses optreset])
3c0ef626 3195fi
3196
3197AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
540d72c3 3198 AC_TRY_LINK([],
3199 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
3c0ef626 3200 [ ac_cv_libc_defines_sys_errlist="yes" ],
3201 [ ac_cv_libc_defines_sys_errlist="no" ]
3202 )
3203])
3204if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
08822d99 3205 AC_DEFINE(HAVE_SYS_ERRLIST, 1,
3206 [Define if your system defines sys_errlist[]])
3c0ef626 3207fi
3208
3209
3210AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
540d72c3 3211 AC_TRY_LINK([],
3212 [ extern int sys_nerr; printf("%i", sys_nerr);],
3c0ef626 3213 [ ac_cv_libc_defines_sys_nerr="yes" ],
3214 [ ac_cv_libc_defines_sys_nerr="no" ]
3215 )
3216])
3217if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
08822d99 3218 AC_DEFINE(HAVE_SYS_NERR, 1, [Define if your system defines sys_nerr])
3c0ef626 3219fi
3220
540d72c3 3221SCARD_MSG="no"
350391c5 3222# Check whether user wants sectok support
3223AC_ARG_WITH(sectok,
3224 [ --with-sectok Enable smartcard support using libsectok],
3c0ef626 3225 [
3226 if test "x$withval" != "xno" ; then
3227 if test "x$withval" != "xyes" ; then
3228 CPPFLAGS="$CPPFLAGS -I${withval}"
3229 LDFLAGS="$LDFLAGS -L${withval}"
3230 if test ! -z "$need_dash_r" ; then
3231 LDFLAGS="$LDFLAGS -R${withval}"
3232 fi
3233 if test ! -z "$blibpath" ; then
3234 blibpath="$blibpath:${withval}"
3235 fi
3236 fi
3237 AC_CHECK_HEADERS(sectok.h)
3238 if test "$ac_cv_header_sectok_h" != yes; then
3239 AC_MSG_ERROR(Can't find sectok.h)
3240 fi
3241 AC_CHECK_LIB(sectok, sectok_open)
3242 if test "$ac_cv_lib_sectok_sectok_open" != yes; then
3243 AC_MSG_ERROR(Can't find libsectok)
3244 fi
08822d99 3245 AC_DEFINE(SMARTCARD, 1,
3246 [Define if you want smartcard support])
3247 AC_DEFINE(USE_SECTOK, 1,
3248 [Define if you want smartcard support
3249 using sectok])
540d72c3 3250 SCARD_MSG="yes, using sectok"
3c0ef626 3251 fi
3252 ]
3253)
3254
350391c5 3255# Check whether user wants OpenSC support
8b32eddc 3256OPENSC_CONFIG="no"
350391c5 3257AC_ARG_WITH(opensc,
08822d99 3258 [ --with-opensc[[=PFX]] Enable smartcard support using OpenSC (optionally in PATH)],
8b32eddc 3259 [
3260 if test "x$withval" != "xno" ; then
3261 if test "x$withval" != "xyes" ; then
3262 OPENSC_CONFIG=$withval/bin/opensc-config
3263 else
3264 AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
3265 fi
3266 if test "$OPENSC_CONFIG" != "no"; then
3267 LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
3268 LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
3269 CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
30460aeb 3270 LIBS="$LIBS $LIBOPENSC_LIBS"
8b32eddc 3271 AC_DEFINE(SMARTCARD)
08822d99 3272 AC_DEFINE(USE_OPENSC, 1,
3273 [Define if you want smartcard support
3274 using OpenSC])
8b32eddc 3275 SCARD_MSG="yes, using OpenSC"
3276 fi
3277 fi
3278 ]
3279)
350391c5 3280
540d72c3 3281# Check libraries needed by DNS fingerprint support
3282AC_SEARCH_LIBS(getrrsetbyname, resolv,
08822d99 3283 [AC_DEFINE(HAVE_GETRRSETBYNAME, 1,
3284 [Define if getrrsetbyname() exists])],
7cac2b65 3285 [
540d72c3 3286 # Needed by our getrrsetbyname()
3287 AC_SEARCH_LIBS(res_query, resolv)
3288 AC_SEARCH_LIBS(dn_expand, resolv)
7e82606e 3289 AC_MSG_CHECKING(if res_query will link)
3290 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
3291 [AC_MSG_RESULT(no)
3292 saved_LIBS="$LIBS"
3293 LIBS="$LIBS -lresolv"
3294 AC_MSG_CHECKING(for res_query in -lresolv)
3295 AC_LINK_IFELSE([
3296#include <resolv.h>
3297int main()
3298{
3299 res_query (0, 0, 0, 0, 0);
3300 return 0;
3301}
3302 ],
3303 [LIBS="$LIBS -lresolv"
3304 AC_MSG_RESULT(yes)],
3305 [LIBS="$saved_LIBS"
3306 AC_MSG_RESULT(no)])
3307 ])
540d72c3 3308 AC_CHECK_FUNCS(_getshort _getlong)
2ce0bfe4 3309 AC_CHECK_DECLS([_getshort, _getlong], , ,
3310 [#include <sys/types.h>
3311 #include <arpa/nameser.h>])
540d72c3 3312 AC_CHECK_MEMBER(HEADER.ad,
08822d99 3313 [AC_DEFINE(HAVE_HEADER_AD, 1,
3314 [Define if HEADER.ad exists in arpa/nameser.h])],,
540d72c3 3315 [#include <arpa/nameser.h>])
3316 ])
7cac2b65 3317
30460aeb 3318# Check whether user wants SELinux support
3319SELINUX_MSG="no"
3320LIBSELINUX=""
