]> andersk Git - openssh.git/blame - configure.ac
andersk / openssh.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
- (dtucker) [configure.ac] Prevent configure --with-zlib from adding -Iyes
[openssh.git] / configure.ac
CommitLineData
eb5d7ff6 1# $Id$
2b983b95 2#
3# Copyright (c) 1999-2004 Damien Miller
4#
5# Permission to use, copy, modify, and distribute this software for any
6# purpose with or without fee is hereby granted, provided that the above
7# copyright notice and this permission notice appear in all copies.
8#
9# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
0b202697 16
bc6f919d 17AC_INIT(OpenSSH, Portable)
98a7c37b 18AC_CONFIG_SRCDIR([ssh.c])
5881cd60 19
20AC_CONFIG_HEADER(config.h)
b14b2ae7 21AC_PROG_CC
a7effaac 22AC_CANONICAL_HOST
cf0c5df5 23AC_C_BIGENDIAN
5881cd60 24
a0391976 25# Checks for programs.
4bbf95fa 26AC_PROG_AWK
4cca272e 27AC_PROG_CPP
5881cd60 28AC_PROG_RANLIB
cf8dd513 29AC_PROG_INSTALL
bee0a37e 30AC_PATH_PROG(AR, ar)
ddd8c95b 31AC_PATH_PROG(CAT, cat)
32AC_PATH_PROG(KILL, kill)
13dd877b 33AC_PATH_PROGS(PERL, perl5 perl)
c3690df3 34AC_PATH_PROG(SED, sed)
a0f84251 35AC_SUBST(PERL)
ad85db64 36AC_PATH_PROG(ENT, ent)
37AC_SUBST(ENT)
6958bd37 38AC_PATH_PROG(TEST_MINUS_S_SH, bash)
39AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
40AC_PATH_PROG(TEST_MINUS_S_SH, sh)
6193497b 41AC_PATH_PROG(SH, sh)
a3245b92 42AC_SUBST(TEST_SHELL,sh)
f498ed15 43
9cefe228 44dnl for buildpkg.sh
45AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
46 [/usr/sbin${PATH_SEPARATOR}/etc])
47AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
48 [/usr/sbin${PATH_SEPARATOR}/etc])
49AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
50
948fd8b9 51# System features
52AC_SYS_LARGEFILE
53
c193d002 54if test -z "$AR" ; then
55 AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
56fi
57
2e73a022 58# Use LOGIN_PROGRAM from environment if possible
59if test ! -z "$LOGIN_PROGRAM" ; then
60 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM")
61else
62 # Search for login
63 AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
64 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
65 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
66 fi
67fi
68
37656beb 69AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
70if test ! -z "$PATH_PASSWD_PROG" ; then
71 AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG")
72fi
73
d423d822 74if test -z "$LD" ; then
75 LD=$CC
76fi
77AC_SUBST(LD)
82f4e93d 78
d423d822 79AC_C_INLINE
aff51935 80if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
5ed2bb5b 81 CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wno-uninitialized"
d423d822 82fi
83
e6354014 84AC_ARG_WITH(rpath,
85 [ --without-rpath Disable auto-added -R linker paths],
86 [
82f4e93d 87 if test "x$withval" = "xno" ; then
e6354014 88 need_dash_r=""
89 fi
90 if test "x$withval" = "xyes" ; then
91 need_dash_r=1
92 fi
93 ]
94)
95
a0391976 96# Check for some target-specific stuff
a7effaac 97case "$host" in
9d6b1b96 98*-*-aix*)
aff51935 99 AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
68ece370 100 if (test -z "$blibpath"); then
0a15d73b 101 blibpath="/usr/lib:/lib"
68ece370 102 fi
103 saved_LDFLAGS="$LDFLAGS"
104 for tryflags in -blibpath: -Wl,-blibpath: -Wl,-rpath, ;do
105 if (test -z "$blibflags"); then
106 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
107 AC_TRY_LINK([], [], [blibflags=$tryflags])
108 fi
109 done
110 if (test -z "$blibflags"); then
111 AC_MSG_RESULT(not found)
112 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
113 else
114 AC_MSG_RESULT($blibflags)
bd499f9e 115 fi
68ece370 116 LDFLAGS="$saved_LDFLAGS"
e351e493 117 dnl Check for authenticate. Might be in libs.a on older AIXes
118 AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE)],
0764e748 119 [AC_CHECK_LIB(s,authenticate,
e351e493 120 [ AC_DEFINE(WITH_AIXAUTHENTICATE)
0764e748 121 LIBS="$LIBS -ls"
122 ])
123 ])
ba603e06 124 dnl Check for various auth function declarations in headers.
c85ed8e2 125 AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
126 passwdexpired], , , [#include <usersec.h>])
e351e493 127 dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
ba603e06 128 AC_CHECK_DECLS(loginfailed,
e351e493 129 [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
130 AC_TRY_COMPILE(
f58c0e01 131 [#include <usersec.h>],
e351e493 132 [(void)loginfailed("user","host","tty",0);],
133 [AC_MSG_RESULT(yes)
134 AC_DEFINE(AIX_LOGINFAILED_4ARG)],
f58c0e01 135 [AC_MSG_RESULT(no)]
e351e493 136 )],
137 [],
138 [#include <usersec.h>]
139 )
2aa3a16c 140 AC_CHECK_FUNCS(setauthdb)
5ccf88cb 141 check_for_aix_broken_getaddrinfo=1
1352689f 142 AC_DEFINE(BROKEN_REALPATH)
3b8dff69 143 AC_DEFINE(SETEUID_BREAKS_SETUID)
144 AC_DEFINE(BROKEN_SETREUID)
145 AC_DEFINE(BROKEN_SETREGID)
a3cef3ca 146 dnl AIX handles lastlog as part of its login message
147 AC_DEFINE(DISABLE_LASTLOG)
58177c0a 148 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3a2b2b44 149 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
9d6b1b96 150 ;;
3c62e7eb 151*-*-cygwin*)
a52997bd 152 check_for_libcrypt_later=1
ffb8d130 153 LIBS="$LIBS /usr/lib/textmode.o"
3c62e7eb 154 AC_DEFINE(HAVE_CYGWIN)
7043a38d 155 AC_DEFINE(USE_PIPES)
3c62e7eb 156 AC_DEFINE(DISABLE_SHADOW)
3c62e7eb 157 AC_DEFINE(IP_TOS_IS_BROKEN)
3d114925 158 AC_DEFINE(NO_X11_UNIX_SOCKETS)
e6f15ed1 159 AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT)
94d8258b 160 AC_DEFINE(DISABLE_FD_PASSING)
3c62e7eb 161 ;;
d6fdb079 162*-*-dgux*)
163 AC_DEFINE(IP_TOS_IS_BROKEN)
0c6a72a5 164 AC_DEFINE(SETEUID_BREAKS_SETUID)
165 AC_DEFINE(BROKEN_SETREUID)
166 AC_DEFINE(BROKEN_SETREGID)
d6fdb079 167 ;;
39c98ef7 168*-*-darwin*)
33e2e066 169 AC_MSG_CHECKING(if we have working getaddrinfo)
170 AC_TRY_RUN([#include <mach-o/dyld.h>
171main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
172 exit(0);
173 else
174 exit(1);
175}], [AC_MSG_RESULT(working)],
176 [AC_MSG_RESULT(buggy)
177 AC_DEFINE(BROKEN_GETADDRINFO)],
b27e573d 178 [AC_MSG_RESULT(assume it is working)])
635e0c42 179 AC_DEFINE(SETEUID_BREAKS_SETUID)
180 AC_DEFINE(BROKEN_SETREUID)
181 AC_DEFINE(BROKEN_SETREGID)
ff620033 182 AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1)
39c98ef7 183 ;;
6e879cb4 184*-*-hpux10.26)
185 if test -z "$GCC"; then
186 CFLAGS="$CFLAGS -Ae"
187 fi
188 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
189 IPADDR_IN_DISPLAY=yes
190 AC_DEFINE(HAVE_SECUREWARE)
191 AC_DEFINE(USE_PIPES)
192 AC_DEFINE(LOGIN_NO_ENDOPT)
193 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3e6e3da0 194 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
3a2b2b44 195 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
f75ca46d 196 LIBS="$LIBS -lsec -lsecpw"
197 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
6e879cb4 198 disable_ptmx_check=yes
199 ;;
a7effaac 200*-*-hpux10*)
201 if test -z "$GCC"; then
fc1e8bf4 202 CFLAGS="$CFLAGS -Ae"
a7effaac 203 fi
28564873 204 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
44839801 205 IPADDR_IN_DISPLAY=yes
137d7b6c 206 AC_DEFINE(USE_PIPES)
a2572aa7 207 AC_DEFINE(LOGIN_NO_ENDOPT)
208 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3e6e3da0 209 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
3a2b2b44 210 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
f75ca46d 211 LIBS="$LIBS -lsec"
212 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
a7effaac 213 ;;
2b763e31 214*-*-hpux11*)
b8fea62d 215 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
44839801 216 IPADDR_IN_DISPLAY=yes
adeebd37 217 AC_DEFINE(PAM_SUN_CODEBASE)
2b10f47a 218 AC_DEFINE(USE_PIPES)
a2572aa7 219 AC_DEFINE(LOGIN_NO_ENDOPT)
220 AC_DEFINE(LOGIN_NEEDS_UTMPX)
764d4113 221 AC_DEFINE(DISABLE_UTMP)
3e6e3da0 222 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
3a2b2b44 223 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
b6610e8f 224 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
2fe51906 225 check_for_hpux_broken_getaddrinfo=1
b29fd59f 226 check_for_conflicting_getspnam=1
f75ca46d 227 LIBS="$LIBS -lsec"
228 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
2b763e31 229 ;;
d94aa2ae 230*-*-irix5*)
6ac7829a 231 PATH="$PATH:/usr/etc"
416ed5a7 232 AC_DEFINE(BROKEN_INET_NTOA)
cb433561 233 AC_DEFINE(SETEUID_BREAKS_SETUID)
234 AC_DEFINE(BROKEN_SETREUID)
235 AC_DEFINE(BROKEN_SETREGID)
0e8f4eba 236 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 237 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
b9795b89 238 ;;
239*-*-irix6*)
6ac7829a 240 PATH="$PATH:/usr/etc"
3206bb3b 241 AC_DEFINE(WITH_IRIX_ARRAY)
242 AC_DEFINE(WITH_IRIX_PROJECT)
243 AC_DEFINE(WITH_IRIX_AUDIT)
b5171f93 244 AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS)])
416ed5a7 245 AC_DEFINE(BROKEN_INET_NTOA)
412c0eaa 246 AC_DEFINE(SETEUID_BREAKS_SETUID)
247 AC_DEFINE(BROKEN_SETREUID)
248 AC_DEFINE(BROKEN_SETREGID)
3d59832f 249 AC_DEFINE(BROKEN_UPDWTMPX)
0e8f4eba 250 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 251 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
d94aa2ae 252 ;;
5cdfe03f 253*-*-linux*)
254 no_dev_ptmx=1
717057b6 255 check_for_libcrypt_later=1
eacb954e 256 check_for_openpty_ctty_bug=1
80faa19f 257 AC_DEFINE(DONT_TRY_OTHER_AF)
a8545c6c 258 AC_DEFINE(PAM_TTY_KLUDGE)
b90bed9f 259 AC_DEFINE(LOCKED_PASSWD_PREFIX, "!")
3a2b2b44 260 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
cd698186 261 AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM)
b6610e8f 262 AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
263 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
80faa19f 264 inet6_default_4in6=yes
bf7c1e6c 265 case `uname -r` in
ad84c479 266 1.*|2.0.*)
bf7c1e6c 267 AC_DEFINE(BROKEN_CMSG_TYPE)
268 ;;
bf7c1e6c 269 esac
5cdfe03f 270 ;;
66d6c27e 271mips-sony-bsd|mips-sony-newsos4)
272 AC_DEFINE(HAVE_NEWS4)
273 SONY=1
66d6c27e 274 ;;
d468fc76 275*-*-netbsd*)
33e2e066 276 check_for_libcrypt_before=1
82f4e93d 277 if test "x$withval" != "xno" ; then
e6354014 278 need_dash_r=1
279 fi
d468fc76 280 ;;
86b416a7 281*-*-freebsd*)
282 check_for_libcrypt_later=1
283 ;;
8707b7eb 284*-*-bsdi*)
285 AC_DEFINE(SETEUID_BREAKS_SETUID)
286 AC_DEFINE(BROKEN_SETREUID)
287 AC_DEFINE(BROKEN_SETREGID)
288 ;;
729bfe59 289*-next-*)
729bfe59 290 conf_lastlog_location="/usr/adm/lastlog"
698d107e 291 conf_utmp_location=/etc/utmp
292 conf_wtmp_location=/usr/adm/wtmp
293 MAIL=/usr/spool/mail
729bfe59 294 AC_DEFINE(HAVE_NEXT)
443172c4 295 AC_DEFINE(BROKEN_REALPATH)
00937921 296 AC_DEFINE(USE_PIPES)
86b416a7 297 AC_DEFINE(BROKEN_SAVED_UIDS)
729bfe59 298 ;;
9d6b1b96 299*-*-solaris*)
82f4e93d 300 if test "x$withval" != "xno" ; then
010e9d5b 301 need_dash_r=1
302 fi
adeebd37 303 AC_DEFINE(PAM_SUN_CODEBASE)
7e2d5fa4 304 AC_DEFINE(LOGIN_NEEDS_UTMPX)
305 AC_DEFINE(LOGIN_NEEDS_TERM)
7f0a4ff1 306 AC_DEFINE(PAM_TTY_KLUDGE)
059d3165 307 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID)
3e6e3da0 308 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
ad84c479 309 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
310 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 311 external_path_file=/etc/default/login
1d7b9b20 312 # hardwire lastlog location (can't detect it on some versions)
313 conf_lastlog_location="/var/adm/lastlog"
32c80420 314 AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
315 sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
316 if test "$sol2ver" -ge 8; then
317 AC_MSG_RESULT(yes)
318 AC_DEFINE(DISABLE_UTMP)
319 AC_DEFINE(DISABLE_WTMP)
320 else
321 AC_MSG_RESULT(no)
322 fi
9d6b1b96 323 ;;
a423beaf 324*-*-sunos4*)
0c2fb82f 325 CPPFLAGS="$CPPFLAGS -DSUNOS4"
a423beaf 326 AC_CHECK_FUNCS(getpwanam)
adeebd37 327 AC_DEFINE(PAM_SUN_CODEBASE)
32eec038 328 conf_utmp_location=/etc/utmp
329 conf_wtmp_location=/var/adm/wtmp
330 conf_lastlog_location=/var/adm/lastlog
137d7b6c 331 AC_DEFINE(USE_PIPES)
a423beaf 332 ;;
6f68f28a 333*-ncr-sysv*)
98a7c37b 334 LIBS="$LIBS -lc89"
29525240 335 AC_DEFINE(USE_PIPES)
eabb99c6 336 AC_DEFINE(SSHD_ACQUIRES_CTTY)
6fb3618d 337 AC_DEFINE(SETEUID_BREAKS_SETUID)
338 AC_DEFINE(BROKEN_SETREUID)
339 AC_DEFINE(BROKEN_SETREGID)
6f68f28a 340 ;;
132dd316 341*-sni-sysv*)
c8c15bcb 342 # /usr/ucblib MUST NOT be searched on ReliantUNIX
e2798e96 343 AC_CHECK_LIB(dl, dlsym, ,)
85cf54ec 344 # -lresolv needs to be at then end of LIBS or DNS lookups break
345 AC_CHECK_LIB(res_query, resolv, [ LIBS="$LIBS -lresolv" ])
9548d6c8 346 IPADDR_IN_DISPLAY=yes
347 AC_DEFINE(USE_PIPES)
132dd316 348 AC_DEFINE(IP_TOS_IS_BROKEN)
605369bb 349 AC_DEFINE(SETEUID_BREAKS_SETUID)
350 AC_DEFINE(BROKEN_SETREUID)
351 AC_DEFINE(BROKEN_SETREGID)
eabb99c6 352 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 353 external_path_file=/etc/default/login
c8c15bcb 354 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
355 # Attention: always take care to bind libsocket and libnsl before libc,
356 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
132dd316 357 ;;
79a7ba96 358# UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
77bb0bca 359*-*-sysv4.2*)
ed6553e2 360 AC_DEFINE(USE_PIPES)
7ed101c0 361 AC_DEFINE(SETEUID_BREAKS_SETUID)
362 AC_DEFINE(BROKEN_SETREUID)
363 AC_DEFINE(BROKEN_SETREGID)
77bb0bca 364 ;;
79a7ba96 365# UnixWare 7.x, OpenUNIX 8
77bb0bca 366*-*-sysv5*)
ed6553e2 367 AC_DEFINE(USE_PIPES)
7ed101c0 368 AC_DEFINE(SETEUID_BREAKS_SETUID)
369 AC_DEFINE(BROKEN_SETREUID)
370 AC_DEFINE(BROKEN_SETREGID)
77bb0bca 371 ;;
9d6b1b96 372*-*-sysv*)
9d6b1b96 373 ;;
79a7ba96 374# SCO UNIX and OEM versions of SCO UNIX
77bb0bca 375*-*-sco3.2v4*)
11cf4f1f 376 AC_MSG_ERROR("This Platform is no longer supported.")
