]> andersk Git - openssh.git/blame - configure.ac
andersk / openssh.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
- (dtucker) [LICENCE configure.ac defines.h openbsd-compat/realpath.c]
[openssh.git] / configure.ac
CommitLineData
eb5d7ff6 1# $Id$
2b983b95 2#
3# Copyright (c) 1999-2004 Damien Miller
4#
5# Permission to use, copy, modify, and distribute this software for any
6# purpose with or without fee is hereby granted, provided that the above
7# copyright notice and this permission notice appear in all copies.
8#
9# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
0b202697 16
76e6410a 17AC_INIT(OpenSSH, Portable, openssh-unix-dev@mindrot.org)
98a7c37b 18AC_CONFIG_SRCDIR([ssh.c])
5881cd60 19
20AC_CONFIG_HEADER(config.h)
b14b2ae7 21AC_PROG_CC
a7effaac 22AC_CANONICAL_HOST
cf0c5df5 23AC_C_BIGENDIAN
5881cd60 24
a0391976 25# Checks for programs.
4bbf95fa 26AC_PROG_AWK
4cca272e 27AC_PROG_CPP
5881cd60 28AC_PROG_RANLIB
cf8dd513 29AC_PROG_INSTALL
bee0a37e 30AC_PATH_PROG(AR, ar)
ddd8c95b 31AC_PATH_PROG(CAT, cat)
32AC_PATH_PROG(KILL, kill)
13dd877b 33AC_PATH_PROGS(PERL, perl5 perl)
c3690df3 34AC_PATH_PROG(SED, sed)
a0f84251 35AC_SUBST(PERL)
ad85db64 36AC_PATH_PROG(ENT, ent)
37AC_SUBST(ENT)
6958bd37 38AC_PATH_PROG(TEST_MINUS_S_SH, bash)
39AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
40AC_PATH_PROG(TEST_MINUS_S_SH, sh)
6193497b 41AC_PATH_PROG(SH, sh)
a3245b92 42AC_SUBST(TEST_SHELL,sh)
f498ed15 43
9cefe228 44dnl for buildpkg.sh
45AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
46 [/usr/sbin${PATH_SEPARATOR}/etc])
47AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
48 [/usr/sbin${PATH_SEPARATOR}/etc])
49AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
50
948fd8b9 51# System features
52AC_SYS_LARGEFILE
53
c193d002 54if test -z "$AR" ; then
55 AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
56fi
57
2e73a022 58# Use LOGIN_PROGRAM from environment if possible
59if test ! -z "$LOGIN_PROGRAM" ; then
60 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM")
61else
62 # Search for login
63 AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
64 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
65 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
66 fi
67fi
68
37656beb 69AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
70if test ! -z "$PATH_PASSWD_PROG" ; then
71 AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG")
72fi
73
d423d822 74if test -z "$LD" ; then
75 LD=$CC
76fi
77AC_SUBST(LD)
82f4e93d 78
d423d822 79AC_C_INLINE
dfafb2e1 80
81AC_CHECK_DECL(LLONG_MAX, have_llong_max=1, , [#include <limits.h>])
82
aff51935 83if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
af40ca44 84 CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wuninitialized"
44d71ad5 85 CFLAGS="$CFLAGS -Wsign-compare"
8a3ff1aa 86
dfafb2e1 87 if test -z "$have_llong_max"; then
88 # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
89 unset ac_cv_have_decl_LLONG_MAX
90 saved_CFLAGS="$CFLAGS"
91 CFLAGS="$CFLAGS -std=gnu99"
92 AC_CHECK_DECL(LLONG_MAX,
93 [have_llong_max=1],
94 [CFLAGS="$saved_CFLAGS"],
95 [#include <limits.h>]
96 )
97 fi
d423d822 98fi
99
343ba2ce 100if test -z "$have_llong_max"; then
101 AC_MSG_CHECKING([for max value of long long])
102 AC_RUN_IFELSE(
103 [AC_LANG_SOURCE([[
104#include <stdio.h>
105/* Why is this so damn hard? */
106#ifdef __GNUC__
107# undef __GNUC__
108#endif
109#define __USE_ISOC99
110#include <limits.h>
111#define DATA "conftest.llminmax"
112int main(void) {
113 FILE *f;
114 long long i, llmin, llmax = 0;
115
116 if((f = fopen(DATA,"w")) == NULL)
117 exit(1);
118
119#if defined(LLONG_MIN) && defined(LLONG_MAX)
120 fprintf(stderr, "Using system header for LLONG_MIN and LLONG_MAX\n");
121 llmin = LLONG_MIN;
122 llmax = LLONG_MAX;
123#else
124 fprintf(stderr, "Calculating LLONG_MIN and LLONG_MAX\n");
125 /* This will work on one's complement and two's complement */
126 for (i = 1; i > llmax; i <<= 1, i++)
127 llmax = i;
128 llmin = llmax + 1LL; /* wrap */
129#endif
130
131 /* Sanity check */
132 if (llmin + 1 < llmin || llmin - 1 < llmin || llmax + 1 > llmax
133 || llmax - 1 > llmax) {
134 fprintf(f, "unknown unknown\n");
135 exit(2);
136 }
137
138 if (fprintf(f ,"%lld %lld", llmin, llmax) < 0)
139 exit(3);
140
141 exit(0);
142}
143 ]])],
144 [
145 llong_min=`$AWK '{print $1}' conftest.llminmax`
146 llong_max=`$AWK '{print $2}' conftest.llminmax`
147 AC_MSG_RESULT($llong_max)
148 AC_DEFINE_UNQUOTED(LLONG_MAX, [${llong_max}LL],
149 [max value of long long calculated by configure])
150 AC_MSG_CHECKING([for min value of long long])
151 AC_MSG_RESULT($llong_min)
152 AC_DEFINE_UNQUOTED(LLONG_MIN, [${llong_min}LL],
153 [min value of long long calculated by configure])
154 ],
155 [
156 AC_MSG_RESULT(not found)
157 ],
158 [
159 AC_MSG_WARN([cross compiling: not checking])
160 ]
161 )
162fi
163
e6354014 164AC_ARG_WITH(rpath,
165 [ --without-rpath Disable auto-added -R linker paths],
166 [
82f4e93d 167 if test "x$withval" = "xno" ; then
e6354014 168 need_dash_r=""
169 fi
170 if test "x$withval" = "xyes" ; then
171 need_dash_r=1
172 fi
173 ]
174)
175
a0391976 176# Check for some target-specific stuff
a7effaac 177case "$host" in
9d6b1b96 178*-*-aix*)
aff51935 179 AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
68ece370 180 if (test -z "$blibpath"); then
0a15d73b 181 blibpath="/usr/lib:/lib"
68ece370 182 fi
183 saved_LDFLAGS="$LDFLAGS"
184 for tryflags in -blibpath: -Wl,-blibpath: -Wl,-rpath, ;do
185 if (test -z "$blibflags"); then
186 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
187 AC_TRY_LINK([], [], [blibflags=$tryflags])
188 fi
189 done
190 if (test -z "$blibflags"); then
191 AC_MSG_RESULT(not found)
192 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
193 else
194 AC_MSG_RESULT($blibflags)
bd499f9e 195 fi
68ece370 196 LDFLAGS="$saved_LDFLAGS"
e351e493 197 dnl Check for authenticate. Might be in libs.a on older AIXes
198 AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE)],
0764e748 199 [AC_CHECK_LIB(s,authenticate,
e351e493 200 [ AC_DEFINE(WITH_AIXAUTHENTICATE)
0764e748 201 LIBS="$LIBS -ls"
202 ])
203 ])
ba603e06 204 dnl Check for various auth function declarations in headers.
c85ed8e2 205 AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
72ad335d 206 passwdexpired, setauthdb], , , [#include <usersec.h>])
e351e493 207 dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
ba603e06 208 AC_CHECK_DECLS(loginfailed,
e351e493 209 [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
210 AC_TRY_COMPILE(
f58c0e01 211 [#include <usersec.h>],
e351e493 212 [(void)loginfailed("user","host","tty",0);],
213 [AC_MSG_RESULT(yes)
214 AC_DEFINE(AIX_LOGINFAILED_4ARG)],
f58c0e01 215 [AC_MSG_RESULT(no)]
e351e493 216 )],
217 [],
218 [#include <usersec.h>]
219 )
2aa3a16c 220 AC_CHECK_FUNCS(setauthdb)
5ccf88cb 221 check_for_aix_broken_getaddrinfo=1
1352689f 222 AC_DEFINE(BROKEN_REALPATH)
3b8dff69 223 AC_DEFINE(SETEUID_BREAKS_SETUID)
224 AC_DEFINE(BROKEN_SETREUID)
225 AC_DEFINE(BROKEN_SETREGID)
a3cef3ca 226 dnl AIX handles lastlog as part of its login message
227 AC_DEFINE(DISABLE_LASTLOG)
58177c0a 228 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3a2b2b44 229 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
9d6b1b96 230 ;;
3c62e7eb 231*-*-cygwin*)
a52997bd 232 check_for_libcrypt_later=1
ffb8d130 233 LIBS="$LIBS /usr/lib/textmode.o"
3c62e7eb 234 AC_DEFINE(HAVE_CYGWIN)
7043a38d 235 AC_DEFINE(USE_PIPES)
3c62e7eb 236 AC_DEFINE(DISABLE_SHADOW)
3c62e7eb 237 AC_DEFINE(IP_TOS_IS_BROKEN)
3d114925 238 AC_DEFINE(NO_X11_UNIX_SOCKETS)
e6f15ed1 239 AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT)
94d8258b 240 AC_DEFINE(DISABLE_FD_PASSING)
3c62e7eb 241 ;;
d6fdb079 242*-*-dgux*)
243 AC_DEFINE(IP_TOS_IS_BROKEN)
0c6a72a5 244 AC_DEFINE(SETEUID_BREAKS_SETUID)
245 AC_DEFINE(BROKEN_SETREUID)
246 AC_DEFINE(BROKEN_SETREGID)
d6fdb079 247 ;;
39c98ef7 248*-*-darwin*)
33e2e066 249 AC_MSG_CHECKING(if we have working getaddrinfo)
250 AC_TRY_RUN([#include <mach-o/dyld.h>
251main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
252 exit(0);
253 else
254 exit(1);
255}], [AC_MSG_RESULT(working)],
256 [AC_MSG_RESULT(buggy)
257 AC_DEFINE(BROKEN_GETADDRINFO)],
b27e573d 258 [AC_MSG_RESULT(assume it is working)])
635e0c42 259 AC_DEFINE(SETEUID_BREAKS_SETUID)
260 AC_DEFINE(BROKEN_SETREUID)
261 AC_DEFINE(BROKEN_SETREGID)
ff620033 262 AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1)
39c98ef7 263 ;;
7d458c86 264*-*-hpux*)
265 # first we define all of the options common to all HP-UX releases
b8fea62d 266 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
44839801 267 IPADDR_IN_DISPLAY=yes
2b10f47a 268 AC_DEFINE(USE_PIPES)
a2572aa7 269 AC_DEFINE(LOGIN_NO_ENDOPT)
270 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3e6e3da0 271 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
3a2b2b44 272 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
f75ca46d 273 LIBS="$LIBS -lsec"
7d458c86 274 AC_CHECK_LIB(xnet, t_error, ,
275 AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
276
277 # next, we define all of the options specific to major releases
278 case "$host" in
279 *-*-hpux10*)
280 if test -z "$GCC"; then
281 CFLAGS="$CFLAGS -Ae"
282 fi
283 ;;
284 *-*-hpux11*)
285 AC_DEFINE(PAM_SUN_CODEBASE)
286 AC_DEFINE(DISABLE_UTMP)
287 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
288 check_for_hpux_broken_getaddrinfo=1
289 check_for_conflicting_getspnam=1
290 ;;
291 esac
292
293 # lastly, we define options specific to minor releases
294 case "$host" in
295 *-*-hpux10.26)
296 AC_DEFINE(HAVE_SECUREWARE)
297 disable_ptmx_check=yes
298 LIBS="$LIBS -lsecpw"
299 ;;
300 esac
2b763e31 301 ;;
d94aa2ae 302*-*-irix5*)
6ac7829a 303 PATH="$PATH:/usr/etc"
416ed5a7 304 AC_DEFINE(BROKEN_INET_NTOA)
cb433561 305 AC_DEFINE(SETEUID_BREAKS_SETUID)
306 AC_DEFINE(BROKEN_SETREUID)
307 AC_DEFINE(BROKEN_SETREGID)
0e8f4eba 308 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 309 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
b9795b89 310 ;;
311*-*-irix6*)
6ac7829a 312 PATH="$PATH:/usr/etc"
3206bb3b 313 AC_DEFINE(WITH_IRIX_ARRAY)
314 AC_DEFINE(WITH_IRIX_PROJECT)
315 AC_DEFINE(WITH_IRIX_AUDIT)
b5171f93 316 AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS)])
416ed5a7 317 AC_DEFINE(BROKEN_INET_NTOA)
412c0eaa 318 AC_DEFINE(SETEUID_BREAKS_SETUID)
319 AC_DEFINE(BROKEN_SETREUID)
320 AC_DEFINE(BROKEN_SETREGID)
3d59832f 321 AC_DEFINE(BROKEN_UPDWTMPX)
0e8f4eba 322 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 323 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
d94aa2ae 324 ;;
5cdfe03f 325*-*-linux*)
326 no_dev_ptmx=1
717057b6 327 check_for_libcrypt_later=1
eacb954e 328 check_for_openpty_ctty_bug=1
80faa19f 329 AC_DEFINE(DONT_TRY_OTHER_AF)
a8545c6c 330 AC_DEFINE(PAM_TTY_KLUDGE)
b90bed9f 331 AC_DEFINE(LOCKED_PASSWD_PREFIX, "!")