3321AC_ARG_WITH(selinux,
3322 [ --with-selinux Enable SELinux support],
3323 [ if test "x$withval" != "xno" ; then
3324 AC_DEFINE(WITH_SELINUX,1,[Define if you want SELinux support.])
3325 SELINUX_MSG="yes"
3326 AC_CHECK_HEADER([selinux/selinux.h], ,
3327 AC_MSG_ERROR(SELinux support requires selinux.h header))
3328 AC_CHECK_LIB(selinux, setexeccon, [ LIBSELINUX="-lselinux" ],
3329 AC_MSG_ERROR(SELinux support requires libselinux library))
240debe0 3330 save_LIBS="$LIBS"
3331 LIBS="$LIBS $LIBSELINUX"
30460aeb 3332 AC_CHECK_FUNCS(getseuserbyname get_default_context_with_level)
240debe0 3333 LIBS="$save_LIBS"
30460aeb 3334 fi ]
3335)
3336AC_SUBST(LIBSELINUX)
3337
63119dd9 3338# Check whether user wants Kerberos 5 support
540d72c3 3339KRB5_MSG="no"
63119dd9 3340AC_ARG_WITH(kerberos5,
540d72c3 3341 [ --with-kerberos5=PATH Enable Kerberos 5 support],
3342 [ if test "x$withval" != "xno" ; then
3343 if test "x$withval" = "xyes" ; then
3344 KRB5ROOT="/usr/local"
3345 else
3346 KRB5ROOT=${withval}
3347 fi
3348
08822d99 3349 AC_DEFINE(KRB5, 1, [Define if you want Kerberos 5 support])
540d72c3 3350 KRB5_MSG="yes"
3351
3352 AC_MSG_CHECKING(for krb5-config)
3353 if test -x $KRB5ROOT/bin/krb5-config ; then
3354 KRB5CONF=$KRB5ROOT/bin/krb5-config
3355 AC_MSG_RESULT($KRB5CONF)
3356
3357 AC_MSG_CHECKING(for gssapi support)
3358 if $KRB5CONF | grep gssapi >/dev/null ; then
3359 AC_MSG_RESULT(yes)
08822d99 3360 AC_DEFINE(GSSAPI, 1,
3361 [Define this if you want GSSAPI
3362 support in the version 2 protocol])
540d72c3 3363 k5confopts=gssapi
3364 else
3365 AC_MSG_RESULT(no)
3366 k5confopts=""
3367 fi
3368 K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
3369 K5LIBS="`$KRB5CONF --libs $k5confopts`"
3370 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
3371 AC_MSG_CHECKING(whether we are using Heimdal)
3372 AC_TRY_COMPILE([ #include <krb5.h> ],
3373 [ char *tmp = heimdal_version; ],
3374 [ AC_MSG_RESULT(yes)
08822d99 3375 AC_DEFINE(HEIMDAL, 1,
3376 [Define this if you are using the
3377 Heimdal version of Kerberos V5]) ],
540d72c3 3378 AC_MSG_RESULT(no)
3379 )
3380 else
3381 AC_MSG_RESULT(no)
63119dd9 3382 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
540d72c3 3383 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
3384 AC_MSG_CHECKING(whether we are using Heimdal)
3385 AC_TRY_COMPILE([ #include <krb5.h> ],
3386 [ char *tmp = heimdal_version; ],
3387 [ AC_MSG_RESULT(yes)
3388 AC_DEFINE(HEIMDAL)
7e82606e 3389 K5LIBS="-lkrb5 -ldes"
3390 K5LIBS="$K5LIBS -lcom_err -lasn1"
8b32eddc 3391 AC_CHECK_LIB(roken, net_write,
7e82606e 3392 [K5LIBS="$K5LIBS -lroken"])
540d72c3 3393 ],
3394 [ AC_MSG_RESULT(no)
3395 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
3396 ]
3397 )
7cac2b65 3398 AC_SEARCH_LIBS(dn_expand, resolv)
3399
3400 AC_CHECK_LIB(gssapi,gss_init_sec_context,
3401 [ AC_DEFINE(GSSAPI)
3402 K5LIBS="-lgssapi $K5LIBS" ],
3403 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
3404 [ AC_DEFINE(GSSAPI)
540d72c3 3405 K5LIBS="-lgssapi_krb5 $K5LIBS" ],
7cac2b65 3406 AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
3407 $K5LIBS)
3408 ],
3409 $K5LIBS)
8b32eddc 3410
7cac2b65 3411 AC_CHECK_HEADER(gssapi.h, ,
3412 [ unset ac_cv_header_gssapi_h
540d72c3 3413 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
7cac2b65 3414 AC_CHECK_HEADERS(gssapi.h, ,
3415 AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
540d72c3 3416 )
7cac2b65 3417 ]
3418 )
3419
3420 oldCPP="$CPPFLAGS"
3421 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
3422 AC_CHECK_HEADER(gssapi_krb5.h, ,
3423 [ CPPFLAGS="$oldCPP" ])
