]> andersk Git - openssh.git/blame - configure.ac
andersk / openssh.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
- (djm) [defines.h] Use our realpath if we have to define PATH_MAX, spotted by
[openssh.git] / configure.ac
CommitLineData
eb5d7ff6 1# $Id$
2b983b95 2#
3# Copyright (c) 1999-2004 Damien Miller
4#
5# Permission to use, copy, modify, and distribute this software for any
6# purpose with or without fee is hereby granted, provided that the above
7# copyright notice and this permission notice appear in all copies.
8#
9# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
0b202697 16
bc6f919d 17AC_INIT(OpenSSH, Portable)
98a7c37b 18AC_CONFIG_SRCDIR([ssh.c])
5881cd60 19
20AC_CONFIG_HEADER(config.h)
b14b2ae7 21AC_PROG_CC
a7effaac 22AC_CANONICAL_HOST
cf0c5df5 23AC_C_BIGENDIAN
5881cd60 24
a0391976 25# Checks for programs.
4bbf95fa 26AC_PROG_AWK
4cca272e 27AC_PROG_CPP
5881cd60 28AC_PROG_RANLIB
cf8dd513 29AC_PROG_INSTALL
bee0a37e 30AC_PATH_PROG(AR, ar)
ddd8c95b 31AC_PATH_PROG(CAT, cat)
32AC_PATH_PROG(KILL, kill)
13dd877b 33AC_PATH_PROGS(PERL, perl5 perl)
c3690df3 34AC_PATH_PROG(SED, sed)
a0f84251 35AC_SUBST(PERL)
ad85db64 36AC_PATH_PROG(ENT, ent)
37AC_SUBST(ENT)
6958bd37 38AC_PATH_PROG(TEST_MINUS_S_SH, bash)
39AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
40AC_PATH_PROG(TEST_MINUS_S_SH, sh)
6193497b 41AC_PATH_PROG(SH, sh)
a3245b92 42AC_SUBST(TEST_SHELL,sh)
f498ed15 43
9cefe228 44dnl for buildpkg.sh
45AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
46 [/usr/sbin${PATH_SEPARATOR}/etc])
47AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
48 [/usr/sbin${PATH_SEPARATOR}/etc])
49AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
50
948fd8b9 51# System features
52AC_SYS_LARGEFILE
53
c193d002 54if test -z "$AR" ; then
55 AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
56fi
57
2e73a022 58# Use LOGIN_PROGRAM from environment if possible
59if test ! -z "$LOGIN_PROGRAM" ; then
60 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM")
61else
62 # Search for login
63 AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
64 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
65 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
66 fi
67fi
68
37656beb 69AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
70if test ! -z "$PATH_PASSWD_PROG" ; then
71 AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG")
72fi
73
d423d822 74if test -z "$LD" ; then
75 LD=$CC
76fi
77AC_SUBST(LD)
82f4e93d 78
d423d822 79AC_C_INLINE
aff51935 80if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
5ed2bb5b 81 CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wno-uninitialized"
8a3ff1aa 82
83 # Check for -std=gnu99 support (needed for LLONG_MIN/MAX on Linux)
84 saved_CFLAGS="$CFLAGS"
85 CFLAGS="$CFLAGS -std=gnu99"
86 AC_MSG_CHECKING(whether cc accepts -std=gnu99 option)
87 AC_TRY_COMPILE([], [return(0);], [AC_MSG_RESULT(yes)],
88 [AC_MSG_RESULT(no)
89 CFLAGS="$saved_CFLAGS"],
90 )
d423d822 91fi
92
e6354014 93AC_ARG_WITH(rpath,
94 [ --without-rpath Disable auto-added -R linker paths],
95 [
82f4e93d 96 if test "x$withval" = "xno" ; then
e6354014 97 need_dash_r=""
98 fi
99 if test "x$withval" = "xyes" ; then
100 need_dash_r=1
101 fi
102 ]
103)
104
a0391976 105# Check for some target-specific stuff
a7effaac 106case "$host" in
9d6b1b96 107*-*-aix*)
aff51935 108 AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
68ece370 109 if (test -z "$blibpath"); then
0a15d73b 110 blibpath="/usr/lib:/lib"
68ece370 111 fi
112 saved_LDFLAGS="$LDFLAGS"
113 for tryflags in -blibpath: -Wl,-blibpath: -Wl,-rpath, ;do
114 if (test -z "$blibflags"); then
115 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
116 AC_TRY_LINK([], [], [blibflags=$tryflags])
117 fi
118 done
119 if (test -z "$blibflags"); then
120 AC_MSG_RESULT(not found)
121 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
122 else
123 AC_MSG_RESULT($blibflags)
bd499f9e 124 fi
68ece370 125 LDFLAGS="$saved_LDFLAGS"
e351e493 126 dnl Check for authenticate. Might be in libs.a on older AIXes
127 AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE)],
0764e748 128 [AC_CHECK_LIB(s,authenticate,
e351e493 129 [ AC_DEFINE(WITH_AIXAUTHENTICATE)
0764e748 130 LIBS="$LIBS -ls"
131 ])
132 ])
ba603e06 133 dnl Check for various auth function declarations in headers.
c85ed8e2 134 AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
72ad335d 135 passwdexpired, setauthdb], , , [#include <usersec.h>])
e351e493 136 dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
ba603e06 137 AC_CHECK_DECLS(loginfailed,
e351e493 138 [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
139 AC_TRY_COMPILE(
f58c0e01 140 [#include <usersec.h>],
e351e493 141 [(void)loginfailed("user","host","tty",0);],
142 [AC_MSG_RESULT(yes)
143 AC_DEFINE(AIX_LOGINFAILED_4ARG)],
f58c0e01 144 [AC_MSG_RESULT(no)]
e351e493 145 )],
146 [],
147 [#include <usersec.h>]
148 )
2aa3a16c 149 AC_CHECK_FUNCS(setauthdb)
5ccf88cb 150 check_for_aix_broken_getaddrinfo=1
1352689f 151 AC_DEFINE(BROKEN_REALPATH)
3b8dff69 152 AC_DEFINE(SETEUID_BREAKS_SETUID)
153 AC_DEFINE(BROKEN_SETREUID)
154 AC_DEFINE(BROKEN_SETREGID)
a3cef3ca 155 dnl AIX handles lastlog as part of its login message
156 AC_DEFINE(DISABLE_LASTLOG)
58177c0a 157 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3a2b2b44 158 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
9d6b1b96 159 ;;
3c62e7eb 160*-*-cygwin*)
a52997bd 161 check_for_libcrypt_later=1
ffb8d130 162 LIBS="$LIBS /usr/lib/textmode.o"
3c62e7eb 163 AC_DEFINE(HAVE_CYGWIN)
7043a38d 164 AC_DEFINE(USE_PIPES)
3c62e7eb 165 AC_DEFINE(DISABLE_SHADOW)
3c62e7eb 166 AC_DEFINE(IP_TOS_IS_BROKEN)
3d114925 167 AC_DEFINE(NO_X11_UNIX_SOCKETS)
e6f15ed1 168 AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT)
94d8258b 169 AC_DEFINE(DISABLE_FD_PASSING)
3c62e7eb 170 ;;
d6fdb079 171*-*-dgux*)
172 AC_DEFINE(IP_TOS_IS_BROKEN)
0c6a72a5 173 AC_DEFINE(SETEUID_BREAKS_SETUID)
174 AC_DEFINE(BROKEN_SETREUID)
175 AC_DEFINE(BROKEN_SETREGID)
d6fdb079 176 ;;
39c98ef7 177*-*-darwin*)
33e2e066 178 AC_MSG_CHECKING(if we have working getaddrinfo)
179 AC_TRY_RUN([#include <mach-o/dyld.h>
180main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
181 exit(0);
182 else
183 exit(1);
184}], [AC_MSG_RESULT(working)],
185 [AC_MSG_RESULT(buggy)
186 AC_DEFINE(BROKEN_GETADDRINFO)],
b27e573d 187 [AC_MSG_RESULT(assume it is working)])
635e0c42 188 AC_DEFINE(SETEUID_BREAKS_SETUID)
189 AC_DEFINE(BROKEN_SETREUID)
190 AC_DEFINE(BROKEN_SETREGID)
ff620033 191 AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1)
39c98ef7 192 ;;
6e879cb4 193*-*-hpux10.26)
194 if test -z "$GCC"; then
195 CFLAGS="$CFLAGS -Ae"
196 fi
197 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
198 IPADDR_IN_DISPLAY=yes
199 AC_DEFINE(HAVE_SECUREWARE)
200 AC_DEFINE(USE_PIPES)
201 AC_DEFINE(LOGIN_NO_ENDOPT)
202 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3e6e3da0 203 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
3a2b2b44 204 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
f75ca46d 205 LIBS="$LIBS -lsec -lsecpw"
206 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
6e879cb4 207 disable_ptmx_check=yes
208 ;;
a7effaac 209*-*-hpux10*)
210 if test -z "$GCC"; then
fc1e8bf4 211 CFLAGS="$CFLAGS -Ae"
a7effaac 212 fi
28564873 213 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
44839801 214 IPADDR_IN_DISPLAY=yes
137d7b6c 215 AC_DEFINE(USE_PIPES)
a2572aa7 216 AC_DEFINE(LOGIN_NO_ENDOPT)
217 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3e6e3da0 218 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
3a2b2b44 219 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
f75ca46d 220 LIBS="$LIBS -lsec"
221 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
a7effaac 222 ;;
2b763e31 223*-*-hpux11*)
b8fea62d 224 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
44839801 225 IPADDR_IN_DISPLAY=yes
adeebd37 226 AC_DEFINE(PAM_SUN_CODEBASE)
2b10f47a 227 AC_DEFINE(USE_PIPES)
a2572aa7 228 AC_DEFINE(LOGIN_NO_ENDOPT)
229 AC_DEFINE(LOGIN_NEEDS_UTMPX)
764d4113 230 AC_DEFINE(DISABLE_UTMP)
3e6e3da0 231 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
3a2b2b44 232 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
b6610e8f 233 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
2fe51906 234 check_for_hpux_broken_getaddrinfo=1
b29fd59f 235 check_for_conflicting_getspnam=1
f75ca46d 236 LIBS="$LIBS -lsec"
237 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
2b763e31 238 ;;
d94aa2ae 239*-*-irix5*)
6ac7829a 240 PATH="$PATH:/usr/etc"
416ed5a7 241 AC_DEFINE(BROKEN_INET_NTOA)
cb433561 242 AC_DEFINE(SETEUID_BREAKS_SETUID)
243 AC_DEFINE(BROKEN_SETREUID)
244 AC_DEFINE(BROKEN_SETREGID)
0e8f4eba 245 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 246 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
b9795b89 247 ;;
248*-*-irix6*)
6ac7829a 249 PATH="$PATH:/usr/etc"
3206bb3b 250 AC_DEFINE(WITH_IRIX_ARRAY)
251 AC_DEFINE(WITH_IRIX_PROJECT)
252 AC_DEFINE(WITH_IRIX_AUDIT)
b5171f93 253 AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS)])
416ed5a7 254 AC_DEFINE(BROKEN_INET_NTOA)
412c0eaa 255 AC_DEFINE(SETEUID_BREAKS_SETUID)
256 AC_DEFINE(BROKEN_SETREUID)
257 AC_DEFINE(BROKEN_SETREGID)
3d59832f 258 AC_DEFINE(BROKEN_UPDWTMPX)
0e8f4eba 259 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 260 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
d94aa2ae 261 ;;
5cdfe03f 262*-*-linux*)
263 no_dev_ptmx=1
717057b6 264 check_for_libcrypt_later=1
eacb954e 265 check_for_openpty_ctty_bug=1
80faa19f 266 AC_DEFINE(DONT_TRY_OTHER_AF)
a8545c6c 267 AC_DEFINE(PAM_TTY_KLUDGE)
b90bed9f 268 AC_DEFINE(LOCKED_PASSWD_PREFIX, "!")
3a2b2b44 269 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
cd698186 270 AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM)
b6610e8f 271 AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
272 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
80faa19f 273 inet6_default_4in6=yes
bf7c1e6c 274 case `uname -r` in
ad84c479 275 1.*|2.0.*)
bf7c1e6c 276 AC_DEFINE(BROKEN_CMSG_TYPE)
277 ;;
bf7c1e6c 278 esac
5cdfe03f 279 ;;
66d6c27e 280mips-sony-bsd|mips-sony-newsos4)
281 AC_DEFINE(HAVE_NEWS4)
282 SONY=1
66d6c27e 283 ;;
d468fc76 284*-*-netbsd*)
33e2e066 285 check_for_libcrypt_before=1
82f4e93d 286 if test "x$withval" != "xno" ; then
e6354014 287 need_dash_r=1
288 fi
d468fc76 289 ;;
86b416a7 290*-*-freebsd*)
291 check_for_libcrypt_later=1
292 ;;
8707b7eb 293*-*-bsdi*)
294 AC_DEFINE(SETEUID_BREAKS_SETUID)
295 AC_DEFINE(BROKEN_SETREUID)
296 AC_DEFINE(BROKEN_SETREGID)
297 ;;
729bfe59 298*-next-*)
729bfe59 299 conf_lastlog_location="/usr/adm/lastlog"
698d107e 300 conf_utmp_location=/etc/utmp
301 conf_wtmp_location=/usr/adm/wtmp
302 MAIL=/usr/spool/mail
729bfe59 303 AC_DEFINE(HAVE_NEXT)
443172c4 304 AC_DEFINE(BROKEN_REALPATH)
00937921 305 AC_DEFINE(USE_PIPES)
86b416a7 306 AC_DEFINE(BROKEN_SAVED_UIDS)
729bfe59 307 ;;
9d6b1b96 308*-*-solaris*)
82f4e93d 309 if test "x$withval" != "xno" ; then
010e9d5b 310 need_dash_r=1
311 fi
adeebd37 312 AC_DEFINE(PAM_SUN_CODEBASE)
7e2d5fa4 313 AC_DEFINE(LOGIN_NEEDS_UTMPX)
314 AC_DEFINE(LOGIN_NEEDS_TERM)
7f0a4ff1 315 AC_DEFINE(PAM_TTY_KLUDGE)
059d3165 316 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID)
3e6e3da0 317 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
ad84c479 318 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
319 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 320 external_path_file=/etc/default/login
1d7b9b20 321 # hardwire lastlog location (can't detect it on some versions)
322 conf_lastlog_location="/var/adm/lastlog"
32c80420 323 AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
324 sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
325 if test "$sol2ver" -ge 8; then
326 AC_MSG_RESULT(yes)
327 AC_DEFINE(DISABLE_UTMP)
328 AC_DEFINE(DISABLE_WTMP)
329 else
330 AC_MSG_RESULT(no)
331 fi
9d6b1b96 332 ;;
a423beaf 333*-*-sunos4*)
0c2fb82f 334 CPPFLAGS="$CPPFLAGS -DSUNOS4"
a423beaf 335 AC_CHECK_FUNCS(getpwanam)
adeebd37 336 AC_DEFINE(PAM_SUN_CODEBASE)
32eec038 337 conf_utmp_location=/etc/utmp
338 conf_wtmp_location=/var/adm/wtmp
339 conf_lastlog_location=/var/adm/lastlog
137d7b6c 340 AC_DEFINE(USE_PIPES)
a423beaf 341 ;;
6f68f28a 342*-ncr-sysv*)
98a7c37b 343 LIBS="$LIBS -lc89"
29525240 344 AC_DEFINE(USE_PIPES)
eabb99c6 345 AC_DEFINE(SSHD_ACQUIRES_CTTY)
6fb3618d 346 AC_DEFINE(SETEUID_BREAKS_SETUID)
347 AC_DEFINE(BROKEN_SETREUID)
348 AC_DEFINE(BROKEN_SETREGID)
6f68f28a 349 ;;
132dd316 350*-sni-sysv*)
c8c15bcb 351 # /usr/ucblib MUST NOT be searched on ReliantUNIX
e2798e96 352 AC_CHECK_LIB(dl, dlsym, ,)
85cf54ec 353 # -lresolv needs to be at then end of LIBS or DNS lookups break
354 AC_CHECK_LIB(res_query, resolv, [ LIBS="$LIBS -lresolv" ])
9548d6c8 355 IPADDR_IN_DISPLAY=yes
356 AC_DEFINE(USE_PIPES)
132dd316 357 AC_DEFINE(IP_TOS_IS_BROKEN)
605369bb 358 AC_DEFINE(SETEUID_BREAKS_SETUID)
359 AC_DEFINE(BROKEN_SETREUID)
360 AC_DEFINE(BROKEN_SETREGID)
eabb99c6 361 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 362 external_path_file=/etc/default/login
c8c15bcb 363 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
364 # Attention: always take care to bind libsocket and libnsl before libc,
365 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
132dd316 366 ;;
79a7ba96 367# UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
77bb0bca 368*-*-sysv4.2*)
ed6553e2 369 AC_DEFINE(USE_PIPES)
7ed101c0 370 AC_DEFINE(SETEUID_BREAKS_SETUID)
371 AC_DEFINE(BROKEN_SETREUID)
372 AC_DEFINE(BROKEN_SETREGID)
46f853b9 373 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
77bb0bca 374 ;;
79a7ba96 375# UnixWare 7.x, OpenUNIX 8
77bb0bca 376*-*-sysv5*)
ed6553e2 377 AC_DEFINE(USE_PIPES)
7ed101c0 378 AC_DEFINE(SETEUID_BREAKS_SETUID)
379 AC_DEFINE(BROKEN_SETREUID)
380 AC_DEFINE(BROKEN_SETREGID)
46f853b9 381 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
77bb0bca 382 ;;
9d6b1b96 383*-*-sysv*)
9d6b1b96 384 ;;
79a7ba96 385# SCO UNIX and OEM versions of SCO UNIX
77bb0bca 386*-*-sco3.2v4*)
11cf4f1f 387 AC_MSG_ERROR("This Platform is no longer supported.")