3a2b2b44 332 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
cd698186 333 AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM)
b6610e8f 334 AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
335 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
80faa19f 336 inet6_default_4in6=yes
bf7c1e6c 337 case `uname -r` in
ad84c479 338 1.*|2.0.*)
bf7c1e6c 339 AC_DEFINE(BROKEN_CMSG_TYPE)
340 ;;
bf7c1e6c 341 esac
5cdfe03f 342 ;;
66d6c27e 343mips-sony-bsd|mips-sony-newsos4)
35fc74ed 344 AC_DEFINE(NEED_SETPRGP, [], [Need setpgrp to acquire controlling tty])
66d6c27e 345 SONY=1
66d6c27e 346 ;;
d468fc76 347*-*-netbsd*)
33e2e066 348 check_for_libcrypt_before=1
82f4e93d 349 if test "x$withval" != "xno" ; then
e6354014 350 need_dash_r=1
351 fi
d468fc76 352 ;;
86b416a7 353*-*-freebsd*)
354 check_for_libcrypt_later=1
355 ;;
8707b7eb 356*-*-bsdi*)
357 AC_DEFINE(SETEUID_BREAKS_SETUID)
358 AC_DEFINE(BROKEN_SETREUID)
359 AC_DEFINE(BROKEN_SETREGID)
360 ;;
729bfe59 361*-next-*)
729bfe59 362 conf_lastlog_location="/usr/adm/lastlog"
698d107e 363 conf_utmp_location=/etc/utmp
364 conf_wtmp_location=/usr/adm/wtmp
365 MAIL=/usr/spool/mail
729bfe59 366 AC_DEFINE(HAVE_NEXT)
443172c4 367 AC_DEFINE(BROKEN_REALPATH)
00937921 368 AC_DEFINE(USE_PIPES)
86b416a7 369 AC_DEFINE(BROKEN_SAVED_UIDS)
729bfe59 370 ;;
5b7b5e23 371*-*-openbsd*)
372 AC_DEFINE(HAVE_ATTRIBUTE__SENTINEL__, 1, [OpenBSD's gcc has sentinel])
373 ;;
9d6b1b96 374*-*-solaris*)
82f4e93d 375 if test "x$withval" != "xno" ; then
010e9d5b 376 need_dash_r=1
377 fi
adeebd37 378 AC_DEFINE(PAM_SUN_CODEBASE)
7e2d5fa4 379 AC_DEFINE(LOGIN_NEEDS_UTMPX)
380 AC_DEFINE(LOGIN_NEEDS_TERM)
7f0a4ff1 381 AC_DEFINE(PAM_TTY_KLUDGE)
059d3165 382 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID)
3e6e3da0 383 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
ad84c479 384 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
385 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 386 external_path_file=/etc/default/login
1d7b9b20 387 # hardwire lastlog location (can't detect it on some versions)
388 conf_lastlog_location="/var/adm/lastlog"
32c80420 389 AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
390 sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
391 if test "$sol2ver" -ge 8; then
392 AC_MSG_RESULT(yes)
393 AC_DEFINE(DISABLE_UTMP)
394 AC_DEFINE(DISABLE_WTMP)
395 else
396 AC_MSG_RESULT(no)
397 fi
9d6b1b96 398 ;;
a423beaf 399*-*-sunos4*)
0c2fb82f 400 CPPFLAGS="$CPPFLAGS -DSUNOS4"
a423beaf 401 AC_CHECK_FUNCS(getpwanam)
adeebd37 402 AC_DEFINE(PAM_SUN_CODEBASE)
32eec038 403 conf_utmp_location=/etc/utmp
404 conf_wtmp_location=/var/adm/wtmp
405 conf_lastlog_location=/var/adm/lastlog
137d7b6c 406 AC_DEFINE(USE_PIPES)
a423beaf 407 ;;
6f68f28a 408*-ncr-sysv*)
98a7c37b 409 LIBS="$LIBS -lc89"
29525240 410 AC_DEFINE(USE_PIPES)
eabb99c6 411 AC_DEFINE(SSHD_ACQUIRES_CTTY)
6fb3618d 412 AC_DEFINE(SETEUID_BREAKS_SETUID)
413 AC_DEFINE(BROKEN_SETREUID)
414 AC_DEFINE(BROKEN_SETREGID)
6f68f28a 415 ;;
132dd316 416*-sni-sysv*)
c8c15bcb 417 # /usr/ucblib MUST NOT be searched on ReliantUNIX
e2798e96 418 AC_CHECK_LIB(dl, dlsym, ,)
85cf54ec 419 # -lresolv needs to be at then end of LIBS or DNS lookups break
420 AC_CHECK_LIB(res_query, resolv, [ LIBS="$LIBS -lresolv" ])
9548d6c8 421 IPADDR_IN_DISPLAY=yes
422 AC_DEFINE(USE_PIPES)
132dd316 423 AC_DEFINE(IP_TOS_IS_BROKEN)
605369bb 424 AC_DEFINE(SETEUID_BREAKS_SETUID)
425 AC_DEFINE(BROKEN_SETREUID)
426 AC_DEFINE(BROKEN_SETREGID)
eabb99c6 427 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 428 external_path_file=/etc/default/login
c8c15bcb 429 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
430 # Attention: always take care to bind libsocket and libnsl before libc,
431 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
132dd316 432 ;;
79a7ba96 433# UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
77bb0bca 434*-*-sysv4.2*)
ed6553e2 435 AC_DEFINE(USE_PIPES)
7ed101c0 436 AC_DEFINE(SETEUID_BREAKS_SETUID)
437 AC_DEFINE(BROKEN_SETREUID)
438 AC_DEFINE(BROKEN_SETREGID)
46f853b9 439 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
77bb0bca 440 ;;
79a7ba96 441# UnixWare 7.x, OpenUNIX 8
77bb0bca 442*-*-sysv5*)
ed6553e2 443 AC_DEFINE(USE_PIPES)
7ed101c0 444 AC_DEFINE(SETEUID_BREAKS_SETUID)
445 AC_DEFINE(BROKEN_SETREUID)
446 AC_DEFINE(BROKEN_SETREGID)
46f853b9 447 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
822015dd 448 case "$host" in
449 *-*-sysv5SCO_SV*) # SCO OpenServer 6.x
450 TEST_SHELL=/u95/bin/sh
451 ;;
452 esac
77bb0bca 453 ;;
9d6b1b96 454*-*-sysv*)
9d6b1b96 455 ;;
79a7ba96 456# SCO UNIX and OEM versions of SCO UNIX
77bb0bca 457*-*-sco3.2v4*)
11cf4f1f 458 AC_MSG_ERROR("This Platform is no longer supported.")
77bb0bca 459 ;;
79a7ba96 460# SCO OpenServer 5.x
77bb0bca 461*-*-sco3.2v5*)
21710e39 462 if test -z "$GCC"; then
463 CFLAGS="$CFLAGS -belf"
464 fi
ed6553e2 465 LIBS="$LIBS -lprot -lx -ltinfo -lm"
509b1f88 466 no_dev_ptmx=1
ed6553e2 467 AC_DEFINE(USE_PIPES)
6e879cb4 468 AC_DEFINE(HAVE_SECUREWARE)
d287c664 469 AC_DEFINE(DISABLE_SHADOW)
94d8258b 470 AC_DEFINE(DISABLE_FD_PASSING)
7ed101c0 471 AC_DEFINE(SETEUID_BREAKS_SETUID)
472 AC_DEFINE(BROKEN_SETREUID)
473 AC_DEFINE(BROKEN_SETREGID)
bcebad47 474 AC_DEFINE(WITH_ABBREV_NO_TTY)
34f2baf0 475 AC_DEFINE(BROKEN_UPDWTMPX)
3ade3b57 476 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
aca75d94 477 AC_CHECK_FUNCS(getluid setluid)
533875af 478 MANTYPE=man
a3245b92 479 TEST_SHELL=ksh
509b1f88 480 ;;
ccbb983c 481*-*-unicosmk*)
c1ad5966 482 AC_DEFINE(NO_SSH_LASTLOG)
483 AC_DEFINE(SETEUID_BREAKS_SETUID)
484 AC_DEFINE(BROKEN_SETREUID)
485 AC_DEFINE(BROKEN_SETREGID)
ccbb983c 486 AC_DEFINE(USE_PIPES)
487 AC_DEFINE(DISABLE_FD_PASSING)
488 LDFLAGS="$LDFLAGS"
489 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
490 MANTYPE=cat
d262b7f2 491 ;;
7b9a8c6e 492*-*-unicosmp*)
c1ad5966 493 AC_DEFINE(SETEUID_BREAKS_SETUID)
494 AC_DEFINE(BROKEN_SETREUID)
495 AC_DEFINE(BROKEN_SETREGID)
7b9a8c6e 496 AC_DEFINE(WITH_ABBREV_NO_TTY)
497 AC_DEFINE(USE_PIPES)
498 AC_DEFINE(DISABLE_FD_PASSING)
499 LDFLAGS="$LDFLAGS"
c1ad5966 500 LIBS="$LIBS -lgen -lacid -ldb"
7b9a8c6e 501 MANTYPE=cat
502 ;;
ca5c7d6a 503*-*-unicos*)
c1ad5966 504 AC_DEFINE(SETEUID_BREAKS_SETUID)
505 AC_DEFINE(BROKEN_SETREUID)
506 AC_DEFINE(BROKEN_SETREGID)
ca5c7d6a 507 AC_DEFINE(USE_PIPES)
94d8258b 508 AC_DEFINE(DISABLE_FD_PASSING)
ef51930f 509 AC_DEFINE(NO_SSH_LASTLOG)
ccbb983c 510 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
511 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
512 MANTYPE=cat
a704dd54 513 ;;
4d33e531 514*-dec-osf*)
99c8ddac 515 AC_MSG_CHECKING(for Digital Unix SIA)
516 no_osfsia=""
517 AC_ARG_WITH(osfsia,
518 [ --with-osfsia Enable Digital Unix SIA],
519 [
520 if test "x$withval" = "xno" ; then
521 AC_MSG_RESULT(disabled)
522 no_osfsia=1
523 fi
524 ],
525 )
526 if test -z "$no_osfsia" ; then
4d33e531 527 if test -f /etc/sia/matrix.conf; then
528 AC_MSG_RESULT(yes)
529 AC_DEFINE(HAVE_OSF_SIA)
530 AC_DEFINE(DISABLE_LOGIN)
58d0df4e 531 AC_DEFINE(DISABLE_FD_PASSING)
4d33e531 532 LIBS="$LIBS -lsecurity -ldb -lm -laud"
533 else
534 AC_MSG_RESULT(no)
dbf8efb3 535 AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin")
4d33e531 536 fi
537 fi
a6e67b60 538 AC_DEFINE(BROKEN_GETADDRINFO)
f4f2ff4f 539 AC_DEFINE(SETEUID_BREAKS_SETUID)
08da2d08 540 AC_DEFINE(BROKEN_SETREUID)
541 AC_DEFINE(BROKEN_SETREGID)
4d33e531 542 ;;
41cb4569 543
544*-*-nto-qnx)
545 AC_DEFINE(USE_PIPES)
546 AC_DEFINE(NO_X11_UNIX_SOCKETS)
547 AC_DEFINE(MISSING_NFDBITS)
548 AC_DEFINE(MISSING_HOWMANY)
549 AC_DEFINE(MISSING_FD_MASK)
550 ;;
35fc74ed 551
552*-*-ultrix*)
553 AC_DEFINE(BROKEN_GETGROUPS, [], [getgroups(0,NULL) will return -1])
554 AC_DEFINE(BROKEN_MMAP, [], [Ultrix mmap can't map files])
555 AC_DEFINE(NEED_SETPRGP, [], [Need setpgrp to acquire controlling tty])
b5765e1d 556 AC_DEFINE(HAVE_SYS_SYSLOG_H, 1, [Force use of sys/syslog.h on Ultrix])
557 ;;
a7effaac 558esac
559
8e7b16f8 560# Allow user to specify flags
561AC_ARG_WITH(cflags,
562 [ --with-cflags Specify additional flags to pass to compiler],
563 [
6cf0200f 564 if test -n "$withval" && test "x$withval" != "xno" && \
565 test "x${withval}" != "xyes"; then
8e7b16f8 566 CFLAGS="$CFLAGS $withval"
567 fi
82f4e93d 568 ]
8e7b16f8 569)
0c2fb82f 570AC_ARG_WITH(cppflags,
571 [ --with-cppflags Specify additional flags to pass to preprocessor] ,
572 [
6cf0200f 573 if test -n "$withval" && test "x$withval" != "xno" && \
574 test "x${withval}" != "xyes"; then
0c2fb82f 575 CPPFLAGS="$CPPFLAGS $withval"
576 fi
577 ]
578)
8e7b16f8 579AC_ARG_WITH(ldflags,
97b378bf 580 [ --with-ldflags Specify additional flags to pass to linker],
8e7b16f8 581 [
6cf0200f 582 if test -n "$withval" && test "x$withval" != "xno" && \
583 test "x${withval}" != "xyes"; then
8e7b16f8 584 LDFLAGS="$LDFLAGS $withval"
585 fi
82f4e93d 586 ]
8e7b16f8 587)
588AC_ARG_WITH(libs,
589 [ --with-libs Specify additional libraries to link with],
590 [
6cf0200f 591 if test -n "$withval" && test "x$withval" != "xno" && \
592 test "x${withval}" != "xyes"; then
8e7b16f8 593 LIBS="$LIBS $withval"
594 fi
82f4e93d 595 ]
8e7b16f8 596)
ed89c848 597AC_ARG_WITH(Werror,
598 [ --with-Werror Build main code with -Werror],
599 [
600 if test -n "$withval" && test "x$withval" != "xno"; then
601 werror_flags="-Werror"
602 if "x${withval}" != "xyes"; then
603 werror_flags="$withval"
604 fi
605 fi
606 ]
607)
8e7b16f8 608
c5829391 609AC_MSG_CHECKING(compiler and flags for sanity)
479cece8 610AC_RUN_IFELSE(
611 [AC_LANG_SOURCE([
c5829391 612#include <stdio.h>
613int main(){exit(0);}
479cece8 614 ])],
c5829391 615 [ AC_MSG_RESULT(yes) ],
616 [
617 AC_MSG_RESULT(no)
618 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
1a01a50c 619 ],
620 [ AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
c5829391 621)
622
b04a9f8c 623dnl Checks for header files.
624AC_CHECK_HEADERS( \
625 bstring.h \
626 crypt.h \
627 dirent.h \
628 endian.h \
629 features.h \
630 floatingpoint.h \
631 getopt.h \
632 glob.h \
633 ia.h \
634 lastlog.h \
635 limits.h \
636 login.h \
637 login_cap.h \
638 maillock.h \
639 ndir.h \
640 netdb.h \
641 netgroup.h \
642 netinet/in_systm.h \
643 pam/pam_appl.h \
644 paths.h \
645 pty.h \
646 readpassphrase.h \
647 rpc/types.h \
648 security/pam_appl.h \
649 shadow.h \
650 stddef.h \
651 stdint.h \
0957c2cf 652 string.h \
b04a9f8c 653 strings.h \
654 sys/audit.h \
655 sys/bitypes.h \
656 sys/bsdtty.h \
657 sys/cdefs.h \
658 sys/dir.h \
659 sys/mman.h \
660 sys/ndir.h \
661 sys/prctl.h \
662 sys/pstat.h \
663 sys/select.h \
664 sys/stat.h \
665 sys/stream.h \
666 sys/stropts.h \
667 sys/strtio.h \
668 sys/sysmacros.h \
669 sys/time.h \
670 sys/timers.h \
671 sys/un.h \
672 time.h \
673 tmpdir.h \
674 ttyent.h \
25dd2ce6 675 unistd.h \
b04a9f8c 676 usersec.h \
677 util.h \
678 utime.h \
679 utmp.h \
680 utmpx.h \
ea76f54c 681 vis.h \
b04a9f8c 682)
ddceb1c8 683
765a24cd 684# sys/ptms.h requires sys/stream.h to be included first on Solaris
685AC_CHECK_HEADERS(sys/ptms.h, [], [], [
686#ifdef HAVE_SYS_STREAM_H
687# include <sys/stream.h>
688#endif
689])
690
a0391976 691# Checks for libraries.
98a7c37b 692AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
693AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
2c523de9 694
446227d6 695dnl IRIX and Solaris 2.5.1 have dirname() in libgen
696AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
697 AC_CHECK_LIB(gen, dirname,[
698 AC_CACHE_CHECK([for broken dirname],
699 ac_cv_have_broken_dirname, [
700 save_LIBS="$LIBS"
701 LIBS="$LIBS -lgen"
702 AC_TRY_RUN(
703 [
704#include <libgen.h>
705#include <string.h>
706
707int main(int argc, char **argv) {
708 char *s, buf[32];
709
710 strncpy(buf,"/etc", 32);
711 s = dirname(buf);
712 if (!s || strncmp(s, "/", 32) != 0) {
713 exit(1);
714 } else {
715 exit(0);
716 }
717}
718 ],
719 [ ac_cv_have_broken_dirname="no" ],
720 [ ac_cv_have_broken_dirname="yes" ]
721 )
722 LIBS="$save_LIBS"
723 ])
724 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
725 LIBS="$LIBS -lgen"
726 AC_DEFINE(HAVE_DIRNAME)
727 AC_CHECK_HEADERS(libgen.h)
728 fi
729 ])
730])
731
732AC_CHECK_FUNC(getspnam, ,
733 AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
734AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME))
735
98a7c37b 736dnl zlib is required
737AC_ARG_WITH(zlib,
738 [ --with-zlib=PATH Use zlib in PATH],
6dd05556 739 [ if test "x$withval" = "xno" ; then
740 AC_MSG_ERROR([*** zlib is required ***])
741 elif test "x$withval" != "xyes"; then
98a7c37b 742 if test -d "$withval/lib"; then
743 if test -n "${need_dash_r}"; then
5a162955 744 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 745 else
5a162955 746 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 747 fi
748 else
749 if test -n "${need_dash_r}"; then
5a162955 750 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 751 else
5a162955 752 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 753 fi
754 fi
755 if test -d "$withval/include"; then
5a162955 756 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 757 else
5a162955 758 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 759 fi
6dd05556 760 fi ]
98a7c37b 761)
762
0a15d73b 763AC_CHECK_LIB(z, deflate, ,
764 [
765 saved_CPPFLAGS="$CPPFLAGS"
766 saved_LDFLAGS="$LDFLAGS"
767 save_LIBS="$LIBS"
768 dnl Check default zlib install dir
769 if test -n "${need_dash_r}"; then
770 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
771 else
772 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
773 fi
774 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
775 LIBS="$LIBS -lz"
776 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
777 [
778 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
779 ]
780 )
781 ]
782)
4ad65809 783AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
8068d564 784
785AC_ARG_WITH(zlib-version-check,
786 [ --without-zlib-version-check Disable zlib version check],
787 [ if test "x$withval" = "xno" ; then
788 zlib_check_nonfatal=1
789 fi
790 ]
791)
792
5c7fc85d 793AC_MSG_CHECKING(for possibly buggy zlib)
479cece8 794AC_RUN_IFELSE([AC_LANG_SOURCE([[
5c7fc85d 795#include <stdio.h>
4ad65809 796#include <zlib.h>
797int main()
798{
5c7fc85d 799 int a=0, b=0, c=0, d=0, n, v;
800 n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
801 if (n != 3 && n != 4)
4ad65809 802 exit(1);
5c7fc85d 803 v = a*1000000 + b*10000 + c*100 + d;
804 fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
805
806 /* 1.1.4 is OK */
807 if (a == 1 && b == 1 && c >= 4)
4ad65809 808 exit(0);
5c7fc85d 809
0072b59d 810 /* 1.2.3 and up are OK */
811 if (v >= 1020300)
5c7fc85d 812 exit(0);
813
4ad65809 814 exit(2);
815}
479cece8 816 ]])],
5c7fc85d 817 AC_MSG_RESULT(no),
818 [ AC_MSG_RESULT(yes)
8068d564 819 if test -z "$zlib_check_nonfatal" ; then
820 AC_MSG_ERROR([*** zlib too old - check config.log ***
821Your reported zlib version has known security problems. It's possible your
822vendor has fixed these problems without changing the version number. If you
823are sure this is the case, you can disable the check by running
824"./configure --without-zlib-version-check".