63119dd9 3424
1c89237d 3425 # If we're using some other GSSAPI
3426 if test "$GSSAPI" -a "$GSSAPI" != "mechglue"; then
3427 AC_MSG_ERROR([$GSSAPI GSSAPI library conflicts with Kerberos support. Use mechglue instead.])
3428 fi
5598e598 3429
540d72c3 3430 if test -z "$GSSAPI"; then
3431 GSSAPI="KRB5";
3432 fi
1c89237d 3433
5598e598 3434 oldCPP="$CPPFLAGS"
3435 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
3436 AC_CHECK_HEADER(gssapi_krb5.h, ,
3437 [ CPPFLAGS="$oldCPP" ])
3438
63119dd9 3439 fi
540d72c3 3440 if test ! -z "$need_dash_r" ; then
3441 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
3442 fi
3443 if test ! -z "$blibpath" ; then
3444 blibpath="$blibpath:${KRB5ROOT}/lib"
3445 fi
540d72c3 3446
08822d99 3447 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
3448 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
3449 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
540d72c3 3450
08822d99 3451 LIBS="$LIBS $K5LIBS"
3452 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS, 1,
3453 [Define this if you want to use libkafs' AFS support]))
3454 fi
540d72c3 3455 ]
63119dd9 3456)
3c0ef626 3457
62eb343a 3458# Check whether user wants AFS_KRB5 support
3459AFS_KRB5_MSG="no"
3460AC_ARG_WITH(afs-krb5,
3461 [ --with-afs-krb5[[=AKLOG_PATH]] Enable aklog to get token (default=/usr/bin/aklog).],
3462 [
3463 if test "x$withval" != "xno" ; then
3464
3465 if test "x$withval" != "xyes" ; then
08822d99 3466 AC_DEFINE_UNQUOTED(AKLOG_PATH, "$withval",
3467 [Define this if you want to use AFS/Kerberos 5 option, which runs aklog.])
62eb343a 3468 else
08822d99 3469 AC_DEFINE_UNQUOTED(AKLOG_PATH,
3470 "/usr/bin/aklog",
3471 [Define this if you want to use AFS/Kerberos 5 option, which runs aklog.])
62eb343a 3472 fi
3473
540d72c3 3474 if test -z "$KRB5ROOT" ; then
62eb343a 3475 AC_MSG_WARN([AFS_KRB5 requires Kerberos 5 support, build may fail])
3476 fi
3477
0a00e8f9 3478 LIBS="-lkrbafs -lkrb4 $LIBS"
62eb343a 3479 if test ! -z "$AFS_LIBS" ; then
3480 LIBS="$LIBS $AFS_LIBS"
3481 fi
08822d99 3482 AC_DEFINE(AFS_KRB5, 1,
3483 [Define this if you want to use AFS/Kerberos 5 option, which runs aklog.])
62eb343a 3484 AFS_KRB5_MSG="yes"
3485 fi
3486 ]
3487)
3c0ef626 3488
75be3237 3489AC_ARG_WITH(session-hooks,
3490 [ --with-session-hooks Enable hooks for executing external commands before/after a session],
08822d99 3491 [ AC_DEFINE(SESSION_HOOKS, 1, [Define this if you want support for startup/shutdown hooks]) ]
75be3237 3492)
3493
3c0ef626 3494# Looking for programs, paths and files
3c0ef626 3495
350391c5 3496PRIVSEP_PATH=/var/empty
3497AC_ARG_WITH(privsep-path,
d03f4262 3498 [ --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
350391c5 3499 [
8b32eddc 3500 if test -n "$withval" && test "x$withval" != "xno" && \
3501 test "x${withval}" != "xyes"; then
350391c5 3502 PRIVSEP_PATH=$withval
3503 fi
3504 ]
3505)
3506AC_SUBST(PRIVSEP_PATH)
3507
3c0ef626 3508AC_ARG_WITH(xauth,
3509 [ --with-xauth=PATH Specify path to xauth program ],
3510 [
8b32eddc 3511 if test -n "$withval" && test "x$withval" != "xno" && \
3512 test "x${withval}" != "xyes"; then
3c0ef626 3513 xauth_path=$withval
3514 fi
3515 ],
3516 [
d03f4262 3517 TestPath="$PATH"
3518 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
3519 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
3520 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
3521 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
3522 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
3c0ef626 3523 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
3524 xauth_path="/usr/openwin/bin/xauth"
3525 fi
3526 ]
3527)
3528
bfe49944 3529STRIP_OPT=-s
3530AC_ARG_ENABLE(strip,
3531 [ --disable-strip Disable calling strip(1) on install],
3532 [
3533 if test "x$enableval" = "xno" ; then
3534 STRIP_OPT=
3535 fi
3536 ]
3537)
3538AC_SUBST(STRIP_OPT)
3539
3c0ef626 3540if test -z "$xauth_path" ; then
3541 XAUTH_PATH="undefined"
3542 AC_SUBST(XAUTH_PATH)
3543else
08822d99 3544 AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path",
3545 [Define if xauth is found in your path])
3c0ef626 3546 XAUTH_PATH=$xauth_path
3547 AC_SUBST(XAUTH_PATH)
3548fi
3c0ef626 3549
96764173 3550AC_CHECK_DECL(_PATH_BSHELL, ,
3551 AC_DEFINE_UNQUOTED(_PATH_BSHELL, "/bin/sh",
9c941fe4 3552 [Define to your C shell if not defined in paths.h]),
96764173 3553 [ #include <paths.h> ]
3554)
3555
3556AC_CHECK_DECL(_PATH_CSHELL, ,
3557 AC_DEFINE_UNQUOTED(_PATH_CSHELL, "/bin/csh",
9c941fe4 3558 [Define to your Bourne shell if not defined in paths.h]),
96764173 3559 [ #include <paths.h> ]
3560)
3561
3562AC_CHECK_DECL(_PATH_SHELLS, ,
16d6cee3 3563 AC_DEFINE_UNQUOTED(_PATH_SHELLS, "/etc/shells",
9c941fe4 3564 [Define to your shells file if not defined in paths.h]),
96764173 3565 [ #include <paths.h> ]
3566)
3567
3568# if _PATH_MAILDIR is in paths.h then we won't go hunting for it.
