]> andersk Git - openssh.git/blame - configure.ac
andersk / openssh.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
- (dtucker) [openbsd-compat/fake-rfc2553.h] rename ssh_gai_strerror hack
[openssh.git] / configure.ac
CommitLineData
eb5d7ff6 1# $Id$
2b983b95 2#
3# Copyright (c) 1999-2004 Damien Miller
4#
5# Permission to use, copy, modify, and distribute this software for any
6# purpose with or without fee is hereby granted, provided that the above
7# copyright notice and this permission notice appear in all copies.
8#
9# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
0b202697 16
76e6410a 17AC_INIT(OpenSSH, Portable, openssh-unix-dev@mindrot.org)
823221b2 18AC_REVISION($Revision$)
98a7c37b 19AC_CONFIG_SRCDIR([ssh.c])
5881cd60 20
21AC_CONFIG_HEADER(config.h)
b14b2ae7 22AC_PROG_CC
a7effaac 23AC_CANONICAL_HOST
cf0c5df5 24AC_C_BIGENDIAN
5881cd60 25
a0391976 26# Checks for programs.
4bbf95fa 27AC_PROG_AWK
4cca272e 28AC_PROG_CPP
5881cd60 29AC_PROG_RANLIB
cf8dd513 30AC_PROG_INSTALL
c9ecc3c7 31AC_PROG_EGREP
bee0a37e 32AC_PATH_PROG(AR, ar)
ddd8c95b 33AC_PATH_PROG(CAT, cat)
34AC_PATH_PROG(KILL, kill)
13dd877b 35AC_PATH_PROGS(PERL, perl5 perl)
c3690df3 36AC_PATH_PROG(SED, sed)
a0f84251 37AC_SUBST(PERL)
ad85db64 38AC_PATH_PROG(ENT, ent)
39AC_SUBST(ENT)
6958bd37 40AC_PATH_PROG(TEST_MINUS_S_SH, bash)
41AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
42AC_PATH_PROG(TEST_MINUS_S_SH, sh)
6193497b 43AC_PATH_PROG(SH, sh)
a3245b92 44AC_SUBST(TEST_SHELL,sh)
f498ed15 45
9cefe228 46dnl for buildpkg.sh
47AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
48 [/usr/sbin${PATH_SEPARATOR}/etc])
49AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
50 [/usr/sbin${PATH_SEPARATOR}/etc])
51AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
eeb27c78 52if test -x /sbin/sh; then
53 AC_SUBST(STARTUP_SCRIPT_SHELL,/sbin/sh)
54else
55 AC_SUBST(STARTUP_SCRIPT_SHELL,/bin/sh)
56fi
9cefe228 57
948fd8b9 58# System features
59AC_SYS_LARGEFILE
60
c193d002 61if test -z "$AR" ; then
62 AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
63fi
64
2e73a022 65# Use LOGIN_PROGRAM from environment if possible
66if test ! -z "$LOGIN_PROGRAM" ; then
3466e002 67 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM",
68 [If your header files don't define LOGIN_PROGRAM,
69 then use this (detected) from environment and PATH])
2e73a022 70else
71 # Search for login
72 AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
73 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
74 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
75 fi
76fi
77
37656beb 78AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
79if test ! -z "$PATH_PASSWD_PROG" ; then
3466e002 80 AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG",
81 [Full path of your "passwd" program])
37656beb 82fi
83
d423d822 84if test -z "$LD" ; then
85 LD=$CC
86fi
87AC_SUBST(LD)
82f4e93d 88
d423d822 89AC_C_INLINE
dfafb2e1 90
91AC_CHECK_DECL(LLONG_MAX, have_llong_max=1, , [#include <limits.h>])
92
aff51935 93if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
af40ca44 94 CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wuninitialized"
eeee8237 95 GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'`
5fdabf45 96 case $GCC_VER in
0b9fdeb8 97 1.*) no_attrib_nonnull=1 ;;
98 2.8* | 2.9*)
99 CFLAGS="$CFLAGS -Wsign-compare"
100 no_attrib_nonnull=1
101 ;;
102 2.*) no_attrib_nonnull=1 ;;
dbf07ba2 103 3.*) CFLAGS="$CFLAGS -Wsign-compare" ;;
cd595991 104 4.*) CFLAGS="$CFLAGS -Wsign-compare -Wno-pointer-sign" ;;
105 *) ;;
5fdabf45 106 esac
8a3ff1aa 107
bd326285 108 AC_MSG_CHECKING(if $CC understands -fstack-protector-all)
eb5a7224 109 saved_CFLAGS="$CFLAGS"
110 CFLAGS="$CFLAGS -fstack-protector-all"
111 AC_TRY_COMPILE([], [ int main(void){return 0;} ],
112 [ AC_MSG_RESULT(yes) ],
113 [ AC_MSG_RESULT(no)
114 CFLAGS="$saved_CFLAGS" ]
115 )
116
dfafb2e1 117 if test -z "$have_llong_max"; then
118 # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
119 unset ac_cv_have_decl_LLONG_MAX
120 saved_CFLAGS="$CFLAGS"
121 CFLAGS="$CFLAGS -std=gnu99"
122 AC_CHECK_DECL(LLONG_MAX,
123 [have_llong_max=1],
124 [CFLAGS="$saved_CFLAGS"],
125 [#include <limits.h>]
126 )
127 fi
d423d822 128fi
129
0b9fdeb8 130if test "x$no_attrib_nonnull" != "x1" ; then
131 AC_DEFINE(HAVE_ATTRIBUTE__NONNULL__, 1, [Have attribute nonnull])
132fi
133
e6354014 134AC_ARG_WITH(rpath,
135 [ --without-rpath Disable auto-added -R linker paths],
136 [
82f4e93d 137 if test "x$withval" = "xno" ; then
e6354014 138 need_dash_r=""
139 fi
140 if test "x$withval" = "xyes" ; then
141 need_dash_r=1
142 fi
143 ]
144)
145
aa56f760 146# Allow user to specify flags
147AC_ARG_WITH(cflags,
148 [ --with-cflags Specify additional flags to pass to compiler],
149 [
150 if test -n "$withval" && test "x$withval" != "xno" && \
151 test "x${withval}" != "xyes"; then
152 CFLAGS="$CFLAGS $withval"
153 fi
154 ]
155)
156AC_ARG_WITH(cppflags,
157 [ --with-cppflags Specify additional flags to pass to preprocessor] ,
158 [
159 if test -n "$withval" && test "x$withval" != "xno" && \
160 test "x${withval}" != "xyes"; then
161 CPPFLAGS="$CPPFLAGS $withval"
162 fi
163 ]
164)
165AC_ARG_WITH(ldflags,
166 [ --with-ldflags Specify additional flags to pass to linker],
167 [
168 if test -n "$withval" && test "x$withval" != "xno" && \
169 test "x${withval}" != "xyes"; then
170 LDFLAGS="$LDFLAGS $withval"
171 fi
172 ]
173)
174AC_ARG_WITH(libs,
175 [ --with-libs Specify additional libraries to link with],
176 [
177 if test -n "$withval" && test "x$withval" != "xno" && \
178 test "x${withval}" != "xyes"; then
179 LIBS="$LIBS $withval"
180 fi
181 ]
182)
183AC_ARG_WITH(Werror,
184 [ --with-Werror Build main code with -Werror],
185 [
186 if test -n "$withval" && test "x$withval" != "xno"; then
187 werror_flags="-Werror"
188 if test "x${withval}" != "xyes"; then
189 werror_flags="$withval"
190 fi
191 fi
192 ]
193)
194
195AC_CHECK_HEADERS( \
196 bstring.h \
197 crypt.h \
198 crypto/sha2.h \
199 dirent.h \
200 endian.h \
201 features.h \
202 fcntl.h \
203 floatingpoint.h \
204 getopt.h \
205 glob.h \
206 ia.h \
207 iaf.h \
208 limits.h \
209 login.h \
210 maillock.h \
211 ndir.h \
212 net/if_tun.h \
213 netdb.h \
214 netgroup.h \
215 pam/pam_appl.h \
216 paths.h \
6d39a5c4 217 poll.h \
aa56f760 218 pty.h \
219 readpassphrase.h \
220 rpc/types.h \
221 security/pam_appl.h \
222 sha2.h \
223 shadow.h \
224 stddef.h \
225 stdint.h \
226 string.h \
227 strings.h \
228 sys/audit.h \
229 sys/bitypes.h \
230 sys/bsdtty.h \
231 sys/cdefs.h \
232 sys/dir.h \
233 sys/mman.h \
234 sys/ndir.h \
8aa5db7d 235 sys/poll.h \
aa56f760 236 sys/prctl.h \
237 sys/pstat.h \
238 sys/select.h \
239 sys/stat.h \
240 sys/stream.h \
241 sys/stropts.h \
242 sys/strtio.h \
243 sys/sysmacros.h \
244 sys/time.h \
245 sys/timers.h \
246 sys/un.h \
247 time.h \
248 tmpdir.h \
249 ttyent.h \
40701614 250 ucred.h \
aa56f760 251 unistd.h \
252 usersec.h \
253 util.h \
254 utime.h \
255 utmp.h \
256 utmpx.h \
257 vis.h \
258)
259
260# lastlog.h requires sys/time.h to be included first on Solaris
261AC_CHECK_HEADERS(lastlog.h, [], [], [
262#ifdef HAVE_SYS_TIME_H
263# include <sys/time.h>
264#endif
265])
266
267# sys/ptms.h requires sys/stream.h to be included first on Solaris
268AC_CHECK_HEADERS(sys/ptms.h, [], [], [
269#ifdef HAVE_SYS_STREAM_H
270# include <sys/stream.h>
271#endif
272])
273
274# login_cap.h requires sys/types.h on NetBSD
275AC_CHECK_HEADERS(login_cap.h, [], [], [
276#include <sys/types.h>
277])
278
5b84789f 279# Messages for features tested for in target-specific section
280SIA_MSG="no"
281SPC_MSG="no"
282
a0391976 283# Check for some target-specific stuff
a7effaac 284case "$host" in
9d6b1b96 285*-*-aix*)
25a2779b 286 # Some versions of VAC won't allow macro redefinitions at
287 # -qlanglevel=ansi, and autoconf 2.60 sometimes insists on using that
288 # particularly with older versions of vac or xlc.
289 # It also throws errors about null macro argments, but these are
290 # not fatal.
291 AC_MSG_CHECKING(if compiler allows macro redefinitions)
292 AC_COMPILE_IFELSE(
293 [AC_LANG_SOURCE([[
294#define testmacro foo
295#define testmacro bar
296int main(void) { exit(0); }
297 ]])],
298 [ AC_MSG_RESULT(yes) ],
299 [ AC_MSG_RESULT(no)
300 CC="`echo $CC | sed 's/-qlanglvl\=ansi//g'`"
301 LD="`echo $LD | sed 's/-qlanglvl\=ansi//g'`"
302 CFLAGS="`echo $CFLAGS | sed 's/-qlanglvl\=ansi//g'`"
303 CPPFLAGS="`echo $CPPFLAGS | sed 's/-qlanglvl\=ansi//g'`"
304 ]
305 )
306
aff51935 307 AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
68ece370 308 if (test -z "$blibpath"); then
0a15d73b 309 blibpath="/usr/lib:/lib"
68ece370 310 fi
311 saved_LDFLAGS="$LDFLAGS"
e7479666 312 if test "$GCC" = "yes"; then
313 flags="-Wl,-blibpath: -Wl,-rpath, -blibpath:"
314 else
315 flags="-blibpath: -Wl,-blibpath: -Wl,-rpath,"
316 fi
317 for tryflags in $flags ;do
68ece370 318 if (test -z "$blibflags"); then
319 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
320 AC_TRY_LINK([], [], [blibflags=$tryflags])
321 fi
322 done
323 if (test -z "$blibflags"); then
324 AC_MSG_RESULT(not found)
325 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
326 else
327 AC_MSG_RESULT($blibflags)
bd499f9e 328 fi
68ece370 329 LDFLAGS="$saved_LDFLAGS"
e351e493 330 dnl Check for authenticate. Might be in libs.a on older AIXes
3466e002 331 AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE, 1,
332 [Define if you want to enable AIX4's authenticate function])],
0764e748 333 [AC_CHECK_LIB(s,authenticate,
e351e493 334 [ AC_DEFINE(WITH_AIXAUTHENTICATE)
0764e748 335 LIBS="$LIBS -ls"
336 ])
337 ])
ba603e06 338 dnl Check for various auth function declarations in headers.
c85ed8e2 339 AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
72ad335d 340 passwdexpired, setauthdb], , , [#include <usersec.h>])
e351e493 341 dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
ba603e06 342 AC_CHECK_DECLS(loginfailed,
e351e493 343 [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
344 AC_TRY_COMPILE(
f58c0e01 345 [#include <usersec.h>],
e351e493 346 [(void)loginfailed("user","host","tty",0);],
347 [AC_MSG_RESULT(yes)
3466e002 348 AC_DEFINE(AIX_LOGINFAILED_4ARG, 1,
349 [Define if your AIX loginfailed() function
350 takes 4 arguments (AIX >= 5.2)])],
f58c0e01 351 [AC_MSG_RESULT(no)]
e351e493 352 )],
353 [],
354 [#include <usersec.h>]
355 )
2aa3a16c 356 AC_CHECK_FUNCS(setauthdb)
53c337ed 357 AC_CHECK_DECL(F_CLOSEM,
795e7517 358 AC_DEFINE(HAVE_FCNTL_CLOSEM, 1, [Use F_CLOSEM fcntl for closefrom]),
53c337ed 359 [],
360 [ #include <limits.h>
361 #include <fcntl.h> ]
362 )
5ccf88cb 363 check_for_aix_broken_getaddrinfo=1
3466e002 364 AC_DEFINE(BROKEN_REALPATH, 1, [Define if you have a broken realpath.])
365 AC_DEFINE(SETEUID_BREAKS_SETUID, 1,
366 [Define if your platform breaks doing a seteuid before a setuid])
367 AC_DEFINE(BROKEN_SETREUID, 1, [Define if your setreuid() is broken])
368 AC_DEFINE(BROKEN_SETREGID, 1, [Define if your setregid() is broken])
a3cef3ca 369 dnl AIX handles lastlog as part of its login message
3466e002 370 AC_DEFINE(DISABLE_LASTLOG, 1, [Define if you don't want to use lastlog])
371 AC_DEFINE(LOGIN_NEEDS_UTMPX, 1,
372 [Some systems need a utmpx entry for /bin/login to work])
373 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV,
374 [Define to a Set Process Title type if your system is
375 supported by bsd-setproctitle.c])
961c2997 376 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
377 [AIX 5.2 and 5.3 (and presumably newer) require this])
ea8c44d9 378 AC_DEFINE(PTY_ZEROREAD, 1, [read(1) can return 0 for a non-closed fd])
9d6b1b96 379 ;;
3c62e7eb 380*-*-cygwin*)
a52997bd 381 check_for_libcrypt_later=1
04765d02 382 LIBS="$LIBS /usr/lib/textreadmode.o"
3466e002 383 AC_DEFINE(HAVE_CYGWIN, 1, [Define if you are on Cygwin])
384 AC_DEFINE(USE_PIPES, 1, [Use PIPES instead of a socketpair()])
385 AC_DEFINE(DISABLE_SHADOW, 1,
386 [Define if you want to disable shadow passwords])
387 AC_DEFINE(IP_TOS_IS_BROKEN, 1,
388 [Define if your system choked on IP TOS setting])
389 AC_DEFINE(NO_X11_UNIX_SOCKETS, 1,
390 [Define if X11 doesn't support AF_UNIX sockets on that system])
391 AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT, 1,
392 [Define if the concept of ports only accessible to
393 superusers isn't known])
394 AC_DEFINE(DISABLE_FD_PASSING, 1,
395 [Define if your platform needs to skip post auth
396 file descriptor passing])
3c62e7eb 397 ;;
d6fdb079 398*-*-dgux*)
399 AC_DEFINE(IP_TOS_IS_BROKEN)
0c6a72a5 400 AC_DEFINE(SETEUID_BREAKS_SETUID)
401 AC_DEFINE(BROKEN_SETREUID)
402 AC_DEFINE(BROKEN_SETREGID)
d6fdb079 403 ;;
39c98ef7 404*-*-darwin*)
33e2e066 405 AC_MSG_CHECKING(if we have working getaddrinfo)
406 AC_TRY_RUN([#include <mach-o/dyld.h>
407main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
408 exit(0);
409 else
410 exit(1);
411}], [AC_MSG_RESULT(working)],
412 [AC_MSG_RESULT(buggy)
3466e002 413 AC_DEFINE(BROKEN_GETADDRINFO, 1, [getaddrinfo is broken (if present)])],
b27e573d 414 [AC_MSG_RESULT(assume it is working)])
635e0c42 415 AC_DEFINE(SETEUID_BREAKS_SETUID)
416 AC_DEFINE(BROKEN_SETREUID)
417 AC_DEFINE(BROKEN_SETREGID)
a8ad3b9d 418 AC_DEFINE(BROKEN_GLOB, 1, [OS X glob does not do what we expect])
3466e002 419 AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1,
420 [Define if your resolver libs need this for getrrsetbyname])
e02505e2 421 AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
422 AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
423 [Use tunnel device compatibility to OpenBSD])
424 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
425 [Prepend the address family to IP tunnel traffic])
39c98ef7 426 ;;
36f36ba3 427*-*-dragonfly*)
428 SSHDLIBS="$SSHDLIBS -lcrypt"
429 ;;
7d458c86 430*-*-hpux*)
431 # first we define all of the options common to all HP-UX releases
b8fea62d 432 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
44839801 433 IPADDR_IN_DISPLAY=yes
2b10f47a 434 AC_DEFINE(USE_PIPES)
3466e002 435 AC_DEFINE(LOGIN_NO_ENDOPT, 1,
436 [Define if your login program cannot handle end of options ("--")])
a2572aa7 437 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3466e002 438 AC_DEFINE(LOCKED_PASSWD_STRING, "*",
439 [String used in /etc/passwd to denote locked account])
3a2b2b44 440 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
83f987c3 441 MAIL="/var/mail/username"
f75ca46d 442 LIBS="$LIBS -lsec"
7d458c86 443 AC_CHECK_LIB(xnet, t_error, ,
444 AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
445
446 # next, we define all of the options specific to major releases
447 case "$host" in
448 *-*-hpux10*)
449 if test -z "$GCC"; then
450 CFLAGS="$CFLAGS -Ae"
451 fi
452 ;;
453 *-*-hpux11*)
3466e002 454 AC_DEFINE(PAM_SUN_CODEBASE, 1,
455 [Define if you are using Solaris-derived PAM which
456 passes pam_messages to the conversation function
457 with an extra level of indirection])
458 AC_DEFINE(DISABLE_UTMP, 1,
459 [Define if you don't want to use utmp])
7d458c86 460 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
461 check_for_hpux_broken_getaddrinfo=1
462 check_for_conflicting_getspnam=1
463 ;;
464 esac
465
466 # lastly, we define options specific to minor releases
467 case "$host" in
468 *-*-hpux10.26)
3466e002 469 AC_DEFINE(HAVE_SECUREWARE, 1,
470 [Define if you have SecureWare-based
471 protected password database])
7d458c86 472 disable_ptmx_check=yes
473 LIBS="$LIBS -lsecpw"
474 ;;
475 esac
2b763e31 476 ;;
d94aa2ae 477*-*-irix5*)
6ac7829a 478 PATH="$PATH:/usr/etc"
3466e002 479 AC_DEFINE(BROKEN_INET_NTOA, 1,
480 [Define if you system's inet_ntoa is busted
481 (e.g. Irix gcc issue)])
cb433561 482 AC_DEFINE(SETEUID_BREAKS_SETUID)
483 AC_DEFINE(BROKEN_SETREUID)
484 AC_DEFINE(BROKEN_SETREGID)
3466e002 485 AC_DEFINE(WITH_ABBREV_NO_TTY, 1,
486 [Define if you shouldn't strip 'tty' from your
487 ttyname in [uw]tmp])
3e6e3da0 488 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
b9795b89 489 ;;
490*-*-irix6*)
6ac7829a 491 PATH="$PATH:/usr/etc"
3466e002 492 AC_DEFINE(WITH_IRIX_ARRAY, 1,
493 [Define if you have/want arrays
494 (cluster-wide session managment, not C arrays)])
495 AC_DEFINE(WITH_IRIX_PROJECT, 1,
496 [Define if you want IRIX project management])
497 AC_DEFINE(WITH_IRIX_AUDIT, 1,
498 [Define if you want IRIX audit trails])
499 AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS, 1,
500 [Define if you want IRIX kernel jobs])])
416ed5a7 501 AC_DEFINE(BROKEN_INET_NTOA)
412c0eaa 502 AC_DEFINE(SETEUID_BREAKS_SETUID)
503 AC_DEFINE(BROKEN_SETREUID)
504 AC_DEFINE(BROKEN_SETREGID)
3466e002 505 AC_DEFINE(BROKEN_UPDWTMPX, 1, [updwtmpx is broken (if present)])
0e8f4eba 506 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 507 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
d94aa2ae 508 ;;
5cdfe03f 509*-*-linux*)
510 no_dev_ptmx=1
717057b6 511 check_for_libcrypt_later=1
eacb954e 512 check_for_openpty_ctty_bug=1
3466e002 513 AC_DEFINE(DONT_TRY_OTHER_AF, 1, [Workaround more Linux IPv6 quirks])
514 AC_DEFINE(PAM_TTY_KLUDGE, 1,
515 [Work around problematic Linux PAM modules handling of PAM_TTY])
516 AC_DEFINE(LOCKED_PASSWD_PREFIX, "!",
517 [String used in /etc/passwd to denote locked account])
3a2b2b44 518 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
3466e002 519 AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM,
520 [Define to whatever link() returns for "not supported"
521 if it doesn't return EOPNOTSUPP.])