6090bcfe 825If you are in doubt, upgrade zlib to version 1.2.3 or greater.
5c7fc85d 826See http://www.gzip.org/zlib/ for details.])
8068d564 827 else
828 AC_MSG_WARN([zlib version may have security problems])
829 fi
1a01a50c 830 ],
831 [ AC_MSG_WARN([cross compiling: not checking zlib version]) ]
4ad65809 832)
48e7916f 833
2c523de9 834dnl UnixWare 2.x
aff51935 835AC_CHECK_FUNC(strcasecmp,
2c523de9 836 [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
837)
aff51935 838AC_CHECK_FUNC(utimes,
cda1ebcb 839 [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
840 LIBS="$LIBS -lc89"]) ]
2c523de9 841)
4cca272e 842
7c6d759d 843dnl Checks for libutil functions
844AC_CHECK_HEADERS(libutil.h)
845AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN)])
846AC_CHECK_FUNCS(logout updwtmp logwtmp)
847
a738c3b0 848AC_FUNC_STRFTIME
849
84ceda19 850# Check for ALTDIRFUNC glob() extension
851AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
852AC_EGREP_CPP(FOUNDIT,
853 [
854 #include <glob.h>
855 #ifdef GLOB_ALTDIRFUNC
856 FOUNDIT
857 #endif
aff51935 858 ],
84ceda19 859 [
860 AC_DEFINE(GLOB_HAS_ALTDIRFUNC)
861 AC_MSG_RESULT(yes)
862 ],
863 [
864 AC_MSG_RESULT(no)
865 ]
866)
4cca272e 867
40849fdb 868# Check for g.gl_matchc glob() extension
869AC_MSG_CHECKING(for gl_matchc field in glob_t)
870AC_EGREP_CPP(FOUNDIT,
aff51935 871 [
872 #include <glob.h>
40849fdb 873 int main(void){glob_t g; g.gl_matchc = 1;}
aff51935 874 ],
875 [
876 AC_DEFINE(GLOB_HAS_GL_MATCHC)
877 AC_MSG_RESULT(yes)
878 ],
879 [
880 AC_MSG_RESULT(no)
881 ]
40849fdb 882)
883
edbe6722 884AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
1a01a50c 885AC_RUN_IFELSE(
479cece8 886 [AC_LANG_SOURCE([[
edbe6722 887#include <sys/types.h>
888#include <dirent.h>
aec4cb4f 889int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
479cece8 890 ]])],
aff51935 891 [AC_MSG_RESULT(yes)],
edbe6722 892 [
893 AC_MSG_RESULT(no)
894 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
1a01a50c 895 ],
82f4e93d 896 [
1a01a50c 897 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
898 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
edbe6722 899 ]
900)
901
419e26e7 902AC_MSG_CHECKING([for /proc/pid/fd directory])
903if test -d "/proc/$$/fd" ; then
904 AC_DEFINE(HAVE_PROC_PID)
905 AC_MSG_RESULT(yes)
906else
907 AC_MSG_RESULT(no)
908fi
909
278588d8 910# Check whether user wants S/Key support
aff51935 911SKEY_MSG="no"
278588d8 912AC_ARG_WITH(skey,
6ff3d0dc 913 [ --with-skey[[=PATH]] Enable S/Key support (optionally in PATH)],
278588d8 914 [
915 if test "x$withval" != "xno" ; then
916
917 if test "x$withval" != "xyes" ; then
918 CPPFLAGS="$CPPFLAGS -I${withval}/include"
919 LDFLAGS="$LDFLAGS -L${withval}/lib"
920 fi
921
922 AC_DEFINE(SKEY)
923 LIBS="-lskey $LIBS"
aff51935 924 SKEY_MSG="yes"
82f4e93d 925
ddceb1c8 926 AC_MSG_CHECKING([for s/key support])
927 AC_TRY_RUN(
928 [
929#include <stdio.h>
930#include <skey.h>
aec4cb4f 931int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
ddceb1c8 932 ],
933 [AC_MSG_RESULT(yes)],
278588d8 934 [
ddceb1c8 935 AC_MSG_RESULT(no)
278588d8 936 AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
937 ])
141fc639 938 AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
939 AC_TRY_COMPILE(
940 [#include <stdio.h>
941 #include <skey.h>],
942 [(void)skeychallenge(NULL,"name","",0);],
943 [AC_MSG_RESULT(yes)
944 AC_DEFINE(SKEYCHALLENGE_4ARG)],
945 [AC_MSG_RESULT(no)]
946 )
278588d8 947 fi
948 ]
949)
950
951# Check whether user wants TCP wrappers support
98a7c37b 952TCPW_MSG="no"
278588d8 953AC_ARG_WITH(tcp-wrappers,
6ff3d0dc 954 [ --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
278588d8 955 [
956 if test "x$withval" != "xno" ; then
957 saved_LIBS="$LIBS"
98a7c37b 958 saved_LDFLAGS="$LDFLAGS"
959 saved_CPPFLAGS="$CPPFLAGS"
4b492aab 960 if test -n "${withval}" && \
6cf0200f 961 test "x${withval}" != "xyes"; then
98a7c37b 962 if test -d "${withval}/lib"; then
963 if test -n "${need_dash_r}"; then
5a162955 964 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 965 else
5a162955 966 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 967 fi
968 else
969 if test -n "${need_dash_r}"; then
5a162955 970 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 971 else
5a162955 972 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 973 fi
974 fi
975 if test -d "${withval}/include"; then
5a162955 976 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 977 else
5a162955 978 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 979 fi
98a7c37b 980 fi
ddceb1c8 981 LIBWRAP="-lwrap"
982 LIBS="$LIBWRAP $LIBS"
278588d8 983 AC_MSG_CHECKING(for libwrap)
984 AC_TRY_LINK(
985 [
77f09220 986#include <sys/types.h>
987#include <sys/socket.h>
988#include <netinet/in.h>
278588d8 989#include <tcpd.h>
990 int deny_severity = 0, allow_severity = 0;
991 ],
992 [hosts_access(0);],
993 [
994 AC_MSG_RESULT(yes)
995 AC_DEFINE(LIBWRAP)
ddceb1c8 996 AC_SUBST(LIBWRAP)
98a7c37b 997 TCPW_MSG="yes"
278588d8 998 ],
999 [
1000 AC_MSG_ERROR([*** libwrap missing])
1001 ]
1002 )
ddceb1c8 1003 LIBS="$saved_LIBS"
278588d8 1004 fi
1005 ]
1006)
1007
59031773 1008# Check whether user wants libedit support
1009LIBEDIT_MSG="no"
1010AC_ARG_WITH(libedit,
6ff3d0dc 1011 [ --with-libedit[[=PATH]] Enable libedit support for sftp],
59031773 1012 [ if test "x$withval" != "xno" ; then
737edf04 1013 if test "x$withval" != "xyes"; then
1014 CPPFLAGS="$CPPFLAGS -I$withval/include"
1015 LDFLAGS="$LDFLAGS -L$withval/lib"
1016 fi
59031773 1017 AC_CHECK_LIB(edit, el_init,
1018 [ AC_DEFINE(USE_LIBEDIT, [], [Use libedit for sftp])
1019 LIBEDIT="-ledit -lcurses"
1020 LIBEDIT_MSG="yes"
1021 AC_SUBST(LIBEDIT)
1022 ],
737edf04 1023 [ AC_MSG_ERROR(libedit not found) ],
1024 [ -lcurses ]
59031773 1025 )
f47ddccb 1026 AC_MSG_CHECKING(if libedit version is compatible)
1027 AC_TRY_COMPILE([#include <histedit.h>],
1028 [
1029int main(void)
1030{
1031 int i = H_SETSIZE;
1032 el_init("", NULL, NULL, NULL);
1033 exit(0);
1034}
1035 ],
1036 [ AC_MSG_RESULT(yes) ],
1037 [ AC_MSG_RESULT(no)
1038 AC_MSG_ERROR(libedit version is not compatible) ]
1039 )
59031773 1040 fi ]
1041)
1042
7b578f7d 1043AUDIT_MODULE=none
1044AC_ARG_WITH(audit,
1045 [ --with-audit=module Enable EXPERIMENTAL audit support (modules=debug,bsm)],
1046 [
1047 AC_MSG_CHECKING(for supported audit module)
1048 case "$withval" in
1049 bsm)
1050 AC_MSG_RESULT(bsm)
1051 AUDIT_MODULE=bsm
1052 dnl Checks for headers, libs and functions
1053 AC_CHECK_HEADERS(bsm/audit.h, [],
1054 [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)])
1055 AC_CHECK_LIB(bsm, getaudit, [],
1056 [AC_MSG_ERROR(BSM enabled and required library not found)])
1057 AC_CHECK_FUNCS(getaudit, [],
1058 [AC_MSG_ERROR(BSM enabled and required function not found)])
1059 # These are optional
7939c496 1060 AC_CHECK_FUNCS(getaudit_addr)
7b578f7d 1061 AC_DEFINE(USE_BSM_AUDIT, [], [Use BSM audit module])
1062 ;;
1063 debug)
1064 AUDIT_MODULE=debug
1065 AC_MSG_RESULT(debug)
1066 AC_DEFINE(SSH_AUDIT_EVENTS, [], Use audit debugging module)
1067 ;;
a2b3321d 1068 no)
1069 ;;
7b578f7d 1070 *)
1071 AC_MSG_ERROR([Unknown audit module $withval])
1072 ;;
1073 esac ]
1074)
1075
19160674 1076dnl Checks for library functions. Please keep in alphabetical order
b04a9f8c 1077AC_CHECK_FUNCS( \
1078 arc4random \
1079 b64_ntop \
1080 __b64_ntop \
1081 b64_pton \
1082 __b64_pton \
1083 bcopy \
1084 bindresvport_sa \
1085 clock \
1086 closefrom \
1087 dirfd \
b04a9f8c 1088 fchmod \
1089 fchown \
1090 freeaddrinfo \
1091 futimes \
1092 getaddrinfo \
1093 getcwd \
1094 getgrouplist \
1095 getnameinfo \
1096 getopt \
1097 getpeereid \
1098 _getpty \
1099 getrlimit \
1100 getttyent \
1101 glob \
1102 inet_aton \
1103 inet_ntoa \
1104 inet_ntop \
1105 innetgr \
1106 login_getcapbool \
1107 md5_crypt \
1108 memmove \
1109 mkdtemp \
1110 mmap \
1111 ngetaddrinfo \
1112 nsleep \
1113 ogetaddrinfo \
1114 openlog_r \
1115 openpty \
1116 prctl \
1117 pstat \
1118 readpassphrase \
1119 realpath \
1120 recvmsg \
1121 rresvport_af \
1122 sendmsg \
1123 setdtablesize \
1124 setegid \
1125 setenv \
1126 seteuid \
1127 setgroups \
1128 setlogin \
1129 setpcred \
1130 setproctitle \
1131 setregid \
1132 setreuid \
1133 setrlimit \
1134 setsid \
1135 setvbuf \
1136 sigaction \
1137 sigvec \
1138 snprintf \
1139 socketpair \
1140 strdup \
1141 strerror \
1142 strlcat \
1143 strlcpy \
1144 strmode \
1145 strnvis \
1146 strtonum \
1e29a0c8 1147 strtoll \
b04a9f8c 1148 strtoul \
1149 sysconf \
1150 tcgetpgrp \
1151 truncate \
1152 unsetenv \
1153 updwtmpx \
1154 utimes \
1155 vhangup \
1156 vsnprintf \
1157 waitpid \
19160674 1158)
98a7c37b 1159
1a086f97 1160# IRIX has a const char return value for gai_strerror()
1161AC_CHECK_FUNCS(gai_strerror,[
1162 AC_DEFINE(HAVE_GAI_STRERROR)
1163 AC_TRY_COMPILE([
1164#include <sys/types.h>
1165#include <sys/socket.h>
1166#include <netdb.h>
1167
1168const char *gai_strerror(int);],[
1169char *str;
1170
1171str = gai_strerror(0);],[
1172 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
1173 [Define if gai_strerror() returns const char *])])])
1174
92b1decf 1175AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP))
1176
309709db 1177dnl Make sure prototypes are defined for these before using them.