77bb0bca 377 ;;
79a7ba96 378# SCO OpenServer 5.x
77bb0bca 379*-*-sco3.2v5*)
21710e39 380 if test -z "$GCC"; then
381 CFLAGS="$CFLAGS -belf"
382 fi
ed6553e2 383 LIBS="$LIBS -lprot -lx -ltinfo -lm"
509b1f88 384 no_dev_ptmx=1
ed6553e2 385 AC_DEFINE(USE_PIPES)
6e879cb4 386 AC_DEFINE(HAVE_SECUREWARE)
d287c664 387 AC_DEFINE(DISABLE_SHADOW)
94d8258b 388 AC_DEFINE(DISABLE_FD_PASSING)
7ed101c0 389 AC_DEFINE(SETEUID_BREAKS_SETUID)
390 AC_DEFINE(BROKEN_SETREUID)
391 AC_DEFINE(BROKEN_SETREGID)
bcebad47 392 AC_DEFINE(WITH_ABBREV_NO_TTY)
34f2baf0 393 AC_DEFINE(BROKEN_UPDWTMPX)
3ade3b57 394 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
aca75d94 395 AC_CHECK_FUNCS(getluid setluid)
533875af 396 MANTYPE=man
a3245b92 397 TEST_SHELL=ksh
509b1f88 398 ;;
ccbb983c 399*-*-unicosmk*)
c1ad5966 400 AC_DEFINE(NO_SSH_LASTLOG)
401 AC_DEFINE(SETEUID_BREAKS_SETUID)
402 AC_DEFINE(BROKEN_SETREUID)
403 AC_DEFINE(BROKEN_SETREGID)
ccbb983c 404 AC_DEFINE(USE_PIPES)
405 AC_DEFINE(DISABLE_FD_PASSING)
406 LDFLAGS="$LDFLAGS"
407 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
408 MANTYPE=cat
d262b7f2 409 ;;
7b9a8c6e 410*-*-unicosmp*)
c1ad5966 411 AC_DEFINE(SETEUID_BREAKS_SETUID)
412 AC_DEFINE(BROKEN_SETREUID)
413 AC_DEFINE(BROKEN_SETREGID)
7b9a8c6e 414 AC_DEFINE(WITH_ABBREV_NO_TTY)
415 AC_DEFINE(USE_PIPES)
416 AC_DEFINE(DISABLE_FD_PASSING)
417 LDFLAGS="$LDFLAGS"
c1ad5966 418 LIBS="$LIBS -lgen -lacid -ldb"
7b9a8c6e 419 MANTYPE=cat
420 ;;
ca5c7d6a 421*-*-unicos*)
c1ad5966 422 AC_DEFINE(SETEUID_BREAKS_SETUID)
423 AC_DEFINE(BROKEN_SETREUID)
424 AC_DEFINE(BROKEN_SETREGID)
ca5c7d6a 425 AC_DEFINE(USE_PIPES)
94d8258b 426 AC_DEFINE(DISABLE_FD_PASSING)
ef51930f 427 AC_DEFINE(NO_SSH_LASTLOG)
ccbb983c 428 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
429 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
430 MANTYPE=cat
a704dd54 431 ;;
4d33e531 432*-dec-osf*)
99c8ddac 433 AC_MSG_CHECKING(for Digital Unix SIA)
434 no_osfsia=""
435 AC_ARG_WITH(osfsia,
436 [ --with-osfsia Enable Digital Unix SIA],
437 [
438 if test "x$withval" = "xno" ; then
439 AC_MSG_RESULT(disabled)
440 no_osfsia=1
441 fi
442 ],
443 )
444 if test -z "$no_osfsia" ; then
4d33e531 445 if test -f /etc/sia/matrix.conf; then
446 AC_MSG_RESULT(yes)
447 AC_DEFINE(HAVE_OSF_SIA)
448 AC_DEFINE(DISABLE_LOGIN)
58d0df4e 449 AC_DEFINE(DISABLE_FD_PASSING)
4d33e531 450 LIBS="$LIBS -lsecurity -ldb -lm -laud"
451 else
452 AC_MSG_RESULT(no)
dbf8efb3 453 AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin")
4d33e531 454 fi
455 fi
a6e67b60 456 AC_DEFINE(BROKEN_GETADDRINFO)
f4f2ff4f 457 AC_DEFINE(SETEUID_BREAKS_SETUID)
08da2d08 458 AC_DEFINE(BROKEN_SETREUID)
459 AC_DEFINE(BROKEN_SETREGID)
4d33e531 460 ;;
41cb4569 461
462*-*-nto-qnx)
463 AC_DEFINE(USE_PIPES)
464 AC_DEFINE(NO_X11_UNIX_SOCKETS)
465 AC_DEFINE(MISSING_NFDBITS)
466 AC_DEFINE(MISSING_HOWMANY)
467 AC_DEFINE(MISSING_FD_MASK)
468 ;;
a7effaac 469esac
470
8e7b16f8 471# Allow user to specify flags
472AC_ARG_WITH(cflags,
473 [ --with-cflags Specify additional flags to pass to compiler],
474 [
6cf0200f 475 if test -n "$withval" && test "x$withval" != "xno" && \
476 test "x${withval}" != "xyes"; then
8e7b16f8 477 CFLAGS="$CFLAGS $withval"
478 fi
82f4e93d 479 ]
8e7b16f8 480)
0c2fb82f 481AC_ARG_WITH(cppflags,
482 [ --with-cppflags Specify additional flags to pass to preprocessor] ,
483 [
6cf0200f 484 if test -n "$withval" && test "x$withval" != "xno" && \
485 test "x${withval}" != "xyes"; then
0c2fb82f 486 CPPFLAGS="$CPPFLAGS $withval"
487 fi
488 ]
489)
8e7b16f8 490AC_ARG_WITH(ldflags,
97b378bf 491 [ --with-ldflags Specify additional flags to pass to linker],
8e7b16f8 492 [
6cf0200f 493 if test -n "$withval" && test "x$withval" != "xno" && \
494 test "x${withval}" != "xyes"; then
8e7b16f8 495 LDFLAGS="$LDFLAGS $withval"
496 fi
82f4e93d 497 ]
8e7b16f8 498)
499AC_ARG_WITH(libs,
500 [ --with-libs Specify additional libraries to link with],
501 [
6cf0200f 502 if test -n "$withval" && test "x$withval" != "xno" && \
503 test "x${withval}" != "xyes"; then
8e7b16f8 504 LIBS="$LIBS $withval"
505 fi
82f4e93d 506 ]
8e7b16f8 507)
508
c5829391 509AC_MSG_CHECKING(compiler and flags for sanity)
479cece8 510AC_RUN_IFELSE(
511 [AC_LANG_SOURCE([
c5829391 512#include <stdio.h>
513int main(){exit(0);}
479cece8 514 ])],
c5829391 515 [ AC_MSG_RESULT(yes) ],
516 [
517 AC_MSG_RESULT(no)
518 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
1a01a50c 519 ],
520 [ AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
c5829391 521)
522
ddceb1c8 523# Checks for header files.
419e26e7 524AC_CHECK_HEADERS(bstring.h crypt.h dirent.h endian.h features.h \
525 floatingpoint.h getopt.h glob.h ia.h lastlog.h limits.h login.h \
526 login_cap.h maillock.h ndir.h netdb.h netgroup.h \
2511d104 527 netinet/in_systm.h pam/pam_appl.h paths.h pty.h readpassphrase.h \
5bbbc661 528 rpc/types.h security/pam_appl.h shadow.h stddef.h stdint.h \
419e26e7 529 strings.h sys/dir.h sys/strtio.h sys/audit.h sys/bitypes.h \
530 sys/bsdtty.h sys/cdefs.h sys/mman.h sys/ndir.h sys/prctl.h \
765a24cd 531 sys/pstat.h sys/select.h sys/stat.h sys/stream.h \
419e26e7 532 sys/stropts.h sys/sysmacros.h sys/time.h sys/timers.h sys/un.h \
533 time.h tmpdir.h ttyent.h usersec.h util.h utime.h utmp.h utmpx.h vis.h)
ddceb1c8 534
765a24cd 535# sys/ptms.h requires sys/stream.h to be included first on Solaris
536AC_CHECK_HEADERS(sys/ptms.h, [], [], [
537#ifdef HAVE_SYS_STREAM_H
538# include <sys/stream.h>
539#endif
540])
541
a0391976 542# Checks for libraries.
98a7c37b 543AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
544AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
2c523de9 545
446227d6 546dnl IRIX and Solaris 2.5.1 have dirname() in libgen
547AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
548 AC_CHECK_LIB(gen, dirname,[
549 AC_CACHE_CHECK([for broken dirname],
550 ac_cv_have_broken_dirname, [
551 save_LIBS="$LIBS"
552 LIBS="$LIBS -lgen"
553 AC_TRY_RUN(
554 [
555#include <libgen.h>
556#include <string.h>
557
558int main(int argc, char **argv) {
559 char *s, buf[32];
560
561 strncpy(buf,"/etc", 32);
562 s = dirname(buf);
563 if (!s || strncmp(s, "/", 32) != 0) {
564 exit(1);
565 } else {
566 exit(0);
567 }
568}
569 ],
570 [ ac_cv_have_broken_dirname="no" ],
571 [ ac_cv_have_broken_dirname="yes" ]
572 )
573 LIBS="$save_LIBS"
574 ])
575 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
576 LIBS="$LIBS -lgen"
577 AC_DEFINE(HAVE_DIRNAME)
578 AC_CHECK_HEADERS(libgen.h)
579 fi
580 ])
581])
582
583AC_CHECK_FUNC(getspnam, ,
584 AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
585AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME))
586
98a7c37b 587dnl zlib is required
588AC_ARG_WITH(zlib,
589 [ --with-zlib=PATH Use zlib in PATH],
6dd05556 590 [ if test "x$withval" = "xno" ; then
591 AC_MSG_ERROR([*** zlib is required ***])
592 elif test "x$withval" != "xyes"; then
98a7c37b 593 if test -d "$withval/lib"; then
594 if test -n "${need_dash_r}"; then
5a162955 595 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 596 else
5a162955 597 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 598 fi
599 else
600 if test -n "${need_dash_r}"; then
5a162955 601 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 602 else
5a162955 603 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 604 fi
605 fi
606 if test -d "$withval/include"; then
5a162955 607 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 608 else
5a162955 609 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 610 fi
6dd05556 611 fi ]
98a7c37b 612)
613
0a15d73b 614AC_CHECK_LIB(z, deflate, ,
615 [
616 saved_CPPFLAGS="$CPPFLAGS"
617 saved_LDFLAGS="$LDFLAGS"
618 save_LIBS="$LIBS"
619 dnl Check default zlib install dir
620 if test -n "${need_dash_r}"; then
621 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
622 else
623 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
624 fi
625 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
626 LIBS="$LIBS -lz"
627 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
628 [
629 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
630 ]
631 )
632 ]
633)
4ad65809 634AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
8068d564 635
636AC_ARG_WITH(zlib-version-check,
637 [ --without-zlib-version-check Disable zlib version check],
638 [ if test "x$withval" = "xno" ; then
639 zlib_check_nonfatal=1
640 fi
641 ]
642)
643
4ad65809 644AC_MSG_CHECKING(for zlib 1.1.4 or greater)
479cece8 645AC_RUN_IFELSE([AC_LANG_SOURCE([[
4ad65809 646#include <zlib.h>
647int main()
648{
649 int a, b, c, v;
650 if (sscanf(ZLIB_VERSION, "%d.%d.%d", &a, &b, &c) != 3)
651 exit(1);
652 v = a*1000000 + b*1000 + c;
653 if (v >= 1001004)
654 exit(0);
655 exit(2);
656}
479cece8 657 ]])],
4ad65809 658 AC_MSG_RESULT(yes),
659 [ AC_MSG_RESULT(no)
8068d564 660 if test -z "$zlib_check_nonfatal" ; then
661 AC_MSG_ERROR([*** zlib too old - check config.log ***
662Your reported zlib version has known security problems. It's possible your
663vendor has fixed these problems without changing the version number. If you
664are sure this is the case, you can disable the check by running
665"./configure --without-zlib-version-check".
666If you are in doubt, upgrade zlib to version 1.1.4 or greater.])