77bb0bca 388 ;;
79a7ba96 389# SCO OpenServer 5.x
77bb0bca 390*-*-sco3.2v5*)
21710e39 391 if test -z "$GCC"; then
392 CFLAGS="$CFLAGS -belf"
393 fi
ed6553e2 394 LIBS="$LIBS -lprot -lx -ltinfo -lm"
509b1f88 395 no_dev_ptmx=1
ed6553e2 396 AC_DEFINE(USE_PIPES)
6e879cb4 397 AC_DEFINE(HAVE_SECUREWARE)
d287c664 398 AC_DEFINE(DISABLE_SHADOW)
94d8258b 399 AC_DEFINE(DISABLE_FD_PASSING)
7ed101c0 400 AC_DEFINE(SETEUID_BREAKS_SETUID)
401 AC_DEFINE(BROKEN_SETREUID)
402 AC_DEFINE(BROKEN_SETREGID)
bcebad47 403 AC_DEFINE(WITH_ABBREV_NO_TTY)
34f2baf0 404 AC_DEFINE(BROKEN_UPDWTMPX)
3ade3b57 405 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
aca75d94 406 AC_CHECK_FUNCS(getluid setluid)
533875af 407 MANTYPE=man
a3245b92 408 TEST_SHELL=ksh
509b1f88 409 ;;
ccbb983c 410*-*-unicosmk*)
c1ad5966 411 AC_DEFINE(NO_SSH_LASTLOG)
412 AC_DEFINE(SETEUID_BREAKS_SETUID)
413 AC_DEFINE(BROKEN_SETREUID)
414 AC_DEFINE(BROKEN_SETREGID)
ccbb983c 415 AC_DEFINE(USE_PIPES)
416 AC_DEFINE(DISABLE_FD_PASSING)
417 LDFLAGS="$LDFLAGS"
418 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
419 MANTYPE=cat
d262b7f2 420 ;;
7b9a8c6e 421*-*-unicosmp*)
c1ad5966 422 AC_DEFINE(SETEUID_BREAKS_SETUID)
423 AC_DEFINE(BROKEN_SETREUID)
424 AC_DEFINE(BROKEN_SETREGID)
7b9a8c6e 425 AC_DEFINE(WITH_ABBREV_NO_TTY)
426 AC_DEFINE(USE_PIPES)
427 AC_DEFINE(DISABLE_FD_PASSING)
428 LDFLAGS="$LDFLAGS"
c1ad5966 429 LIBS="$LIBS -lgen -lacid -ldb"
7b9a8c6e 430 MANTYPE=cat
431 ;;
ca5c7d6a 432*-*-unicos*)
c1ad5966 433 AC_DEFINE(SETEUID_BREAKS_SETUID)
434 AC_DEFINE(BROKEN_SETREUID)
435 AC_DEFINE(BROKEN_SETREGID)
ca5c7d6a 436 AC_DEFINE(USE_PIPES)
94d8258b 437 AC_DEFINE(DISABLE_FD_PASSING)
ef51930f 438 AC_DEFINE(NO_SSH_LASTLOG)
ccbb983c 439 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
440 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
441 MANTYPE=cat
a704dd54 442 ;;
4d33e531 443*-dec-osf*)
99c8ddac 444 AC_MSG_CHECKING(for Digital Unix SIA)
445 no_osfsia=""
446 AC_ARG_WITH(osfsia,
447 [ --with-osfsia Enable Digital Unix SIA],
448 [
449 if test "x$withval" = "xno" ; then
450 AC_MSG_RESULT(disabled)
451 no_osfsia=1
452 fi
453 ],
454 )
455 if test -z "$no_osfsia" ; then
4d33e531 456 if test -f /etc/sia/matrix.conf; then
457 AC_MSG_RESULT(yes)
458 AC_DEFINE(HAVE_OSF_SIA)
459 AC_DEFINE(DISABLE_LOGIN)
58d0df4e 460 AC_DEFINE(DISABLE_FD_PASSING)
4d33e531 461 LIBS="$LIBS -lsecurity -ldb -lm -laud"
462 else
463 AC_MSG_RESULT(no)
dbf8efb3 464 AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin")
4d33e531 465 fi
466 fi
a6e67b60 467 AC_DEFINE(BROKEN_GETADDRINFO)
f4f2ff4f 468 AC_DEFINE(SETEUID_BREAKS_SETUID)
08da2d08 469 AC_DEFINE(BROKEN_SETREUID)
470 AC_DEFINE(BROKEN_SETREGID)
4d33e531 471 ;;
41cb4569 472
473*-*-nto-qnx)
474 AC_DEFINE(USE_PIPES)
475 AC_DEFINE(NO_X11_UNIX_SOCKETS)
476 AC_DEFINE(MISSING_NFDBITS)
477 AC_DEFINE(MISSING_HOWMANY)
478 AC_DEFINE(MISSING_FD_MASK)
479 ;;
a7effaac 480esac
481
8e7b16f8 482# Allow user to specify flags
483AC_ARG_WITH(cflags,
484 [ --with-cflags Specify additional flags to pass to compiler],
485 [
6cf0200f 486 if test -n "$withval" && test "x$withval" != "xno" && \
487 test "x${withval}" != "xyes"; then
8e7b16f8 488 CFLAGS="$CFLAGS $withval"
489 fi
82f4e93d 490 ]
8e7b16f8 491)
0c2fb82f 492AC_ARG_WITH(cppflags,
493 [ --with-cppflags Specify additional flags to pass to preprocessor] ,
494 [
6cf0200f 495 if test -n "$withval" && test "x$withval" != "xno" && \
496 test "x${withval}" != "xyes"; then
0c2fb82f 497 CPPFLAGS="$CPPFLAGS $withval"
498 fi
499 ]
500)
8e7b16f8 501AC_ARG_WITH(ldflags,
97b378bf 502 [ --with-ldflags Specify additional flags to pass to linker],
8e7b16f8 503 [
6cf0200f 504 if test -n "$withval" && test "x$withval" != "xno" && \
505 test "x${withval}" != "xyes"; then
8e7b16f8 506 LDFLAGS="$LDFLAGS $withval"
507 fi
82f4e93d 508 ]
8e7b16f8 509)
510AC_ARG_WITH(libs,
511 [ --with-libs Specify additional libraries to link with],
512 [
6cf0200f 513 if test -n "$withval" && test "x$withval" != "xno" && \
514 test "x${withval}" != "xyes"; then
8e7b16f8 515 LIBS="$LIBS $withval"
516 fi
82f4e93d 517 ]
8e7b16f8 518)
519
c5829391 520AC_MSG_CHECKING(compiler and flags for sanity)
479cece8 521AC_RUN_IFELSE(
522 [AC_LANG_SOURCE([
c5829391 523#include <stdio.h>
524int main(){exit(0);}
479cece8 525 ])],
c5829391 526 [ AC_MSG_RESULT(yes) ],
527 [
528 AC_MSG_RESULT(no)
529 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
1a01a50c 530 ],
531 [ AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
c5829391 532)
533
ddceb1c8 534# Checks for header files.
419e26e7 535AC_CHECK_HEADERS(bstring.h crypt.h dirent.h endian.h features.h \
536 floatingpoint.h getopt.h glob.h ia.h lastlog.h limits.h login.h \
537 login_cap.h maillock.h ndir.h netdb.h netgroup.h \
2511d104 538 netinet/in_systm.h pam/pam_appl.h paths.h pty.h readpassphrase.h \
5bbbc661 539 rpc/types.h security/pam_appl.h shadow.h stddef.h stdint.h \
419e26e7 540 strings.h sys/dir.h sys/strtio.h sys/audit.h sys/bitypes.h \
541 sys/bsdtty.h sys/cdefs.h sys/mman.h sys/ndir.h sys/prctl.h \
765a24cd 542 sys/pstat.h sys/select.h sys/stat.h sys/stream.h \
419e26e7 543 sys/stropts.h sys/sysmacros.h sys/time.h sys/timers.h sys/un.h \
544 time.h tmpdir.h ttyent.h usersec.h util.h utime.h utmp.h utmpx.h vis.h)
ddceb1c8 545
765a24cd 546# sys/ptms.h requires sys/stream.h to be included first on Solaris
547AC_CHECK_HEADERS(sys/ptms.h, [], [], [
548#ifdef HAVE_SYS_STREAM_H
549# include <sys/stream.h>
550#endif
551])
552
a0391976 553# Checks for libraries.
98a7c37b 554AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
555AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
2c523de9 556
446227d6 557dnl IRIX and Solaris 2.5.1 have dirname() in libgen
558AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
559 AC_CHECK_LIB(gen, dirname,[
560 AC_CACHE_CHECK([for broken dirname],
561 ac_cv_have_broken_dirname, [
562 save_LIBS="$LIBS"
563 LIBS="$LIBS -lgen"
564 AC_TRY_RUN(
565 [
566#include <libgen.h>
567#include <string.h>
568
569int main(int argc, char **argv) {
570 char *s, buf[32];
571
572 strncpy(buf,"/etc", 32);
573 s = dirname(buf);
574 if (!s || strncmp(s, "/", 32) != 0) {
575 exit(1);
576 } else {
577 exit(0);
578 }
579}
580 ],
581 [ ac_cv_have_broken_dirname="no" ],
582 [ ac_cv_have_broken_dirname="yes" ]
583 )
584 LIBS="$save_LIBS"
585 ])
586 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
587 LIBS="$LIBS -lgen"
588 AC_DEFINE(HAVE_DIRNAME)
589 AC_CHECK_HEADERS(libgen.h)
590 fi
591 ])
592])
593
594AC_CHECK_FUNC(getspnam, ,
595 AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
596AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME))
597
98a7c37b 598dnl zlib is required
599AC_ARG_WITH(zlib,
600 [ --with-zlib=PATH Use zlib in PATH],
6dd05556 601 [ if test "x$withval" = "xno" ; then
602 AC_MSG_ERROR([*** zlib is required ***])
603 elif test "x$withval" != "xyes"; then
98a7c37b 604 if test -d "$withval/lib"; then
605 if test -n "${need_dash_r}"; then
5a162955 606 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 607 else
5a162955 608 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 609 fi
610 else
611 if test -n "${need_dash_r}"; then
5a162955 612 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 613 else
5a162955 614 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 615 fi
616 fi
617 if test -d "$withval/include"; then
5a162955 618 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 619 else
5a162955 620 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 621 fi
6dd05556 622 fi ]
98a7c37b 623)
624
0a15d73b 625AC_CHECK_LIB(z, deflate, ,
626 [
627 saved_CPPFLAGS="$CPPFLAGS"
628 saved_LDFLAGS="$LDFLAGS"
629 save_LIBS="$LIBS"
630 dnl Check default zlib install dir
631 if test -n "${need_dash_r}"; then
632 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
633 else
634 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
635 fi
636 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
637 LIBS="$LIBS -lz"
638 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
639 [
640 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
641 ]
642 )
643 ]
644)
4ad65809 645AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
8068d564 646
647AC_ARG_WITH(zlib-version-check,
648 [ --without-zlib-version-check Disable zlib version check],
649 [ if test "x$withval" = "xno" ; then
650 zlib_check_nonfatal=1
651 fi
652 ]
653)
654
5c7fc85d 655AC_MSG_CHECKING(for possibly buggy zlib)
479cece8 656AC_RUN_IFELSE([AC_LANG_SOURCE([[
5c7fc85d 657#include <stdio.h>
4ad65809 658#include <zlib.h>
659int main()
660{
5c7fc85d 661 int a=0, b=0, c=0, d=0, n, v;
662 n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
663 if (n != 3 && n != 4)
4ad65809 664 exit(1);
5c7fc85d 665 v = a*1000000 + b*10000 + c*100 + d;
666 fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
667
668 /* 1.1.4 is OK */
669 if (a == 1 && b == 1 && c >= 4)
4ad65809 670 exit(0);
5c7fc85d 671
672 /* 1.2.1.2 and up are OK */
673 if (v >= 1020102)
674 exit(0);
675
4ad65809 676 exit(2);
677}
479cece8 678 ]])],
5c7fc85d 679 AC_MSG_RESULT(no),
680 [ AC_MSG_RESULT(yes)
8068d564 681 if test -z "$zlib_check_nonfatal" ; then
682 AC_MSG_ERROR([*** zlib too old - check config.log ***
683Your reported zlib version has known security problems. It's possible your
684vendor has fixed these problems without changing the version number. If you
685are sure this is the case, you can disable the check by running
686"./configure --without-zlib-version-check".
5c7fc85d 687If you are in doubt, upgrade zlib to version 1.2.1.2 or greater.
688See http://www.gzip.org/zlib/ for details.])
