openssh/configure.ac

   1 # $Id$
   2 #
   3 # Copyright (c) 1999-2004 Damien Miller
   4 #
   5 # Permission to use, copy, modify, and distribute this software for any
   6 # purpose with or without fee is hereby granted, provided that the above
   7 # copyright notice and this permission notice appear in all copies.
   8 #
   9 # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  10 # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  11 # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  12 # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  13 # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  14 # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  15 # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  16
  17 AC_INIT(OpenSSH, Portable, openssh-unix-dev@mindrot.org)
  18 AC_REVISION($Revision$)
  19 AC_CONFIG_SRCDIR([ssh.c])
  20
  21 AC_CONFIG_HEADER(config.h)
  22 AC_PROG_CC
  23 AC_CANONICAL_HOST
  24 AC_C_BIGENDIAN
  25
  26 # Checks for programs.
  27 AC_PROG_AWK
  28 AC_PROG_CPP
  29 AC_PROG_RANLIB
  30 AC_PROG_INSTALL
  31 AC_PROG_EGREP
  32 AC_PATH_PROG(AR, ar)
  33 AC_PATH_PROG(CAT, cat)
  34 AC_PATH_PROG(KILL, kill)
  35 AC_PATH_PROGS(PERL, perl5 perl)
  36 AC_PATH_PROG(SED, sed)
  37 AC_SUBST(PERL)
  38 AC_PATH_PROG(ENT, ent)
  39 AC_SUBST(ENT)
  40 AC_PATH_PROG(TEST_MINUS_S_SH, bash)
  41 AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
  42 AC_PATH_PROG(TEST_MINUS_S_SH, sh)
  43 AC_PATH_PROG(SH, sh)
  44 AC_SUBST(TEST_SHELL,sh)
  45
  46 dnl for buildpkg.sh
  47 AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
  48         [/usr/sbin${PATH_SEPARATOR}/etc])
  49 AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
  50         [/usr/sbin${PATH_SEPARATOR}/etc])
  51 AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
  52 if test -x /sbin/sh; then
  53         AC_SUBST(STARTUP_SCRIPT_SHELL,/sbin/sh)
  54 else
  55         AC_SUBST(STARTUP_SCRIPT_SHELL,/bin/sh)
  56 fi
  57
  58 # System features
  59 AC_SYS_LARGEFILE
  60
  61 if test -z "$AR" ; then
  62         AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
  63 fi
  64
  65 # Use LOGIN_PROGRAM from environment if possible
  66 if test ! -z "$LOGIN_PROGRAM" ; then
  67         AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM",
  68                 [If your header files don't define LOGIN_PROGRAM,
  69                 then use this (detected) from environment and PATH])
  70 else
  71         # Search for login
  72         AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
  73         if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
  74                 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
  75         fi
  76 fi
  77
  78 AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
  79 if test ! -z "$PATH_PASSWD_PROG" ; then
  80         AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG",
  81                 [Full path of your "passwd" program])
  82 fi
  83
  84 if test -z "$LD" ; then
  85         LD=$CC
  86 fi
  87 AC_SUBST(LD)
  88
  89 AC_C_INLINE
  90
  91 AC_CHECK_DECL(LLONG_MAX, have_llong_max=1, , [#include <limits.h>])
  92
  93 if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
  94         CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wuninitialized"
  95         GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'`
  96         case $GCC_VER in
  97                 1.*) ;;
  98                 2.8* | 2.9*) CFLAGS="$CFLAGS -Wsign-compare" ;;
  99                 2.*) ;;
 100                 3.*) CFLAGS="$CFLAGS -Wsign-compare" ;;
 101                 4.*) CFLAGS="$CFLAGS -Wsign-compare -Wno-pointer-sign" ;;
 102                 *) ;;
 103         esac
 104
 105         if test -z "$have_llong_max"; then
 106                 # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
 107                 unset ac_cv_have_decl_LLONG_MAX
 108                 saved_CFLAGS="$CFLAGS"
 109                 CFLAGS="$CFLAGS -std=gnu99"
 110                 AC_CHECK_DECL(LLONG_MAX,
 111                     [have_llong_max=1],
 112                     [CFLAGS="$saved_CFLAGS"],
 113                     [#include <limits.h>]
 114                 )
 115         fi
 116 fi
 117
 118 AC_ARG_WITH(rpath,
 119         [  --without-rpath         Disable auto-added -R linker paths],
 120         [
 121                 if test "x$withval" = "xno" ; then
 122                         need_dash_r=""
 123                 fi
 124                 if test "x$withval" = "xyes" ; then
 125                         need_dash_r=1
 126                 fi
 127         ]
 128 )
 129
 130 # Allow user to specify flags
 131 AC_ARG_WITH(cflags,
 132         [  --with-cflags           Specify additional flags to pass to compiler],
 133         [
 134                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 135                     test "x${withval}" != "xyes"; then
 136                         CFLAGS="$CFLAGS $withval"
 137                 fi
 138         ]
 139 )
 140 AC_ARG_WITH(cppflags,
 141         [  --with-cppflags         Specify additional flags to pass to preprocessor] ,
 142         [
 143                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 144                     test "x${withval}" != "xyes"; then
 145                         CPPFLAGS="$CPPFLAGS $withval"
 146                 fi
 147         ]
 148 )
 149 AC_ARG_WITH(ldflags,
 150         [  --with-ldflags          Specify additional flags to pass to linker],
 151         [
 152                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 153                     test "x${withval}" != "xyes"; then
 154                         LDFLAGS="$LDFLAGS $withval"
 155                 fi
 156         ]
 157 )
 158 AC_ARG_WITH(libs,
 159         [  --with-libs             Specify additional libraries to link with],
 160         [
 161                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 162                     test "x${withval}" != "xyes"; then
 163                         LIBS="$LIBS $withval"
 164                 fi
 165         ]
 166 )
 167 AC_ARG_WITH(Werror,
 168         [  --with-Werror           Build main code with -Werror],
 169         [
 170                 if test -n "$withval"  &&  test "x$withval" != "xno"; then
 171                         werror_flags="-Werror"
 172                         if test "x${withval}" != "xyes"; then
 173                                 werror_flags="$withval"
 174                         fi
 175                 fi
 176         ]
 177 )
 178
 179 AC_CHECK_HEADERS( \
 180         bstring.h \
 181         crypt.h \
 182         crypto/sha2.h \
 183         dirent.h \
 184         endian.h \
 185         features.h \
 186         fcntl.h \
 187         floatingpoint.h \
 188         getopt.h \
 189         glob.h \
 190         ia.h \
 191         iaf.h \
 192         limits.h \
 193         login.h \
 194         maillock.h \
 195         ndir.h \
 196         net/if_tun.h \
 197         netdb.h \
 198         netgroup.h \
 199         pam/pam_appl.h \
 200         paths.h \
 201         pty.h \
 202         readpassphrase.h \
 203         rpc/types.h \
 204         security/pam_appl.h \
 205         sha2.h \
 206         shadow.h \
 207         stddef.h \
 208         stdint.h \
 209         string.h \
 210         strings.h \
 211         sys/audit.h \
 212         sys/bitypes.h \
 213         sys/bsdtty.h \
 214         sys/cdefs.h \
 215         sys/dir.h \
 216         sys/mman.h \
 217         sys/ndir.h \
 218         sys/prctl.h \
 219         sys/pstat.h \
 220         sys/select.h \
 221         sys/stat.h \
 222         sys/stream.h \
 223         sys/stropts.h \
 224         sys/strtio.h \
 225         sys/sysmacros.h \
 226         sys/time.h \
 227         sys/timers.h \
 228         sys/un.h \
 229         time.h \
 230         tmpdir.h \
 231         ttyent.h \
 232         unistd.h \
 233         usersec.h \
 234         util.h \
 235         utime.h \
 236         utmp.h \
 237         utmpx.h \
 238         vis.h \
 239 )
 240
 241 # lastlog.h requires sys/time.h to be included first on Solaris
 242 AC_CHECK_HEADERS(lastlog.h, [], [], [
 243 #ifdef HAVE_SYS_TIME_H
 244 # include <sys/time.h>
 245 #endif
 246 ])
 247
 248 # sys/ptms.h requires sys/stream.h to be included first on Solaris
 249 AC_CHECK_HEADERS(sys/ptms.h, [], [], [
 250 #ifdef HAVE_SYS_STREAM_H
 251 # include <sys/stream.h>
 252 #endif
 253 ])
 254
 255 # login_cap.h requires sys/types.h on NetBSD
 256 AC_CHECK_HEADERS(login_cap.h, [], [], [
 257 #include <sys/types.h>
 258 ])
 259
 260 # Messages for features tested for in target-specific section
 261 SIA_MSG="no"
 262 SPC_MSG="no"
 263
 264 # Check for some target-specific stuff
 265 case "$host" in
 266 *-*-aix*)
 267         # Some versions of VAC won't allow macro redefinitions at
 268         # -qlanglevel=ansi, and autoconf 2.60 sometimes insists on using that
 269         # particularly with older versions of vac or xlc.
 270         # It also throws errors about null macro argments, but these are
 271         # not fatal.
 272         AC_MSG_CHECKING(if compiler allows macro redefinitions)
 273         AC_COMPILE_IFELSE(
 274             [AC_LANG_SOURCE([[
 275 #define testmacro foo
 276 #define testmacro bar
 277 int main(void) { exit(0); }
 278             ]])],
 279             [ AC_MSG_RESULT(yes) ],
 280             [ AC_MSG_RESULT(no)
 281               CC="`echo $CC | sed 's/-qlanglvl\=ansi//g'`"
 282               LD="`echo $LD | sed 's/-qlanglvl\=ansi//g'`"
 283               CFLAGS="`echo $CFLAGS | sed 's/-qlanglvl\=ansi//g'`"
 284               CPPFLAGS="`echo $CPPFLAGS | sed 's/-qlanglvl\=ansi//g'`"
 285             ]
 286         )
 287
 288         AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
 289         if (test -z "$blibpath"); then
 290                 blibpath="/usr/lib:/lib"
 291         fi
 292         saved_LDFLAGS="$LDFLAGS"
 293         if test "$GCC" = "yes"; then
 294                 flags="-Wl,-blibpath: -Wl,-rpath, -blibpath:"
 295         else
 296                 flags="-blibpath: -Wl,-blibpath: -Wl,-rpath,"
 297         fi
 298         for tryflags in $flags ;do
 299                 if (test -z "$blibflags"); then
 300                         LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
 301                         AC_TRY_LINK([], [], [blibflags=$tryflags])
 302                 fi
 303         done
 304         if (test -z "$blibflags"); then
 305                 AC_MSG_RESULT(not found)
 306                 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
 307         else
 308                 AC_MSG_RESULT($blibflags)
 309         fi
 310         LDFLAGS="$saved_LDFLAGS"
 311         dnl Check for authenticate.  Might be in libs.a on older AIXes
 312         AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE, 1,
 313                 [Define if you want to enable AIX4's authenticate function])],
 314                 [AC_CHECK_LIB(s,authenticate,
 315                         [ AC_DEFINE(WITH_AIXAUTHENTICATE)
 316                                 LIBS="$LIBS -ls"
 317                         ])
 318                 ])
 319         dnl Check for various auth function declarations in headers.
 320         AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
 321             passwdexpired, setauthdb], , , [#include <usersec.h>])
 322         dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
 323         AC_CHECK_DECLS(loginfailed,
 324                  [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
 325                   AC_TRY_COMPILE(
 326                         [#include <usersec.h>],
 327                         [(void)loginfailed("user","host","tty",0);],
 328                         [AC_MSG_RESULT(yes)
 329                          AC_DEFINE(AIX_LOGINFAILED_4ARG, 1,
 330                                 [Define if your AIX loginfailed() function
 331                                 takes 4 arguments (AIX >= 5.2)])],
 332                         [AC_MSG_RESULT(no)]
 333                 )],
 334                 [],
 335                 [#include <usersec.h>]
 336         )
 337         AC_CHECK_FUNCS(setauthdb)
 338         AC_CHECK_DECL(F_CLOSEM,
 339             AC_DEFINE(HAVE_FCNTL_CLOSEM, 1, [Use F_CLOSEM fcntl for closefrom]),
 340             [],
 341             [ #include <limits.h>
 342               #include <fcntl.h> ]
 343         )
 344         check_for_aix_broken_getaddrinfo=1
 345         AC_DEFINE(BROKEN_REALPATH, 1, [Define if you have a broken realpath.])
 346         AC_DEFINE(SETEUID_BREAKS_SETUID, 1,
 347             [Define if your platform breaks doing a seteuid before a setuid])
 348         AC_DEFINE(BROKEN_SETREUID, 1, [Define if your setreuid() is broken])
 349         AC_DEFINE(BROKEN_SETREGID, 1, [Define if your setregid() is broken])
 350         dnl AIX handles lastlog as part of its login message
 351         AC_DEFINE(DISABLE_LASTLOG, 1, [Define if you don't want to use lastlog])
 352         AC_DEFINE(LOGIN_NEEDS_UTMPX, 1,
 353                 [Some systems need a utmpx entry for /bin/login to work])
 354         AC_DEFINE(SPT_TYPE,SPT_REUSEARGV,
 355                 [Define to a Set Process Title type if your system is
 356                 supported by bsd-setproctitle.c])
 357         AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
 358             [AIX 5.2 and 5.3 (and presumably newer) require this])
 359         AC_DEFINE(PTY_ZEROREAD, 1, [read(1) can return 0 for a non-closed fd])
 360         ;;
 361 *-*-cygwin*)
 362         check_for_libcrypt_later=1
 363         LIBS="$LIBS /usr/lib/textmode.o"
 364         AC_DEFINE(HAVE_CYGWIN, 1, [Define if you are on Cygwin])
 365         AC_DEFINE(USE_PIPES, 1, [Use PIPES instead of a socketpair()])
 366         AC_DEFINE(DISABLE_SHADOW, 1,
 367                 [Define if you want to disable shadow passwords])
 368         AC_DEFINE(IP_TOS_IS_BROKEN, 1,
 369                 [Define if your system choked on IP TOS setting])
 370         AC_DEFINE(NO_X11_UNIX_SOCKETS, 1,
 371                 [Define if X11 doesn't support AF_UNIX sockets on that system])
 372         AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT, 1,
 373                 [Define if the concept of ports only accessible to
 374                 superusers isn't known])
 375         AC_DEFINE(DISABLE_FD_PASSING, 1,
 376                 [Define if your platform needs to skip post auth
 377                 file descriptor passing])
 378         ;;
 379 *-*-dgux*)
 380         AC_DEFINE(IP_TOS_IS_BROKEN)
 381         AC_DEFINE(SETEUID_BREAKS_SETUID)
 382         AC_DEFINE(BROKEN_SETREUID)
 383         AC_DEFINE(BROKEN_SETREGID)
 384         ;;
 385 *-*-darwin*)
 386         AC_MSG_CHECKING(if we have working getaddrinfo)
 387         AC_TRY_RUN([#include <mach-o/dyld.h>
 388 main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
 389                 exit(0);
 390         else
 391                 exit(1);
 392 }], [AC_MSG_RESULT(working)],
 393         [AC_MSG_RESULT(buggy)
 394         AC_DEFINE(BROKEN_GETADDRINFO, 1, [getaddrinfo is broken (if present)])],
 395         [AC_MSG_RESULT(assume it is working)])
 396         AC_DEFINE(SETEUID_BREAKS_SETUID)
 397         AC_DEFINE(BROKEN_SETREUID)
 398         AC_DEFINE(BROKEN_SETREGID)
 399         AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1,
 400                 [Define if your resolver libs need this for getrrsetbyname])
 401         AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
 402         AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
 403             [Use tunnel device compatibility to OpenBSD])
 404         AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
 405             [Prepend the address family to IP tunnel traffic])
 406         ;;
 407 *-*-dragonfly*)
 408         SSHDLIBS="$SSHDLIBS -lcrypt"
 409         ;;
 410 *-*-hpux*)
 411         # first we define all of the options common to all HP-UX releases
 412         CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
 413         IPADDR_IN_DISPLAY=yes
 414         AC_DEFINE(USE_PIPES)
 415         AC_DEFINE(LOGIN_NO_ENDOPT, 1,
 416             [Define if your login program cannot handle end of options ("--")])
 417         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 418         AC_DEFINE(LOCKED_PASSWD_STRING, "*",
 419                 [String used in /etc/passwd to denote locked account])
 420         AC_DEFINE(SPT_TYPE,SPT_PSTAT)
 421         MAIL="/var/mail/username"
 422         LIBS="$LIBS -lsec"
 423         AC_CHECK_LIB(xnet, t_error, ,
 424             AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
 425
 426         # next, we define all of the options specific to major releases
 427         case "$host" in
 428         *-*-hpux10*)
 429                 if test -z "$GCC"; then
 430                         CFLAGS="$CFLAGS -Ae"
 431                 fi
 432                 ;;
 433         *-*-hpux11*)
 434                 AC_DEFINE(PAM_SUN_CODEBASE, 1,
 435                         [Define if you are using Solaris-derived PAM which
 436                         passes pam_messages to the conversation function
 437                         with an extra level of indirection])
 438                 AC_DEFINE(DISABLE_UTMP, 1,
 439                         [Define if you don't want to use utmp])
 440                 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
 441                 check_for_hpux_broken_getaddrinfo=1
 442                 check_for_conflicting_getspnam=1
 443                 ;;
 444         esac
 445
 446         # lastly, we define options specific to minor releases
 447         case "$host" in
 448         *-*-hpux10.26)
 449                 AC_DEFINE(HAVE_SECUREWARE, 1,
 450                         [Define if you have SecureWare-based
 451                         protected password database])
 452                 disable_ptmx_check=yes
 453                 LIBS="$LIBS -lsecpw"
 454                 ;;
 455         esac
 456         ;;
 457 *-*-irix5*)
 458         PATH="$PATH:/usr/etc"
 459         AC_DEFINE(BROKEN_INET_NTOA, 1,
 460                 [Define if you system's inet_ntoa is busted
 461                 (e.g. Irix gcc issue)])
 462         AC_DEFINE(SETEUID_BREAKS_SETUID)
 463         AC_DEFINE(BROKEN_SETREUID)
 464         AC_DEFINE(BROKEN_SETREGID)
 465         AC_DEFINE(WITH_ABBREV_NO_TTY, 1,
 466                 [Define if you shouldn't strip 'tty' from your
 467                 ttyname in [uw]tmp])
 468         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 469         ;;
 470 *-*-irix6*)
 471         PATH="$PATH:/usr/etc"
 472         AC_DEFINE(WITH_IRIX_ARRAY, 1,
 473                 [Define if you have/want arrays
 474                 (cluster-wide session managment, not C arrays)])
 475         AC_DEFINE(WITH_IRIX_PROJECT, 1,
 476                 [Define if you want IRIX project management])
 477         AC_DEFINE(WITH_IRIX_AUDIT, 1,
 478                 [Define if you want IRIX audit trails])
 479         AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS, 1,
 480                 [Define if you want IRIX kernel jobs])])
 481         AC_DEFINE(BROKEN_INET_NTOA)
 482         AC_DEFINE(SETEUID_BREAKS_SETUID)
 483         AC_DEFINE(BROKEN_SETREUID)
 484         AC_DEFINE(BROKEN_SETREGID)
 485         AC_DEFINE(BROKEN_UPDWTMPX, 1, [updwtmpx is broken (if present)])
 486         AC_DEFINE(WITH_ABBREV_NO_TTY)
 487         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 488         ;;
 489 *-*-linux*)
 490         no_dev_ptmx=1
 491         check_for_libcrypt_later=1
 492         check_for_openpty_ctty_bug=1
 493         AC_DEFINE(DONT_TRY_OTHER_AF, 1, [Workaround more Linux IPv6 quirks])
 494         AC_DEFINE(PAM_TTY_KLUDGE, 1,
 495                 [Work around problematic Linux PAM modules handling of PAM_TTY])
 496         AC_DEFINE(LOCKED_PASSWD_PREFIX, "!",
 497                 [String used in /etc/passwd to denote locked account])
 498         AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
 499         AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM,
 500                 [Define to whatever link() returns for "not supported"
 501                 if it doesn't return EOPNOTSUPP.])