b6610e8f 522 AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
3466e002 523 AC_DEFINE(USE_BTMP)
80faa19f 524 inet6_default_4in6=yes
bf7c1e6c 525 case `uname -r` in
ad84c479 526 1.*|2.0.*)
3466e002 527 AC_DEFINE(BROKEN_CMSG_TYPE, 1,
528 [Define if cmsg_type is not passed correctly])
bf7c1e6c 529 ;;
bf7c1e6c 530 esac
c40f09ca 531 # tun(4) forwarding compat code
d91775e1 532 AC_CHECK_HEADERS(linux/if_tun.h)
b5081213 533 if test "x$ac_cv_header_linux_if_tun_h" = "xyes" ; then
c40f09ca 534 AC_DEFINE(SSH_TUN_LINUX, 1,
535 [Open tunnel devices the Linux tun/tap way])
536 AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
537 [Use tunnel device compatibility to OpenBSD])
538 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
539 [Prepend the address family to IP tunnel traffic])
540 fi
5cdfe03f 541 ;;
66d6c27e 542mips-sony-bsd|mips-sony-newsos4)
4b2cf3f1 543 AC_DEFINE(NEED_SETPGRP, 1, [Need setpgrp to acquire controlling tty])
66d6c27e 544 SONY=1
66d6c27e 545 ;;
d468fc76 546*-*-netbsd*)
33e2e066 547 check_for_libcrypt_before=1
82f4e93d 548 if test "x$withval" != "xno" ; then
e6354014 549 need_dash_r=1
550 fi
0f6cb079 551 AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
552 AC_CHECK_HEADER([net/if_tap.h], ,
553 AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
554 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
555 [Prepend the address family to IP tunnel traffic])
d468fc76 556 ;;
86b416a7 557*-*-freebsd*)
558 check_for_libcrypt_later=1
988c5031 559 AC_DEFINE(LOCKED_PASSWD_PREFIX, "*LOCKED*", [Account locked with pw(1)])
0f6cb079 560 AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
561 AC_CHECK_HEADER([net/if_tap.h], ,
562 AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
86b416a7 563 ;;
8707b7eb 564*-*-bsdi*)
565 AC_DEFINE(SETEUID_BREAKS_SETUID)
566 AC_DEFINE(BROKEN_SETREUID)
567 AC_DEFINE(BROKEN_SETREGID)
568 ;;
729bfe59 569*-next-*)
729bfe59 570 conf_lastlog_location="/usr/adm/lastlog"
698d107e 571 conf_utmp_location=/etc/utmp
572 conf_wtmp_location=/usr/adm/wtmp
573 MAIL=/usr/spool/mail
3466e002 574 AC_DEFINE(HAVE_NEXT, 1, [Define if you are on NeXT])
443172c4 575 AC_DEFINE(BROKEN_REALPATH)
00937921 576 AC_DEFINE(USE_PIPES)
3466e002 577 AC_DEFINE(BROKEN_SAVED_UIDS, 1, [Needed for NeXT])
729bfe59 578 ;;
5b7b5e23 579*-*-openbsd*)
580 AC_DEFINE(HAVE_ATTRIBUTE__SENTINEL__, 1, [OpenBSD's gcc has sentinel])
8034a348 581 AC_DEFINE(HAVE_ATTRIBUTE__BOUNDED__, 1, [OpenBSD's gcc has bounded])
0f6cb079 582 AC_DEFINE(SSH_TUN_OPENBSD, 1, [Open tunnel devices the OpenBSD way])
c79c4814 583 AC_DEFINE(SYSLOG_R_SAFE_IN_SIGHAND, 1,
584 [syslog_r function is safe to use in in a signal handler])
5b7b5e23 585 ;;
9d6b1b96 586*-*-solaris*)
82f4e93d 587 if test "x$withval" != "xno" ; then
010e9d5b 588 need_dash_r=1
589 fi
adeebd37 590 AC_DEFINE(PAM_SUN_CODEBASE)
7e2d5fa4 591 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3466e002 592 AC_DEFINE(LOGIN_NEEDS_TERM, 1,
593 [Some versions of /bin/login need the TERM supplied
594 on the commandline])
7f0a4ff1 595 AC_DEFINE(PAM_TTY_KLUDGE)
3466e002 596 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
597 [Define if pam_chauthtok wants real uid set
598 to the unpriv'ed user])
3e6e3da0 599 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
ad84c479 600 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
3466e002 601 AC_DEFINE(SSHD_ACQUIRES_CTTY, 1,
602 [Define if sshd somehow reacquires a controlling TTY
603 after setsid()])
795aa5f5 604 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd
605 in case the name is longer than 8 chars])
95b99395 606 external_path_file=/etc/default/login
1d7b9b20 607 # hardwire lastlog location (can't detect it on some versions)
608 conf_lastlog_location="/var/adm/lastlog"
32c80420 609 AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
610 sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
611 if test "$sol2ver" -ge 8; then
612 AC_MSG_RESULT(yes)
613 AC_DEFINE(DISABLE_UTMP)
3466e002 614 AC_DEFINE(DISABLE_WTMP, 1,
615 [Define if you don't want to use wtmp])
32c80420 616 else
617 AC_MSG_RESULT(no)
618 fi
5b84789f 619 AC_ARG_WITH(solaris-contracts,
620 [ --with-solaris-contracts Enable Solaris process contracts (experimental)],
621 [
622 AC_CHECK_LIB(contract, ct_tmpl_activate,
623 [ AC_DEFINE(USE_SOLARIS_PROCESS_CONTRACTS, 1,
624 [Define if you have Solaris process contracts])
625 SSHDLIBS="$SSHDLIBS -lcontract"
626 AC_SUBST(SSHDLIBS)
627 SPC_MSG="yes" ], )
628 ],
629 )
9d6b1b96 630 ;;
a423beaf 631*-*-sunos4*)
0c2fb82f 632 CPPFLAGS="$CPPFLAGS -DSUNOS4"
a423beaf 633 AC_CHECK_FUNCS(getpwanam)
adeebd37 634 AC_DEFINE(PAM_SUN_CODEBASE)
32eec038 635 conf_utmp_location=/etc/utmp
636 conf_wtmp_location=/var/adm/wtmp
637 conf_lastlog_location=/var/adm/lastlog
137d7b6c 638 AC_DEFINE(USE_PIPES)
a423beaf 639 ;;
6f68f28a 640*-ncr-sysv*)
98a7c37b 641 LIBS="$LIBS -lc89"
29525240 642 AC_DEFINE(USE_PIPES)
eabb99c6 643 AC_DEFINE(SSHD_ACQUIRES_CTTY)
6fb3618d 644 AC_DEFINE(SETEUID_BREAKS_SETUID)
645 AC_DEFINE(BROKEN_SETREUID)
646 AC_DEFINE(BROKEN_SETREGID)
6f68f28a 647 ;;
132dd316 648*-sni-sysv*)
c8c15bcb 649 # /usr/ucblib MUST NOT be searched on ReliantUNIX
e2798e96 650 AC_CHECK_LIB(dl, dlsym, ,)
d08db6d1 651 # -lresolv needs to be at the end of LIBS or DNS lookups break
652 AC_CHECK_LIB(resolv, res_query, [ LIBS="$LIBS -lresolv" ])
9548d6c8 653 IPADDR_IN_DISPLAY=yes
654 AC_DEFINE(USE_PIPES)
132dd316 655 AC_DEFINE(IP_TOS_IS_BROKEN)
605369bb 656 AC_DEFINE(SETEUID_BREAKS_SETUID)
657 AC_DEFINE(BROKEN_SETREUID)
658 AC_DEFINE(BROKEN_SETREGID)
eabb99c6 659 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 660 external_path_file=/etc/default/login
c8c15bcb 661 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
662 # Attention: always take care to bind libsocket and libnsl before libc,
663 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
132dd316 664 ;;
79a7ba96 665# UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
77bb0bca 666*-*-sysv4.2*)
ed6553e2 667 AC_DEFINE(USE_PIPES)
7ed101c0 668 AC_DEFINE(SETEUID_BREAKS_SETUID)
669 AC_DEFINE(BROKEN_SETREUID)
670 AC_DEFINE(BROKEN_SETREGID)
46f853b9 671 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
e45da4d6 672 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
77bb0bca 673 ;;
79a7ba96 674# UnixWare 7.x, OpenUNIX 8
77bb0bca 675*-*-sysv5*)
d7d2cc6e 676 check_for_libcrypt_later=1
677 AC_DEFINE(UNIXWARE_LONG_PASSWORDS, 1, [Support passwords > 8 chars])
ed6553e2 678 AC_DEFINE(USE_PIPES)
7ed101c0 679 AC_DEFINE(SETEUID_BREAKS_SETUID)
680 AC_DEFINE(BROKEN_SETREUID)
681 AC_DEFINE(BROKEN_SETREGID)
3466e002 682 AC_DEFINE(PASSWD_NEEDS_USERNAME)
822015dd 683 case "$host" in
684 *-*-sysv5SCO_SV*) # SCO OpenServer 6.x
685 TEST_SHELL=/u95/bin/sh
3466e002 686 AC_DEFINE(BROKEN_LIBIAF, 1,
687 [ia_uinfo routines not supported by OS yet])
5cc6ddad 688 AC_DEFINE(BROKEN_UPDWTMPX)
822015dd 689 ;;
e45da4d6 690 *) AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
691 ;;
822015dd 692 esac
77bb0bca 693 ;;
9d6b1b96 694*-*-sysv*)
9d6b1b96 695 ;;
79a7ba96 696# SCO UNIX and OEM versions of SCO UNIX
77bb0bca 697*-*-sco3.2v4*)
11cf4f1f 698 AC_MSG_ERROR("This Platform is no longer supported.")
77bb0bca 699 ;;
79a7ba96 700# SCO OpenServer 5.x
77bb0bca 701*-*-sco3.2v5*)
21710e39 702 if test -z "$GCC"; then
703 CFLAGS="$CFLAGS -belf"
704 fi
ed6553e2 705 LIBS="$LIBS -lprot -lx -ltinfo -lm"
509b1f88 706 no_dev_ptmx=1
ed6553e2 707 AC_DEFINE(USE_PIPES)
6e879cb4 708 AC_DEFINE(HAVE_SECUREWARE)
d287c664 709 AC_DEFINE(DISABLE_SHADOW)
94d8258b 710 AC_DEFINE(DISABLE_FD_PASSING)
7ed101c0 711 AC_DEFINE(SETEUID_BREAKS_SETUID)
712 AC_DEFINE(BROKEN_SETREUID)
713 AC_DEFINE(BROKEN_SETREGID)
bcebad47 714 AC_DEFINE(WITH_ABBREV_NO_TTY)
34f2baf0 715 AC_DEFINE(BROKEN_UPDWTMPX)
3466e002 716 AC_DEFINE(PASSWD_NEEDS_USERNAME)
aca75d94 717 AC_CHECK_FUNCS(getluid setluid)
533875af 718 MANTYPE=man
a3245b92 719 TEST_SHELL=ksh
509b1f88 720 ;;
ccbb983c 721*-*-unicosmk*)
3466e002 722 AC_DEFINE(NO_SSH_LASTLOG, 1,
723 [Define if you don't want to use lastlog in session.c])
c1ad5966 724 AC_DEFINE(SETEUID_BREAKS_SETUID)
725 AC_DEFINE(BROKEN_SETREUID)
726 AC_DEFINE(BROKEN_SETREGID)
ccbb983c 727 AC_DEFINE(USE_PIPES)
728 AC_DEFINE(DISABLE_FD_PASSING)
729 LDFLAGS="$LDFLAGS"
730 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
731 MANTYPE=cat
d262b7f2 732 ;;
7b9a8c6e 733*-*-unicosmp*)
c1ad5966 734 AC_DEFINE(SETEUID_BREAKS_SETUID)
735 AC_DEFINE(BROKEN_SETREUID)
736 AC_DEFINE(BROKEN_SETREGID)
7b9a8c6e 737 AC_DEFINE(WITH_ABBREV_NO_TTY)
738 AC_DEFINE(USE_PIPES)
739 AC_DEFINE(DISABLE_FD_PASSING)
740 LDFLAGS="$LDFLAGS"
c1ad5966 741 LIBS="$LIBS -lgen -lacid -ldb"
7b9a8c6e 742 MANTYPE=cat
743 ;;
ca5c7d6a 744*-*-unicos*)
c1ad5966 745 AC_DEFINE(SETEUID_BREAKS_SETUID)
746 AC_DEFINE(BROKEN_SETREUID)
747 AC_DEFINE(BROKEN_SETREGID)
ca5c7d6a 748 AC_DEFINE(USE_PIPES)
94d8258b 749 AC_DEFINE(DISABLE_FD_PASSING)
ef51930f 750 AC_DEFINE(NO_SSH_LASTLOG)
ccbb983c 751 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
752 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
753 MANTYPE=cat
a704dd54 754 ;;
4d33e531 755*-dec-osf*)
99c8ddac 756 AC_MSG_CHECKING(for Digital Unix SIA)
757 no_osfsia=""
758 AC_ARG_WITH(osfsia,
759 [ --with-osfsia Enable Digital Unix SIA],
760 [
761 if test "x$withval" = "xno" ; then
762 AC_MSG_RESULT(disabled)
763 no_osfsia=1
764 fi
765 ],
766 )
767 if test -z "$no_osfsia" ; then
4d33e531 768 if test -f /etc/sia/matrix.conf; then
769 AC_MSG_RESULT(yes)
3466e002 770 AC_DEFINE(HAVE_OSF_SIA, 1,
771 [Define if you have Digital Unix Security
772 Integration Architecture])
773 AC_DEFINE(DISABLE_LOGIN, 1,
774 [Define if you don't want to use your
775 system's login() call])
58d0df4e 776 AC_DEFINE(DISABLE_FD_PASSING)
4d33e531 777 LIBS="$LIBS -lsecurity -ldb -lm -laud"
5b84789f 778 SIA_MSG="yes"
4d33e531 779 else
780 AC_MSG_RESULT(no)
3466e002 781 AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin",
782 [String used in /etc/passwd to denote locked account])
4d33e531 783 fi
784 fi
a6e67b60 785 AC_DEFINE(BROKEN_GETADDRINFO)
f4f2ff4f 786 AC_DEFINE(SETEUID_BREAKS_SETUID)
08da2d08 787 AC_DEFINE(BROKEN_SETREUID)
788 AC_DEFINE(BROKEN_SETREGID)
4d33e531 789 ;;
41cb4569 790
9c54c067 791*-*-nto-qnx*)
41cb4569 792 AC_DEFINE(USE_PIPES)
793 AC_DEFINE(NO_X11_UNIX_SOCKETS)
3466e002 794 AC_DEFINE(MISSING_NFDBITS, 1, [Define on *nto-qnx systems])
795 AC_DEFINE(MISSING_HOWMANY, 1, [Define on *nto-qnx systems])
796 AC_DEFINE(MISSING_FD_MASK, 1, [Define on *nto-qnx systems])
9c54c067 797 AC_DEFINE(DISABLE_LASTLOG)
49c64dd6 798 AC_DEFINE(SSHD_ACQUIRES_CTTY)
86996ebe 799 AC_DEFINE(BROKEN_SHADOW_EXPIRE, 1, [QNX shadow support is broken])
0c7e8877 800 enable_etc_default_login=no # has incompatible /etc/default/login
575ee4c4 801 case "$host" in
802 *-*-nto-qnx6*)
803 AC_DEFINE(DISABLE_FD_PASSING)
804 ;;
805 esac
41cb4569 806 ;;
35fc74ed 807
808*-*-ultrix*)
3466e002 809 AC_DEFINE(BROKEN_GETGROUPS, 1, [getgroups(0,NULL) will return -1])
810 AC_DEFINE(BROKEN_MMAP, 1, [Ultrix mmap can't map files])
4b2cf3f1 811 AC_DEFINE(NEED_SETPGRP)
b5765e1d 812 AC_DEFINE(HAVE_SYS_SYSLOG_H, 1, [Force use of sys/syslog.h on Ultrix])
813 ;;
157b6700 814
815*-*-lynxos)
816 CFLAGS="$CFLAGS -D__NO_INCLUDE_WARN__"
3466e002 817 AC_DEFINE(MISSING_HOWMANY)
157b6700 818 AC_DEFINE(BROKEN_SETVBUF, 1, [LynxOS has broken setvbuf() implementation])
819 ;;
a7effaac 820esac
821
c5829391 822AC_MSG_CHECKING(compiler and flags for sanity)
479cece8 823AC_RUN_IFELSE(
824 [AC_LANG_SOURCE([
c5829391 825#include <stdio.h>
826int main(){exit(0);}
479cece8 827 ])],
c5829391 828 [ AC_MSG_RESULT(yes) ],
829 [
830 AC_MSG_RESULT(no)
831 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
1a01a50c 832 ],
833 [ AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
c5829391 834)
835
b04a9f8c 836dnl Checks for header files.
a0391976 837# Checks for libraries.
98a7c37b 838AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
839AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
2c523de9 840
446227d6 841dnl IRIX and Solaris 2.5.1 have dirname() in libgen
842AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
843 AC_CHECK_LIB(gen, dirname,[
844 AC_CACHE_CHECK([for broken dirname],
845 ac_cv_have_broken_dirname, [
846 save_LIBS="$LIBS"
847 LIBS="$LIBS -lgen"
b0e7249f 848 AC_RUN_IFELSE(
849 [AC_LANG_SOURCE([[
446227d6 850#include <libgen.h>
851#include <string.h>
852
853int main(int argc, char **argv) {
854 char *s, buf[32];
855
856 strncpy(buf,"/etc", 32);
857 s = dirname(buf);
858 if (!s || strncmp(s, "/", 32) != 0) {
859 exit(1);
860 } else {
861 exit(0);
862 }
863}
b0e7249f 864 ]])],
865 [ ac_cv_have_broken_dirname="no" ],
866 [ ac_cv_have_broken_dirname="yes" ],
446227d6 867 [ ac_cv_have_broken_dirname="no" ],
446227d6 868 )
869 LIBS="$save_LIBS"
870 ])
871 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
872 LIBS="$LIBS -lgen"
873 AC_DEFINE(HAVE_DIRNAME)
874 AC_CHECK_HEADERS(libgen.h)
875 fi
876 ])
877])
878
879AC_CHECK_FUNC(getspnam, ,
880 AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
3466e002 881AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME, 1,
882 [Define if you have the basename function.]))