3569AC_CHECK_DECL(_PATH_MAILDIR,
3570 AC_DEFINE(PATH_MAILDIR_IN_PATHS_H, 1,
3571 [Define if _PATH_MAILDIR is in paths.h]),
3572 ,
3573 [ #include <paths.h> ]
3574)
3575
3c0ef626 3576# Check for mail directory (last resort if we cannot get it from headers)
3577if test ! -z "$MAIL" ; then
3578 maildir=`dirname $MAIL`
08822d99 3579 AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir",
3580 [Set this to your mail directory if you don't have maillock.h])
3c0ef626 3581fi
3582
dfddba3d 3583if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
3584 AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
3585 disable_ptmx_check=yes
3586fi
3c0ef626 3587if test -z "$no_dev_ptmx" ; then
350391c5 3588 if test "x$disable_ptmx_check" != "xyes" ; then
540d72c3 3589 AC_CHECK_FILE("/dev/ptmx",
350391c5 3590 [
08822d99 3591 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX, 1,
3592 [Define if you have /dev/ptmx])
350391c5 3593 have_dev_ptmx=1
3594 ]
3595 )
3596 fi
3c0ef626 3597fi
dfddba3d 3598
3599if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
3600 AC_CHECK_FILE("/dev/ptc",
3601 [
08822d99 3602 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC, 1,
3603 [Define if you have /dev/ptc])
dfddba3d 3604 have_dev_ptc=1
3605 ]
3606 )
3607else
3608 AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
3609fi
3c0ef626 3610
3611# Options from here on. Some of these are preset by platform above
3c0ef626 3612AC_ARG_WITH(mantype,
3613 [ --with-mantype=man|cat|doc Set man page type],
3614 [
3615 case "$withval" in
3616 man|cat|doc)
3617 MANTYPE=$withval
3618 ;;
3619 *)
3620 AC_MSG_ERROR(invalid man type: $withval)
3621 ;;
3622 esac
3623 ]
3624)
3625if test -z "$MANTYPE"; then
d03f4262 3626 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
3627 AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
3c0ef626 3628 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
3629 MANTYPE=doc
3630 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
3631 MANTYPE=man
3632 else
3633 MANTYPE=cat
3634 fi
3635fi
3636AC_SUBST(MANTYPE)
3637if test "$MANTYPE" = "doc"; then
3638 mansubdir=man;
3639else
3640 mansubdir=$MANTYPE;
3641fi
3642AC_SUBST(mansubdir)
3643
3644# Check whether to enable MD5 passwords
540d72c3 3645MD5_MSG="no"
3c0ef626 3646AC_ARG_WITH(md5-passwords,
3647 [ --with-md5-passwords Enable use of MD5 passwords],
3648 [
3649 if test "x$withval" != "xno" ; then
08822d99 3650 AC_DEFINE(HAVE_MD5_PASSWORDS, 1,
3651 [Define if you want to allow MD5 passwords])
540d72c3 3652 MD5_MSG="yes"
3c0ef626 3653 fi
3654 ]
3655)
3656
3657# Whether to disable shadow password support
3658AC_ARG_WITH(shadow,
3659 [ --without-shadow Disable shadow password support],
3660 [
8b32eddc 3661 if test "x$withval" = "xno" ; then
3c0ef626 3662 AC_DEFINE(DISABLE_SHADOW)
3663 disable_shadow=yes
3664 fi
3665 ]
3666)
3667
3668if test -z "$disable_shadow" ; then
3669 AC_MSG_CHECKING([if the systems has expire shadow information])
3670 AC_TRY_COMPILE(
3671 [
3672#include <sys/types.h>
3673#include <shadow.h>
3674 struct spwd sp;
3675 ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
3676 [ sp_expire_available=yes ], []
3677 )
3678
3679 if test "x$sp_expire_available" = "xyes" ; then
3680 AC_MSG_RESULT(yes)
08822d99 3681 AC_DEFINE(HAS_SHADOW_EXPIRE, 1,
3682 [Define if you want to use shadow password expire field])
3c0ef626 3683 else
3684 AC_MSG_RESULT(no)
3685 fi
3686fi
3687
3688# Use ip address instead of hostname in $DISPLAY
3689if test ! -z "$IPADDR_IN_DISPLAY" ; then
3690 DISPLAY_HACK_MSG="yes"
08822d99 3691 AC_DEFINE(IPADDR_IN_DISPLAY, 1,
3692 [Define if you need to use IP address
3693 instead of hostname in $DISPLAY])
3c0ef626 3694else
540d72c3 3695 DISPLAY_HACK_MSG="no"
3c0ef626 3696 AC_ARG_WITH(ipaddr-display,
3697 [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY],
3698 [
8b32eddc 3699 if test "x$withval" != "xno" ; then
3c0ef626 3700 AC_DEFINE(IPADDR_IN_DISPLAY)
540d72c3 3701 DISPLAY_HACK_MSG="yes"
3c0ef626 3702 fi
3703 ]
3704 )
3705fi
3706
7cac2b65 3707# check for /etc/default/login and use it if present.