667 else
668 AC_MSG_WARN([zlib version may have security problems])
669 fi
1a01a50c 670 ],
671 [ AC_MSG_WARN([cross compiling: not checking zlib version]) ]
4ad65809 672)
48e7916f 673
2c523de9 674dnl UnixWare 2.x
aff51935 675AC_CHECK_FUNC(strcasecmp,
2c523de9 676 [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
677)
aff51935 678AC_CHECK_FUNC(utimes,
cda1ebcb 679 [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
680 LIBS="$LIBS -lc89"]) ]
2c523de9 681)
4cca272e 682
7c6d759d 683dnl Checks for libutil functions
684AC_CHECK_HEADERS(libutil.h)
685AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN)])
686AC_CHECK_FUNCS(logout updwtmp logwtmp)
687
a738c3b0 688AC_FUNC_STRFTIME
689
84ceda19 690# Check for ALTDIRFUNC glob() extension
691AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
692AC_EGREP_CPP(FOUNDIT,
693 [
694 #include <glob.h>
695 #ifdef GLOB_ALTDIRFUNC
696 FOUNDIT
697 #endif
aff51935 698 ],
84ceda19 699 [
700 AC_DEFINE(GLOB_HAS_ALTDIRFUNC)
701 AC_MSG_RESULT(yes)
702 ],
703 [
704 AC_MSG_RESULT(no)
705 ]
706)
4cca272e 707
40849fdb 708# Check for g.gl_matchc glob() extension
709AC_MSG_CHECKING(for gl_matchc field in glob_t)
710AC_EGREP_CPP(FOUNDIT,
aff51935 711 [
712 #include <glob.h>
40849fdb 713 int main(void){glob_t g; g.gl_matchc = 1;}
aff51935 714 ],
715 [
716 AC_DEFINE(GLOB_HAS_GL_MATCHC)
717 AC_MSG_RESULT(yes)
718 ],
719 [
720 AC_MSG_RESULT(no)
721 ]
40849fdb 722)
723
edbe6722 724AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
1a01a50c 725AC_RUN_IFELSE(
479cece8 726 [AC_LANG_SOURCE([[
edbe6722 727#include <sys/types.h>
728#include <dirent.h>
aec4cb4f 729int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
479cece8 730 ]])],
aff51935 731 [AC_MSG_RESULT(yes)],
edbe6722 732 [
733 AC_MSG_RESULT(no)
734 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
1a01a50c 735 ],
82f4e93d 736 [
1a01a50c 737 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
738 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
edbe6722 739 ]
740)
741
419e26e7 742AC_MSG_CHECKING([for /proc/pid/fd directory])
743if test -d "/proc/$$/fd" ; then
744 AC_DEFINE(HAVE_PROC_PID)
745 AC_MSG_RESULT(yes)
746else
747 AC_MSG_RESULT(no)
748fi
749
278588d8 750# Check whether user wants S/Key support
aff51935 751SKEY_MSG="no"
278588d8 752AC_ARG_WITH(skey,
6ff3d0dc 753 [ --with-skey[[=PATH]] Enable S/Key support (optionally in PATH)],
278588d8 754 [
755 if test "x$withval" != "xno" ; then
756
757 if test "x$withval" != "xyes" ; then
758 CPPFLAGS="$CPPFLAGS -I${withval}/include"
759 LDFLAGS="$LDFLAGS -L${withval}/lib"
760 fi
761
762 AC_DEFINE(SKEY)
763 LIBS="-lskey $LIBS"
aff51935 764 SKEY_MSG="yes"
82f4e93d 765
ddceb1c8 766 AC_MSG_CHECKING([for s/key support])
767 AC_TRY_RUN(
768 [
769#include <stdio.h>
770#include <skey.h>
aec4cb4f 771int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
ddceb1c8 772 ],
773 [AC_MSG_RESULT(yes)],
278588d8 774 [
ddceb1c8 775 AC_MSG_RESULT(no)
278588d8 776 AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
777 ])
141fc639 778 AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
779 AC_TRY_COMPILE(
780 [#include <stdio.h>
781 #include <skey.h>],
782 [(void)skeychallenge(NULL,"name","",0);],
783 [AC_MSG_RESULT(yes)
784 AC_DEFINE(SKEYCHALLENGE_4ARG)],
785 [AC_MSG_RESULT(no)]
786 )
278588d8 787 fi
788 ]
789)
790
791# Check whether user wants TCP wrappers support
98a7c37b 792TCPW_MSG="no"
278588d8 793AC_ARG_WITH(tcp-wrappers,
6ff3d0dc 794 [ --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
278588d8 795 [
796 if test "x$withval" != "xno" ; then
797 saved_LIBS="$LIBS"
98a7c37b 798 saved_LDFLAGS="$LDFLAGS"
799 saved_CPPFLAGS="$CPPFLAGS"
4b492aab 800 if test -n "${withval}" && \
6cf0200f 801 test "x${withval}" != "xyes"; then
98a7c37b 802 if test -d "${withval}/lib"; then
803 if test -n "${need_dash_r}"; then
5a162955 804 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 805 else
5a162955 806 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 807 fi
808 else
809 if test -n "${need_dash_r}"; then
5a162955 810 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 811 else
5a162955 812 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 813 fi
814 fi
815 if test -d "${withval}/include"; then
5a162955 816 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 817 else
5a162955 818 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 819 fi
98a7c37b 820 fi
ddceb1c8 821 LIBWRAP="-lwrap"
822 LIBS="$LIBWRAP $LIBS"
278588d8 823 AC_MSG_CHECKING(for libwrap)
824 AC_TRY_LINK(
825 [
77f09220 826#include <sys/types.h>
827#include <sys/socket.h>
828#include <netinet/in.h>
278588d8 829#include <tcpd.h>
830 int deny_severity = 0, allow_severity = 0;
831 ],
832 [hosts_access(0);],
833 [
834 AC_MSG_RESULT(yes)
835 AC_DEFINE(LIBWRAP)
ddceb1c8 836 AC_SUBST(LIBWRAP)
98a7c37b 837 TCPW_MSG="yes"
278588d8 838 ],
839 [
840 AC_MSG_ERROR([*** libwrap missing])
841 ]
842 )
ddceb1c8 843 LIBS="$saved_LIBS"
278588d8 844 fi
845 ]
846)
847
59031773 848# Check whether user wants libedit support
849LIBEDIT_MSG="no"
850AC_ARG_WITH(libedit,
6ff3d0dc 851 [ --with-libedit[[=PATH]] Enable libedit support for sftp],
59031773 852 [ if test "x$withval" != "xno" ; then
853 AC_CHECK_LIB(edit, el_init,
854 [ AC_DEFINE(USE_LIBEDIT, [], [Use libedit for sftp])
855 LIBEDIT="-ledit -lcurses"
856 LIBEDIT_MSG="yes"
857 AC_SUBST(LIBEDIT)
858 ],
859 [], [-lcurses]
860 )
861 fi ]
862)
863
7b578f7d 864AUDIT_MODULE=none
865AC_ARG_WITH(audit,
866 [ --with-audit=module Enable EXPERIMENTAL audit support (modules=debug,bsm)],
867 [
868 AC_MSG_CHECKING(for supported audit module)
869 case "$withval" in
870 bsm)
871 AC_MSG_RESULT(bsm)
872 AUDIT_MODULE=bsm
873 dnl Checks for headers, libs and functions
874 AC_CHECK_HEADERS(bsm/audit.h, [],
875 [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)])
876 AC_CHECK_LIB(bsm, getaudit, [],
877 [AC_MSG_ERROR(BSM enabled and required library not found)])
878 AC_CHECK_FUNCS(getaudit, [],
879 [AC_MSG_ERROR(BSM enabled and required function not found)])
880 # These are optional
7939c496 881 AC_CHECK_FUNCS(getaudit_addr)
7b578f7d 882 AC_DEFINE(USE_BSM_AUDIT, [], [Use BSM audit module])
883 ;;
884 debug)
885 AUDIT_MODULE=debug
886 AC_MSG_RESULT(debug)
887 AC_DEFINE(SSH_AUDIT_EVENTS, [], Use audit debugging module)
888 ;;
889 *)
890 AC_MSG_ERROR([Unknown audit module $withval])
891 ;;
892 esac ]
893)
894
19160674 895dnl Checks for library functions. Please keep in alphabetical order
896AC_CHECK_FUNCS(\
2909d712 897 arc4random __b64_ntop b64_ntop __b64_pton b64_pton bcopy \
667abcc6 898 bindresvport_sa clock closefrom dirfd fchdir fchmod fchown \
899 freeaddrinfo futimes getaddrinfo getcwd getgrouplist getnameinfo \
900 getopt getpeereid _getpty getrlimit getttyent glob inet_aton \
19160674 901 inet_ntoa inet_ntop innetgr login_getcapbool md5_crypt memmove \
79d4fc55 902 mkdtemp mmap ngetaddrinfo nsleep ogetaddrinfo openlog_r openpty \
e7f6070d 903 pstat prctl readpassphrase realpath recvmsg rresvport_af sendmsg \
79d4fc55 904 setdtablesize setegid setenv seteuid setgroups setlogin setpcred \
3f176010 905 setproctitle setregid setreuid setrlimit \
688eed4a 906 setsid setvbuf sigaction sigvec snprintf socketpair strerror \
7111a85c 907 strlcat strlcpy strmode strnvis strtoul sysconf tcgetpgrp \
351f44a0 908 truncate unsetenv updwtmpx utimes vhangup vsnprintf waitpid \
19160674 909)
98a7c37b 910
1a086f97 911# IRIX has a const char return value for gai_strerror()
912AC_CHECK_FUNCS(gai_strerror,[
913 AC_DEFINE(HAVE_GAI_STRERROR)
914 AC_TRY_COMPILE([
915#include <sys/types.h>
916#include <sys/socket.h>
917#include <netdb.h>
918
919const char *gai_strerror(int);],[
920char *str;
921
922str = gai_strerror(0);],[
923 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
924 [Define if gai_strerror() returns const char *])])])
925
92b1decf 926AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP))
927
309709db 928dnl Make sure prototypes are defined for these before using them.
08412d26 929AC_CHECK_DECL(strsep, [AC_CHECK_FUNCS(strsep)])
309709db 930AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
08412d26 931
3490699c 932dnl tcsendbreak might be a macro
933AC_CHECK_DECL(tcsendbreak,
934 [AC_DEFINE(HAVE_TCSENDBREAK)],
aff51935 935 [AC_CHECK_FUNCS(tcsendbreak)],
3490699c 936 [#include <termios.h>]
937)
938
41e0e158 939AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
940
3f176010 941AC_CHECK_FUNCS(setresuid, [
942 dnl Some platorms have setresuid that isn't implemented, test for this
943 AC_MSG_CHECKING(if setresuid seems to work)
479cece8 944 AC_RUN_IFELSE(
945 [AC_LANG_SOURCE([[
9a3fe0e2 946#include <stdlib.h>
947#include <errno.h>
948int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 949 ]])],
3f176010 950 [AC_MSG_RESULT(yes)],
24a9171d 951 [AC_DEFINE(BROKEN_SETRESUID)
1a01a50c 952 AC_MSG_RESULT(not implemented)],
953 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 954 )
955])
9a3fe0e2 956
3f176010 957AC_CHECK_FUNCS(setresgid, [
958 dnl Some platorms have setresgid that isn't implemented, test for this
959 AC_MSG_CHECKING(if setresgid seems to work)
479cece8 960 AC_RUN_IFELSE(
961 [AC_LANG_SOURCE([[
9a3fe0e2 962#include <stdlib.h>
963#include <errno.h>
964int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 965 ]])],
3f176010 966 [AC_MSG_RESULT(yes)],
967 [AC_DEFINE(BROKEN_SETRESGID)
1a01a50c 968 AC_MSG_RESULT(not implemented)],
969 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 970 )
971])
9a3fe0e2 972
2e73a022 973dnl Checks for time functions
1d7b9b20 974AC_CHECK_FUNCS(gettimeofday time)
2e73a022 975dnl Checks for utmp functions
b03bd394 976AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1d7b9b20 977AC_CHECK_FUNCS(utmpname)
2e73a022 978dnl Checks for utmpx functions
b03bd394 979AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1d7b9b20 980AC_CHECK_FUNCS(setutxent utmpxname)
76cd7316 981
aff51935 982AC_CHECK_FUNC(daemon,
beb43d31 983 [AC_DEFINE(HAVE_DAEMON)],
984 [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
985)
986
aff51935 987AC_CHECK_FUNC(getpagesize,
aa6bd60a 988 [AC_DEFINE(HAVE_GETPAGESIZE)],
989 [AC_CHECK_LIB(ucb, getpagesize, [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
990)
991
2647ae26 992# Check for broken snprintf
993if test "x$ac_cv_func_snprintf" = "xyes" ; then
994 AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1a01a50c 995 AC_RUN_IFELSE(
479cece8 996 [AC_LANG_SOURCE([[
2647ae26 997#include <stdio.h>
aec4cb4f 998int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
479cece8 999 ]])],
aff51935 1000 [AC_MSG_RESULT(yes)],
2647ae26 1001 [
1002 AC_MSG_RESULT(no)
1003 AC_DEFINE(BROKEN_SNPRINTF)
1004 AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1a01a50c 1005 ],
1006 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
2647ae26 1007 )
1008fi
1009
2f6f9cff 1010# Check for missing getpeereid (or equiv) support
1011NO_PEERCHECK=""
1012if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1013 AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1014 AC_TRY_COMPILE(
1015 [#include <sys/types.h>
1016 #include <sys/socket.h>],
1017 [int i = SO_PEERCRED;],
1018 [AC_MSG_RESULT(yes)],
1019 [AC_MSG_RESULT(no)
1020 NO_PEERCHECK=1]
1021 )
1022fi
1023
70e7d0b0 1024dnl see whether mkstemp() requires XXXXXX
1025if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1026AC_MSG_CHECKING([for (overly) strict mkstemp])
1027AC_TRY_RUN(
1028 [
1029#include <stdlib.h>
1030main() { char template[]="conftest.mkstemp-test";
1031if (mkstemp(template) == -1)
1032 exit(1);
1033unlink(template); exit(0);
1034}
1035 ],
1036 [
1037 AC_MSG_RESULT(no)
1038 ],
aff51935 1039 [
70e7d0b0 1040 AC_MSG_RESULT(yes)
1041 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1042 ],
1043 [
1044 AC_MSG_RESULT(yes)
1045 AC_DEFINE(HAVE_STRICT_MKSTEMP)
aff51935 1046 ]
70e7d0b0 1047)
1048fi
1049
eacb954e 1050dnl make sure that openpty does not reacquire controlling terminal
1051if test ! -z "$check_for_openpty_ctty_bug"; then
1052 AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1053 AC_TRY_RUN(
1054 [
1055#include <stdio.h>
1056#include <sys/fcntl.h>
1057#include <sys/types.h>
1058#include <sys/wait.h>
1059
1060int
1061main()
1062{
1063 pid_t pid;
1064 int fd, ptyfd, ttyfd, status;
1065
1066 pid = fork();
1067 if (pid < 0) { /* failed */
1068 exit(1);
1069 } else if (pid > 0) { /* parent */
1070 waitpid(pid, &status, 0);
aff51935 1071 if (WIFEXITED(status))
eacb954e 1072 exit(WEXITSTATUS(status));
1073 else
1074 exit(2);
1075 } else { /* child */
1076 close(0); close(1); close(2);
1077 setsid();
1078 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1079 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1080 if (fd >= 0)
1081 exit(3); /* Acquired ctty: broken */
1082 else
1083 exit(0); /* Did not acquire ctty: OK */
1084 }
1085}
1086 ],
1087 [
1088 AC_MSG_RESULT(yes)
1089 ],
1090 [
1091 AC_MSG_RESULT(no)
1092 AC_DEFINE(SSHD_ACQUIRES_CTTY)
1093 ]
1094 )
1095fi
1096
4b492aab 1097if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1098 test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
2fe51906 1099 AC_MSG_CHECKING(if getaddrinfo seems to work)
1100 AC_TRY_RUN(
1101 [
1102#include <stdio.h>
1103#include <sys/socket.h>
1104#include <netdb.h>
1105#include <errno.h>
1106#include <netinet/in.h>
1107
1108#define TEST_PORT "2222"
1109
1110int
1111main(void)
1112{
1113 int err, sock;
1114 struct addrinfo *gai_ai, *ai, hints;
1115 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1116
1117 memset(&hints, 0, sizeof(hints));
1118 hints.ai_family = PF_UNSPEC;
1119 hints.ai_socktype = SOCK_STREAM;
1120 hints.ai_flags = AI_PASSIVE;
1121
1122 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1123 if (err != 0) {
1124 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1125 exit(1);
1126 }
1127