446227d6 883
98a7c37b 884dnl zlib is required
885AC_ARG_WITH(zlib,
886 [ --with-zlib=PATH Use zlib in PATH],
6dd05556 887 [ if test "x$withval" = "xno" ; then
888 AC_MSG_ERROR([*** zlib is required ***])
889 elif test "x$withval" != "xyes"; then
98a7c37b 890 if test -d "$withval/lib"; then
891 if test -n "${need_dash_r}"; then
5a162955 892 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 893 else
5a162955 894 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 895 fi
896 else
897 if test -n "${need_dash_r}"; then
5a162955 898 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 899 else
5a162955 900 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 901 fi
902 fi
903 if test -d "$withval/include"; then
5a162955 904 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 905 else
5a162955 906 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 907 fi
6dd05556 908 fi ]
98a7c37b 909)
910
0a15d73b 911AC_CHECK_LIB(z, deflate, ,
912 [
913 saved_CPPFLAGS="$CPPFLAGS"
914 saved_LDFLAGS="$LDFLAGS"
915 save_LIBS="$LIBS"
916 dnl Check default zlib install dir
917 if test -n "${need_dash_r}"; then
918 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
919 else
920 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
921 fi
922 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
923 LIBS="$LIBS -lz"
924 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
925 [
926 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
927 ]
928 )
929 ]
930)
4ad65809 931AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
8068d564 932
933AC_ARG_WITH(zlib-version-check,
934 [ --without-zlib-version-check Disable zlib version check],
935 [ if test "x$withval" = "xno" ; then
936 zlib_check_nonfatal=1
937 fi
938 ]
939)
940
5c7fc85d 941AC_MSG_CHECKING(for possibly buggy zlib)
479cece8 942AC_RUN_IFELSE([AC_LANG_SOURCE([[
5c7fc85d 943#include <stdio.h>
4ad65809 944#include <zlib.h>
945int main()
946{
5c7fc85d 947 int a=0, b=0, c=0, d=0, n, v;
948 n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
949 if (n != 3 && n != 4)
4ad65809 950 exit(1);
5c7fc85d 951 v = a*1000000 + b*10000 + c*100 + d;
952 fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
953
954 /* 1.1.4 is OK */
955 if (a == 1 && b == 1 && c >= 4)
4ad65809 956 exit(0);
5c7fc85d 957
0072b59d 958 /* 1.2.3 and up are OK */
959 if (v >= 1020300)
5c7fc85d 960 exit(0);
961
4ad65809 962 exit(2);
963}
479cece8 964 ]])],
5c7fc85d 965 AC_MSG_RESULT(no),
966 [ AC_MSG_RESULT(yes)
8068d564 967 if test -z "$zlib_check_nonfatal" ; then
968 AC_MSG_ERROR([*** zlib too old - check config.log ***
969Your reported zlib version has known security problems. It's possible your
970vendor has fixed these problems without changing the version number. If you
971are sure this is the case, you can disable the check by running
972"./configure --without-zlib-version-check".
6090bcfe 973If you are in doubt, upgrade zlib to version 1.2.3 or greater.
5c7fc85d 974See http://www.gzip.org/zlib/ for details.])
8068d564 975 else
976 AC_MSG_WARN([zlib version may have security problems])
977 fi
1a01a50c 978 ],
979 [ AC_MSG_WARN([cross compiling: not checking zlib version]) ]
4ad65809 980)
48e7916f 981
2c523de9 982dnl UnixWare 2.x
aff51935 983AC_CHECK_FUNC(strcasecmp,
2c523de9 984 [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
985)
23361281 986AC_CHECK_FUNCS(utimes,
cda1ebcb 987 [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
988 LIBS="$LIBS -lc89"]) ]
2c523de9 989)
4cca272e 990
7c6d759d 991dnl Checks for libutil functions
992AC_CHECK_HEADERS(libutil.h)
3466e002 993AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN, 1,
994 [Define if your libraries define login()])])
7c6d759d 995AC_CHECK_FUNCS(logout updwtmp logwtmp)
996
a738c3b0 997AC_FUNC_STRFTIME
998
84ceda19 999# Check for ALTDIRFUNC glob() extension
1000AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
1001AC_EGREP_CPP(FOUNDIT,
1002 [
1003 #include <glob.h>
1004 #ifdef GLOB_ALTDIRFUNC
1005 FOUNDIT
1006 #endif
aff51935 1007 ],
84ceda19 1008 [
3466e002 1009 AC_DEFINE(GLOB_HAS_ALTDIRFUNC, 1,
1010 [Define if your system glob() function has
1011 the GLOB_ALTDIRFUNC extension])
84ceda19 1012 AC_MSG_RESULT(yes)
1013 ],
1014 [
1015 AC_MSG_RESULT(no)
1016 ]
1017)
4cca272e 1018
40849fdb 1019# Check for g.gl_matchc glob() extension
1020AC_MSG_CHECKING(for gl_matchc field in glob_t)
d90b9f9a 1021AC_TRY_COMPILE(
13ff27b7 1022 [ #include <glob.h> ],
1023 [glob_t g; g.gl_matchc = 1;],
aff51935 1024 [
3466e002 1025 AC_DEFINE(GLOB_HAS_GL_MATCHC, 1,
1026 [Define if your system glob() function has
1027 gl_matchc options in glob_t])
aff51935 1028 AC_MSG_RESULT(yes)
1029 ],
1030 [
1031 AC_MSG_RESULT(no)
1032 ]
40849fdb 1033)
1034
78888bab 1035AC_CHECK_DECLS(GLOB_NOMATCH, , , [#include <glob.h>])
1036
edbe6722 1037AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
1a01a50c 1038AC_RUN_IFELSE(
479cece8 1039 [AC_LANG_SOURCE([[
edbe6722 1040#include <sys/types.h>
1041#include <dirent.h>
aec4cb4f 1042int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
479cece8 1043 ]])],
aff51935 1044 [AC_MSG_RESULT(yes)],
edbe6722 1045 [
1046 AC_MSG_RESULT(no)
3466e002 1047 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME, 1,
d08db6d1 1048 [Define if your struct dirent expects you to
3466e002 1049 allocate extra space for d_name])
1a01a50c 1050 ],
82f4e93d 1051 [
1a01a50c 1052 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
1053 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
edbe6722 1054 ]
1055)
1056
419e26e7 1057AC_MSG_CHECKING([for /proc/pid/fd directory])
1058if test -d "/proc/$$/fd" ; then
3466e002 1059 AC_DEFINE(HAVE_PROC_PID, 1, [Define if you have /proc/$pid/fd])
419e26e7 1060 AC_MSG_RESULT(yes)
1061else
1062 AC_MSG_RESULT(no)
1063fi
1064
278588d8 1065# Check whether user wants S/Key support
aff51935 1066SKEY_MSG="no"
278588d8 1067AC_ARG_WITH(skey,
6ff3d0dc 1068 [ --with-skey[[=PATH]] Enable S/Key support (optionally in PATH)],
278588d8 1069 [
1070 if test "x$withval" != "xno" ; then
1071
1072 if test "x$withval" != "xyes" ; then
1073 CPPFLAGS="$CPPFLAGS -I${withval}/include"
1074 LDFLAGS="$LDFLAGS -L${withval}/lib"
1075 fi
1076
3466e002 1077 AC_DEFINE(SKEY, 1, [Define if you want S/Key support])
278588d8 1078 LIBS="-lskey $LIBS"
aff51935 1079 SKEY_MSG="yes"
82f4e93d 1080
ddceb1c8 1081 AC_MSG_CHECKING([for s/key support])
b0e7249f 1082 AC_LINK_IFELSE(
1083 [AC_LANG_SOURCE([[
ddceb1c8 1084#include <stdio.h>
1085#include <skey.h>
aec4cb4f 1086int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
b0e7249f 1087 ]])],
ddceb1c8 1088 [AC_MSG_RESULT(yes)],
278588d8 1089 [
ddceb1c8 1090 AC_MSG_RESULT(no)
278588d8 1091 AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
1092 ])
141fc639 1093 AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
1094 AC_TRY_COMPILE(
1095 [#include <stdio.h>
1096 #include <skey.h>],
1097 [(void)skeychallenge(NULL,"name","",0);],
1098 [AC_MSG_RESULT(yes)
3466e002 1099 AC_DEFINE(SKEYCHALLENGE_4ARG, 1,
1100 [Define if your skeychallenge()
1101 function takes 4 arguments (NetBSD)])],
141fc639 1102 [AC_MSG_RESULT(no)]
1103 )
278588d8 1104 fi
1105 ]
1106)
1107
1108# Check whether user wants TCP wrappers support
98a7c37b 1109TCPW_MSG="no"
278588d8 1110AC_ARG_WITH(tcp-wrappers,
6ff3d0dc 1111 [ --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
278588d8 1112 [
1113 if test "x$withval" != "xno" ; then
1114 saved_LIBS="$LIBS"
98a7c37b 1115 saved_LDFLAGS="$LDFLAGS"
1116 saved_CPPFLAGS="$CPPFLAGS"
4b492aab 1117 if test -n "${withval}" && \
6cf0200f 1118 test "x${withval}" != "xyes"; then
98a7c37b 1119 if test -d "${withval}/lib"; then
1120 if test -n "${need_dash_r}"; then
5a162955 1121 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 1122 else
5a162955 1123 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 1124 fi
1125 else
1126 if test -n "${need_dash_r}"; then
5a162955 1127 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 1128 else
5a162955 1129 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 1130 fi
1131 fi
1132 if test -d "${withval}/include"; then
5a162955 1133 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 1134 else
5a162955 1135 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 1136 fi
98a7c37b 1137 fi
e54defb4 1138 LIBS="-lwrap $LIBS"
278588d8 1139 AC_MSG_CHECKING(for libwrap)
1140 AC_TRY_LINK(
1141 [
77f09220 1142#include <sys/types.h>
1143#include <sys/socket.h>
1144#include <netinet/in.h>
278588d8 1145#include <tcpd.h>
1146 int deny_severity = 0, allow_severity = 0;
1147 ],
1148 [hosts_access(0);],
1149 [
1150 AC_MSG_RESULT(yes)
3466e002 1151 AC_DEFINE(LIBWRAP, 1,
1152 [Define if you want
1153 TCP Wrappers support])
e54defb4 1154 SSHDLIBS="$SSHDLIBS -lwrap"
98a7c37b 1155 TCPW_MSG="yes"
278588d8 1156 ],
1157 [
1158 AC_MSG_ERROR([*** libwrap missing])
1159 ]
1160 )
ddceb1c8 1161 LIBS="$saved_LIBS"
278588d8 1162 fi
1163 ]
1164)
1165
59031773 1166# Check whether user wants libedit support
1167LIBEDIT_MSG="no"
1168AC_ARG_WITH(libedit,
6ff3d0dc 1169 [ --with-libedit[[=PATH]] Enable libedit support for sftp],
59031773 1170 [ if test "x$withval" != "xno" ; then
737edf04 1171 if test "x$withval" != "xyes"; then
bb116c8e 1172 CPPFLAGS="$CPPFLAGS -I${withval}/include"
1173 if test -n "${need_dash_r}"; then
1174 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1175 else
1176 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1177 fi
737edf04 1178 fi
59031773 1179 AC_CHECK_LIB(edit, el_init,
3466e002 1180 [ AC_DEFINE(USE_LIBEDIT, 1, [Use libedit for sftp])
59031773 1181 LIBEDIT="-ledit -lcurses"
1182 LIBEDIT_MSG="yes"
1183 AC_SUBST(LIBEDIT)
1184 ],
737edf04 1185 [ AC_MSG_ERROR(libedit not found) ],
1186 [ -lcurses ]
59031773 1187 )
f47ddccb 1188 AC_MSG_CHECKING(if libedit version is compatible)
d92622f9 1189 AC_COMPILE_IFELSE(
1190 [AC_LANG_SOURCE([[
1191#include <histedit.h>
f47ddccb 1192int main(void)
1193{
1194 int i = H_SETSIZE;
1195 el_init("", NULL, NULL, NULL);
1196 exit(0);
1197}
d92622f9 1198 ]])],
f47ddccb 1199 [ AC_MSG_RESULT(yes) ],
1200 [ AC_MSG_RESULT(no)
1201 AC_MSG_ERROR(libedit version is not compatible) ]
1202 )
59031773 1203 fi ]
1204)
1205
7b578f7d 1206AUDIT_MODULE=none
1207AC_ARG_WITH(audit,
1208 [ --with-audit=module Enable EXPERIMENTAL audit support (modules=debug,bsm)],
1209 [
1210 AC_MSG_CHECKING(for supported audit module)
1211 case "$withval" in
1212 bsm)
1213 AC_MSG_RESULT(bsm)
1214 AUDIT_MODULE=bsm
1215 dnl Checks for headers, libs and functions
1216 AC_CHECK_HEADERS(bsm/audit.h, [],
a01f637d 1217 [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)],
1218 [
1219#ifdef HAVE_TIME_H
1220# include <time.h>
1221#endif
1222 ]
1223)
7b578f7d 1224 AC_CHECK_LIB(bsm, getaudit, [],
1225 [AC_MSG_ERROR(BSM enabled and required library not found)])
1226 AC_CHECK_FUNCS(getaudit, [],
1227 [AC_MSG_ERROR(BSM enabled and required function not found)])
1228 # These are optional
7939c496 1229 AC_CHECK_FUNCS(getaudit_addr)
3466e002 1230 AC_DEFINE(USE_BSM_AUDIT, 1, [Use BSM audit module])
7b578f7d 1231 ;;
1232 debug)
1233 AUDIT_MODULE=debug
1234 AC_MSG_RESULT(debug)
3466e002 1235 AC_DEFINE(SSH_AUDIT_EVENTS, 1, Use audit debugging module)
7b578f7d 1236 ;;
a2b3321d 1237 no)
d92622f9 1238 AC_MSG_RESULT(no)
a2b3321d 1239 ;;
7b578f7d 1240 *)
1241 AC_MSG_ERROR([Unknown audit module $withval])
1242 ;;
1243 esac ]
1244)
1245
19160674 1246dnl Checks for library functions. Please keep in alphabetical order
b04a9f8c 1247AC_CHECK_FUNCS( \
1248 arc4random \
9a406e1e 1249 asprintf \
b04a9f8c 1250 b64_ntop \
1251 __b64_ntop \
1252 b64_pton \
1253 __b64_pton \
1254 bcopy \
1255 bindresvport_sa \
1256 clock \
1257 closefrom \
1258 dirfd \
b04a9f8c 1259 fchmod \
1260 fchown \
1261 freeaddrinfo \
1262 futimes \
1263 getaddrinfo \
1264 getcwd \
1265 getgrouplist \
1266 getnameinfo \
1267 getopt \
1268 getpeereid \
1961d660 1269 getpeerucred \
b04a9f8c 1270 _getpty \
1271 getrlimit \
1272 getttyent \
1273 glob \
1274 inet_aton \
1275 inet_ntoa \
1276 inet_ntop \
1277 innetgr \
1278 login_getcapbool \
1279 md5_crypt \
1280 memmove \
1281 mkdtemp \
1282 mmap \
1283 ngetaddrinfo \
1284 nsleep \
1285 ogetaddrinfo \
1286 openlog_r \
1287 openpty \
6d39a5c4 1288 poll \
b04a9f8c 1289 prctl \
1290 pstat \
1291 readpassphrase \
1292 realpath \
1293 recvmsg \
1294 rresvport_af \
1295 sendmsg \
1296 setdtablesize \
1297 setegid \
1298 setenv \
1299 seteuid \
1300 setgroups \
1301 setlogin \
1302 setpcred \
1303 setproctitle \
1304 setregid \
1305 setreuid \
1306 setrlimit \
1307 setsid \
1308 setvbuf \
1309 sigaction \
1310 sigvec \
1311 snprintf \
1312 socketpair \
1313 strdup \
1314 strerror \
1315 strlcat \
1316 strlcpy \
1317 strmode \
1318 strnvis \
1319 strtonum \
1e29a0c8 1320 strtoll \
b04a9f8c 1321 strtoul \
1aac2117 1322 swap32 \
b04a9f8c 1323 sysconf \
1324 tcgetpgrp \
1325 truncate \
1326 unsetenv \
1327 updwtmpx \
9a406e1e 1328 vasprintf \
b04a9f8c 1329 vhangup \
1330 vsnprintf \
1331 waitpid \
19160674 1332)
98a7c37b 1333
1a086f97 1334# IRIX has a const char return value for gai_strerror()
1335AC_CHECK_FUNCS(gai_strerror,[
1336 AC_DEFINE(HAVE_GAI_STRERROR)
1337 AC_TRY_COMPILE([
1338#include <sys/types.h>
1339#include <sys/socket.h>
1340#include <netdb.h>
1341
1342const char *gai_strerror(int);],[
1343char *str;
1344
1345str = gai_strerror(0);],[
1346 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
1347 [Define if gai_strerror() returns const char *])])])
1348
3466e002 1349AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP, 1,
1350 [Some systems put nanosleep outside of libc]))
92b1decf 1351
309709db 1352dnl Make sure prototypes are defined for these before using them.
309709db 1353AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
0957c2cf 1354AC_CHECK_DECL(strsep,
1355 [AC_CHECK_FUNCS(strsep)],
1356 [],
1357 [
1358#ifdef HAVE_STRING_H
1359# include <string.h>
1360#endif
1361 ])
08412d26 1362
3490699c 1363dnl tcsendbreak might be a macro
1364AC_CHECK_DECL(tcsendbreak,
1365 [AC_DEFINE(HAVE_TCSENDBREAK)],
aff51935 1366 [AC_CHECK_FUNCS(tcsendbreak)],
3490699c 1367 [#include <termios.h>]
1368)
1369
41e0e158 1370AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
1371
71f4c727 1372AC_CHECK_DECLS(SHUT_RD, , ,
1373 [
1374#include <sys/types.h>
1375#include <sys/socket.h>
1376 ])
956d6743 1377
1378AC_CHECK_DECLS(O_NONBLOCK, , ,
1379 [
1380#include <sys/types.h>
1381#ifdef HAVE_SYS_STAT_H
1382# include <sys/stat.h>
1383#endif
1384#ifdef HAVE_FCNTL_H
1385# include <fcntl.h>
1386#endif
1387 ])
1388
752994dd 1389AC_CHECK_DECLS(writev, , , [
1390#include <sys/types.h>
1391#include <sys/uio.h>
1392#include <unistd.h>
1393 ])
1394
0bf6279d 1395AC_CHECK_DECLS(MAXSYMLINKS, , , [
1396#include <sys/param.h>
1397 ])
1398
b41ece30 1399AC_CHECK_DECLS(offsetof, , , [
1400#include <stddef.h>
1401 ])
1402
3f176010 1403AC_CHECK_FUNCS(setresuid, [
1404 dnl Some platorms have setresuid that isn't implemented, test for this
1405 AC_MSG_CHECKING(if setresuid seems to work)
479cece8 1406 AC_RUN_IFELSE(
1407 [AC_LANG_SOURCE([[
9a3fe0e2 1408#include <stdlib.h>
1409#include <errno.h>
1410int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 1411 ]])],
3f176010 1412 [AC_MSG_RESULT(yes)],
3466e002 1413 [AC_DEFINE(BROKEN_SETRESUID, 1,
1414 [Define if your setresuid() is broken])
1a01a50c 1415 AC_MSG_RESULT(not implemented)],
1416 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 1417 )
1418])
9a3fe0e2 1419
3f176010 1420AC_CHECK_FUNCS(setresgid, [
1421 dnl Some platorms have setresgid that isn't implemented, test for this
1422 AC_MSG_CHECKING(if setresgid seems to work)
479cece8 1423 AC_RUN_IFELSE(
1424 [AC_LANG_SOURCE([[
9a3fe0e2 1425#include <stdlib.h>
1426#include <errno.h>
1427int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 1428 ]])],
3f176010 1429 [AC_MSG_RESULT(yes)],
3466e002 1430 [AC_DEFINE(BROKEN_SETRESGID, 1,
1431 [Define if your setresgid() is broken])
1a01a50c 1432 AC_MSG_RESULT(not implemented)],
1433 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 1434 )
1435])
9a3fe0e2 1436
2e73a022 1437dnl Checks for time functions
1d7b9b20 1438AC_CHECK_FUNCS(gettimeofday time)
2e73a022 1439dnl Checks for utmp functions
b03bd394 1440AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1d7b9b20 1441AC_CHECK_FUNCS(utmpname)
2e73a022 1442dnl Checks for utmpx functions
b03bd394 1443AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1d7b9b20 1444AC_CHECK_FUNCS(setutxent utmpxname)
76cd7316 1445
aff51935 1446AC_CHECK_FUNC(daemon,
3466e002 1447 [AC_DEFINE(HAVE_DAEMON, 1, [Define if your libraries define daemon()])],
1448 [AC_CHECK_LIB(bsd, daemon,
1449 [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
beb43d31 1450)
1451
aff51935 1452AC_CHECK_FUNC(getpagesize,
3466e002 1453 [AC_DEFINE(HAVE_GETPAGESIZE, 1,
1454 [Define if your libraries define getpagesize()])],
1455 [AC_CHECK_LIB(ucb, getpagesize,
1456 [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
aa6bd60a 1457)
1458
2647ae26 1459# Check for broken snprintf
1460if test "x$ac_cv_func_snprintf" = "xyes" ; then
1461 AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1a01a50c 1462 AC_RUN_IFELSE(
479cece8 1463 [AC_LANG_SOURCE([[
2647ae26 1464#include <stdio.h>
aec4cb4f 1465int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
479cece8 1466 ]])],
aff51935 1467 [AC_MSG_RESULT(yes)],
2647ae26 1468 [
1469 AC_MSG_RESULT(no)
3466e002 1470 AC_DEFINE(BROKEN_SNPRINTF, 1,
1471 [Define if your snprintf is busted])
2647ae26 1472 AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1a01a50c 1473 ],
1474 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
2647ae26 1475 )
1476fi
1477
9a406e1e 1478# If we don't have a working asprintf, then we strongly depend on vsnprintf
1479# returning the right thing on overflow: the number of characters it tried to
1480# create (as per SUSv3)
1481if test "x$ac_cv_func_asprintf" != "xyes" && \
1482 test "x$ac_cv_func_vsnprintf" = "xyes" ; then
1483 AC_MSG_CHECKING([whether vsnprintf returns correct values on overflow])
1484 AC_RUN_IFELSE(
1485 [AC_LANG_SOURCE([[
1486#include <sys/types.h>
1487#include <stdio.h>
1488#include <stdarg.h>
1489
1490int x_snprintf(char *str,size_t count,const char *fmt,...)