 502         AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
 503         AC_DEFINE(USE_BTMP)
 504         inet6_default_4in6=yes
 505         case `uname -r` in
 506         1.*|2.0.*)
 507                 AC_DEFINE(BROKEN_CMSG_TYPE, 1,
 508                         [Define if cmsg_type is not passed correctly])
 509                 ;;
 510         esac
 511         # tun(4) forwarding compat code
 512         AC_CHECK_HEADERS(linux/if_tun.h)
 513         if test "x$ac_cv_header_linux_if_tun_h" = "xyes" ; then
 514                 AC_DEFINE(SSH_TUN_LINUX, 1,
 515                     [Open tunnel devices the Linux tun/tap way])
 516                 AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
 517                     [Use tunnel device compatibility to OpenBSD])
 518                 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
 519                     [Prepend the address family to IP tunnel traffic])
 520         fi
 521         ;;
 522 mips-sony-bsd|mips-sony-newsos4)
 523         AC_DEFINE(NEED_SETPGRP, 1, [Need setpgrp to acquire controlling tty])
 524         SONY=1
 525         ;;
 526 *-*-netbsd*)
 527         check_for_libcrypt_before=1
 528         if test "x$withval" != "xno" ; then
 529                 need_dash_r=1
 530         fi
 531         AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
 532         AC_CHECK_HEADER([net/if_tap.h], ,
 533             AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
 534         AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
 535             [Prepend the address family to IP tunnel traffic])
 536         ;;
 537 *-*-freebsd*)
 538         check_for_libcrypt_later=1
 539         AC_DEFINE(LOCKED_PASSWD_PREFIX, "*LOCKED*", [Account locked with pw(1)])
 540         AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
 541         AC_CHECK_HEADER([net/if_tap.h], ,
 542             AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
 543         ;;
 544 *-*-bsdi*)
 545         AC_DEFINE(SETEUID_BREAKS_SETUID)
 546         AC_DEFINE(BROKEN_SETREUID)
 547         AC_DEFINE(BROKEN_SETREGID)
 548         ;;
 549 *-next-*)
 550         conf_lastlog_location="/usr/adm/lastlog"
 551         conf_utmp_location=/etc/utmp
 552         conf_wtmp_location=/usr/adm/wtmp
 553         MAIL=/usr/spool/mail
 554         AC_DEFINE(HAVE_NEXT, 1, [Define if you are on NeXT])
 555         AC_DEFINE(BROKEN_REALPATH)
 556         AC_DEFINE(USE_PIPES)
 557         AC_DEFINE(BROKEN_SAVED_UIDS, 1, [Needed for NeXT])
 558         ;;
 559 *-*-openbsd*)
 560         AC_DEFINE(HAVE_ATTRIBUTE__SENTINEL__, 1, [OpenBSD's gcc has sentinel])
 561         AC_DEFINE(HAVE_ATTRIBUTE__BOUNDED__, 1, [OpenBSD's gcc has bounded])
 562         AC_DEFINE(SSH_TUN_OPENBSD, 1, [Open tunnel devices the OpenBSD way])
 563         AC_DEFINE(SYSLOG_R_SAFE_IN_SIGHAND, 1,
 564             [syslog_r function is safe to use in in a signal handler])
 565         ;;
 566 *-*-solaris*)
 567         if test "x$withval" != "xno" ; then
 568                 need_dash_r=1
 569         fi
 570         AC_DEFINE(PAM_SUN_CODEBASE)
 571         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 572         AC_DEFINE(LOGIN_NEEDS_TERM, 1,
 573                 [Some versions of /bin/login need the TERM supplied
 574                 on the commandline])
 575         AC_DEFINE(PAM_TTY_KLUDGE)
 576         AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
 577                 [Define if pam_chauthtok wants real uid set
 578                 to the unpriv'ed user])
 579         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 580         # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
 581         AC_DEFINE(SSHD_ACQUIRES_CTTY, 1,
 582                 [Define if sshd somehow reacquires a controlling TTY
 583                 after setsid()])
 584         AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd
 585                 in case the name is longer than 8 chars])
 586         external_path_file=/etc/default/login
 587         # hardwire lastlog location (can't detect it on some versions)
 588         conf_lastlog_location="/var/adm/lastlog"
 589         AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
 590         sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
 591         if test "$sol2ver" -ge 8; then
 592                 AC_MSG_RESULT(yes)
 593                 AC_DEFINE(DISABLE_UTMP)
 594                 AC_DEFINE(DISABLE_WTMP, 1,
 595                         [Define if you don't want to use wtmp])
 596         else
 597                 AC_MSG_RESULT(no)
 598         fi
 599         AC_ARG_WITH(solaris-contracts,
 600                 [  --with-solaris-contracts Enable Solaris process contracts (experimental)],
 601                 [
 602                 AC_CHECK_LIB(contract, ct_tmpl_activate,
 603                         [ AC_DEFINE(USE_SOLARIS_PROCESS_CONTRACTS, 1,
 604                                 [Define if you have Solaris process contracts])
 605                           SSHDLIBS="$SSHDLIBS -lcontract"
 606                           AC_SUBST(SSHDLIBS)
 607                           SPC_MSG="yes" ], )
 608                 ],
 609         )
 610         ;;
 611 *-*-sunos4*)
 612         CPPFLAGS="$CPPFLAGS -DSUNOS4"
 613         AC_CHECK_FUNCS(getpwanam)
 614         AC_DEFINE(PAM_SUN_CODEBASE)
 615         conf_utmp_location=/etc/utmp
 616         conf_wtmp_location=/var/adm/wtmp
 617         conf_lastlog_location=/var/adm/lastlog
 618         AC_DEFINE(USE_PIPES)
 619         ;;
 620 *-ncr-sysv*)
 621         LIBS="$LIBS -lc89"
 622         AC_DEFINE(USE_PIPES)
 623         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 624         AC_DEFINE(SETEUID_BREAKS_SETUID)
 625         AC_DEFINE(BROKEN_SETREUID)
 626         AC_DEFINE(BROKEN_SETREGID)
 627         ;;
 628 *-sni-sysv*)
 629         # /usr/ucblib MUST NOT be searched on ReliantUNIX
 630         AC_CHECK_LIB(dl, dlsym, ,)
 631         # -lresolv needs to be at the end of LIBS or DNS lookups break
 632         AC_CHECK_LIB(resolv, res_query, [ LIBS="$LIBS -lresolv" ])
 633         IPADDR_IN_DISPLAY=yes
 634         AC_DEFINE(USE_PIPES)
 635         AC_DEFINE(IP_TOS_IS_BROKEN)
 636         AC_DEFINE(SETEUID_BREAKS_SETUID)
 637         AC_DEFINE(BROKEN_SETREUID)
 638         AC_DEFINE(BROKEN_SETREGID)
 639         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 640         external_path_file=/etc/default/login
 641         # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
 642         # Attention: always take care to bind libsocket and libnsl before libc,
 643         # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
 644         ;;
 645 # UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
 646 *-*-sysv4.2*)
 647         AC_DEFINE(USE_PIPES)
 648         AC_DEFINE(SETEUID_BREAKS_SETUID)
 649         AC_DEFINE(BROKEN_SETREUID)
 650         AC_DEFINE(BROKEN_SETREGID)
 651         AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
 652         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 653         ;;
 654 # UnixWare 7.x, OpenUNIX 8
 655 *-*-sysv5*)
 656         check_for_libcrypt_later=1
 657         AC_DEFINE(UNIXWARE_LONG_PASSWORDS, 1, [Support passwords > 8 chars])
 658         AC_DEFINE(USE_PIPES)
 659         AC_DEFINE(SETEUID_BREAKS_SETUID)
 660         AC_DEFINE(BROKEN_SETREUID)
 661         AC_DEFINE(BROKEN_SETREGID)
 662         AC_DEFINE(PASSWD_NEEDS_USERNAME)
 663         case "$host" in
 664         *-*-sysv5SCO_SV*)       # SCO OpenServer 6.x
 665                 TEST_SHELL=/u95/bin/sh
 666                 AC_DEFINE(BROKEN_LIBIAF, 1,
 667                         [ia_uinfo routines not supported by OS yet])
 668                 AC_DEFINE(BROKEN_UPDWTMPX)
 669                 ;;
 670         *)      AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 671                 ;;
 672         esac
 673         ;;
 674 *-*-sysv*)
 675         ;;
 676 # SCO UNIX and OEM versions of SCO UNIX
 677 *-*-sco3.2v4*)
 678         AC_MSG_ERROR("This Platform is no longer supported.")
 679         ;;
 680 # SCO OpenServer 5.x
 681 *-*-sco3.2v5*)
 682         if test -z "$GCC"; then
 683                 CFLAGS="$CFLAGS -belf"
 684         fi
 685         LIBS="$LIBS -lprot -lx -ltinfo -lm"
 686         no_dev_ptmx=1
 687         AC_DEFINE(USE_PIPES)
 688         AC_DEFINE(HAVE_SECUREWARE)
 689         AC_DEFINE(DISABLE_SHADOW)
 690         AC_DEFINE(DISABLE_FD_PASSING)
 691         AC_DEFINE(SETEUID_BREAKS_SETUID)
 692         AC_DEFINE(BROKEN_SETREUID)
 693         AC_DEFINE(BROKEN_SETREGID)
 694         AC_DEFINE(WITH_ABBREV_NO_TTY)
 695         AC_DEFINE(BROKEN_UPDWTMPX)
 696         AC_DEFINE(PASSWD_NEEDS_USERNAME)
 697         AC_CHECK_FUNCS(getluid setluid)
 698         MANTYPE=man
 699         TEST_SHELL=ksh
 700         ;;
 701 *-*-unicosmk*)
 702         AC_DEFINE(NO_SSH_LASTLOG, 1,
 703                 [Define if you don't want to use lastlog in session.c])
 704         AC_DEFINE(SETEUID_BREAKS_SETUID)
 705         AC_DEFINE(BROKEN_SETREUID)
 706         AC_DEFINE(BROKEN_SETREGID)
 707         AC_DEFINE(USE_PIPES)
 708         AC_DEFINE(DISABLE_FD_PASSING)
 709         LDFLAGS="$LDFLAGS"
 710         LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
 711         MANTYPE=cat
 712         ;;
 713 *-*-unicosmp*)
 714         AC_DEFINE(SETEUID_BREAKS_SETUID)
 715         AC_DEFINE(BROKEN_SETREUID)
 716         AC_DEFINE(BROKEN_SETREGID)
 717         AC_DEFINE(WITH_ABBREV_NO_TTY)
 718         AC_DEFINE(USE_PIPES)
 719         AC_DEFINE(DISABLE_FD_PASSING)
 720         LDFLAGS="$LDFLAGS"
 721         LIBS="$LIBS -lgen -lacid -ldb"
 722         MANTYPE=cat
 723         ;;
 724 *-*-unicos*)
 725         AC_DEFINE(SETEUID_BREAKS_SETUID)
 726         AC_DEFINE(BROKEN_SETREUID)
 727         AC_DEFINE(BROKEN_SETREGID)
 728         AC_DEFINE(USE_PIPES)
 729         AC_DEFINE(DISABLE_FD_PASSING)
 730         AC_DEFINE(NO_SSH_LASTLOG)
 731         LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
 732         LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
 733         MANTYPE=cat
 734         ;;
 735 *-dec-osf*)
 736         AC_MSG_CHECKING(for Digital Unix SIA)
 737         no_osfsia=""
 738         AC_ARG_WITH(osfsia,
 739                 [  --with-osfsia           Enable Digital Unix SIA],
 740                 [
 741                         if test "x$withval" = "xno" ; then
 742                                 AC_MSG_RESULT(disabled)
 743                                 no_osfsia=1
 744                         fi
 745                 ],
 746         )
 747         if test -z "$no_osfsia" ; then
 748                 if test -f /etc/sia/matrix.conf; then
 749                         AC_MSG_RESULT(yes)
 750                         AC_DEFINE(HAVE_OSF_SIA, 1,
 751                                 [Define if you have Digital Unix Security
 752                                 Integration Architecture])
 753                         AC_DEFINE(DISABLE_LOGIN, 1,
 754                                 [Define if you don't want to use your
 755                                 system's login() call])
 756                         AC_DEFINE(DISABLE_FD_PASSING)
 757                         LIBS="$LIBS -lsecurity -ldb -lm -laud"
 758                         SIA_MSG="yes"
 759                 else
 760                         AC_MSG_RESULT(no)
 761                         AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin",
 762                           [String used in /etc/passwd to denote locked account])
 763                 fi
 764         fi
 765         AC_DEFINE(BROKEN_GETADDRINFO)
 766         AC_DEFINE(SETEUID_BREAKS_SETUID)
 767         AC_DEFINE(BROKEN_SETREUID)
 768         AC_DEFINE(BROKEN_SETREGID)
 769         ;;
 770
 771 *-*-nto-qnx*)
 772         AC_DEFINE(USE_PIPES)
 773         AC_DEFINE(NO_X11_UNIX_SOCKETS)
 774         AC_DEFINE(MISSING_NFDBITS, 1, [Define on *nto-qnx systems])
 775         AC_DEFINE(MISSING_HOWMANY, 1, [Define on *nto-qnx systems])
 776         AC_DEFINE(MISSING_FD_MASK, 1, [Define on *nto-qnx systems])
 777         AC_DEFINE(DISABLE_LASTLOG)
 778         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 779         enable_etc_default_login=no     # has incompatible /etc/default/login
 780         ;;
 781
 782 *-*-ultrix*)
 783         AC_DEFINE(BROKEN_GETGROUPS, 1, [getgroups(0,NULL) will return -1])
 784         AC_DEFINE(BROKEN_MMAP, 1, [Ultrix mmap can't map files])
 785         AC_DEFINE(NEED_SETPGRP)
 786         AC_DEFINE(HAVE_SYS_SYSLOG_H, 1, [Force use of sys/syslog.h on Ultrix])
 787         ;;
 788
 789 *-*-lynxos)
 790         CFLAGS="$CFLAGS -D__NO_INCLUDE_WARN__"
 791         AC_DEFINE(MISSING_HOWMANY)
 792         AC_DEFINE(BROKEN_SETVBUF, 1, [LynxOS has broken setvbuf() implementation])
 793         ;;
 794 esac
 795
 796 AC_MSG_CHECKING(compiler and flags for sanity)
 797 AC_RUN_IFELSE(
 798         [AC_LANG_SOURCE([
 799 #include <stdio.h>
 800 int main(){exit(0);}
 801         ])],
 802         [       AC_MSG_RESULT(yes) ],
 803         [
 804                 AC_MSG_RESULT(no)
 805                 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
 806         ],
 807         [       AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
 808 )
 809
 810 dnl Checks for header files.
 811 # Checks for libraries.
 812 AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
 813 AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
 814
 815 dnl IRIX and Solaris 2.5.1 have dirname() in libgen
 816 AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
 817         AC_CHECK_LIB(gen, dirname,[
 818                 AC_CACHE_CHECK([for broken dirname],
 819                         ac_cv_have_broken_dirname, [
 820                         save_LIBS="$LIBS"
 821                         LIBS="$LIBS -lgen"
 822                         AC_RUN_IFELSE(
 823                                 [AC_LANG_SOURCE([[
 824 #include <libgen.h>
 825 #include <string.h>
 826
 827 int main(int argc, char **argv) {
 828     char *s, buf[32];
 829
 830     strncpy(buf,"/etc", 32);
 831     s = dirname(buf);
 832     if (!s || strncmp(s, "/", 32) != 0) {
 833         exit(1);
 834     } else {
 835         exit(0);
 836     }
 837 }
 838                                 ]])],
 839                                 [ ac_cv_have_broken_dirname="no" ],
 840                                 [ ac_cv_have_broken_dirname="yes" ],
 841                                 [ ac_cv_have_broken_dirname="no" ],
 842                         )
 843                         LIBS="$save_LIBS"
 844                 ])
 845                 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
 846                         LIBS="$LIBS -lgen"
 847                         AC_DEFINE(HAVE_DIRNAME)
 848                         AC_CHECK_HEADERS(libgen.h)
 849                 fi
 850         ])
 851 ])
 852
 853 AC_CHECK_FUNC(getspnam, ,
 854         AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
 855 AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME, 1,
 856         [Define if you have the basename function.]))