309709db 1178AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
0957c2cf 1179AC_CHECK_DECL(strsep,
1180 [AC_CHECK_FUNCS(strsep)],
1181 [],
1182 [
1183#ifdef HAVE_STRING_H
1184# include <string.h>
1185#endif
1186 ])
08412d26 1187
3490699c 1188dnl tcsendbreak might be a macro
1189AC_CHECK_DECL(tcsendbreak,
1190 [AC_DEFINE(HAVE_TCSENDBREAK)],
aff51935 1191 [AC_CHECK_FUNCS(tcsendbreak)],
3490699c 1192 [#include <termios.h>]
1193)
1194
41e0e158 1195AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
1196
3f176010 1197AC_CHECK_FUNCS(setresuid, [
1198 dnl Some platorms have setresuid that isn't implemented, test for this
1199 AC_MSG_CHECKING(if setresuid seems to work)
479cece8 1200 AC_RUN_IFELSE(
1201 [AC_LANG_SOURCE([[
9a3fe0e2 1202#include <stdlib.h>
1203#include <errno.h>
1204int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 1205 ]])],
3f176010 1206 [AC_MSG_RESULT(yes)],
24a9171d 1207 [AC_DEFINE(BROKEN_SETRESUID)
1a01a50c 1208 AC_MSG_RESULT(not implemented)],
1209 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 1210 )
1211])
9a3fe0e2 1212
3f176010 1213AC_CHECK_FUNCS(setresgid, [
1214 dnl Some platorms have setresgid that isn't implemented, test for this
1215 AC_MSG_CHECKING(if setresgid seems to work)
479cece8 1216 AC_RUN_IFELSE(
1217 [AC_LANG_SOURCE([[
9a3fe0e2 1218#include <stdlib.h>
1219#include <errno.h>
1220int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 1221 ]])],
3f176010 1222 [AC_MSG_RESULT(yes)],
1223 [AC_DEFINE(BROKEN_SETRESGID)
1a01a50c 1224 AC_MSG_RESULT(not implemented)],
1225 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 1226 )
1227])
9a3fe0e2 1228
2e73a022 1229dnl Checks for time functions
1d7b9b20 1230AC_CHECK_FUNCS(gettimeofday time)
2e73a022 1231dnl Checks for utmp functions
b03bd394 1232AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1d7b9b20 1233AC_CHECK_FUNCS(utmpname)
2e73a022 1234dnl Checks for utmpx functions
b03bd394 1235AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1d7b9b20 1236AC_CHECK_FUNCS(setutxent utmpxname)
76cd7316 1237
aff51935 1238AC_CHECK_FUNC(daemon,
beb43d31 1239 [AC_DEFINE(HAVE_DAEMON)],
1240 [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
1241)
1242
aff51935 1243AC_CHECK_FUNC(getpagesize,
aa6bd60a 1244 [AC_DEFINE(HAVE_GETPAGESIZE)],
1245 [AC_CHECK_LIB(ucb, getpagesize, [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
1246)
1247
2647ae26 1248# Check for broken snprintf
1249if test "x$ac_cv_func_snprintf" = "xyes" ; then
1250 AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1a01a50c 1251 AC_RUN_IFELSE(
479cece8 1252 [AC_LANG_SOURCE([[
2647ae26 1253#include <stdio.h>
aec4cb4f 1254int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
479cece8 1255 ]])],
aff51935 1256 [AC_MSG_RESULT(yes)],
2647ae26 1257 [
1258 AC_MSG_RESULT(no)
1259 AC_DEFINE(BROKEN_SNPRINTF)
1260 AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1a01a50c 1261 ],
1262 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
2647ae26 1263 )
1264fi
1265
2f6f9cff 1266# Check for missing getpeereid (or equiv) support
1267NO_PEERCHECK=""
1268if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1269 AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1270 AC_TRY_COMPILE(
1271 [#include <sys/types.h>
1272 #include <sys/socket.h>],
1273 [int i = SO_PEERCRED;],
62eb7db4 1274 [ AC_MSG_RESULT(yes)
1275 AC_DEFINE(HAVE_SO_PEERCRED, [], [Have PEERCRED socket option])
1276 ],
2f6f9cff 1277 [AC_MSG_RESULT(no)
1278 NO_PEERCHECK=1]
1279 )
1280fi
1281
70e7d0b0 1282dnl see whether mkstemp() requires XXXXXX
1283if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1284AC_MSG_CHECKING([for (overly) strict mkstemp])
1285AC_TRY_RUN(
1286 [
1287#include <stdlib.h>
1288main() { char template[]="conftest.mkstemp-test";
1289if (mkstemp(template) == -1)
1290 exit(1);
1291unlink(template); exit(0);
1292}
1293 ],
1294 [
1295 AC_MSG_RESULT(no)
1296 ],
aff51935 1297 [
70e7d0b0 1298 AC_MSG_RESULT(yes)
1299 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1300 ],
1301 [
1302 AC_MSG_RESULT(yes)
1303 AC_DEFINE(HAVE_STRICT_MKSTEMP)
aff51935 1304 ]
70e7d0b0 1305)
1306fi
1307
eacb954e 1308dnl make sure that openpty does not reacquire controlling terminal
1309if test ! -z "$check_for_openpty_ctty_bug"; then
1310 AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1311 AC_TRY_RUN(
1312 [
1313#include <stdio.h>
1314#include <sys/fcntl.h>
1315#include <sys/types.h>
1316#include <sys/wait.h>
1317
1318int
1319main()
1320{
1321 pid_t pid;
1322 int fd, ptyfd, ttyfd, status;
1323
1324 pid = fork();
1325 if (pid < 0) { /* failed */
1326 exit(1);
1327 } else if (pid > 0) { /* parent */
1328 waitpid(pid, &status, 0);
aff51935 1329 if (WIFEXITED(status))
eacb954e 1330 exit(WEXITSTATUS(status));
1331 else
1332 exit(2);
1333 } else { /* child */
1334 close(0); close(1); close(2);
1335 setsid();
1336 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1337 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1338 if (fd >= 0)
1339 exit(3); /* Acquired ctty: broken */
1340 else
1341 exit(0); /* Did not acquire ctty: OK */
1342 }
1343}
1344 ],
1345 [
1346 AC_MSG_RESULT(yes)
1347 ],
1348 [
1349 AC_MSG_RESULT(no)
1350 AC_DEFINE(SSHD_ACQUIRES_CTTY)
1351 ]
1352 )
1353fi
1354
4b492aab 1355if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1356 test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
2fe51906 1357 AC_MSG_CHECKING(if getaddrinfo seems to work)
1358 AC_TRY_RUN(
1359 [
1360#include <stdio.h>
1361#include <sys/socket.h>
1362#include <netdb.h>
1363#include <errno.h>
1364#include <netinet/in.h>
1365
1366#define TEST_PORT "2222"
1367
1368int
1369main(void)
1370{
1371 int err, sock;
1372 struct addrinfo *gai_ai, *ai, hints;
1373 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1374
1375 memset(&hints, 0, sizeof(hints));
1376 hints.ai_family = PF_UNSPEC;
1377 hints.ai_socktype = SOCK_STREAM;
1378 hints.ai_flags = AI_PASSIVE;
1379
1380 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1381 if (err != 0) {
1382 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1383 exit(1);
1384 }
1385
1386 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1387 if (ai->ai_family != AF_INET6)
1388 continue;
1389
1390 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1391 sizeof(ntop), strport, sizeof(strport),
1392 NI_NUMERICHOST|NI_NUMERICSERV);
1393
1394 if (err != 0) {
1395 if (err == EAI_SYSTEM)
1396 perror("getnameinfo EAI_SYSTEM");
1397 else
1398 fprintf(stderr, "getnameinfo failed: %s\n",
1399 gai_strerror(err));
1400 exit(2);
1401 }
1402
1403 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1404 if (sock < 0)
1405 perror("socket");
1406 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1407 if (errno == EBADF)
1408 exit(3);
1409 }
1410 }
1411 exit(0);
1412}
1413 ],
1414 [
1415 AC_MSG_RESULT(yes)
1416 ],
1417 [
1418 AC_MSG_RESULT(no)
1419 AC_DEFINE(BROKEN_GETADDRINFO)
1420 ]
1421 )
1422fi
1423
4b492aab 1424if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1425 test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
5ccf88cb 1426 AC_MSG_CHECKING(if getaddrinfo seems to work)
1427 AC_TRY_RUN(
1428 [
1429#include <stdio.h>
1430#include <sys/socket.h>
1431#include <netdb.h>
1432#include <errno.h>
1433#include <netinet/in.h>
1434
1435#define TEST_PORT "2222"
1436
1437int
1438main(void)
1439{
1440 int err, sock;
1441 struct addrinfo *gai_ai, *ai, hints;
1442 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1443
1444 memset(&hints, 0, sizeof(hints));
1445 hints.ai_family = PF_UNSPEC;
1446 hints.ai_socktype = SOCK_STREAM;
1447 hints.ai_flags = AI_PASSIVE;
1448
1449 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1450 if (err != 0) {
1451 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1452 exit(1);
1453 }
1454
1455 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1456 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1457 continue;
1458
1459 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1460 sizeof(ntop), strport, sizeof(strport),
1461 NI_NUMERICHOST|NI_NUMERICSERV);
1462
1463 if (ai->ai_family == AF_INET && err != 0) {
1464 perror("getnameinfo");
1465 exit(2);
1466 }
1467 }
1468 exit(0);
1469}
1470 ],
1471 [
1472 AC_MSG_RESULT(yes)
1473 AC_DEFINE(AIX_GETNAMEINFO_HACK, [],
1474[Define if you have a getaddrinfo that fails for the all-zeros IPv6 address])
1475 ],
1476 [
1477 AC_MSG_RESULT(no)
1478 AC_DEFINE(BROKEN_GETADDRINFO)
1479 ]
1480 )
1481fi
1482
b29fd59f 1483if test "x$check_for_conflicting_getspnam" = "x1"; then
1484 AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1485 AC_COMPILE_IFELSE(
1486 [
1487#include <shadow.h>
1488int main(void) {exit(0);}
1489 ],
1490 [
1491 AC_MSG_RESULT(no)
1492 ],
1493 [
1494 AC_MSG_RESULT(yes)
1495 AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1496 [Conflicting defs for getspnam])
1497 ]
1498 )
1499fi
1500
7f8f5e00 1501AC_FUNC_GETPGRP
1502
717057b6 1503# Check for PAM libs
cbd7492e 1504PAM_MSG="no"
a0391976 1505AC_ARG_WITH(pam,
717057b6 1506 [ --with-pam Enable PAM support ],
a0391976 1507 [
717057b6 1508 if test "x$withval" != "xno" ; then
2511d104 1509 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
1510 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
717057b6 1511 AC_MSG_ERROR([PAM headers not found])
1512 fi
a0391976 1513
717057b6 1514 AC_CHECK_LIB(dl, dlopen, , )
1515 AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
1516 AC_CHECK_FUNCS(pam_getenvlist)
749560dd 1517 AC_CHECK_FUNCS(pam_putenv)
2b763e31 1518
717057b6 1519 PAM_MSG="yes"
4cb5ffa0 1520
717057b6 1521 AC_DEFINE(USE_PAM)
98f2d9d5 1522 if test $ac_cv_lib_dl_dlopen = yes; then
1523 LIBPAM="-lpam -ldl"
1524 else
1525 LIBPAM="-lpam"
1526 fi
1527 AC_SUBST(LIBPAM)
717057b6 1528 fi
1529 ]
1530)
cbd7492e 1531
717057b6 1532# Check for older PAM
1533if test "x$PAM_MSG" = "xyes" ; then
a0391976 1534 # Check PAM strerror arguments (old PAM)
1535 AC_MSG_CHECKING([whether pam_strerror takes only one argument])
1536 AC_TRY_COMPILE(
1537 [
18ba2aab 1538#include <stdlib.h>
2511d104 1539#if defined(HAVE_SECURITY_PAM_APPL_H)
18ba2aab 1540#include <security/pam_appl.h>
2511d104 1541#elif defined (HAVE_PAM_PAM_APPL_H)
1542#include <pam/pam_appl.h>
1543#endif
aff51935 1544 ],
1545 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
a0391976 1546 [AC_MSG_RESULT(no)],
1547 [
1548 AC_DEFINE(HAVE_OLD_PAM)
1549 AC_MSG_RESULT(yes)
cbd7492e 1550 PAM_MSG="yes (old library)"
a0391976 1551 ]
717057b6 1552 )
a0391976 1553fi
1554
5b991353 1555# Search for OpenSSL
1556saved_CPPFLAGS="$CPPFLAGS"
1557saved_LDFLAGS="$LDFLAGS"
a0391976 1558AC_ARG_WITH(ssl-dir,
1559 [ --with-ssl-dir=PATH Specify path to OpenSSL installation ],
1560 [
e9e4a1c7 1561 if test "x$withval" != "xno" ; then
99eb0f64 1562 case "$withval" in
1563 # Relative paths
1564 ./*|../*) withval="`pwd`/$withval"
1565 esac
5b991353 1566 if test -d "$withval/lib"; then
1567 if test -n "${need_dash_r}"; then
1568 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1569 else
1570 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
d6f13fbb 1571 fi
1572 else
5b991353 1573 if test -n "${need_dash_r}"; then
1574 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1575 else
1576 LDFLAGS="-L${withval} ${LDFLAGS}"
d6f13fbb 1577 fi
1578 fi
5b991353 1579 if test -d "$withval/include"; then
1580 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
d6f13fbb 1581 else
5b991353 1582 CPPFLAGS="-I${withval} ${CPPFLAGS}"
58d100bf 1583 fi
a0391976 1584 fi
5b991353 1585 ]
1586)
5486a457 1587LIBS="-lcrypto $LIBS"
5b991353 1588AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
d45e3d76 1589 [
5b991353 1590 dnl Check default openssl install dir
1591 if test -n "${need_dash_r}"; then
1592 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1593 else
5b991353 1594 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1595 fi
5b991353 1596 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1597 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1598 [
1599 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1600 ]
1601 )
1602 ]
1603)
1604
cd018561 1605# Determine OpenSSL header version
1606AC_MSG_CHECKING([OpenSSL header version])
1a01a50c 1607AC_RUN_IFELSE(
479cece8 1608 [AC_LANG_SOURCE([[
cd018561 1609#include <stdio.h>
1610#include <string.h>
1611#include <openssl/opensslv.h>
1612#define DATA "conftest.sslincver"
1613int main(void) {
aff51935 1614 FILE *fd;
1615 int rc;
cd018561 1616
aff51935 1617 fd = fopen(DATA,"w");
1618 if(fd == NULL)
1619 exit(1);
cd018561 1620
1621 if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1622 exit(1);
1623
1624 exit(0);
1625}
479cece8 1626 ]])],
cd018561 1627 [
1628 ssl_header_ver=`cat conftest.sslincver`
1629 AC_MSG_RESULT($ssl_header_ver)
1630 ],
1631 [
1632 AC_MSG_RESULT(not found)
1633 AC_MSG_ERROR(OpenSSL version header not found.)
1a01a50c 1634 ],
1635 [
1636 AC_MSG_WARN([cross compiling: not checking])
cd018561 1637 ]
1638)
1639
1640# Determine OpenSSL library version
1641AC_MSG_CHECKING([OpenSSL library version])
1a01a50c 1642AC_RUN_IFELSE(
479cece8 1643 [AC_LANG_SOURCE([[
cd018561 1644#include <stdio.h>
1645#include <string.h>
1646#include <openssl/opensslv.h>
1647#include <openssl/crypto.h>
1648#define DATA "conftest.ssllibver"
1649int main(void) {
aff51935 1650 FILE *fd;
1651 int rc;
cd018561 1652
aff51935 1653 fd = fopen(DATA,"w");
1654 if(fd == NULL)
1655 exit(1);
cd018561 1656
1657 if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1658 exit(1);
1659
1660 exit(0);
1661}
479cece8 1662 ]])],
cd018561 1663 [
1664 ssl_library_ver=`cat conftest.ssllibver`
1665 AC_MSG_RESULT($ssl_library_ver)
1666 ],
1667 [
1668 AC_MSG_RESULT(not found)
1669 AC_MSG_ERROR(OpenSSL library not found.)
1a01a50c 1670 ],
1671 [
1672 AC_MSG_WARN([cross compiling: not checking])
cd018561 1673 ]
1674)
58d100bf 1675
9780116c 1676# Sanity check OpenSSL headers
1677AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1a01a50c 1678AC_RUN_IFELSE(
479cece8 1679 [AC_LANG_SOURCE([[
9780116c 1680#include <string.h>
1681#include <openssl/opensslv.h>
aec4cb4f 1682int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
479cece8 1683 ]])],
9780116c 1684 [
1685 AC_MSG_RESULT(yes)
1686 ],
1687 [
1688 AC_MSG_RESULT(no)
e15ba28b 1689 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1690Check config.log for details.
1691Also see contrib/findssl.sh for help identifying header/library mismatches.])
1a01a50c 1692 ],
1693 [
1694 AC_MSG_WARN([cross compiling: not checking])
9780116c 1695 ]
1696)
1697
5486a457 1698# Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1699# because the system crypt() is more featureful.
1700if test "x$check_for_libcrypt_before" = "x1"; then
1701 AC_CHECK_LIB(crypt, crypt)
1702fi
1703
aff51935 1704# Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
8087c5ee 1705# version in OpenSSL.
05114c74 1706if test "x$check_for_libcrypt_later" = "x1"; then
20cad736 1707 AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
717057b6 1708fi
1709
f1b0ecc3 1710
1711### Configure cryptographic random number support
1712
1713# Check wheter OpenSSL seeds itself
1714AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1a01a50c 1715AC_RUN_IFELSE(
479cece8 1716 [AC_LANG_SOURCE([[
f1b0ecc3 1717#include <string.h>
1718#include <openssl/rand.h>
aec4cb4f 1719int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
479cece8 1720 ]])],
f1b0ecc3 1721 [
1722 OPENSSL_SEEDS_ITSELF=yes
1723 AC_MSG_RESULT(yes)
1724 ],
1725 [
1726 AC_MSG_RESULT(no)
1727 # Default to use of the rand helper if OpenSSL doesn't
1728 # seed itself
1729 USE_RAND_HELPER=yes
1a01a50c 1730 ],
1731 [
1732 AC_MSG_WARN([cross compiling: assuming yes])
1733 # This is safe, since all recent OpenSSL versions will
82f4e93d 1734 # complain at runtime if not seeded correctly.