29d88157 3708AC_ARG_ENABLE(etc-default-login,
dfddba3d 3709 [ --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
3710 [ if test "x$enableval" = "xno"; then
3711 AC_MSG_NOTICE([/etc/default/login handling disabled])
3712 etc_default_login=no
3713 else
3714 etc_default_login=yes
3715 fi ],
08822d99 3716 [ if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
3717 then
3718 AC_MSG_WARN([cross compiling: not checking /etc/default/login])
3719 etc_default_login=no
3720 else
3721 etc_default_login=yes
3722 fi ]
dfddba3d 3723)
3724
3725if test "x$etc_default_login" != "xno"; then
3726 AC_CHECK_FILE("/etc/default/login",
3727 [ external_path_file=/etc/default/login ])
08822d99 3728 if test "x$external_path_file" = "x/etc/default/login"; then
3729 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN, 1,
3730 [Define if your system has /etc/default/login])
dfddba3d 3731 fi
7cac2b65 3732fi
3733
350391c5 3734dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
8b32eddc 3735if test $ac_cv_func_login_getcapbool = "yes" && \
3736 test $ac_cv_header_login_cap_h = "yes" ; then
7cac2b65 3737 external_path_file=/etc/login.conf
350391c5 3738fi
7cac2b65 3739
3c0ef626 3740# Whether to mess with the default path
540d72c3 3741SERVER_PATH_MSG="(default)"
3c0ef626 3742AC_ARG_WITH(default-path,
350391c5 3743 [ --with-default-path= Specify default \$PATH environment for server],
3c0ef626 3744 [
7cac2b65 3745 if test "x$external_path_file" = "x/etc/login.conf" ; then
350391c5 3746 AC_MSG_WARN([
3747--with-default-path=PATH has no effect on this system.
3748Edit /etc/login.conf instead.])
8b32eddc 3749 elif test "x$withval" != "xno" ; then
7cac2b65 3750 if test ! -z "$external_path_file" ; then
3751 AC_MSG_WARN([
3752--with-default-path=PATH will only be used if PATH is not defined in
3753$external_path_file .])
3754 fi
3c0ef626 3755 user_path="$withval"
540d72c3 3756 SERVER_PATH_MSG="$withval"
3c0ef626 3757 fi
3758 ],
7cac2b65 3759 [ if test "x$external_path_file" = "x/etc/login.conf" ; then
3760 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
350391c5 3761 else
7cac2b65 3762 if test ! -z "$external_path_file" ; then
3763 AC_MSG_WARN([
3764If PATH is defined in $external_path_file, ensure the path to scp is included,
3765otherwise scp will not work.])
3766 fi
08822d99 3767 AC_RUN_IFELSE(
3768 [AC_LANG_SOURCE([[
3c0ef626 3769/* find out what STDPATH is */
3770#include <stdio.h>
3771#ifdef HAVE_PATHS_H
3772# include <paths.h>
3773#endif
3774#ifndef _PATH_STDPATH
bfe49944 3775# ifdef _PATH_USERPATH /* Irix */
3776# define _PATH_STDPATH _PATH_USERPATH
3777# else
3778# define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
3779# endif
3c0ef626 3780#endif
3781#include <sys/types.h>
3782#include <sys/stat.h>
3783#include <fcntl.h>
3784#define DATA "conftest.stdpath"
3785
3786main()
3787{
3788 FILE *fd;
3789 int rc;
8b32eddc 3790
3c0ef626 3791 fd = fopen(DATA,"w");
3792 if(fd == NULL)
3793 exit(1);
8b32eddc 3794
3c0ef626 3795 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
3796 exit(1);
3797
3798 exit(0);
3799}
08822d99 3800 ]])],
3801 [ user_path=`cat conftest.stdpath` ],
3c0ef626 3802 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
3803 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
3804 )
3805# make sure $bindir is in USER_PATH so scp will work
3806 t_bindir=`eval echo ${bindir}`
3807 case $t_bindir in
3808 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
3809 esac
3810 case $t_bindir in
3811 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
3812 esac
3813 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
3814 if test $? -ne 0 ; then
3815 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
3816 if test $? -ne 0 ; then
3817 user_path=$user_path:$t_bindir
3818 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
3819 fi
3820 fi
350391c5 3821 fi ]
3822)
7cac2b65 3823if test "x$external_path_file" != "x/etc/login.conf" ; then
08822d99 3824 AC_DEFINE_UNQUOTED(USER_PATH, "$user_path", [Specify default $PATH])
350391c5 3825 AC_SUBST(user_path)
3826fi
3827
3828# Set superuser path separately to user path
350391c5 3829AC_ARG_WITH(superuser-path,
3830 [ --with-superuser-path= Specify different path for super-user],
3831 [
8b32eddc 3832 if test -n "$withval" && test "x$withval" != "xno" && \
3833 test "x${withval}" != "xyes"; then
08822d99 3834 AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval",
3835 [Define if you want a different $PATH
3836 for the superuser])
350391c5 3837 superuser_path=$withval
3838 fi
3c0ef626 3839 ]
3840)
350391c5 3841
3c0ef626 3842
3c0ef626 3843AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
540d72c3 3844IPV4_IN6_HACK_MSG="no"
3c0ef626 3845AC_ARG_WITH(4in6,
3846 [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses],
3847 [