1128 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1129 if (ai->ai_family != AF_INET6)
1130 continue;
1131
1132 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1133 sizeof(ntop), strport, sizeof(strport),
1134 NI_NUMERICHOST|NI_NUMERICSERV);
1135
1136 if (err != 0) {
1137 if (err == EAI_SYSTEM)
1138 perror("getnameinfo EAI_SYSTEM");
1139 else
1140 fprintf(stderr, "getnameinfo failed: %s\n",
1141 gai_strerror(err));
1142 exit(2);
1143 }
1144
1145 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1146 if (sock < 0)
1147 perror("socket");
1148 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1149 if (errno == EBADF)
1150 exit(3);
1151 }
1152 }
1153 exit(0);
1154}
1155 ],
1156 [
1157 AC_MSG_RESULT(yes)
1158 ],
1159 [
1160 AC_MSG_RESULT(no)
1161 AC_DEFINE(BROKEN_GETADDRINFO)
1162 ]
1163 )
1164fi
1165
4b492aab 1166if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1167 test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
5ccf88cb 1168 AC_MSG_CHECKING(if getaddrinfo seems to work)
1169 AC_TRY_RUN(
1170 [
1171#include <stdio.h>
1172#include <sys/socket.h>
1173#include <netdb.h>
1174#include <errno.h>
1175#include <netinet/in.h>
1176
1177#define TEST_PORT "2222"
1178
1179int
1180main(void)
1181{
1182 int err, sock;
1183 struct addrinfo *gai_ai, *ai, hints;
1184 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1185
1186 memset(&hints, 0, sizeof(hints));
1187 hints.ai_family = PF_UNSPEC;
1188 hints.ai_socktype = SOCK_STREAM;
1189 hints.ai_flags = AI_PASSIVE;
1190
1191 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1192 if (err != 0) {
1193 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1194 exit(1);
1195 }
1196
1197 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1198 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1199 continue;
1200
1201 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1202 sizeof(ntop), strport, sizeof(strport),
1203 NI_NUMERICHOST|NI_NUMERICSERV);
1204
1205 if (ai->ai_family == AF_INET && err != 0) {
1206 perror("getnameinfo");
1207 exit(2);
1208 }
1209 }
1210 exit(0);
1211}
1212 ],
1213 [
1214 AC_MSG_RESULT(yes)
1215 AC_DEFINE(AIX_GETNAMEINFO_HACK, [],
1216[Define if you have a getaddrinfo that fails for the all-zeros IPv6 address])
1217 ],
1218 [
1219 AC_MSG_RESULT(no)
1220 AC_DEFINE(BROKEN_GETADDRINFO)
1221 ]
1222 )
1223fi
1224
b29fd59f 1225if test "x$check_for_conflicting_getspnam" = "x1"; then
1226 AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1227 AC_COMPILE_IFELSE(
1228 [
1229#include <shadow.h>
1230int main(void) {exit(0);}
1231 ],
1232 [
1233 AC_MSG_RESULT(no)
1234 ],
1235 [
1236 AC_MSG_RESULT(yes)
1237 AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1238 [Conflicting defs for getspnam])
1239 ]
1240 )
1241fi
1242
7f8f5e00 1243AC_FUNC_GETPGRP
1244
717057b6 1245# Check for PAM libs
cbd7492e 1246PAM_MSG="no"
a0391976 1247AC_ARG_WITH(pam,
717057b6 1248 [ --with-pam Enable PAM support ],
a0391976 1249 [
717057b6 1250 if test "x$withval" != "xno" ; then
2511d104 1251 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
1252 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
717057b6 1253 AC_MSG_ERROR([PAM headers not found])
1254 fi
a0391976 1255
717057b6 1256 AC_CHECK_LIB(dl, dlopen, , )
1257 AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
1258 AC_CHECK_FUNCS(pam_getenvlist)
749560dd 1259 AC_CHECK_FUNCS(pam_putenv)
2b763e31 1260
717057b6 1261 PAM_MSG="yes"
4cb5ffa0 1262
717057b6 1263 AC_DEFINE(USE_PAM)
98f2d9d5 1264 if test $ac_cv_lib_dl_dlopen = yes; then
1265 LIBPAM="-lpam -ldl"
1266 else
1267 LIBPAM="-lpam"
1268 fi
1269 AC_SUBST(LIBPAM)
717057b6 1270 fi
1271 ]
1272)
cbd7492e 1273
717057b6 1274# Check for older PAM
1275if test "x$PAM_MSG" = "xyes" ; then
a0391976 1276 # Check PAM strerror arguments (old PAM)
1277 AC_MSG_CHECKING([whether pam_strerror takes only one argument])
1278 AC_TRY_COMPILE(
1279 [
18ba2aab 1280#include <stdlib.h>
2511d104 1281#if defined(HAVE_SECURITY_PAM_APPL_H)
18ba2aab 1282#include <security/pam_appl.h>
2511d104 1283#elif defined (HAVE_PAM_PAM_APPL_H)
1284#include <pam/pam_appl.h>
1285#endif
aff51935 1286 ],
1287 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
a0391976 1288 [AC_MSG_RESULT(no)],
1289 [
1290 AC_DEFINE(HAVE_OLD_PAM)
1291 AC_MSG_RESULT(yes)
cbd7492e 1292 PAM_MSG="yes (old library)"
a0391976 1293 ]
717057b6 1294 )
a0391976 1295fi
1296
5b991353 1297# Search for OpenSSL
1298saved_CPPFLAGS="$CPPFLAGS"
1299saved_LDFLAGS="$LDFLAGS"
a0391976 1300AC_ARG_WITH(ssl-dir,
1301 [ --with-ssl-dir=PATH Specify path to OpenSSL installation ],
1302 [
e9e4a1c7 1303 if test "x$withval" != "xno" ; then
99eb0f64 1304 case "$withval" in
1305 # Relative paths
1306 ./*|../*) withval="`pwd`/$withval"
1307 esac
5b991353 1308 if test -d "$withval/lib"; then
1309 if test -n "${need_dash_r}"; then
1310 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1311 else
1312 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
d6f13fbb 1313 fi
1314 else
5b991353 1315 if test -n "${need_dash_r}"; then
1316 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1317 else
1318 LDFLAGS="-L${withval} ${LDFLAGS}"
d6f13fbb 1319 fi
1320 fi
5b991353 1321 if test -d "$withval/include"; then
1322 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
d6f13fbb 1323 else
5b991353 1324 CPPFLAGS="-I${withval} ${CPPFLAGS}"
58d100bf 1325 fi
a0391976 1326 fi
5b991353 1327 ]
1328)
5486a457 1329LIBS="-lcrypto $LIBS"
5b991353 1330AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
d45e3d76 1331 [
5b991353 1332 dnl Check default openssl install dir
1333 if test -n "${need_dash_r}"; then
1334 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1335 else
5b991353 1336 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1337 fi
5b991353 1338 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1339 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1340 [
1341 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1342 ]
1343 )
1344 ]
1345)
1346
cd018561 1347# Determine OpenSSL header version
1348AC_MSG_CHECKING([OpenSSL header version])
1a01a50c 1349AC_RUN_IFELSE(
479cece8 1350 [AC_LANG_SOURCE([[
cd018561 1351#include <stdio.h>
1352#include <string.h>
1353#include <openssl/opensslv.h>
1354#define DATA "conftest.sslincver"
1355int main(void) {
aff51935 1356 FILE *fd;
1357 int rc;
cd018561 1358
aff51935 1359 fd = fopen(DATA,"w");
1360 if(fd == NULL)
1361 exit(1);
cd018561 1362
1363 if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1364 exit(1);
1365
1366 exit(0);
1367}
479cece8 1368 ]])],
cd018561 1369 [
1370 ssl_header_ver=`cat conftest.sslincver`
1371 AC_MSG_RESULT($ssl_header_ver)
1372 ],
1373 [
1374 AC_MSG_RESULT(not found)
1375 AC_MSG_ERROR(OpenSSL version header not found.)
1a01a50c 1376 ],
1377 [
1378 AC_MSG_WARN([cross compiling: not checking])
cd018561 1379 ]
1380)
1381
1382# Determine OpenSSL library version
1383AC_MSG_CHECKING([OpenSSL library version])
1a01a50c 1384AC_RUN_IFELSE(
479cece8 1385 [AC_LANG_SOURCE([[
cd018561 1386#include <stdio.h>
1387#include <string.h>
1388#include <openssl/opensslv.h>
1389#include <openssl/crypto.h>
1390#define DATA "conftest.ssllibver"
1391int main(void) {
aff51935 1392 FILE *fd;
1393 int rc;
cd018561 1394
aff51935 1395 fd = fopen(DATA,"w");
1396 if(fd == NULL)
1397 exit(1);
cd018561 1398
1399 if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1400 exit(1);
1401
1402 exit(0);
1403}
479cece8 1404 ]])],
cd018561 1405 [
1406 ssl_library_ver=`cat conftest.ssllibver`
1407 AC_MSG_RESULT($ssl_library_ver)
1408 ],
1409 [
1410 AC_MSG_RESULT(not found)
1411 AC_MSG_ERROR(OpenSSL library not found.)
1a01a50c 1412 ],
1413 [
1414 AC_MSG_WARN([cross compiling: not checking])
cd018561 1415 ]
1416)
58d100bf 1417
9780116c 1418# Sanity check OpenSSL headers
1419AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1a01a50c 1420AC_RUN_IFELSE(
479cece8 1421 [AC_LANG_SOURCE([[
9780116c 1422#include <string.h>
1423#include <openssl/opensslv.h>
aec4cb4f 1424int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
479cece8 1425 ]])],
9780116c 1426 [
1427 AC_MSG_RESULT(yes)
1428 ],
1429 [
1430 AC_MSG_RESULT(no)
e15ba28b 1431 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1432Check config.log for details.
1433Also see contrib/findssl.sh for help identifying header/library mismatches.])
1a01a50c 1434 ],
1435 [
1436 AC_MSG_WARN([cross compiling: not checking])
9780116c 1437 ]
1438)
1439
5486a457 1440# Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1441# because the system crypt() is more featureful.
1442if test "x$check_for_libcrypt_before" = "x1"; then
1443 AC_CHECK_LIB(crypt, crypt)
1444fi
1445
aff51935 1446# Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
8087c5ee 1447# version in OpenSSL.
05114c74 1448if test "x$check_for_libcrypt_later" = "x1"; then
20cad736 1449 AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
717057b6 1450fi
1451
f1b0ecc3 1452
1453### Configure cryptographic random number support
1454
1455# Check wheter OpenSSL seeds itself
1456AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1a01a50c 1457AC_RUN_IFELSE(
479cece8 1458 [AC_LANG_SOURCE([[
f1b0ecc3 1459#include <string.h>
1460#include <openssl/rand.h>
aec4cb4f 1461int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
479cece8 1462 ]])],
f1b0ecc3 1463 [
1464 OPENSSL_SEEDS_ITSELF=yes
1465 AC_MSG_RESULT(yes)
1466 ],
1467 [
1468 AC_MSG_RESULT(no)
1469 # Default to use of the rand helper if OpenSSL doesn't
1470 # seed itself
1471 USE_RAND_HELPER=yes
1a01a50c 1472 ],
1473 [
1474 AC_MSG_WARN([cross compiling: assuming yes])
1475 # This is safe, since all recent OpenSSL versions will
82f4e93d 1476 # complain at runtime if not seeded correctly.
1a01a50c 1477 OPENSSL_SEEDS_ITSELF=yes
f1b0ecc3 1478 ]
1479)
1480
1481
1482# Do we want to force the use of the rand helper?
1483AC_ARG_WITH(rand-helper,
1484 [ --with-rand-helper Use subprocess to gather strong randomness ],
1485 [
1486 if test "x$withval" = "xno" ; then
aff51935 1487 # Force use of OpenSSL's internal RNG, even if
f1b0ecc3 1488 # the previous test showed it to be unseeded.
1489 if test -z "$OPENSSL_SEEDS_ITSELF" ; then
1490 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
1491 OPENSSL_SEEDS_ITSELF=yes
1492 USE_RAND_HELPER=""
1493 fi
1494 else
1495 USE_RAND_HELPER=yes
1496 fi
1497 ],
82f4e93d 1498)
f1b0ecc3 1499
1500# Which randomness source do we use?
4b492aab 1501if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
f1b0ecc3 1502 # OpenSSL only
1503 AC_DEFINE(OPENSSL_PRNG_ONLY)
1504 RAND_MSG="OpenSSL internal ONLY"
1505 INSTALL_SSH_RAND_HELPER=""
70e2f2f3 1506elif test ! -z "$USE_RAND_HELPER" ; then
1507 # install rand helper
f1b0ecc3 1508 RAND_MSG="ssh-rand-helper"
1509 INSTALL_SSH_RAND_HELPER="yes"
1510fi
1511AC_SUBST(INSTALL_SSH_RAND_HELPER)
1512
1513### Configuration of ssh-rand-helper
1514
1515# PRNGD TCP socket
1516AC_ARG_WITH(prngd-port,
1517 [ --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT],
1518 [
eb5d7ff6 1519 case "$withval" in
1520 no)
1521 withval=""
1522 ;;
1523 [[0-9]]*)
1524 ;;
1525 *)
1526 AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
1527 ;;
1528 esac
1529 if test ! -z "$withval" ; then
f1b0ecc3 1530 PRNGD_PORT="$withval"
1531 AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT)
1532 fi
1533 ]
1534)
1535
1536# PRNGD Unix domain socket
1537AC_ARG_WITH(prngd-socket,
1538 [ --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
1539 [
eb5d7ff6 1540 case "$withval" in
1541 yes)
f1b0ecc3 1542 withval="/var/run/egd-pool"
eb5d7ff6 1543 ;;
1544 no)
1545 withval=""
1546 ;;
1547 /*)
1548 ;;
1549 *)
1550 AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
1551 ;;
1552 esac
1553
1554 if test ! -z "$withval" ; then
f1b0ecc3 1555 if test ! -z "$PRNGD_PORT" ; then
1556 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
1557 fi
906e811b 1558 if test ! -r "$withval" ; then
f1b0ecc3 1559 AC_MSG_WARN(Entropy socket is not readable)
1560 fi
1561 PRNGD_SOCKET="$withval"
1562 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1563 fi
ddceb1c8 1564 ],
1565 [
1566 # Check for existing socket only if we don't have a random device already
1567 if test "$USE_RAND_HELPER" = yes ; then
1568 AC_MSG_CHECKING(for PRNGD/EGD socket)
1569 # Insert other locations here
1570 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
1571 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
1572 PRNGD_SOCKET="$sock"
1573 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1574 break;
1575 fi
1576 done
1577 if test ! -z "$PRNGD_SOCKET" ; then
1578 AC_MSG_RESULT($PRNGD_SOCKET)
1579 else
1580 AC_MSG_RESULT(not found)
1581 fi
1582 fi
f1b0ecc3 1583 ]
1584)
1585
1586# Change default command timeout for hashing entropy source
1587entropy_timeout=200
1588AC_ARG_WITH(entropy-timeout,
1589 [ --with-entropy-timeout Specify entropy gathering command timeout (msec)],
1590 [
6cf0200f 1591 if test -n "$withval" && test "x$withval" != "xno" && \
1592 test "x${withval}" != "xyes"; then
f1b0ecc3 1593 entropy_timeout=$withval
1594 fi
82f4e93d 1595 ]
f1b0ecc3 1596)
f1b0ecc3 1597AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout)
1598
fd3cbf67 1599SSH_PRIVSEP_USER=sshd
9a0fbcb3 1600AC_ARG_WITH(privsep-user,
5222e7ef 1601 [ --with-privsep-user=user Specify non-privileged user for privilege separation],
9a0fbcb3 1602 [
6cf0200f 1603 if test -n "$withval" && test "x$withval" != "xno" && \
1604 test "x${withval}" != "xyes"; then
fd3cbf67 1605 SSH_PRIVSEP_USER=$withval
9a0fbcb3 1606 fi
82f4e93d 1607 ]
9a0fbcb3 1608)
fd3cbf67 1609AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER")
1610AC_SUBST(SSH_PRIVSEP_USER)
9a0fbcb3 1611
81dadca3 1612# We do this little dance with the search path to insure
1613# that programs that we select for use by installed programs
1614# (which may be run by the super-user) come from trusted
1615# locations before they come from the user's private area.