1a01a50c 1735 OPENSSL_SEEDS_ITSELF=yes
f1b0ecc3 1736 ]
1737)
1738
1739
1740# Do we want to force the use of the rand helper?
1741AC_ARG_WITH(rand-helper,
1742 [ --with-rand-helper Use subprocess to gather strong randomness ],
1743 [
1744 if test "x$withval" = "xno" ; then
aff51935 1745 # Force use of OpenSSL's internal RNG, even if
f1b0ecc3 1746 # the previous test showed it to be unseeded.
1747 if test -z "$OPENSSL_SEEDS_ITSELF" ; then
1748 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
1749 OPENSSL_SEEDS_ITSELF=yes
1750 USE_RAND_HELPER=""
1751 fi
1752 else
1753 USE_RAND_HELPER=yes
1754 fi
1755 ],
82f4e93d 1756)
f1b0ecc3 1757
1758# Which randomness source do we use?
4b492aab 1759if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
f1b0ecc3 1760 # OpenSSL only
1761 AC_DEFINE(OPENSSL_PRNG_ONLY)
1762 RAND_MSG="OpenSSL internal ONLY"
1763 INSTALL_SSH_RAND_HELPER=""
70e2f2f3 1764elif test ! -z "$USE_RAND_HELPER" ; then
1765 # install rand helper
f1b0ecc3 1766 RAND_MSG="ssh-rand-helper"
1767 INSTALL_SSH_RAND_HELPER="yes"
1768fi
1769AC_SUBST(INSTALL_SSH_RAND_HELPER)
1770
1771### Configuration of ssh-rand-helper
1772
1773# PRNGD TCP socket
1774AC_ARG_WITH(prngd-port,
1775 [ --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT],
1776 [
eb5d7ff6 1777 case "$withval" in
1778 no)
1779 withval=""
1780 ;;
1781 [[0-9]]*)
1782 ;;
1783 *)
1784 AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
1785 ;;
1786 esac
1787 if test ! -z "$withval" ; then
f1b0ecc3 1788 PRNGD_PORT="$withval"
1789 AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT)
1790 fi
1791 ]
1792)
1793
1794# PRNGD Unix domain socket
1795AC_ARG_WITH(prngd-socket,
1796 [ --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
1797 [
eb5d7ff6 1798 case "$withval" in
1799 yes)
f1b0ecc3 1800 withval="/var/run/egd-pool"
eb5d7ff6 1801 ;;
1802 no)
1803 withval=""
1804 ;;
1805 /*)
1806 ;;
1807 *)
1808 AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
1809 ;;
1810 esac
1811
1812 if test ! -z "$withval" ; then
f1b0ecc3 1813 if test ! -z "$PRNGD_PORT" ; then
1814 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
1815 fi
906e811b 1816 if test ! -r "$withval" ; then
f1b0ecc3 1817 AC_MSG_WARN(Entropy socket is not readable)
1818 fi
1819 PRNGD_SOCKET="$withval"
1820 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1821 fi
ddceb1c8 1822 ],
1823 [
1824 # Check for existing socket only if we don't have a random device already
1825 if test "$USE_RAND_HELPER" = yes ; then
1826 AC_MSG_CHECKING(for PRNGD/EGD socket)
1827 # Insert other locations here
1828 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
1829 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
1830 PRNGD_SOCKET="$sock"
1831 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1832 break;
1833 fi
1834 done
1835 if test ! -z "$PRNGD_SOCKET" ; then
1836 AC_MSG_RESULT($PRNGD_SOCKET)
1837 else
1838 AC_MSG_RESULT(not found)
1839 fi
1840 fi
f1b0ecc3 1841 ]
1842)
1843
1844# Change default command timeout for hashing entropy source
1845entropy_timeout=200
1846AC_ARG_WITH(entropy-timeout,
1847 [ --with-entropy-timeout Specify entropy gathering command timeout (msec)],
1848 [
6cf0200f 1849 if test -n "$withval" && test "x$withval" != "xno" && \
1850 test "x${withval}" != "xyes"; then
f1b0ecc3 1851 entropy_timeout=$withval
1852 fi
82f4e93d 1853 ]
f1b0ecc3 1854)
f1b0ecc3 1855AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout)
1856
fd3cbf67 1857SSH_PRIVSEP_USER=sshd
9a0fbcb3 1858AC_ARG_WITH(privsep-user,
5222e7ef 1859 [ --with-privsep-user=user Specify non-privileged user for privilege separation],
9a0fbcb3 1860 [
6cf0200f 1861 if test -n "$withval" && test "x$withval" != "xno" && \
1862 test "x${withval}" != "xyes"; then
fd3cbf67 1863 SSH_PRIVSEP_USER=$withval
9a0fbcb3 1864 fi
82f4e93d 1865 ]
9a0fbcb3 1866)
fd3cbf67 1867AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER")
1868AC_SUBST(SSH_PRIVSEP_USER)
9a0fbcb3 1869
81dadca3 1870# We do this little dance with the search path to insure
1871# that programs that we select for use by installed programs
1872# (which may be run by the super-user) come from trusted
1873# locations before they come from the user's private area.
1874# This should help avoid accidentally configuring some
1875# random version of a program in someone's personal bin.
1876
1877OPATH=$PATH
1878PATH=/bin:/usr/bin
f95c8ce8 1879test -h /bin 2> /dev/null && PATH=/usr/bin
81dadca3 1880test -d /sbin && PATH=$PATH:/sbin
1881test -d /usr/sbin && PATH=$PATH:/usr/sbin
1882PATH=$PATH:/etc:$OPATH
1883
aff51935 1884# These programs are used by the command hashing source to gather entropy
f1b0ecc3 1885OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
1886OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
1887OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
1888OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
1889OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
1890OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
1891OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
1892OSSH_PATH_ENTROPY_PROG(PROG_W, w)
1893OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
1894OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
1895OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
1896OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
1897OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
1898OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
1899OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
1900OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
81dadca3 1901# restore PATH
1902PATH=$OPATH
f1b0ecc3 1903
1904# Where does ssh-rand-helper get its randomness from?
1905INSTALL_SSH_PRNG_CMDS=""
1906if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
1907 if test ! -z "$PRNGD_PORT" ; then
1908 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
1909 elif test ! -z "$PRNGD_SOCKET" ; then
1910 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
1911 else
1912 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
1913 RAND_HELPER_CMDHASH=yes
1914 INSTALL_SSH_PRNG_CMDS="yes"
1915 fi
1916fi
1917AC_SUBST(INSTALL_SSH_PRNG_CMDS)
1918
1919
66d6c27e 1920# Cheap hack to ensure NEWS-OS libraries are arranged right.
1921if test ! -z "$SONY" ; then
1922 LIBS="$LIBS -liberty";
1923fi
1924
a0391976 1925# Checks for data types
976f7e19 1926AC_CHECK_SIZEOF(char, 1)
2b942fe0 1927AC_CHECK_SIZEOF(short int, 2)
1928AC_CHECK_SIZEOF(int, 4)
1929AC_CHECK_SIZEOF(long int, 4)
1930AC_CHECK_SIZEOF(long long int, 8)
1931
52f1ccb2 1932# Sanity check long long for some platforms (AIX)
1933if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
1934 ac_cv_sizeof_long_long_int=0
1935fi
1936
a0391976 1937# More checks for data types
14a9a859 1938AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
1939 AC_TRY_COMPILE(
aff51935 1940 [ #include <sys/types.h> ],
1941 [ u_int a; a = 1;],
14a9a859 1942 [ ac_cv_have_u_int="yes" ],
1943 [ ac_cv_have_u_int="no" ]
1944 )
1945])
1946if test "x$ac_cv_have_u_int" = "xyes" ; then
1947 AC_DEFINE(HAVE_U_INT)
1948 have_u_int=1
1949fi
1950
58d100bf 1951AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
1952 AC_TRY_COMPILE(
aff51935 1953 [ #include <sys/types.h> ],
1954 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
58d100bf 1955 [ ac_cv_have_intxx_t="yes" ],
1956 [ ac_cv_have_intxx_t="no" ]
1957 )
1958])
1959if test "x$ac_cv_have_intxx_t" = "xyes" ; then
1960 AC_DEFINE(HAVE_INTXX_T)
1961 have_intxx_t=1
1962fi
41cb4569 1963
1964if (test -z "$have_intxx_t" && \
aff51935 1965 test "x$ac_cv_header_stdint_h" = "xyes")
41cb4569 1966then
1967 AC_MSG_CHECKING([for intXX_t types in stdint.h])
1968 AC_TRY_COMPILE(
aff51935 1969 [ #include <stdint.h> ],
1970 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
41cb4569 1971 [
1972 AC_DEFINE(HAVE_INTXX_T)
1973 AC_MSG_RESULT(yes)
1974 ],
1975 [ AC_MSG_RESULT(no) ]
1976 )
1977fi
1978
bd590612 1979AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
1980 AC_TRY_COMPILE(
1cbbe6c8 1981 [
1982#include <sys/types.h>
1983#ifdef HAVE_STDINT_H
1984# include <stdint.h>
1985#endif
1986#include <sys/socket.h>
1987#ifdef HAVE_SYS_BITYPES_H
1988# include <sys/bitypes.h>
1989#endif
aff51935 1990 ],
1991 [ int64_t a; a = 1;],
bd590612 1992 [ ac_cv_have_int64_t="yes" ],
1993 [ ac_cv_have_int64_t="no" ]
1994 )
1995])
1996if test "x$ac_cv_have_int64_t" = "xyes" ; then
1997 AC_DEFINE(HAVE_INT64_T)
ddceb1c8 1998fi
1999
58d100bf 2000AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
2001 AC_TRY_COMPILE(
aff51935 2002 [ #include <sys/types.h> ],
2003 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
58d100bf 2004 [ ac_cv_have_u_intxx_t="yes" ],
2005 [ ac_cv_have_u_intxx_t="no" ]
2006 )
2007])
2008if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
2009 AC_DEFINE(HAVE_U_INTXX_T)
2010 have_u_intxx_t=1
2011fi
2b942fe0 2012
41cb4569 2013if test -z "$have_u_intxx_t" ; then
2014 AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
2015 AC_TRY_COMPILE(
aff51935 2016 [ #include <sys/socket.h> ],
2017 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
41cb4569 2018 [
2019 AC_DEFINE(HAVE_U_INTXX_T)
2020 AC_MSG_RESULT(yes)
2021 ],
2022 [ AC_MSG_RESULT(no) ]
2023 )
2024fi
2025
bd590612 2026AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
2027 AC_TRY_COMPILE(
aff51935 2028 [ #include <sys/types.h> ],
2029 [ u_int64_t a; a = 1;],
bd590612 2030 [ ac_cv_have_u_int64_t="yes" ],
2031 [ ac_cv_have_u_int64_t="no" ]
2032 )
2033])
2034if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
2035 AC_DEFINE(HAVE_U_INT64_T)
2036 have_u_int64_t=1
2037fi
2038
ddceb1c8 2039if test -z "$have_u_int64_t" ; then
2040 AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
2041 AC_TRY_COMPILE(
aff51935 2042 [ #include <sys/bitypes.h> ],
ddceb1c8 2043 [ u_int64_t a; a = 1],
2044 [
2045 AC_DEFINE(HAVE_U_INT64_T)
2046 AC_MSG_RESULT(yes)
2047 ],
2048 [ AC_MSG_RESULT(no) ]
2049 )
2050fi
2051
41cb4569 2052if test -z "$have_u_intxx_t" ; then
2053 AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
2054 AC_TRY_COMPILE(
2055 [
2056#include <sys/types.h>
aff51935 2057 ],
2058 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
41cb4569 2059 [ ac_cv_have_uintxx_t="yes" ],
2060 [ ac_cv_have_uintxx_t="no" ]
2061 )
2062 ])
2063 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
2064 AC_DEFINE(HAVE_UINTXX_T)
2065 fi
2066fi
2067
2068if test -z "$have_uintxx_t" ; then
2069 AC_MSG_CHECKING([for uintXX_t types in stdint.h])
2070 AC_TRY_COMPILE(
aff51935 2071 [ #include <stdint.h> ],
2072 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
41cb4569 2073 [
2074 AC_DEFINE(HAVE_UINTXX_T)
2075 AC_MSG_RESULT(yes)
2076 ],
2077 [ AC_MSG_RESULT(no) ]
2078 )
2079fi
2080
e5fe9a1f 2081if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
aff51935 2082 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
5cdfe03f 2083then
2084 AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
2085 AC_TRY_COMPILE(
58d100bf 2086 [
2087#include <sys/bitypes.h>
aff51935 2088 ],
5cdfe03f 2089 [
837c30b8 2090 int8_t a; int16_t b; int32_t c;
2091 u_int8_t e; u_int16_t f; u_int32_t g;
2092 a = b = c = e = f = g = 1;
aff51935 2093 ],
5cdfe03f 2094 [
2095 AC_DEFINE(HAVE_U_INTXX_T)
2096 AC_DEFINE(HAVE_INTXX_T)
2097 AC_MSG_RESULT(yes)
2098 ],
2099 [AC_MSG_RESULT(no)]
aff51935 2100 )
5cdfe03f 2101fi
2102
0362750e 2103
2104AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
2105 AC_TRY_COMPILE(
2106 [
2107#include <sys/types.h>
2108 ],
2109 [ u_char foo; foo = 125; ],
2110 [ ac_cv_have_u_char="yes" ],
2111 [ ac_cv_have_u_char="no" ]
2112 )
2113])
2114if test "x$ac_cv_have_u_char" = "xyes" ; then
2115 AC_DEFINE(HAVE_U_CHAR)
2116fi
2117
98a7c37b 2118TYPE_SOCKLEN_T
2b942fe0 2119
2d16d9a3 2120AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
ddceb1c8 2121
777ece68 2122AC_CHECK_TYPES(in_addr_t,,,
2123[#include <sys/types.h>
2124#include <netinet/in.h>])
7b578f7d 2125
58d100bf 2126AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
2127 AC_TRY_COMPILE(
2128 [
18ba2aab 2129#include <sys/types.h>
58d100bf 2130 ],
2131 [ size_t foo; foo = 1235; ],
2132 [ ac_cv_have_size_t="yes" ],
2133 [ ac_cv_have_size_t="no" ]
2134 )
2135])
2136if test "x$ac_cv_have_size_t" = "xyes" ; then
2137 AC_DEFINE(HAVE_SIZE_T)
2138fi
ea1970a3 2139
c04f75f1 2140AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
2141 AC_TRY_COMPILE(
2142 [
2143#include <sys/types.h>
2144 ],
2145 [ ssize_t foo; foo = 1235; ],
2146 [ ac_cv_have_ssize_t="yes" ],
2147 [ ac_cv_have_ssize_t="no" ]
2148 )
2149])
2150if test "x$ac_cv_have_ssize_t" = "xyes" ; then
2151 AC_DEFINE(HAVE_SSIZE_T)
2152fi
2153
f1c4659d 2154AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
2155 AC_TRY_COMPILE(
2156 [
2157#include <time.h>
2158 ],
2159 [ clock_t foo; foo = 1235; ],
2160 [ ac_cv_have_clock_t="yes" ],
2161 [ ac_cv_have_clock_t="no" ]
2162 )
2163])
2164if test "x$ac_cv_have_clock_t" = "xyes" ; then
2165 AC_DEFINE(HAVE_CLOCK_T)
2166fi
2167
1c04b088 2168AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
2169 AC_TRY_COMPILE(
2170 [
2171#include <sys/types.h>
2172#include <sys/socket.h>
2173 ],
2174 [ sa_family_t foo; foo = 1235; ],
2175 [ ac_cv_have_sa_family_t="yes" ],
77bb0bca 2176 [ AC_TRY_COMPILE(
2177 [
2178#include <sys/types.h>
2179#include <sys/socket.h>
2180#include <netinet/in.h>
2181 ],
2182 [ sa_family_t foo; foo = 1235; ],
2183 [ ac_cv_have_sa_family_t="yes" ],
2184
1c04b088 2185 [ ac_cv_have_sa_family_t="no" ]
77bb0bca 2186 )]
1c04b088 2187 )
2188])
2189if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
2190 AC_DEFINE(HAVE_SA_FAMILY_T)
2191fi
2192
729bfe59 2193AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
2194 AC_TRY_COMPILE(
2195 [
2196#include <sys/types.h>
2197 ],
2198 [ pid_t foo; foo = 1235; ],
2199 [ ac_cv_have_pid_t="yes" ],
2200 [ ac_cv_have_pid_t="no" ]
2201 )
2202])
2203if test "x$ac_cv_have_pid_t" = "xyes" ; then
2204 AC_DEFINE(HAVE_PID_T)
2205fi
2206
2207AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
2208 AC_TRY_COMPILE(
2209 [
2210#include <sys/types.h>
2211 ],
2212 [ mode_t foo; foo = 1235; ],
2213 [ ac_cv_have_mode_t="yes" ],
2214 [ ac_cv_have_mode_t="no" ]
2215 )
2216])
2217if test "x$ac_cv_have_mode_t" = "xyes" ; then
2218 AC_DEFINE(HAVE_MODE_T)
2219fi
2220
e3a93db0 2221
58d100bf 2222AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
2223 AC_TRY_COMPILE(
2224 [
18ba2aab 2225#include <sys/types.h>
2226#include <sys/socket.h>
58d100bf 2227 ],
2228 [ struct sockaddr_storage s; ],
2229 [ ac_cv_have_struct_sockaddr_storage="yes" ],
2230 [ ac_cv_have_struct_sockaddr_storage="no" ]
2231 )
2232])
2233if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
2234 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE)
2235fi
48e671d5 2236
58d100bf 2237AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2238 AC_TRY_COMPILE(
2239 [
cbd7492e 2240#include <sys/types.h>
58d100bf 2241#include <netinet/in.h>
2242 ],
2243 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2244 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2245 [ ac_cv_have_struct_sockaddr_in6="no" ]
2246 )
2247])
2248if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
2249 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6)
2250fi
48e671d5 2251
58d100bf 2252AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2253 AC_TRY_COMPILE(
2254 [
cbd7492e 2255#include <sys/types.h>
58d100bf 2256#include <netinet/in.h>
2257 ],
2258 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2259 [ ac_cv_have_struct_in6_addr="yes" ],
2260 [ ac_cv_have_struct_in6_addr="no" ]
2261 )
2262])
2263if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
2264 AC_DEFINE(HAVE_STRUCT_IN6_ADDR)
2265fi
48e671d5 2266
58d100bf 2267AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2268 AC_TRY_COMPILE(
2269 [
18ba2aab 2270#include <sys/types.h>
2271#include <sys/socket.h>
2272#include <netdb.h>
58d100bf 2273 ],
2274 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2275 [ ac_cv_have_struct_addrinfo="yes" ],
2276 [ ac_cv_have_struct_addrinfo="no" ]
2277 )
2278])
2279if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2280 AC_DEFINE(HAVE_STRUCT_ADDRINFO)
2281fi
2282
89c7e31c 2283AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2284 AC_TRY_COMPILE(
aff51935 2285 [ #include <sys/time.h> ],
2286 [ struct timeval tv; tv.tv_sec = 1;],
89c7e31c 2287 [ ac_cv_have_struct_timeval="yes" ],
2288 [ ac_cv_have_struct_timeval="no" ]
2289 )
2290])
2291if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2292 AC_DEFINE(HAVE_STRUCT_TIMEVAL)
2293 have_struct_timeval=1
2294fi
2295
5271b55c 2296AC_CHECK_TYPES(struct timespec)
2297
85abc74b 2298# We need int64_t or else certian parts of the compile will fail.