8068d564 689 else
690 AC_MSG_WARN([zlib version may have security problems])
691 fi
1a01a50c 692 ],
693 [ AC_MSG_WARN([cross compiling: not checking zlib version]) ]
4ad65809 694)
48e7916f 695
2c523de9 696dnl UnixWare 2.x
aff51935 697AC_CHECK_FUNC(strcasecmp,
2c523de9 698 [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
699)
aff51935 700AC_CHECK_FUNC(utimes,
cda1ebcb 701 [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
702 LIBS="$LIBS -lc89"]) ]
2c523de9 703)
4cca272e 704
7c6d759d 705dnl Checks for libutil functions
706AC_CHECK_HEADERS(libutil.h)
707AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN)])
708AC_CHECK_FUNCS(logout updwtmp logwtmp)
709
a738c3b0 710AC_FUNC_STRFTIME
711
84ceda19 712# Check for ALTDIRFUNC glob() extension
713AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
714AC_EGREP_CPP(FOUNDIT,
715 [
716 #include <glob.h>
717 #ifdef GLOB_ALTDIRFUNC
718 FOUNDIT
719 #endif
aff51935 720 ],
84ceda19 721 [
722 AC_DEFINE(GLOB_HAS_ALTDIRFUNC)
723 AC_MSG_RESULT(yes)
724 ],
725 [
726 AC_MSG_RESULT(no)
727 ]
728)
4cca272e 729
40849fdb 730# Check for g.gl_matchc glob() extension
731AC_MSG_CHECKING(for gl_matchc field in glob_t)
732AC_EGREP_CPP(FOUNDIT,
aff51935 733 [
734 #include <glob.h>
40849fdb 735 int main(void){glob_t g; g.gl_matchc = 1;}
aff51935 736 ],
737 [
738 AC_DEFINE(GLOB_HAS_GL_MATCHC)
739 AC_MSG_RESULT(yes)
740 ],
741 [
742 AC_MSG_RESULT(no)
743 ]
40849fdb 744)
745
edbe6722 746AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
1a01a50c 747AC_RUN_IFELSE(
479cece8 748 [AC_LANG_SOURCE([[
edbe6722 749#include <sys/types.h>
750#include <dirent.h>
aec4cb4f 751int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
479cece8 752 ]])],
aff51935 753 [AC_MSG_RESULT(yes)],
edbe6722 754 [
755 AC_MSG_RESULT(no)
756 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
1a01a50c 757 ],
82f4e93d 758 [
1a01a50c 759 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
760 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
edbe6722 761 ]
762)
763
419e26e7 764AC_MSG_CHECKING([for /proc/pid/fd directory])
765if test -d "/proc/$$/fd" ; then
766 AC_DEFINE(HAVE_PROC_PID)
767 AC_MSG_RESULT(yes)
768else
769 AC_MSG_RESULT(no)
770fi
771
278588d8 772# Check whether user wants S/Key support
aff51935 773SKEY_MSG="no"
278588d8 774AC_ARG_WITH(skey,
6ff3d0dc 775 [ --with-skey[[=PATH]] Enable S/Key support (optionally in PATH)],
278588d8 776 [
777 if test "x$withval" != "xno" ; then
778
779 if test "x$withval" != "xyes" ; then
780 CPPFLAGS="$CPPFLAGS -I${withval}/include"
781 LDFLAGS="$LDFLAGS -L${withval}/lib"
782 fi
783
784 AC_DEFINE(SKEY)
785 LIBS="-lskey $LIBS"
aff51935 786 SKEY_MSG="yes"
82f4e93d 787
ddceb1c8 788 AC_MSG_CHECKING([for s/key support])
789 AC_TRY_RUN(
790 [
791#include <stdio.h>
792#include <skey.h>
aec4cb4f 793int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
ddceb1c8 794 ],
795 [AC_MSG_RESULT(yes)],
278588d8 796 [
ddceb1c8 797 AC_MSG_RESULT(no)
278588d8 798 AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
799 ])
141fc639 800 AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
801 AC_TRY_COMPILE(
802 [#include <stdio.h>
803 #include <skey.h>],
804 [(void)skeychallenge(NULL,"name","",0);],
805 [AC_MSG_RESULT(yes)
806 AC_DEFINE(SKEYCHALLENGE_4ARG)],
807 [AC_MSG_RESULT(no)]
808 )
278588d8 809 fi
810 ]
811)
812
813# Check whether user wants TCP wrappers support
98a7c37b 814TCPW_MSG="no"
278588d8 815AC_ARG_WITH(tcp-wrappers,
6ff3d0dc 816 [ --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
278588d8 817 [
818 if test "x$withval" != "xno" ; then
819 saved_LIBS="$LIBS"
98a7c37b 820 saved_LDFLAGS="$LDFLAGS"
821 saved_CPPFLAGS="$CPPFLAGS"
4b492aab 822 if test -n "${withval}" && \
6cf0200f 823 test "x${withval}" != "xyes"; then
98a7c37b 824 if test -d "${withval}/lib"; then
825 if test -n "${need_dash_r}"; then
5a162955 826 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 827 else
5a162955 828 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 829 fi
830 else
831 if test -n "${need_dash_r}"; then
5a162955 832 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 833 else
5a162955 834 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 835 fi
836 fi
837 if test -d "${withval}/include"; then
5a162955 838 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 839 else
5a162955 840 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 841 fi
98a7c37b 842 fi
ddceb1c8 843 LIBWRAP="-lwrap"
844 LIBS="$LIBWRAP $LIBS"
278588d8 845 AC_MSG_CHECKING(for libwrap)
846 AC_TRY_LINK(
847 [
77f09220 848#include <sys/types.h>
849#include <sys/socket.h>
850#include <netinet/in.h>
278588d8 851#include <tcpd.h>
852 int deny_severity = 0, allow_severity = 0;
853 ],
854 [hosts_access(0);],
855 [
856 AC_MSG_RESULT(yes)
857 AC_DEFINE(LIBWRAP)
ddceb1c8 858 AC_SUBST(LIBWRAP)
98a7c37b 859 TCPW_MSG="yes"
278588d8 860 ],
861 [
862 AC_MSG_ERROR([*** libwrap missing])
863 ]
864 )
ddceb1c8 865 LIBS="$saved_LIBS"
278588d8 866 fi
867 ]
868)
869
59031773 870# Check whether user wants libedit support
871LIBEDIT_MSG="no"
872AC_ARG_WITH(libedit,
6ff3d0dc 873 [ --with-libedit[[=PATH]] Enable libedit support for sftp],
59031773 874 [ if test "x$withval" != "xno" ; then
737edf04 875 if test "x$withval" != "xyes"; then
876 CPPFLAGS="$CPPFLAGS -I$withval/include"
877 LDFLAGS="$LDFLAGS -L$withval/lib"
878 fi
59031773 879 AC_CHECK_LIB(edit, el_init,
880 [ AC_DEFINE(USE_LIBEDIT, [], [Use libedit for sftp])
881 LIBEDIT="-ledit -lcurses"
882 LIBEDIT_MSG="yes"
883 AC_SUBST(LIBEDIT)
884 ],
737edf04 885 [ AC_MSG_ERROR(libedit not found) ],
886 [ -lcurses ]
59031773 887 )
888 fi ]
889)
890
7b578f7d 891AUDIT_MODULE=none
892AC_ARG_WITH(audit,
893 [ --with-audit=module Enable EXPERIMENTAL audit support (modules=debug,bsm)],
894 [
895 AC_MSG_CHECKING(for supported audit module)
896 case "$withval" in
897 bsm)
898 AC_MSG_RESULT(bsm)
899 AUDIT_MODULE=bsm
900 dnl Checks for headers, libs and functions
901 AC_CHECK_HEADERS(bsm/audit.h, [],
902 [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)])
903 AC_CHECK_LIB(bsm, getaudit, [],
904 [AC_MSG_ERROR(BSM enabled and required library not found)])
905 AC_CHECK_FUNCS(getaudit, [],
906 [AC_MSG_ERROR(BSM enabled and required function not found)])
907 # These are optional
7939c496 908 AC_CHECK_FUNCS(getaudit_addr)
7b578f7d 909 AC_DEFINE(USE_BSM_AUDIT, [], [Use BSM audit module])
910 ;;
911 debug)
912 AUDIT_MODULE=debug
913 AC_MSG_RESULT(debug)
914 AC_DEFINE(SSH_AUDIT_EVENTS, [], Use audit debugging module)
915 ;;
916 *)
917 AC_MSG_ERROR([Unknown audit module $withval])
918 ;;
919 esac ]
920)
921
19160674 922dnl Checks for library functions. Please keep in alphabetical order
923AC_CHECK_FUNCS(\
2909d712 924 arc4random __b64_ntop b64_ntop __b64_pton b64_pton bcopy \
667abcc6 925 bindresvport_sa clock closefrom dirfd fchdir fchmod fchown \
926 freeaddrinfo futimes getaddrinfo getcwd getgrouplist getnameinfo \
927 getopt getpeereid _getpty getrlimit getttyent glob inet_aton \
19160674 928 inet_ntoa inet_ntop innetgr login_getcapbool md5_crypt memmove \
79d4fc55 929 mkdtemp mmap ngetaddrinfo nsleep ogetaddrinfo openlog_r openpty \
e7f6070d 930 pstat prctl readpassphrase realpath recvmsg rresvport_af sendmsg \
79d4fc55 931 setdtablesize setegid setenv seteuid setgroups setlogin setpcred \
3f176010 932 setproctitle setregid setreuid setrlimit \
688eed4a 933 setsid setvbuf sigaction sigvec snprintf socketpair strerror \
8a3ff1aa 934 strlcat strlcpy strmode strnvis strtonum strtoul sysconf tcgetpgrp \
351f44a0 935 truncate unsetenv updwtmpx utimes vhangup vsnprintf waitpid \
19160674 936)
98a7c37b 937
1a086f97 938# IRIX has a const char return value for gai_strerror()
939AC_CHECK_FUNCS(gai_strerror,[
940 AC_DEFINE(HAVE_GAI_STRERROR)
941 AC_TRY_COMPILE([
942#include <sys/types.h>
943#include <sys/socket.h>
944#include <netdb.h>
945
946const char *gai_strerror(int);],[
947char *str;
948
949str = gai_strerror(0);],[
950 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
951 [Define if gai_strerror() returns const char *])])])
952
92b1decf 953AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP))
954
309709db 955dnl Make sure prototypes are defined for these before using them.
08412d26 956AC_CHECK_DECL(strsep, [AC_CHECK_FUNCS(strsep)])
309709db 957AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
08412d26 958
3490699c 959dnl tcsendbreak might be a macro
960AC_CHECK_DECL(tcsendbreak,
961 [AC_DEFINE(HAVE_TCSENDBREAK)],
aff51935 962 [AC_CHECK_FUNCS(tcsendbreak)],
3490699c 963 [#include <termios.h>]
964)
965
41e0e158 966AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
967
3f176010 968AC_CHECK_FUNCS(setresuid, [
969 dnl Some platorms have setresuid that isn't implemented, test for this
970 AC_MSG_CHECKING(if setresuid seems to work)
479cece8 971 AC_RUN_IFELSE(
972 [AC_LANG_SOURCE([[
9a3fe0e2 973#include <stdlib.h>
974#include <errno.h>
975int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 976 ]])],
3f176010 977 [AC_MSG_RESULT(yes)],
24a9171d 978 [AC_DEFINE(BROKEN_SETRESUID)
1a01a50c 979 AC_MSG_RESULT(not implemented)],
980 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 981 )
982])
9a3fe0e2 983
3f176010 984AC_CHECK_FUNCS(setresgid, [
985 dnl Some platorms have setresgid that isn't implemented, test for this
986 AC_MSG_CHECKING(if setresgid seems to work)
479cece8 987 AC_RUN_IFELSE(
988 [AC_LANG_SOURCE([[
9a3fe0e2 989#include <stdlib.h>
990#include <errno.h>
991int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 992 ]])],
3f176010 993 [AC_MSG_RESULT(yes)],
994 [AC_DEFINE(BROKEN_SETRESGID)
1a01a50c 995 AC_MSG_RESULT(not implemented)],
996 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 997 )
998])
9a3fe0e2 999
2e73a022 1000dnl Checks for time functions
1d7b9b20 1001AC_CHECK_FUNCS(gettimeofday time)
2e73a022 1002dnl Checks for utmp functions
b03bd394 1003AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1d7b9b20 1004AC_CHECK_FUNCS(utmpname)
2e73a022 1005dnl Checks for utmpx functions
b03bd394 1006AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1d7b9b20 1007AC_CHECK_FUNCS(setutxent utmpxname)
76cd7316 1008
aff51935 1009AC_CHECK_FUNC(daemon,
beb43d31 1010 [AC_DEFINE(HAVE_DAEMON)],
1011 [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
1012)
1013
aff51935 1014AC_CHECK_FUNC(getpagesize,
aa6bd60a 1015 [AC_DEFINE(HAVE_GETPAGESIZE)],
1016 [AC_CHECK_LIB(ucb, getpagesize, [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
1017)
1018
2647ae26 1019# Check for broken snprintf
1020if test "x$ac_cv_func_snprintf" = "xyes" ; then
1021 AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1a01a50c 1022 AC_RUN_IFELSE(
479cece8 1023 [AC_LANG_SOURCE([[
2647ae26 1024#include <stdio.h>
aec4cb4f 1025int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
479cece8 1026 ]])],
aff51935 1027 [AC_MSG_RESULT(yes)],
2647ae26 1028 [
1029 AC_MSG_RESULT(no)
1030 AC_DEFINE(BROKEN_SNPRINTF)
1031 AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1a01a50c 1032 ],
1033 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
2647ae26 1034 )
1035fi
1036
2f6f9cff 1037# Check for missing getpeereid (or equiv) support
1038NO_PEERCHECK=""
1039if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1040 AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1041 AC_TRY_COMPILE(
1042 [#include <sys/types.h>
1043 #include <sys/socket.h>],
1044 [int i = SO_PEERCRED;],
62eb7db4 1045 [ AC_MSG_RESULT(yes)
1046 AC_DEFINE(HAVE_SO_PEERCRED, [], [Have PEERCRED socket option])
1047 ],
2f6f9cff 1048 [AC_MSG_RESULT(no)
1049 NO_PEERCHECK=1]
1050 )
1051fi
1052
70e7d0b0 1053dnl see whether mkstemp() requires XXXXXX
1054if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1055AC_MSG_CHECKING([for (overly) strict mkstemp])
1056AC_TRY_RUN(
1057 [
1058#include <stdlib.h>
1059main() { char template[]="conftest.mkstemp-test";
1060if (mkstemp(template) == -1)
1061 exit(1);
1062unlink(template); exit(0);
1063}
1064 ],
1065 [
1066 AC_MSG_RESULT(no)
1067 ],
aff51935 1068 [
70e7d0b0 1069 AC_MSG_RESULT(yes)
1070 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1071 ],
1072 [
1073 AC_MSG_RESULT(yes)
1074 AC_DEFINE(HAVE_STRICT_MKSTEMP)
aff51935 1075 ]
70e7d0b0 1076)
1077fi
1078
eacb954e 1079dnl make sure that openpty does not reacquire controlling terminal