1491{
1492 size_t ret; va_list ap;
1493 va_start(ap, fmt); ret = vsnprintf(str, count, fmt, ap); va_end(ap);
1494 return ret;
1495}
1496int main(void)
1497{
1498 char x[1];
1499 exit(x_snprintf(x, 1, "%s %d", "hello", 12345) == 11 ? 0 : 1);
1500} ]])],
1501 [AC_MSG_RESULT(yes)],
1502 [
1503 AC_MSG_RESULT(no)
1504 AC_DEFINE(BROKEN_SNPRINTF, 1,
1505 [Define if your snprintf is busted])
1506 AC_MSG_WARN([****** Your vsnprintf() function is broken, complain to your vendor])
1507 ],
1508 [ AC_MSG_WARN([cross compiling: Assuming working vsnprintf()]) ]
1509 )
1510fi
1511
31b0732a 1512# On systems where [v]snprintf is broken, but is declared in stdio,
1513# check that the fmt argument is const char * or just char *.
1514# This is only useful for when BROKEN_SNPRINTF
1515AC_MSG_CHECKING([whether snprintf can declare const char *fmt])
1516AC_COMPILE_IFELSE([AC_LANG_SOURCE([[#include <stdio.h>
1517 int snprintf(char *a, size_t b, const char *c, ...) { return 0; }
1518 int main(void) { snprintf(0, 0, 0); }
1519 ]])],
1520 [AC_MSG_RESULT(yes)
1521 AC_DEFINE(SNPRINTF_CONST, [const],
1522 [Define as const if snprintf() can declare const char *fmt])],
1523 [AC_MSG_RESULT(no)
1524 AC_DEFINE(SNPRINTF_CONST, [/* not const */])])
1525
2f6f9cff 1526# Check for missing getpeereid (or equiv) support
1527NO_PEERCHECK=""
1961d660 1528if test "x$ac_cv_func_getpeereid" != "xyes" -a "x$ac_cv_func_getpeerucred" != "xyes"; then
2f6f9cff 1529 AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1530 AC_TRY_COMPILE(
1531 [#include <sys/types.h>
1532 #include <sys/socket.h>],
1533 [int i = SO_PEERCRED;],
62eb7db4 1534 [ AC_MSG_RESULT(yes)
3466e002 1535 AC_DEFINE(HAVE_SO_PEERCRED, 1, [Have PEERCRED socket option])
62eb7db4 1536 ],
2f6f9cff 1537 [AC_MSG_RESULT(no)
1538 NO_PEERCHECK=1]
1539 )
1540fi
1541
70e7d0b0 1542dnl see whether mkstemp() requires XXXXXX
1543if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1544AC_MSG_CHECKING([for (overly) strict mkstemp])
b0e7249f 1545AC_RUN_IFELSE(
1546 [AC_LANG_SOURCE([[
70e7d0b0 1547#include <stdlib.h>
1548main() { char template[]="conftest.mkstemp-test";
1549if (mkstemp(template) == -1)
1550 exit(1);
1551unlink(template); exit(0);
1552}
b0e7249f 1553 ]])],
70e7d0b0 1554 [
1555 AC_MSG_RESULT(no)
1556 ],
aff51935 1557 [
70e7d0b0 1558 AC_MSG_RESULT(yes)
3466e002 1559 AC_DEFINE(HAVE_STRICT_MKSTEMP, 1, [Silly mkstemp()])
70e7d0b0 1560 ],
1561 [
1562 AC_MSG_RESULT(yes)
1563 AC_DEFINE(HAVE_STRICT_MKSTEMP)
aff51935 1564 ]
70e7d0b0 1565)
1566fi
1567
eacb954e 1568dnl make sure that openpty does not reacquire controlling terminal
1569if test ! -z "$check_for_openpty_ctty_bug"; then
1570 AC_MSG_CHECKING(if openpty correctly handles controlling tty)
b0e7249f 1571 AC_RUN_IFELSE(
1572 [AC_LANG_SOURCE([[
eacb954e 1573#include <stdio.h>
1574#include <sys/fcntl.h>
1575#include <sys/types.h>
1576#include <sys/wait.h>
1577
1578int
1579main()
1580{
1581 pid_t pid;
1582 int fd, ptyfd, ttyfd, status;
1583
1584 pid = fork();
1585 if (pid < 0) { /* failed */
1586 exit(1);
1587 } else if (pid > 0) { /* parent */
1588 waitpid(pid, &status, 0);
aff51935 1589 if (WIFEXITED(status))
eacb954e 1590 exit(WEXITSTATUS(status));
1591 else
1592 exit(2);
1593 } else { /* child */
1594 close(0); close(1); close(2);
1595 setsid();
1596 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1597 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1598 if (fd >= 0)
1599 exit(3); /* Acquired ctty: broken */
1600 else
1601 exit(0); /* Did not acquire ctty: OK */
1602 }
1603}
b0e7249f 1604 ]])],
eacb954e 1605 [
1606 AC_MSG_RESULT(yes)
1607 ],
1608 [
1609 AC_MSG_RESULT(no)
1610 AC_DEFINE(SSHD_ACQUIRES_CTTY)
b0e7249f 1611 ],
1612 [
1613 AC_MSG_RESULT(cross-compiling, assuming yes)
eacb954e 1614 ]
1615 )
1616fi
1617
4b492aab 1618if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1619 test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
2fe51906 1620 AC_MSG_CHECKING(if getaddrinfo seems to work)
b0e7249f 1621 AC_RUN_IFELSE(
1622 [AC_LANG_SOURCE([[
2fe51906 1623#include <stdio.h>
1624#include <sys/socket.h>
1625#include <netdb.h>
1626#include <errno.h>
1627#include <netinet/in.h>
1628
1629#define TEST_PORT "2222"
1630
1631int
1632main(void)
1633{
1634 int err, sock;
1635 struct addrinfo *gai_ai, *ai, hints;
1636 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1637
1638 memset(&hints, 0, sizeof(hints));
1639 hints.ai_family = PF_UNSPEC;
1640 hints.ai_socktype = SOCK_STREAM;
1641 hints.ai_flags = AI_PASSIVE;
1642
1643 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1644 if (err != 0) {
1645 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1646 exit(1);
1647 }
1648
1649 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1650 if (ai->ai_family != AF_INET6)
1651 continue;
1652
1653 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1654 sizeof(ntop), strport, sizeof(strport),
1655 NI_NUMERICHOST|NI_NUMERICSERV);
1656
1657 if (err != 0) {
1658 if (err == EAI_SYSTEM)
1659 perror("getnameinfo EAI_SYSTEM");
1660 else
1661 fprintf(stderr, "getnameinfo failed: %s\n",
1662 gai_strerror(err));
1663 exit(2);
1664 }
1665
1666 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1667 if (sock < 0)
1668 perror("socket");
1669 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1670 if (errno == EBADF)
1671 exit(3);
1672 }
1673 }
1674 exit(0);
1675}
b0e7249f 1676 ]])],
2fe51906 1677 [
1678 AC_MSG_RESULT(yes)
1679 ],
1680 [
1681 AC_MSG_RESULT(no)
1682 AC_DEFINE(BROKEN_GETADDRINFO)
b0e7249f 1683 ],
1684 [
1685 AC_MSG_RESULT(cross-compiling, assuming yes)
2fe51906 1686 ]
1687 )
1688fi
1689
4b492aab 1690if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1691 test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
5ccf88cb 1692 AC_MSG_CHECKING(if getaddrinfo seems to work)
b0e7249f 1693 AC_RUN_IFELSE(
1694 [AC_LANG_SOURCE([[
5ccf88cb 1695#include <stdio.h>
1696#include <sys/socket.h>
1697#include <netdb.h>
1698#include <errno.h>
1699#include <netinet/in.h>
1700
1701#define TEST_PORT "2222"
1702
1703int
1704main(void)
1705{
1706 int err, sock;
1707 struct addrinfo *gai_ai, *ai, hints;
1708 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1709
1710 memset(&hints, 0, sizeof(hints));
1711 hints.ai_family = PF_UNSPEC;
1712 hints.ai_socktype = SOCK_STREAM;
1713 hints.ai_flags = AI_PASSIVE;
1714
1715 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1716 if (err != 0) {
1717 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1718 exit(1);
1719 }
1720
1721 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1722 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1723 continue;
1724
1725 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1726 sizeof(ntop), strport, sizeof(strport),
1727 NI_NUMERICHOST|NI_NUMERICSERV);
1728
1729 if (ai->ai_family == AF_INET && err != 0) {
1730 perror("getnameinfo");
1731 exit(2);
1732 }
1733 }
1734 exit(0);
1735}
b0e7249f 1736 ]])],
5ccf88cb 1737 [
1738 AC_MSG_RESULT(yes)
3466e002 1739 AC_DEFINE(AIX_GETNAMEINFO_HACK, 1,
1740 [Define if you have a getaddrinfo that fails
1741 for the all-zeros IPv6 address])
5ccf88cb 1742 ],
1743 [
1744 AC_MSG_RESULT(no)
1745 AC_DEFINE(BROKEN_GETADDRINFO)
b0e7249f 1746 ],
ecd9ec09 1747 [
b0e7249f 1748 AC_MSG_RESULT(cross-compiling, assuming no)
5ccf88cb 1749 ]
1750 )
1751fi
1752
b29fd59f 1753if test "x$check_for_conflicting_getspnam" = "x1"; then
1754 AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1755 AC_COMPILE_IFELSE(
1756 [
1757#include <shadow.h>
1758int main(void) {exit(0);}
1759 ],
1760 [
1761 AC_MSG_RESULT(no)
1762 ],
1763 [
1764 AC_MSG_RESULT(yes)
1765 AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1766 [Conflicting defs for getspnam])
1767 ]
1768 )
1769fi
1770
7f8f5e00 1771AC_FUNC_GETPGRP
1772
5b991353 1773# Search for OpenSSL
1774saved_CPPFLAGS="$CPPFLAGS"
1775saved_LDFLAGS="$LDFLAGS"
a0391976 1776AC_ARG_WITH(ssl-dir,
1777 [ --with-ssl-dir=PATH Specify path to OpenSSL installation ],
1778 [
e9e4a1c7 1779 if test "x$withval" != "xno" ; then
99eb0f64 1780 case "$withval" in
1781 # Relative paths
1782 ./*|../*) withval="`pwd`/$withval"
1783 esac
5b991353 1784 if test -d "$withval/lib"; then
1785 if test -n "${need_dash_r}"; then
1786 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1787 else
1788 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
d6f13fbb 1789 fi
1790 else
5b991353 1791 if test -n "${need_dash_r}"; then
1792 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1793 else
1794 LDFLAGS="-L${withval} ${LDFLAGS}"
d6f13fbb 1795 fi
1796 fi
5b991353 1797 if test -d "$withval/include"; then
1798 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
d6f13fbb 1799 else
5b991353 1800 CPPFLAGS="-I${withval} ${CPPFLAGS}"
58d100bf 1801 fi
a0391976 1802 fi
5b991353 1803 ]
1804)
5486a457 1805LIBS="-lcrypto $LIBS"
3466e002 1806AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL, 1,
1807 [Define if your ssl headers are included
1808 with #include <openssl/header.h>]),
d45e3d76 1809 [
5b991353 1810 dnl Check default openssl install dir
1811 if test -n "${need_dash_r}"; then
1812 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1813 else
5b991353 1814 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1815 fi
5b991353 1816 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1817 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1818 [
1819 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1820 ]
1821 )
1822 ]
1823)
1824
cd018561 1825# Determine OpenSSL header version
1826AC_MSG_CHECKING([OpenSSL header version])
1a01a50c 1827AC_RUN_IFELSE(
479cece8 1828 [AC_LANG_SOURCE([[
cd018561 1829#include <stdio.h>
1830#include <string.h>
1831#include <openssl/opensslv.h>
1832#define DATA "conftest.sslincver"
1833int main(void) {
aff51935 1834 FILE *fd;
1835 int rc;
cd018561 1836
aff51935 1837 fd = fopen(DATA,"w");
1838 if(fd == NULL)
1839 exit(1);
cd018561 1840
1841 if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1842 exit(1);
1843
1844 exit(0);
1845}
479cece8 1846 ]])],
cd018561 1847 [
1848 ssl_header_ver=`cat conftest.sslincver`
1849 AC_MSG_RESULT($ssl_header_ver)
1850 ],
1851 [
1852 AC_MSG_RESULT(not found)
1853 AC_MSG_ERROR(OpenSSL version header not found.)
1a01a50c 1854 ],
1855 [
1856 AC_MSG_WARN([cross compiling: not checking])
cd018561 1857 ]
1858)
1859
1860# Determine OpenSSL library version
1861AC_MSG_CHECKING([OpenSSL library version])
1a01a50c 1862AC_RUN_IFELSE(
479cece8 1863 [AC_LANG_SOURCE([[
cd018561 1864#include <stdio.h>
1865#include <string.h>
1866#include <openssl/opensslv.h>
1867#include <openssl/crypto.h>
1868#define DATA "conftest.ssllibver"
1869int main(void) {
aff51935 1870 FILE *fd;
1871 int rc;
cd018561 1872
aff51935 1873 fd = fopen(DATA,"w");
1874 if(fd == NULL)
1875 exit(1);
cd018561 1876
1877 if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1878 exit(1);
1879
1880 exit(0);
1881}
479cece8 1882 ]])],
cd018561 1883 [
1884 ssl_library_ver=`cat conftest.ssllibver`
1885 AC_MSG_RESULT($ssl_library_ver)
1886 ],
1887 [
1888 AC_MSG_RESULT(not found)
1889 AC_MSG_ERROR(OpenSSL library not found.)
1a01a50c 1890 ],
1891 [
1892 AC_MSG_WARN([cross compiling: not checking])
cd018561 1893 ]
1894)
58d100bf 1895
1d42bcce 1896AC_ARG_WITH(openssl-header-check,
1897 [ --without-openssl-header-check Disable OpenSSL version consistency check],
1898 [ if test "x$withval" = "xno" ; then
1899 openssl_check_nonfatal=1
1900 fi
1901 ]
1902)
1903
9780116c 1904# Sanity check OpenSSL headers
1905AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1a01a50c 1906AC_RUN_IFELSE(
479cece8 1907 [AC_LANG_SOURCE([[
9780116c 1908#include <string.h>
1909#include <openssl/opensslv.h>
aec4cb4f 1910int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
479cece8 1911 ]])],
9780116c 1912 [
1913 AC_MSG_RESULT(yes)
1914 ],
1915 [
1916 AC_MSG_RESULT(no)
1d42bcce 1917 if test "x$openssl_check_nonfatal" = "x"; then
1918 AC_MSG_ERROR([Your OpenSSL headers do not match your
1919library. Check config.log for details.
1920If you are sure your installation is consistent, you can disable the check
1921by running "./configure --without-openssl-header-check".
1922Also see contrib/findssl.sh for help identifying header/library mismatches.
1923])
1924 else
1925 AC_MSG_WARN([Your OpenSSL headers do not match your
1926library. Check config.log for details.
e15ba28b 1927Also see contrib/findssl.sh for help identifying header/library mismatches.])
1d42bcce 1928 fi
1a01a50c 1929 ],
1930 [
1931 AC_MSG_WARN([cross compiling: not checking])
9780116c 1932 ]
1933)
1934
282d6408 1935AC_MSG_CHECKING([if programs using OpenSSL functions will link])
1936AC_LINK_IFELSE(
1937 [AC_LANG_SOURCE([[
1938#include <openssl/evp.h>
1939int main(void) { SSLeay_add_all_algorithms(); }
1940 ]])],
1941 [
1942 AC_MSG_RESULT(yes)
1943 ],
1944 [
1945 AC_MSG_RESULT(no)
1946 saved_LIBS="$LIBS"
1947 LIBS="$LIBS -ldl"
1948 AC_MSG_CHECKING([if programs using OpenSSL need -ldl])
1949 AC_LINK_IFELSE(
1950 [AC_LANG_SOURCE([[
1951#include <openssl/evp.h>
1952int main(void) { SSLeay_add_all_algorithms(); }
1953 ]])],
1954 [
1955 AC_MSG_RESULT(yes)
1956 ],
1957 [
1958 AC_MSG_RESULT(no)
1959 LIBS="$saved_LIBS"
1960 ]
1961 )
1962 ]
1963)
1964
c7ad0d99 1965AC_ARG_WITH(ssl-engine,
1966 [ --with-ssl-engine Enable OpenSSL (hardware) ENGINE support ],
1967 [ if test "x$withval" != "xno" ; then
1968 AC_MSG_CHECKING(for OpenSSL ENGINE support)
1969 AC_TRY_COMPILE(
1970 [ #include <openssl/engine.h>],
1971 [
24b2647b 1972ENGINE_load_builtin_engines();ENGINE_register_all_complete();
c7ad0d99 1973 ],
1974 [ AC_MSG_RESULT(yes)
1975 AC_DEFINE(USE_OPENSSL_ENGINE, 1,
1976 [Enable OpenSSL engine support])
1977 ],
1978 [ AC_MSG_ERROR(OpenSSL ENGINE support not found)]
1979 )
1980 fi ]
1981)
1982
e5146707 1983# Check for OpenSSL without EVP_aes_{192,256}_cbc
1984AC_MSG_CHECKING([whether OpenSSL has crippled AES support])
3e05aa50 1985AC_LINK_IFELSE(
e5146707 1986 [AC_LANG_SOURCE([[
1987#include <string.h>
1988#include <openssl/evp.h>
300ea548 1989int main(void) { exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);}
e5146707 1990 ]])],
1991 [
1992 AC_MSG_RESULT(no)
1993 ],
1994 [
1995 AC_MSG_RESULT(yes)
1996 AC_DEFINE(OPENSSL_LOBOTOMISED_AES, 1,
1997 [libcrypto is missing AES 192 and 256 bit functions])
1998 ]
1999)
2000
5486a457 2001# Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
2002# because the system crypt() is more featureful.
2003if test "x$check_for_libcrypt_before" = "x1"; then
2004 AC_CHECK_LIB(crypt, crypt)
2005fi
2006
aff51935 2007# Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
8087c5ee 2008# version in OpenSSL.