1616# This should help avoid accidentally configuring some
1617# random version of a program in someone's personal bin.
1618
1619OPATH=$PATH
1620PATH=/bin:/usr/bin
f95c8ce8 1621test -h /bin 2> /dev/null && PATH=/usr/bin
81dadca3 1622test -d /sbin && PATH=$PATH:/sbin
1623test -d /usr/sbin && PATH=$PATH:/usr/sbin
1624PATH=$PATH:/etc:$OPATH
1625
aff51935 1626# These programs are used by the command hashing source to gather entropy
f1b0ecc3 1627OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
1628OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
1629OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
1630OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
1631OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
1632OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
1633OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
1634OSSH_PATH_ENTROPY_PROG(PROG_W, w)
1635OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
1636OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
1637OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
1638OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
1639OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
1640OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
1641OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
1642OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
81dadca3 1643# restore PATH
1644PATH=$OPATH
f1b0ecc3 1645
1646# Where does ssh-rand-helper get its randomness from?
1647INSTALL_SSH_PRNG_CMDS=""
1648if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
1649 if test ! -z "$PRNGD_PORT" ; then
1650 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
1651 elif test ! -z "$PRNGD_SOCKET" ; then
1652 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
1653 else
1654 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
1655 RAND_HELPER_CMDHASH=yes
1656 INSTALL_SSH_PRNG_CMDS="yes"
1657 fi
1658fi
1659AC_SUBST(INSTALL_SSH_PRNG_CMDS)
1660
1661
66d6c27e 1662# Cheap hack to ensure NEWS-OS libraries are arranged right.
1663if test ! -z "$SONY" ; then
1664 LIBS="$LIBS -liberty";
1665fi
1666
a0391976 1667# Checks for data types
976f7e19 1668AC_CHECK_SIZEOF(char, 1)
2b942fe0 1669AC_CHECK_SIZEOF(short int, 2)
1670AC_CHECK_SIZEOF(int, 4)
1671AC_CHECK_SIZEOF(long int, 4)
1672AC_CHECK_SIZEOF(long long int, 8)
1673
52f1ccb2 1674# Sanity check long long for some platforms (AIX)
1675if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
1676 ac_cv_sizeof_long_long_int=0
1677fi
1678
a0391976 1679# More checks for data types
14a9a859 1680AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
1681 AC_TRY_COMPILE(
aff51935 1682 [ #include <sys/types.h> ],
1683 [ u_int a; a = 1;],
14a9a859 1684 [ ac_cv_have_u_int="yes" ],
1685 [ ac_cv_have_u_int="no" ]
1686 )
1687])
1688if test "x$ac_cv_have_u_int" = "xyes" ; then
1689 AC_DEFINE(HAVE_U_INT)
1690 have_u_int=1
1691fi
1692
58d100bf 1693AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
1694 AC_TRY_COMPILE(
aff51935 1695 [ #include <sys/types.h> ],
1696 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
58d100bf 1697 [ ac_cv_have_intxx_t="yes" ],
1698 [ ac_cv_have_intxx_t="no" ]
1699 )
1700])
1701if test "x$ac_cv_have_intxx_t" = "xyes" ; then
1702 AC_DEFINE(HAVE_INTXX_T)
1703 have_intxx_t=1
1704fi
41cb4569 1705
1706if (test -z "$have_intxx_t" && \
aff51935 1707 test "x$ac_cv_header_stdint_h" = "xyes")
41cb4569 1708then
1709 AC_MSG_CHECKING([for intXX_t types in stdint.h])
1710 AC_TRY_COMPILE(
aff51935 1711 [ #include <stdint.h> ],
1712 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
41cb4569 1713 [
1714 AC_DEFINE(HAVE_INTXX_T)
1715 AC_MSG_RESULT(yes)
1716 ],
1717 [ AC_MSG_RESULT(no) ]
1718 )
1719fi
1720
bd590612 1721AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
1722 AC_TRY_COMPILE(
1cbbe6c8 1723 [
1724#include <sys/types.h>
1725#ifdef HAVE_STDINT_H
1726# include <stdint.h>
1727#endif
1728#include <sys/socket.h>
1729#ifdef HAVE_SYS_BITYPES_H
1730# include <sys/bitypes.h>
1731#endif
aff51935 1732 ],
1733 [ int64_t a; a = 1;],
bd590612 1734 [ ac_cv_have_int64_t="yes" ],
1735 [ ac_cv_have_int64_t="no" ]
1736 )
1737])
1738if test "x$ac_cv_have_int64_t" = "xyes" ; then
1739 AC_DEFINE(HAVE_INT64_T)
ddceb1c8 1740fi
1741
58d100bf 1742AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
1743 AC_TRY_COMPILE(
aff51935 1744 [ #include <sys/types.h> ],
1745 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
58d100bf 1746 [ ac_cv_have_u_intxx_t="yes" ],
1747 [ ac_cv_have_u_intxx_t="no" ]
1748 )
1749])
1750if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
1751 AC_DEFINE(HAVE_U_INTXX_T)
1752 have_u_intxx_t=1
1753fi
2b942fe0 1754
41cb4569 1755if test -z "$have_u_intxx_t" ; then
1756 AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
1757 AC_TRY_COMPILE(
aff51935 1758 [ #include <sys/socket.h> ],
1759 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
41cb4569 1760 [
1761 AC_DEFINE(HAVE_U_INTXX_T)
1762 AC_MSG_RESULT(yes)
1763 ],
1764 [ AC_MSG_RESULT(no) ]
1765 )
1766fi
1767
bd590612 1768AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
1769 AC_TRY_COMPILE(
aff51935 1770 [ #include <sys/types.h> ],
1771 [ u_int64_t a; a = 1;],
bd590612 1772 [ ac_cv_have_u_int64_t="yes" ],
1773 [ ac_cv_have_u_int64_t="no" ]
1774 )
1775])
1776if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
1777 AC_DEFINE(HAVE_U_INT64_T)
1778 have_u_int64_t=1
1779fi
1780
ddceb1c8 1781if test -z "$have_u_int64_t" ; then
1782 AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
1783 AC_TRY_COMPILE(
aff51935 1784 [ #include <sys/bitypes.h> ],
ddceb1c8 1785 [ u_int64_t a; a = 1],
1786 [
1787 AC_DEFINE(HAVE_U_INT64_T)
1788 AC_MSG_RESULT(yes)
1789 ],
1790 [ AC_MSG_RESULT(no) ]
1791 )
1792fi
1793
41cb4569 1794if test -z "$have_u_intxx_t" ; then
1795 AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
1796 AC_TRY_COMPILE(
1797 [
1798#include <sys/types.h>
aff51935 1799 ],
1800 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
41cb4569 1801 [ ac_cv_have_uintxx_t="yes" ],
1802 [ ac_cv_have_uintxx_t="no" ]
1803 )
1804 ])
1805 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
1806 AC_DEFINE(HAVE_UINTXX_T)
1807 fi
1808fi
1809
1810if test -z "$have_uintxx_t" ; then
1811 AC_MSG_CHECKING([for uintXX_t types in stdint.h])
1812 AC_TRY_COMPILE(
aff51935 1813 [ #include <stdint.h> ],
1814 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
41cb4569 1815 [
1816 AC_DEFINE(HAVE_UINTXX_T)
1817 AC_MSG_RESULT(yes)
1818 ],
1819 [ AC_MSG_RESULT(no) ]
1820 )
1821fi
1822
e5fe9a1f 1823if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
aff51935 1824 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
5cdfe03f 1825then
1826 AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
1827 AC_TRY_COMPILE(
58d100bf 1828 [
1829#include <sys/bitypes.h>
aff51935 1830 ],
5cdfe03f 1831 [
837c30b8 1832 int8_t a; int16_t b; int32_t c;
1833 u_int8_t e; u_int16_t f; u_int32_t g;
1834 a = b = c = e = f = g = 1;
aff51935 1835 ],
5cdfe03f 1836 [
1837 AC_DEFINE(HAVE_U_INTXX_T)
1838 AC_DEFINE(HAVE_INTXX_T)
1839 AC_MSG_RESULT(yes)
1840 ],
1841 [AC_MSG_RESULT(no)]
aff51935 1842 )
5cdfe03f 1843fi
1844
0362750e 1845
1846AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
1847 AC_TRY_COMPILE(
1848 [
1849#include <sys/types.h>
1850 ],
1851 [ u_char foo; foo = 125; ],
1852 [ ac_cv_have_u_char="yes" ],
1853 [ ac_cv_have_u_char="no" ]
1854 )
1855])
1856if test "x$ac_cv_have_u_char" = "xyes" ; then
1857 AC_DEFINE(HAVE_U_CHAR)
1858fi
1859
98a7c37b 1860TYPE_SOCKLEN_T
2b942fe0 1861
2d16d9a3 1862AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
ddceb1c8 1863
777ece68 1864AC_CHECK_TYPES(in_addr_t,,,
1865[#include <sys/types.h>
1866#include <netinet/in.h>])
7b578f7d 1867
58d100bf 1868AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
1869 AC_TRY_COMPILE(
1870 [
18ba2aab 1871#include <sys/types.h>
58d100bf 1872 ],
1873 [ size_t foo; foo = 1235; ],
1874 [ ac_cv_have_size_t="yes" ],
1875 [ ac_cv_have_size_t="no" ]
1876 )
1877])
1878if test "x$ac_cv_have_size_t" = "xyes" ; then
1879 AC_DEFINE(HAVE_SIZE_T)
1880fi
ea1970a3 1881
c04f75f1 1882AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
1883 AC_TRY_COMPILE(
1884 [
1885#include <sys/types.h>
1886 ],
1887 [ ssize_t foo; foo = 1235; ],
1888 [ ac_cv_have_ssize_t="yes" ],
1889 [ ac_cv_have_ssize_t="no" ]
1890 )
1891])
1892if test "x$ac_cv_have_ssize_t" = "xyes" ; then
1893 AC_DEFINE(HAVE_SSIZE_T)
1894fi
1895
f1c4659d 1896AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
1897 AC_TRY_COMPILE(
1898 [
1899#include <time.h>
1900 ],
1901 [ clock_t foo; foo = 1235; ],
1902 [ ac_cv_have_clock_t="yes" ],
1903 [ ac_cv_have_clock_t="no" ]
1904 )
1905])
1906if test "x$ac_cv_have_clock_t" = "xyes" ; then
1907 AC_DEFINE(HAVE_CLOCK_T)
1908fi
1909
1c04b088 1910AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
1911 AC_TRY_COMPILE(
1912 [
1913#include <sys/types.h>
1914#include <sys/socket.h>
1915 ],
1916 [ sa_family_t foo; foo = 1235; ],
1917 [ ac_cv_have_sa_family_t="yes" ],
77bb0bca 1918 [ AC_TRY_COMPILE(
1919 [
1920#include <sys/types.h>
1921#include <sys/socket.h>
1922#include <netinet/in.h>
1923 ],
1924 [ sa_family_t foo; foo = 1235; ],
1925 [ ac_cv_have_sa_family_t="yes" ],
1926
1c04b088 1927 [ ac_cv_have_sa_family_t="no" ]
77bb0bca 1928 )]
1c04b088 1929 )
1930])
1931if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
1932 AC_DEFINE(HAVE_SA_FAMILY_T)
1933fi
1934
729bfe59 1935AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
1936 AC_TRY_COMPILE(
1937 [
1938#include <sys/types.h>
1939 ],
1940 [ pid_t foo; foo = 1235; ],
1941 [ ac_cv_have_pid_t="yes" ],
1942 [ ac_cv_have_pid_t="no" ]
1943 )
1944])
1945if test "x$ac_cv_have_pid_t" = "xyes" ; then
1946 AC_DEFINE(HAVE_PID_T)
1947fi
1948
1949AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
1950 AC_TRY_COMPILE(
1951 [
1952#include <sys/types.h>
1953 ],
1954 [ mode_t foo; foo = 1235; ],
1955 [ ac_cv_have_mode_t="yes" ],
1956 [ ac_cv_have_mode_t="no" ]
1957 )
1958])
1959if test "x$ac_cv_have_mode_t" = "xyes" ; then
1960 AC_DEFINE(HAVE_MODE_T)
1961fi
1962
e3a93db0 1963
58d100bf 1964AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
1965 AC_TRY_COMPILE(
1966 [
18ba2aab 1967#include <sys/types.h>
1968#include <sys/socket.h>
58d100bf 1969 ],
1970 [ struct sockaddr_storage s; ],
1971 [ ac_cv_have_struct_sockaddr_storage="yes" ],
1972 [ ac_cv_have_struct_sockaddr_storage="no" ]
1973 )
1974])
1975if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
1976 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE)
1977fi
48e671d5 1978
58d100bf 1979AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
1980 AC_TRY_COMPILE(
1981 [
cbd7492e 1982#include <sys/types.h>
58d100bf 1983#include <netinet/in.h>
1984 ],
1985 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
1986 [ ac_cv_have_struct_sockaddr_in6="yes" ],
1987 [ ac_cv_have_struct_sockaddr_in6="no" ]
1988 )
1989])
1990if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
1991 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6)
1992fi
48e671d5 1993
58d100bf 1994AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
1995 AC_TRY_COMPILE(
1996 [
cbd7492e 1997#include <sys/types.h>
58d100bf 1998#include <netinet/in.h>
1999 ],
2000 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2001 [ ac_cv_have_struct_in6_addr="yes" ],
2002 [ ac_cv_have_struct_in6_addr="no" ]
2003 )
2004])
2005if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
2006 AC_DEFINE(HAVE_STRUCT_IN6_ADDR)
2007fi
48e671d5 2008
58d100bf 2009AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2010 AC_TRY_COMPILE(
2011 [
18ba2aab 2012#include <sys/types.h>
2013#include <sys/socket.h>
2014#include <netdb.h>
58d100bf 2015 ],
2016 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2017 [ ac_cv_have_struct_addrinfo="yes" ],
2018 [ ac_cv_have_struct_addrinfo="no" ]
2019 )
2020])
2021if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2022 AC_DEFINE(HAVE_STRUCT_ADDRINFO)
2023fi
2024
89c7e31c 2025AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2026 AC_TRY_COMPILE(
aff51935 2027 [ #include <sys/time.h> ],
2028 [ struct timeval tv; tv.tv_sec = 1;],
89c7e31c 2029 [ ac_cv_have_struct_timeval="yes" ],
2030 [ ac_cv_have_struct_timeval="no" ]
2031 )
2032])
2033if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2034 AC_DEFINE(HAVE_STRUCT_TIMEVAL)
2035 have_struct_timeval=1
2036fi
2037
5271b55c 2038AC_CHECK_TYPES(struct timespec)
2039
85abc74b 2040# We need int64_t or else certian parts of the compile will fail.