1080if test ! -z "$check_for_openpty_ctty_bug"; then
1081 AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1082 AC_TRY_RUN(
1083 [
1084#include <stdio.h>
1085#include <sys/fcntl.h>
1086#include <sys/types.h>
1087#include <sys/wait.h>
1088
1089int
1090main()
1091{
1092 pid_t pid;
1093 int fd, ptyfd, ttyfd, status;
1094
1095 pid = fork();
1096 if (pid < 0) { /* failed */
1097 exit(1);
1098 } else if (pid > 0) { /* parent */
1099 waitpid(pid, &status, 0);
aff51935 1100 if (WIFEXITED(status))
eacb954e 1101 exit(WEXITSTATUS(status));
1102 else
1103 exit(2);
1104 } else { /* child */
1105 close(0); close(1); close(2);
1106 setsid();
1107 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1108 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1109 if (fd >= 0)
1110 exit(3); /* Acquired ctty: broken */
1111 else
1112 exit(0); /* Did not acquire ctty: OK */
1113 }
1114}
1115 ],
1116 [
1117 AC_MSG_RESULT(yes)
1118 ],
1119 [
1120 AC_MSG_RESULT(no)
1121 AC_DEFINE(SSHD_ACQUIRES_CTTY)
1122 ]
1123 )
1124fi
1125
4b492aab 1126if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1127 test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
2fe51906 1128 AC_MSG_CHECKING(if getaddrinfo seems to work)
1129 AC_TRY_RUN(
1130 [
1131#include <stdio.h>
1132#include <sys/socket.h>
1133#include <netdb.h>
1134#include <errno.h>
1135#include <netinet/in.h>
1136
1137#define TEST_PORT "2222"
1138
1139int
1140main(void)
1141{
1142 int err, sock;
1143 struct addrinfo *gai_ai, *ai, hints;
1144 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1145
1146 memset(&hints, 0, sizeof(hints));
1147 hints.ai_family = PF_UNSPEC;
1148 hints.ai_socktype = SOCK_STREAM;
1149 hints.ai_flags = AI_PASSIVE;
1150
1151 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1152 if (err != 0) {
1153 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1154 exit(1);
1155 }
1156
1157 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1158 if (ai->ai_family != AF_INET6)
1159 continue;
1160
1161 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1162 sizeof(ntop), strport, sizeof(strport),
1163 NI_NUMERICHOST|NI_NUMERICSERV);
1164
1165 if (err != 0) {
1166 if (err == EAI_SYSTEM)
1167 perror("getnameinfo EAI_SYSTEM");
1168 else
1169 fprintf(stderr, "getnameinfo failed: %s\n",
1170 gai_strerror(err));
1171 exit(2);
1172 }
1173
1174 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1175 if (sock < 0)
1176 perror("socket");
1177 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1178 if (errno == EBADF)
1179 exit(3);
1180 }
1181 }
1182 exit(0);
1183}
1184 ],
1185 [
1186 AC_MSG_RESULT(yes)
1187 ],
1188 [
1189 AC_MSG_RESULT(no)
1190 AC_DEFINE(BROKEN_GETADDRINFO)
1191 ]
1192 )
1193fi
1194
4b492aab 1195if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1196 test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
5ccf88cb 1197 AC_MSG_CHECKING(if getaddrinfo seems to work)
1198 AC_TRY_RUN(
1199 [
1200#include <stdio.h>
1201#include <sys/socket.h>
1202#include <netdb.h>
1203#include <errno.h>
1204#include <netinet/in.h>
1205
1206#define TEST_PORT "2222"
1207
1208int
1209main(void)
1210{
1211 int err, sock;
1212 struct addrinfo *gai_ai, *ai, hints;
1213 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1214
1215 memset(&hints, 0, sizeof(hints));
1216 hints.ai_family = PF_UNSPEC;
1217 hints.ai_socktype = SOCK_STREAM;
1218 hints.ai_flags = AI_PASSIVE;
1219
1220 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1221 if (err != 0) {
1222 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1223 exit(1);
1224 }
1225
1226 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1227 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1228 continue;
1229
1230 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1231 sizeof(ntop), strport, sizeof(strport),
1232 NI_NUMERICHOST|NI_NUMERICSERV);
1233
1234 if (ai->ai_family == AF_INET && err != 0) {
1235 perror("getnameinfo");
1236 exit(2);
1237 }
1238 }
1239 exit(0);
1240}
1241 ],
1242 [
1243 AC_MSG_RESULT(yes)
1244 AC_DEFINE(AIX_GETNAMEINFO_HACK, [],
1245[Define if you have a getaddrinfo that fails for the all-zeros IPv6 address])
1246 ],
1247 [
1248 AC_MSG_RESULT(no)
1249 AC_DEFINE(BROKEN_GETADDRINFO)
1250 ]
1251 )
1252fi
1253
b29fd59f 1254if test "x$check_for_conflicting_getspnam" = "x1"; then
1255 AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1256 AC_COMPILE_IFELSE(
1257 [
1258#include <shadow.h>
1259int main(void) {exit(0);}
1260 ],
1261 [
1262 AC_MSG_RESULT(no)
1263 ],
1264 [
1265 AC_MSG_RESULT(yes)
1266 AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1267 [Conflicting defs for getspnam])
1268 ]
1269 )
1270fi
1271
7f8f5e00 1272AC_FUNC_GETPGRP
1273
717057b6 1274# Check for PAM libs
cbd7492e 1275PAM_MSG="no"
a0391976 1276AC_ARG_WITH(pam,
717057b6 1277 [ --with-pam Enable PAM support ],
a0391976 1278 [
717057b6 1279 if test "x$withval" != "xno" ; then
2511d104 1280 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
1281 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
717057b6 1282 AC_MSG_ERROR([PAM headers not found])
1283 fi
a0391976 1284
717057b6 1285 AC_CHECK_LIB(dl, dlopen, , )
1286 AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
1287 AC_CHECK_FUNCS(pam_getenvlist)
749560dd 1288 AC_CHECK_FUNCS(pam_putenv)
2b763e31 1289
717057b6 1290 PAM_MSG="yes"
4cb5ffa0 1291
717057b6 1292 AC_DEFINE(USE_PAM)
98f2d9d5 1293 if test $ac_cv_lib_dl_dlopen = yes; then
1294 LIBPAM="-lpam -ldl"
1295 else
1296 LIBPAM="-lpam"
1297 fi
1298 AC_SUBST(LIBPAM)
717057b6 1299 fi
1300 ]
1301)
cbd7492e 1302
717057b6 1303# Check for older PAM
1304if test "x$PAM_MSG" = "xyes" ; then
a0391976 1305 # Check PAM strerror arguments (old PAM)
1306 AC_MSG_CHECKING([whether pam_strerror takes only one argument])
1307 AC_TRY_COMPILE(
1308 [
18ba2aab 1309#include <stdlib.h>
2511d104 1310#if defined(HAVE_SECURITY_PAM_APPL_H)
18ba2aab 1311#include <security/pam_appl.h>
2511d104 1312#elif defined (HAVE_PAM_PAM_APPL_H)
1313#include <pam/pam_appl.h>
1314#endif
aff51935 1315 ],
1316 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
a0391976 1317 [AC_MSG_RESULT(no)],
1318 [
1319 AC_DEFINE(HAVE_OLD_PAM)
1320 AC_MSG_RESULT(yes)
cbd7492e 1321 PAM_MSG="yes (old library)"
a0391976 1322 ]
717057b6 1323 )
a0391976 1324fi
1325
5b991353 1326# Search for OpenSSL
1327saved_CPPFLAGS="$CPPFLAGS"
1328saved_LDFLAGS="$LDFLAGS"
a0391976 1329AC_ARG_WITH(ssl-dir,
1330 [ --with-ssl-dir=PATH Specify path to OpenSSL installation ],
1331 [
e9e4a1c7 1332 if test "x$withval" != "xno" ; then
99eb0f64 1333 case "$withval" in
1334 # Relative paths
1335 ./*|../*) withval="`pwd`/$withval"
1336 esac
5b991353 1337 if test -d "$withval/lib"; then
1338 if test -n "${need_dash_r}"; then
1339 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1340 else
1341 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
d6f13fbb 1342 fi
1343 else
5b991353 1344 if test -n "${need_dash_r}"; then
1345 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1346 else
1347 LDFLAGS="-L${withval} ${LDFLAGS}"
d6f13fbb 1348 fi
1349 fi
5b991353 1350 if test -d "$withval/include"; then
1351 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
d6f13fbb 1352 else
5b991353 1353 CPPFLAGS="-I${withval} ${CPPFLAGS}"
58d100bf 1354 fi
a0391976 1355 fi
5b991353 1356 ]
1357)
5486a457 1358LIBS="-lcrypto $LIBS"
5b991353 1359AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
d45e3d76 1360 [
5b991353 1361 dnl Check default openssl install dir
1362 if test -n "${need_dash_r}"; then
1363 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1364 else
5b991353 1365 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1366 fi
5b991353 1367 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1368 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1369 [
1370 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1371 ]
1372 )
1373 ]
1374)
1375
cd018561 1376# Determine OpenSSL header version
1377AC_MSG_CHECKING([OpenSSL header version])
1a01a50c 1378AC_RUN_IFELSE(
479cece8 1379 [AC_LANG_SOURCE([[
cd018561 1380#include <stdio.h>
1381#include <string.h>
1382#include <openssl/opensslv.h>
1383#define DATA "conftest.sslincver"
1384int main(void) {
aff51935 1385 FILE *fd;
1386 int rc;
cd018561 1387
aff51935 1388 fd = fopen(DATA,"w");
1389 if(fd == NULL)
1390 exit(1);
cd018561 1391
1392 if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1393 exit(1);
1394
1395 exit(0);
1396}
479cece8 1397 ]])],
cd018561 1398 [
1399 ssl_header_ver=`cat conftest.sslincver`
1400 AC_MSG_RESULT($ssl_header_ver)
1401 ],
1402 [
1403 AC_MSG_RESULT(not found)
1404 AC_MSG_ERROR(OpenSSL version header not found.)
1a01a50c 1405 ],
1406 [
1407 AC_MSG_WARN([cross compiling: not checking])
cd018561 1408 ]
1409)
1410
1411# Determine OpenSSL library version
1412AC_MSG_CHECKING([OpenSSL library version])
1a01a50c 1413AC_RUN_IFELSE(
479cece8 1414 [AC_LANG_SOURCE([[
cd018561 1415#include <stdio.h>
1416#include <string.h>
1417#include <openssl/opensslv.h>
1418#include <openssl/crypto.h>
1419#define DATA "conftest.ssllibver"
1420int main(void) {
aff51935 1421 FILE *fd;
1422 int rc;
cd018561 1423
aff51935 1424 fd = fopen(DATA,"w");
1425 if(fd == NULL)
1426 exit(1);
cd018561 1427
1428 if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1429 exit(1);
1430
1431 exit(0);
1432}
479cece8 1433 ]])],
cd018561 1434 [
1435 ssl_library_ver=`cat conftest.ssllibver`
1436 AC_MSG_RESULT($ssl_library_ver)
1437 ],
1438 [
1439 AC_MSG_RESULT(not found)
1440 AC_MSG_ERROR(OpenSSL library not found.)
1a01a50c 1441 ],
1442 [
1443 AC_MSG_WARN([cross compiling: not checking])
cd018561 1444 ]
1445)
58d100bf 1446
9780116c 1447# Sanity check OpenSSL headers
1448AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1a01a50c 1449AC_RUN_IFELSE(
479cece8 1450 [AC_LANG_SOURCE([[
9780116c 1451#include <string.h>
1452#include <openssl/opensslv.h>
aec4cb4f 1453int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
479cece8 1454 ]])],
9780116c 1455 [
1456 AC_MSG_RESULT(yes)
1457 ],
1458 [
1459 AC_MSG_RESULT(no)
e15ba28b 1460 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1461Check config.log for details.
1462Also see contrib/findssl.sh for help identifying header/library mismatches.])
1a01a50c 1463 ],
1464 [
1465 AC_MSG_WARN([cross compiling: not checking])
9780116c 1466 ]
1467)
1468
5486a457 1469# Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1470# because the system crypt() is more featureful.
1471if test "x$check_for_libcrypt_before" = "x1"; then
1472 AC_CHECK_LIB(crypt, crypt)
1473fi
1474
aff51935 1475# Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
8087c5ee 1476# version in OpenSSL.
05114c74 1477if test "x$check_for_libcrypt_later" = "x1"; then
20cad736 1478 AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
717057b6 1479fi
1480
f1b0ecc3 1481
1482### Configure cryptographic random number support
1483
1484# Check wheter OpenSSL seeds itself
1485AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1a01a50c 1486AC_RUN_IFELSE(
479cece8 1487 [AC_LANG_SOURCE([[
f1b0ecc3 1488#include <string.h>
1489#include <openssl/rand.h>
aec4cb4f 1490int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
479cece8 1491 ]])],
f1b0ecc3 1492 [
1493 OPENSSL_SEEDS_ITSELF=yes
1494 AC_MSG_RESULT(yes)
1495 ],
1496 [
1497 AC_MSG_RESULT(no)
1498 # Default to use of the rand helper if OpenSSL doesn't
1499 # seed itself
1500 USE_RAND_HELPER=yes
1a01a50c 1501 ],
1502 [
1503 AC_MSG_WARN([cross compiling: assuming yes])
1504 # This is safe, since all recent OpenSSL versions will
82f4e93d 1505 # complain at runtime if not seeded correctly.
1a01a50c 1506 OPENSSL_SEEDS_ITSELF=yes
f1b0ecc3 1507 ]
1508)
1509
1510
1511# Do we want to force the use of the rand helper?
1512AC_ARG_WITH(rand-helper,
1513 [ --with-rand-helper Use subprocess to gather strong randomness ],
1514 [
1515 if test "x$withval" = "xno" ; then
aff51935 1516 # Force use of OpenSSL's internal RNG, even if
f1b0ecc3 1517 # the previous test showed it to be unseeded.
1518 if test -z "$OPENSSL_SEEDS_ITSELF" ; then
1519 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
1520 OPENSSL_SEEDS_ITSELF=yes
1521 USE_RAND_HELPER=""
1522 fi
1523 else
1524 USE_RAND_HELPER=yes
1525 fi
1526 ],
82f4e93d 1527)
f1b0ecc3 1528
1529# Which randomness source do we use?