05114c74 2009if test "x$check_for_libcrypt_later" = "x1"; then
20cad736 2010 AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
717057b6 2011fi
2012
13ff27b7 2013# Search for SHA256 support in libc and/or OpenSSL
2014AC_CHECK_FUNCS(SHA256_Update EVP_sha256)
2015
a03acb8f 2016saved_LIBS="$LIBS"
2017AC_CHECK_LIB(iaf, ia_openinfo, [
2018 LIBS="$LIBS -liaf"
d837615a 2019 AC_CHECK_FUNCS(set_id, [SSHDLIBS="$SSHDLIBS -liaf"
2020 AC_DEFINE(HAVE_LIBIAF, 1,
2021 [Define if system has libiaf that supports set_id])
2022 ])
a03acb8f 2023])
2024LIBS="$saved_LIBS"
f1b0ecc3 2025
2026### Configure cryptographic random number support
2027
2028# Check wheter OpenSSL seeds itself
2029AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1a01a50c 2030AC_RUN_IFELSE(
479cece8 2031 [AC_LANG_SOURCE([[
f1b0ecc3 2032#include <string.h>
2033#include <openssl/rand.h>
aec4cb4f 2034int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
479cece8 2035 ]])],
f1b0ecc3 2036 [
2037 OPENSSL_SEEDS_ITSELF=yes
2038 AC_MSG_RESULT(yes)
2039 ],
2040 [
2041 AC_MSG_RESULT(no)
2042 # Default to use of the rand helper if OpenSSL doesn't
2043 # seed itself
2044 USE_RAND_HELPER=yes
1a01a50c 2045 ],
2046 [
2047 AC_MSG_WARN([cross compiling: assuming yes])
2048 # This is safe, since all recent OpenSSL versions will
82f4e93d 2049 # complain at runtime if not seeded correctly.
1a01a50c 2050 OPENSSL_SEEDS_ITSELF=yes
f1b0ecc3 2051 ]
2052)
2053
a086f73b 2054# Check for PAM libs
2055PAM_MSG="no"
2056AC_ARG_WITH(pam,
2057 [ --with-pam Enable PAM support ],
2058 [
2059 if test "x$withval" != "xno" ; then
2060 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
2061 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
2062 AC_MSG_ERROR([PAM headers not found])
2063 fi
2064
2065 saved_LIBS="$LIBS"
2066 AC_CHECK_LIB(dl, dlopen, , )
2067 AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
2068 AC_CHECK_FUNCS(pam_getenvlist)
2069 AC_CHECK_FUNCS(pam_putenv)
2070 LIBS="$saved_LIBS"
2071
2072 PAM_MSG="yes"
2073
e54defb4 2074 SSHDLIBS="$SSHDLIBS -lpam"
a086f73b 2075 AC_DEFINE(USE_PAM, 1,
2076 [Define if you want to enable PAM support])
282d6408 2077
a086f73b 2078 if test $ac_cv_lib_dl_dlopen = yes; then
282d6408 2079 case "$LIBS" in
2080 *-ldl*)
2081 # libdl already in LIBS
2082 ;;
2083 *)
e54defb4 2084 SSHDLIBS="$SSHDLIBS -ldl"
282d6408 2085 ;;
2086 esac
a086f73b 2087 fi
a086f73b 2088 fi
2089 ]
2090)
2091
2092# Check for older PAM
2093if test "x$PAM_MSG" = "xyes" ; then
2094 # Check PAM strerror arguments (old PAM)
2095 AC_MSG_CHECKING([whether pam_strerror takes only one argument])
2096 AC_TRY_COMPILE(
2097 [
2098#include <stdlib.h>
2099#if defined(HAVE_SECURITY_PAM_APPL_H)
2100#include <security/pam_appl.h>
2101#elif defined (HAVE_PAM_PAM_APPL_H)
2102#include <pam/pam_appl.h>
2103#endif
2104 ],
2105 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
2106 [AC_MSG_RESULT(no)],
2107 [
2108 AC_DEFINE(HAVE_OLD_PAM, 1,
2109 [Define if you have an old version of PAM
2110 which takes only one argument to pam_strerror])
2111 AC_MSG_RESULT(yes)
2112 PAM_MSG="yes (old library)"
2113 ]
2114 )
2115fi
f1b0ecc3 2116
2117# Do we want to force the use of the rand helper?
2118AC_ARG_WITH(rand-helper,
2119 [ --with-rand-helper Use subprocess to gather strong randomness ],
2120 [
2121 if test "x$withval" = "xno" ; then
aff51935 2122 # Force use of OpenSSL's internal RNG, even if
f1b0ecc3 2123 # the previous test showed it to be unseeded.
2124 if test -z "$OPENSSL_SEEDS_ITSELF" ; then
2125 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
2126 OPENSSL_SEEDS_ITSELF=yes
2127 USE_RAND_HELPER=""
2128 fi
2129 else
2130 USE_RAND_HELPER=yes
2131 fi
2132 ],
82f4e93d 2133)
f1b0ecc3 2134
2135# Which randomness source do we use?
4b492aab 2136if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
f1b0ecc3 2137 # OpenSSL only
3466e002 2138 AC_DEFINE(OPENSSL_PRNG_ONLY, 1,
2139 [Define if you want OpenSSL's internally seeded PRNG only])
f1b0ecc3 2140 RAND_MSG="OpenSSL internal ONLY"
2141 INSTALL_SSH_RAND_HELPER=""
70e2f2f3 2142elif test ! -z "$USE_RAND_HELPER" ; then
2143 # install rand helper
f1b0ecc3 2144 RAND_MSG="ssh-rand-helper"
2145 INSTALL_SSH_RAND_HELPER="yes"
2146fi
2147AC_SUBST(INSTALL_SSH_RAND_HELPER)
2148
2149### Configuration of ssh-rand-helper
2150
2151# PRNGD TCP socket
2152AC_ARG_WITH(prngd-port,
2153 [ --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT],
2154 [
eb5d7ff6 2155 case "$withval" in
2156 no)
2157 withval=""
2158 ;;
2159 [[0-9]]*)
2160 ;;
2161 *)
2162 AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
2163 ;;
2164 esac
2165 if test ! -z "$withval" ; then
f1b0ecc3 2166 PRNGD_PORT="$withval"
3466e002 2167 AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT,
2168 [Port number of PRNGD/EGD random number socket])
f1b0ecc3 2169 fi
2170 ]
2171)
2172
2173# PRNGD Unix domain socket
2174AC_ARG_WITH(prngd-socket,
2175 [ --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
2176 [
eb5d7ff6 2177 case "$withval" in
2178 yes)
f1b0ecc3 2179 withval="/var/run/egd-pool"
eb5d7ff6 2180 ;;
2181 no)
2182 withval=""
2183 ;;
2184 /*)
2185 ;;
2186 *)
2187 AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
2188 ;;
2189 esac
2190
2191 if test ! -z "$withval" ; then
f1b0ecc3 2192 if test ! -z "$PRNGD_PORT" ; then
2193 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
2194 fi
906e811b 2195 if test ! -r "$withval" ; then
f1b0ecc3 2196 AC_MSG_WARN(Entropy socket is not readable)
2197 fi
2198 PRNGD_SOCKET="$withval"
3466e002 2199 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET",
2200 [Location of PRNGD/EGD random number socket])
f1b0ecc3 2201 fi
ddceb1c8 2202 ],
2203 [
2204 # Check for existing socket only if we don't have a random device already
2205 if test "$USE_RAND_HELPER" = yes ; then
2206 AC_MSG_CHECKING(for PRNGD/EGD socket)
2207 # Insert other locations here
2208 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
2209 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
2210 PRNGD_SOCKET="$sock"
2211 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
2212 break;
2213 fi
2214 done
2215 if test ! -z "$PRNGD_SOCKET" ; then
2216 AC_MSG_RESULT($PRNGD_SOCKET)
2217 else
2218 AC_MSG_RESULT(not found)
2219 fi
2220 fi
f1b0ecc3 2221 ]
2222)
2223
2224# Change default command timeout for hashing entropy source
2225entropy_timeout=200
2226AC_ARG_WITH(entropy-timeout,
2227 [ --with-entropy-timeout Specify entropy gathering command timeout (msec)],
2228 [
6cf0200f 2229 if test -n "$withval" && test "x$withval" != "xno" && \
2230 test "x${withval}" != "xyes"; then
f1b0ecc3 2231 entropy_timeout=$withval
2232 fi
82f4e93d 2233 ]
f1b0ecc3 2234)
3466e002 2235AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout,
2236 [Builtin PRNG command timeout])
f1b0ecc3 2237
fd3cbf67 2238SSH_PRIVSEP_USER=sshd
9a0fbcb3 2239AC_ARG_WITH(privsep-user,
5222e7ef 2240 [ --with-privsep-user=user Specify non-privileged user for privilege separation],
9a0fbcb3 2241 [
6cf0200f 2242 if test -n "$withval" && test "x$withval" != "xno" && \
2243 test "x${withval}" != "xyes"; then
fd3cbf67 2244 SSH_PRIVSEP_USER=$withval
9a0fbcb3 2245 fi
82f4e93d 2246 ]
9a0fbcb3 2247)
3466e002 2248AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER",
2249 [non-privileged user for privilege separation])
fd3cbf67 2250AC_SUBST(SSH_PRIVSEP_USER)
9a0fbcb3 2251
81dadca3 2252# We do this little dance with the search path to insure
2253# that programs that we select for use by installed programs
2254# (which may be run by the super-user) come from trusted
2255# locations before they come from the user's private area.
2256# This should help avoid accidentally configuring some
2257# random version of a program in someone's personal bin.
2258
2259OPATH=$PATH
2260PATH=/bin:/usr/bin
f95c8ce8 2261test -h /bin 2> /dev/null && PATH=/usr/bin
81dadca3 2262test -d /sbin && PATH=$PATH:/sbin
2263test -d /usr/sbin && PATH=$PATH:/usr/sbin
2264PATH=$PATH:/etc:$OPATH
2265
aff51935 2266# These programs are used by the command hashing source to gather entropy
f1b0ecc3 2267OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
2268OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
2269OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
2270OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
2271OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
2272OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
2273OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
2274OSSH_PATH_ENTROPY_PROG(PROG_W, w)
2275OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
2276OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
2277OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
2278OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
2279OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
2280OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
2281OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
2282OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
81dadca3 2283# restore PATH
2284PATH=$OPATH
f1b0ecc3 2285
2286# Where does ssh-rand-helper get its randomness from?
2287INSTALL_SSH_PRNG_CMDS=""
2288if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
2289 if test ! -z "$PRNGD_PORT" ; then
2290 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
2291 elif test ! -z "$PRNGD_SOCKET" ; then
2292 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
2293 else
2294 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
2295 RAND_HELPER_CMDHASH=yes
2296 INSTALL_SSH_PRNG_CMDS="yes"
2297 fi
2298fi
2299AC_SUBST(INSTALL_SSH_PRNG_CMDS)
2300
2301
66d6c27e 2302# Cheap hack to ensure NEWS-OS libraries are arranged right.
2303if test ! -z "$SONY" ; then
2304 LIBS="$LIBS -liberty";
2305fi
2306
9a406e1e 2307# Check for long long datatypes
2308AC_CHECK_TYPES([long long, unsigned long long, long double])
2309
2310# Check datatype sizes
976f7e19 2311AC_CHECK_SIZEOF(char, 1)
2b942fe0 2312AC_CHECK_SIZEOF(short int, 2)
2313AC_CHECK_SIZEOF(int, 4)
2314AC_CHECK_SIZEOF(long int, 4)
2315AC_CHECK_SIZEOF(long long int, 8)
2316
52f1ccb2 2317# Sanity check long long for some platforms (AIX)
2318if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
2319 ac_cv_sizeof_long_long_int=0
2320fi
2321
90f15776 2322# compute LLONG_MIN and LLONG_MAX if we don't know them.
2323if test -z "$have_llong_max"; then
2324 AC_MSG_CHECKING([for max value of long long])
2325 AC_RUN_IFELSE(
2326 [AC_LANG_SOURCE([[
2327#include <stdio.h>
2328/* Why is this so damn hard? */
2329#ifdef __GNUC__
2330# undef __GNUC__
2331#endif
2332#define __USE_ISOC99
2333#include <limits.h>
2334#define DATA "conftest.llminmax"
055252ed 2335#define my_abs(a) ((a) < 0 ? ((a) * -1) : (a))
2336
2337/*
2338 * printf in libc on some platforms (eg old Tru64) does not understand %lld so
2339 * we do this the hard way.
2340 */
2341static int
2342fprint_ll(FILE *f, long long n)
2343{
2344 unsigned int i;
2345 int l[sizeof(long long) * 8];
2346
2347 if (n < 0)
2348 if (fprintf(f, "-") < 0)
2349 return -1;
2350 for (i = 0; n != 0; i++) {
2351 l[i] = my_abs(n % 10);
2352 n /= 10;
2353 }
2354 do {
2355 if (fprintf(f, "%d", l[--i]) < 0)
2356 return -1;
2357 } while (i != 0);
2358 if (fprintf(f, " ") < 0)
2359 return -1;
2360 return 0;
2361}
2362
90f15776 2363int main(void) {
2364 FILE *f;
2365 long long i, llmin, llmax = 0;
2366
2367 if((f = fopen(DATA,"w")) == NULL)
2368 exit(1);
2369
2370#if defined(LLONG_MIN) && defined(LLONG_MAX)
2371 fprintf(stderr, "Using system header for LLONG_MIN and LLONG_MAX\n");
2372 llmin = LLONG_MIN;
2373 llmax = LLONG_MAX;
2374#else
2375 fprintf(stderr, "Calculating LLONG_MIN and LLONG_MAX\n");
2376 /* This will work on one's complement and two's complement */
2377 for (i = 1; i > llmax; i <<= 1, i++)
2378 llmax = i;
2379 llmin = llmax + 1LL; /* wrap */
2380#endif
2381
2382 /* Sanity check */
2383 if (llmin + 1 < llmin || llmin - 1 < llmin || llmax + 1 > llmax
055252ed 2384 || llmax - 1 > llmax || llmin == llmax || llmin == 0
2385 || llmax == 0 || llmax < LONG_MAX || llmin > LONG_MIN) {
90f15776 2386 fprintf(f, "unknown unknown\n");
2387 exit(2);
2388 }
2389
055252ed 2390 if (fprint_ll(f, llmin) < 0)
90f15776 2391 exit(3);
055252ed 2392 if (fprint_ll(f, llmax) < 0)
2393 exit(4);
2394 if (fclose(f) < 0)
2395 exit(5);
90f15776 2396 exit(0);
2397}
2398 ]])],
2399 [
2400 llong_min=`$AWK '{print $1}' conftest.llminmax`
2401 llong_max=`$AWK '{print $2}' conftest.llminmax`
2402
90f15776 2403 AC_MSG_RESULT($llong_max)
2404 AC_DEFINE_UNQUOTED(LLONG_MAX, [${llong_max}LL],
2405 [max value of long long calculated by configure])
2406 AC_MSG_CHECKING([for min value of long long])
2407 AC_MSG_RESULT($llong_min)
2408 AC_DEFINE_UNQUOTED(LLONG_MIN, [${llong_min}LL],
2409 [min value of long long calculated by configure])
2410 ],
2411 [
2412 AC_MSG_RESULT(not found)
2413 ],
2414 [
2415 AC_MSG_WARN([cross compiling: not checking])
2416 ]
2417 )
2418fi
2419
2420
a0391976 2421# More checks for data types
14a9a859 2422AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
2423 AC_TRY_COMPILE(
aff51935 2424 [ #include <sys/types.h> ],
2425 [ u_int a; a = 1;],
14a9a859 2426 [ ac_cv_have_u_int="yes" ],
2427 [ ac_cv_have_u_int="no" ]
2428 )
2429])
2430if test "x$ac_cv_have_u_int" = "xyes" ; then
3466e002 2431 AC_DEFINE(HAVE_U_INT, 1, [define if you have u_int data type])
14a9a859 2432 have_u_int=1
2433fi
2434
58d100bf 2435AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
2436 AC_TRY_COMPILE(
aff51935 2437 [ #include <sys/types.h> ],
2438 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
58d100bf 2439 [ ac_cv_have_intxx_t="yes" ],
2440 [ ac_cv_have_intxx_t="no" ]
2441 )
2442])
2443if test "x$ac_cv_have_intxx_t" = "xyes" ; then
3466e002 2444 AC_DEFINE(HAVE_INTXX_T, 1, [define if you have intxx_t data type])
58d100bf 2445 have_intxx_t=1
2446fi
41cb4569 2447
2448if (test -z "$have_intxx_t" && \
aff51935 2449 test "x$ac_cv_header_stdint_h" = "xyes")
41cb4569 2450then
2451 AC_MSG_CHECKING([for intXX_t types in stdint.h])
2452 AC_TRY_COMPILE(
aff51935 2453 [ #include <stdint.h> ],
2454 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
41cb4569 2455 [
2456 AC_DEFINE(HAVE_INTXX_T)
2457 AC_MSG_RESULT(yes)
2458 ],
2459 [ AC_MSG_RESULT(no) ]
2460 )
2461fi
2462
bd590612 2463AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
2464 AC_TRY_COMPILE(
1cbbe6c8 2465 [
2466#include <sys/types.h>
2467#ifdef HAVE_STDINT_H
2468# include <stdint.h>
2469#endif
2470#include <sys/socket.h>
2471#ifdef HAVE_SYS_BITYPES_H
2472# include <sys/bitypes.h>
2473#endif
aff51935 2474 ],
2475 [ int64_t a; a = 1;],
bd590612 2476 [ ac_cv_have_int64_t="yes" ],
2477 [ ac_cv_have_int64_t="no" ]
2478 )
2479])
2480if test "x$ac_cv_have_int64_t" = "xyes" ; then
3466e002 2481 AC_DEFINE(HAVE_INT64_T, 1, [define if you have int64_t data type])
ddceb1c8 2482fi
2483
58d100bf 2484AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
2485 AC_TRY_COMPILE(
aff51935 2486 [ #include <sys/types.h> ],
2487 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
58d100bf 2488 [ ac_cv_have_u_intxx_t="yes" ],
2489 [ ac_cv_have_u_intxx_t="no" ]
2490 )
2491])
2492if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
3466e002 2493 AC_DEFINE(HAVE_U_INTXX_T, 1, [define if you have u_intxx_t data type])
58d100bf 2494 have_u_intxx_t=1
2495fi
2b942fe0 2496
41cb4569 2497if test -z "$have_u_intxx_t" ; then
2498 AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
2499 AC_TRY_COMPILE(
aff51935 2500 [ #include <sys/socket.h> ],
2501 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
41cb4569 2502 [
2503 AC_DEFINE(HAVE_U_INTXX_T)
2504 AC_MSG_RESULT(yes)
2505 ],
2506 [ AC_MSG_RESULT(no) ]
2507 )
2508fi
2509
bd590612 2510AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
2511 AC_TRY_COMPILE(
aff51935 2512 [ #include <sys/types.h> ],
2513 [ u_int64_t a; a = 1;],
bd590612 2514 [ ac_cv_have_u_int64_t="yes" ],
2515 [ ac_cv_have_u_int64_t="no" ]
2516 )
2517])
2518if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
3466e002 2519 AC_DEFINE(HAVE_U_INT64_T, 1, [define if you have u_int64_t data type])
bd590612 2520 have_u_int64_t=1
2521fi
2522
ddceb1c8 2523if test -z "$have_u_int64_t" ; then
2524 AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
2525 AC_TRY_COMPILE(
aff51935 2526 [ #include <sys/bitypes.h> ],
ddceb1c8 2527 [ u_int64_t a; a = 1],
2528 [
2529 AC_DEFINE(HAVE_U_INT64_T)
2530 AC_MSG_RESULT(yes)
2531 ],
2532 [ AC_MSG_RESULT(no) ]
2533 )
2534fi
2535
41cb4569 2536if test -z "$have_u_intxx_t" ; then
2537 AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
2538 AC_TRY_COMPILE(
2539 [
2540#include <sys/types.h>
aff51935 2541 ],
2542 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
41cb4569 2543 [ ac_cv_have_uintxx_t="yes" ],
2544 [ ac_cv_have_uintxx_t="no" ]
2545 )
2546 ])
2547 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
3466e002 2548 AC_DEFINE(HAVE_UINTXX_T, 1,
2549 [define if you have uintxx_t data type])
41cb4569 2550 fi
2551fi
2552
2553if test -z "$have_uintxx_t" ; then
2554 AC_MSG_CHECKING([for uintXX_t types in stdint.h])
2555 AC_TRY_COMPILE(
aff51935 2556 [ #include <stdint.h> ],
2557 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
41cb4569 2558 [
2559 AC_DEFINE(HAVE_UINTXX_T)
2560 AC_MSG_RESULT(yes)
2561 ],
2562 [ AC_MSG_RESULT(no) ]
2563 )
2564fi
2565
e5fe9a1f 2566if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
aff51935 2567 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
5cdfe03f 2568then
2569 AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
2570 AC_TRY_COMPILE(
58d100bf 2571 [
2572#include <sys/bitypes.h>
aff51935 2573 ],
5cdfe03f 2574 [
837c30b8 2575 int8_t a; int16_t b; int32_t c;
2576 u_int8_t e; u_int16_t f; u_int32_t g;
2577 a = b = c = e = f = g = 1;
aff51935 2578 ],
5cdfe03f 2579 [
2580 AC_DEFINE(HAVE_U_INTXX_T)
2581 AC_DEFINE(HAVE_INTXX_T)
2582 AC_MSG_RESULT(yes)
2583 ],
2584 [AC_MSG_RESULT(no)]
aff51935 2585 )
5cdfe03f 2586fi
2587
0362750e 2588
2589AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
2590 AC_TRY_COMPILE(
2591 [
2592#include <sys/types.h>
2593 ],
2594 [ u_char foo; foo = 125; ],
2595 [ ac_cv_have_u_char="yes" ],
2596 [ ac_cv_have_u_char="no" ]
2597 )
2598])
2599if test "x$ac_cv_have_u_char" = "xyes" ; then
3466e002 2600 AC_DEFINE(HAVE_U_CHAR, 1, [define if you have u_char data type])
0362750e 2601fi
2602
98a7c37b 2603TYPE_SOCKLEN_T
2b942fe0 2604
2d16d9a3 2605AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
ddceb1c8 2606
777ece68 2607AC_CHECK_TYPES(in_addr_t,,,
2608[#include <sys/types.h>
2609#include <netinet/in.h>])
7b578f7d 2610
58d100bf 2611AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
2612 AC_TRY_COMPILE(
2613 [
18ba2aab 2614#include <sys/types.h>
58d100bf 2615 ],
2616 [ size_t foo; foo = 1235; ],
2617 [ ac_cv_have_size_t="yes" ],
2618 [ ac_cv_have_size_t="no" ]
2619 )
2620])
2621if test "x$ac_cv_have_size_t" = "xyes" ; then
3466e002 2622 AC_DEFINE(HAVE_SIZE_T, 1, [define if you have size_t data type])
58d100bf 2623fi
ea1970a3 2624
c04f75f1 2625AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
2626 AC_TRY_COMPILE(
2627 [
2628#include <sys/types.h>
2629 ],
2630 [ ssize_t foo; foo = 1235; ],
2631 [ ac_cv_have_ssize_t="yes" ],
2632 [ ac_cv_have_ssize_t="no" ]
2633 )
2634])
2635if test "x$ac_cv_have_ssize_t" = "xyes" ; then
3466e002 2636 AC_DEFINE(HAVE_SSIZE_T, 1, [define if you have ssize_t data type])
c04f75f1 2637fi
2638
f1c4659d 2639AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