4b492aab 2299if test "x$ac_cv_have_int64_t" = "xno" && \
2300 test "x$ac_cv_sizeof_long_int" != "x8" && \
2301 test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
85abc74b 2302 echo "OpenSSH requires int64_t support. Contact your vendor or install"
2303 echo "an alternative compiler (I.E., GCC) before continuing."
2304 echo ""
2305 exit 1;
733cf7f4 2306else
2307dnl test snprintf (broken on SCO w/gcc)
1a01a50c 2308 AC_RUN_IFELSE(
479cece8 2309 [AC_LANG_SOURCE([[
733cf7f4 2310#include <stdio.h>
2311#include <string.h>
2312#ifdef HAVE_SNPRINTF
2313main()
2314{
2315 char buf[50];
2316 char expected_out[50];
2317 int mazsize = 50 ;
2318#if (SIZEOF_LONG_INT == 8)
2319 long int num = 0x7fffffffffffffff;
2320#else
763a1a18 2321 long long num = 0x7fffffffffffffffll;
733cf7f4 2322#endif
2323 strcpy(expected_out, "9223372036854775807");
2324 snprintf(buf, mazsize, "%lld", num);
2325 if(strcmp(buf, expected_out) != 0)
aff51935 2326 exit(1);
733cf7f4 2327 exit(0);
2328}
2329#else
2330main() { exit(0); }
2331#endif
479cece8 2332 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
1a01a50c 2333 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
733cf7f4 2334 )
2c523de9 2335fi
2336
77bb0bca 2337dnl Checks for structure members
58d100bf 2338OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2339OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2340OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2341OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2342OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
25422c70 2343OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
58d100bf 2344OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2345OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
daaff4d5 2346OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
58d100bf 2347OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2348OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2349OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2350OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
1d7b9b20 2351OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2352OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2353OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2354OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
98a7c37b 2355
2356AC_CHECK_MEMBERS([struct stat.st_blksize])
1d7b9b20 2357
58d100bf 2358AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2359 ac_cv_have_ss_family_in_struct_ss, [
2360 AC_TRY_COMPILE(
2361 [
18ba2aab 2362#include <sys/types.h>
2363#include <sys/socket.h>
58d100bf 2364 ],
2365 [ struct sockaddr_storage s; s.ss_family = 1; ],
2366 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2367 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2368 )
2369])
2370if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2371 AC_DEFINE(HAVE_SS_FAMILY_IN_SS)
2372fi
2373
58d100bf 2374AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2375 ac_cv_have___ss_family_in_struct_ss, [
2376 AC_TRY_COMPILE(
2377 [
18ba2aab 2378#include <sys/types.h>
2379#include <sys/socket.h>
58d100bf 2380 ],
2381 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2382 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2383 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2384 )
2385])
2386if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2387 AC_DEFINE(HAVE___SS_FAMILY_IN_SS)
2388fi
2389
2e73a022 2390AC_CACHE_CHECK([for pw_class field in struct passwd],
2391 ac_cv_have_pw_class_in_struct_passwd, [
2392 AC_TRY_COMPILE(
2393 [
2e73a022 2394#include <pwd.h>
2395 ],
97994d32 2396 [ struct passwd p; p.pw_class = 0; ],
2e73a022 2397 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2398 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2399 )
2400])
2401if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2402 AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD)
2403fi
2404
7751d4eb 2405AC_CACHE_CHECK([for pw_expire field in struct passwd],
2406 ac_cv_have_pw_expire_in_struct_passwd, [
2407 AC_TRY_COMPILE(
2408 [
2409#include <pwd.h>
2410 ],
2411 [ struct passwd p; p.pw_expire = 0; ],
2412 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2413 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2414 )
2415])
2416if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2417 AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD)
2418fi
2419
2420AC_CACHE_CHECK([for pw_change field in struct passwd],
2421 ac_cv_have_pw_change_in_struct_passwd, [
2422 AC_TRY_COMPILE(
2423 [
2424#include <pwd.h>
2425 ],
2426 [ struct passwd p; p.pw_change = 0; ],
2427 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2428 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2429 )
2430])
2431if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2432 AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD)
2433fi
58d100bf 2434
637f9177 2435dnl make sure we're using the real structure members and not defines
6f34652e 2436AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2437 ac_cv_have_accrights_in_msghdr, [
1a01a50c 2438 AC_COMPILE_IFELSE(
6f34652e 2439 [
f95c8ce8 2440#include <sys/types.h>
6f34652e 2441#include <sys/socket.h>
2442#include <sys/uio.h>
637f9177 2443int main() {
2444#ifdef msg_accrights
1a01a50c 2445#error "msg_accrights is a macro"
637f9177 2446exit(1);
2447#endif
2448struct msghdr m;
2449m.msg_accrights = 0;
2450exit(0);
2451}
6f34652e 2452 ],
6f34652e 2453 [ ac_cv_have_accrights_in_msghdr="yes" ],
2454 [ ac_cv_have_accrights_in_msghdr="no" ]
2455 )
2456])
2457if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2458 AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR)
2459fi
2460
7176df4f 2461AC_CACHE_CHECK([for msg_control field in struct msghdr],
2462 ac_cv_have_control_in_msghdr, [
1a01a50c 2463 AC_COMPILE_IFELSE(
7176df4f 2464 [
f95c8ce8 2465#include <sys/types.h>
7176df4f 2466#include <sys/socket.h>
2467#include <sys/uio.h>
637f9177 2468int main() {
2469#ifdef msg_control
1a01a50c 2470#error "msg_control is a macro"
637f9177 2471exit(1);
2472#endif
2473struct msghdr m;
2474m.msg_control = 0;
2475exit(0);
2476}
7176df4f 2477 ],
7176df4f 2478 [ ac_cv_have_control_in_msghdr="yes" ],
2479 [ ac_cv_have_control_in_msghdr="no" ]
2480 )
2481])
2482if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2483 AC_DEFINE(HAVE_CONTROL_IN_MSGHDR)
2484fi
2485
58d100bf 2486AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
aff51935 2487 AC_TRY_LINK([],
2488 [ extern char *__progname; printf("%s", __progname); ],
58d100bf 2489 [ ac_cv_libc_defines___progname="yes" ],
2490 [ ac_cv_libc_defines___progname="no" ]
2491 )
2492])
2493if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2494 AC_DEFINE(HAVE___PROGNAME)
2495fi
8946db53 2496
c921ee00 2497AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2498 AC_TRY_LINK([
2499#include <stdio.h>
aff51935 2500],
2501 [ printf("%s", __FUNCTION__); ],
c921ee00 2502 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2503 [ ac_cv_cc_implements___FUNCTION__="no" ]
2504 )
2505])
2506if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2507 AC_DEFINE(HAVE___FUNCTION__)
2508fi
2509
2510AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2511 AC_TRY_LINK([
2512#include <stdio.h>
aff51935 2513],
2514 [ printf("%s", __func__); ],
c921ee00 2515 [ ac_cv_cc_implements___func__="yes" ],
2516 [ ac_cv_cc_implements___func__="no" ]
2517 )
2518])
2519if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
2520 AC_DEFINE(HAVE___func__)
2521fi
2522
1812a662 2523AC_CACHE_CHECK([whether getopt has optreset support],
2524 ac_cv_have_getopt_optreset, [
2525 AC_TRY_LINK(
2526 [
2527#include <getopt.h>
2528 ],
2529 [ extern int optreset; optreset = 0; ],
2530 [ ac_cv_have_getopt_optreset="yes" ],
2531 [ ac_cv_have_getopt_optreset="no" ]
2532 )
2533])
2534if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
2535 AC_DEFINE(HAVE_GETOPT_OPTRESET)
2536fi
a0391976 2537
819b676f 2538AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
aff51935 2539 AC_TRY_LINK([],
2540 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
819b676f 2541 [ ac_cv_libc_defines_sys_errlist="yes" ],
2542 [ ac_cv_libc_defines_sys_errlist="no" ]
2543 )
2544])
2545if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
2546 AC_DEFINE(HAVE_SYS_ERRLIST)
2547fi
2548
2549
416ed5a7 2550AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
aff51935 2551 AC_TRY_LINK([],
2552 [ extern int sys_nerr; printf("%i", sys_nerr);],
416ed5a7 2553 [ ac_cv_libc_defines_sys_nerr="yes" ],
2554 [ ac_cv_libc_defines_sys_nerr="no" ]
2555 )
2556])
2557if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
2558 AC_DEFINE(HAVE_SYS_NERR)
2559fi
2560
aff51935 2561SCARD_MSG="no"
295c8801 2562# Check whether user wants sectok support
2563AC_ARG_WITH(sectok,
2564 [ --with-sectok Enable smartcard support using libsectok],
d0b19c95 2565 [
2566 if test "x$withval" != "xno" ; then
2567 if test "x$withval" != "xyes" ; then
2568 CPPFLAGS="$CPPFLAGS -I${withval}"
2569 LDFLAGS="$LDFLAGS -L${withval}"
2570 if test ! -z "$need_dash_r" ; then
2571 LDFLAGS="$LDFLAGS -R${withval}"
2572 fi
2573 if test ! -z "$blibpath" ; then
2574 blibpath="$blibpath:${withval}"
2575 fi
2576 fi
2577 AC_CHECK_HEADERS(sectok.h)
2578 if test "$ac_cv_header_sectok_h" != yes; then
2579 AC_MSG_ERROR(Can't find sectok.h)
2580 fi
2581 AC_CHECK_LIB(sectok, sectok_open)
2582 if test "$ac_cv_lib_sectok_sectok_open" != yes; then
2583 AC_MSG_ERROR(Can't find libsectok)
2584 fi
2585 AC_DEFINE(SMARTCARD)
295c8801 2586 AC_DEFINE(USE_SECTOK)
aff51935 2587 SCARD_MSG="yes, using sectok"
295c8801 2588 fi
2589 ]
2590)
2591
2592# Check whether user wants OpenSC support
987b458f 2593OPENSC_CONFIG="no"
295c8801 2594AC_ARG_WITH(opensc,
987b458f 2595 [--with-opensc[[=PFX]] Enable smartcard support using OpenSC (optionally in PATH)],
2596 [
2597 if test "x$withval" != "xno" ; then
2598 if test "x$withval" != "xyes" ; then
2599 OPENSC_CONFIG=$withval/bin/opensc-config
2600 else
2601 AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
2602 fi
2603 if test "$OPENSC_CONFIG" != "no"; then
2604 LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
2605 LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
2606 CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
2607 LDFLAGS="$LDFLAGS $LIBOPENSC_LIBS"
2608 AC_DEFINE(SMARTCARD)
2609 AC_DEFINE(USE_OPENSC)
2610 SCARD_MSG="yes, using OpenSC"
2611 fi
2612 fi
2613 ]
2614)
d0b19c95 2615
c31dc31c 2616# Check libraries needed by DNS fingerprint support
aff51935 2617AC_SEARCH_LIBS(getrrsetbyname, resolv,
c31dc31c 2618 [AC_DEFINE(HAVE_GETRRSETBYNAME)],
3e05e934 2619 [
c31dc31c 2620 # Needed by our getrrsetbyname()
2621 AC_SEARCH_LIBS(res_query, resolv)
2622 AC_SEARCH_LIBS(dn_expand, resolv)
dabb524a 2623 AC_MSG_CHECKING(if res_query will link)
2624 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
2625 [AC_MSG_RESULT(no)
2626 saved_LIBS="$LIBS"
2627 LIBS="$LIBS -lresolv"
2628 AC_MSG_CHECKING(for res_query in -lresolv)
2629 AC_LINK_IFELSE([
2630#include <resolv.h>
2631int main()
2632{
2633 res_query (0, 0, 0, 0, 0);
2634 return 0;
2635}
2636 ],
2637 [LIBS="$LIBS -lresolv"
2638 AC_MSG_RESULT(yes)],
2639 [LIBS="$saved_LIBS"
2640 AC_MSG_RESULT(no)])