3848 if test "x$withval" != "xno" ; then
3849 AC_MSG_RESULT(yes)
08822d99 3850 AC_DEFINE(IPV4_IN_IPV6, 1,
3851 [Detect IPv4 in IPv6 mapped addresses
3852 and treat as IPv4])
540d72c3 3853 IPV4_IN6_HACK_MSG="yes"
3c0ef626 3854 else
3855 AC_MSG_RESULT(no)
3856 fi
3857 ],[
3858 if test "x$inet6_default_4in6" = "xyes"; then
3859 AC_MSG_RESULT([yes (default)])
3860 AC_DEFINE(IPV4_IN_IPV6)
540d72c3 3861 IPV4_IN6_HACK_MSG="yes"
3c0ef626 3862 else
3863 AC_MSG_RESULT([no (default)])
3864 fi
3865 ]
3866)
3867
3868# Whether to enable BSD auth support
e9702f7d 3869BSD_AUTH_MSG=no
3c0ef626 3870AC_ARG_WITH(bsd-auth,
3871 [ --with-bsd-auth Enable BSD auth support],
3872 [
8b32eddc 3873 if test "x$withval" != "xno" ; then
08822d99 3874 AC_DEFINE(BSD_AUTH, 1,
3875 [Define if you have BSD auth support])
e9702f7d 3876 BSD_AUTH_MSG=yes
3c0ef626 3877 fi
3878 ]
3879)
3880
3c0ef626 3881# Where to place sshd.pid
3882piddir=/var/run
350391c5 3883# make sure the directory exists
8b32eddc 3884if test ! -d $piddir ; then
350391c5 3885 piddir=`eval echo ${sysconfdir}`
3886 case $piddir in
540d72c3 3887 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
350391c5 3888 esac
3889fi
3890
3c0ef626 3891AC_ARG_WITH(pid-dir,
3892 [ --with-pid-dir=PATH Specify location of ssh.pid file],
3893 [
8b32eddc 3894 if test -n "$withval" && test "x$withval" != "xno" && \
3895 test "x${withval}" != "xyes"; then
3c0ef626 3896 piddir=$withval
8b32eddc 3897 if test ! -d $piddir ; then
350391c5 3898 AC_MSG_WARN([** no $piddir directory on this system **])
3899 fi
3c0ef626 3900 fi
3901 ]
3902)
3903
08822d99 3904AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir", [Specify location of ssh.pid])
3c0ef626 3905AC_SUBST(piddir)
3906
3907dnl allow user to disable some login recording features
3908AC_ARG_ENABLE(lastlog,
3909 [ --disable-lastlog disable use of lastlog even if detected [no]],
7cac2b65 3910 [
3911 if test "x$enableval" = "xno" ; then
3912 AC_DEFINE(DISABLE_LASTLOG)
3913 fi
3914 ]
3c0ef626 3915)
3916AC_ARG_ENABLE(utmp,
3917 [ --disable-utmp disable use of utmp even if detected [no]],
7cac2b65 3918 [
3919 if test "x$enableval" = "xno" ; then
3920 AC_DEFINE(DISABLE_UTMP)
3921 fi
3922 ]
3c0ef626 3923)
3924AC_ARG_ENABLE(utmpx,
3925 [ --disable-utmpx disable use of utmpx even if detected [no]],
7cac2b65 3926 [
3927 if test "x$enableval" = "xno" ; then
08822d99 3928 AC_DEFINE(DISABLE_UTMPX, 1,
3929 [Define if you don't want to use utmpx])
7cac2b65 3930 fi
3931 ]
3c0ef626 3932)
3933AC_ARG_ENABLE(wtmp,
3934 [ --disable-wtmp disable use of wtmp even if detected [no]],
7cac2b65 3935 [
3936 if test "x$enableval" = "xno" ; then
3937 AC_DEFINE(DISABLE_WTMP)
3938 fi
3939 ]
3c0ef626 3940)
3941AC_ARG_ENABLE(wtmpx,
3942 [ --disable-wtmpx disable use of wtmpx even if detected [no]],
7cac2b65 3943 [
3944 if test "x$enableval" = "xno" ; then
08822d99 3945 AC_DEFINE(DISABLE_WTMPX, 1,
3946 [Define if you don't want to use wtmpx])
7cac2b65 3947 fi
3948 ]
3c0ef626 3949)
3950AC_ARG_ENABLE(libutil,
3951 [ --disable-libutil disable use of libutil (login() etc.) [no]],
7cac2b65 3952 [
3953 if test "x$enableval" = "xno" ; then
3954 AC_DEFINE(DISABLE_LOGIN)
3955 fi
3956 ]
3c0ef626 3957)
3958AC_ARG_ENABLE(pututline,
3959 [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]],
7cac2b65 3960 [
3961 if test "x$enableval" = "xno" ; then
08822d99 3962 AC_DEFINE(DISABLE_PUTUTLINE, 1,
3963 [Define if you don't want to use pututline()
3964 etc. to write [uw]tmp])
7cac2b65 3965 fi
3966 ]
3c0ef626 3967)
3968AC_ARG_ENABLE(pututxline,
3969 [ --disable-pututxline disable use of pututxline() etc. ([uw]tmpx) [no]],
7cac2b65 3970 [
3971 if test "x$enableval" = "xno" ; then
08822d99 3972 AC_DEFINE(DISABLE_PUTUTXLINE, 1,
3973 [Define if you don't want to use pututxline()
3974 etc. to write [uw]tmpx])
7cac2b65 3975 fi
3976 ]
3c0ef626 3977)
3978AC_ARG_WITH(lastlog,
3979 [ --with-lastlog=FILE|DIR specify lastlog location [common locations]],
3980 [
8b32eddc 3981 if test "x$withval" = "xno" ; then
3c0ef626 3982 AC_DEFINE(DISABLE_LASTLOG)
8b32eddc 3983 elif test -n "$withval" && test "x${withval}" != "xyes"; then
3c0ef626 3984 conf_lastlog_location=$withval
3985 fi
3986 ]
3987)
3988
3989dnl lastlog, [uw]tmpx? detection
3990dnl NOTE: set the paths in the platform section to avoid the
3991dnl need for command-line parameters
3992dnl lastlog and [uw]tmp are subject to a file search if all else fails
3993
3994dnl lastlog detection
3995dnl NOTE: the code itself will detect if lastlog is a directory
3996AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
3997AC_TRY_COMPILE([
3998#include <sys/types.h>
3999#include <utmp.h>
4000#ifdef HAVE_LASTLOG_H
4001# include <lastlog.h>
4002#endif
4003#ifdef HAVE_PATHS_H
4004# include <paths.h>
4005#endif
4006#ifdef HAVE_LOGIN_H
4007# include <login.h>