4b492aab 2041if test "x$ac_cv_have_int64_t" = "xno" && \
2042 test "x$ac_cv_sizeof_long_int" != "x8" && \
2043 test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
85abc74b 2044 echo "OpenSSH requires int64_t support. Contact your vendor or install"
2045 echo "an alternative compiler (I.E., GCC) before continuing."
2046 echo ""
2047 exit 1;
733cf7f4 2048else
2049dnl test snprintf (broken on SCO w/gcc)
1a01a50c 2050 AC_RUN_IFELSE(
479cece8 2051 [AC_LANG_SOURCE([[
733cf7f4 2052#include <stdio.h>
2053#include <string.h>
2054#ifdef HAVE_SNPRINTF
2055main()
2056{
2057 char buf[50];
2058 char expected_out[50];
2059 int mazsize = 50 ;
2060#if (SIZEOF_LONG_INT == 8)
2061 long int num = 0x7fffffffffffffff;
2062#else
763a1a18 2063 long long num = 0x7fffffffffffffffll;
733cf7f4 2064#endif
2065 strcpy(expected_out, "9223372036854775807");
2066 snprintf(buf, mazsize, "%lld", num);
2067 if(strcmp(buf, expected_out) != 0)
aff51935 2068 exit(1);
733cf7f4 2069 exit(0);
2070}
2071#else
2072main() { exit(0); }
2073#endif
479cece8 2074 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
1a01a50c 2075 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
733cf7f4 2076 )
2c523de9 2077fi
2078
77bb0bca 2079dnl Checks for structure members
58d100bf 2080OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2081OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2082OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2083OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2084OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
25422c70 2085OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
58d100bf 2086OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2087OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
daaff4d5 2088OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
58d100bf 2089OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2090OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2091OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2092OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
1d7b9b20 2093OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2094OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2095OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2096OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
98a7c37b 2097
2098AC_CHECK_MEMBERS([struct stat.st_blksize])
1d7b9b20 2099
58d100bf 2100AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2101 ac_cv_have_ss_family_in_struct_ss, [
2102 AC_TRY_COMPILE(
2103 [
18ba2aab 2104#include <sys/types.h>
2105#include <sys/socket.h>
58d100bf 2106 ],
2107 [ struct sockaddr_storage s; s.ss_family = 1; ],
2108 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2109 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2110 )
2111])
2112if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2113 AC_DEFINE(HAVE_SS_FAMILY_IN_SS)
2114fi
2115
58d100bf 2116AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2117 ac_cv_have___ss_family_in_struct_ss, [
2118 AC_TRY_COMPILE(
2119 [
18ba2aab 2120#include <sys/types.h>
2121#include <sys/socket.h>
58d100bf 2122 ],
2123 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2124 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2125 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2126 )
2127])
2128if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2129 AC_DEFINE(HAVE___SS_FAMILY_IN_SS)
2130fi
2131
2e73a022 2132AC_CACHE_CHECK([for pw_class field in struct passwd],
2133 ac_cv_have_pw_class_in_struct_passwd, [
2134 AC_TRY_COMPILE(
2135 [
2e73a022 2136#include <pwd.h>
2137 ],
97994d32 2138 [ struct passwd p; p.pw_class = 0; ],
2e73a022 2139 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2140 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2141 )
2142])
2143if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2144 AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD)
2145fi
2146
7751d4eb 2147AC_CACHE_CHECK([for pw_expire field in struct passwd],
2148 ac_cv_have_pw_expire_in_struct_passwd, [
2149 AC_TRY_COMPILE(
2150 [
2151#include <pwd.h>
2152 ],
2153 [ struct passwd p; p.pw_expire = 0; ],
2154 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2155 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2156 )
2157])
2158if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2159 AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD)
2160fi
2161
2162AC_CACHE_CHECK([for pw_change field in struct passwd],
2163 ac_cv_have_pw_change_in_struct_passwd, [
2164 AC_TRY_COMPILE(
2165 [
2166#include <pwd.h>
2167 ],
2168 [ struct passwd p; p.pw_change = 0; ],
2169 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2170 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2171 )
2172])
2173if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2174 AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD)
2175fi
58d100bf 2176
637f9177 2177dnl make sure we're using the real structure members and not defines
6f34652e 2178AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2179 ac_cv_have_accrights_in_msghdr, [
1a01a50c 2180 AC_COMPILE_IFELSE(
6f34652e 2181 [
f95c8ce8 2182#include <sys/types.h>
6f34652e 2183#include <sys/socket.h>
2184#include <sys/uio.h>
637f9177 2185int main() {
2186#ifdef msg_accrights
1a01a50c 2187#error "msg_accrights is a macro"
637f9177 2188exit(1);
2189#endif
2190struct msghdr m;
2191m.msg_accrights = 0;
2192exit(0);
2193}
6f34652e 2194 ],
6f34652e 2195 [ ac_cv_have_accrights_in_msghdr="yes" ],
2196 [ ac_cv_have_accrights_in_msghdr="no" ]
2197 )
2198])
2199if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2200 AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR)
2201fi
2202
7176df4f 2203AC_CACHE_CHECK([for msg_control field in struct msghdr],
2204 ac_cv_have_control_in_msghdr, [
1a01a50c 2205 AC_COMPILE_IFELSE(
7176df4f 2206 [
f95c8ce8 2207#include <sys/types.h>
7176df4f 2208#include <sys/socket.h>
2209#include <sys/uio.h>
637f9177 2210int main() {
2211#ifdef msg_control
1a01a50c 2212#error "msg_control is a macro"
637f9177 2213exit(1);
2214#endif
2215struct msghdr m;
2216m.msg_control = 0;
2217exit(0);
2218}
7176df4f 2219 ],
7176df4f 2220 [ ac_cv_have_control_in_msghdr="yes" ],
2221 [ ac_cv_have_control_in_msghdr="no" ]
2222 )
2223])
2224if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2225 AC_DEFINE(HAVE_CONTROL_IN_MSGHDR)
2226fi
2227
58d100bf 2228AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
aff51935 2229 AC_TRY_LINK([],
2230 [ extern char *__progname; printf("%s", __progname); ],
58d100bf 2231 [ ac_cv_libc_defines___progname="yes" ],
2232 [ ac_cv_libc_defines___progname="no" ]
2233 )
2234])
2235if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2236 AC_DEFINE(HAVE___PROGNAME)
2237fi
8946db53 2238
c921ee00 2239AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2240 AC_TRY_LINK([
2241#include <stdio.h>
aff51935 2242],
2243 [ printf("%s", __FUNCTION__); ],
c921ee00 2244 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2245 [ ac_cv_cc_implements___FUNCTION__="no" ]
2246 )
2247])
2248if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2249 AC_DEFINE(HAVE___FUNCTION__)
2250fi
2251
2252AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2253 AC_TRY_LINK([
2254#include <stdio.h>
aff51935 2255],
2256 [ printf("%s", __func__); ],
c921ee00 2257 [ ac_cv_cc_implements___func__="yes" ],
2258 [ ac_cv_cc_implements___func__="no" ]
2259 )
2260])
2261if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
2262 AC_DEFINE(HAVE___func__)
2263fi
2264
1812a662 2265AC_CACHE_CHECK([whether getopt has optreset support],
2266 ac_cv_have_getopt_optreset, [
2267 AC_TRY_LINK(
2268 [
2269#include <getopt.h>
2270 ],
2271 [ extern int optreset; optreset = 0; ],
2272 [ ac_cv_have_getopt_optreset="yes" ],
2273 [ ac_cv_have_getopt_optreset="no" ]
2274 )
2275])
2276if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
2277 AC_DEFINE(HAVE_GETOPT_OPTRESET)
2278fi
a0391976 2279
819b676f 2280AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
aff51935 2281 AC_TRY_LINK([],
2282 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
819b676f 2283 [ ac_cv_libc_defines_sys_errlist="yes" ],
2284 [ ac_cv_libc_defines_sys_errlist="no" ]
2285 )
2286])
2287if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
2288 AC_DEFINE(HAVE_SYS_ERRLIST)
2289fi
2290
2291
416ed5a7 2292AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
aff51935 2293 AC_TRY_LINK([],
2294 [ extern int sys_nerr; printf("%i", sys_nerr);],
416ed5a7 2295 [ ac_cv_libc_defines_sys_nerr="yes" ],
2296 [ ac_cv_libc_defines_sys_nerr="no" ]
2297 )
2298])
2299if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
2300 AC_DEFINE(HAVE_SYS_NERR)
2301fi
2302
aff51935 2303SCARD_MSG="no"
295c8801 2304# Check whether user wants sectok support
2305AC_ARG_WITH(sectok,
2306 [ --with-sectok Enable smartcard support using libsectok],
d0b19c95 2307 [
2308 if test "x$withval" != "xno" ; then
2309 if test "x$withval" != "xyes" ; then
2310 CPPFLAGS="$CPPFLAGS -I${withval}"
2311 LDFLAGS="$LDFLAGS -L${withval}"
2312 if test ! -z "$need_dash_r" ; then
2313 LDFLAGS="$LDFLAGS -R${withval}"
2314 fi
2315 if test ! -z "$blibpath" ; then
2316 blibpath="$blibpath:${withval}"
2317 fi
2318 fi
2319 AC_CHECK_HEADERS(sectok.h)
2320 if test "$ac_cv_header_sectok_h" != yes; then
2321 AC_MSG_ERROR(Can't find sectok.h)
2322 fi
2323 AC_CHECK_LIB(sectok, sectok_open)
2324 if test "$ac_cv_lib_sectok_sectok_open" != yes; then
2325 AC_MSG_ERROR(Can't find libsectok)
2326 fi
2327 AC_DEFINE(SMARTCARD)
295c8801 2328 AC_DEFINE(USE_SECTOK)
aff51935 2329 SCARD_MSG="yes, using sectok"
295c8801 2330 fi
2331 ]
2332)
2333
2334# Check whether user wants OpenSC support
987b458f 2335OPENSC_CONFIG="no"
295c8801 2336AC_ARG_WITH(opensc,
987b458f 2337 [--with-opensc[[=PFX]] Enable smartcard support using OpenSC (optionally in PATH)],
2338 [
2339 if test "x$withval" != "xno" ; then
2340 if test "x$withval" != "xyes" ; then
2341 OPENSC_CONFIG=$withval/bin/opensc-config
2342 else
2343 AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
2344 fi
2345 if test "$OPENSC_CONFIG" != "no"; then
2346 LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
2347 LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
2348 CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
2349 LDFLAGS="$LDFLAGS $LIBOPENSC_LIBS"
2350 AC_DEFINE(SMARTCARD)
2351 AC_DEFINE(USE_OPENSC)
2352 SCARD_MSG="yes, using OpenSC"
2353 fi
2354 fi
2355 ]
2356)
d0b19c95 2357
c31dc31c 2358# Check libraries needed by DNS fingerprint support
aff51935 2359AC_SEARCH_LIBS(getrrsetbyname, resolv,
c31dc31c 2360 [AC_DEFINE(HAVE_GETRRSETBYNAME)],
3e05e934 2361 [
c31dc31c 2362 # Needed by our getrrsetbyname()
2363 AC_SEARCH_LIBS(res_query, resolv)
2364 AC_SEARCH_LIBS(dn_expand, resolv)
dabb524a 2365 AC_MSG_CHECKING(if res_query will link)
2366 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
2367 [AC_MSG_RESULT(no)
2368 saved_LIBS="$LIBS"
2369 LIBS="$LIBS -lresolv"
2370 AC_MSG_CHECKING(for res_query in -lresolv)
2371 AC_LINK_IFELSE([
2372#include <resolv.h>
2373int main()
2374{
2375 res_query (0, 0, 0, 0, 0);
2376 return 0;
2377}
2378 ],
2379 [LIBS="$LIBS -lresolv"
2380 AC_MSG_RESULT(yes)],
2381 [LIBS="$saved_LIBS"