4b492aab 1530if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
f1b0ecc3 1531 # OpenSSL only
1532 AC_DEFINE(OPENSSL_PRNG_ONLY)
1533 RAND_MSG="OpenSSL internal ONLY"
1534 INSTALL_SSH_RAND_HELPER=""
70e2f2f3 1535elif test ! -z "$USE_RAND_HELPER" ; then
1536 # install rand helper
f1b0ecc3 1537 RAND_MSG="ssh-rand-helper"
1538 INSTALL_SSH_RAND_HELPER="yes"
1539fi
1540AC_SUBST(INSTALL_SSH_RAND_HELPER)
1541
1542### Configuration of ssh-rand-helper
1543
1544# PRNGD TCP socket
1545AC_ARG_WITH(prngd-port,
1546 [ --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT],
1547 [
eb5d7ff6 1548 case "$withval" in
1549 no)
1550 withval=""
1551 ;;
1552 [[0-9]]*)
1553 ;;
1554 *)
1555 AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
1556 ;;
1557 esac
1558 if test ! -z "$withval" ; then
f1b0ecc3 1559 PRNGD_PORT="$withval"
1560 AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT)
1561 fi
1562 ]
1563)
1564
1565# PRNGD Unix domain socket
1566AC_ARG_WITH(prngd-socket,
1567 [ --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
1568 [
eb5d7ff6 1569 case "$withval" in
1570 yes)
f1b0ecc3 1571 withval="/var/run/egd-pool"
eb5d7ff6 1572 ;;
1573 no)
1574 withval=""
1575 ;;
1576 /*)
1577 ;;
1578 *)
1579 AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
1580 ;;
1581 esac
1582
1583 if test ! -z "$withval" ; then
f1b0ecc3 1584 if test ! -z "$PRNGD_PORT" ; then
1585 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
1586 fi
906e811b 1587 if test ! -r "$withval" ; then
f1b0ecc3 1588 AC_MSG_WARN(Entropy socket is not readable)
1589 fi
1590 PRNGD_SOCKET="$withval"
1591 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1592 fi
ddceb1c8 1593 ],
1594 [
1595 # Check for existing socket only if we don't have a random device already
1596 if test "$USE_RAND_HELPER" = yes ; then
1597 AC_MSG_CHECKING(for PRNGD/EGD socket)
1598 # Insert other locations here
1599 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
1600 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
1601 PRNGD_SOCKET="$sock"
1602 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1603 break;
1604 fi
1605 done
1606 if test ! -z "$PRNGD_SOCKET" ; then
1607 AC_MSG_RESULT($PRNGD_SOCKET)
1608 else
1609 AC_MSG_RESULT(not found)
1610 fi
1611 fi
f1b0ecc3 1612 ]
1613)
1614
1615# Change default command timeout for hashing entropy source
1616entropy_timeout=200
1617AC_ARG_WITH(entropy-timeout,
1618 [ --with-entropy-timeout Specify entropy gathering command timeout (msec)],
1619 [
6cf0200f 1620 if test -n "$withval" && test "x$withval" != "xno" && \
1621 test "x${withval}" != "xyes"; then
f1b0ecc3 1622 entropy_timeout=$withval
1623 fi
82f4e93d 1624 ]
f1b0ecc3 1625)
f1b0ecc3 1626AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout)
1627
fd3cbf67 1628SSH_PRIVSEP_USER=sshd
9a0fbcb3 1629AC_ARG_WITH(privsep-user,
5222e7ef 1630 [ --with-privsep-user=user Specify non-privileged user for privilege separation],
9a0fbcb3 1631 [
6cf0200f 1632 if test -n "$withval" && test "x$withval" != "xno" && \
1633 test "x${withval}" != "xyes"; then
fd3cbf67 1634 SSH_PRIVSEP_USER=$withval
9a0fbcb3 1635 fi
82f4e93d 1636 ]
9a0fbcb3 1637)
fd3cbf67 1638AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER")
1639AC_SUBST(SSH_PRIVSEP_USER)
9a0fbcb3 1640
81dadca3 1641# We do this little dance with the search path to insure
1642# that programs that we select for use by installed programs
1643# (which may be run by the super-user) come from trusted
1644# locations before they come from the user's private area.
1645# This should help avoid accidentally configuring some
1646# random version of a program in someone's personal bin.
1647
1648OPATH=$PATH
1649PATH=/bin:/usr/bin
f95c8ce8 1650test -h /bin 2> /dev/null && PATH=/usr/bin
81dadca3 1651test -d /sbin && PATH=$PATH:/sbin
1652test -d /usr/sbin && PATH=$PATH:/usr/sbin
1653PATH=$PATH:/etc:$OPATH
1654
aff51935 1655# These programs are used by the command hashing source to gather entropy
f1b0ecc3 1656OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
1657OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
1658OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
1659OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
1660OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
1661OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
1662OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
1663OSSH_PATH_ENTROPY_PROG(PROG_W, w)
1664OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
1665OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
1666OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
1667OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
1668OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
1669OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
1670OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
1671OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
81dadca3 1672# restore PATH
1673PATH=$OPATH
f1b0ecc3 1674
1675# Where does ssh-rand-helper get its randomness from?
1676INSTALL_SSH_PRNG_CMDS=""
1677if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
1678 if test ! -z "$PRNGD_PORT" ; then
1679 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
1680 elif test ! -z "$PRNGD_SOCKET" ; then
1681 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
1682 else
1683 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
1684 RAND_HELPER_CMDHASH=yes
1685 INSTALL_SSH_PRNG_CMDS="yes"
1686 fi
1687fi
1688AC_SUBST(INSTALL_SSH_PRNG_CMDS)
1689
1690
66d6c27e 1691# Cheap hack to ensure NEWS-OS libraries are arranged right.
1692if test ! -z "$SONY" ; then
1693 LIBS="$LIBS -liberty";
1694fi
1695
a0391976 1696# Checks for data types
976f7e19 1697AC_CHECK_SIZEOF(char, 1)
2b942fe0 1698AC_CHECK_SIZEOF(short int, 2)
1699AC_CHECK_SIZEOF(int, 4)
1700AC_CHECK_SIZEOF(long int, 4)
1701AC_CHECK_SIZEOF(long long int, 8)
1702
52f1ccb2 1703# Sanity check long long for some platforms (AIX)
1704if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
1705 ac_cv_sizeof_long_long_int=0
1706fi
1707
a0391976 1708# More checks for data types
14a9a859 1709AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
1710 AC_TRY_COMPILE(
aff51935 1711 [ #include <sys/types.h> ],
1712 [ u_int a; a = 1;],
14a9a859 1713 [ ac_cv_have_u_int="yes" ],
1714 [ ac_cv_have_u_int="no" ]
1715 )
1716])
1717if test "x$ac_cv_have_u_int" = "xyes" ; then
1718 AC_DEFINE(HAVE_U_INT)
1719 have_u_int=1
1720fi
1721
58d100bf 1722AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
1723 AC_TRY_COMPILE(
aff51935 1724 [ #include <sys/types.h> ],
1725 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
58d100bf 1726 [ ac_cv_have_intxx_t="yes" ],
1727 [ ac_cv_have_intxx_t="no" ]
1728 )
1729])
1730if test "x$ac_cv_have_intxx_t" = "xyes" ; then
1731 AC_DEFINE(HAVE_INTXX_T)
1732 have_intxx_t=1
1733fi
41cb4569 1734
1735if (test -z "$have_intxx_t" && \
aff51935 1736 test "x$ac_cv_header_stdint_h" = "xyes")
41cb4569 1737then
1738 AC_MSG_CHECKING([for intXX_t types in stdint.h])
1739 AC_TRY_COMPILE(
aff51935 1740 [ #include <stdint.h> ],
1741 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
41cb4569 1742 [
1743 AC_DEFINE(HAVE_INTXX_T)
1744 AC_MSG_RESULT(yes)
1745 ],
1746 [ AC_MSG_RESULT(no) ]
1747 )
1748fi
1749
bd590612 1750AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
1751 AC_TRY_COMPILE(
1cbbe6c8 1752 [
1753#include <sys/types.h>
1754#ifdef HAVE_STDINT_H
1755# include <stdint.h>
1756#endif
1757#include <sys/socket.h>
1758#ifdef HAVE_SYS_BITYPES_H
1759# include <sys/bitypes.h>
1760#endif
aff51935 1761 ],
1762 [ int64_t a; a = 1;],
bd590612 1763 [ ac_cv_have_int64_t="yes" ],
1764 [ ac_cv_have_int64_t="no" ]
1765 )
1766])
1767if test "x$ac_cv_have_int64_t" = "xyes" ; then
1768 AC_DEFINE(HAVE_INT64_T)
ddceb1c8 1769fi
1770
58d100bf 1771AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
1772 AC_TRY_COMPILE(
aff51935 1773 [ #include <sys/types.h> ],
1774 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
58d100bf 1775 [ ac_cv_have_u_intxx_t="yes" ],
1776 [ ac_cv_have_u_intxx_t="no" ]
1777 )
1778])
1779if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
1780 AC_DEFINE(HAVE_U_INTXX_T)
1781 have_u_intxx_t=1
1782fi
2b942fe0 1783
41cb4569 1784if test -z "$have_u_intxx_t" ; then
1785 AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
1786 AC_TRY_COMPILE(
aff51935 1787 [ #include <sys/socket.h> ],
1788 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
41cb4569 1789 [
1790 AC_DEFINE(HAVE_U_INTXX_T)
1791 AC_MSG_RESULT(yes)
1792 ],
1793 [ AC_MSG_RESULT(no) ]
1794 )
1795fi
1796
bd590612 1797AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
1798 AC_TRY_COMPILE(
aff51935 1799 [ #include <sys/types.h> ],
1800 [ u_int64_t a; a = 1;],
bd590612 1801 [ ac_cv_have_u_int64_t="yes" ],
1802 [ ac_cv_have_u_int64_t="no" ]
1803 )
1804])
1805if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
1806 AC_DEFINE(HAVE_U_INT64_T)
1807 have_u_int64_t=1
1808fi
1809
ddceb1c8 1810if test -z "$have_u_int64_t" ; then
1811 AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
1812 AC_TRY_COMPILE(
aff51935 1813 [ #include <sys/bitypes.h> ],
ddceb1c8 1814 [ u_int64_t a; a = 1],
1815 [
1816 AC_DEFINE(HAVE_U_INT64_T)
1817 AC_MSG_RESULT(yes)
1818 ],
1819 [ AC_MSG_RESULT(no) ]
1820 )
1821fi
1822
41cb4569 1823if test -z "$have_u_intxx_t" ; then
1824 AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
1825 AC_TRY_COMPILE(
1826 [
1827#include <sys/types.h>
aff51935 1828 ],
1829 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
41cb4569 1830 [ ac_cv_have_uintxx_t="yes" ],
1831 [ ac_cv_have_uintxx_t="no" ]
1832 )
1833 ])
1834 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
1835 AC_DEFINE(HAVE_UINTXX_T)
1836 fi
1837fi
1838
1839if test -z "$have_uintxx_t" ; then
1840 AC_MSG_CHECKING([for uintXX_t types in stdint.h])
1841 AC_TRY_COMPILE(
aff51935 1842 [ #include <stdint.h> ],
1843 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
41cb4569 1844 [
1845 AC_DEFINE(HAVE_UINTXX_T)
1846 AC_MSG_RESULT(yes)
1847 ],
1848 [ AC_MSG_RESULT(no) ]
1849 )
1850fi
1851
e5fe9a1f 1852if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
aff51935 1853 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
5cdfe03f 1854then
1855 AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
1856 AC_TRY_COMPILE(
58d100bf 1857 [
1858#include <sys/bitypes.h>
aff51935 1859 ],
5cdfe03f 1860 [
837c30b8 1861 int8_t a; int16_t b; int32_t c;
1862 u_int8_t e; u_int16_t f; u_int32_t g;
1863 a = b = c = e = f = g = 1;
aff51935 1864 ],
5cdfe03f 1865 [
1866 AC_DEFINE(HAVE_U_INTXX_T)
1867 AC_DEFINE(HAVE_INTXX_T)
1868 AC_MSG_RESULT(yes)
1869 ],
1870 [AC_MSG_RESULT(no)]
aff51935 1871 )
5cdfe03f 1872fi
1873
0362750e 1874
1875AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
1876 AC_TRY_COMPILE(
1877 [
1878#include <sys/types.h>
1879 ],
1880 [ u_char foo; foo = 125; ],
1881 [ ac_cv_have_u_char="yes" ],
1882 [ ac_cv_have_u_char="no" ]
1883 )
1884])
1885if test "x$ac_cv_have_u_char" = "xyes" ; then
1886 AC_DEFINE(HAVE_U_CHAR)
1887fi
1888
98a7c37b 1889TYPE_SOCKLEN_T
2b942fe0 1890
2d16d9a3 1891AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
ddceb1c8 1892
777ece68 1893AC_CHECK_TYPES(in_addr_t,,,
1894[#include <sys/types.h>
1895#include <netinet/in.h>])
7b578f7d 1896
58d100bf 1897AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
1898 AC_TRY_COMPILE(
1899 [
18ba2aab 1900#include <sys/types.h>
58d100bf 1901 ],
1902 [ size_t foo; foo = 1235; ],
1903 [ ac_cv_have_size_t="yes" ],
1904 [ ac_cv_have_size_t="no" ]
1905 )
1906])
1907if test "x$ac_cv_have_size_t" = "xyes" ; then
1908 AC_DEFINE(HAVE_SIZE_T)
1909fi
ea1970a3 1910
c04f75f1 1911AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
1912 AC_TRY_COMPILE(
1913 [
1914#include <sys/types.h>
1915 ],
1916 [ ssize_t foo; foo = 1235; ],
1917 [ ac_cv_have_ssize_t="yes" ],
1918 [ ac_cv_have_ssize_t="no" ]
1919 )
1920])
1921if test "x$ac_cv_have_ssize_t" = "xyes" ; then
1922 AC_DEFINE(HAVE_SSIZE_T)
1923fi
1924
f1c4659d 1925AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
1926 AC_TRY_COMPILE(
1927 [
1928#include <time.h>
1929 ],
1930 [ clock_t foo; foo = 1235; ],
1931 [ ac_cv_have_clock_t="yes" ],
1932 [ ac_cv_have_clock_t="no" ]
1933 )
1934])
1935if test "x$ac_cv_have_clock_t" = "xyes" ; then
1936 AC_DEFINE(HAVE_CLOCK_T)
1937fi
1938
1c04b088 1939AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
1940 AC_TRY_COMPILE(
1941 [
1942#include <sys/types.h>
1943#include <sys/socket.h>
1944 ],
1945 [ sa_family_t foo; foo = 1235; ],
1946 [ ac_cv_have_sa_family_t="yes" ],
77bb0bca 1947 [ AC_TRY_COMPILE(
1948 [
1949#include <sys/types.h>
1950#include <sys/socket.h>
1951#include <netinet/in.h>
1952 ],
1953 [ sa_family_t foo; foo = 1235; ],
1954 [ ac_cv_have_sa_family_t="yes" ],
1955
1c04b088 1956 [ ac_cv_have_sa_family_t="no" ]
77bb0bca 1957 )]
1c04b088 1958 )
1959])
1960if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
1961 AC_DEFINE(HAVE_SA_FAMILY_T)
1962fi
1963
729bfe59 1964AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
1965 AC_TRY_COMPILE(
1966 [
1967#include <sys/types.h>
1968 ],
1969 [ pid_t foo; foo = 1235; ],
1970 [ ac_cv_have_pid_t="yes" ],
1971 [ ac_cv_have_pid_t="no" ]
1972 )
1973])
1974if test "x$ac_cv_have_pid_t" = "xyes" ; then
1975 AC_DEFINE(HAVE_PID_T)
1976fi
1977
1978AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
1979 AC_TRY_COMPILE(
1980 [
1981#include <sys/types.h>
1982 ],
1983 [ mode_t foo; foo = 1235; ],
1984 [ ac_cv_have_mode_t="yes" ],
1985 [ ac_cv_have_mode_t="no" ]
1986 )
1987])
1988if test "x$ac_cv_have_mode_t" = "xyes" ; then
1989 AC_DEFINE(HAVE_MODE_T)
1990fi
1991
e3a93db0 1992
58d100bf 1993AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
1994 AC_TRY_COMPILE(
1995 [
18ba2aab 1996#include <sys/types.h>
1997#include <sys/socket.h>
58d100bf 1998 ],
1999 [ struct sockaddr_storage s; ],
2000 [ ac_cv_have_struct_sockaddr_storage="yes" ],
2001 [ ac_cv_have_struct_sockaddr_storage="no" ]
2002 )
2003])
2004if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
2005 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE)
2006fi
48e671d5 2007
58d100bf 2008AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2009 AC_TRY_COMPILE(
2010 [
cbd7492e 2011#include <sys/types.h>
58d100bf 2012#include <netinet/in.h>
2013 ],
2014 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2015 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2016 [ ac_cv_have_struct_sockaddr_in6="no" ]
2017 )
2018])
2019if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
2020 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6)
2021fi
48e671d5 2022
58d100bf 2023AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2024 AC_TRY_COMPILE(
2025 [
cbd7492e 2026#include <sys/types.h>
58d100bf 2027#include <netinet/in.h>
2028 ],
2029 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2030 [ ac_cv_have_struct_in6_addr="yes" ],
2031 [ ac_cv_have_struct_in6_addr="no" ]
2032 )
2033])
2034if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
2035 AC_DEFINE(HAVE_STRUCT_IN6_ADDR)
2036fi
48e671d5 2037
58d100bf 2038AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2039 AC_TRY_COMPILE(
2040 [
18ba2aab 2041#include <sys/types.h>
2042#include <sys/socket.h>
2043#include <netdb.h>
58d100bf 2044 ],
2045 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2046 [ ac_cv_have_struct_addrinfo="yes" ],
2047 [ ac_cv_have_struct_addrinfo="no" ]
2048 )
2049])
2050if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2051 AC_DEFINE(HAVE_STRUCT_ADDRINFO)
2052fi
2053
89c7e31c 2054AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2055 AC_TRY_COMPILE(
aff51935 2056 [ #include <sys/time.h> ],
2057 [ struct timeval tv; tv.tv_sec = 1;],
89c7e31c 2058 [ ac_cv_have_struct_timeval="yes" ],
2059 [ ac_cv_have_struct_timeval="no" ]
2060 )
2061])
2062if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2063 AC_DEFINE(HAVE_STRUCT_TIMEVAL)
2064 have_struct_timeval=1
2065fi
2066
5271b55c 2067AC_CHECK_TYPES(struct timespec)
2068
85abc74b 2069# We need int64_t or else certian parts of the compile will fail.