2641 ])
c31dc31c 2642 AC_CHECK_FUNCS(_getshort _getlong)
1c829da5 2643 AC_CHECK_DECLS([_getshort, _getlong], , ,
b5765e1d 2644 [#include <sys/types.h>
2645 #include <arpa/nameser.h>])
c31dc31c 2646 AC_CHECK_MEMBER(HEADER.ad,
2647 [AC_DEFINE(HAVE_HEADER_AD)],,
2648 [#include <arpa/nameser.h>])
2649 ])
3e05e934 2650
12928e80 2651# Check whether user wants Kerberos 5 support
aff51935 2652KRB5_MSG="no"
12928e80 2653AC_ARG_WITH(kerberos5,
aff51935 2654 [ --with-kerberos5=PATH Enable Kerberos 5 support],
5585c441 2655 [ if test "x$withval" != "xno" ; then
2656 if test "x$withval" = "xyes" ; then
2657 KRB5ROOT="/usr/local"
2658 else
2659 KRB5ROOT=${withval}
2660 fi
2661
2662 AC_DEFINE(KRB5)
2663 KRB5_MSG="yes"
2664
2665 AC_MSG_CHECKING(for krb5-config)
2666 if test -x $KRB5ROOT/bin/krb5-config ; then
2667 KRB5CONF=$KRB5ROOT/bin/krb5-config
2668 AC_MSG_RESULT($KRB5CONF)
2669
2670 AC_MSG_CHECKING(for gssapi support)
2671 if $KRB5CONF | grep gssapi >/dev/null ; then
2672 AC_MSG_RESULT(yes)
071970fb 2673 AC_DEFINE(GSSAPI)
2674 k5confopts=gssapi
aff51935 2675 else
5585c441 2676 AC_MSG_RESULT(no)
071970fb 2677 k5confopts=""
aff51935 2678 fi
071970fb 2679 K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
2680 K5LIBS="`$KRB5CONF --libs $k5confopts`"
5585c441 2681 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
5585c441 2682 AC_MSG_CHECKING(whether we are using Heimdal)
2683 AC_TRY_COMPILE([ #include <krb5.h> ],
2684 [ char *tmp = heimdal_version; ],
2685 [ AC_MSG_RESULT(yes)
2686 AC_DEFINE(HEIMDAL) ],
2687 AC_MSG_RESULT(no)
2688 )
2689 else
2690 AC_MSG_RESULT(no)
12928e80 2691 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
aff51935 2692 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
aff51935 2693 AC_MSG_CHECKING(whether we are using Heimdal)
2694 AC_TRY_COMPILE([ #include <krb5.h> ],
2695 [ char *tmp = heimdal_version; ],
2696 [ AC_MSG_RESULT(yes)
2697 AC_DEFINE(HEIMDAL)
41707f74 2698 K5LIBS="-lkrb5 -ldes"
2699 K5LIBS="$K5LIBS -lcom_err -lasn1"
82f4e93d 2700 AC_CHECK_LIB(roken, net_write,
41707f74 2701 [K5LIBS="$K5LIBS -lroken"])
aff51935 2702 ],
2703 [ AC_MSG_RESULT(no)
2704 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
2705 ]
2706 )
4e00038c 2707 AC_SEARCH_LIBS(dn_expand, resolv)
12928e80 2708
749560dd 2709 AC_CHECK_LIB(gssapi,gss_init_sec_context,
2710 [ AC_DEFINE(GSSAPI)
2711 K5LIBS="-lgssapi $K5LIBS" ],
2712 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
2713 [ AC_DEFINE(GSSAPI)
aff51935 2714 K5LIBS="-lgssapi_krb5 $K5LIBS" ],
749560dd 2715 AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
2716 $K5LIBS)
2717 ],
2718 $K5LIBS)
82f4e93d 2719
749560dd 2720 AC_CHECK_HEADER(gssapi.h, ,
2721 [ unset ac_cv_header_gssapi_h
aff51935 2722 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
749560dd 2723 AC_CHECK_HEADERS(gssapi.h, ,
2724 AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
aff51935 2725 )
749560dd 2726 ]
2727 )
2728
2729 oldCPP="$CPPFLAGS"
2730 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2731 AC_CHECK_HEADER(gssapi_krb5.h, ,
2732 [ CPPFLAGS="$oldCPP" ])
2733
aff51935 2734 fi
5585c441 2735 if test ! -z "$need_dash_r" ; then
2736 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
2737 fi
2738 if test ! -z "$blibpath" ; then
2739 blibpath="$blibpath:${KRB5ROOT}/lib"
2740 fi
071970fb 2741 fi
2742
2743 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
2744 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
2745 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
2746
2747 LIBS="$LIBS $K5LIBS"
2748 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS))
2749 ]
12928e80 2750)
b5b68128 2751
a0391976 2752# Looking for programs, paths and files
a0391976 2753
ecac8ee5 2754PRIVSEP_PATH=/var/empty
2755AC_ARG_WITH(privsep-path,
cda1ebcb 2756 [ --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
ecac8ee5 2757 [
6cf0200f 2758 if test -n "$withval" && test "x$withval" != "xno" && \
2759 test "x${withval}" != "xyes"; then
ecac8ee5 2760 PRIVSEP_PATH=$withval
2761 fi
2762 ]
2763)
2764AC_SUBST(PRIVSEP_PATH)
2765
a0391976 2766AC_ARG_WITH(xauth,
2767 [ --with-xauth=PATH Specify path to xauth program ],
2768 [
6cf0200f 2769 if test -n "$withval" && test "x$withval" != "xno" && \
2770 test "x${withval}" != "xyes"; then
cbd7492e 2771 xauth_path=$withval
a0391976 2772 fi
2773 ],
2774 [
2bf42e4a 2775 TestPath="$PATH"
2776 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
2777 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
2778 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
2779 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
2780 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
e5fe9a1f 2781 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
a0391976 2782 xauth_path="/usr/openwin/bin/xauth"
2783 fi
2784 ]
2785)
2786
65a4b4af 2787STRIP_OPT=-s
2788AC_ARG_ENABLE(strip,
2789 [ --disable-strip Disable calling strip(1) on install],
2790 [
2791 if test "x$enableval" = "xno" ; then
2792 STRIP_OPT=
2793 fi
2794 ]
2795)
2796AC_SUBST(STRIP_OPT)
2797
b3ec54b4 2798if test -z "$xauth_path" ; then
2799 XAUTH_PATH="undefined"
2800 AC_SUBST(XAUTH_PATH)
2801else
a0391976 2802 AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path")
b3ec54b4 2803 XAUTH_PATH=$xauth_path
2804 AC_SUBST(XAUTH_PATH)
a0391976 2805fi
a0391976 2806
2807# Check for mail directory (last resort if we cannot get it from headers)
2808if test ! -z "$MAIL" ; then
2809 maildir=`dirname $MAIL`
2810 AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir")
2811fi
2812
479cece8 2813if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
1a01a50c 2814 AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
2815 disable_ptmx_check=yes
2816fi
a0391976 2817if test -z "$no_dev_ptmx" ; then
6e879cb4 2818 if test "x$disable_ptmx_check" != "xyes" ; then
aff51935 2819 AC_CHECK_FILE("/dev/ptmx",
6e879cb4 2820 [
2821 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX)
2822 have_dev_ptmx=1
2823 ]
2824 )
2825 fi
3276571c 2826fi
1a01a50c 2827
479cece8 2828if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
1a01a50c 2829 AC_CHECK_FILE("/dev/ptc",
2830 [
2831 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC)
2832 have_dev_ptc=1
2833 ]
2834 )
2835else
2836 AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
2837fi
3276571c 2838
a0391976 2839# Options from here on. Some of these are preset by platform above
fdf6b7aa 2840AC_ARG_WITH(mantype,
5d97cfbf 2841 [ --with-mantype=man|cat|doc Set man page type],
c54a6257 2842 [
5d97cfbf 2843 case "$withval" in
2844 man|cat|doc)
2845 MANTYPE=$withval
2846 ;;
2847 *)
2848 AC_MSG_ERROR(invalid man type: $withval)
2849 ;;
2850 esac
c54a6257 2851 ]
2852)
e0c4d3ac 2853if test -z "$MANTYPE"; then
2bf42e4a 2854 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
2855 AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
e0c4d3ac 2856 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
2857 MANTYPE=doc
2858 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
2859 MANTYPE=man
2860 else
2861 MANTYPE=cat
2862 fi
2863fi
c54a6257 2864AC_SUBST(MANTYPE)
e0c4d3ac 2865if test "$MANTYPE" = "doc"; then
2866 mansubdir=man;
2867else
2868 mansubdir=$MANTYPE;
2869fi
2870AC_SUBST(mansubdir)
0bc5b6fb 2871
a0391976 2872# Check whether to enable MD5 passwords
aff51935 2873MD5_MSG="no"
2ddcfdf3 2874AC_ARG_WITH(md5-passwords,
caf3bc51 2875 [ --with-md5-passwords Enable use of MD5 passwords],
0bc5b6fb 2876 [
bcf36c78 2877 if test "x$withval" != "xno" ; then
0bc5b6fb 2878 AC_DEFINE(HAVE_MD5_PASSWORDS)
aff51935 2879 MD5_MSG="yes"
0bc5b6fb 2880 fi
2881 ]
caf3bc51 2882)
2883
a0391976 2884# Whether to disable shadow password support
a7effaac 2885AC_ARG_WITH(shadow,
2886 [ --without-shadow Disable shadow password support],
2887 [
82f4e93d 2888 if test "x$withval" = "xno" ; then
a7effaac 2889 AC_DEFINE(DISABLE_SHADOW)
4cb5ffa0 2890 disable_shadow=yes
a7effaac 2891 fi
2892 ]
2893)
2894
4cb5ffa0 2895if test -z "$disable_shadow" ; then
2896 AC_MSG_CHECKING([if the systems has expire shadow information])
2897 AC_TRY_COMPILE(
2898 [
2899#include <sys/types.h>
2900#include <shadow.h>
2901 struct spwd sp;
2902 ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
2903 [ sp_expire_available=yes ], []
2904 )
2905
2906 if test "x$sp_expire_available" = "xyes" ; then
2907 AC_MSG_RESULT(yes)
2908 AC_DEFINE(HAS_SHADOW_EXPIRE)
2909 else
2910 AC_MSG_RESULT(no)
2911 fi
2912fi
2913
a0391976 2914# Use ip address instead of hostname in $DISPLAY
44839801 2915if test ! -z "$IPADDR_IN_DISPLAY" ; then
2916 DISPLAY_HACK_MSG="yes"
2917 AC_DEFINE(IPADDR_IN_DISPLAY)
2918else
aff51935 2919 DISPLAY_HACK_MSG="no"
44839801 2920 AC_ARG_WITH(ipaddr-display,
2921 [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY],
2922 [
82f4e93d 2923 if test "x$withval" != "xno" ; then
44839801 2924 AC_DEFINE(IPADDR_IN_DISPLAY)
aff51935 2925 DISPLAY_HACK_MSG="yes"
44839801 2926 fi
2927 ]
2928 )
2929fi
a7effaac 2930
95b99395 2931# check for /etc/default/login and use it if present.
daa41e62 2932AC_ARG_ENABLE(etc-default-login,
6ff3d0dc 2933 [ --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
694d0cef 2934 [ if test "x$enableval" = "xno"; then
2935 AC_MSG_NOTICE([/etc/default/login handling disabled])
2936 etc_default_login=no
2937 else
2938 etc_default_login=yes
2939 fi ],
2940 [ etc_default_login=yes ]
2941)
95b99395 2942
694d0cef 2943if test "x$etc_default_login" != "xno"; then
2944 AC_CHECK_FILE("/etc/default/login",
2945 [ external_path_file=/etc/default/login ])
479cece8 2946 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
2947 then
1a01a50c 2948 AC_MSG_WARN([cross compiling: Disabling /etc/default/login test])
2949 elif test "x$external_path_file" = "x/etc/default/login"; then
2950 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN)
2951 fi
694d0cef 2952fi
95b99395 2953
8d184c09 2954dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
4b492aab 2955if test $ac_cv_func_login_getcapbool = "yes" && \
2956 test $ac_cv_header_login_cap_h = "yes" ; then
95b99395 2957 external_path_file=/etc/login.conf
8d184c09 2958fi
95b99395 2959
a0391976 2960# Whether to mess with the default path
aff51935 2961SERVER_PATH_MSG="(default)"
c43d69a9 2962AC_ARG_WITH(default-path,
75817f90 2963 [ --with-default-path= Specify default \$PATH environment for server],
cb807f40 2964 [
95b99395 2965 if test "x$external_path_file" = "x/etc/login.conf" ; then
8d184c09 2966 AC_MSG_WARN([
2967--with-default-path=PATH has no effect on this system.
2968Edit /etc/login.conf instead.])
82f4e93d 2969 elif test "x$withval" != "xno" ; then
89bbd457 2970 if test ! -z "$external_path_file" ; then
95b99395 2971 AC_MSG_WARN([
2972--with-default-path=PATH will only be used if PATH is not defined in
2973$external_path_file .])
2974 fi
b2d818e6 2975 user_path="$withval"
aff51935 2976 SERVER_PATH_MSG="$withval"
cb807f40 2977 fi
b2d818e6 2978 ],
95b99395 2979 [ if test "x$external_path_file" = "x/etc/login.conf" ; then
2980 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
8d184c09 2981 else
89bbd457 2982 if test ! -z "$external_path_file" ; then
95b99395 2983 AC_MSG_WARN([
2984If PATH is defined in $external_path_file, ensure the path to scp is included,
2985otherwise scp will not work.])