2640 AC_TRY_COMPILE(
2641 [
2642#include <time.h>
2643 ],
2644 [ clock_t foo; foo = 1235; ],
2645 [ ac_cv_have_clock_t="yes" ],
2646 [ ac_cv_have_clock_t="no" ]
2647 )
2648])
2649if test "x$ac_cv_have_clock_t" = "xyes" ; then
3466e002 2650 AC_DEFINE(HAVE_CLOCK_T, 1, [define if you have clock_t data type])
f1c4659d 2651fi
2652
1c04b088 2653AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
2654 AC_TRY_COMPILE(
2655 [
2656#include <sys/types.h>
2657#include <sys/socket.h>
2658 ],
2659 [ sa_family_t foo; foo = 1235; ],
2660 [ ac_cv_have_sa_family_t="yes" ],
77bb0bca 2661 [ AC_TRY_COMPILE(
2662 [
2663#include <sys/types.h>
2664#include <sys/socket.h>
2665#include <netinet/in.h>
2666 ],
2667 [ sa_family_t foo; foo = 1235; ],
2668 [ ac_cv_have_sa_family_t="yes" ],
2669
1c04b088 2670 [ ac_cv_have_sa_family_t="no" ]
77bb0bca 2671 )]
1c04b088 2672 )
2673])
2674if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
3466e002 2675 AC_DEFINE(HAVE_SA_FAMILY_T, 1,
2676 [define if you have sa_family_t data type])
1c04b088 2677fi
2678
729bfe59 2679AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
2680 AC_TRY_COMPILE(
2681 [
2682#include <sys/types.h>
2683 ],
2684 [ pid_t foo; foo = 1235; ],
2685 [ ac_cv_have_pid_t="yes" ],
2686 [ ac_cv_have_pid_t="no" ]
2687 )
2688])
2689if test "x$ac_cv_have_pid_t" = "xyes" ; then
3466e002 2690 AC_DEFINE(HAVE_PID_T, 1, [define if you have pid_t data type])
729bfe59 2691fi
2692
2693AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
2694 AC_TRY_COMPILE(
2695 [
2696#include <sys/types.h>
2697 ],
2698 [ mode_t foo; foo = 1235; ],
2699 [ ac_cv_have_mode_t="yes" ],
2700 [ ac_cv_have_mode_t="no" ]
2701 )
2702])
2703if test "x$ac_cv_have_mode_t" = "xyes" ; then
3466e002 2704 AC_DEFINE(HAVE_MODE_T, 1, [define if you have mode_t data type])
729bfe59 2705fi
2706
e3a93db0 2707
58d100bf 2708AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
2709 AC_TRY_COMPILE(
2710 [
18ba2aab 2711#include <sys/types.h>
2712#include <sys/socket.h>
58d100bf 2713 ],
2714 [ struct sockaddr_storage s; ],
2715 [ ac_cv_have_struct_sockaddr_storage="yes" ],
2716 [ ac_cv_have_struct_sockaddr_storage="no" ]
2717 )
2718])
2719if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
3466e002 2720 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE, 1,
2721 [define if you have struct sockaddr_storage data type])
58d100bf 2722fi
48e671d5 2723
58d100bf 2724AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2725 AC_TRY_COMPILE(
2726 [
cbd7492e 2727#include <sys/types.h>
58d100bf 2728#include <netinet/in.h>
2729 ],
2730 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2731 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2732 [ ac_cv_have_struct_sockaddr_in6="no" ]
2733 )
2734])
2735if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
3466e002 2736 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6, 1,
2737 [define if you have struct sockaddr_in6 data type])
58d100bf 2738fi
48e671d5 2739
58d100bf 2740AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2741 AC_TRY_COMPILE(
2742 [
cbd7492e 2743#include <sys/types.h>
58d100bf 2744#include <netinet/in.h>
2745 ],
2746 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2747 [ ac_cv_have_struct_in6_addr="yes" ],
2748 [ ac_cv_have_struct_in6_addr="no" ]
2749 )
2750])
2751if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
3466e002 2752 AC_DEFINE(HAVE_STRUCT_IN6_ADDR, 1,
2753 [define if you have struct in6_addr data type])
58d100bf 2754fi
48e671d5 2755
58d100bf 2756AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2757 AC_TRY_COMPILE(
2758 [
18ba2aab 2759#include <sys/types.h>
2760#include <sys/socket.h>
2761#include <netdb.h>
58d100bf 2762 ],
2763 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2764 [ ac_cv_have_struct_addrinfo="yes" ],
2765 [ ac_cv_have_struct_addrinfo="no" ]
2766 )
2767])
2768if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
3466e002 2769 AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1,
2770 [define if you have struct addrinfo data type])
58d100bf 2771fi
2772
89c7e31c 2773AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2774 AC_TRY_COMPILE(
aff51935 2775 [ #include <sys/time.h> ],
2776 [ struct timeval tv; tv.tv_sec = 1;],
89c7e31c 2777 [ ac_cv_have_struct_timeval="yes" ],
2778 [ ac_cv_have_struct_timeval="no" ]
2779 )
2780])
2781if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
3466e002 2782 AC_DEFINE(HAVE_STRUCT_TIMEVAL, 1, [define if you have struct timeval])
89c7e31c 2783 have_struct_timeval=1
2784fi
2785
5271b55c 2786AC_CHECK_TYPES(struct timespec)
2787
85abc74b 2788# We need int64_t or else certian parts of the compile will fail.
4b492aab 2789if test "x$ac_cv_have_int64_t" = "xno" && \
2790 test "x$ac_cv_sizeof_long_int" != "x8" && \
2791 test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
85abc74b 2792 echo "OpenSSH requires int64_t support. Contact your vendor or install"
2793 echo "an alternative compiler (I.E., GCC) before continuing."
2794 echo ""
2795 exit 1;
733cf7f4 2796else
2797dnl test snprintf (broken on SCO w/gcc)
1a01a50c 2798 AC_RUN_IFELSE(
479cece8 2799 [AC_LANG_SOURCE([[
733cf7f4 2800#include <stdio.h>
2801#include <string.h>
2802#ifdef HAVE_SNPRINTF
2803main()
2804{
2805 char buf[50];
2806 char expected_out[50];
2807 int mazsize = 50 ;
2808#if (SIZEOF_LONG_INT == 8)
2809 long int num = 0x7fffffffffffffff;
2810#else
763a1a18 2811 long long num = 0x7fffffffffffffffll;
733cf7f4 2812#endif
2813 strcpy(expected_out, "9223372036854775807");
2814 snprintf(buf, mazsize, "%lld", num);
2815 if(strcmp(buf, expected_out) != 0)
aff51935 2816 exit(1);
733cf7f4 2817 exit(0);
2818}
2819#else
2820main() { exit(0); }
2821#endif
479cece8 2822 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
1a01a50c 2823 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
733cf7f4 2824 )
2c523de9 2825fi
2826
77bb0bca 2827dnl Checks for structure members
58d100bf 2828OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2829OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2830OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2831OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2832OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
25422c70 2833OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
58d100bf 2834OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2835OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
daaff4d5 2836OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
58d100bf 2837OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2838OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2839OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2840OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
1d7b9b20 2841OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2842OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2843OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2844OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
98a7c37b 2845
2846AC_CHECK_MEMBERS([struct stat.st_blksize])
ccc45ee0 2847AC_CHECK_MEMBER([struct __res_state.retrans], [], [AC_DEFINE(__res_state, state,
2848 [Define if we don't have struct __res_state in resolv.h])],
2849[
2850#include <stdio.h>
2851#if HAVE_SYS_TYPES_H
2852# include <sys/types.h>
2853#endif
2854#include <netinet/in.h>
2855#include <arpa/nameser.h>
2856#include <resolv.h>
2857])
1d7b9b20 2858
58d100bf 2859AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2860 ac_cv_have_ss_family_in_struct_ss, [
2861 AC_TRY_COMPILE(
2862 [
18ba2aab 2863#include <sys/types.h>
2864#include <sys/socket.h>
58d100bf 2865 ],
2866 [ struct sockaddr_storage s; s.ss_family = 1; ],
2867 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2868 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2869 )
2870])
2871if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
3466e002 2872 AC_DEFINE(HAVE_SS_FAMILY_IN_SS, 1, [Fields in struct sockaddr_storage])
58d100bf 2873fi
2874
58d100bf 2875AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2876 ac_cv_have___ss_family_in_struct_ss, [
2877 AC_TRY_COMPILE(
2878 [
18ba2aab 2879#include <sys/types.h>
2880#include <sys/socket.h>
58d100bf 2881 ],
2882 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2883 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2884 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2885 )
2886])
2887if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
3466e002 2888 AC_DEFINE(HAVE___SS_FAMILY_IN_SS, 1,
2889 [Fields in struct sockaddr_storage])
58d100bf 2890fi
2891
2e73a022 2892AC_CACHE_CHECK([for pw_class field in struct passwd],
2893 ac_cv_have_pw_class_in_struct_passwd, [
2894 AC_TRY_COMPILE(
2895 [
2e73a022 2896#include <pwd.h>
2897 ],
97994d32 2898 [ struct passwd p; p.pw_class = 0; ],
2e73a022 2899 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2900 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2901 )
2902])
2903if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
3466e002 2904 AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD, 1,
2905 [Define if your password has a pw_class field])
2e73a022 2906fi
2907
7751d4eb 2908AC_CACHE_CHECK([for pw_expire field in struct passwd],
2909 ac_cv_have_pw_expire_in_struct_passwd, [
2910 AC_TRY_COMPILE(
2911 [
2912#include <pwd.h>
2913 ],
2914 [ struct passwd p; p.pw_expire = 0; ],
2915 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2916 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2917 )
2918])
2919if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
3466e002 2920 AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD, 1,
2921 [Define if your password has a pw_expire field])
7751d4eb 2922fi
2923
2924AC_CACHE_CHECK([for pw_change field in struct passwd],
2925 ac_cv_have_pw_change_in_struct_passwd, [
2926 AC_TRY_COMPILE(
2927 [
2928#include <pwd.h>
2929 ],
2930 [ struct passwd p; p.pw_change = 0; ],
2931 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2932 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2933 )
2934])
2935if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
3466e002 2936 AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD, 1,
2937 [Define if your password has a pw_change field])
7751d4eb 2938fi
58d100bf 2939
637f9177 2940dnl make sure we're using the real structure members and not defines
6f34652e 2941AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2942 ac_cv_have_accrights_in_msghdr, [
1a01a50c 2943 AC_COMPILE_IFELSE(
6f34652e 2944 [
f95c8ce8 2945#include <sys/types.h>
6f34652e 2946#include <sys/socket.h>
2947#include <sys/uio.h>
637f9177 2948int main() {
2949#ifdef msg_accrights
1a01a50c 2950#error "msg_accrights is a macro"
637f9177 2951exit(1);
2952#endif
2953struct msghdr m;
2954m.msg_accrights = 0;
2955exit(0);
2956}
6f34652e 2957 ],
6f34652e 2958 [ ac_cv_have_accrights_in_msghdr="yes" ],
2959 [ ac_cv_have_accrights_in_msghdr="no" ]
2960 )
2961])
2962if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
3466e002 2963 AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR, 1,
2964 [Define if your system uses access rights style
2965 file descriptor passing])
6f34652e 2966fi
2967
7176df4f 2968AC_CACHE_CHECK([for msg_control field in struct msghdr],
2969 ac_cv_have_control_in_msghdr, [
1a01a50c 2970 AC_COMPILE_IFELSE(
7176df4f 2971 [
f95c8ce8 2972#include <sys/types.h>
7176df4f 2973#include <sys/socket.h>
2974#include <sys/uio.h>
637f9177 2975int main() {
2976#ifdef msg_control
1a01a50c 2977#error "msg_control is a macro"
637f9177 2978exit(1);
2979#endif
2980struct msghdr m;
2981m.msg_control = 0;
2982exit(0);
2983}
7176df4f 2984 ],
7176df4f 2985 [ ac_cv_have_control_in_msghdr="yes" ],
2986 [ ac_cv_have_control_in_msghdr="no" ]
2987 )
2988])
2989if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
3466e002 2990 AC_DEFINE(HAVE_CONTROL_IN_MSGHDR, 1,
2991 [Define if your system uses ancillary data style
2992 file descriptor passing])
7176df4f 2993fi
2994
58d100bf 2995AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
aff51935 2996 AC_TRY_LINK([],
2997 [ extern char *__progname; printf("%s", __progname); ],
58d100bf 2998 [ ac_cv_libc_defines___progname="yes" ],
2999 [ ac_cv_libc_defines___progname="no" ]
3000 )
3001])
3002if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
3466e002 3003 AC_DEFINE(HAVE___PROGNAME, 1, [Define if libc defines __progname])
58d100bf 3004fi
8946db53 3005
c921ee00 3006AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
3007 AC_TRY_LINK([
3008#include <stdio.h>
aff51935 3009],
3010 [ printf("%s", __FUNCTION__); ],
c921ee00 3011 [ ac_cv_cc_implements___FUNCTION__="yes" ],
3012 [ ac_cv_cc_implements___FUNCTION__="no" ]
3013 )
3014])
3015if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
3466e002 3016 AC_DEFINE(HAVE___FUNCTION__, 1,
3017 [Define if compiler implements __FUNCTION__])
c921ee00 3018fi
3019
3020AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
3021 AC_TRY_LINK([
3022#include <stdio.h>
aff51935 3023],
3024 [ printf("%s", __func__); ],
c921ee00 3025 [ ac_cv_cc_implements___func__="yes" ],
3026 [ ac_cv_cc_implements___func__="no" ]
3027 )
3028])
3029if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
3466e002 3030 AC_DEFINE(HAVE___func__, 1, [Define if compiler implements __func__])
c921ee00 3031fi
3032
9a406e1e 3033AC_CACHE_CHECK([whether va_copy exists], ac_cv_have_va_copy, [
3034 AC_TRY_LINK(
3035 [#include <stdarg.h>
3036 va_list x,y;],
3037 [va_copy(x,y);],
3038 [ ac_cv_have_va_copy="yes" ],
3039 [ ac_cv_have_va_copy="no" ]
3040 )
3041])
3042if test "x$ac_cv_have_va_copy" = "xyes" ; then
3043 AC_DEFINE(HAVE_VA_COPY, 1, [Define if va_copy exists])
3044fi
3045
3046AC_CACHE_CHECK([whether __va_copy exists], ac_cv_have___va_copy, [
3047 AC_TRY_LINK(
3048 [#include <stdarg.h>
3049 va_list x,y;],
3050 [__va_copy(x,y);],
3051 [ ac_cv_have___va_copy="yes" ],
3052 [ ac_cv_have___va_copy="no" ]
3053 )
3054])
3055if test "x$ac_cv_have___va_copy" = "xyes" ; then
3056 AC_DEFINE(HAVE___VA_COPY, 1, [Define if __va_copy exists])
3057fi
3058
1812a662 3059AC_CACHE_CHECK([whether getopt has optreset support],
3060 ac_cv_have_getopt_optreset, [
3061 AC_TRY_LINK(
3062 [
3063#include <getopt.h>
3064 ],
3065 [ extern int optreset; optreset = 0; ],
3066 [ ac_cv_have_getopt_optreset="yes" ],
3067 [ ac_cv_have_getopt_optreset="no" ]
3068 )
3069])
3070if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
3466e002 3071 AC_DEFINE(HAVE_GETOPT_OPTRESET, 1,
3072 [Define if your getopt(3) defines and uses optreset])
1812a662 3073fi
a0391976 3074
819b676f 3075AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
aff51935 3076 AC_TRY_LINK([],
3077 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
819b676f 3078 [ ac_cv_libc_defines_sys_errlist="yes" ],
3079 [ ac_cv_libc_defines_sys_errlist="no" ]
3080 )
3081])
3082if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
3466e002 3083 AC_DEFINE(HAVE_SYS_ERRLIST, 1,
3084 [Define if your system defines sys_errlist[]])
819b676f 3085fi
3086
3087
416ed5a7 3088AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
aff51935 3089 AC_TRY_LINK([],
3090 [ extern int sys_nerr; printf("%i", sys_nerr);],
416ed5a7 3091 [ ac_cv_libc_defines_sys_nerr="yes" ],
3092 [ ac_cv_libc_defines_sys_nerr="no" ]
3093 )
3094])
3095if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
3466e002 3096 AC_DEFINE(HAVE_SYS_NERR, 1, [Define if your system defines sys_nerr])
416ed5a7 3097fi
3098
aff51935 3099SCARD_MSG="no"
295c8801 3100# Check whether user wants sectok support
3101AC_ARG_WITH(sectok,
3102 [ --with-sectok Enable smartcard support using libsectok],
d0b19c95 3103 [
3104 if test "x$withval" != "xno" ; then
3105 if test "x$withval" != "xyes" ; then
3106 CPPFLAGS="$CPPFLAGS -I${withval}"
3107 LDFLAGS="$LDFLAGS -L${withval}"
3108 if test ! -z "$need_dash_r" ; then
3109 LDFLAGS="$LDFLAGS -R${withval}"
3110 fi
3111 if test ! -z "$blibpath" ; then
3112 blibpath="$blibpath:${withval}"
3113 fi
3114 fi
3115 AC_CHECK_HEADERS(sectok.h)
3116 if test "$ac_cv_header_sectok_h" != yes; then
3117 AC_MSG_ERROR(Can't find sectok.h)
3118 fi
3119 AC_CHECK_LIB(sectok, sectok_open)
3120 if test "$ac_cv_lib_sectok_sectok_open" != yes; then
3121 AC_MSG_ERROR(Can't find libsectok)
3122 fi
3466e002 3123 AC_DEFINE(SMARTCARD, 1,
3124 [Define if you want smartcard support])
3125 AC_DEFINE(USE_SECTOK, 1,
3126 [Define if you want smartcard support
3127 using sectok])
aff51935 3128 SCARD_MSG="yes, using sectok"
295c8801 3129 fi
3130 ]
3131)
3132
3133# Check whether user wants OpenSC support
987b458f 3134OPENSC_CONFIG="no"
295c8801 3135AC_ARG_WITH(opensc,
e47fb473 3136 [ --with-opensc[[=PFX]] Enable smartcard support using OpenSC (optionally in PATH)],
987b458f 3137 [
3138 if test "x$withval" != "xno" ; then
3139 if test "x$withval" != "xyes" ; then
3140 OPENSC_CONFIG=$withval/bin/opensc-config
3141 else
3142 AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
3143 fi
3144 if test "$OPENSC_CONFIG" != "no"; then
3145 LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
3146 LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
3147 CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
530456f4 3148 LIBS="$LIBS $LIBOPENSC_LIBS"
987b458f 3149 AC_DEFINE(SMARTCARD)
3466e002 3150 AC_DEFINE(USE_OPENSC, 1,
3151 [Define if you want smartcard support
3152 using OpenSC])
987b458f 3153 SCARD_MSG="yes, using OpenSC"
3154 fi
3155 fi
3156 ]
3157)
d0b19c95 3158
c31dc31c 3159# Check libraries needed by DNS fingerprint support
aff51935 3160AC_SEARCH_LIBS(getrrsetbyname, resolv,
3466e002 3161 [AC_DEFINE(HAVE_GETRRSETBYNAME, 1,
3162 [Define if getrrsetbyname() exists])],
3e05e934 3163 [
c31dc31c 3164 # Needed by our getrrsetbyname()
3165 AC_SEARCH_LIBS(res_query, resolv)
3166 AC_SEARCH_LIBS(dn_expand, resolv)
dabb524a 3167 AC_MSG_CHECKING(if res_query will link)
3168 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
3169 [AC_MSG_RESULT(no)
3170 saved_LIBS="$LIBS"
3171 LIBS="$LIBS -lresolv"
3172 AC_MSG_CHECKING(for res_query in -lresolv)
3173 AC_LINK_IFELSE([
3174#include <resolv.h>
3175int main()
3176{
3177 res_query (0, 0, 0, 0, 0);
3178 return 0;
3179}
3180 ],
3181 [LIBS="$LIBS -lresolv"
3182 AC_MSG_RESULT(yes)],
3183 [LIBS="$saved_LIBS"
3184 AC_MSG_RESULT(no)])
3185 ])
c31dc31c 3186 AC_CHECK_FUNCS(_getshort _getlong)
1c829da5 3187 AC_CHECK_DECLS([_getshort, _getlong], , ,
b5765e1d 3188 [#include <sys/types.h>
3189 #include <arpa/nameser.h>])
c31dc31c 3190 AC_CHECK_MEMBER(HEADER.ad,
3466e002 3191 [AC_DEFINE(HAVE_HEADER_AD, 1,
3192 [Define if HEADER.ad exists in arpa/nameser.h])],,
c31dc31c 3193 [#include <arpa/nameser.h>])
3194 ])
3e05e934 3195
560acf80 3196AC_MSG_CHECKING(if struct __res_state _res is an extern)
3197AC_LINK_IFELSE([
3198#include <stdio.h>
3199#if HAVE_SYS_TYPES_H
3200# include <sys/types.h>
3201#endif
3202#include <netinet/in.h>
3203#include <arpa/nameser.h>
3204#include <resolv.h>
3205extern struct __res_state _res;
3206int main() { return 0; }
3207 ],
3208 [AC_MSG_RESULT(yes)
3209 AC_DEFINE(HAVE__RES_EXTERN, 1,
3210 [Define if you have struct __res_state _res as an extern])
3211 ],
3212 [ AC_MSG_RESULT(no) ]
3213)
3214
ef4d1846 3215# Check whether user wants SELinux support
3216SELINUX_MSG="no"
3217LIBSELINUX=""
3218AC_ARG_WITH(selinux,
3219 [ --with-selinux Enable SELinux support],
3220 [ if test "x$withval" != "xno" ; then
e54defb4 3221 save_LIBS="$LIBS"
ef4d1846 3222 AC_DEFINE(WITH_SELINUX,1,[Define if you want SELinux support.])