2382 AC_MSG_RESULT(no)])
2383 ])
c31dc31c 2384 AC_CHECK_FUNCS(_getshort _getlong)
2385 AC_CHECK_MEMBER(HEADER.ad,
2386 [AC_DEFINE(HAVE_HEADER_AD)],,
2387 [#include <arpa/nameser.h>])
2388 ])
3e05e934 2389
12928e80 2390# Check whether user wants Kerberos 5 support
aff51935 2391KRB5_MSG="no"
12928e80 2392AC_ARG_WITH(kerberos5,
aff51935 2393 [ --with-kerberos5=PATH Enable Kerberos 5 support],
5585c441 2394 [ if test "x$withval" != "xno" ; then
2395 if test "x$withval" = "xyes" ; then
2396 KRB5ROOT="/usr/local"
2397 else
2398 KRB5ROOT=${withval}
2399 fi
2400
2401 AC_DEFINE(KRB5)
2402 KRB5_MSG="yes"
2403
2404 AC_MSG_CHECKING(for krb5-config)
2405 if test -x $KRB5ROOT/bin/krb5-config ; then
2406 KRB5CONF=$KRB5ROOT/bin/krb5-config
2407 AC_MSG_RESULT($KRB5CONF)
2408
2409 AC_MSG_CHECKING(for gssapi support)
2410 if $KRB5CONF | grep gssapi >/dev/null ; then
2411 AC_MSG_RESULT(yes)
071970fb 2412 AC_DEFINE(GSSAPI)
2413 k5confopts=gssapi
aff51935 2414 else
5585c441 2415 AC_MSG_RESULT(no)
071970fb 2416 k5confopts=""
aff51935 2417 fi
071970fb 2418 K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
2419 K5LIBS="`$KRB5CONF --libs $k5confopts`"
5585c441 2420 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
5585c441 2421 AC_MSG_CHECKING(whether we are using Heimdal)
2422 AC_TRY_COMPILE([ #include <krb5.h> ],
2423 [ char *tmp = heimdal_version; ],
2424 [ AC_MSG_RESULT(yes)
2425 AC_DEFINE(HEIMDAL) ],
2426 AC_MSG_RESULT(no)
2427 )
2428 else
2429 AC_MSG_RESULT(no)
12928e80 2430 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
aff51935 2431 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
aff51935 2432 AC_MSG_CHECKING(whether we are using Heimdal)
2433 AC_TRY_COMPILE([ #include <krb5.h> ],
2434 [ char *tmp = heimdal_version; ],
2435 [ AC_MSG_RESULT(yes)
2436 AC_DEFINE(HEIMDAL)
41707f74 2437 K5LIBS="-lkrb5 -ldes"
2438 K5LIBS="$K5LIBS -lcom_err -lasn1"
82f4e93d 2439 AC_CHECK_LIB(roken, net_write,
41707f74 2440 [K5LIBS="$K5LIBS -lroken"])
aff51935 2441 ],
2442 [ AC_MSG_RESULT(no)
2443 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
2444 ]
2445 )
4e00038c 2446 AC_SEARCH_LIBS(dn_expand, resolv)
12928e80 2447
749560dd 2448 AC_CHECK_LIB(gssapi,gss_init_sec_context,
2449 [ AC_DEFINE(GSSAPI)
2450 K5LIBS="-lgssapi $K5LIBS" ],
2451 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
2452 [ AC_DEFINE(GSSAPI)
aff51935 2453 K5LIBS="-lgssapi_krb5 $K5LIBS" ],
749560dd 2454 AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
2455 $K5LIBS)
2456 ],
2457 $K5LIBS)
82f4e93d 2458
749560dd 2459 AC_CHECK_HEADER(gssapi.h, ,
2460 [ unset ac_cv_header_gssapi_h
aff51935 2461 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
749560dd 2462 AC_CHECK_HEADERS(gssapi.h, ,
2463 AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
aff51935 2464 )
749560dd 2465 ]
2466 )
2467
2468 oldCPP="$CPPFLAGS"
2469 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2470 AC_CHECK_HEADER(gssapi_krb5.h, ,
2471 [ CPPFLAGS="$oldCPP" ])
2472
aff51935 2473 fi
5585c441 2474 if test ! -z "$need_dash_r" ; then
2475 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
2476 fi
2477 if test ! -z "$blibpath" ; then
2478 blibpath="$blibpath:${KRB5ROOT}/lib"
2479 fi
071970fb 2480 fi
2481
2482 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
2483 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
2484 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
2485
2486 LIBS="$LIBS $K5LIBS"
2487 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS))
79753592 2488 AC_SEARCH_LIBS(krb5_init_ets, $K5LIBS, AC_DEFINE(KRB5_INIT_ETS))
071970fb 2489 ]
12928e80 2490)
b5b68128 2491
a0391976 2492# Looking for programs, paths and files
a0391976 2493
ecac8ee5 2494PRIVSEP_PATH=/var/empty
2495AC_ARG_WITH(privsep-path,
cda1ebcb 2496 [ --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
ecac8ee5 2497 [
6cf0200f 2498 if test -n "$withval" && test "x$withval" != "xno" && \
2499 test "x${withval}" != "xyes"; then
ecac8ee5 2500 PRIVSEP_PATH=$withval
2501 fi
2502 ]
2503)
2504AC_SUBST(PRIVSEP_PATH)
2505
a0391976 2506AC_ARG_WITH(xauth,
2507 [ --with-xauth=PATH Specify path to xauth program ],
2508 [
6cf0200f 2509 if test -n "$withval" && test "x$withval" != "xno" && \
2510 test "x${withval}" != "xyes"; then
cbd7492e 2511 xauth_path=$withval
a0391976 2512 fi
2513 ],
2514 [
2bf42e4a 2515 TestPath="$PATH"
2516 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
2517 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
2518 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
2519 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
2520 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
e5fe9a1f 2521 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
a0391976 2522 xauth_path="/usr/openwin/bin/xauth"
2523 fi
2524 ]
2525)
2526
65a4b4af 2527STRIP_OPT=-s
2528AC_ARG_ENABLE(strip,
2529 [ --disable-strip Disable calling strip(1) on install],
2530 [
2531 if test "x$enableval" = "xno" ; then
2532 STRIP_OPT=
2533 fi
2534 ]
2535)
2536AC_SUBST(STRIP_OPT)
2537
b3ec54b4 2538if test -z "$xauth_path" ; then
2539 XAUTH_PATH="undefined"
2540 AC_SUBST(XAUTH_PATH)
2541else
a0391976 2542 AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path")
b3ec54b4 2543 XAUTH_PATH=$xauth_path
2544 AC_SUBST(XAUTH_PATH)
a0391976 2545fi
a0391976 2546
2547# Check for mail directory (last resort if we cannot get it from headers)
2548if test ! -z "$MAIL" ; then
2549 maildir=`dirname $MAIL`
2550 AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir")
2551fi
2552
479cece8 2553if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
1a01a50c 2554 AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
2555 disable_ptmx_check=yes
2556fi
a0391976 2557if test -z "$no_dev_ptmx" ; then
6e879cb4 2558 if test "x$disable_ptmx_check" != "xyes" ; then
aff51935 2559 AC_CHECK_FILE("/dev/ptmx",
6e879cb4 2560 [
2561 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX)
2562 have_dev_ptmx=1
2563 ]
2564 )
2565 fi
3276571c 2566fi
1a01a50c 2567
479cece8 2568if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
1a01a50c 2569 AC_CHECK_FILE("/dev/ptc",
2570 [
2571 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC)
2572 have_dev_ptc=1
2573 ]
2574 )
2575else
2576 AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
2577fi
3276571c 2578
a0391976 2579# Options from here on. Some of these are preset by platform above
fdf6b7aa 2580AC_ARG_WITH(mantype,
5d97cfbf 2581 [ --with-mantype=man|cat|doc Set man page type],
c54a6257 2582 [
5d97cfbf 2583 case "$withval" in
2584 man|cat|doc)
2585 MANTYPE=$withval
2586 ;;
2587 *)
2588 AC_MSG_ERROR(invalid man type: $withval)
2589 ;;
2590 esac
c54a6257 2591 ]
2592)
e0c4d3ac 2593if test -z "$MANTYPE"; then
2bf42e4a 2594 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
2595 AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
e0c4d3ac 2596 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
2597 MANTYPE=doc
2598 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
2599 MANTYPE=man
2600 else
2601 MANTYPE=cat
2602 fi
2603fi
c54a6257 2604AC_SUBST(MANTYPE)
e0c4d3ac 2605if test "$MANTYPE" = "doc"; then
2606 mansubdir=man;
2607else
2608 mansubdir=$MANTYPE;
2609fi
2610AC_SUBST(mansubdir)
0bc5b6fb 2611
a0391976 2612# Check whether to enable MD5 passwords
aff51935 2613MD5_MSG="no"
2ddcfdf3 2614AC_ARG_WITH(md5-passwords,
caf3bc51 2615 [ --with-md5-passwords Enable use of MD5 passwords],
0bc5b6fb 2616 [
bcf36c78 2617 if test "x$withval" != "xno" ; then
0bc5b6fb 2618 AC_DEFINE(HAVE_MD5_PASSWORDS)
aff51935 2619 MD5_MSG="yes"
0bc5b6fb 2620 fi
2621 ]
caf3bc51 2622)
2623
a0391976 2624# Whether to disable shadow password support
a7effaac 2625AC_ARG_WITH(shadow,
2626 [ --without-shadow Disable shadow password support],
2627 [
82f4e93d 2628 if test "x$withval" = "xno" ; then
a7effaac 2629 AC_DEFINE(DISABLE_SHADOW)
4cb5ffa0 2630 disable_shadow=yes
a7effaac 2631 fi
2632 ]
2633)
2634
4cb5ffa0 2635if test -z "$disable_shadow" ; then
2636 AC_MSG_CHECKING([if the systems has expire shadow information])
2637 AC_TRY_COMPILE(
2638 [
2639#include <sys/types.h>
2640#include <shadow.h>
2641 struct spwd sp;
2642 ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
2643 [ sp_expire_available=yes ], []
2644 )
2645
2646 if test "x$sp_expire_available" = "xyes" ; then
2647 AC_MSG_RESULT(yes)
2648 AC_DEFINE(HAS_SHADOW_EXPIRE)
2649 else
2650 AC_MSG_RESULT(no)
2651 fi
2652fi
2653
a0391976 2654# Use ip address instead of hostname in $DISPLAY
44839801 2655if test ! -z "$IPADDR_IN_DISPLAY" ; then
2656 DISPLAY_HACK_MSG="yes"
2657 AC_DEFINE(IPADDR_IN_DISPLAY)
2658else
aff51935 2659 DISPLAY_HACK_MSG="no"
44839801 2660 AC_ARG_WITH(ipaddr-display,
2661 [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY],
2662 [
82f4e93d 2663 if test "x$withval" != "xno" ; then
44839801 2664 AC_DEFINE(IPADDR_IN_DISPLAY)
aff51935 2665 DISPLAY_HACK_MSG="yes"
44839801 2666 fi
2667 ]
2668 )
2669fi
a7effaac 2670
95b99395 2671# check for /etc/default/login and use it if present.
daa41e62 2672AC_ARG_ENABLE(etc-default-login,
6ff3d0dc 2673 [ --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
694d0cef 2674 [ if test "x$enableval" = "xno"; then
2675 AC_MSG_NOTICE([/etc/default/login handling disabled])
2676 etc_default_login=no
2677 else
2678 etc_default_login=yes
2679 fi ],
2680 [ etc_default_login=yes ]
2681)
95b99395 2682
694d0cef 2683if test "x$etc_default_login" != "xno"; then
2684 AC_CHECK_FILE("/etc/default/login",
2685 [ external_path_file=/etc/default/login ])
479cece8 2686 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
2687 then
1a01a50c 2688 AC_MSG_WARN([cross compiling: Disabling /etc/default/login test])
2689 elif test "x$external_path_file" = "x/etc/default/login"; then
2690 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN)
2691 fi
694d0cef 2692fi
95b99395 2693
8d184c09 2694dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
4b492aab 2695if test $ac_cv_func_login_getcapbool = "yes" && \
2696 test $ac_cv_header_login_cap_h = "yes" ; then
95b99395 2697 external_path_file=/etc/login.conf
8d184c09 2698fi
95b99395 2699
a0391976 2700# Whether to mess with the default path
aff51935 2701SERVER_PATH_MSG="(default)"
c43d69a9 2702AC_ARG_WITH(default-path,
75817f90 2703 [ --with-default-path= Specify default \$PATH environment for server],
cb807f40 2704 [
95b99395 2705 if test "x$external_path_file" = "x/etc/login.conf" ; then
8d184c09 2706 AC_MSG_WARN([
2707--with-default-path=PATH has no effect on this system.
2708Edit /etc/login.conf instead.])
82f4e93d 2709 elif test "x$withval" != "xno" ; then
89bbd457 2710 if test ! -z "$external_path_file" ; then
95b99395 2711 AC_MSG_WARN([
2712--with-default-path=PATH will only be used if PATH is not defined in
2713$external_path_file .])
2714 fi
b2d818e6 2715 user_path="$withval"
aff51935 2716 SERVER_PATH_MSG="$withval"
cb807f40 2717 fi
b2d818e6 2718 ],
95b99395 2719 [ if test "x$external_path_file" = "x/etc/login.conf" ; then
2720 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
8d184c09 2721 else
89bbd457 2722 if test ! -z "$external_path_file" ; then
95b99395 2723 AC_MSG_WARN([
2724If PATH is defined in $external_path_file, ensure the path to scp is included,
2725otherwise scp will not work.])