4008#endif
4009 ],
4010 [ char *lastlog = LASTLOG_FILE; ],
4011 [ AC_MSG_RESULT(yes) ],
4012 [
4013 AC_MSG_RESULT(no)
4014 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
4015 AC_TRY_COMPILE([
4016#include <sys/types.h>
4017#include <utmp.h>
4018#ifdef HAVE_LASTLOG_H
4019# include <lastlog.h>
4020#endif
4021#ifdef HAVE_PATHS_H
4022# include <paths.h>
4023#endif
4024 ],
4025 [ char *lastlog = _PATH_LASTLOG; ],
4026 [ AC_MSG_RESULT(yes) ],
4027 [
4028 AC_MSG_RESULT(no)
4029 system_lastlog_path=no
4030 ])
4031 ]
4032)
4033
4034if test -z "$conf_lastlog_location"; then
4035 if test x"$system_lastlog_path" = x"no" ; then
4036 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
4037 if (test -d "$f" || test -f "$f") ; then
4038 conf_lastlog_location=$f
4039 fi
4040 done
4041 if test -z "$conf_lastlog_location"; then
4042 AC_MSG_WARN([** Cannot find lastlog **])
4043 dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
4044 fi
4045 fi
4046fi
4047
4048if test -n "$conf_lastlog_location"; then
08822d99 4049 AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location",
4050 [Define if you want to specify the path to your lastlog file])
8b32eddc 4051fi
3c0ef626 4052
4053dnl utmp detection
4054AC_MSG_CHECKING([if your system defines UTMP_FILE])
4055AC_TRY_COMPILE([
4056#include <sys/types.h>
4057#include <utmp.h>
4058#ifdef HAVE_PATHS_H
4059# include <paths.h>
4060#endif
4061 ],
4062 [ char *utmp = UTMP_FILE; ],
4063 [ AC_MSG_RESULT(yes) ],
4064 [ AC_MSG_RESULT(no)
4065 system_utmp_path=no ]
4066)
4067if test -z "$conf_utmp_location"; then
4068 if test x"$system_utmp_path" = x"no" ; then
4069 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
4070 if test -f $f ; then
4071 conf_utmp_location=$f
4072 fi
4073 done
4074 if test -z "$conf_utmp_location"; then
4075 AC_DEFINE(DISABLE_UTMP)
4076 fi
4077 fi
4078fi
4079if test -n "$conf_utmp_location"; then
08822d99 4080 AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location",
4081 [Define if you want to specify the path to your utmp file])
8b32eddc 4082fi
3c0ef626 4083
4084dnl wtmp detection
4085AC_MSG_CHECKING([if your system defines WTMP_FILE])
4086AC_TRY_COMPILE([
4087#include <sys/types.h>
4088#include <utmp.h>
4089#ifdef HAVE_PATHS_H
4090# include <paths.h>
4091#endif
4092 ],
4093 [ char *wtmp = WTMP_FILE; ],
4094 [ AC_MSG_RESULT(yes) ],
4095 [ AC_MSG_RESULT(no)
4096 system_wtmp_path=no ]
4097)
4098if test -z "$conf_wtmp_location"; then
4099 if test x"$system_wtmp_path" = x"no" ; then
4100 for f in /usr/adm/wtmp /var/log/wtmp; do
4101 if test -f $f ; then
4102 conf_wtmp_location=$f
4103 fi
4104 done
4105 if test -z "$conf_wtmp_location"; then
4106 AC_DEFINE(DISABLE_WTMP)
4107 fi
4108 fi
4109fi
4110if test -n "$conf_wtmp_location"; then
08822d99 4111 AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location",
4112 [Define if you want to specify the path to your wtmp file])
8b32eddc 4113fi
3c0ef626 4114
4115
4116dnl utmpx detection - I don't know any system so perverse as to require
4117dnl utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
4118dnl there, though.
4119AC_MSG_CHECKING([if your system defines UTMPX_FILE])
4120AC_TRY_COMPILE([
4121#include <sys/types.h>
4122#include <utmp.h>
4123#ifdef HAVE_UTMPX_H
4124#include <utmpx.h>
4125#endif
4126#ifdef HAVE_PATHS_H
4127# include <paths.h>
4128#endif
4129 ],
4130 [ char *utmpx = UTMPX_FILE; ],
4131 [ AC_MSG_RESULT(yes) ],
4132 [ AC_MSG_RESULT(no)
4133 system_utmpx_path=no ]
4134)
4135if test -z "$conf_utmpx_location"; then
4136 if test x"$system_utmpx_path" = x"no" ; then
4137 AC_DEFINE(DISABLE_UTMPX)
4138 fi
4139else
08822d99 4140 AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location",
4141 [Define if you want to specify the path to your utmpx file])
8b32eddc 4142fi
3c0ef626 4143
4144dnl wtmpx detection
4145AC_MSG_CHECKING([if your system defines WTMPX_FILE])
4146AC_TRY_COMPILE([
4147#include <sys/types.h>
4148#include <utmp.h>
4149#ifdef HAVE_UTMPX_H
4150#include <utmpx.h>
4151#endif
4152#ifdef HAVE_PATHS_H
4153# include <paths.h>
4154#endif
4155 ],
4156 [ char *wtmpx = WTMPX_FILE; ],
4157 [ AC_MSG_RESULT(yes) ],
4158 [ AC_MSG_RESULT(no)
4159 system_wtmpx_path=no ]
4160)
4161if test -z "$conf_wtmpx_location"; then
4162 if test x"$system_wtmpx_path" = x"no" ; then
4163 AC_DEFINE(DISABLE_WTMPX)
4164 fi
4165else
08822d99 4166 AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location",
4167 [Define if you want to specify the path to your wtmpx file])
8b32eddc 4168fi
3c0ef626 4169
4170
3c0ef626 4171if test ! -z "$blibpath" ; then
256cb466 4172 LDFLAGS="$LDFLAGS $blibflags$blibpath"
4173 AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
3c0ef626 4174fi
4175
2ce0bfe4 4176dnl Adding -Werror to CFLAGS early prevents configure tests from running.