 857
 858 dnl zlib is required
 859 AC_ARG_WITH(zlib,
 860         [  --with-zlib=PATH        Use zlib in PATH],
 861         [ if test "x$withval" = "xno" ; then
 862                 AC_MSG_ERROR([*** zlib is required ***])
 863           elif test "x$withval" != "xyes"; then
 864                 if test -d "$withval/lib"; then
 865                         if test -n "${need_dash_r}"; then
 866                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
 867                         else
 868                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
 869                         fi
 870                 else
 871                         if test -n "${need_dash_r}"; then
 872                                 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
 873                         else
 874                                 LDFLAGS="-L${withval} ${LDFLAGS}"
 875                         fi
 876                 fi
 877                 if test -d "$withval/include"; then
 878                         CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
 879                 else
 880                         CPPFLAGS="-I${withval} ${CPPFLAGS}"
 881                 fi
 882         fi ]
 883 )
 884
 885 AC_CHECK_LIB(z, deflate, ,
 886         [
 887                 saved_CPPFLAGS="$CPPFLAGS"
 888                 saved_LDFLAGS="$LDFLAGS"
 889                 save_LIBS="$LIBS"
 890                 dnl Check default zlib install dir
 891                 if test -n "${need_dash_r}"; then
 892                         LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
 893                 else
 894                         LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
 895                 fi
 896                 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
 897                 LIBS="$LIBS -lz"
 898                 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
 899                         [
 900                                 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
 901                         ]
 902                 )
 903         ]
 904 )
 905 AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
 906
 907 AC_ARG_WITH(zlib-version-check,
 908         [  --without-zlib-version-check Disable zlib version check],
 909         [  if test "x$withval" = "xno" ; then
 910                 zlib_check_nonfatal=1
 911            fi
 912         ]
 913 )
 914
 915 AC_MSG_CHECKING(for possibly buggy zlib)
 916 AC_RUN_IFELSE([AC_LANG_SOURCE([[
 917 #include <stdio.h>
 918 #include <zlib.h>
 919 int main()
 920 {
 921         int a=0, b=0, c=0, d=0, n, v;
 922         n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
 923         if (n != 3 && n != 4)
 924                 exit(1);
 925         v = a*1000000 + b*10000 + c*100 + d;
 926         fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
 927
 928         /* 1.1.4 is OK */
 929         if (a == 1 && b == 1 && c >= 4)
 930                 exit(0);
 931
 932         /* 1.2.3 and up are OK */
 933         if (v >= 1020300)
 934                 exit(0);
 935
 936         exit(2);
 937 }
 938         ]])],
 939         AC_MSG_RESULT(no),
 940         [ AC_MSG_RESULT(yes)
 941           if test -z "$zlib_check_nonfatal" ; then
 942                 AC_MSG_ERROR([*** zlib too old - check config.log ***
 943 Your reported zlib version has known security problems.  It's possible your
 944 vendor has fixed these problems without changing the version number.  If you
 945 are sure this is the case, you can disable the check by running
 946 "./configure --without-zlib-version-check".
 947 If you are in doubt, upgrade zlib to version 1.2.3 or greater.
 948 See http://www.gzip.org/zlib/ for details.])
 949           else
 950                 AC_MSG_WARN([zlib version may have security problems])
 951           fi
 952         ],
 953         [       AC_MSG_WARN([cross compiling: not checking zlib version]) ]
 954 )
 955
 956 dnl UnixWare 2.x
 957 AC_CHECK_FUNC(strcasecmp,
 958         [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
 959 )
 960 AC_CHECK_FUNCS(utimes,
 961         [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
 962                                         LIBS="$LIBS -lc89"]) ]
 963 )
 964
 965 dnl    Checks for libutil functions
 966 AC_CHECK_HEADERS(libutil.h)
 967 AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN, 1,
 968         [Define if your libraries define login()])])
 969 AC_CHECK_FUNCS(logout updwtmp logwtmp)
 970
 971 AC_FUNC_STRFTIME
 972
 973 # Check for ALTDIRFUNC glob() extension
 974 AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
 975 AC_EGREP_CPP(FOUNDIT,
 976         [
 977                 #include <glob.h>
 978                 #ifdef GLOB_ALTDIRFUNC
 979                 FOUNDIT
 980                 #endif
 981         ],
 982         [
 983                 AC_DEFINE(GLOB_HAS_ALTDIRFUNC, 1,
 984                         [Define if your system glob() function has
 985                         the GLOB_ALTDIRFUNC extension])
 986                 AC_MSG_RESULT(yes)
 987         ],
 988         [
 989                 AC_MSG_RESULT(no)
 990         ]
 991 )
 992
 993 # Check for g.gl_matchc glob() extension
 994 AC_MSG_CHECKING(for gl_matchc field in glob_t)
 995 AC_TRY_COMPILE(
 996         [ #include <glob.h> ],
 997         [glob_t g; g.gl_matchc = 1;],
 998         [
 999                 AC_DEFINE(GLOB_HAS_GL_MATCHC, 1,
1000                         [Define if your system glob() function has
1001                         gl_matchc options in glob_t])
1002                 AC_MSG_RESULT(yes)
1003         ],
1004         [
1005                 AC_MSG_RESULT(no)
1006         ]
1007 )
1008
1009 AC_CHECK_DECLS(GLOB_NOMATCH, , , [#include <glob.h>])
1010
1011 AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
1012 AC_RUN_IFELSE(
1013         [AC_LANG_SOURCE([[
1014 #include <sys/types.h>
1015 #include <dirent.h>
1016 int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
1017         ]])],
1018         [AC_MSG_RESULT(yes)],
1019         [
1020                 AC_MSG_RESULT(no)
1021                 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME, 1,
1022                         [Define if your struct dirent expects you to
1023                         allocate extra space for d_name])
1024         ],
1025         [
1026                 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
1027                 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
1028         ]
1029 )
1030
1031 AC_MSG_CHECKING([for /proc/pid/fd directory])
1032 if test -d "/proc/$$/fd" ; then
1033         AC_DEFINE(HAVE_PROC_PID, 1, [Define if you have /proc/$pid/fd])
1034         AC_MSG_RESULT(yes)
1035 else
1036         AC_MSG_RESULT(no)
1037 fi
1038
1039 # Check whether user wants S/Key support
1040 SKEY_MSG="no"
1041 AC_ARG_WITH(skey,
1042         [  --with-skey[[=PATH]]      Enable S/Key support (optionally in PATH)],
1043         [
1044                 if test "x$withval" != "xno" ; then
1045
1046                         if test "x$withval" != "xyes" ; then
1047                                 CPPFLAGS="$CPPFLAGS -I${withval}/include"
1048                                 LDFLAGS="$LDFLAGS -L${withval}/lib"
1049                         fi
1050
1051                         AC_DEFINE(SKEY, 1, [Define if you want S/Key support])
1052                         LIBS="-lskey $LIBS"
1053                         SKEY_MSG="yes"
1054
1055                         AC_MSG_CHECKING([for s/key support])
1056                         AC_LINK_IFELSE(
1057                                 [AC_LANG_SOURCE([[
1058 #include <stdio.h>
1059 #include <skey.h>
1060 int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
1061                                 ]])],
1062                                 [AC_MSG_RESULT(yes)],
1063                                 [
1064                                         AC_MSG_RESULT(no)
1065                                         AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
1066                                 ])
1067                         AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
1068                         AC_TRY_COMPILE(
1069                                 [#include <stdio.h>
1070                                  #include <skey.h>],
1071                                 [(void)skeychallenge(NULL,"name","",0);],
1072                                 [AC_MSG_RESULT(yes)
1073                                  AC_DEFINE(SKEYCHALLENGE_4ARG, 1,
1074                                         [Define if your skeychallenge()
1075                                         function takes 4 arguments (NetBSD)])],
1076                                 [AC_MSG_RESULT(no)]
1077                         )
1078                 fi
1079         ]
1080 )
1081
1082 # Check whether user wants TCP wrappers support
1083 TCPW_MSG="no"
1084 AC_ARG_WITH(tcp-wrappers,
1085         [  --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
1086         [
1087                 if test "x$withval" != "xno" ; then
1088                         saved_LIBS="$LIBS"
1089                         saved_LDFLAGS="$LDFLAGS"
1090                         saved_CPPFLAGS="$CPPFLAGS"
1091                         if test -n "${withval}" && \
1092                             test "x${withval}" != "xyes"; then
1093                                 if test -d "${withval}/lib"; then
1094                                         if test -n "${need_dash_r}"; then
1095                                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1096                                         else
1097                                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1098                                         fi
1099                                 else
1100                                         if test -n "${need_dash_r}"; then
1101                                                 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1102                                         else
1103                                                 LDFLAGS="-L${withval} ${LDFLAGS}"
1104                                         fi
1105                                 fi
1106                                 if test -d "${withval}/include"; then
1107                                         CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1108                                 else
1109                                         CPPFLAGS="-I${withval} ${CPPFLAGS}"
1110                                 fi
1111                         fi
1112                         LIBWRAP="-lwrap"
1113                         LIBS="$LIBWRAP $LIBS"
1114                         AC_MSG_CHECKING(for libwrap)
1115                         AC_TRY_LINK(
1116                                 [
1117 #include <sys/types.h>
1118 #include <sys/socket.h>
1119 #include <netinet/in.h>
1120 #include <tcpd.h>
1121                                         int deny_severity = 0, allow_severity = 0;
1122                                 ],
1123                                 [hosts_access(0);],
1124                                 [
1125                                         AC_MSG_RESULT(yes)
1126                                         AC_DEFINE(LIBWRAP, 1,
1127                                                 [Define if you want
1128                                                 TCP Wrappers support])
1129                                         AC_SUBST(LIBWRAP)
1130                                         TCPW_MSG="yes"
1131                                 ],
1132                                 [
1133                                         AC_MSG_ERROR([*** libwrap missing])
1134                                 ]
1135                         )
1136                         LIBS="$saved_LIBS"
1137                 fi
1138         ]
1139 )
1140
1141 # Check whether user wants libedit support
1142 LIBEDIT_MSG="no"
1143 AC_ARG_WITH(libedit,
1144         [  --with-libedit[[=PATH]]   Enable libedit support for sftp],
1145         [ if test "x$withval" != "xno" ; then
1146                 if test "x$withval" != "xyes"; then
1147                         CPPFLAGS="$CPPFLAGS -I${withval}/include"
1148                         if test -n "${need_dash_r}"; then
1149                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1150                         else
1151                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1152                         fi
1153                 fi
1154                 AC_CHECK_LIB(edit, el_init,
1155                         [ AC_DEFINE(USE_LIBEDIT, 1, [Use libedit for sftp])
1156                           LIBEDIT="-ledit -lcurses"
1157                           LIBEDIT_MSG="yes"
1158                           AC_SUBST(LIBEDIT)
1159                         ],
1160                         [ AC_MSG_ERROR(libedit not found) ],
1161                         [ -lcurses ]
1162                 )
1163                 AC_MSG_CHECKING(if libedit version is compatible)
1164                 AC_COMPILE_IFELSE(
1165                     [AC_LANG_SOURCE([[
1166 #include <histedit.h>
1167 int main(void)
1168 {
1169         int i = H_SETSIZE;
1170         el_init("", NULL, NULL, NULL);
1171         exit(0);
1172 }
1173                     ]])],
1174                     [ AC_MSG_RESULT(yes) ],
1175                     [ AC_MSG_RESULT(no)
1176                       AC_MSG_ERROR(libedit version is not compatible) ]
1177                 )
1178         fi ]
1179 )
1180
1181 AUDIT_MODULE=none
1182 AC_ARG_WITH(audit,
1183         [  --with-audit=module     Enable EXPERIMENTAL audit support (modules=debug,bsm)],
1184         [
1185           AC_MSG_CHECKING(for supported audit module)
1186           case "$withval" in
1187           bsm)
1188                 AC_MSG_RESULT(bsm)
1189                 AUDIT_MODULE=bsm
1190                 dnl    Checks for headers, libs and functions
1191                 AC_CHECK_HEADERS(bsm/audit.h, [],
1192                     [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)],
1193                     [
1194 #ifdef HAVE_TIME_H
1195 # include <time.h>
1196 #endif
1197                     ]
1198 )
1199                 AC_CHECK_LIB(bsm, getaudit, [],
1200                     [AC_MSG_ERROR(BSM enabled and required library not found)])
1201                 AC_CHECK_FUNCS(getaudit, [],
1202                     [AC_MSG_ERROR(BSM enabled and required function not found)])
1203                 # These are optional
1204                 AC_CHECK_FUNCS(getaudit_addr)
1205                 AC_DEFINE(USE_BSM_AUDIT, 1, [Use BSM audit module])
1206                 ;;
1207           debug)
1208                 AUDIT_MODULE=debug
1209                 AC_MSG_RESULT(debug)
1210                 AC_DEFINE(SSH_AUDIT_EVENTS, 1, Use audit debugging module)
1211                 ;;
1212           no)
1213                 AC_MSG_RESULT(no)
1214                 ;;
1215           *)
1216                 AC_MSG_ERROR([Unknown audit module $withval])
1217                 ;;
1218         esac ]
1219 )
1220
1221 dnl    Checks for library functions. Please keep in alphabetical order
1222 AC_CHECK_FUNCS( \
1223         arc4random \
1224         asprintf \
1225         b64_ntop \
1226         __b64_ntop \
1227         b64_pton \
1228         __b64_pton \
1229         bcopy \
1230         bindresvport_sa \
1231         clock \
1232         closefrom \
1233         dirfd \
1234         fchmod \
1235         fchown \
1236         freeaddrinfo \
1237         futimes \
1238         getaddrinfo \
1239         getcwd \
1240         getgrouplist \
1241         getnameinfo \
1242         getopt \
1243         getpeereid \
1244         _getpty \
1245         getrlimit \
1246         getttyent \
1247         glob \
1248         inet_aton \
1249         inet_ntoa \
1250         inet_ntop \
1251         innetgr \
1252         login_getcapbool \
1253         md5_crypt \
1254         memmove \
1255         mkdtemp \
1256         mmap \
1257         ngetaddrinfo \
1258         nsleep \
1259         ogetaddrinfo \
1260         openlog_r \
1261         openpty \
1262         prctl \
1263         pstat \
1264         readpassphrase \
1265         realpath \
1266         recvmsg \
1267         rresvport_af \
1268         sendmsg \
1269         setdtablesize \
1270         setegid \
1271         setenv \
1272         seteuid \
1273         setgroups \
1274         setlogin \
1275         setpcred \
1276         setproctitle \
1277         setregid \
1278         setreuid \
1279         setrlimit \
1280         setsid \
1281         setvbuf \
1282         sigaction \
1283         sigvec \
1284         snprintf \
1285         socketpair \
1286         strdup \
1287         strerror \
1288         strlcat \
1289         strlcpy \
1290         strmode \
1291         strnvis \
1292         strtonum \
1293         strtoll \
1294         strtoul \
1295         sysconf \
1296         tcgetpgrp \
1297         truncate \
1298         unsetenv \
1299         updwtmpx \
1300         vasprintf \
1301         vhangup \
1302         vsnprintf \
1303         waitpid \
1304 )
1305
1306 # IRIX has a const char return value for gai_strerror()
1307 AC_CHECK_FUNCS(gai_strerror,[
1308         AC_DEFINE(HAVE_GAI_STRERROR)
1309         AC_TRY_COMPILE([
1310 #include <sys/types.h>
1311 #include <sys/socket.h>
1312 #include <netdb.h>
1313
1314 const char *gai_strerror(int);],[
1315 char *str;
1316
1317 str = gai_strerror(0);],[
1318                 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
1319                 [Define if gai_strerror() returns const char *])])])
1320
1321 AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP, 1,
1322         [Some systems put nanosleep outside of libc]))
1323
1324 dnl Make sure prototypes are defined for these before using them.
1325 AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
1326 AC_CHECK_DECL(strsep,
1327         [AC_CHECK_FUNCS(strsep)],
1328         [],
1329         [
1330 #ifdef HAVE_STRING_H
1331 # include <string.h>
1332 #endif
1333         ])
1334
1335 dnl tcsendbreak might be a macro
1336 AC_CHECK_DECL(tcsendbreak,
1337         [AC_DEFINE(HAVE_TCSENDBREAK)],
1338         [AC_CHECK_FUNCS(tcsendbreak)],
1339         [#include <termios.h>]
1340 )
1341
1342 AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
1343
1344 AC_CHECK_DECLS(SHUT_RD, , ,
1345         [
1346 #include <sys/types.h>
1347 #include <sys/socket.h>
1348         ])
1349
1350 AC_CHECK_DECLS(O_NONBLOCK, , ,
1351         [
1352 #include <sys/types.h>
1353 #ifdef HAVE_SYS_STAT_H
1354 # include <sys/stat.h>
1355 #endif
1356 #ifdef HAVE_FCNTL_H
1357 # include <fcntl.h>
1358 #endif
1359         ])
1360
1361 AC_CHECK_DECLS(writev, , , [
1362 #include <sys/types.h>
1363 #include <sys/uio.h>
1364 #include <unistd.h>
1365         ])
1366
1367 AC_CHECK_FUNCS(setresuid, [
1368         dnl Some platorms have setresuid that isn't implemented, test for this
1369         AC_MSG_CHECKING(if setresuid seems to work)
1370         AC_RUN_IFELSE(
1371                 [AC_LANG_SOURCE([[
1372 #include <stdlib.h>
1373 #include <errno.h>
1374 int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
1375                 ]])],
1376                 [AC_MSG_RESULT(yes)],
1377                 [AC_DEFINE(BROKEN_SETRESUID, 1,
1378                         [Define if your setresuid() is broken])
1379                  AC_MSG_RESULT(not implemented)],
1380                 [AC_MSG_WARN([cross compiling: not checking setresuid])]
1381         )
1382 ])
1383
1384 AC_CHECK_FUNCS(setresgid, [
1385         dnl Some platorms have setresgid that isn't implemented, test for this
1386         AC_MSG_CHECKING(if setresgid seems to work)
1387         AC_RUN_IFELSE(
1388                 [AC_LANG_SOURCE([[
1389 #include <stdlib.h>
1390 #include <errno.h>
1391 int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
1392                 ]])],
1393                 [AC_MSG_RESULT(yes)],
1394                 [AC_DEFINE(BROKEN_SETRESGID, 1,
1395                         [Define if your setresgid() is broken])
1396                  AC_MSG_RESULT(not implemented)],
1397                 [AC_MSG_WARN([cross compiling: not checking setresuid])]
1398         )
1399 ])
1400
1401 dnl    Checks for time functions
1402 AC_CHECK_FUNCS(gettimeofday time)
1403 dnl    Checks for utmp functions
1404 AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1405 AC_CHECK_FUNCS(utmpname)
1406 dnl    Checks for utmpx functions
1407 AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1408 AC_CHECK_FUNCS(setutxent utmpxname)
1409
1410 AC_CHECK_FUNC(daemon,
1411         [AC_DEFINE(HAVE_DAEMON, 1, [Define if your libraries define daemon()])],
1412         [AC_CHECK_LIB(bsd, daemon,
1413                 [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
1414 )
1415
1416 AC_CHECK_FUNC(getpagesize,
1417         [AC_DEFINE(HAVE_GETPAGESIZE, 1,
1418                 [Define if your libraries define getpagesize()])],
1419         [AC_CHECK_LIB(ucb, getpagesize,
1420                 [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
1421 )
1422
1423 # Check for broken snprintf
1424 if test "x$ac_cv_func_snprintf" = "xyes" ; then
1425         AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1426         AC_RUN_IFELSE(
1427                 [AC_LANG_SOURCE([[
1428 #include <stdio.h>
1429 int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
1430                 ]])],
1431                 [AC_MSG_RESULT(yes)],
1432                 [
1433                         AC_MSG_RESULT(no)
1434                         AC_DEFINE(BROKEN_SNPRINTF, 1,
1435                                 [Define if your snprintf is busted])
1436                         AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1437                 ],
1438                 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
1439         )
1440 fi
1441
1442 # If we don't have a working asprintf, then we strongly depend on vsnprintf
1443 # returning the right thing on overflow: the number of characters it tried to
1444 # create (as per SUSv3)
1445 if test "x$ac_cv_func_asprintf" != "xyes" && \
1446    test "x$ac_cv_func_vsnprintf" = "xyes" ; then
1447         AC_MSG_CHECKING([whether vsnprintf returns correct values on overflow])
1448         AC_RUN_IFELSE(
1449                 [AC_LANG_SOURCE([[
1450 #include <sys/types.h>
1451 #include <stdio.h>
1452 #include <stdarg.h>
1453
1454 int x_snprintf(char *str,size_t count,const char *fmt,...)