3223 SELINUX_MSG="yes"
3224 AC_CHECK_HEADER([selinux/selinux.h], ,
3225 AC_MSG_ERROR(SELinux support requires selinux.h header))
3226 AC_CHECK_LIB(selinux, setexeccon, [ LIBSELINUX="-lselinux" ],
3227 AC_MSG_ERROR(SELinux support requires libselinux library))
e54defb4 3228 SSHDLIBS="$SSHDLIBS $LIBSELINUX"
ef4d1846 3229 AC_CHECK_FUNCS(getseuserbyname get_default_context_with_level)
5ba277eb 3230 LIBS="$save_LIBS"
ef4d1846 3231 fi ]
3232)
ef4d1846 3233
12928e80 3234# Check whether user wants Kerberos 5 support
aff51935 3235KRB5_MSG="no"
12928e80 3236AC_ARG_WITH(kerberos5,
aff51935 3237 [ --with-kerberos5=PATH Enable Kerberos 5 support],
5585c441 3238 [ if test "x$withval" != "xno" ; then
3239 if test "x$withval" = "xyes" ; then
3240 KRB5ROOT="/usr/local"
3241 else
3242 KRB5ROOT=${withval}
3243 fi
3244
3466e002 3245 AC_DEFINE(KRB5, 1, [Define if you want Kerberos 5 support])
5585c441 3246 KRB5_MSG="yes"
3247
3248 AC_MSG_CHECKING(for krb5-config)
3249 if test -x $KRB5ROOT/bin/krb5-config ; then
3250 KRB5CONF=$KRB5ROOT/bin/krb5-config
3251 AC_MSG_RESULT($KRB5CONF)
3252
3253 AC_MSG_CHECKING(for gssapi support)
3254 if $KRB5CONF | grep gssapi >/dev/null ; then
3255 AC_MSG_RESULT(yes)
3466e002 3256 AC_DEFINE(GSSAPI, 1,
3257 [Define this if you want GSSAPI
3258 support in the version 2 protocol])
071970fb 3259 k5confopts=gssapi
aff51935 3260 else
5585c441 3261 AC_MSG_RESULT(no)
071970fb 3262 k5confopts=""
aff51935 3263 fi
071970fb 3264 K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
3265 K5LIBS="`$KRB5CONF --libs $k5confopts`"
5585c441 3266 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
5585c441 3267 AC_MSG_CHECKING(whether we are using Heimdal)
3268 AC_TRY_COMPILE([ #include <krb5.h> ],
3269 [ char *tmp = heimdal_version; ],
3270 [ AC_MSG_RESULT(yes)
3466e002 3271 AC_DEFINE(HEIMDAL, 1,
3272 [Define this if you are using the
3273 Heimdal version of Kerberos V5]) ],
5585c441 3274 AC_MSG_RESULT(no)
3275 )
3276 else
3277 AC_MSG_RESULT(no)
12928e80 3278 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
aff51935 3279 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
aff51935 3280 AC_MSG_CHECKING(whether we are using Heimdal)
3281 AC_TRY_COMPILE([ #include <krb5.h> ],
3282 [ char *tmp = heimdal_version; ],
3283 [ AC_MSG_RESULT(yes)
3284 AC_DEFINE(HEIMDAL)
41707f74 3285 K5LIBS="-lkrb5 -ldes"
3286 K5LIBS="$K5LIBS -lcom_err -lasn1"
82f4e93d 3287 AC_CHECK_LIB(roken, net_write,
41707f74 3288 [K5LIBS="$K5LIBS -lroken"])
aff51935 3289 ],
3290 [ AC_MSG_RESULT(no)
3291 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
3292 ]
3293 )
4e00038c 3294 AC_SEARCH_LIBS(dn_expand, resolv)
12928e80 3295
749560dd 3296 AC_CHECK_LIB(gssapi,gss_init_sec_context,
3297 [ AC_DEFINE(GSSAPI)
3298 K5LIBS="-lgssapi $K5LIBS" ],
3299 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
3300 [ AC_DEFINE(GSSAPI)
aff51935 3301 K5LIBS="-lgssapi_krb5 $K5LIBS" ],
749560dd 3302 AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
3303 $K5LIBS)
3304 ],
3305 $K5LIBS)
82f4e93d 3306
749560dd 3307 AC_CHECK_HEADER(gssapi.h, ,
3308 [ unset ac_cv_header_gssapi_h
aff51935 3309 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
749560dd 3310 AC_CHECK_HEADERS(gssapi.h, ,
3311 AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
aff51935 3312 )
749560dd 3313 ]
3314 )
3315
3316 oldCPP="$CPPFLAGS"
3317 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
3318 AC_CHECK_HEADER(gssapi_krb5.h, ,
3319 [ CPPFLAGS="$oldCPP" ])
3320
aff51935 3321 fi
5585c441 3322 if test ! -z "$need_dash_r" ; then
3323 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
3324 fi
3325 if test ! -z "$blibpath" ; then
3326 blibpath="$blibpath:${KRB5ROOT}/lib"
3327 fi
071970fb 3328
f5555364 3329 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
3330 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
3331 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
071970fb 3332
f5555364 3333 LIBS="$LIBS $K5LIBS"
3466e002 3334 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS, 1,
3335 [Define this if you want to use libkafs' AFS support]))
f5555364 3336 fi
071970fb 3337 ]
12928e80 3338)
b5b68128 3339
a0391976 3340# Looking for programs, paths and files
a0391976 3341
ecac8ee5 3342PRIVSEP_PATH=/var/empty
3343AC_ARG_WITH(privsep-path,
cda1ebcb 3344 [ --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
ecac8ee5 3345 [
6cf0200f 3346 if test -n "$withval" && test "x$withval" != "xno" && \
3347 test "x${withval}" != "xyes"; then
ecac8ee5 3348 PRIVSEP_PATH=$withval
3349 fi
3350 ]
3351)
3352AC_SUBST(PRIVSEP_PATH)
3353
a0391976 3354AC_ARG_WITH(xauth,
3355 [ --with-xauth=PATH Specify path to xauth program ],
3356 [
6cf0200f 3357 if test -n "$withval" && test "x$withval" != "xno" && \
3358 test "x${withval}" != "xyes"; then
cbd7492e 3359 xauth_path=$withval
a0391976 3360 fi
3361 ],
3362 [
2bf42e4a 3363 TestPath="$PATH"
3364 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
3365 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
3366 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
3367 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
3368 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
e5fe9a1f 3369 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
a0391976 3370 xauth_path="/usr/openwin/bin/xauth"
3371 fi
3372 ]
3373)
3374
65a4b4af 3375STRIP_OPT=-s
3376AC_ARG_ENABLE(strip,
3377 [ --disable-strip Disable calling strip(1) on install],
3378 [
3379 if test "x$enableval" = "xno" ; then
3380 STRIP_OPT=
3381 fi
3382 ]
3383)
3384AC_SUBST(STRIP_OPT)
3385
b3ec54b4 3386if test -z "$xauth_path" ; then
3387 XAUTH_PATH="undefined"
3388 AC_SUBST(XAUTH_PATH)
3389else
3466e002 3390 AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path",
3391 [Define if xauth is found in your path])
b3ec54b4 3392 XAUTH_PATH=$xauth_path
3393 AC_SUBST(XAUTH_PATH)
a0391976 3394fi
a0391976 3395
3396# Check for mail directory (last resort if we cannot get it from headers)
3397if test ! -z "$MAIL" ; then
3398 maildir=`dirname $MAIL`
3466e002 3399 AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir",
3400 [Set this to your mail directory if you don't have maillock.h])
a0391976 3401fi
3402
479cece8 3403if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
1a01a50c 3404 AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
3405 disable_ptmx_check=yes
3406fi
a0391976 3407if test -z "$no_dev_ptmx" ; then
6e879cb4 3408 if test "x$disable_ptmx_check" != "xyes" ; then
aff51935 3409 AC_CHECK_FILE("/dev/ptmx",
6e879cb4 3410 [
3466e002 3411 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX, 1,
3412 [Define if you have /dev/ptmx])
6e879cb4 3413 have_dev_ptmx=1
3414 ]
3415 )
3416 fi
3276571c 3417fi
1a01a50c 3418
479cece8 3419if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
1a01a50c 3420 AC_CHECK_FILE("/dev/ptc",
3421 [
3466e002 3422 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC, 1,
3423 [Define if you have /dev/ptc])
1a01a50c 3424 have_dev_ptc=1
3425 ]
3426 )
3427else
3428 AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
3429fi
3276571c 3430
a0391976 3431# Options from here on. Some of these are preset by platform above
fdf6b7aa 3432AC_ARG_WITH(mantype,
5d97cfbf 3433 [ --with-mantype=man|cat|doc Set man page type],
c54a6257 3434 [
5d97cfbf 3435 case "$withval" in
3436 man|cat|doc)
3437 MANTYPE=$withval
3438 ;;
3439 *)
3440 AC_MSG_ERROR(invalid man type: $withval)
3441 ;;
3442 esac
c54a6257 3443 ]
3444)
e0c4d3ac 3445if test -z "$MANTYPE"; then
2bf42e4a 3446 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
3447 AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
e0c4d3ac 3448 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
3449 MANTYPE=doc
3450 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
3451 MANTYPE=man
3452 else
3453 MANTYPE=cat
3454 fi
3455fi
c54a6257 3456AC_SUBST(MANTYPE)
e0c4d3ac 3457if test "$MANTYPE" = "doc"; then
3458 mansubdir=man;
3459else
3460 mansubdir=$MANTYPE;
3461fi
3462AC_SUBST(mansubdir)
0bc5b6fb 3463
a0391976 3464# Check whether to enable MD5 passwords
aff51935 3465MD5_MSG="no"
2ddcfdf3 3466AC_ARG_WITH(md5-passwords,
caf3bc51 3467 [ --with-md5-passwords Enable use of MD5 passwords],
0bc5b6fb 3468 [
bcf36c78 3469 if test "x$withval" != "xno" ; then
3466e002 3470 AC_DEFINE(HAVE_MD5_PASSWORDS, 1,
3471 [Define if you want to allow MD5 passwords])
aff51935 3472 MD5_MSG="yes"
0bc5b6fb 3473 fi
3474 ]
caf3bc51 3475)
3476
a0391976 3477# Whether to disable shadow password support
a7effaac 3478AC_ARG_WITH(shadow,
3479 [ --without-shadow Disable shadow password support],
3480 [
82f4e93d 3481 if test "x$withval" = "xno" ; then
a7effaac 3482 AC_DEFINE(DISABLE_SHADOW)
4cb5ffa0 3483 disable_shadow=yes
a7effaac 3484 fi
3485 ]
3486)
3487
4cb5ffa0 3488if test -z "$disable_shadow" ; then
3489 AC_MSG_CHECKING([if the systems has expire shadow information])
3490 AC_TRY_COMPILE(
3491 [
3492#include <sys/types.h>
3493#include <shadow.h>
3494 struct spwd sp;
3495 ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
3496 [ sp_expire_available=yes ], []
3497 )
3498
3499 if test "x$sp_expire_available" = "xyes" ; then
3500 AC_MSG_RESULT(yes)
3466e002 3501 AC_DEFINE(HAS_SHADOW_EXPIRE, 1,
3502 [Define if you want to use shadow password expire field])
4cb5ffa0 3503 else
3504 AC_MSG_RESULT(no)
3505 fi
3506fi
3507
a0391976 3508# Use ip address instead of hostname in $DISPLAY
44839801 3509if test ! -z "$IPADDR_IN_DISPLAY" ; then
3510 DISPLAY_HACK_MSG="yes"
3466e002 3511 AC_DEFINE(IPADDR_IN_DISPLAY, 1,
3512 [Define if you need to use IP address
3513 instead of hostname in $DISPLAY])
44839801 3514else
aff51935 3515 DISPLAY_HACK_MSG="no"
44839801 3516 AC_ARG_WITH(ipaddr-display,
3517 [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY],
3518 [
82f4e93d 3519 if test "x$withval" != "xno" ; then
44839801 3520 AC_DEFINE(IPADDR_IN_DISPLAY)
aff51935 3521 DISPLAY_HACK_MSG="yes"
44839801 3522 fi
3523 ]
3524 )
3525fi
a7effaac 3526
95b99395 3527# check for /etc/default/login and use it if present.
daa41e62 3528AC_ARG_ENABLE(etc-default-login,
6ff3d0dc 3529 [ --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
694d0cef 3530 [ if test "x$enableval" = "xno"; then
3531 AC_MSG_NOTICE([/etc/default/login handling disabled])
3532 etc_default_login=no
3533 else
3534 etc_default_login=yes
3535 fi ],
b0e7249f 3536 [ if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
3537 then
3538 AC_MSG_WARN([cross compiling: not checking /etc/default/login])
3539 etc_default_login=no
3540 else
3541 etc_default_login=yes
3542 fi ]
694d0cef 3543)
95b99395 3544
694d0cef 3545if test "x$etc_default_login" != "xno"; then
3546 AC_CHECK_FILE("/etc/default/login",
3547 [ external_path_file=/etc/default/login ])
b0e7249f 3548 if test "x$external_path_file" = "x/etc/default/login"; then
3466e002 3549 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN, 1,
3550 [Define if your system has /etc/default/login])
1a01a50c 3551 fi
694d0cef 3552fi
95b99395 3553
8d184c09 3554dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
4b492aab 3555if test $ac_cv_func_login_getcapbool = "yes" && \
3556 test $ac_cv_header_login_cap_h = "yes" ; then
95b99395 3557 external_path_file=/etc/login.conf
8d184c09 3558fi
95b99395 3559
a0391976 3560# Whether to mess with the default path
aff51935 3561SERVER_PATH_MSG="(default)"
c43d69a9 3562AC_ARG_WITH(default-path,
75817f90 3563 [ --with-default-path= Specify default \$PATH environment for server],
cb807f40 3564 [
95b99395 3565 if test "x$external_path_file" = "x/etc/login.conf" ; then
8d184c09 3566 AC_MSG_WARN([
3567--with-default-path=PATH has no effect on this system.
3568Edit /etc/login.conf instead.])
82f4e93d 3569 elif test "x$withval" != "xno" ; then
89bbd457 3570 if test ! -z "$external_path_file" ; then
95b99395 3571 AC_MSG_WARN([
3572--with-default-path=PATH will only be used if PATH is not defined in
3573$external_path_file .])
3574 fi
b2d818e6 3575 user_path="$withval"
aff51935 3576 SERVER_PATH_MSG="$withval"
cb807f40 3577 fi
b2d818e6 3578 ],
95b99395 3579 [ if test "x$external_path_file" = "x/etc/login.conf" ; then
3580 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
8d184c09 3581 else
89bbd457 3582 if test ! -z "$external_path_file" ; then
95b99395 3583 AC_MSG_WARN([
3584If PATH is defined in $external_path_file, ensure the path to scp is included,
3585otherwise scp will not work.])