4b492aab 2070if test "x$ac_cv_have_int64_t" = "xno" && \
2071 test "x$ac_cv_sizeof_long_int" != "x8" && \
2072 test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
85abc74b 2073 echo "OpenSSH requires int64_t support. Contact your vendor or install"
2074 echo "an alternative compiler (I.E., GCC) before continuing."
2075 echo ""
2076 exit 1;
733cf7f4 2077else
2078dnl test snprintf (broken on SCO w/gcc)
1a01a50c 2079 AC_RUN_IFELSE(
479cece8 2080 [AC_LANG_SOURCE([[
733cf7f4 2081#include <stdio.h>
2082#include <string.h>
2083#ifdef HAVE_SNPRINTF
2084main()
2085{
2086 char buf[50];
2087 char expected_out[50];
2088 int mazsize = 50 ;
2089#if (SIZEOF_LONG_INT == 8)
2090 long int num = 0x7fffffffffffffff;
2091#else
763a1a18 2092 long long num = 0x7fffffffffffffffll;
733cf7f4 2093#endif
2094 strcpy(expected_out, "9223372036854775807");
2095 snprintf(buf, mazsize, "%lld", num);
2096 if(strcmp(buf, expected_out) != 0)
aff51935 2097 exit(1);
733cf7f4 2098 exit(0);
2099}
2100#else
2101main() { exit(0); }
2102#endif
479cece8 2103 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
1a01a50c 2104 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
733cf7f4 2105 )
2c523de9 2106fi
2107
77bb0bca 2108dnl Checks for structure members
58d100bf 2109OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2110OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2111OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2112OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2113OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
25422c70 2114OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
58d100bf 2115OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2116OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
daaff4d5 2117OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
58d100bf 2118OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2119OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2120OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2121OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
1d7b9b20 2122OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2123OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2124OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2125OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
98a7c37b 2126
2127AC_CHECK_MEMBERS([struct stat.st_blksize])
1d7b9b20 2128
58d100bf 2129AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2130 ac_cv_have_ss_family_in_struct_ss, [
2131 AC_TRY_COMPILE(
2132 [
18ba2aab 2133#include <sys/types.h>
2134#include <sys/socket.h>
58d100bf 2135 ],
2136 [ struct sockaddr_storage s; s.ss_family = 1; ],
2137 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2138 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2139 )
2140])
2141if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2142 AC_DEFINE(HAVE_SS_FAMILY_IN_SS)
2143fi
2144
58d100bf 2145AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2146 ac_cv_have___ss_family_in_struct_ss, [
2147 AC_TRY_COMPILE(
2148 [
18ba2aab 2149#include <sys/types.h>
2150#include <sys/socket.h>
58d100bf 2151 ],
2152 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2153 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2154 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2155 )
2156])
2157if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2158 AC_DEFINE(HAVE___SS_FAMILY_IN_SS)
2159fi
2160
2e73a022 2161AC_CACHE_CHECK([for pw_class field in struct passwd],
2162 ac_cv_have_pw_class_in_struct_passwd, [
2163 AC_TRY_COMPILE(
2164 [
2e73a022 2165#include <pwd.h>
2166 ],
97994d32 2167 [ struct passwd p; p.pw_class = 0; ],
2e73a022 2168 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2169 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2170 )
2171])
2172if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2173 AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD)
2174fi
2175
7751d4eb 2176AC_CACHE_CHECK([for pw_expire field in struct passwd],
2177 ac_cv_have_pw_expire_in_struct_passwd, [
2178 AC_TRY_COMPILE(
2179 [
2180#include <pwd.h>
2181 ],
2182 [ struct passwd p; p.pw_expire = 0; ],
2183 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2184 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2185 )
2186])
2187if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2188 AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD)
2189fi
2190
2191AC_CACHE_CHECK([for pw_change field in struct passwd],
2192 ac_cv_have_pw_change_in_struct_passwd, [
2193 AC_TRY_COMPILE(
2194 [
2195#include <pwd.h>
2196 ],
2197 [ struct passwd p; p.pw_change = 0; ],
2198 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2199 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2200 )
2201])
2202if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2203 AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD)
2204fi
58d100bf 2205
637f9177 2206dnl make sure we're using the real structure members and not defines
6f34652e 2207AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2208 ac_cv_have_accrights_in_msghdr, [
1a01a50c 2209 AC_COMPILE_IFELSE(
6f34652e 2210 [
f95c8ce8 2211#include <sys/types.h>
6f34652e 2212#include <sys/socket.h>
2213#include <sys/uio.h>
637f9177 2214int main() {
2215#ifdef msg_accrights
1a01a50c 2216#error "msg_accrights is a macro"
637f9177 2217exit(1);
2218#endif
2219struct msghdr m;
2220m.msg_accrights = 0;
2221exit(0);
2222}
6f34652e 2223 ],
6f34652e 2224 [ ac_cv_have_accrights_in_msghdr="yes" ],
2225 [ ac_cv_have_accrights_in_msghdr="no" ]
2226 )
2227])
2228if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2229 AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR)
2230fi
2231
7176df4f 2232AC_CACHE_CHECK([for msg_control field in struct msghdr],
2233 ac_cv_have_control_in_msghdr, [
1a01a50c 2234 AC_COMPILE_IFELSE(
7176df4f 2235 [
f95c8ce8 2236#include <sys/types.h>
7176df4f 2237#include <sys/socket.h>
2238#include <sys/uio.h>
637f9177 2239int main() {
2240#ifdef msg_control
1a01a50c 2241#error "msg_control is a macro"
637f9177 2242exit(1);
2243#endif
2244struct msghdr m;
2245m.msg_control = 0;
2246exit(0);
2247}
7176df4f 2248 ],
7176df4f 2249 [ ac_cv_have_control_in_msghdr="yes" ],
2250 [ ac_cv_have_control_in_msghdr="no" ]
2251 )
2252])
2253if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2254 AC_DEFINE(HAVE_CONTROL_IN_MSGHDR)
2255fi
2256
58d100bf 2257AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
aff51935 2258 AC_TRY_LINK([],
2259 [ extern char *__progname; printf("%s", __progname); ],
58d100bf 2260 [ ac_cv_libc_defines___progname="yes" ],
2261 [ ac_cv_libc_defines___progname="no" ]
2262 )
2263])
2264if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2265 AC_DEFINE(HAVE___PROGNAME)
2266fi
8946db53 2267
c921ee00 2268AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2269 AC_TRY_LINK([
2270#include <stdio.h>
aff51935 2271],
2272 [ printf("%s", __FUNCTION__); ],
c921ee00 2273 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2274 [ ac_cv_cc_implements___FUNCTION__="no" ]
2275 )
2276])
2277if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2278 AC_DEFINE(HAVE___FUNCTION__)
2279fi
2280
2281AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2282 AC_TRY_LINK([
2283#include <stdio.h>
aff51935 2284],
2285 [ printf("%s", __func__); ],
c921ee00 2286 [ ac_cv_cc_implements___func__="yes" ],
2287 [ ac_cv_cc_implements___func__="no" ]
2288 )
2289])
2290if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
2291 AC_DEFINE(HAVE___func__)
2292fi
2293
1812a662 2294AC_CACHE_CHECK([whether getopt has optreset support],
2295 ac_cv_have_getopt_optreset, [
2296 AC_TRY_LINK(
2297 [
2298#include <getopt.h>
2299 ],
2300 [ extern int optreset; optreset = 0; ],
2301 [ ac_cv_have_getopt_optreset="yes" ],
2302 [ ac_cv_have_getopt_optreset="no" ]
2303 )
2304])
2305if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
2306 AC_DEFINE(HAVE_GETOPT_OPTRESET)
2307fi
a0391976 2308
819b676f 2309AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
aff51935 2310 AC_TRY_LINK([],
2311 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
819b676f 2312 [ ac_cv_libc_defines_sys_errlist="yes" ],
2313 [ ac_cv_libc_defines_sys_errlist="no" ]
2314 )
2315])
2316if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
2317 AC_DEFINE(HAVE_SYS_ERRLIST)
2318fi
2319
2320
416ed5a7 2321AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
aff51935 2322 AC_TRY_LINK([],
2323 [ extern int sys_nerr; printf("%i", sys_nerr);],
416ed5a7 2324 [ ac_cv_libc_defines_sys_nerr="yes" ],
2325 [ ac_cv_libc_defines_sys_nerr="no" ]
2326 )
2327])
2328if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
2329 AC_DEFINE(HAVE_SYS_NERR)
2330fi
2331
aff51935 2332SCARD_MSG="no"
295c8801 2333# Check whether user wants sectok support
2334AC_ARG_WITH(sectok,
2335 [ --with-sectok Enable smartcard support using libsectok],
d0b19c95 2336 [
2337 if test "x$withval" != "xno" ; then
2338 if test "x$withval" != "xyes" ; then
2339 CPPFLAGS="$CPPFLAGS -I${withval}"
2340 LDFLAGS="$LDFLAGS -L${withval}"
2341 if test ! -z "$need_dash_r" ; then
2342 LDFLAGS="$LDFLAGS -R${withval}"
2343 fi
2344 if test ! -z "$blibpath" ; then
2345 blibpath="$blibpath:${withval}"
2346 fi
2347 fi
2348 AC_CHECK_HEADERS(sectok.h)
2349 if test "$ac_cv_header_sectok_h" != yes; then
2350 AC_MSG_ERROR(Can't find sectok.h)
2351 fi
2352 AC_CHECK_LIB(sectok, sectok_open)
2353 if test "$ac_cv_lib_sectok_sectok_open" != yes; then
2354 AC_MSG_ERROR(Can't find libsectok)
2355 fi
2356 AC_DEFINE(SMARTCARD)
295c8801 2357 AC_DEFINE(USE_SECTOK)
aff51935 2358 SCARD_MSG="yes, using sectok"
295c8801 2359 fi
2360 ]
2361)
2362
2363# Check whether user wants OpenSC support
987b458f 2364OPENSC_CONFIG="no"
295c8801 2365AC_ARG_WITH(opensc,
987b458f 2366 [--with-opensc[[=PFX]] Enable smartcard support using OpenSC (optionally in PATH)],
2367 [
2368 if test "x$withval" != "xno" ; then
2369 if test "x$withval" != "xyes" ; then
2370 OPENSC_CONFIG=$withval/bin/opensc-config
2371 else
2372 AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
2373 fi
2374 if test "$OPENSC_CONFIG" != "no"; then
2375 LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
2376 LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
2377 CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
2378 LDFLAGS="$LDFLAGS $LIBOPENSC_LIBS"
2379 AC_DEFINE(SMARTCARD)
2380 AC_DEFINE(USE_OPENSC)
2381 SCARD_MSG="yes, using OpenSC"
2382 fi
2383 fi
2384 ]
2385)
d0b19c95 2386
c31dc31c 2387# Check libraries needed by DNS fingerprint support
aff51935 2388AC_SEARCH_LIBS(getrrsetbyname, resolv,
c31dc31c 2389 [AC_DEFINE(HAVE_GETRRSETBYNAME)],
3e05e934 2390 [
c31dc31c 2391 # Needed by our getrrsetbyname()
2392 AC_SEARCH_LIBS(res_query, resolv)
2393 AC_SEARCH_LIBS(dn_expand, resolv)
dabb524a 2394 AC_MSG_CHECKING(if res_query will link)
2395 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
2396 [AC_MSG_RESULT(no)
2397 saved_LIBS="$LIBS"
2398 LIBS="$LIBS -lresolv"
2399 AC_MSG_CHECKING(for res_query in -lresolv)
2400 AC_LINK_IFELSE([
2401#include <resolv.h>
2402int main()
2403{
2404 res_query (0, 0, 0, 0, 0);
2405 return 0;
2406}
2407 ],
2408 [LIBS="$LIBS -lresolv"
2409 AC_MSG_RESULT(yes)],
2410 [LIBS="$saved_LIBS"
2411 AC_MSG_RESULT(no)])
2412 ])