1455 {
1456         size_t ret; va_list ap;
1457         va_start(ap, fmt); ret = vsnprintf(str, count, fmt, ap); va_end(ap);
1458         return ret;
1459 }
1460 int main(void)
1461 {
1462         char x[1];
1463         exit(x_snprintf(x, 1, "%s %d", "hello", 12345) == 11 ? 0 : 1);
1464 } ]])],
1465                 [AC_MSG_RESULT(yes)],
1466                 [
1467                         AC_MSG_RESULT(no)
1468                         AC_DEFINE(BROKEN_SNPRINTF, 1,
1469                                 [Define if your snprintf is busted])
1470                         AC_MSG_WARN([****** Your vsnprintf() function is broken, complain to your vendor])
1471                 ],
1472                 [ AC_MSG_WARN([cross compiling: Assuming working vsnprintf()]) ]
1473         )
1474 fi
1475
1476 # On systems where [v]snprintf is broken, but is declared in stdio,
1477 # check that the fmt argument is const char * or just char *.
1478 # This is only useful for when BROKEN_SNPRINTF
1479 AC_MSG_CHECKING([whether snprintf can declare const char *fmt])
1480 AC_COMPILE_IFELSE([AC_LANG_SOURCE([[#include <stdio.h>
1481            int snprintf(char *a, size_t b, const char *c, ...) { return 0; }
1482            int main(void) { snprintf(0, 0, 0); }
1483     ]])],
1484    [AC_MSG_RESULT(yes)
1485     AC_DEFINE(SNPRINTF_CONST, [const],
1486               [Define as const if snprintf() can declare const char *fmt])],
1487    [AC_MSG_RESULT(no)
1488     AC_DEFINE(SNPRINTF_CONST, [/* not const */])])
1489
1490 # Check for missing getpeereid (or equiv) support
1491 NO_PEERCHECK=""
1492 if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1493         AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1494         AC_TRY_COMPILE(
1495                 [#include <sys/types.h>
1496                  #include <sys/socket.h>],
1497                 [int i = SO_PEERCRED;],
1498                 [ AC_MSG_RESULT(yes)
1499                   AC_DEFINE(HAVE_SO_PEERCRED, 1, [Have PEERCRED socket option])
1500                 ],
1501                 [AC_MSG_RESULT(no)
1502                 NO_PEERCHECK=1]
1503         )
1504 fi
1505
1506 dnl see whether mkstemp() requires XXXXXX
1507 if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1508 AC_MSG_CHECKING([for (overly) strict mkstemp])
1509 AC_RUN_IFELSE(
1510         [AC_LANG_SOURCE([[
1511 #include <stdlib.h>
1512 main() { char template[]="conftest.mkstemp-test";
1513 if (mkstemp(template) == -1)
1514         exit(1);
1515 unlink(template); exit(0);
1516 }
1517         ]])],
1518         [
1519                 AC_MSG_RESULT(no)
1520         ],
1521         [
1522                 AC_MSG_RESULT(yes)
1523                 AC_DEFINE(HAVE_STRICT_MKSTEMP, 1, [Silly mkstemp()])
1524         ],
1525         [
1526                 AC_MSG_RESULT(yes)
1527                 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1528         ]
1529 )
1530 fi
1531
1532 dnl make sure that openpty does not reacquire controlling terminal
1533 if test ! -z "$check_for_openpty_ctty_bug"; then
1534         AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1535         AC_RUN_IFELSE(
1536                 [AC_LANG_SOURCE([[
1537 #include <stdio.h>
1538 #include <sys/fcntl.h>
1539 #include <sys/types.h>
1540 #include <sys/wait.h>
1541
1542 int
1543 main()
1544 {
1545         pid_t pid;
1546         int fd, ptyfd, ttyfd, status;
1547
1548         pid = fork();
1549         if (pid < 0) {          /* failed */
1550                 exit(1);
1551         } else if (pid > 0) {   /* parent */
1552                 waitpid(pid, &status, 0);
1553                 if (WIFEXITED(status))
1554                         exit(WEXITSTATUS(status));
1555                 else
1556                         exit(2);
1557         } else {                /* child */
1558                 close(0); close(1); close(2);
1559                 setsid();
1560                 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1561                 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1562                 if (fd >= 0)
1563                         exit(3);        /* Acquired ctty: broken */
1564                 else
1565                         exit(0);        /* Did not acquire ctty: OK */
1566         }
1567 }
1568                 ]])],
1569                 [
1570                         AC_MSG_RESULT(yes)
1571                 ],
1572                 [
1573                         AC_MSG_RESULT(no)
1574                         AC_DEFINE(SSHD_ACQUIRES_CTTY)
1575                 ],
1576                 [
1577                         AC_MSG_RESULT(cross-compiling, assuming yes)
1578                 ]
1579         )
1580 fi
1581
1582 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1583     test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
1584         AC_MSG_CHECKING(if getaddrinfo seems to work)
1585         AC_RUN_IFELSE(
1586                 [AC_LANG_SOURCE([[
1587 #include <stdio.h>
1588 #include <sys/socket.h>
1589 #include <netdb.h>
1590 #include <errno.h>
1591 #include <netinet/in.h>
1592
1593 #define TEST_PORT "2222"
1594
1595 int
1596 main(void)
1597 {
1598         int err, sock;
1599         struct addrinfo *gai_ai, *ai, hints;
1600         char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1601
1602         memset(&hints, 0, sizeof(hints));
1603         hints.ai_family = PF_UNSPEC;
1604         hints.ai_socktype = SOCK_STREAM;
1605         hints.ai_flags = AI_PASSIVE;
1606
1607         err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1608         if (err != 0) {
1609                 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1610                 exit(1);
1611         }
1612
1613         for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1614                 if (ai->ai_family != AF_INET6)
1615                         continue;
1616
1617                 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1618                     sizeof(ntop), strport, sizeof(strport),
1619                     NI_NUMERICHOST|NI_NUMERICSERV);
1620
1621                 if (err != 0) {
1622                         if (err == EAI_SYSTEM)
1623                                 perror("getnameinfo EAI_SYSTEM");
1624                         else
1625                                 fprintf(stderr, "getnameinfo failed: %s\n",
1626                                     gai_strerror(err));
1627                         exit(2);
1628                 }
1629
1630                 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1631                 if (sock < 0)
1632                         perror("socket");
1633                 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1634                         if (errno == EBADF)
1635                                 exit(3);
1636                 }
1637         }
1638         exit(0);
1639 }
1640                 ]])],
1641                 [
1642                         AC_MSG_RESULT(yes)
1643                 ],
1644                 [
1645                         AC_MSG_RESULT(no)
1646                         AC_DEFINE(BROKEN_GETADDRINFO)
1647                 ],
1648                 [
1649                         AC_MSG_RESULT(cross-compiling, assuming yes)
1650                 ]
1651         )
1652 fi
1653
1654 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1655     test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
1656         AC_MSG_CHECKING(if getaddrinfo seems to work)
1657         AC_RUN_IFELSE(
1658                 [AC_LANG_SOURCE([[
1659 #include <stdio.h>
1660 #include <sys/socket.h>
1661 #include <netdb.h>
1662 #include <errno.h>
1663 #include <netinet/in.h>
1664
1665 #define TEST_PORT "2222"
1666
1667 int
1668 main(void)
1669 {
1670         int err, sock;
1671         struct addrinfo *gai_ai, *ai, hints;
1672         char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1673
1674         memset(&hints, 0, sizeof(hints));
1675         hints.ai_family = PF_UNSPEC;
1676         hints.ai_socktype = SOCK_STREAM;
1677         hints.ai_flags = AI_PASSIVE;
1678
1679         err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1680         if (err != 0) {
1681                 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1682                 exit(1);
1683         }
1684
1685         for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1686                 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1687                         continue;
1688
1689                 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1690                     sizeof(ntop), strport, sizeof(strport),
1691                     NI_NUMERICHOST|NI_NUMERICSERV);
1692
1693                 if (ai->ai_family == AF_INET && err != 0) {
1694                         perror("getnameinfo");
1695                         exit(2);
1696                 }
1697         }
1698         exit(0);
1699 }
1700                 ]])],
1701                 [
1702                         AC_MSG_RESULT(yes)
1703                         AC_DEFINE(AIX_GETNAMEINFO_HACK, 1,
1704                                 [Define if you have a getaddrinfo that fails
1705                                 for the all-zeros IPv6 address])
1706                 ],
1707                 [
1708                         AC_MSG_RESULT(no)
1709                         AC_DEFINE(BROKEN_GETADDRINFO)
1710                 ],
1711                 [
1712                         AC_MSG_RESULT(cross-compiling, assuming no)
1713                 ]
1714         )
1715 fi
1716
1717 if test "x$check_for_conflicting_getspnam" = "x1"; then
1718         AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1719         AC_COMPILE_IFELSE(
1720                 [
1721 #include <shadow.h>
1722 int main(void) {exit(0);}
1723                 ],
1724                 [
1725                         AC_MSG_RESULT(no)
1726                 ],
1727                 [
1728                         AC_MSG_RESULT(yes)
1729                         AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1730                             [Conflicting defs for getspnam])
1731                 ]
1732         )
1733 fi
1734
1735 AC_FUNC_GETPGRP
1736
1737 # Search for OpenSSL
1738 saved_CPPFLAGS="$CPPFLAGS"
1739 saved_LDFLAGS="$LDFLAGS"
1740 AC_ARG_WITH(ssl-dir,
1741         [  --with-ssl-dir=PATH     Specify path to OpenSSL installation ],
1742         [
1743                 if test "x$withval" != "xno" ; then
1744                         case "$withval" in
1745                                 # Relative paths
1746                                 ./*|../*)       withval="`pwd`/$withval"
1747                         esac
1748                         if test -d "$withval/lib"; then
1749                                 if test -n "${need_dash_r}"; then
1750                                         LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1751                                 else
1752                                         LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1753                                 fi
1754                         else
1755                                 if test -n "${need_dash_r}"; then
1756                                         LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1757                                 else
1758                                         LDFLAGS="-L${withval} ${LDFLAGS}"
1759                                 fi
1760                         fi
1761                         if test -d "$withval/include"; then
1762                                 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1763                         else
1764                                 CPPFLAGS="-I${withval} ${CPPFLAGS}"
1765                         fi
1766                 fi
1767         ]
1768 )
1769 LIBS="-lcrypto $LIBS"
1770 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL, 1,
1771         [Define if your ssl headers are included
1772         with #include <openssl/header.h>]),
1773         [
1774                 dnl Check default openssl install dir
1775                 if test -n "${need_dash_r}"; then
1776                         LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
1777                 else
1778                         LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
1779                 fi
1780                 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1781                 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1782                         [
1783                                 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1784                         ]
1785                 )
1786         ]
1787 )
1788
1789 # Determine OpenSSL header version
1790 AC_MSG_CHECKING([OpenSSL header version])
1791 AC_RUN_IFELSE(
1792         [AC_LANG_SOURCE([[
1793 #include <stdio.h>
1794 #include <string.h>
1795 #include <openssl/opensslv.h>
1796 #define DATA "conftest.sslincver"
1797 int main(void) {
1798         FILE *fd;
1799         int rc;
1800
1801         fd = fopen(DATA,"w");
1802         if(fd == NULL)
1803                 exit(1);
1804
1805         if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1806                 exit(1);
1807
1808         exit(0);
1809 }
1810         ]])],
1811         [
1812                 ssl_header_ver=`cat conftest.sslincver`
1813                 AC_MSG_RESULT($ssl_header_ver)
1814         ],
1815         [
1816                 AC_MSG_RESULT(not found)
1817                 AC_MSG_ERROR(OpenSSL version header not found.)
1818         ],
1819         [
1820                 AC_MSG_WARN([cross compiling: not checking])
1821         ]
1822 )
1823
1824 # Determine OpenSSL library version
1825 AC_MSG_CHECKING([OpenSSL library version])
1826 AC_RUN_IFELSE(
1827         [AC_LANG_SOURCE([[
1828 #include <stdio.h>
1829 #include <string.h>
1830 #include <openssl/opensslv.h>
1831 #include <openssl/crypto.h>
1832 #define DATA "conftest.ssllibver"
1833 int main(void) {
1834         FILE *fd;
1835         int rc;
1836
1837         fd = fopen(DATA,"w");
1838         if(fd == NULL)
1839                 exit(1);
1840
1841         if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1842                 exit(1);
1843
1844         exit(0);
1845 }
1846         ]])],
1847         [
1848                 ssl_library_ver=`cat conftest.ssllibver`
1849                 AC_MSG_RESULT($ssl_library_ver)
1850         ],
1851         [
1852                 AC_MSG_RESULT(not found)
1853                 AC_MSG_ERROR(OpenSSL library not found.)
1854         ],
1855         [
1856                 AC_MSG_WARN([cross compiling: not checking])
1857         ]
1858 )
1859
1860 # Sanity check OpenSSL headers
1861 AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1862 AC_RUN_IFELSE(
1863         [AC_LANG_SOURCE([[
1864 #include <string.h>
1865 #include <openssl/opensslv.h>
1866 int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
1867         ]])],
1868         [
1869                 AC_MSG_RESULT(yes)
1870         ],
1871         [
1872                 AC_MSG_RESULT(no)
1873                 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1874 Check config.log for details.
1875 Also see contrib/findssl.sh for help identifying header/library mismatches.])
1876         ],
1877         [
1878                 AC_MSG_WARN([cross compiling: not checking])
1879         ]
1880 )
1881
1882 AC_MSG_CHECKING([if programs using OpenSSL functions will link])
1883 AC_LINK_IFELSE(
1884         [AC_LANG_SOURCE([[
1885 #include <openssl/evp.h>
1886 int main(void) { SSLeay_add_all_algorithms(); }
1887         ]])],
1888         [
1889                 AC_MSG_RESULT(yes)
1890         ],
1891         [
1892                 AC_MSG_RESULT(no)
1893                 saved_LIBS="$LIBS"
1894                 LIBS="$LIBS -ldl"
1895                 AC_MSG_CHECKING([if programs using OpenSSL need -ldl])
1896                 AC_LINK_IFELSE(
1897                         [AC_LANG_SOURCE([[
1898 #include <openssl/evp.h>
1899 int main(void) { SSLeay_add_all_algorithms(); }
1900                         ]])],
1901                         [
1902                                 AC_MSG_RESULT(yes)
1903                         ],
1904                         [
1905                                 AC_MSG_RESULT(no)
1906                                 LIBS="$saved_LIBS"
1907                         ]
1908                 )
1909         ]
1910 )
1911
1912 AC_ARG_WITH(ssl-engine,
1913         [  --with-ssl-engine       Enable OpenSSL (hardware) ENGINE support ],
1914         [ if test "x$withval" != "xno" ; then
1915                 AC_MSG_CHECKING(for OpenSSL ENGINE support)
1916                 AC_TRY_COMPILE(
1917                         [ #include <openssl/engine.h>],
1918                         [
1919 ENGINE_load_builtin_engines();ENGINE_register_all_complete();
1920                         ],
1921                         [ AC_MSG_RESULT(yes)
1922                           AC_DEFINE(USE_OPENSSL_ENGINE, 1,
1923                              [Enable OpenSSL engine support])
1924                         ],
1925                         [ AC_MSG_ERROR(OpenSSL ENGINE support not found)]
1926                 )
1927           fi ]
1928 )
1929
1930 # Check for OpenSSL without EVP_aes_{192,256}_cbc
1931 AC_MSG_CHECKING([whether OpenSSL has crippled AES support])
1932 AC_LINK_IFELSE(
1933         [AC_LANG_SOURCE([[
1934 #include <string.h>
1935 #include <openssl/evp.h>
1936 int main(void) { exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);}
1937         ]])],
1938         [
1939                 AC_MSG_RESULT(no)
1940         ],
1941         [
1942                 AC_MSG_RESULT(yes)
1943                 AC_DEFINE(OPENSSL_LOBOTOMISED_AES, 1,
1944                     [libcrypto is missing AES 192 and 256 bit functions])
1945         ]
1946 )
1947
1948 # Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1949 # because the system crypt() is more featureful.
1950 if test "x$check_for_libcrypt_before" = "x1"; then
1951         AC_CHECK_LIB(crypt, crypt)
1952 fi
1953
1954 # Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
1955 # version in OpenSSL.