2986 fi
2987 AC_TRY_RUN(
2988 [
b2d818e6 2989/* find out what STDPATH is */
2990#include <stdio.h>
b2d818e6 2991#ifdef HAVE_PATHS_H
2992# include <paths.h>
2993#endif
2994#ifndef _PATH_STDPATH
d9a4e55b 2995# ifdef _PATH_USERPATH /* Irix */
2996# define _PATH_STDPATH _PATH_USERPATH
2997# else
2998# define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
2999# endif
b2d818e6 3000#endif
3001#include <sys/types.h>
3002#include <sys/stat.h>
3003#include <fcntl.h>
3004#define DATA "conftest.stdpath"
3005
3006main()
3007{
3008 FILE *fd;
3009 int rc;
82f4e93d 3010
b2d818e6 3011 fd = fopen(DATA,"w");
3012 if(fd == NULL)
3013 exit(1);
82f4e93d 3014
b2d818e6 3015 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
3016 exit(1);
3017
3018 exit(0);
3019}
3020 ], [ user_path=`cat conftest.stdpath` ],
3021 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
3022 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
3023 )
3024# make sure $bindir is in USER_PATH so scp will work
3025 t_bindir=`eval echo ${bindir}`
3026 case $t_bindir in
3027 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
3028 esac
3029 case $t_bindir in
3030 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
3031 esac
3032 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
3033 if test $? -ne 0 ; then
3034 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
3035 if test $? -ne 0 ; then
3036 user_path=$user_path:$t_bindir
3037 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
3038 fi
3039 fi
8d184c09 3040 fi ]
cb807f40 3041)
95b99395 3042if test "x$external_path_file" != "x/etc/login.conf" ; then
8d184c09 3043 AC_DEFINE_UNQUOTED(USER_PATH, "$user_path")
3044 AC_SUBST(user_path)
3045fi
cb807f40 3046
06617857 3047# Set superuser path separately to user path
06617857 3048AC_ARG_WITH(superuser-path,
3049 [ --with-superuser-path= Specify different path for super-user],
3050 [
6cf0200f 3051 if test -n "$withval" && test "x$withval" != "xno" && \
3052 test "x${withval}" != "xyes"; then
06617857 3053 AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval")
3054 superuser_path=$withval
3055 fi
3056 ]
3057)
3058
3059
58d100bf 3060AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
aff51935 3061IPV4_IN6_HACK_MSG="no"
80faa19f 3062AC_ARG_WITH(4in6,
3063 [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses],
3064 [
3065 if test "x$withval" != "xno" ; then
3066 AC_MSG_RESULT(yes)
3067 AC_DEFINE(IPV4_IN_IPV6)
aff51935 3068 IPV4_IN6_HACK_MSG="yes"
80faa19f 3069 else
3070 AC_MSG_RESULT(no)
3071 fi
3072 ],[
3073 if test "x$inet6_default_4in6" = "xyes"; then
3074 AC_MSG_RESULT([yes (default)])
3075 AC_DEFINE(IPV4_IN_IPV6)
aff51935 3076 IPV4_IN6_HACK_MSG="yes"
80faa19f 3077 else
3078 AC_MSG_RESULT([no (default)])
3079 fi
3080 ]
3081)
3082
af774732 3083# Whether to enable BSD auth support
f1b0ecc3 3084BSD_AUTH_MSG=no
af774732 3085AC_ARG_WITH(bsd-auth,
3086 [ --with-bsd-auth Enable BSD auth support],
3087 [
82f4e93d 3088 if test "x$withval" != "xno" ; then
af774732 3089 AC_DEFINE(BSD_AUTH)
f1b0ecc3 3090 BSD_AUTH_MSG=yes
af774732 3091 fi
3092 ]
3093)
3094
a0391976 3095# Where to place sshd.pid
19d9ac2a 3096piddir=/var/run
81dadca3 3097# make sure the directory exists
82f4e93d 3098if test ! -d $piddir ; then
81dadca3 3099 piddir=`eval echo ${sysconfdir}`
3100 case $piddir in
aff51935 3101 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
81dadca3 3102 esac
3103fi
3104
47e45e44 3105AC_ARG_WITH(pid-dir,
3106 [ --with-pid-dir=PATH Specify location of ssh.pid file],
3107 [
6cf0200f 3108 if test -n "$withval" && test "x$withval" != "xno" && \
3109 test "x${withval}" != "xyes"; then
19d9ac2a 3110 piddir=$withval
82f4e93d 3111 if test ! -d $piddir ; then
81dadca3 3112 AC_MSG_WARN([** no $piddir directory on this system **])
3113 fi
47e45e44 3114 fi
3115 ]
3116)
b7a87eea 3117
42f11eb2 3118AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir")
19d9ac2a 3119AC_SUBST(piddir)
47e45e44 3120
1d7b9b20 3121dnl allow user to disable some login recording features
3122AC_ARG_ENABLE(lastlog,
bfd550a2 3123 [ --disable-lastlog disable use of lastlog even if detected [no]],
ddb154b3 3124 [
3125 if test "x$enableval" = "xno" ; then
3126 AC_DEFINE(DISABLE_LASTLOG)
3127 fi
3128 ]
1d7b9b20 3129)
3130AC_ARG_ENABLE(utmp,
bfd550a2 3131 [ --disable-utmp disable use of utmp even if detected [no]],
ddb154b3 3132 [
3133 if test "x$enableval" = "xno" ; then
3134 AC_DEFINE(DISABLE_UTMP)
3135 fi
3136 ]
1d7b9b20 3137)
3138AC_ARG_ENABLE(utmpx,
bfd550a2 3139 [ --disable-utmpx disable use of utmpx even if detected [no]],
ddb154b3 3140 [
3141 if test "x$enableval" = "xno" ; then
3142 AC_DEFINE(DISABLE_UTMPX)
3143 fi
3144 ]
1d7b9b20 3145)
3146AC_ARG_ENABLE(wtmp,
bfd550a2 3147 [ --disable-wtmp disable use of wtmp even if detected [no]],
ddb154b3 3148 [
3149 if test "x$enableval" = "xno" ; then
3150 AC_DEFINE(DISABLE_WTMP)
3151 fi
3152 ]
1d7b9b20 3153)
3154AC_ARG_ENABLE(wtmpx,
bfd550a2 3155 [ --disable-wtmpx disable use of wtmpx even if detected [no]],
ddb154b3 3156 [
3157 if test "x$enableval" = "xno" ; then
3158 AC_DEFINE(DISABLE_WTMPX)
3159 fi
3160 ]
1d7b9b20 3161)
3162AC_ARG_ENABLE(libutil,
bfd550a2 3163 [ --disable-libutil disable use of libutil (login() etc.) [no]],
ddb154b3 3164 [
3165 if test "x$enableval" = "xno" ; then
3166 AC_DEFINE(DISABLE_LOGIN)
3167 fi
3168 ]
1d7b9b20 3169)
3170AC_ARG_ENABLE(pututline,
bfd550a2 3171 [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]],
ddb154b3 3172 [
3173 if test "x$enableval" = "xno" ; then
aff51935 3174 AC_DEFINE(DISABLE_PUTUTLINE)
ddb154b3 3175 fi
3176 ]
1d7b9b20 3177)
3178AC_ARG_ENABLE(pututxline,
bfd550a2 3179 [ --disable-pututxline disable use of pututxline() etc. ([uw]tmpx) [no]],
ddb154b3 3180 [
3181 if test "x$enableval" = "xno" ; then
3182 AC_DEFINE(DISABLE_PUTUTXLINE)
3183 fi
3184 ]
1d7b9b20 3185)
3186AC_ARG_WITH(lastlog,
bfd550a2 3187 [ --with-lastlog=FILE|DIR specify lastlog location [common locations]],
8c89dd2b 3188 [
82f4e93d 3189 if test "x$withval" = "xno" ; then
8c89dd2b 3190 AC_DEFINE(DISABLE_LASTLOG)
6cf0200f 3191 elif test -n "$withval" && test "x${withval}" != "xyes"; then
8c89dd2b 3192 conf_lastlog_location=$withval
3193 fi
3194 ]
3195)
1d7b9b20 3196
3197dnl lastlog, [uw]tmpx? detection
3198dnl NOTE: set the paths in the platform section to avoid the
3199dnl need for command-line parameters
3200dnl lastlog and [uw]tmp are subject to a file search if all else fails
3201
3202dnl lastlog detection
3203dnl NOTE: the code itself will detect if lastlog is a directory
3204AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
3205AC_TRY_COMPILE([
3206#include <sys/types.h>
3207#include <utmp.h>
3208#ifdef HAVE_LASTLOG_H
3209# include <lastlog.h>
3210#endif
d7c0f3d5 3211#ifdef HAVE_PATHS_H
1d7b9b20 3212# include <paths.h>
41cb4569 3213#endif
3214#ifdef HAVE_LOGIN_H
3215# include <login.h>
1d7b9b20 3216#endif
3217 ],
3218 [ char *lastlog = LASTLOG_FILE; ],
3219 [ AC_MSG_RESULT(yes) ],
d7c0f3d5 3220 [
3221 AC_MSG_RESULT(no)
3222 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
3223 AC_TRY_COMPILE([
3224#include <sys/types.h>
3225#include <utmp.h>
3226#ifdef HAVE_LASTLOG_H
3227# include <lastlog.h>
3228#endif
3229#ifdef HAVE_PATHS_H
3230# include <paths.h>
3231#endif
3232 ],
3233 [ char *lastlog = _PATH_LASTLOG; ],
3234 [ AC_MSG_RESULT(yes) ],
3235 [
f282b668 3236 AC_MSG_RESULT(no)
d7c0f3d5 3237 system_lastlog_path=no
3238 ])
3239 ]
1d7b9b20 3240)
d7c0f3d5 3241
1d7b9b20 3242if test -z "$conf_lastlog_location"; then
3243 if test x"$system_lastlog_path" = x"no" ; then
3244 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
e5fe9a1f 3245 if (test -d "$f" || test -f "$f") ; then
1d7b9b20 3246 conf_lastlog_location=$f
3247 fi
3248 done
3249 if test -z "$conf_lastlog_location"; then
f8119cef 3250 AC_MSG_WARN([** Cannot find lastlog **])
3251 dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
1d7b9b20 3252 fi
3253 fi
3254fi
3255
3256if test -n "$conf_lastlog_location"; then
3257 AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location")
82f4e93d 3258fi
1d7b9b20 3259
3260dnl utmp detection
3261AC_MSG_CHECKING([if your system defines UTMP_FILE])
3262AC_TRY_COMPILE([
3263#include <sys/types.h>
3264#include <utmp.h>
d7c0f3d5 3265#ifdef HAVE_PATHS_H
1d7b9b20 3266# include <paths.h>
3267#endif
3268 ],
3269 [ char *utmp = UTMP_FILE; ],
3270 [ AC_MSG_RESULT(yes) ],
3271 [ AC_MSG_RESULT(no)
3272 system_utmp_path=no ]
3273)
3274if test -z "$conf_utmp_location"; then
3275 if test x"$system_utmp_path" = x"no" ; then
3276 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3277 if test -f $f ; then
3278 conf_utmp_location=$f
3279 fi
3280 done
3281 if test -z "$conf_utmp_location"; then
3282 AC_DEFINE(DISABLE_UTMP)
3283 fi
3284 fi
3285fi
3286if test -n "$conf_utmp_location"; then
3287 AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location")
82f4e93d 3288fi
1d7b9b20 3289
3290dnl wtmp detection
3291AC_MSG_CHECKING([if your system defines WTMP_FILE])
3292AC_TRY_COMPILE([
3293#include <sys/types.h>
3294#include <utmp.h>
d7c0f3d5 3295#ifdef HAVE_PATHS_H
1d7b9b20 3296# include <paths.h>
3297#endif
3298 ],
3299 [ char *wtmp = WTMP_FILE; ],
3300 [ AC_MSG_RESULT(yes) ],
3301 [ AC_MSG_RESULT(no)
3302 system_wtmp_path=no ]
3303)
3304if test -z "$conf_wtmp_location"; then
3305 if test x"$system_wtmp_path" = x"no" ; then
3306 for f in /usr/adm/wtmp /var/log/wtmp; do
3307 if test -f $f ; then
3308 conf_wtmp_location=$f
3309 fi
3310 done
3311 if test -z "$conf_wtmp_location"; then
3312 AC_DEFINE(DISABLE_WTMP)
3313 fi
3314 fi
3315fi
3316if test -n "$conf_wtmp_location"; then
3317 AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location")
82f4e93d 3318fi
1d7b9b20 3319
3320
3321dnl utmpx detection - I don't know any system so perverse as to require
3322dnl utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3323dnl there, though.
3324AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3325AC_TRY_COMPILE([
3326#include <sys/types.h>
3327#include <utmp.h>
3328#ifdef HAVE_UTMPX_H
3329#include <utmpx.h>
3330#endif
d7c0f3d5 3331#ifdef HAVE_PATHS_H
1d7b9b20 3332# include <paths.h>
3333#endif
3334 ],
3335 [ char *utmpx = UTMPX_FILE; ],
3336 [ AC_MSG_RESULT(yes) ],
3337 [ AC_MSG_RESULT(no)
3338 system_utmpx_path=no ]
3339)
3340if test -z "$conf_utmpx_location"; then
3341 if test x"$system_utmpx_path" = x"no" ; then
3342 AC_DEFINE(DISABLE_UTMPX)
3343 fi
3344else
3345 AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location")
82f4e93d 3346fi
1d7b9b20 3347
3348dnl wtmpx detection
3349AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3350AC_TRY_COMPILE([
3351#include <sys/types.h>
3352#include <utmp.h>
3353#ifdef HAVE_UTMPX_H
3354#include <utmpx.h>
3355#endif
d7c0f3d5 3356#ifdef HAVE_PATHS_H
1d7b9b20 3357# include <paths.h>
3358#endif
3359 ],
3360 [ char *wtmpx = WTMPX_FILE; ],
3361 [ AC_MSG_RESULT(yes) ],
3362 [ AC_MSG_RESULT(no)
3363 system_wtmpx_path=no ]
3364)
3365if test -z "$conf_wtmpx_location"; then
3366 if test x"$system_wtmpx_path" = x"no" ; then
3367 AC_DEFINE(DISABLE_WTMPX)
3368 fi
3369else
3370 AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location")
82f4e93d 3371fi
1d7b9b20 3372
b7a87eea 3373
bd499f9e 3374if test ! -z "$blibpath" ; then
68ece370 3375 LDFLAGS="$LDFLAGS $blibflags$blibpath"
3376 AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
bd499f9e 3377fi
3378
ddceb1c8 3379dnl remove pam and dl because they are in $LIBPAM
3380if test "$PAM_MSG" = yes ; then
98f2d9d5 3381 LIBS=`echo $LIBS | sed 's/-lpam //'`
3382fi
3383if test "$ac_cv_lib_pam_pam_set_item" = yes ; then
3384 LIBS=`echo $LIBS | sed 's/-ldl //'`
ddceb1c8 3385fi
3386
ed89c848 3387dnl Adding -Werror to CFLAGS early prevents configure tests from running.
3388dnl Add now.
3389CFLAGS="$CFLAGS $werror_flags"
3390
3c62e7eb 3391AC_EXEEXT
d7cfdd7c 3392AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openbsd-compat/Makefile \
3393 scard/Makefile ssh_prng_cmds survey.sh])
98a7c37b 3394AC_OUTPUT
d3083fbd 3395
cbd7492e 3396# Print summary of options
3397
cbd7492e 3398# Someone please show me a better way :)
3399A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3400B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3401C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3402D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
f5665f6f 3403E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
e0c4d3ac 3404F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
cbd7492e 3405G=`eval echo ${piddir}` ; G=`eval echo ${G}`
ecac8ee5 3406H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3407I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3408J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
cbd7492e 3409
3410echo ""
26de7942 3411echo "OpenSSH has been configured with the following options:"
ecac8ee5 3412echo " User binaries: $B"
3413echo " System binaries: $C"
3414echo " Configuration files: $D"
3415echo " Askpass program: $E"
3416echo " Manual pages: $F"
3417echo " PID file: $G"
3418echo " Privilege separation chroot path: $H"
95b99395 3419if test "x$external_path_file" = "x/etc/login.conf" ; then
3420echo " At runtime, sshd will use the path defined in $external_path_file"
3421echo " Make sure the path to scp is present, otherwise scp will not work"
8d184c09 3422else
ecac8ee5 3423echo " sshd default user PATH: $I"
89bbd457 3424 if test ! -z "$external_path_file"; then
95b99395 3425echo " (If PATH is set in $external_path_file it will be used instead. If"
3426echo " used, ensure the path to scp is present, otherwise scp will not work.)"
3427 fi
8d184c09 3428fi
06617857 3429if test ! -z "$superuser_path" ; then
ecac8ee5 3430echo " sshd superuser user PATH: $J"
3431fi
3432echo " Manpage format: $MANTYPE"
3e05e934 3433echo " PAM support: $PAM_MSG"
ecac8ee5 3434echo " KerberosV support: $KRB5_MSG"
3435echo " Smartcard support: $SCARD_MSG"
ecac8ee5 3436echo " S/KEY support: $SKEY_MSG"
3437echo " TCP Wrappers support: $TCPW_MSG"
3438echo " MD5 password support: $MD5_MSG"
59031773 3439echo " libedit support: $LIBEDIT_MSG"
3deb1408 3440echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
ecac8ee5 3441echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3442echo " BSD Auth support: $BSD_AUTH_MSG"
3443echo " Random number source: $RAND_MSG"
f1b0ecc3 3444if test ! -z "$USE_RAND_HELPER" ; then
ecac8ee5 3445echo " ssh-rand-helper collects from: $RAND_HELPER_MSG"
af774732 3446fi
3447
cbd7492e 3448echo ""
3449
0c2fb82f 3450echo " Host: ${host}"
3451echo " Compiler: ${CC}"
3452echo " Compiler flags: ${CFLAGS}"
3453echo "Preprocessor flags: ${CPPFLAGS}"
3454echo " Linker flags: ${LDFLAGS}"
ddceb1c8 3455echo " Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
cbd7492e 3456
3457echo ""
3458
9cefe228 3459if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
b3146b5f 3460 echo "SVR4 style packages are supported with \"make package\""
3461 echo ""
9cefe228 3462fi
3463
adeebd37 3464if test "x$PAM_MSG" = "xyes" ; then
f1b0ecc3 3465 echo "PAM is enabled. You may need to install a PAM control file "
3466 echo "for sshd, otherwise password authentication may fail. "
aff51935 3467 echo "Example PAM control files can be found in the contrib/ "
f1b0ecc3 3468 echo "subdirectory"
adeebd37 3469 echo ""
3470fi
3471
f1b0ecc3 3472if test ! -z "$RAND_HELPER_CMDHASH" ; then
3473 echo "WARNING: you are using the builtin random number collection "
3474 echo "service. Please read WARNING.RNG and request that your OS "
3475 echo "vendor includes kernel-based random number collection in "
3476 echo "future versions of your OS."
2c523de9 3477 echo ""
3478fi
af774732 3479
2f6f9cff 3480if test ! -z "$NO_PEERCHECK" ; then
3481 echo "WARNING: the operating system that you are using does not "
3482 echo "appear to support either the getpeereid() API nor the "
3483 echo "SO_PEERCRED getsockopt() option. These facilities are used to "
3484 echo "enforce security checks to prevent unauthorised connections to "
3485 echo "ssh-agent. Their absence increases the risk that a malicious "
3486 echo "user can connect to your agent. "
3487 echo ""
3488fi
3489
7b578f7d 3490if test "$AUDIT_MODULE" = "bsm" ; then
3491 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
3492 echo "See the Solaris section in README.platform for details."
3493fi
git-cvsimport mirror of OpenSSH
This page took 0.931459 seconds and 5 git commands to generate.