c31dc31c 2413 AC_CHECK_FUNCS(_getshort _getlong)
03f5da4c 2414 AC_CHECK_DECLS([_getshort, _getlong])
c31dc31c 2415 AC_CHECK_MEMBER(HEADER.ad,
2416 [AC_DEFINE(HAVE_HEADER_AD)],,
2417 [#include <arpa/nameser.h>])
2418 ])
3e05e934 2419
12928e80 2420# Check whether user wants Kerberos 5 support
aff51935 2421KRB5_MSG="no"
12928e80 2422AC_ARG_WITH(kerberos5,
aff51935 2423 [ --with-kerberos5=PATH Enable Kerberos 5 support],
5585c441 2424 [ if test "x$withval" != "xno" ; then
2425 if test "x$withval" = "xyes" ; then
2426 KRB5ROOT="/usr/local"
2427 else
2428 KRB5ROOT=${withval}
2429 fi
2430
2431 AC_DEFINE(KRB5)
2432 KRB5_MSG="yes"
2433
2434 AC_MSG_CHECKING(for krb5-config)
2435 if test -x $KRB5ROOT/bin/krb5-config ; then
2436 KRB5CONF=$KRB5ROOT/bin/krb5-config
2437 AC_MSG_RESULT($KRB5CONF)
2438
2439 AC_MSG_CHECKING(for gssapi support)
2440 if $KRB5CONF | grep gssapi >/dev/null ; then
2441 AC_MSG_RESULT(yes)
071970fb 2442 AC_DEFINE(GSSAPI)
2443 k5confopts=gssapi
aff51935 2444 else
5585c441 2445 AC_MSG_RESULT(no)
071970fb 2446 k5confopts=""
aff51935 2447 fi
071970fb 2448 K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
2449 K5LIBS="`$KRB5CONF --libs $k5confopts`"
5585c441 2450 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
5585c441 2451 AC_MSG_CHECKING(whether we are using Heimdal)
2452 AC_TRY_COMPILE([ #include <krb5.h> ],
2453 [ char *tmp = heimdal_version; ],
2454 [ AC_MSG_RESULT(yes)
2455 AC_DEFINE(HEIMDAL) ],
2456 AC_MSG_RESULT(no)
2457 )
2458 else
2459 AC_MSG_RESULT(no)
12928e80 2460 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
aff51935 2461 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
aff51935 2462 AC_MSG_CHECKING(whether we are using Heimdal)
2463 AC_TRY_COMPILE([ #include <krb5.h> ],
2464 [ char *tmp = heimdal_version; ],
2465 [ AC_MSG_RESULT(yes)
2466 AC_DEFINE(HEIMDAL)
41707f74 2467 K5LIBS="-lkrb5 -ldes"
2468 K5LIBS="$K5LIBS -lcom_err -lasn1"
82f4e93d 2469 AC_CHECK_LIB(roken, net_write,
41707f74 2470 [K5LIBS="$K5LIBS -lroken"])
aff51935 2471 ],
2472 [ AC_MSG_RESULT(no)
2473 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
2474 ]
2475 )
4e00038c 2476 AC_SEARCH_LIBS(dn_expand, resolv)
12928e80 2477
749560dd 2478 AC_CHECK_LIB(gssapi,gss_init_sec_context,
2479 [ AC_DEFINE(GSSAPI)
2480 K5LIBS="-lgssapi $K5LIBS" ],
2481 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
2482 [ AC_DEFINE(GSSAPI)
aff51935 2483 K5LIBS="-lgssapi_krb5 $K5LIBS" ],
749560dd 2484 AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
2485 $K5LIBS)
2486 ],
2487 $K5LIBS)
82f4e93d 2488
749560dd 2489 AC_CHECK_HEADER(gssapi.h, ,
2490 [ unset ac_cv_header_gssapi_h
aff51935 2491 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
749560dd 2492 AC_CHECK_HEADERS(gssapi.h, ,
2493 AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
aff51935 2494 )
749560dd 2495 ]
2496 )
2497
2498 oldCPP="$CPPFLAGS"
2499 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2500 AC_CHECK_HEADER(gssapi_krb5.h, ,
2501 [ CPPFLAGS="$oldCPP" ])
2502
aff51935 2503 fi
5585c441 2504 if test ! -z "$need_dash_r" ; then
2505 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
2506 fi
2507 if test ! -z "$blibpath" ; then
2508 blibpath="$blibpath:${KRB5ROOT}/lib"
2509 fi
071970fb 2510 fi
2511
2512 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
2513 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
2514 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
2515
2516 LIBS="$LIBS $K5LIBS"
2517 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS))
79753592 2518 AC_SEARCH_LIBS(krb5_init_ets, $K5LIBS, AC_DEFINE(KRB5_INIT_ETS))
071970fb 2519 ]
12928e80 2520)
b5b68128 2521
a0391976 2522# Looking for programs, paths and files
a0391976 2523
ecac8ee5 2524PRIVSEP_PATH=/var/empty
2525AC_ARG_WITH(privsep-path,
cda1ebcb 2526 [ --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
ecac8ee5 2527 [
6cf0200f 2528 if test -n "$withval" && test "x$withval" != "xno" && \
2529 test "x${withval}" != "xyes"; then
ecac8ee5 2530 PRIVSEP_PATH=$withval
2531 fi
2532 ]
2533)
2534AC_SUBST(PRIVSEP_PATH)
2535
a0391976 2536AC_ARG_WITH(xauth,
2537 [ --with-xauth=PATH Specify path to xauth program ],
2538 [
6cf0200f 2539 if test -n "$withval" && test "x$withval" != "xno" && \
2540 test "x${withval}" != "xyes"; then
cbd7492e 2541 xauth_path=$withval
a0391976 2542 fi
2543 ],
2544 [
2bf42e4a 2545 TestPath="$PATH"
2546 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
2547 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
2548 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
2549 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
2550 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
e5fe9a1f 2551 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
a0391976 2552 xauth_path="/usr/openwin/bin/xauth"
2553 fi
2554 ]
2555)
2556
65a4b4af 2557STRIP_OPT=-s
2558AC_ARG_ENABLE(strip,
2559 [ --disable-strip Disable calling strip(1) on install],
2560 [
2561 if test "x$enableval" = "xno" ; then
2562 STRIP_OPT=
2563 fi
2564 ]
2565)
2566AC_SUBST(STRIP_OPT)
2567
b3ec54b4 2568if test -z "$xauth_path" ; then
2569 XAUTH_PATH="undefined"
2570 AC_SUBST(XAUTH_PATH)
2571else
a0391976 2572 AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path")
b3ec54b4 2573 XAUTH_PATH=$xauth_path
2574 AC_SUBST(XAUTH_PATH)
a0391976 2575fi
a0391976 2576
2577# Check for mail directory (last resort if we cannot get it from headers)
2578if test ! -z "$MAIL" ; then
2579 maildir=`dirname $MAIL`
2580 AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir")
2581fi
2582
479cece8 2583if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
1a01a50c 2584 AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
2585 disable_ptmx_check=yes
2586fi
a0391976 2587if test -z "$no_dev_ptmx" ; then
6e879cb4 2588 if test "x$disable_ptmx_check" != "xyes" ; then
aff51935 2589 AC_CHECK_FILE("/dev/ptmx",
6e879cb4 2590 [
2591 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX)
2592 have_dev_ptmx=1
2593 ]
2594 )
2595 fi
3276571c 2596fi
1a01a50c 2597
479cece8 2598if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
1a01a50c 2599 AC_CHECK_FILE("/dev/ptc",
2600 [
2601 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC)
2602 have_dev_ptc=1
2603 ]
2604 )
2605else
2606 AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
2607fi
3276571c 2608
a0391976 2609# Options from here on. Some of these are preset by platform above
fdf6b7aa 2610AC_ARG_WITH(mantype,
5d97cfbf 2611 [ --with-mantype=man|cat|doc Set man page type],
c54a6257 2612 [
5d97cfbf 2613 case "$withval" in
2614 man|cat|doc)
2615 MANTYPE=$withval
2616 ;;
2617 *)
2618 AC_MSG_ERROR(invalid man type: $withval)
2619 ;;
2620 esac
c54a6257 2621 ]
2622)
e0c4d3ac 2623if test -z "$MANTYPE"; then
2bf42e4a 2624 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
2625 AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
e0c4d3ac 2626 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
2627 MANTYPE=doc
2628 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
2629 MANTYPE=man
2630 else
2631 MANTYPE=cat
2632 fi
2633fi
c54a6257 2634AC_SUBST(MANTYPE)
e0c4d3ac 2635if test "$MANTYPE" = "doc"; then
2636 mansubdir=man;
2637else
2638 mansubdir=$MANTYPE;
2639fi
2640AC_SUBST(mansubdir)
0bc5b6fb 2641
a0391976 2642# Check whether to enable MD5 passwords
aff51935 2643MD5_MSG="no"
2ddcfdf3 2644AC_ARG_WITH(md5-passwords,
caf3bc51 2645 [ --with-md5-passwords Enable use of MD5 passwords],
0bc5b6fb 2646 [
bcf36c78 2647 if test "x$withval" != "xno" ; then
0bc5b6fb 2648 AC_DEFINE(HAVE_MD5_PASSWORDS)
aff51935 2649 MD5_MSG="yes"
0bc5b6fb 2650 fi
2651 ]
caf3bc51 2652)
2653
a0391976 2654# Whether to disable shadow password support
a7effaac 2655AC_ARG_WITH(shadow,
2656 [ --without-shadow Disable shadow password support],
2657 [
82f4e93d 2658 if test "x$withval" = "xno" ; then
a7effaac 2659 AC_DEFINE(DISABLE_SHADOW)
4cb5ffa0 2660 disable_shadow=yes
a7effaac 2661 fi
2662 ]
2663)
2664
4cb5ffa0 2665if test -z "$disable_shadow" ; then
2666 AC_MSG_CHECKING([if the systems has expire shadow information])
2667 AC_TRY_COMPILE(
2668 [
2669#include <sys/types.h>
2670#include <shadow.h>
2671 struct spwd sp;
2672 ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
2673 [ sp_expire_available=yes ], []
2674 )
2675
2676 if test "x$sp_expire_available" = "xyes" ; then
2677 AC_MSG_RESULT(yes)
2678 AC_DEFINE(HAS_SHADOW_EXPIRE)
2679 else
2680 AC_MSG_RESULT(no)
2681 fi
2682fi
2683
a0391976 2684# Use ip address instead of hostname in $DISPLAY
44839801 2685if test ! -z "$IPADDR_IN_DISPLAY" ; then
2686 DISPLAY_HACK_MSG="yes"
2687 AC_DEFINE(IPADDR_IN_DISPLAY)
2688else
aff51935 2689 DISPLAY_HACK_MSG="no"
44839801 2690 AC_ARG_WITH(ipaddr-display,
2691 [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY],
2692 [
82f4e93d 2693 if test "x$withval" != "xno" ; then
44839801 2694 AC_DEFINE(IPADDR_IN_DISPLAY)
aff51935 2695 DISPLAY_HACK_MSG="yes"
44839801 2696 fi
2697 ]
2698 )
2699fi
a7effaac 2700
95b99395 2701# check for /etc/default/login and use it if present.
daa41e62 2702AC_ARG_ENABLE(etc-default-login,
6ff3d0dc 2703 [ --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
694d0cef 2704 [ if test "x$enableval" = "xno"; then
2705 AC_MSG_NOTICE([/etc/default/login handling disabled])
2706 etc_default_login=no
2707 else
2708 etc_default_login=yes
2709 fi ],
2710 [ etc_default_login=yes ]
2711)
95b99395 2712
694d0cef 2713if test "x$etc_default_login" != "xno"; then
2714 AC_CHECK_FILE("/etc/default/login",
2715 [ external_path_file=/etc/default/login ])
479cece8 2716 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
2717 then
1a01a50c 2718 AC_MSG_WARN([cross compiling: Disabling /etc/default/login test])
2719 elif test "x$external_path_file" = "x/etc/default/login"; then
2720 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN)
2721 fi
694d0cef 2722fi
95b99395 2723
8d184c09 2724dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
4b492aab 2725if test $ac_cv_func_login_getcapbool = "yes" && \
2726 test $ac_cv_header_login_cap_h = "yes" ; then
95b99395 2727 external_path_file=/etc/login.conf
8d184c09 2728fi
95b99395 2729
a0391976 2730# Whether to mess with the default path
aff51935 2731SERVER_PATH_MSG="(default)"
c43d69a9 2732AC_ARG_WITH(default-path,
75817f90 2733 [ --with-default-path= Specify default \$PATH environment for server],
cb807f40 2734 [
95b99395 2735 if test "x$external_path_file" = "x/etc/login.conf" ; then
8d184c09 2736 AC_MSG_WARN([
2737--with-default-path=PATH has no effect on this system.
2738Edit /etc/login.conf instead.])
82f4e93d 2739 elif test "x$withval" != "xno" ; then
89bbd457 2740 if test ! -z "$external_path_file" ; then
95b99395 2741 AC_MSG_WARN([
2742--with-default-path=PATH will only be used if PATH is not defined in
2743$external_path_file .])
2744 fi
b2d818e6 2745 user_path="$withval"
aff51935 2746 SERVER_PATH_MSG="$withval"
cb807f40 2747 fi
b2d818e6 2748 ],
95b99395 2749 [ if test "x$external_path_file" = "x/etc/login.conf" ; then
2750 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
8d184c09 2751 else
89bbd457 2752 if test ! -z "$external_path_file" ; then
95b99395 2753 AC_MSG_WARN([
2754If PATH is defined in $external_path_file, ensure the path to scp is included,
2755otherwise scp will not work.])