1956 if test "x$check_for_libcrypt_later" = "x1"; then
1957         AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
1958 fi
1959
1960 # Search for SHA256 support in libc and/or OpenSSL
1961 AC_CHECK_FUNCS(SHA256_Update EVP_sha256)
1962
1963 AC_CHECK_LIB(iaf, ia_openinfo)
1964
1965 ### Configure cryptographic random number support
1966
1967 # Check wheter OpenSSL seeds itself
1968 AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1969 AC_RUN_IFELSE(
1970         [AC_LANG_SOURCE([[
1971 #include <string.h>
1972 #include <openssl/rand.h>
1973 int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
1974         ]])],
1975         [
1976                 OPENSSL_SEEDS_ITSELF=yes
1977                 AC_MSG_RESULT(yes)
1978         ],
1979         [
1980                 AC_MSG_RESULT(no)
1981                 # Default to use of the rand helper if OpenSSL doesn't
1982                 # seed itself
1983                 USE_RAND_HELPER=yes
1984         ],
1985         [
1986                 AC_MSG_WARN([cross compiling: assuming yes])
1987                 # This is safe, since all recent OpenSSL versions will
1988                 # complain at runtime if not seeded correctly.
1989                 OPENSSL_SEEDS_ITSELF=yes
1990         ]
1991 )
1992
1993 # Check for PAM libs
1994 PAM_MSG="no"
1995 AC_ARG_WITH(pam,
1996         [  --with-pam              Enable PAM support ],
1997         [
1998                 if test "x$withval" != "xno" ; then
1999                         if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
2000                            test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
2001                                 AC_MSG_ERROR([PAM headers not found])
2002                         fi
2003
2004                         saved_LIBS="$LIBS"
2005                         AC_CHECK_LIB(dl, dlopen, , )
2006                         AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
2007                         AC_CHECK_FUNCS(pam_getenvlist)
2008                         AC_CHECK_FUNCS(pam_putenv)
2009                         LIBS="$saved_LIBS"
2010
2011                         PAM_MSG="yes"
2012
2013                         LIBPAM="-lpam"
2014                         AC_DEFINE(USE_PAM, 1,
2015                                 [Define if you want to enable PAM support])
2016
2017                         if test $ac_cv_lib_dl_dlopen = yes; then
2018                                 case "$LIBS" in
2019                                 *-ldl*)
2020                                         # libdl already in LIBS
2021                                         ;;
2022                                 *)
2023                                         LIBPAM="$LIBPAM -ldl"
2024                                         ;;
2025                                 esac
2026                         fi
2027                         AC_SUBST(LIBPAM)
2028                 fi
2029         ]
2030 )
2031
2032 # Check for older PAM
2033 if test "x$PAM_MSG" = "xyes" ; then
2034         # Check PAM strerror arguments (old PAM)
2035         AC_MSG_CHECKING([whether pam_strerror takes only one argument])
2036         AC_TRY_COMPILE(
2037                 [
2038 #include <stdlib.h>
2039 #if defined(HAVE_SECURITY_PAM_APPL_H)
2040 #include <security/pam_appl.h>
2041 #elif defined (HAVE_PAM_PAM_APPL_H)
2042 #include <pam/pam_appl.h>
2043 #endif
2044                 ],
2045                 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
2046                 [AC_MSG_RESULT(no)],
2047                 [
2048                         AC_DEFINE(HAVE_OLD_PAM, 1,
2049                                 [Define if you have an old version of PAM
2050                                 which takes only one argument to pam_strerror])
2051                         AC_MSG_RESULT(yes)
2052                         PAM_MSG="yes (old library)"
2053                 ]
2054         )
2055 fi
2056
2057 # Do we want to force the use of the rand helper?
2058 AC_ARG_WITH(rand-helper,
2059         [  --with-rand-helper      Use subprocess to gather strong randomness ],
2060         [
2061                 if test "x$withval" = "xno" ; then
2062                         # Force use of OpenSSL's internal RNG, even if
2063                         # the previous test showed it to be unseeded.
2064                         if test -z "$OPENSSL_SEEDS_ITSELF" ; then
2065                                 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
2066                                 OPENSSL_SEEDS_ITSELF=yes
2067                                 USE_RAND_HELPER=""
2068                         fi
2069                 else
2070                         USE_RAND_HELPER=yes
2071                 fi
2072         ],
2073 )
2074
2075 # Which randomness source do we use?
2076 if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
2077         # OpenSSL only
2078         AC_DEFINE(OPENSSL_PRNG_ONLY, 1,
2079                 [Define if you want OpenSSL's internally seeded PRNG only])
2080         RAND_MSG="OpenSSL internal ONLY"
2081         INSTALL_SSH_RAND_HELPER=""
2082 elif test ! -z "$USE_RAND_HELPER" ; then
2083         # install rand helper
2084         RAND_MSG="ssh-rand-helper"
2085         INSTALL_SSH_RAND_HELPER="yes"
2086 fi
2087 AC_SUBST(INSTALL_SSH_RAND_HELPER)
2088
2089 ### Configuration of ssh-rand-helper
2090
2091 # PRNGD TCP socket
2092 AC_ARG_WITH(prngd-port,
2093         [  --with-prngd-port=PORT  read entropy from PRNGD/EGD TCP localhost:PORT],
2094         [
2095                 case "$withval" in
2096                 no)
2097                         withval=""
2098                         ;;
2099                 [[0-9]]*)
2100                         ;;
2101                 *)
2102                         AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
2103                         ;;
2104                 esac
2105                 if test ! -z "$withval" ; then
2106                         PRNGD_PORT="$withval"
2107                         AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT,
2108                                 [Port number of PRNGD/EGD random number socket])
2109                 fi
2110         ]
2111 )
2112
2113 # PRNGD Unix domain socket
2114 AC_ARG_WITH(prngd-socket,
2115         [  --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
2116         [
2117                 case "$withval" in
2118                 yes)
2119                         withval="/var/run/egd-pool"
2120                         ;;
2121                 no)
2122                         withval=""
2123                         ;;
2124                 /*)
2125                         ;;
2126                 *)
2127                         AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
2128                         ;;
2129                 esac
2130
2131                 if test ! -z "$withval" ; then
2132                         if test ! -z "$PRNGD_PORT" ; then
2133                                 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
2134                         fi
2135                         if test ! -r "$withval" ; then
2136                                 AC_MSG_WARN(Entropy socket is not readable)
2137                         fi
2138                         PRNGD_SOCKET="$withval"
2139                         AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET",
2140                                 [Location of PRNGD/EGD random number socket])
2141                 fi
2142         ],
2143         [
2144                 # Check for existing socket only if we don't have a random device already
2145                 if test "$USE_RAND_HELPER" = yes ; then
2146                         AC_MSG_CHECKING(for PRNGD/EGD socket)
2147                         # Insert other locations here
2148                         for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
2149                                 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
2150                                         PRNGD_SOCKET="$sock"
2151                                         AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
2152                                         break;
2153                                 fi
2154                         done
2155                         if test ! -z "$PRNGD_SOCKET" ; then
2156                                 AC_MSG_RESULT($PRNGD_SOCKET)
2157                         else
2158                                 AC_MSG_RESULT(not found)
2159                         fi
2160                 fi
2161         ]
2162 )
2163
2164 # Change default command timeout for hashing entropy source
2165 entropy_timeout=200
2166 AC_ARG_WITH(entropy-timeout,
2167         [  --with-entropy-timeout  Specify entropy gathering command timeout (msec)],
2168         [
2169                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
2170                     test "x${withval}" != "xyes"; then
2171                         entropy_timeout=$withval
2172                 fi
2173         ]
2174 )
2175 AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout,
2176         [Builtin PRNG command timeout])
2177
2178 SSH_PRIVSEP_USER=sshd
2179 AC_ARG_WITH(privsep-user,
2180         [  --with-privsep-user=user Specify non-privileged user for privilege separation],
2181         [
2182                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
2183                     test "x${withval}" != "xyes"; then
2184                         SSH_PRIVSEP_USER=$withval
2185                 fi
2186         ]
2187 )
2188 AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER",
2189         [non-privileged user for privilege separation])
2190 AC_SUBST(SSH_PRIVSEP_USER)
2191
2192 # We do this little dance with the search path to insure
2193 # that programs that we select for use by installed programs
2194 # (which may be run by the super-user) come from trusted
2195 # locations before they come from the user's private area.
2196 # This should help avoid accidentally configuring some
2197 # random version of a program in someone's personal bin.
2198
2199 OPATH=$PATH
2200 PATH=/bin:/usr/bin
2201 test -h /bin 2> /dev/null && PATH=/usr/bin
2202 test -d /sbin && PATH=$PATH:/sbin
2203 test -d /usr/sbin && PATH=$PATH:/usr/sbin
2204 PATH=$PATH:/etc:$OPATH
2205
2206 # These programs are used by the command hashing source to gather entropy
2207 OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
2208 OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
2209 OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
2210 OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
2211 OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
2212 OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
2213 OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
2214 OSSH_PATH_ENTROPY_PROG(PROG_W, w)
2215 OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
2216 OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
2217 OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
2218 OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
2219 OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
2220 OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
2221 OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
2222 OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
2223 # restore PATH
2224 PATH=$OPATH
2225
2226 # Where does ssh-rand-helper get its randomness from?
2227 INSTALL_SSH_PRNG_CMDS=""
2228 if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
2229         if test ! -z "$PRNGD_PORT" ; then
2230                 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
2231         elif test ! -z "$PRNGD_SOCKET" ; then
2232                 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
2233         else
2234                 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
2235                 RAND_HELPER_CMDHASH=yes
2236                 INSTALL_SSH_PRNG_CMDS="yes"
2237         fi
2238 fi
2239 AC_SUBST(INSTALL_SSH_PRNG_CMDS)
2240
2241
2242 # Cheap hack to ensure NEWS-OS libraries are arranged right.
2243 if test ! -z "$SONY" ; then
2244   LIBS="$LIBS -liberty";
2245 fi
2246
2247 # Check for  long long datatypes
2248 AC_CHECK_TYPES([long long, unsigned long long, long double])
2249
2250 # Check datatype sizes
2251 AC_CHECK_SIZEOF(char, 1)
2252 AC_CHECK_SIZEOF(short int, 2)
2253 AC_CHECK_SIZEOF(int, 4)
2254 AC_CHECK_SIZEOF(long int, 4)
2255 AC_CHECK_SIZEOF(long long int, 8)
2256
2257 # Sanity check long long for some platforms (AIX)
2258 if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
2259         ac_cv_sizeof_long_long_int=0
2260 fi
2261
2262 # compute LLONG_MIN and LLONG_MAX if we don't know them.
2263 if test -z "$have_llong_max"; then
2264         AC_MSG_CHECKING([for max value of long long])
2265         AC_RUN_IFELSE(
2266                 [AC_LANG_SOURCE([[
2267 #include <stdio.h>
2268 /* Why is this so damn hard? */
2269 #ifdef __GNUC__
2270 # undef __GNUC__
2271 #endif
2272 #define __USE_ISOC99
2273 #include <limits.h>
2274 #define DATA "conftest.llminmax"
2275 #define my_abs(a) ((a) < 0 ? ((a) * -1) : (a))
2276
2277 /*
2278  * printf in libc on some platforms (eg old Tru64) does not understand %lld so
2279  * we do this the hard way.
2280  */
2281 static int
2282 fprint_ll(FILE *f, long long n)
2283 {
2284         unsigned int i;
2285         int l[sizeof(long long) * 8];
2286
2287         if (n < 0)
2288                 if (fprintf(f, "-") < 0)
2289                         return -1;
2290         for (i = 0; n != 0; i++) {
2291                 l[i] = my_abs(n % 10);
2292                 n /= 10;
2293         }
2294         do {
2295                 if (fprintf(f, "%d", l[--i]) < 0)
2296                         return -1;
2297         } while (i != 0);
2298         if (fprintf(f, " ") < 0)
2299                 return -1;
2300         return 0;
2301 }
2302
2303 int main(void) {
2304         FILE *f;
2305         long long i, llmin, llmax = 0;
2306
2307         if((f = fopen(DATA,"w")) == NULL)
2308                 exit(1);
2309
2310 #if defined(LLONG_MIN) && defined(LLONG_MAX)
2311         fprintf(stderr, "Using system header for LLONG_MIN and LLONG_MAX\n");
2312         llmin = LLONG_MIN;
2313         llmax = LLONG_MAX;
2314 #else
2315         fprintf(stderr, "Calculating  LLONG_MIN and LLONG_MAX\n");
2316         /* This will work on one's complement and two's complement */
2317         for (i = 1; i > llmax; i <<= 1, i++)
2318                 llmax = i;
2319         llmin = llmax + 1LL;    /* wrap */
2320 #endif
2321
2322         /* Sanity check */
2323         if (llmin + 1 < llmin || llmin - 1 < llmin || llmax + 1 > llmax
2324             || llmax - 1 > llmax || llmin == llmax || llmin == 0
2325             || llmax == 0 || llmax < LONG_MAX || llmin > LONG_MIN) {
2326                 fprintf(f, "unknown unknown\n");
2327                 exit(2);
2328         }
2329
2330         if (fprint_ll(f, llmin) < 0)
2331                 exit(3);
2332         if (fprint_ll(f, llmax) < 0)
2333                 exit(4);
2334         if (fclose(f) < 0)
2335                 exit(5);
2336         exit(0);
2337 }
2338                 ]])],
2339                 [
2340                         llong_min=`$AWK '{print $1}' conftest.llminmax`
2341                         llong_max=`$AWK '{print $2}' conftest.llminmax`
2342
2343                         AC_MSG_RESULT($llong_max)
2344                         AC_DEFINE_UNQUOTED(LLONG_MAX, [${llong_max}LL],
2345                             [max value of long long calculated by configure])
2346                         AC_MSG_CHECKING([for min value of long long])
2347                         AC_MSG_RESULT($llong_min)
2348                         AC_DEFINE_UNQUOTED(LLONG_MIN, [${llong_min}LL],
2349                             [min value of long long calculated by configure])
2350                 ],
2351                 [
2352                         AC_MSG_RESULT(not found)
2353                 ],
2354                 [
2355                         AC_MSG_WARN([cross compiling: not checking])
2356                 ]
2357         )
2358 fi
2359
2360
2361 # More checks for data types
2362 AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
2363         AC_TRY_COMPILE(
2364                 [ #include <sys/types.h> ],
2365                 [ u_int a; a = 1;],
2366                 [ ac_cv_have_u_int="yes" ],
2367                 [ ac_cv_have_u_int="no" ]
2368         )
2369 ])
2370 if test "x$ac_cv_have_u_int" = "xyes" ; then
2371         AC_DEFINE(HAVE_U_INT, 1, [define if you have u_int data type])
2372         have_u_int=1
2373 fi
2374
2375 AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
2376         AC_TRY_COMPILE(
2377                 [ #include <sys/types.h> ],
2378                 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
2379                 [ ac_cv_have_intxx_t="yes" ],
2380                 [ ac_cv_have_intxx_t="no" ]
2381         )
2382 ])
2383 if test "x$ac_cv_have_intxx_t" = "xyes" ; then
2384         AC_DEFINE(HAVE_INTXX_T, 1, [define if you have intxx_t data type])
2385         have_intxx_t=1
2386 fi
2387
2388 if (test -z "$have_intxx_t" && \
2389            test "x$ac_cv_header_stdint_h" = "xyes")
2390 then
2391     AC_MSG_CHECKING([for intXX_t types in stdint.h])
2392         AC_TRY_COMPILE(
2393                 [ #include <stdint.h> ],
2394                 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
2395                 [
2396                         AC_DEFINE(HAVE_INTXX_T)
2397                         AC_MSG_RESULT(yes)
2398                 ],
2399                 [ AC_MSG_RESULT(no) ]
2400         )
2401 fi
2402
2403 AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
2404         AC_TRY_COMPILE(
2405                 [
2406 #include <sys/types.h>
2407 #ifdef HAVE_STDINT_H
2408 # include <stdint.h>
2409 #endif
2410 #include <sys/socket.h>
2411 #ifdef HAVE_SYS_BITYPES_H
2412 # include <sys/bitypes.h>
2413 #endif
2414                 ],
2415                 [ int64_t a; a = 1;],
2416                 [ ac_cv_have_int64_t="yes" ],
2417                 [ ac_cv_have_int64_t="no" ]
2418         )
2419 ])
2420 if test "x$ac_cv_have_int64_t" = "xyes" ; then
2421         AC_DEFINE(HAVE_INT64_T, 1, [define if you have int64_t data type])
2422 fi
2423
2424 AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
2425         AC_TRY_COMPILE(
2426                 [ #include <sys/types.h> ],
2427                 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
2428                 [ ac_cv_have_u_intxx_t="yes" ],
2429                 [ ac_cv_have_u_intxx_t="no" ]
2430         )
2431 ])
2432 if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
2433         AC_DEFINE(HAVE_U_INTXX_T, 1, [define if you have u_intxx_t data type])
2434         have_u_intxx_t=1
2435 fi
2436
2437 if test -z "$have_u_intxx_t" ; then
2438     AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
2439         AC_TRY_COMPILE(
2440                 [ #include <sys/socket.h> ],
2441                 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
2442                 [
2443                         AC_DEFINE(HAVE_U_INTXX_T)
2444                         AC_MSG_RESULT(yes)
2445                 ],
2446                 [ AC_MSG_RESULT(no) ]
2447         )
2448 fi
2449
2450 AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
2451         AC_TRY_COMPILE(
2452                 [ #include <sys/types.h> ],
2453                 [ u_int64_t a; a = 1;],
2454                 [ ac_cv_have_u_int64_t="yes" ],
2455                 [ ac_cv_have_u_int64_t="no" ]
2456         )
2457 ])
2458 if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
2459         AC_DEFINE(HAVE_U_INT64_T, 1, [define if you have u_int64_t data type])
2460         have_u_int64_t=1
2461 fi
2462
2463 if test -z "$have_u_int64_t" ; then
2464     AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
2465         AC_TRY_COMPILE(
2466                 [ #include <sys/bitypes.h> ],
2467                 [ u_int64_t a; a = 1],
2468                 [
2469                         AC_DEFINE(HAVE_U_INT64_T)
2470                         AC_MSG_RESULT(yes)
2471                 ],
2472                 [ AC_MSG_RESULT(no) ]
2473         )
2474 fi
2475
2476 if test -z "$have_u_intxx_t" ; then
2477         AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
2478                 AC_TRY_COMPILE(
2479                         [
2480 #include <sys/types.h>
2481                         ],
2482                         [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
2483                         [ ac_cv_have_uintxx_t="yes" ],
2484                         [ ac_cv_have_uintxx_t="no" ]
2485                 )
2486         ])
2487         if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
2488                 AC_DEFINE(HAVE_UINTXX_T, 1,
2489                         [define if you have uintxx_t data type])
2490         fi
2491 fi
2492
2493 if test -z "$have_uintxx_t" ; then
2494     AC_MSG_CHECKING([for uintXX_t types in stdint.h])
2495         AC_TRY_COMPILE(
2496                 [ #include <stdint.h> ],
2497                 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
2498                 [
2499                         AC_DEFINE(HAVE_UINTXX_T)
2500                         AC_MSG_RESULT(yes)
2501                 ],
2502                 [ AC_MSG_RESULT(no) ]
2503         )
2504 fi
2505
2506 if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
2507            test "x$ac_cv_header_sys_bitypes_h" = "xyes")
2508 then
2509         AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
2510         AC_TRY_COMPILE(
2511                 [
2512 #include <sys/bitypes.h>
2513                 ],
2514                 [
2515                         int8_t a; int16_t b; int32_t c;
2516                         u_int8_t e; u_int16_t f; u_int32_t g;
2517                         a = b = c = e = f = g = 1;
2518                 ],
2519                 [
2520                         AC_DEFINE(HAVE_U_INTXX_T)
2521                         AC_DEFINE(HAVE_INTXX_T)
2522                         AC_MSG_RESULT(yes)
2523                 ],
2524                 [AC_MSG_RESULT(no)]
2525         )
2526 fi
2527
2528
2529 AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
2530         AC_TRY_COMPILE(
2531                 [
2532 #include <sys/types.h>
2533                 ],
2534                 [ u_char foo; foo = 125; ],
2535                 [ ac_cv_have_u_char="yes" ],
2536                 [ ac_cv_have_u_char="no" ]
2537         )
2538 ])
2539 if test "x$ac_cv_have_u_char" = "xyes" ; then
2540         AC_DEFINE(HAVE_U_CHAR, 1, [define if you have u_char data type])
2541 fi
2542
2543 TYPE_SOCKLEN_T
2544
2545 AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
2546
2547 AC_CHECK_TYPES(in_addr_t,,,