4177dnl Add now.
4178CFLAGS="$CFLAGS $werror_flags"
4179
e9702f7d 4180AC_EXEEXT
30460aeb 4181AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openssh.xml \
4182 openbsd-compat/Makefile openbsd-compat/regress/Makefile \
dfddba3d 4183 scard/Makefile ssh_prng_cmds survey.sh])
3c0ef626 4184AC_OUTPUT
4185
4186# Print summary of options
4187
3c0ef626 4188# Someone please show me a better way :)
4189A=`eval echo ${prefix}` ; A=`eval echo ${A}`
4190B=`eval echo ${bindir}` ; B=`eval echo ${B}`
4191C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
4192D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
4193E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
4194F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
4195G=`eval echo ${piddir}` ; G=`eval echo ${G}`
350391c5 4196H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
4197I=`eval echo ${user_path}` ; I=`eval echo ${I}`
4198J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
3c0ef626 4199
4200echo ""
4201echo "OpenSSH has been configured with the following options:"
350391c5 4202echo " User binaries: $B"
4203echo " System binaries: $C"
4204echo " Configuration files: $D"
4205echo " Askpass program: $E"
4206echo " Manual pages: $F"
4207echo " PID file: $G"
4208echo " Privilege separation chroot path: $H"
7cac2b65 4209if test "x$external_path_file" = "x/etc/login.conf" ; then
4210echo " At runtime, sshd will use the path defined in $external_path_file"
4211echo " Make sure the path to scp is present, otherwise scp will not work"
350391c5 4212else
4213echo " sshd default user PATH: $I"
7cac2b65 4214 if test ! -z "$external_path_file"; then
4215echo " (If PATH is set in $external_path_file it will be used instead. If"
4216echo " used, ensure the path to scp is present, otherwise scp will not work.)"
4217 fi
350391c5 4218fi
4219if test ! -z "$superuser_path" ; then
4220echo " sshd superuser user PATH: $J"
4221fi
4222echo " Manpage format: $MANTYPE"
7cac2b65 4223echo " PAM support: $PAM_MSG"
30460aeb 4224echo " OSF SIA support: $SIA_MSG"
350391c5 4225echo " KerberosV support: $KRB5_MSG"
30460aeb 4226echo " SELinux support: $SELINUX_MSG"
350391c5 4227echo " Smartcard support: $SCARD_MSG"
350391c5 4228echo " S/KEY support: $SKEY_MSG"
4229echo " TCP Wrappers support: $TCPW_MSG"
4230echo " MD5 password support: $MD5_MSG"
dfddba3d 4231echo " libedit support: $LIBEDIT_MSG"
30460aeb 4232echo " Solaris process contract support: $SPC_MSG"
350391c5 4233echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
350391c5 4234echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
4235echo " BSD Auth support: $BSD_AUTH_MSG"
4236echo " Random number source: $RAND_MSG"
e9702f7d 4237if test ! -z "$USE_RAND_HELPER" ; then
350391c5 4238echo " ssh-rand-helper collects from: $RAND_HELPER_MSG"
3c0ef626 4239fi
4240
4241echo ""
4242
4243echo " Host: ${host}"
4244echo " Compiler: ${CC}"
4245echo " Compiler flags: ${CFLAGS}"
4246echo "Preprocessor flags: ${CPPFLAGS}"
4247echo " Linker flags: ${LDFLAGS}"
e9702f7d 4248echo " Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
3c0ef626 4249
4250echo ""
4251
7e82606e 4252if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
dfddba3d 4253 echo "SVR4 style packages are supported with \"make package\""
4254 echo ""
7e82606e 4255fi
4256
3c0ef626 4257if test "x$PAM_MSG" = "xyes" ; then
e9702f7d 4258 echo "PAM is enabled. You may need to install a PAM control file "
4259 echo "for sshd, otherwise password authentication may fail. "
540d72c3 4260 echo "Example PAM control files can be found in the contrib/ "
e9702f7d 4261 echo "subdirectory"
3c0ef626 4262 echo ""
4263fi
4264
e9702f7d 4265if test ! -z "$RAND_HELPER_CMDHASH" ; then
4266 echo "WARNING: you are using the builtin random number collection "
4267 echo "service. Please read WARNING.RNG and request that your OS "
4268 echo "vendor includes kernel-based random number collection in "
4269 echo "future versions of your OS."
3c0ef626 4270 echo ""
4271fi
4272
7e82606e 4273if test ! -z "$NO_PEERCHECK" ; then
4274 echo "WARNING: the operating system that you are using does not "
4275 echo "appear to support either the getpeereid() API nor the "
4276 echo "SO_PEERCRED getsockopt() option. These facilities are used to "
4277 echo "enforce security checks to prevent unauthorised connections to "
4278 echo "ssh-agent. Their absence increases the risk that a malicious "
4279 echo "user can connect to your agent. "
4280 echo ""
4281fi
4282
dfddba3d 4283if test "$AUDIT_MODULE" = "bsm" ; then
4284 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
4285 echo "See the Solaris section in README.platform for details."
4286fi
git-cvsimport mirror of GSI OpenSSH
This page took 0.811781 seconds and 5 git commands to generate.