2756 fi
2757 AC_TRY_RUN(
2758 [
b2d818e6 2759/* find out what STDPATH is */
2760#include <stdio.h>
b2d818e6 2761#ifdef HAVE_PATHS_H
2762# include <paths.h>
2763#endif
2764#ifndef _PATH_STDPATH
d9a4e55b 2765# ifdef _PATH_USERPATH /* Irix */
2766# define _PATH_STDPATH _PATH_USERPATH
2767# else
2768# define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
2769# endif
b2d818e6 2770#endif
2771#include <sys/types.h>
2772#include <sys/stat.h>
2773#include <fcntl.h>
2774#define DATA "conftest.stdpath"
2775
2776main()
2777{
2778 FILE *fd;
2779 int rc;
82f4e93d 2780
b2d818e6 2781 fd = fopen(DATA,"w");
2782 if(fd == NULL)
2783 exit(1);
82f4e93d 2784
b2d818e6 2785 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
2786 exit(1);
2787
2788 exit(0);
2789}
2790 ], [ user_path=`cat conftest.stdpath` ],
2791 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
2792 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
2793 )
2794# make sure $bindir is in USER_PATH so scp will work
2795 t_bindir=`eval echo ${bindir}`
2796 case $t_bindir in
2797 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
2798 esac
2799 case $t_bindir in
2800 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
2801 esac
2802 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
2803 if test $? -ne 0 ; then
2804 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
2805 if test $? -ne 0 ; then
2806 user_path=$user_path:$t_bindir
2807 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
2808 fi
2809 fi
8d184c09 2810 fi ]
cb807f40 2811)
95b99395 2812if test "x$external_path_file" != "x/etc/login.conf" ; then
8d184c09 2813 AC_DEFINE_UNQUOTED(USER_PATH, "$user_path")
2814 AC_SUBST(user_path)
2815fi
cb807f40 2816
06617857 2817# Set superuser path separately to user path
06617857 2818AC_ARG_WITH(superuser-path,
2819 [ --with-superuser-path= Specify different path for super-user],
2820 [
6cf0200f 2821 if test -n "$withval" && test "x$withval" != "xno" && \
2822 test "x${withval}" != "xyes"; then
06617857 2823 AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval")
2824 superuser_path=$withval
2825 fi
2826 ]
2827)
2828
2829
58d100bf 2830AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
aff51935 2831IPV4_IN6_HACK_MSG="no"
80faa19f 2832AC_ARG_WITH(4in6,
2833 [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses],
2834 [
2835 if test "x$withval" != "xno" ; then
2836 AC_MSG_RESULT(yes)
2837 AC_DEFINE(IPV4_IN_IPV6)
aff51935 2838 IPV4_IN6_HACK_MSG="yes"
80faa19f 2839 else
2840 AC_MSG_RESULT(no)
2841 fi
2842 ],[
2843 if test "x$inet6_default_4in6" = "xyes"; then
2844 AC_MSG_RESULT([yes (default)])
2845 AC_DEFINE(IPV4_IN_IPV6)
aff51935 2846 IPV4_IN6_HACK_MSG="yes"
80faa19f 2847 else
2848 AC_MSG_RESULT([no (default)])
2849 fi
2850 ]
2851)
2852
af774732 2853# Whether to enable BSD auth support
f1b0ecc3 2854BSD_AUTH_MSG=no
af774732 2855AC_ARG_WITH(bsd-auth,
2856 [ --with-bsd-auth Enable BSD auth support],
2857 [
82f4e93d 2858 if test "x$withval" != "xno" ; then
af774732 2859 AC_DEFINE(BSD_AUTH)
f1b0ecc3 2860 BSD_AUTH_MSG=yes
af774732 2861 fi
2862 ]
2863)
2864
a0391976 2865# Where to place sshd.pid
19d9ac2a 2866piddir=/var/run
81dadca3 2867# make sure the directory exists
82f4e93d 2868if test ! -d $piddir ; then
81dadca3 2869 piddir=`eval echo ${sysconfdir}`
2870 case $piddir in
aff51935 2871 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
81dadca3 2872 esac
2873fi
2874
47e45e44 2875AC_ARG_WITH(pid-dir,
2876 [ --with-pid-dir=PATH Specify location of ssh.pid file],
2877 [
6cf0200f 2878 if test -n "$withval" && test "x$withval" != "xno" && \
2879 test "x${withval}" != "xyes"; then
19d9ac2a 2880 piddir=$withval
82f4e93d 2881 if test ! -d $piddir ; then
81dadca3 2882 AC_MSG_WARN([** no $piddir directory on this system **])
2883 fi
47e45e44 2884 fi
2885 ]
2886)
b7a87eea 2887
42f11eb2 2888AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir")
19d9ac2a 2889AC_SUBST(piddir)
47e45e44 2890
1d7b9b20 2891dnl allow user to disable some login recording features
2892AC_ARG_ENABLE(lastlog,
bfd550a2 2893 [ --disable-lastlog disable use of lastlog even if detected [no]],
ddb154b3 2894 [
2895 if test "x$enableval" = "xno" ; then
2896 AC_DEFINE(DISABLE_LASTLOG)
2897 fi
2898 ]
1d7b9b20 2899)
2900AC_ARG_ENABLE(utmp,
bfd550a2 2901 [ --disable-utmp disable use of utmp even if detected [no]],
ddb154b3 2902 [
2903 if test "x$enableval" = "xno" ; then
2904 AC_DEFINE(DISABLE_UTMP)
2905 fi
2906 ]
1d7b9b20 2907)
2908AC_ARG_ENABLE(utmpx,
bfd550a2 2909 [ --disable-utmpx disable use of utmpx even if detected [no]],
ddb154b3 2910 [
2911 if test "x$enableval" = "xno" ; then
2912 AC_DEFINE(DISABLE_UTMPX)
2913 fi
2914 ]
1d7b9b20 2915)
2916AC_ARG_ENABLE(wtmp,
bfd550a2 2917 [ --disable-wtmp disable use of wtmp even if detected [no]],
ddb154b3 2918 [
2919 if test "x$enableval" = "xno" ; then
2920 AC_DEFINE(DISABLE_WTMP)
2921 fi
2922 ]
1d7b9b20 2923)
2924AC_ARG_ENABLE(wtmpx,
bfd550a2 2925 [ --disable-wtmpx disable use of wtmpx even if detected [no]],
ddb154b3 2926 [
2927 if test "x$enableval" = "xno" ; then
2928 AC_DEFINE(DISABLE_WTMPX)
2929 fi
2930 ]
1d7b9b20 2931)
2932AC_ARG_ENABLE(libutil,
bfd550a2 2933 [ --disable-libutil disable use of libutil (login() etc.) [no]],
ddb154b3 2934 [
2935 if test "x$enableval" = "xno" ; then
2936 AC_DEFINE(DISABLE_LOGIN)
2937 fi
2938 ]
1d7b9b20 2939)
2940AC_ARG_ENABLE(pututline,
bfd550a2 2941 [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]],
ddb154b3 2942 [
2943 if test "x$enableval" = "xno" ; then
aff51935 2944 AC_DEFINE(DISABLE_PUTUTLINE)
ddb154b3 2945 fi
2946 ]
1d7b9b20 2947)
2948AC_ARG_ENABLE(pututxline,
bfd550a2 2949 [ --disable-pututxline disable use of pututxline() etc. ([uw]tmpx) [no]],
ddb154b3 2950 [
2951 if test "x$enableval" = "xno" ; then
2952 AC_DEFINE(DISABLE_PUTUTXLINE)
2953 fi
2954 ]
1d7b9b20 2955)
2956AC_ARG_WITH(lastlog,
bfd550a2 2957 [ --with-lastlog=FILE|DIR specify lastlog location [common locations]],
8c89dd2b 2958 [
82f4e93d 2959 if test "x$withval" = "xno" ; then
8c89dd2b 2960 AC_DEFINE(DISABLE_LASTLOG)
6cf0200f 2961 elif test -n "$withval" && test "x${withval}" != "xyes"; then
8c89dd2b 2962 conf_lastlog_location=$withval
2963 fi
2964 ]
2965)
1d7b9b20 2966
2967dnl lastlog, [uw]tmpx? detection
2968dnl NOTE: set the paths in the platform section to avoid the
2969dnl need for command-line parameters
2970dnl lastlog and [uw]tmp are subject to a file search if all else fails
2971
2972dnl lastlog detection
2973dnl NOTE: the code itself will detect if lastlog is a directory
2974AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
2975AC_TRY_COMPILE([
2976#include <sys/types.h>
2977#include <utmp.h>
2978#ifdef HAVE_LASTLOG_H
2979# include <lastlog.h>
2980#endif
d7c0f3d5 2981#ifdef HAVE_PATHS_H
1d7b9b20 2982# include <paths.h>
41cb4569 2983#endif
2984#ifdef HAVE_LOGIN_H
2985# include <login.h>
1d7b9b20 2986#endif
2987 ],
2988 [ char *lastlog = LASTLOG_FILE; ],
2989 [ AC_MSG_RESULT(yes) ],
d7c0f3d5 2990 [
2991 AC_MSG_RESULT(no)
2992 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
2993 AC_TRY_COMPILE([
2994#include <sys/types.h>
2995#include <utmp.h>
2996#ifdef HAVE_LASTLOG_H
2997# include <lastlog.h>
2998#endif
2999#ifdef HAVE_PATHS_H
3000# include <paths.h>
3001#endif
3002 ],
3003 [ char *lastlog = _PATH_LASTLOG; ],
3004 [ AC_MSG_RESULT(yes) ],
3005 [
f282b668 3006 AC_MSG_RESULT(no)
d7c0f3d5 3007 system_lastlog_path=no
3008 ])
3009 ]
1d7b9b20 3010)
d7c0f3d5 3011
1d7b9b20 3012if test -z "$conf_lastlog_location"; then
3013 if test x"$system_lastlog_path" = x"no" ; then
3014 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
e5fe9a1f 3015 if (test -d "$f" || test -f "$f") ; then
1d7b9b20 3016 conf_lastlog_location=$f
3017 fi
3018 done
3019 if test -z "$conf_lastlog_location"; then
f8119cef 3020 AC_MSG_WARN([** Cannot find lastlog **])
3021 dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
1d7b9b20 3022 fi
3023 fi
3024fi
3025
3026if test -n "$conf_lastlog_location"; then
3027 AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location")
82f4e93d 3028fi
1d7b9b20 3029
3030dnl utmp detection
3031AC_MSG_CHECKING([if your system defines UTMP_FILE])
3032AC_TRY_COMPILE([
3033#include <sys/types.h>
3034#include <utmp.h>
d7c0f3d5 3035#ifdef HAVE_PATHS_H
1d7b9b20 3036# include <paths.h>
3037#endif
3038 ],
3039 [ char *utmp = UTMP_FILE; ],
3040 [ AC_MSG_RESULT(yes) ],
3041 [ AC_MSG_RESULT(no)
3042 system_utmp_path=no ]
3043)
3044if test -z "$conf_utmp_location"; then
3045 if test x"$system_utmp_path" = x"no" ; then
3046 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3047 if test -f $f ; then
3048 conf_utmp_location=$f
3049 fi
3050 done
3051 if test -z "$conf_utmp_location"; then
3052 AC_DEFINE(DISABLE_UTMP)
3053 fi
3054 fi
3055fi
3056if test -n "$conf_utmp_location"; then
3057 AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location")
82f4e93d 3058fi
1d7b9b20 3059
3060dnl wtmp detection
3061AC_MSG_CHECKING([if your system defines WTMP_FILE])
3062AC_TRY_COMPILE([
3063#include <sys/types.h>
3064#include <utmp.h>
d7c0f3d5 3065#ifdef HAVE_PATHS_H
1d7b9b20 3066# include <paths.h>
3067#endif
3068 ],
3069 [ char *wtmp = WTMP_FILE; ],
3070 [ AC_MSG_RESULT(yes) ],
3071 [ AC_MSG_RESULT(no)
3072 system_wtmp_path=no ]
3073)
3074if test -z "$conf_wtmp_location"; then
3075 if test x"$system_wtmp_path" = x"no" ; then
3076 for f in /usr/adm/wtmp /var/log/wtmp; do
3077 if test -f $f ; then
3078 conf_wtmp_location=$f
3079 fi
3080 done
3081 if test -z "$conf_wtmp_location"; then
3082 AC_DEFINE(DISABLE_WTMP)
3083 fi
3084 fi
3085fi
3086if test -n "$conf_wtmp_location"; then
3087 AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location")
82f4e93d 3088fi
1d7b9b20 3089
3090
3091dnl utmpx detection - I don't know any system so perverse as to require
3092dnl utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3093dnl there, though.
3094AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3095AC_TRY_COMPILE([
3096#include <sys/types.h>
3097#include <utmp.h>
3098#ifdef HAVE_UTMPX_H
3099#include <utmpx.h>
3100#endif
d7c0f3d5 3101#ifdef HAVE_PATHS_H
1d7b9b20 3102# include <paths.h>
3103#endif
3104 ],
3105 [ char *utmpx = UTMPX_FILE; ],
3106 [ AC_MSG_RESULT(yes) ],
3107 [ AC_MSG_RESULT(no)
3108 system_utmpx_path=no ]
3109)
3110if test -z "$conf_utmpx_location"; then
3111 if test x"$system_utmpx_path" = x"no" ; then
3112 AC_DEFINE(DISABLE_UTMPX)
3113 fi
3114else
3115 AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location")
82f4e93d 3116fi
1d7b9b20 3117
3118dnl wtmpx detection
3119AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3120AC_TRY_COMPILE([
3121#include <sys/types.h>
3122#include <utmp.h>
3123#ifdef HAVE_UTMPX_H
3124#include <utmpx.h>
3125#endif
d7c0f3d5 3126#ifdef HAVE_PATHS_H
1d7b9b20 3127# include <paths.h>
3128#endif
3129 ],
3130 [ char *wtmpx = WTMPX_FILE; ],
3131 [ AC_MSG_RESULT(yes) ],
3132 [ AC_MSG_RESULT(no)
3133 system_wtmpx_path=no ]
3134)
3135if test -z "$conf_wtmpx_location"; then
3136 if test x"$system_wtmpx_path" = x"no" ; then
3137 AC_DEFINE(DISABLE_WTMPX)
3138 fi
3139else
3140 AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location")
82f4e93d 3141fi
1d7b9b20 3142
b7a87eea 3143
bd499f9e 3144if test ! -z "$blibpath" ; then
68ece370 3145 LDFLAGS="$LDFLAGS $blibflags$blibpath"
3146 AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
bd499f9e 3147fi
3148
ddceb1c8 3149dnl remove pam and dl because they are in $LIBPAM
3150if test "$PAM_MSG" = yes ; then
98f2d9d5 3151 LIBS=`echo $LIBS | sed 's/-lpam //'`
3152fi
3153if test "$ac_cv_lib_pam_pam_set_item" = yes ; then
3154 LIBS=`echo $LIBS | sed 's/-ldl //'`
ddceb1c8 3155fi
3156
3c62e7eb 3157AC_EXEEXT
d7cfdd7c 3158AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openbsd-compat/Makefile \
3159 scard/Makefile ssh_prng_cmds survey.sh])
98a7c37b 3160AC_OUTPUT
d3083fbd 3161
cbd7492e 3162# Print summary of options
3163
cbd7492e 3164# Someone please show me a better way :)
3165A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3166B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3167C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3168D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
f5665f6f 3169E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
e0c4d3ac 3170F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
cbd7492e 3171G=`eval echo ${piddir}` ; G=`eval echo ${G}`
ecac8ee5 3172H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3173I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3174J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
cbd7492e 3175
3176echo ""
26de7942 3177echo "OpenSSH has been configured with the following options:"
ecac8ee5 3178echo " User binaries: $B"
3179echo " System binaries: $C"
3180echo " Configuration files: $D"
3181echo " Askpass program: $E"
3182echo " Manual pages: $F"
3183echo " PID file: $G"
3184echo " Privilege separation chroot path: $H"
95b99395 3185if test "x$external_path_file" = "x/etc/login.conf" ; then
3186echo " At runtime, sshd will use the path defined in $external_path_file"
3187echo " Make sure the path to scp is present, otherwise scp will not work"
8d184c09 3188else
ecac8ee5 3189echo " sshd default user PATH: $I"
89bbd457 3190 if test ! -z "$external_path_file"; then
95b99395 3191echo " (If PATH is set in $external_path_file it will be used instead. If"
3192echo " used, ensure the path to scp is present, otherwise scp will not work.)"
3193 fi
8d184c09 3194fi
06617857 3195if test ! -z "$superuser_path" ; then
ecac8ee5 3196echo " sshd superuser user PATH: $J"
3197fi
3198echo " Manpage format: $MANTYPE"
3e05e934 3199echo " PAM support: $PAM_MSG"
ecac8ee5 3200echo " KerberosV support: $KRB5_MSG"
3201echo " Smartcard support: $SCARD_MSG"
ecac8ee5 3202echo " S/KEY support: $SKEY_MSG"
3203echo " TCP Wrappers support: $TCPW_MSG"
3204echo " MD5 password support: $MD5_MSG"
59031773 3205echo " libedit support: $LIBEDIT_MSG"
3deb1408 3206echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
ecac8ee5 3207echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3208echo " BSD Auth support: $BSD_AUTH_MSG"
3209echo " Random number source: $RAND_MSG"
f1b0ecc3 3210if test ! -z "$USE_RAND_HELPER" ; then
ecac8ee5 3211echo " ssh-rand-helper collects from: $RAND_HELPER_MSG"
af774732 3212fi
3213
cbd7492e 3214echo ""
3215
0c2fb82f 3216echo " Host: ${host}"
3217echo " Compiler: ${CC}"
3218echo " Compiler flags: ${CFLAGS}"
3219echo "Preprocessor flags: ${CPPFLAGS}"
3220echo " Linker flags: ${LDFLAGS}"
ddceb1c8 3221echo " Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
cbd7492e 3222
3223echo ""
3224
9cefe228 3225if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
b3146b5f 3226 echo "SVR4 style packages are supported with \"make package\""
3227 echo ""
9cefe228 3228fi
3229
adeebd37 3230if test "x$PAM_MSG" = "xyes" ; then
f1b0ecc3 3231 echo "PAM is enabled. You may need to install a PAM control file "
3232 echo "for sshd, otherwise password authentication may fail. "
aff51935 3233 echo "Example PAM control files can be found in the contrib/ "
f1b0ecc3 3234 echo "subdirectory"
adeebd37 3235 echo ""
3236fi
3237
f1b0ecc3 3238if test ! -z "$RAND_HELPER_CMDHASH" ; then
3239 echo "WARNING: you are using the builtin random number collection "
3240 echo "service. Please read WARNING.RNG and request that your OS "
3241 echo "vendor includes kernel-based random number collection in "
3242 echo "future versions of your OS."
2c523de9 3243 echo ""
3244fi
af774732 3245
2f6f9cff 3246if test ! -z "$NO_PEERCHECK" ; then
3247 echo "WARNING: the operating system that you are using does not "
3248 echo "appear to support either the getpeereid() API nor the "
3249 echo "SO_PEERCRED getsockopt() option. These facilities are used to "
3250 echo "enforce security checks to prevent unauthorised connections to "
3251 echo "ssh-agent. Their absence increases the risk that a malicious "
3252 echo "user can connect to your agent. "
3253 echo ""
3254fi
3255
7b578f7d 3256if test "$AUDIT_MODULE" = "bsm" ; then
3257 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
3258 echo "See the Solaris section in README.platform for details."
3259fi
git-cvsimport mirror of OpenSSH
This page took 1.464311 seconds and 5 git commands to generate.