2548 [#include <sys/types.h>
2549 #include <netinet/in.h>])
2550
2551 AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
2552         AC_TRY_COMPILE(
2553                 [
2554 #include <sys/types.h>
2555                 ],
2556                 [ size_t foo; foo = 1235; ],
2557                 [ ac_cv_have_size_t="yes" ],
2558                 [ ac_cv_have_size_t="no" ]
2559         )
2560 ])
2561 if test "x$ac_cv_have_size_t" = "xyes" ; then
2562         AC_DEFINE(HAVE_SIZE_T, 1, [define if you have size_t data type])
2563 fi
2564
2565 AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
2566         AC_TRY_COMPILE(
2567                 [
2568 #include <sys/types.h>
2569                 ],
2570                 [ ssize_t foo; foo = 1235; ],
2571                 [ ac_cv_have_ssize_t="yes" ],
2572                 [ ac_cv_have_ssize_t="no" ]
2573         )
2574 ])
2575 if test "x$ac_cv_have_ssize_t" = "xyes" ; then
2576         AC_DEFINE(HAVE_SSIZE_T, 1, [define if you have ssize_t data type])
2577 fi
2578
2579 AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
2580         AC_TRY_COMPILE(
2581                 [
2582 #include <time.h>
2583                 ],
2584                 [ clock_t foo; foo = 1235; ],
2585                 [ ac_cv_have_clock_t="yes" ],
2586                 [ ac_cv_have_clock_t="no" ]
2587         )
2588 ])
2589 if test "x$ac_cv_have_clock_t" = "xyes" ; then
2590         AC_DEFINE(HAVE_CLOCK_T, 1, [define if you have clock_t data type])
2591 fi
2592
2593 AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
2594         AC_TRY_COMPILE(
2595                 [
2596 #include <sys/types.h>
2597 #include <sys/socket.h>
2598                 ],
2599                 [ sa_family_t foo; foo = 1235; ],
2600                 [ ac_cv_have_sa_family_t="yes" ],
2601                 [ AC_TRY_COMPILE(
2602                   [
2603 #include <sys/types.h>
2604 #include <sys/socket.h>
2605 #include <netinet/in.h>
2606                 ],
2607                 [ sa_family_t foo; foo = 1235; ],
2608                 [ ac_cv_have_sa_family_t="yes" ],
2609
2610                 [ ac_cv_have_sa_family_t="no" ]
2611         )]
2612         )
2613 ])
2614 if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
2615         AC_DEFINE(HAVE_SA_FAMILY_T, 1,
2616                 [define if you have sa_family_t data type])
2617 fi
2618
2619 AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
2620         AC_TRY_COMPILE(
2621                 [
2622 #include <sys/types.h>
2623                 ],
2624                 [ pid_t foo; foo = 1235; ],
2625                 [ ac_cv_have_pid_t="yes" ],
2626                 [ ac_cv_have_pid_t="no" ]
2627         )
2628 ])
2629 if test "x$ac_cv_have_pid_t" = "xyes" ; then
2630         AC_DEFINE(HAVE_PID_T, 1, [define if you have pid_t data type])
2631 fi
2632
2633 AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
2634         AC_TRY_COMPILE(
2635                 [
2636 #include <sys/types.h>
2637                 ],
2638                 [ mode_t foo; foo = 1235; ],
2639                 [ ac_cv_have_mode_t="yes" ],
2640                 [ ac_cv_have_mode_t="no" ]
2641         )
2642 ])
2643 if test "x$ac_cv_have_mode_t" = "xyes" ; then
2644         AC_DEFINE(HAVE_MODE_T, 1, [define if you have mode_t data type])
2645 fi
2646
2647
2648 AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
2649         AC_TRY_COMPILE(
2650                 [
2651 #include <sys/types.h>
2652 #include <sys/socket.h>
2653                 ],
2654                 [ struct sockaddr_storage s; ],
2655                 [ ac_cv_have_struct_sockaddr_storage="yes" ],
2656                 [ ac_cv_have_struct_sockaddr_storage="no" ]
2657         )
2658 ])
2659 if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
2660         AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE, 1,
2661                 [define if you have struct sockaddr_storage data type])
2662 fi
2663
2664 AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2665         AC_TRY_COMPILE(
2666                 [
2667 #include <sys/types.h>
2668 #include <netinet/in.h>
2669                 ],
2670                 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2671                 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2672                 [ ac_cv_have_struct_sockaddr_in6="no" ]
2673         )
2674 ])
2675 if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
2676         AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6, 1,
2677                 [define if you have struct sockaddr_in6 data type])
2678 fi
2679
2680 AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2681         AC_TRY_COMPILE(
2682                 [
2683 #include <sys/types.h>
2684 #include <netinet/in.h>
2685                 ],
2686                 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2687                 [ ac_cv_have_struct_in6_addr="yes" ],
2688                 [ ac_cv_have_struct_in6_addr="no" ]
2689         )
2690 ])
2691 if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
2692         AC_DEFINE(HAVE_STRUCT_IN6_ADDR, 1,
2693                 [define if you have struct in6_addr data type])
2694 fi
2695
2696 AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2697         AC_TRY_COMPILE(
2698                 [
2699 #include <sys/types.h>
2700 #include <sys/socket.h>
2701 #include <netdb.h>
2702                 ],
2703                 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2704                 [ ac_cv_have_struct_addrinfo="yes" ],
2705                 [ ac_cv_have_struct_addrinfo="no" ]
2706         )
2707 ])
2708 if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2709         AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1,
2710                 [define if you have struct addrinfo data type])
2711 fi
2712
2713 AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2714         AC_TRY_COMPILE(
2715                 [ #include <sys/time.h> ],
2716                 [ struct timeval tv; tv.tv_sec = 1;],
2717                 [ ac_cv_have_struct_timeval="yes" ],
2718                 [ ac_cv_have_struct_timeval="no" ]
2719         )
2720 ])
2721 if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2722         AC_DEFINE(HAVE_STRUCT_TIMEVAL, 1, [define if you have struct timeval])
2723         have_struct_timeval=1
2724 fi
2725
2726 AC_CHECK_TYPES(struct timespec)
2727
2728 # We need int64_t or else certian parts of the compile will fail.
2729 if test "x$ac_cv_have_int64_t" = "xno" && \
2730         test "x$ac_cv_sizeof_long_int" != "x8" && \
2731         test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
2732         echo "OpenSSH requires int64_t support.  Contact your vendor or install"
2733         echo "an alternative compiler (I.E., GCC) before continuing."
2734         echo ""
2735         exit 1;
2736 else
2737 dnl test snprintf (broken on SCO w/gcc)
2738         AC_RUN_IFELSE(
2739                 [AC_LANG_SOURCE([[
2740 #include <stdio.h>
2741 #include <string.h>
2742 #ifdef HAVE_SNPRINTF
2743 main()
2744 {
2745         char buf[50];
2746         char expected_out[50];
2747         int mazsize = 50 ;
2748 #if (SIZEOF_LONG_INT == 8)
2749         long int num = 0x7fffffffffffffff;
2750 #else
2751         long long num = 0x7fffffffffffffffll;
2752 #endif
2753         strcpy(expected_out, "9223372036854775807");
2754         snprintf(buf, mazsize, "%lld", num);
2755         if(strcmp(buf, expected_out) != 0)
2756                 exit(1);
2757         exit(0);
2758 }
2759 #else
2760 main() { exit(0); }
2761 #endif
2762                 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
2763                 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
2764         )
2765 fi
2766
2767 dnl Checks for structure members
2768 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2769 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2770 OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2771 OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2772 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
2773 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
2774 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2775 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
2776 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
2777 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2778 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2779 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2780 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
2781 OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2782 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2783 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2784 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
2785
2786 AC_CHECK_MEMBERS([struct stat.st_blksize])
2787 AC_CHECK_MEMBER([struct __res_state.retrans], [], [AC_DEFINE(__res_state, state,
2788         [Define if we don't have struct __res_state in resolv.h])],
2789 [
2790 #include <stdio.h>
2791 #if HAVE_SYS_TYPES_H
2792 # include <sys/types.h>
2793 #endif
2794 #include <netinet/in.h>
2795 #include <arpa/nameser.h>
2796 #include <resolv.h>
2797 ])
2798
2799 AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2800                 ac_cv_have_ss_family_in_struct_ss, [
2801         AC_TRY_COMPILE(
2802                 [
2803 #include <sys/types.h>
2804 #include <sys/socket.h>
2805                 ],
2806                 [ struct sockaddr_storage s; s.ss_family = 1; ],
2807                 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2808                 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2809         )
2810 ])
2811 if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2812         AC_DEFINE(HAVE_SS_FAMILY_IN_SS, 1, [Fields in struct sockaddr_storage])
2813 fi
2814
2815 AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2816                 ac_cv_have___ss_family_in_struct_ss, [
2817         AC_TRY_COMPILE(
2818                 [
2819 #include <sys/types.h>
2820 #include <sys/socket.h>
2821                 ],
2822                 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2823                 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2824                 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2825         )
2826 ])
2827 if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2828         AC_DEFINE(HAVE___SS_FAMILY_IN_SS, 1,
2829                 [Fields in struct sockaddr_storage])
2830 fi
2831
2832 AC_CACHE_CHECK([for pw_class field in struct passwd],
2833                 ac_cv_have_pw_class_in_struct_passwd, [
2834         AC_TRY_COMPILE(
2835                 [
2836 #include <pwd.h>
2837                 ],
2838                 [ struct passwd p; p.pw_class = 0; ],
2839                 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2840                 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2841         )
2842 ])
2843 if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2844         AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD, 1,
2845                 [Define if your password has a pw_class field])
2846 fi
2847
2848 AC_CACHE_CHECK([for pw_expire field in struct passwd],
2849                 ac_cv_have_pw_expire_in_struct_passwd, [
2850         AC_TRY_COMPILE(
2851                 [
2852 #include <pwd.h>
2853                 ],
2854                 [ struct passwd p; p.pw_expire = 0; ],
2855                 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2856                 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2857         )
2858 ])
2859 if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2860         AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD, 1,
2861                 [Define if your password has a pw_expire field])
2862 fi
2863
2864 AC_CACHE_CHECK([for pw_change field in struct passwd],
2865                 ac_cv_have_pw_change_in_struct_passwd, [
2866         AC_TRY_COMPILE(
2867                 [
2868 #include <pwd.h>
2869                 ],
2870                 [ struct passwd p; p.pw_change = 0; ],
2871                 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2872                 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2873         )
2874 ])
2875 if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2876         AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD, 1,
2877                 [Define if your password has a pw_change field])
2878 fi
2879
2880 dnl make sure we're using the real structure members and not defines
2881 AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2882                 ac_cv_have_accrights_in_msghdr, [
2883         AC_COMPILE_IFELSE(
2884                 [
2885 #include <sys/types.h>
2886 #include <sys/socket.h>
2887 #include <sys/uio.h>
2888 int main() {
2889 #ifdef msg_accrights
2890 #error "msg_accrights is a macro"
2891 exit(1);
2892 #endif
2893 struct msghdr m;
2894 m.msg_accrights = 0;
2895 exit(0);
2896 }
2897                 ],
2898                 [ ac_cv_have_accrights_in_msghdr="yes" ],
2899                 [ ac_cv_have_accrights_in_msghdr="no" ]
2900         )
2901 ])
2902 if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2903         AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR, 1,
2904                 [Define if your system uses access rights style
2905                 file descriptor passing])
2906 fi
2907
2908 AC_CACHE_CHECK([for msg_control field in struct msghdr],
2909                 ac_cv_have_control_in_msghdr, [
2910         AC_COMPILE_IFELSE(
2911                 [
2912 #include <sys/types.h>
2913 #include <sys/socket.h>
2914 #include <sys/uio.h>
2915 int main() {
2916 #ifdef msg_control
2917 #error "msg_control is a macro"
2918 exit(1);
2919 #endif
2920 struct msghdr m;
2921 m.msg_control = 0;
2922 exit(0);
2923 }
2924                 ],
2925                 [ ac_cv_have_control_in_msghdr="yes" ],
2926                 [ ac_cv_have_control_in_msghdr="no" ]
2927         )
2928 ])
2929 if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2930         AC_DEFINE(HAVE_CONTROL_IN_MSGHDR, 1,
2931                 [Define if your system uses ancillary data style
2932                 file descriptor passing])
2933 fi
2934
2935 AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
2936         AC_TRY_LINK([],
2937                 [ extern char *__progname; printf("%s", __progname); ],
2938                 [ ac_cv_libc_defines___progname="yes" ],
2939                 [ ac_cv_libc_defines___progname="no" ]
2940         )
2941 ])
2942 if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2943         AC_DEFINE(HAVE___PROGNAME, 1, [Define if libc defines __progname])
2944 fi
2945
2946 AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2947         AC_TRY_LINK([
2948 #include <stdio.h>
2949 ],
2950                 [ printf("%s", __FUNCTION__); ],
2951                 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2952                 [ ac_cv_cc_implements___FUNCTION__="no" ]
2953         )
2954 ])
2955 if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2956         AC_DEFINE(HAVE___FUNCTION__, 1,
2957                 [Define if compiler implements __FUNCTION__])
2958 fi
2959
2960 AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2961         AC_TRY_LINK([
2962 #include <stdio.h>
2963 ],
2964                 [ printf("%s", __func__); ],
2965                 [ ac_cv_cc_implements___func__="yes" ],
2966                 [ ac_cv_cc_implements___func__="no" ]
2967         )
2968 ])
2969 if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
2970         AC_DEFINE(HAVE___func__, 1, [Define if compiler implements __func__])
2971 fi
2972
2973 AC_CACHE_CHECK([whether va_copy exists], ac_cv_have_va_copy, [
2974         AC_TRY_LINK(
2975                 [#include <stdarg.h>
2976                  va_list x,y;],
2977                 [va_copy(x,y);],
2978                 [ ac_cv_have_va_copy="yes" ],
2979                 [ ac_cv_have_va_copy="no" ]
2980         )
2981 ])
2982 if test "x$ac_cv_have_va_copy" = "xyes" ; then
2983         AC_DEFINE(HAVE_VA_COPY, 1, [Define if va_copy exists])
2984 fi
2985
2986 AC_CACHE_CHECK([whether __va_copy exists], ac_cv_have___va_copy, [
2987         AC_TRY_LINK(
2988                 [#include <stdarg.h>
2989                  va_list x,y;],
2990                 [__va_copy(x,y);],
2991                 [ ac_cv_have___va_copy="yes" ],
2992                 [ ac_cv_have___va_copy="no" ]
2993         )
2994 ])
2995 if test "x$ac_cv_have___va_copy" = "xyes" ; then
2996         AC_DEFINE(HAVE___VA_COPY, 1, [Define if __va_copy exists])
2997 fi
2998
2999 AC_CACHE_CHECK([whether getopt has optreset support],
3000                 ac_cv_have_getopt_optreset, [
3001         AC_TRY_LINK(
3002                 [
3003 #include <getopt.h>
3004                 ],
3005                 [ extern int optreset; optreset = 0; ],
3006                 [ ac_cv_have_getopt_optreset="yes" ],
3007                 [ ac_cv_have_getopt_optreset="no" ]
3008         )
3009 ])
3010 if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
3011         AC_DEFINE(HAVE_GETOPT_OPTRESET, 1,
3012                 [Define if your getopt(3) defines and uses optreset])
3013 fi
3014
3015 AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
3016         AC_TRY_LINK([],
3017                 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
3018                 [ ac_cv_libc_defines_sys_errlist="yes" ],
3019                 [ ac_cv_libc_defines_sys_errlist="no" ]
3020         )
3021 ])
3022 if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
3023         AC_DEFINE(HAVE_SYS_ERRLIST, 1,
3024                 [Define if your system defines sys_errlist[]])
3025 fi
3026
3027
3028 AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
3029         AC_TRY_LINK([],
3030                 [ extern int sys_nerr; printf("%i", sys_nerr);],
3031                 [ ac_cv_libc_defines_sys_nerr="yes" ],
3032                 [ ac_cv_libc_defines_sys_nerr="no" ]
3033         )
3034 ])
3035 if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
3036         AC_DEFINE(HAVE_SYS_NERR, 1, [Define if your system defines sys_nerr])
3037 fi
3038
3039 SCARD_MSG="no"
3040 # Check whether user wants sectok support
3041 AC_ARG_WITH(sectok,
3042         [  --with-sectok           Enable smartcard support using libsectok],
3043         [
3044                 if test "x$withval" != "xno" ; then
3045                         if test "x$withval" != "xyes" ; then
3046                                 CPPFLAGS="$CPPFLAGS -I${withval}"
3047                                 LDFLAGS="$LDFLAGS -L${withval}"
3048                                 if test ! -z "$need_dash_r" ; then
3049                                         LDFLAGS="$LDFLAGS -R${withval}"
3050                                 fi
3051                                 if test ! -z "$blibpath" ; then
3052                                         blibpath="$blibpath:${withval}"
3053                                 fi
3054                         fi
3055                         AC_CHECK_HEADERS(sectok.h)
3056                         if test "$ac_cv_header_sectok_h" != yes; then
3057                                 AC_MSG_ERROR(Can't find sectok.h)
3058                         fi
3059                         AC_CHECK_LIB(sectok, sectok_open)
3060                         if test "$ac_cv_lib_sectok_sectok_open" != yes; then
3061                                 AC_MSG_ERROR(Can't find libsectok)
3062                         fi
3063                         AC_DEFINE(SMARTCARD, 1,
3064                                 [Define if you want smartcard support])
3065                         AC_DEFINE(USE_SECTOK, 1,
3066                                 [Define if you want smartcard support
3067                                 using sectok])
3068                         SCARD_MSG="yes, using sectok"
3069                 fi
3070         ]
3071 )
3072
3073 # Check whether user wants OpenSC support
3074 OPENSC_CONFIG="no"
3075 AC_ARG_WITH(opensc,
3076         [  --with-opensc[[=PFX]]     Enable smartcard support using OpenSC (optionally in PATH)],
3077         [
3078             if test "x$withval" != "xno" ; then
3079                 if test "x$withval" != "xyes" ; then
3080                         OPENSC_CONFIG=$withval/bin/opensc-config
3081                 else
3082                         AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
3083                 fi
3084                 if test "$OPENSC_CONFIG" != "no"; then
3085                         LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
3086                         LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
3087                         CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
3088                         LIBS="$LIBS $LIBOPENSC_LIBS"
3089                         AC_DEFINE(SMARTCARD)
3090                         AC_DEFINE(USE_OPENSC, 1,
3091                                 [Define if you want smartcard support
3092                                 using OpenSC])
3093                         SCARD_MSG="yes, using OpenSC"
3094                 fi
3095             fi
3096         ]
3097 )
3098
3099 # Check libraries needed by DNS fingerprint support
3100 AC_SEARCH_LIBS(getrrsetbyname, resolv,
3101         [AC_DEFINE(HAVE_GETRRSETBYNAME, 1,
3102                 [Define if getrrsetbyname() exists])],
3103         [
3104                 # Needed by our getrrsetbyname()
3105                 AC_SEARCH_LIBS(res_query, resolv)
3106                 AC_SEARCH_LIBS(dn_expand, resolv)
3107                 AC_MSG_CHECKING(if res_query will link)
3108                 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
3109                    [AC_MSG_RESULT(no)
3110                     saved_LIBS="$LIBS"
3111                     LIBS="$LIBS -lresolv"
3112                     AC_MSG_CHECKING(for res_query in -lresolv)
3113                     AC_LINK_IFELSE([
3114 #include <resolv.h>
3115 int main()
3116 {
3117         res_query (0, 0, 0, 0, 0);
3118         return 0;
3119 }
3120                         ],
3121                         [LIBS="$LIBS -lresolv"
3122                          AC_MSG_RESULT(yes)],
3123                         [LIBS="$saved_LIBS"
3124                          AC_MSG_RESULT(no)])
3125                     ])
3126                 AC_CHECK_FUNCS(_getshort _getlong)
3127                 AC_CHECK_DECLS([_getshort, _getlong], , ,
3128                     [#include <sys/types.h>
3129                     #include <arpa/nameser.h>])
3130                 AC_CHECK_MEMBER(HEADER.ad,
3131                         [AC_DEFINE(HAVE_HEADER_AD, 1,
3132                             [Define if HEADER.ad exists in arpa/nameser.h])],,
3133                         [#include <arpa/nameser.h>])
3134         ])