3586 fi
b0e7249f 3587 AC_RUN_IFELSE(
3588 [AC_LANG_SOURCE([[
b2d818e6 3589/* find out what STDPATH is */
3590#include <stdio.h>
b2d818e6 3591#ifdef HAVE_PATHS_H
3592# include <paths.h>
3593#endif
3594#ifndef _PATH_STDPATH
d9a4e55b 3595# ifdef _PATH_USERPATH /* Irix */
3596# define _PATH_STDPATH _PATH_USERPATH
3597# else
3598# define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
3599# endif
b2d818e6 3600#endif
3601#include <sys/types.h>
3602#include <sys/stat.h>
3603#include <fcntl.h>
3604#define DATA "conftest.stdpath"
3605
3606main()
3607{
3608 FILE *fd;
3609 int rc;
82f4e93d 3610
b2d818e6 3611 fd = fopen(DATA,"w");
3612 if(fd == NULL)
3613 exit(1);
82f4e93d 3614
b2d818e6 3615 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
3616 exit(1);
3617
3618 exit(0);
3619}
b0e7249f 3620 ]])],
3621 [ user_path=`cat conftest.stdpath` ],
b2d818e6 3622 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
3623 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
3624 )
3625# make sure $bindir is in USER_PATH so scp will work
3626 t_bindir=`eval echo ${bindir}`
3627 case $t_bindir in
3628 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
3629 esac
3630 case $t_bindir in
3631 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
3632 esac
3633 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
3634 if test $? -ne 0 ; then
3635 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
3636 if test $? -ne 0 ; then
3637 user_path=$user_path:$t_bindir
3638 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
3639 fi
3640 fi
8d184c09 3641 fi ]
cb807f40 3642)
95b99395 3643if test "x$external_path_file" != "x/etc/login.conf" ; then
3466e002 3644 AC_DEFINE_UNQUOTED(USER_PATH, "$user_path", [Specify default $PATH])
8d184c09 3645 AC_SUBST(user_path)
3646fi
cb807f40 3647
06617857 3648# Set superuser path separately to user path
06617857 3649AC_ARG_WITH(superuser-path,
3650 [ --with-superuser-path= Specify different path for super-user],
3651 [
6cf0200f 3652 if test -n "$withval" && test "x$withval" != "xno" && \
3653 test "x${withval}" != "xyes"; then
3466e002 3654 AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval",
3655 [Define if you want a different $PATH
3656 for the superuser])
06617857 3657 superuser_path=$withval
3658 fi
3659 ]
3660)
3661
3662
58d100bf 3663AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
aff51935 3664IPV4_IN6_HACK_MSG="no"
80faa19f 3665AC_ARG_WITH(4in6,
3666 [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses],
3667 [
3668 if test "x$withval" != "xno" ; then
3669 AC_MSG_RESULT(yes)
3466e002 3670 AC_DEFINE(IPV4_IN_IPV6, 1,
3671 [Detect IPv4 in IPv6 mapped addresses
3672 and treat as IPv4])
aff51935 3673 IPV4_IN6_HACK_MSG="yes"
80faa19f 3674 else
3675 AC_MSG_RESULT(no)
3676 fi
3677 ],[
3678 if test "x$inet6_default_4in6" = "xyes"; then
3679 AC_MSG_RESULT([yes (default)])
3680 AC_DEFINE(IPV4_IN_IPV6)
aff51935 3681 IPV4_IN6_HACK_MSG="yes"
80faa19f 3682 else
3683 AC_MSG_RESULT([no (default)])
3684 fi
3685 ]
3686)
3687
af774732 3688# Whether to enable BSD auth support
f1b0ecc3 3689BSD_AUTH_MSG=no
af774732 3690AC_ARG_WITH(bsd-auth,
3691 [ --with-bsd-auth Enable BSD auth support],
3692 [
82f4e93d 3693 if test "x$withval" != "xno" ; then
3466e002 3694 AC_DEFINE(BSD_AUTH, 1,
3695 [Define if you have BSD auth support])
f1b0ecc3 3696 BSD_AUTH_MSG=yes
af774732 3697 fi
3698 ]
3699)
3700
a0391976 3701# Where to place sshd.pid
19d9ac2a 3702piddir=/var/run
81dadca3 3703# make sure the directory exists
82f4e93d 3704if test ! -d $piddir ; then
81dadca3 3705 piddir=`eval echo ${sysconfdir}`
3706 case $piddir in
aff51935 3707 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
81dadca3 3708 esac
3709fi
3710
47e45e44 3711AC_ARG_WITH(pid-dir,
3712 [ --with-pid-dir=PATH Specify location of ssh.pid file],
3713 [
6cf0200f 3714 if test -n "$withval" && test "x$withval" != "xno" && \
3715 test "x${withval}" != "xyes"; then
19d9ac2a 3716 piddir=$withval
82f4e93d 3717 if test ! -d $piddir ; then
81dadca3 3718 AC_MSG_WARN([** no $piddir directory on this system **])
3719 fi
47e45e44 3720 fi
3721 ]
3722)
b7a87eea 3723
3466e002 3724AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir", [Specify location of ssh.pid])
19d9ac2a 3725AC_SUBST(piddir)
47e45e44 3726
1d7b9b20 3727dnl allow user to disable some login recording features
3728AC_ARG_ENABLE(lastlog,
bfd550a2 3729 [ --disable-lastlog disable use of lastlog even if detected [no]],
ddb154b3 3730 [
3731 if test "x$enableval" = "xno" ; then
3732 AC_DEFINE(DISABLE_LASTLOG)
3733 fi
3734 ]
1d7b9b20 3735)
3736AC_ARG_ENABLE(utmp,
bfd550a2 3737 [ --disable-utmp disable use of utmp even if detected [no]],
ddb154b3 3738 [
3739 if test "x$enableval" = "xno" ; then
3740 AC_DEFINE(DISABLE_UTMP)
3741 fi
3742 ]
1d7b9b20 3743)
3744AC_ARG_ENABLE(utmpx,
bfd550a2 3745 [ --disable-utmpx disable use of utmpx even if detected [no]],
ddb154b3 3746 [
3747 if test "x$enableval" = "xno" ; then
3466e002 3748 AC_DEFINE(DISABLE_UTMPX, 1,
3749 [Define if you don't want to use utmpx])
ddb154b3 3750 fi
3751 ]
1d7b9b20 3752)
3753AC_ARG_ENABLE(wtmp,
bfd550a2 3754 [ --disable-wtmp disable use of wtmp even if detected [no]],
ddb154b3 3755 [
3756 if test "x$enableval" = "xno" ; then
3757 AC_DEFINE(DISABLE_WTMP)
3758 fi
3759 ]
1d7b9b20 3760)
3761AC_ARG_ENABLE(wtmpx,
bfd550a2 3762 [ --disable-wtmpx disable use of wtmpx even if detected [no]],
ddb154b3 3763 [
3764 if test "x$enableval" = "xno" ; then
3466e002 3765 AC_DEFINE(DISABLE_WTMPX, 1,
3766 [Define if you don't want to use wtmpx])
ddb154b3 3767 fi
3768 ]
1d7b9b20 3769)
3770AC_ARG_ENABLE(libutil,
bfd550a2 3771 [ --disable-libutil disable use of libutil (login() etc.) [no]],
ddb154b3 3772 [
3773 if test "x$enableval" = "xno" ; then
3774 AC_DEFINE(DISABLE_LOGIN)
3775 fi
3776 ]
1d7b9b20 3777)
3778AC_ARG_ENABLE(pututline,
bfd550a2 3779 [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]],
ddb154b3 3780 [
3781 if test "x$enableval" = "xno" ; then
3466e002 3782 AC_DEFINE(DISABLE_PUTUTLINE, 1,
3783 [Define if you don't want to use pututline()
3784 etc. to write [uw]tmp])
ddb154b3 3785 fi
3786 ]
1d7b9b20 3787)
3788AC_ARG_ENABLE(pututxline,
bfd550a2 3789 [ --disable-pututxline disable use of pututxline() etc. ([uw]tmpx) [no]],
ddb154b3 3790 [
3791 if test "x$enableval" = "xno" ; then
3466e002 3792 AC_DEFINE(DISABLE_PUTUTXLINE, 1,
3793 [Define if you don't want to use pututxline()
3794 etc. to write [uw]tmpx])
ddb154b3 3795 fi
3796 ]
1d7b9b20 3797)
3798AC_ARG_WITH(lastlog,
bfd550a2 3799 [ --with-lastlog=FILE|DIR specify lastlog location [common locations]],
8c89dd2b 3800 [
82f4e93d 3801 if test "x$withval" = "xno" ; then
8c89dd2b 3802 AC_DEFINE(DISABLE_LASTLOG)
6cf0200f 3803 elif test -n "$withval" && test "x${withval}" != "xyes"; then
8c89dd2b 3804 conf_lastlog_location=$withval
3805 fi
3806 ]
3807)
1d7b9b20 3808
3809dnl lastlog, [uw]tmpx? detection
3810dnl NOTE: set the paths in the platform section to avoid the
3811dnl need for command-line parameters
3812dnl lastlog and [uw]tmp are subject to a file search if all else fails
3813
3814dnl lastlog detection
3815dnl NOTE: the code itself will detect if lastlog is a directory
3816AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
3817AC_TRY_COMPILE([
3818#include <sys/types.h>
3819#include <utmp.h>
3820#ifdef HAVE_LASTLOG_H
3821# include <lastlog.h>
3822#endif
d7c0f3d5 3823#ifdef HAVE_PATHS_H
1d7b9b20 3824# include <paths.h>
41cb4569 3825#endif
3826#ifdef HAVE_LOGIN_H
3827# include <login.h>
1d7b9b20 3828#endif
3829 ],
3830 [ char *lastlog = LASTLOG_FILE; ],
3831 [ AC_MSG_RESULT(yes) ],
d7c0f3d5 3832 [
3833 AC_MSG_RESULT(no)
3834 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
3835 AC_TRY_COMPILE([
3836#include <sys/types.h>
3837#include <utmp.h>
3838#ifdef HAVE_LASTLOG_H
3839# include <lastlog.h>
3840#endif
3841#ifdef HAVE_PATHS_H
3842# include <paths.h>
3843#endif
3844 ],
3845 [ char *lastlog = _PATH_LASTLOG; ],
3846 [ AC_MSG_RESULT(yes) ],
3847 [
f282b668 3848 AC_MSG_RESULT(no)
d7c0f3d5 3849 system_lastlog_path=no
3850 ])
3851 ]
1d7b9b20 3852)
d7c0f3d5 3853
1d7b9b20 3854if test -z "$conf_lastlog_location"; then
3855 if test x"$system_lastlog_path" = x"no" ; then
3856 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
e5fe9a1f 3857 if (test -d "$f" || test -f "$f") ; then
1d7b9b20 3858 conf_lastlog_location=$f
3859 fi
3860 done
3861 if test -z "$conf_lastlog_location"; then
f8119cef 3862 AC_MSG_WARN([** Cannot find lastlog **])
3863 dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
1d7b9b20 3864 fi
3865 fi
3866fi
3867
3868if test -n "$conf_lastlog_location"; then
3466e002 3869 AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location",
3870 [Define if you want to specify the path to your lastlog file])
82f4e93d 3871fi
1d7b9b20 3872
3873dnl utmp detection
3874AC_MSG_CHECKING([if your system defines UTMP_FILE])
3875AC_TRY_COMPILE([
3876#include <sys/types.h>
3877#include <utmp.h>
d7c0f3d5 3878#ifdef HAVE_PATHS_H
1d7b9b20 3879# include <paths.h>
3880#endif
3881 ],
3882 [ char *utmp = UTMP_FILE; ],
3883 [ AC_MSG_RESULT(yes) ],
3884 [ AC_MSG_RESULT(no)
3885 system_utmp_path=no ]
3886)
3887if test -z "$conf_utmp_location"; then
3888 if test x"$system_utmp_path" = x"no" ; then
3889 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3890 if test -f $f ; then
3891 conf_utmp_location=$f
3892 fi
3893 done
3894 if test -z "$conf_utmp_location"; then
3895 AC_DEFINE(DISABLE_UTMP)
3896 fi
3897 fi
3898fi
3899if test -n "$conf_utmp_location"; then
3466e002 3900 AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location",
3901 [Define if you want to specify the path to your utmp file])
82f4e93d 3902fi
1d7b9b20 3903
3904dnl wtmp detection
3905AC_MSG_CHECKING([if your system defines WTMP_FILE])
3906AC_TRY_COMPILE([
3907#include <sys/types.h>
3908#include <utmp.h>
d7c0f3d5 3909#ifdef HAVE_PATHS_H
1d7b9b20 3910# include <paths.h>
3911#endif
3912 ],
3913 [ char *wtmp = WTMP_FILE; ],
3914 [ AC_MSG_RESULT(yes) ],
3915 [ AC_MSG_RESULT(no)
3916 system_wtmp_path=no ]
3917)
3918if test -z "$conf_wtmp_location"; then
3919 if test x"$system_wtmp_path" = x"no" ; then
3920 for f in /usr/adm/wtmp /var/log/wtmp; do
3921 if test -f $f ; then
3922 conf_wtmp_location=$f
3923 fi
3924 done
3925 if test -z "$conf_wtmp_location"; then
3926 AC_DEFINE(DISABLE_WTMP)
3927 fi
3928 fi
3929fi
3930if test -n "$conf_wtmp_location"; then
3466e002 3931 AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location",
3932 [Define if you want to specify the path to your wtmp file])
82f4e93d 3933fi
1d7b9b20 3934
3935
3936dnl utmpx detection - I don't know any system so perverse as to require
3937dnl utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3938dnl there, though.
3939AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3940AC_TRY_COMPILE([
3941#include <sys/types.h>
3942#include <utmp.h>
3943#ifdef HAVE_UTMPX_H
3944#include <utmpx.h>
3945#endif
d7c0f3d5 3946#ifdef HAVE_PATHS_H
1d7b9b20 3947# include <paths.h>
3948#endif
3949 ],
3950 [ char *utmpx = UTMPX_FILE; ],
3951 [ AC_MSG_RESULT(yes) ],
3952 [ AC_MSG_RESULT(no)
3953 system_utmpx_path=no ]
3954)
3955if test -z "$conf_utmpx_location"; then
3956 if test x"$system_utmpx_path" = x"no" ; then
3957 AC_DEFINE(DISABLE_UTMPX)
3958 fi
3959else
3466e002 3960 AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location",
3961 [Define if you want to specify the path to your utmpx file])
82f4e93d 3962fi
1d7b9b20 3963
3964dnl wtmpx detection
3965AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3966AC_TRY_COMPILE([
3967#include <sys/types.h>
3968#include <utmp.h>
3969#ifdef HAVE_UTMPX_H
3970#include <utmpx.h>
3971#endif
d7c0f3d5 3972#ifdef HAVE_PATHS_H
1d7b9b20 3973# include <paths.h>
3974#endif
3975 ],
3976 [ char *wtmpx = WTMPX_FILE; ],
3977 [ AC_MSG_RESULT(yes) ],
3978 [ AC_MSG_RESULT(no)
3979 system_wtmpx_path=no ]
3980)
3981if test -z "$conf_wtmpx_location"; then
3982 if test x"$system_wtmpx_path" = x"no" ; then
3983 AC_DEFINE(DISABLE_WTMPX)
3984 fi
3985else
3466e002 3986 AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location",
3987 [Define if you want to specify the path to your wtmpx file])
82f4e93d 3988fi
1d7b9b20 3989
b7a87eea 3990
bd499f9e 3991if test ! -z "$blibpath" ; then
68ece370 3992 LDFLAGS="$LDFLAGS $blibflags$blibpath"
3993 AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
bd499f9e 3994fi
3995
ed89c848 3996dnl Adding -Werror to CFLAGS early prevents configure tests from running.
3997dnl Add now.
3998CFLAGS="$CFLAGS $werror_flags"
3999
3c62e7eb 4000AC_EXEEXT
29eadd7c 4001AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openssh.xml \
4002 openbsd-compat/Makefile openbsd-compat/regress/Makefile \
4003 scard/Makefile ssh_prng_cmds survey.sh])
98a7c37b 4004AC_OUTPUT
d3083fbd 4005
cbd7492e 4006# Print summary of options
4007
cbd7492e 4008# Someone please show me a better way :)
4009A=`eval echo ${prefix}` ; A=`eval echo ${A}`
4010B=`eval echo ${bindir}` ; B=`eval echo ${B}`
4011C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
4012D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
f5665f6f 4013E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
e0c4d3ac 4014F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
cbd7492e 4015G=`eval echo ${piddir}` ; G=`eval echo ${G}`
ecac8ee5 4016H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
4017I=`eval echo ${user_path}` ; I=`eval echo ${I}`
4018J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
cbd7492e 4019
4020echo ""
26de7942 4021echo "OpenSSH has been configured with the following options:"
ecac8ee5 4022echo " User binaries: $B"
4023echo " System binaries: $C"
4024echo " Configuration files: $D"
4025echo " Askpass program: $E"
4026echo " Manual pages: $F"
4027echo " PID file: $G"
4028echo " Privilege separation chroot path: $H"
95b99395 4029if test "x$external_path_file" = "x/etc/login.conf" ; then
4030echo " At runtime, sshd will use the path defined in $external_path_file"
4031echo " Make sure the path to scp is present, otherwise scp will not work"
8d184c09 4032else
ecac8ee5 4033echo " sshd default user PATH: $I"
89bbd457 4034 if test ! -z "$external_path_file"; then
95b99395 4035echo " (If PATH is set in $external_path_file it will be used instead. If"
4036echo " used, ensure the path to scp is present, otherwise scp will not work.)"
4037 fi
8d184c09 4038fi
06617857 4039if test ! -z "$superuser_path" ; then
ecac8ee5 4040echo " sshd superuser user PATH: $J"
4041fi
4042echo " Manpage format: $MANTYPE"
3e05e934 4043echo " PAM support: $PAM_MSG"
5b84789f 4044echo " OSF SIA support: $SIA_MSG"
ecac8ee5 4045echo " KerberosV support: $KRB5_MSG"
ef4d1846 4046echo " SELinux support: $SELINUX_MSG"
ecac8ee5 4047echo " Smartcard support: $SCARD_MSG"
ecac8ee5 4048echo " S/KEY support: $SKEY_MSG"
4049echo " TCP Wrappers support: $TCPW_MSG"
4050echo " MD5 password support: $MD5_MSG"
59031773 4051echo " libedit support: $LIBEDIT_MSG"
5b84789f 4052echo " Solaris process contract support: $SPC_MSG"
3deb1408 4053echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
ecac8ee5 4054echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
4055echo " BSD Auth support: $BSD_AUTH_MSG"
4056echo " Random number source: $RAND_MSG"
f1b0ecc3 4057if test ! -z "$USE_RAND_HELPER" ; then
ecac8ee5 4058echo " ssh-rand-helper collects from: $RAND_HELPER_MSG"
af774732 4059fi
4060
cbd7492e 4061echo ""
4062
0c2fb82f 4063echo " Host: ${host}"
4064echo " Compiler: ${CC}"
4065echo " Compiler flags: ${CFLAGS}"
4066echo "Preprocessor flags: ${CPPFLAGS}"
4067echo " Linker flags: ${LDFLAGS}"
e54defb4 4068echo " Libraries: ${LIBS}"
4069if test ! -z "${SSHDLIBS}"; then
4070echo " +for sshd: ${SSHDLIBS}"
4071fi
cbd7492e 4072
4073echo ""
4074
9cefe228 4075if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
b3146b5f 4076 echo "SVR4 style packages are supported with \"make package\""
4077 echo ""
9cefe228 4078fi
4079
adeebd37 4080if test "x$PAM_MSG" = "xyes" ; then
f1b0ecc3 4081 echo "PAM is enabled. You may need to install a PAM control file "
4082 echo "for sshd, otherwise password authentication may fail. "
aff51935 4083 echo "Example PAM control files can be found in the contrib/ "
f1b0ecc3 4084 echo "subdirectory"
adeebd37 4085 echo ""
4086fi
4087
f1b0ecc3 4088if test ! -z "$RAND_HELPER_CMDHASH" ; then
4089 echo "WARNING: you are using the builtin random number collection "
4090 echo "service. Please read WARNING.RNG and request that your OS "
4091 echo "vendor includes kernel-based random number collection in "
4092 echo "future versions of your OS."
2c523de9 4093 echo ""
4094fi
af774732 4095
2f6f9cff 4096if test ! -z "$NO_PEERCHECK" ; then
1961d660 4097 echo "WARNING: the operating system that you are using does not"
4098 echo "appear to support getpeereid(), getpeerucred() or the"
4099 echo "SO_PEERCRED getsockopt() option. These facilities are used to"
4100 echo "enforce security checks to prevent unauthorised connections to"
4101 echo "ssh-agent. Their absence increases the risk that a malicious"
4102 echo "user can connect to your agent."
2f6f9cff 4103 echo ""
4104fi
4105
7b578f7d 4106if test "$AUDIT_MODULE" = "bsm" ; then
4107 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
4108 echo "See the Solaris section in README.platform for details."
4109fi
git-cvsimport mirror of OpenSSH
This page took 1.259974 seconds and 5 git commands to generate.