3135
3136 # Check whether user wants SELinux support
3137 SELINUX_MSG="no"
3138 LIBSELINUX=""
3139 AC_ARG_WITH(selinux,
3140         [  --with-selinux   Enable SELinux support],
3141         [ if test "x$withval" != "xno" ; then
3142                 AC_DEFINE(WITH_SELINUX,1,[Define if you want SELinux support.])
3143                 SELINUX_MSG="yes"
3144                 AC_CHECK_HEADER([selinux/selinux.h], ,
3145                     AC_MSG_ERROR(SELinux support requires selinux.h header))
3146                 AC_CHECK_LIB(selinux, setexeccon, [ LIBSELINUX="-lselinux" ],
3147                     AC_MSG_ERROR(SELinux support requires libselinux library))
3148                 save_LIBS="$LIBS"
3149                 LIBS="$LIBS $LIBSELINUX"
3150                 AC_CHECK_FUNCS(getseuserbyname get_default_context_with_level)
3151                 LIBS="$save_LIBS"
3152         fi ]
3153 )
3154 AC_SUBST(LIBSELINUX)
3155
3156 # Check whether user wants Kerberos 5 support
3157 KRB5_MSG="no"
3158 AC_ARG_WITH(kerberos5,
3159         [  --with-kerberos5=PATH   Enable Kerberos 5 support],
3160         [ if test "x$withval" != "xno" ; then
3161                 if test "x$withval" = "xyes" ; then
3162                         KRB5ROOT="/usr/local"
3163                 else
3164                         KRB5ROOT=${withval}
3165                 fi
3166
3167                 AC_DEFINE(KRB5, 1, [Define if you want Kerberos 5 support])
3168                 KRB5_MSG="yes"
3169
3170                 AC_MSG_CHECKING(for krb5-config)
3171                 if test -x  $KRB5ROOT/bin/krb5-config ; then
3172                         KRB5CONF=$KRB5ROOT/bin/krb5-config
3173                         AC_MSG_RESULT($KRB5CONF)
3174
3175                         AC_MSG_CHECKING(for gssapi support)
3176                         if $KRB5CONF | grep gssapi >/dev/null ; then
3177                                 AC_MSG_RESULT(yes)
3178                                 AC_DEFINE(GSSAPI, 1,
3179                                         [Define this if you want GSSAPI
3180                                         support in the version 2 protocol])
3181                                 k5confopts=gssapi
3182                         else
3183                                 AC_MSG_RESULT(no)
3184                                 k5confopts=""
3185                         fi
3186                         K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
3187                         K5LIBS="`$KRB5CONF --libs $k5confopts`"
3188                         CPPFLAGS="$CPPFLAGS $K5CFLAGS"
3189                         AC_MSG_CHECKING(whether we are using Heimdal)
3190                         AC_TRY_COMPILE([ #include <krb5.h> ],
3191                                        [ char *tmp = heimdal_version; ],
3192                                        [ AC_MSG_RESULT(yes)
3193                                          AC_DEFINE(HEIMDAL, 1,
3194                                         [Define this if you are using the
3195                                         Heimdal version of Kerberos V5]) ],
3196                                          AC_MSG_RESULT(no)
3197                         )
3198                 else
3199                         AC_MSG_RESULT(no)
3200                         CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
3201                         LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
3202                         AC_MSG_CHECKING(whether we are using Heimdal)
3203                         AC_TRY_COMPILE([ #include <krb5.h> ],
3204                                        [ char *tmp = heimdal_version; ],
3205                                        [ AC_MSG_RESULT(yes)
3206                                          AC_DEFINE(HEIMDAL)
3207                                          K5LIBS="-lkrb5 -ldes"
3208                                          K5LIBS="$K5LIBS -lcom_err -lasn1"
3209                                          AC_CHECK_LIB(roken, net_write,
3210                                            [K5LIBS="$K5LIBS -lroken"])
3211                                        ],
3212                                        [ AC_MSG_RESULT(no)
3213                                          K5LIBS="-lkrb5 -lk5crypto -lcom_err"
3214                                        ]
3215                         )
3216                         AC_SEARCH_LIBS(dn_expand, resolv)
3217
3218                         AC_CHECK_LIB(gssapi,gss_init_sec_context,
3219                                 [ AC_DEFINE(GSSAPI)
3220                                   K5LIBS="-lgssapi $K5LIBS" ],
3221                                 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
3222                                         [ AC_DEFINE(GSSAPI)
3223                                           K5LIBS="-lgssapi_krb5 $K5LIBS" ],
3224                                         AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
3225                                         $K5LIBS)
3226                                 ],
3227                                 $K5LIBS)
3228
3229                         AC_CHECK_HEADER(gssapi.h, ,
3230                                 [ unset ac_cv_header_gssapi_h
3231                                   CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
3232                                   AC_CHECK_HEADERS(gssapi.h, ,
3233                                         AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
3234                                   )
3235                                 ]
3236                         )
3237
3238                         oldCPP="$CPPFLAGS"
3239                         CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
3240                         AC_CHECK_HEADER(gssapi_krb5.h, ,
3241                                         [ CPPFLAGS="$oldCPP" ])
3242
3243                 fi
3244                 if test ! -z "$need_dash_r" ; then
3245                         LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
3246                 fi
3247                 if test ! -z "$blibpath" ; then
3248                         blibpath="$blibpath:${KRB5ROOT}/lib"
3249                 fi
3250
3251                 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
3252                 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
3253                 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
3254
3255                 LIBS="$LIBS $K5LIBS"
3256                 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS, 1,
3257                         [Define this if you want to use libkafs' AFS support]))
3258         fi
3259         ]
3260 )
3261
3262 # Looking for programs, paths and files
3263
3264 PRIVSEP_PATH=/var/empty
3265 AC_ARG_WITH(privsep-path,
3266         [  --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
3267         [
3268                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3269                     test "x${withval}" != "xyes"; then
3270                         PRIVSEP_PATH=$withval
3271                 fi
3272         ]
3273 )
3274 AC_SUBST(PRIVSEP_PATH)
3275
3276 AC_ARG_WITH(xauth,
3277         [  --with-xauth=PATH       Specify path to xauth program ],
3278         [
3279                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3280                     test "x${withval}" != "xyes"; then
3281                         xauth_path=$withval
3282                 fi
3283         ],
3284         [
3285                 TestPath="$PATH"
3286                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
3287                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
3288                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
3289                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
3290                 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
3291                 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
3292                         xauth_path="/usr/openwin/bin/xauth"
3293                 fi
3294         ]
3295 )
3296
3297 STRIP_OPT=-s
3298 AC_ARG_ENABLE(strip,
3299         [  --disable-strip         Disable calling strip(1) on install],
3300         [
3301                 if test "x$enableval" = "xno" ; then
3302                         STRIP_OPT=
3303                 fi
3304         ]
3305 )
3306 AC_SUBST(STRIP_OPT)
3307
3308 if test -z "$xauth_path" ; then
3309         XAUTH_PATH="undefined"
3310         AC_SUBST(XAUTH_PATH)
3311 else
3312         AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path",
3313                 [Define if xauth is found in your path])
3314         XAUTH_PATH=$xauth_path
3315         AC_SUBST(XAUTH_PATH)
3316 fi
3317
3318 # Check for mail directory (last resort if we cannot get it from headers)
3319 if test ! -z "$MAIL" ; then
3320         maildir=`dirname $MAIL`
3321         AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir",
3322                 [Set this to your mail directory if you don't have maillock.h])
3323 fi
3324
3325 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
3326         AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
3327         disable_ptmx_check=yes
3328 fi
3329 if test -z "$no_dev_ptmx" ; then
3330         if test "x$disable_ptmx_check" != "xyes" ; then
3331                 AC_CHECK_FILE("/dev/ptmx",
3332                         [
3333                                 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX, 1,
3334                                         [Define if you have /dev/ptmx])
3335                                 have_dev_ptmx=1
3336                         ]
3337                 )
3338         fi
3339 fi
3340
3341 if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
3342         AC_CHECK_FILE("/dev/ptc",
3343                 [
3344                         AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC, 1,
3345                                 [Define if you have /dev/ptc])
3346                         have_dev_ptc=1
3347                 ]
3348         )
3349 else
3350         AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
3351 fi
3352
3353 # Options from here on. Some of these are preset by platform above
3354 AC_ARG_WITH(mantype,
3355         [  --with-mantype=man|cat|doc  Set man page type],
3356         [
3357                 case "$withval" in
3358                 man|cat|doc)
3359                         MANTYPE=$withval
3360                         ;;
3361                 *)
3362                         AC_MSG_ERROR(invalid man type: $withval)
3363                         ;;
3364                 esac
3365         ]
3366 )
3367 if test -z "$MANTYPE"; then
3368         TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
3369         AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
3370         if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
3371                 MANTYPE=doc
3372         elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
3373                 MANTYPE=man
3374         else
3375                 MANTYPE=cat
3376         fi
3377 fi
3378 AC_SUBST(MANTYPE)
3379 if test "$MANTYPE" = "doc"; then
3380         mansubdir=man;
3381 else
3382         mansubdir=$MANTYPE;
3383 fi
3384 AC_SUBST(mansubdir)
3385
3386 # Check whether to enable MD5 passwords
3387 MD5_MSG="no"
3388 AC_ARG_WITH(md5-passwords,
3389         [  --with-md5-passwords    Enable use of MD5 passwords],
3390         [
3391                 if test "x$withval" != "xno" ; then
3392                         AC_DEFINE(HAVE_MD5_PASSWORDS, 1,
3393                                 [Define if you want to allow MD5 passwords])
3394                         MD5_MSG="yes"
3395                 fi
3396         ]
3397 )
3398
3399 # Whether to disable shadow password support
3400 AC_ARG_WITH(shadow,
3401         [  --without-shadow        Disable shadow password support],
3402         [
3403                 if test "x$withval" = "xno" ; then
3404                         AC_DEFINE(DISABLE_SHADOW)
3405                         disable_shadow=yes
3406                 fi
3407         ]
3408 )
3409
3410 if test -z "$disable_shadow" ; then
3411         AC_MSG_CHECKING([if the systems has expire shadow information])
3412         AC_TRY_COMPILE(
3413         [
3414 #include <sys/types.h>
3415 #include <shadow.h>
3416         struct spwd sp;
3417         ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
3418         [ sp_expire_available=yes ], []
3419         )
3420
3421         if test "x$sp_expire_available" = "xyes" ; then
3422                 AC_MSG_RESULT(yes)
3423                 AC_DEFINE(HAS_SHADOW_EXPIRE, 1,
3424                     [Define if you want to use shadow password expire field])
3425         else
3426                 AC_MSG_RESULT(no)
3427         fi
3428 fi
3429
3430 # Use ip address instead of hostname in $DISPLAY
3431 if test ! -z "$IPADDR_IN_DISPLAY" ; then
3432         DISPLAY_HACK_MSG="yes"
3433         AC_DEFINE(IPADDR_IN_DISPLAY, 1,
3434                 [Define if you need to use IP address
3435                 instead of hostname in $DISPLAY])
3436 else
3437         DISPLAY_HACK_MSG="no"
3438         AC_ARG_WITH(ipaddr-display,
3439                 [  --with-ipaddr-display   Use ip address instead of hostname in \$DISPLAY],
3440                 [
3441                         if test "x$withval" != "xno" ; then
3442                                 AC_DEFINE(IPADDR_IN_DISPLAY)
3443                                 DISPLAY_HACK_MSG="yes"
3444                         fi
3445                 ]
3446         )
3447 fi
3448
3449 # check for /etc/default/login and use it if present.
3450 AC_ARG_ENABLE(etc-default-login,
3451         [  --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
3452         [ if test "x$enableval" = "xno"; then
3453                 AC_MSG_NOTICE([/etc/default/login handling disabled])
3454                 etc_default_login=no
3455           else
3456                 etc_default_login=yes
3457           fi ],
3458         [ if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
3459           then
3460                 AC_MSG_WARN([cross compiling: not checking /etc/default/login])
3461                 etc_default_login=no
3462           else
3463                 etc_default_login=yes
3464           fi ]
3465 )
3466
3467 if test "x$etc_default_login" != "xno"; then
3468         AC_CHECK_FILE("/etc/default/login",
3469             [ external_path_file=/etc/default/login ])
3470         if test "x$external_path_file" = "x/etc/default/login"; then
3471                 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN, 1,
3472                         [Define if your system has /etc/default/login])
3473         fi
3474 fi
3475
3476 dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
3477 if test $ac_cv_func_login_getcapbool = "yes" && \
3478         test $ac_cv_header_login_cap_h = "yes" ; then
3479         external_path_file=/etc/login.conf
3480 fi
3481
3482 # Whether to mess with the default path
3483 SERVER_PATH_MSG="(default)"
3484 AC_ARG_WITH(default-path,
3485         [  --with-default-path=    Specify default \$PATH environment for server],
3486         [
3487                 if test "x$external_path_file" = "x/etc/login.conf" ; then
3488                         AC_MSG_WARN([
3489 --with-default-path=PATH has no effect on this system.
3490 Edit /etc/login.conf instead.])
3491                 elif test "x$withval" != "xno" ; then
3492                         if test ! -z "$external_path_file" ; then
3493                                 AC_MSG_WARN([
3494 --with-default-path=PATH will only be used if PATH is not defined in
3495 $external_path_file .])
3496                         fi
3497                         user_path="$withval"
3498                         SERVER_PATH_MSG="$withval"
3499                 fi
3500         ],
3501         [ if test "x$external_path_file" = "x/etc/login.conf" ; then
3502                 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
3503         else
3504                 if test ! -z "$external_path_file" ; then
3505                         AC_MSG_WARN([
3506 If PATH is defined in $external_path_file, ensure the path to scp is included,
3507 otherwise scp will not work.])
3508                 fi
3509                 AC_RUN_IFELSE(
3510                         [AC_LANG_SOURCE([[
3511 /* find out what STDPATH is */
3512 #include <stdio.h>
3513 #ifdef HAVE_PATHS_H
3514 # include <paths.h>
3515 #endif
3516 #ifndef _PATH_STDPATH
3517 # ifdef _PATH_USERPATH  /* Irix */
3518 #  define _PATH_STDPATH _PATH_USERPATH
3519 # else
3520 #  define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
3521 # endif
3522 #endif
3523 #include <sys/types.h>
3524 #include <sys/stat.h>
3525 #include <fcntl.h>
3526 #define DATA "conftest.stdpath"
3527
3528 main()
3529 {
3530         FILE *fd;
3531         int rc;
3532
3533         fd = fopen(DATA,"w");
3534         if(fd == NULL)
3535                 exit(1);
3536
3537         if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
3538                 exit(1);
3539
3540         exit(0);
3541 }
3542                 ]])],
3543                 [ user_path=`cat conftest.stdpath` ],
3544                 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
3545                 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
3546         )
3547 # make sure $bindir is in USER_PATH so scp will work
3548                 t_bindir=`eval echo ${bindir}`
3549                 case $t_bindir in
3550                         NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
3551                 esac
3552                 case $t_bindir in
3553                         NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
3554                 esac
3555                 echo $user_path | grep ":$t_bindir"  > /dev/null 2>&1
3556                 if test $? -ne 0  ; then
3557                         echo $user_path | grep "^$t_bindir"  > /dev/null 2>&1
3558                         if test $? -ne 0  ; then
3559                                 user_path=$user_path:$t_bindir
3560                                 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
3561                         fi
3562                 fi
3563         fi ]
3564 )
3565 if test "x$external_path_file" != "x/etc/login.conf" ; then
3566         AC_DEFINE_UNQUOTED(USER_PATH, "$user_path", [Specify default $PATH])
3567         AC_SUBST(user_path)
3568 fi
3569
3570 # Set superuser path separately to user path
3571 AC_ARG_WITH(superuser-path,
3572         [  --with-superuser-path=  Specify different path for super-user],
3573         [
3574                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3575                     test "x${withval}" != "xyes"; then
3576                         AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval",
3577                                 [Define if you want a different $PATH
3578                                 for the superuser])
3579                         superuser_path=$withval
3580                 fi
3581         ]
3582 )
3583
3584
3585 AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
3586 IPV4_IN6_HACK_MSG="no"
3587 AC_ARG_WITH(4in6,
3588         [  --with-4in6             Check for and convert IPv4 in IPv6 mapped addresses],
3589         [
3590                 if test "x$withval" != "xno" ; then
3591                         AC_MSG_RESULT(yes)
3592                         AC_DEFINE(IPV4_IN_IPV6, 1,
3593                                 [Detect IPv4 in IPv6 mapped addresses
3594                                 and treat as IPv4])
3595                         IPV4_IN6_HACK_MSG="yes"
3596                 else
3597                         AC_MSG_RESULT(no)
3598                 fi
3599         ],[
3600                 if test "x$inet6_default_4in6" = "xyes"; then
3601                         AC_MSG_RESULT([yes (default)])
3602                         AC_DEFINE(IPV4_IN_IPV6)
3603                         IPV4_IN6_HACK_MSG="yes"
3604                 else
3605                         AC_MSG_RESULT([no (default)])
3606                 fi
3607         ]
3608 )
3609
3610 # Whether to enable BSD auth support
3611 BSD_AUTH_MSG=no
3612 AC_ARG_WITH(bsd-auth,
3613         [  --with-bsd-auth         Enable BSD auth support],
3614         [
3615                 if test "x$withval" != "xno" ; then
3616                         AC_DEFINE(BSD_AUTH, 1,
3617                                 [Define if you have BSD auth support])
3618                         BSD_AUTH_MSG=yes
3619                 fi
3620         ]
3621 )
3622
3623 # Where to place sshd.pid
3624 piddir=/var/run
3625 # make sure the directory exists
3626 if test ! -d $piddir ; then
3627         piddir=`eval echo ${sysconfdir}`
3628         case $piddir in
3629                 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
3630         esac
3631 fi
3632
3633 AC_ARG_WITH(pid-dir,
3634         [  --with-pid-dir=PATH     Specify location of ssh.pid file],
3635         [
3636                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3637                     test "x${withval}" != "xyes"; then
3638                         piddir=$withval
3639                         if test ! -d $piddir ; then
3640                         AC_MSG_WARN([** no $piddir directory on this system **])
3641                         fi
3642                 fi
3643         ]
3644 )
3645
3646 AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir", [Specify location of ssh.pid])
3647 AC_SUBST(piddir)
3648
3649 dnl allow user to disable some login recording features
3650 AC_ARG_ENABLE(lastlog,
3651         [  --disable-lastlog       disable use of lastlog even if detected [no]],
3652         [
3653                 if test "x$enableval" = "xno" ; then
3654                         AC_DEFINE(DISABLE_LASTLOG)
3655                 fi
3656         ]
3657 )
3658 AC_ARG_ENABLE(utmp,
3659         [  --disable-utmp          disable use of utmp even if detected [no]],
3660         [
3661                 if test "x$enableval" = "xno" ; then
3662                         AC_DEFINE(DISABLE_UTMP)
3663                 fi
3664         ]
3665 )
3666 AC_ARG_ENABLE(utmpx,
3667         [  --disable-utmpx         disable use of utmpx even if detected [no]],
3668         [
3669                 if test "x$enableval" = "xno" ; then
3670                         AC_DEFINE(DISABLE_UTMPX, 1,
3671                                 [Define if you don't want to use utmpx])
3672                 fi
3673         ]
3674 )
3675 AC_ARG_ENABLE(wtmp,
3676         [  --disable-wtmp          disable use of wtmp even if detected [no]],
3677         [
3678                 if test "x$enableval" = "xno" ; then
3679                         AC_DEFINE(DISABLE_WTMP)
3680                 fi
3681         ]
3682 )
3683 AC_ARG_ENABLE(wtmpx,
3684         [  --disable-wtmpx         disable use of wtmpx even if detected [no]],
3685         [
3686                 if test "x$enableval" = "xno" ; then
3687                         AC_DEFINE(DISABLE_WTMPX, 1,
3688                                 [Define if you don't want to use wtmpx])
3689                 fi
3690         ]
3691 )
3692 AC_ARG_ENABLE(libutil,
3693         [  --disable-libutil       disable use of libutil (login() etc.) [no]],
3694         [
3695                 if test "x$enableval" = "xno" ; then
3696                         AC_DEFINE(DISABLE_LOGIN)
3697                 fi
3698         ]
3699 )
3700 AC_ARG_ENABLE(pututline,
3701         [  --disable-pututline     disable use of pututline() etc. ([uw]tmp) [no]],
3702         [
3703                 if test "x$enableval" = "xno" ; then
3704                         AC_DEFINE(DISABLE_PUTUTLINE, 1,
3705                                 [Define if you don't want to use pututline()
3706                                 etc. to write [uw]tmp])
3707                 fi
3708         ]
3709 )
3710 AC_ARG_ENABLE(pututxline,
3711         [  --disable-pututxline    disable use of pututxline() etc. ([uw]tmpx) [no]],
3712         [
3713                 if test "x$enableval" = "xno" ; then
3714                         AC_DEFINE(DISABLE_PUTUTXLINE, 1,
3715                                 [Define if you don't want to use pututxline()
3716                                 etc. to write [uw]tmpx])
3717                 fi
3718         ]
3719 )
3720 AC_ARG_WITH(lastlog,
3721   [  --with-lastlog=FILE|DIR specify lastlog location [common locations]],
3722         [
3723                 if test "x$withval" = "xno" ; then
3724                         AC_DEFINE(DISABLE_LASTLOG)
3725                 elif test -n "$withval"  &&  test "x${withval}" != "xyes"; then
3726                         conf_lastlog_location=$withval
3727                 fi
3728         ]
3729 )
3730
3731 dnl lastlog, [uw]tmpx? detection
3732 dnl  NOTE: set the paths in the platform section to avoid the
3733 dnl   need for command-line parameters
3734 dnl lastlog and [uw]tmp are subject to a file search if all else fails
3735
3736 dnl lastlog detection
3737 dnl  NOTE: the code itself will detect if lastlog is a directory
3738 AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
3739 AC_TRY_COMPILE([
3740 #include <sys/types.h>
3741 #include <utmp.h>
3742 #ifdef HAVE_LASTLOG_H
3743 #  include <lastlog.h>
3744 #endif
3745 #ifdef HAVE_PATHS_H
3746 #  include <paths.h>
3747 #endif
3748 #ifdef HAVE_LOGIN_H
3749 # include <login.h>
3750 #endif
3751         ],
3752         [ char *lastlog = LASTLOG_FILE; ],
3753         [ AC_MSG_RESULT(yes) ],
3754         [
3755                 AC_MSG_RESULT(no)
3756                 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
3757                 AC_TRY_COMPILE([
3758 #include <sys/types.h>
3759 #include <utmp.h>
3760 #ifdef HAVE_LASTLOG_H
3761 #  include <lastlog.h>
3762 #endif
3763 #ifdef HAVE_PATHS_H
3764 #  include <paths.h>
3765 #endif
3766                 ],
3767                 [ char *lastlog = _PATH_LASTLOG; ],
3768                 [ AC_MSG_RESULT(yes) ],
3769                 [
3770                         AC_MSG_RESULT(no)
3771                         system_lastlog_path=no
3772                 ])
3773         ]
3774 )
3775
3776 if test -z "$conf_lastlog_location"; then
3777         if test x"$system_lastlog_path" = x"no" ; then
3778                 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
3779                                 if (test -d "$f" || test -f "$f") ; then
3780                                         conf_lastlog_location=$f
3781                                 fi
3782                 done
3783                 if test -z "$conf_lastlog_location"; then
3784                         AC_MSG_WARN([** Cannot find lastlog **])
3785                         dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
3786                 fi
3787         fi
3788 fi
3789
3790 if test -n "$conf_lastlog_location"; then
3791         AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location",
3792                 [Define if you want to specify the path to your lastlog file])
3793 fi
3794
3795 dnl utmp detection
3796 AC_MSG_CHECKING([if your system defines UTMP_FILE])
3797 AC_TRY_COMPILE([
3798 #include <sys/types.h>
3799 #include <utmp.h>
3800 #ifdef HAVE_PATHS_H
3801 #  include <paths.h>
3802 #endif
3803         ],
3804         [ char *utmp = UTMP_FILE; ],
3805         [ AC_MSG_RESULT(yes) ],
3806         [ AC_MSG_RESULT(no)
3807           system_utmp_path=no ]
3808 )
3809 if test -z "$conf_utmp_location"; then
3810         if test x"$system_utmp_path" = x"no" ; then
3811                 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3812                         if test -f $f ; then
3813                                 conf_utmp_location=$f
3814                         fi
3815                 done
3816                 if test -z "$conf_utmp_location"; then
3817                         AC_DEFINE(DISABLE_UTMP)
3818                 fi
3819         fi
3820 fi
3821 if test -n "$conf_utmp_location"; then
3822         AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location",
3823                 [Define if you want to specify the path to your utmp file])
3824 fi
3825
3826 dnl wtmp detection
3827 AC_MSG_CHECKING([if your system defines WTMP_FILE])
3828 AC_TRY_COMPILE([
3829 #include <sys/types.h>
3830 #include <utmp.h>
3831 #ifdef HAVE_PATHS_H
3832 #  include <paths.h>
3833 #endif
3834         ],
3835         [ char *wtmp = WTMP_FILE; ],
3836         [ AC_MSG_RESULT(yes) ],
3837         [ AC_MSG_RESULT(no)
3838           system_wtmp_path=no ]
3839 )
3840 if test -z "$conf_wtmp_location"; then
3841         if test x"$system_wtmp_path" = x"no" ; then
3842                 for f in /usr/adm/wtmp /var/log/wtmp; do
3843                         if test -f $f ; then
3844                                 conf_wtmp_location=$f
3845                         fi
3846                 done
3847                 if test -z "$conf_wtmp_location"; then
3848                         AC_DEFINE(DISABLE_WTMP)
3849                 fi
3850         fi
3851 fi
3852 if test -n "$conf_wtmp_location"; then
3853         AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location",
3854                 [Define if you want to specify the path to your wtmp file])
3855 fi
3856
3857
3858 dnl utmpx detection - I don't know any system so perverse as to require
3859 dnl  utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3860 dnl  there, though.
3861 AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3862 AC_TRY_COMPILE([
3863 #include <sys/types.h>
3864 #include <utmp.h>
3865 #ifdef HAVE_UTMPX_H
3866 #include <utmpx.h>
3867 #endif
3868 #ifdef HAVE_PATHS_H
3869 #  include <paths.h>
3870 #endif
3871         ],
3872         [ char *utmpx = UTMPX_FILE; ],
3873         [ AC_MSG_RESULT(yes) ],
3874         [ AC_MSG_RESULT(no)
3875           system_utmpx_path=no ]
3876 )
3877 if test -z "$conf_utmpx_location"; then
3878         if test x"$system_utmpx_path" = x"no" ; then
3879                 AC_DEFINE(DISABLE_UTMPX)
3880         fi
3881 else
3882         AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location",
3883                 [Define if you want to specify the path to your utmpx file])
3884 fi
3885
3886 dnl wtmpx detection
3887 AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3888 AC_TRY_COMPILE([
3889 #include <sys/types.h>
3890 #include <utmp.h>
3891 #ifdef HAVE_UTMPX_H
3892 #include <utmpx.h>
3893 #endif
3894 #ifdef HAVE_PATHS_H
3895 #  include <paths.h>
3896 #endif
3897         ],
3898         [ char *wtmpx = WTMPX_FILE; ],
3899         [ AC_MSG_RESULT(yes) ],
3900         [ AC_MSG_RESULT(no)
3901           system_wtmpx_path=no ]
3902 )
3903 if test -z "$conf_wtmpx_location"; then
3904         if test x"$system_wtmpx_path" = x"no" ; then
3905                 AC_DEFINE(DISABLE_WTMPX)
3906         fi
3907 else
3908         AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location",
3909                 [Define if you want to specify the path to your wtmpx file])
3910 fi
3911
3912
3913 if test ! -z "$blibpath" ; then
3914         LDFLAGS="$LDFLAGS $blibflags$blibpath"
3915         AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
3916 fi
3917
3918 dnl Adding -Werror to CFLAGS early prevents configure tests from running.
3919 dnl Add now.
3920 CFLAGS="$CFLAGS $werror_flags"
3921
3922 AC_EXEEXT
3923 AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openssh.xml \
3924         openbsd-compat/Makefile openbsd-compat/regress/Makefile \
3925         scard/Makefile ssh_prng_cmds survey.sh])
3926 AC_OUTPUT
3927
3928 # Print summary of options
3929
3930 # Someone please show me a better way :)
3931 A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3932 B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3933 C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3934 D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
3935 E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
3936 F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
3937 G=`eval echo ${piddir}` ; G=`eval echo ${G}`
3938 H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3939 I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3940 J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
3941
3942 echo ""
3943 echo "OpenSSH has been configured with the following options:"
3944 echo "                     User binaries: $B"
3945 echo "                   System binaries: $C"
3946 echo "               Configuration files: $D"
3947 echo "                   Askpass program: $E"
3948 echo "                      Manual pages: $F"
3949 echo "                          PID file: $G"
3950 echo "  Privilege separation chroot path: $H"
3951 if test "x$external_path_file" = "x/etc/login.conf" ; then
3952 echo "   At runtime, sshd will use the path defined in $external_path_file"
3953 echo "   Make sure the path to scp is present, otherwise scp will not work"
3954 else
3955 echo "            sshd default user PATH: $I"
3956         if test ! -z "$external_path_file"; then
3957 echo "   (If PATH is set in $external_path_file it will be used instead. If"
3958 echo "   used, ensure the path to scp is present, otherwise scp will not work.)"
3959         fi
3960 fi
3961 if test ! -z "$superuser_path" ; then
3962 echo "          sshd superuser user PATH: $J"
3963 fi
3964 echo "                    Manpage format: $MANTYPE"
3965 echo "                       PAM support: $PAM_MSG"
3966 echo "                   OSF SIA support: $SIA_MSG"
3967 echo "                 KerberosV support: $KRB5_MSG"
3968 echo "                   SELinux support: $SELINUX_MSG"
3969 echo "                 Smartcard support: $SCARD_MSG"
3970 echo "                     S/KEY support: $SKEY_MSG"
3971 echo "              TCP Wrappers support: $TCPW_MSG"
3972 echo "              MD5 password support: $MD5_MSG"
3973 echo "                   libedit support: $LIBEDIT_MSG"
3974 echo "  Solaris process contract support: $SPC_MSG"
3975 echo "       IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
3976 echo "           Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3977 echo "                  BSD Auth support: $BSD_AUTH_MSG"
3978 echo "              Random number source: $RAND_MSG"
3979 if test ! -z "$USE_RAND_HELPER" ; then
3980 echo "     ssh-rand-helper collects from: $RAND_HELPER_MSG"
3981 fi
3982
3983 echo ""
3984
3985 echo "              Host: ${host}"
3986 echo "          Compiler: ${CC}"
3987 echo "    Compiler flags: ${CFLAGS}"
3988 echo "Preprocessor flags: ${CPPFLAGS}"
3989 echo "      Linker flags: ${LDFLAGS}"
3990 echo "         Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
3991
3992 echo ""
3993
3994 if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
3995         echo "SVR4 style packages are supported with \"make package\""
3996         echo ""
3997 fi
3998
3999 if test "x$PAM_MSG" = "xyes" ; then
4000         echo "PAM is enabled. You may need to install a PAM control file "
4001         echo "for sshd, otherwise password authentication may fail. "
4002         echo "Example PAM control files can be found in the contrib/ "
4003         echo "subdirectory"
4004         echo ""
4005 fi
4006
4007 if test ! -z "$RAND_HELPER_CMDHASH" ; then
4008         echo "WARNING: you are using the builtin random number collection "
4009         echo "service. Please read WARNING.RNG and request that your OS "
4010         echo "vendor includes kernel-based random number collection in "
4011         echo "future versions of your OS."
4012         echo ""
4013 fi
4014
4015 if test ! -z "$NO_PEERCHECK" ; then
4016         echo "WARNING: the operating system that you are using does not "
4017         echo "appear to support either the getpeereid() API nor the "
4018         echo "SO_PEERCRED getsockopt() option. These facilities are used to "
4019         echo "enforce security checks to prevent unauthorised connections to "
4020         echo "ssh-agent. Their absence increases the risk that a malicious "
4021         echo "user can connect to your agent. "
4022         echo ""
4023 fi
4024
4025 if test "$AUDIT_MODULE" = "bsm" ; then
4026         echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
4027         echo "See the Solaris section in README.platform for details."
4028 fi