2726 fi
2727 AC_TRY_RUN(
2728 [
b2d818e6 2729/* find out what STDPATH is */
2730#include <stdio.h>
b2d818e6 2731#ifdef HAVE_PATHS_H
2732# include <paths.h>
2733#endif
2734#ifndef _PATH_STDPATH
d9a4e55b 2735# ifdef _PATH_USERPATH /* Irix */
2736# define _PATH_STDPATH _PATH_USERPATH
2737# else
2738# define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
2739# endif
b2d818e6 2740#endif
2741#include <sys/types.h>
2742#include <sys/stat.h>
2743#include <fcntl.h>
2744#define DATA "conftest.stdpath"
2745
2746main()
2747{
2748 FILE *fd;
2749 int rc;
82f4e93d 2750
b2d818e6 2751 fd = fopen(DATA,"w");
2752 if(fd == NULL)
2753 exit(1);
82f4e93d 2754
b2d818e6 2755 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
2756 exit(1);
2757
2758 exit(0);
2759}
2760 ], [ user_path=`cat conftest.stdpath` ],
2761 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
2762 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
2763 )
2764# make sure $bindir is in USER_PATH so scp will work
2765 t_bindir=`eval echo ${bindir}`
2766 case $t_bindir in
2767 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
2768 esac
2769 case $t_bindir in
2770 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
2771 esac
2772 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
2773 if test $? -ne 0 ; then
2774 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
2775 if test $? -ne 0 ; then
2776 user_path=$user_path:$t_bindir
2777 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
2778 fi
2779 fi
8d184c09 2780 fi ]
cb807f40 2781)
95b99395 2782if test "x$external_path_file" != "x/etc/login.conf" ; then
8d184c09 2783 AC_DEFINE_UNQUOTED(USER_PATH, "$user_path")
2784 AC_SUBST(user_path)
2785fi
cb807f40 2786
06617857 2787# Set superuser path separately to user path
06617857 2788AC_ARG_WITH(superuser-path,
2789 [ --with-superuser-path= Specify different path for super-user],
2790 [
6cf0200f 2791 if test -n "$withval" && test "x$withval" != "xno" && \
2792 test "x${withval}" != "xyes"; then
06617857 2793 AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval")
2794 superuser_path=$withval
2795 fi
2796 ]
2797)
2798
2799
58d100bf 2800AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
aff51935 2801IPV4_IN6_HACK_MSG="no"
80faa19f 2802AC_ARG_WITH(4in6,
2803 [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses],
2804 [
2805 if test "x$withval" != "xno" ; then
2806 AC_MSG_RESULT(yes)
2807 AC_DEFINE(IPV4_IN_IPV6)
aff51935 2808 IPV4_IN6_HACK_MSG="yes"
80faa19f 2809 else
2810 AC_MSG_RESULT(no)
2811 fi
2812 ],[
2813 if test "x$inet6_default_4in6" = "xyes"; then
2814 AC_MSG_RESULT([yes (default)])
2815 AC_DEFINE(IPV4_IN_IPV6)
aff51935 2816 IPV4_IN6_HACK_MSG="yes"
80faa19f 2817 else
2818 AC_MSG_RESULT([no (default)])
2819 fi
2820 ]
2821)
2822
af774732 2823# Whether to enable BSD auth support
f1b0ecc3 2824BSD_AUTH_MSG=no
af774732 2825AC_ARG_WITH(bsd-auth,
2826 [ --with-bsd-auth Enable BSD auth support],
2827 [
82f4e93d 2828 if test "x$withval" != "xno" ; then
af774732 2829 AC_DEFINE(BSD_AUTH)
f1b0ecc3 2830 BSD_AUTH_MSG=yes
af774732 2831 fi
2832 ]
2833)
2834
a0391976 2835# Where to place sshd.pid
19d9ac2a 2836piddir=/var/run
81dadca3 2837# make sure the directory exists
82f4e93d 2838if test ! -d $piddir ; then
81dadca3 2839 piddir=`eval echo ${sysconfdir}`
2840 case $piddir in
aff51935 2841 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
81dadca3 2842 esac
2843fi
2844
47e45e44 2845AC_ARG_WITH(pid-dir,
2846 [ --with-pid-dir=PATH Specify location of ssh.pid file],
2847 [
6cf0200f 2848 if test -n "$withval" && test "x$withval" != "xno" && \
2849 test "x${withval}" != "xyes"; then
19d9ac2a 2850 piddir=$withval
82f4e93d 2851 if test ! -d $piddir ; then
81dadca3 2852 AC_MSG_WARN([** no $piddir directory on this system **])
2853 fi
47e45e44 2854 fi
2855 ]
2856)
b7a87eea 2857
42f11eb2 2858AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir")
19d9ac2a 2859AC_SUBST(piddir)
47e45e44 2860
1d7b9b20 2861dnl allow user to disable some login recording features
2862AC_ARG_ENABLE(lastlog,
bfd550a2 2863 [ --disable-lastlog disable use of lastlog even if detected [no]],
ddb154b3 2864 [
2865 if test "x$enableval" = "xno" ; then
2866 AC_DEFINE(DISABLE_LASTLOG)
2867 fi
2868 ]
1d7b9b20 2869)
2870AC_ARG_ENABLE(utmp,
bfd550a2 2871 [ --disable-utmp disable use of utmp even if detected [no]],
ddb154b3 2872 [
2873 if test "x$enableval" = "xno" ; then
2874 AC_DEFINE(DISABLE_UTMP)
2875 fi
2876 ]
1d7b9b20 2877)
2878AC_ARG_ENABLE(utmpx,
bfd550a2 2879 [ --disable-utmpx disable use of utmpx even if detected [no]],
ddb154b3 2880 [
2881 if test "x$enableval" = "xno" ; then
2882 AC_DEFINE(DISABLE_UTMPX)
2883 fi
2884 ]
1d7b9b20 2885)
2886AC_ARG_ENABLE(wtmp,
bfd550a2 2887 [ --disable-wtmp disable use of wtmp even if detected [no]],
ddb154b3 2888 [
2889 if test "x$enableval" = "xno" ; then
2890 AC_DEFINE(DISABLE_WTMP)
2891 fi
2892 ]
1d7b9b20 2893)
2894AC_ARG_ENABLE(wtmpx,
bfd550a2 2895 [ --disable-wtmpx disable use of wtmpx even if detected [no]],
ddb154b3 2896 [
2897 if test "x$enableval" = "xno" ; then
2898 AC_DEFINE(DISABLE_WTMPX)
2899 fi
2900 ]
1d7b9b20 2901)
2902AC_ARG_ENABLE(libutil,
bfd550a2 2903 [ --disable-libutil disable use of libutil (login() etc.) [no]],
ddb154b3 2904 [
2905 if test "x$enableval" = "xno" ; then
2906 AC_DEFINE(DISABLE_LOGIN)
2907 fi
2908 ]
1d7b9b20 2909)
2910AC_ARG_ENABLE(pututline,
bfd550a2 2911 [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]],
ddb154b3 2912 [
2913 if test "x$enableval" = "xno" ; then
aff51935 2914 AC_DEFINE(DISABLE_PUTUTLINE)
ddb154b3 2915 fi
2916 ]
1d7b9b20 2917)
2918AC_ARG_ENABLE(pututxline,
bfd550a2 2919 [ --disable-pututxline disable use of pututxline() etc. ([uw]tmpx) [no]],
ddb154b3 2920 [
2921 if test "x$enableval" = "xno" ; then
2922 AC_DEFINE(DISABLE_PUTUTXLINE)
2923 fi
2924 ]
1d7b9b20 2925)
2926AC_ARG_WITH(lastlog,
bfd550a2 2927 [ --with-lastlog=FILE|DIR specify lastlog location [common locations]],
8c89dd2b 2928 [
82f4e93d 2929 if test "x$withval" = "xno" ; then
8c89dd2b 2930 AC_DEFINE(DISABLE_LASTLOG)
6cf0200f 2931 elif test -n "$withval" && test "x${withval}" != "xyes"; then
8c89dd2b 2932 conf_lastlog_location=$withval
2933 fi
2934 ]
2935)
1d7b9b20 2936
2937dnl lastlog, [uw]tmpx? detection
2938dnl NOTE: set the paths in the platform section to avoid the
2939dnl need for command-line parameters
2940dnl lastlog and [uw]tmp are subject to a file search if all else fails
2941
2942dnl lastlog detection
2943dnl NOTE: the code itself will detect if lastlog is a directory
2944AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
2945AC_TRY_COMPILE([
2946#include <sys/types.h>
2947#include <utmp.h>
2948#ifdef HAVE_LASTLOG_H
2949# include <lastlog.h>
2950#endif
d7c0f3d5 2951#ifdef HAVE_PATHS_H
1d7b9b20 2952# include <paths.h>
41cb4569 2953#endif
2954#ifdef HAVE_LOGIN_H
2955# include <login.h>
1d7b9b20 2956#endif
2957 ],
2958 [ char *lastlog = LASTLOG_FILE; ],
2959 [ AC_MSG_RESULT(yes) ],
d7c0f3d5 2960 [
2961 AC_MSG_RESULT(no)
2962 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
2963 AC_TRY_COMPILE([
2964#include <sys/types.h>
2965#include <utmp.h>
2966#ifdef HAVE_LASTLOG_H
2967# include <lastlog.h>
2968#endif
2969#ifdef HAVE_PATHS_H
2970# include <paths.h>
2971#endif
2972 ],
2973 [ char *lastlog = _PATH_LASTLOG; ],
2974 [ AC_MSG_RESULT(yes) ],
2975 [
f282b668 2976 AC_MSG_RESULT(no)
d7c0f3d5 2977 system_lastlog_path=no
2978 ])
2979 ]
1d7b9b20 2980)
d7c0f3d5 2981
1d7b9b20 2982if test -z "$conf_lastlog_location"; then
2983 if test x"$system_lastlog_path" = x"no" ; then
2984 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
e5fe9a1f 2985 if (test -d "$f" || test -f "$f") ; then
1d7b9b20 2986 conf_lastlog_location=$f
2987 fi
2988 done
2989 if test -z "$conf_lastlog_location"; then
f8119cef 2990 AC_MSG_WARN([** Cannot find lastlog **])
2991 dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
1d7b9b20 2992 fi
2993 fi
2994fi
2995
2996if test -n "$conf_lastlog_location"; then
2997 AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location")
82f4e93d 2998fi
1d7b9b20 2999
3000dnl utmp detection
3001AC_MSG_CHECKING([if your system defines UTMP_FILE])
3002AC_TRY_COMPILE([
3003#include <sys/types.h>
3004#include <utmp.h>
d7c0f3d5 3005#ifdef HAVE_PATHS_H
1d7b9b20 3006# include <paths.h>
3007#endif
3008 ],
3009 [ char *utmp = UTMP_FILE; ],
3010 [ AC_MSG_RESULT(yes) ],
3011 [ AC_MSG_RESULT(no)
3012 system_utmp_path=no ]
3013)
3014if test -z "$conf_utmp_location"; then
3015 if test x"$system_utmp_path" = x"no" ; then
3016 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3017 if test -f $f ; then
3018 conf_utmp_location=$f
3019 fi
3020 done
3021 if test -z "$conf_utmp_location"; then
3022 AC_DEFINE(DISABLE_UTMP)
3023 fi
3024 fi
3025fi
3026if test -n "$conf_utmp_location"; then
3027 AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location")
82f4e93d 3028fi
1d7b9b20 3029
3030dnl wtmp detection
3031AC_MSG_CHECKING([if your system defines WTMP_FILE])
3032AC_TRY_COMPILE([
3033#include <sys/types.h>
3034#include <utmp.h>
d7c0f3d5 3035#ifdef HAVE_PATHS_H
1d7b9b20 3036# include <paths.h>
3037#endif
3038 ],
3039 [ char *wtmp = WTMP_FILE; ],
3040 [ AC_MSG_RESULT(yes) ],
3041 [ AC_MSG_RESULT(no)
3042 system_wtmp_path=no ]
3043)
3044if test -z "$conf_wtmp_location"; then
3045 if test x"$system_wtmp_path" = x"no" ; then
3046 for f in /usr/adm/wtmp /var/log/wtmp; do
3047 if test -f $f ; then
3048 conf_wtmp_location=$f
3049 fi
3050 done
3051 if test -z "$conf_wtmp_location"; then
3052 AC_DEFINE(DISABLE_WTMP)
3053 fi
3054 fi
3055fi
3056if test -n "$conf_wtmp_location"; then
3057 AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location")
82f4e93d 3058fi
1d7b9b20 3059
3060
3061dnl utmpx detection - I don't know any system so perverse as to require
3062dnl utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3063dnl there, though.
3064AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3065AC_TRY_COMPILE([
3066#include <sys/types.h>
3067#include <utmp.h>
3068#ifdef HAVE_UTMPX_H
3069#include <utmpx.h>
3070#endif
d7c0f3d5 3071#ifdef HAVE_PATHS_H
1d7b9b20 3072# include <paths.h>
3073#endif
3074 ],
3075 [ char *utmpx = UTMPX_FILE; ],
3076 [ AC_MSG_RESULT(yes) ],
3077 [ AC_MSG_RESULT(no)
3078 system_utmpx_path=no ]
3079)
3080if test -z "$conf_utmpx_location"; then
3081 if test x"$system_utmpx_path" = x"no" ; then
3082 AC_DEFINE(DISABLE_UTMPX)
3083 fi
3084else
3085 AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location")
82f4e93d 3086fi
1d7b9b20 3087
3088dnl wtmpx detection
3089AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3090AC_TRY_COMPILE([
3091#include <sys/types.h>
3092#include <utmp.h>
3093#ifdef HAVE_UTMPX_H
3094#include <utmpx.h>
3095#endif
d7c0f3d5 3096#ifdef HAVE_PATHS_H
1d7b9b20 3097# include <paths.h>
3098#endif
3099 ],
3100 [ char *wtmpx = WTMPX_FILE; ],
3101 [ AC_MSG_RESULT(yes) ],
3102 [ AC_MSG_RESULT(no)
3103 system_wtmpx_path=no ]
3104)
3105if test -z "$conf_wtmpx_location"; then
3106 if test x"$system_wtmpx_path" = x"no" ; then
3107 AC_DEFINE(DISABLE_WTMPX)
3108 fi
3109else
3110 AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location")
82f4e93d 3111fi
1d7b9b20 3112
b7a87eea 3113
bd499f9e 3114if test ! -z "$blibpath" ; then
68ece370 3115 LDFLAGS="$LDFLAGS $blibflags$blibpath"
3116 AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
bd499f9e 3117fi
3118
ddceb1c8 3119dnl remove pam and dl because they are in $LIBPAM
3120if test "$PAM_MSG" = yes ; then
98f2d9d5 3121 LIBS=`echo $LIBS | sed 's/-lpam //'`
3122fi
3123if test "$ac_cv_lib_pam_pam_set_item" = yes ; then
3124 LIBS=`echo $LIBS | sed 's/-ldl //'`
ddceb1c8 3125fi
3126
3c62e7eb 3127AC_EXEEXT
d7cfdd7c 3128AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openbsd-compat/Makefile \
3129 scard/Makefile ssh_prng_cmds survey.sh])
98a7c37b 3130AC_OUTPUT
d3083fbd 3131
cbd7492e 3132# Print summary of options
3133
cbd7492e 3134# Someone please show me a better way :)
3135A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3136B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3137C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3138D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
f5665f6f 3139E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
e0c4d3ac 3140F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
cbd7492e 3141G=`eval echo ${piddir}` ; G=`eval echo ${G}`
ecac8ee5 3142H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3143I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3144J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
cbd7492e 3145
3146echo ""
26de7942 3147echo "OpenSSH has been configured with the following options:"
ecac8ee5 3148echo " User binaries: $B"
3149echo " System binaries: $C"
3150echo " Configuration files: $D"
3151echo " Askpass program: $E"
3152echo " Manual pages: $F"
3153echo " PID file: $G"
3154echo " Privilege separation chroot path: $H"
95b99395 3155if test "x$external_path_file" = "x/etc/login.conf" ; then
3156echo " At runtime, sshd will use the path defined in $external_path_file"
3157echo " Make sure the path to scp is present, otherwise scp will not work"
8d184c09 3158else
ecac8ee5 3159echo " sshd default user PATH: $I"
89bbd457 3160 if test ! -z "$external_path_file"; then
95b99395 3161echo " (If PATH is set in $external_path_file it will be used instead. If"
3162echo " used, ensure the path to scp is present, otherwise scp will not work.)"
3163 fi
8d184c09 3164fi
06617857 3165if test ! -z "$superuser_path" ; then
ecac8ee5 3166echo " sshd superuser user PATH: $J"
3167fi
3168echo " Manpage format: $MANTYPE"
3e05e934 3169echo " PAM support: $PAM_MSG"
ecac8ee5 3170echo " KerberosV support: $KRB5_MSG"
3171echo " Smartcard support: $SCARD_MSG"
ecac8ee5 3172echo " S/KEY support: $SKEY_MSG"
3173echo " TCP Wrappers support: $TCPW_MSG"
3174echo " MD5 password support: $MD5_MSG"
59031773 3175echo " libedit support: $LIBEDIT_MSG"
3deb1408 3176echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
ecac8ee5 3177echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3178echo " BSD Auth support: $BSD_AUTH_MSG"
3179echo " Random number source: $RAND_MSG"
f1b0ecc3 3180if test ! -z "$USE_RAND_HELPER" ; then
ecac8ee5 3181echo " ssh-rand-helper collects from: $RAND_HELPER_MSG"
af774732 3182fi
3183
cbd7492e 3184echo ""
3185
0c2fb82f 3186echo " Host: ${host}"
3187echo " Compiler: ${CC}"
3188echo " Compiler flags: ${CFLAGS}"
3189echo "Preprocessor flags: ${CPPFLAGS}"
3190echo " Linker flags: ${LDFLAGS}"
ddceb1c8 3191echo " Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
cbd7492e 3192
3193echo ""
3194
9cefe228 3195if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
b3146b5f 3196 echo "SVR4 style packages are supported with \"make package\""
3197 echo ""
9cefe228 3198fi
3199
adeebd37 3200if test "x$PAM_MSG" = "xyes" ; then
f1b0ecc3 3201 echo "PAM is enabled. You may need to install a PAM control file "
3202 echo "for sshd, otherwise password authentication may fail. "
aff51935 3203 echo "Example PAM control files can be found in the contrib/ "
f1b0ecc3 3204 echo "subdirectory"
adeebd37 3205 echo ""
3206fi
3207
f1b0ecc3 3208if test ! -z "$RAND_HELPER_CMDHASH" ; then
3209 echo "WARNING: you are using the builtin random number collection "
3210 echo "service. Please read WARNING.RNG and request that your OS "
3211 echo "vendor includes kernel-based random number collection in "
3212 echo "future versions of your OS."
2c523de9 3213 echo ""
3214fi
af774732 3215
2f6f9cff 3216if test ! -z "$NO_PEERCHECK" ; then
3217 echo "WARNING: the operating system that you are using does not "
3218 echo "appear to support either the getpeereid() API nor the "
3219 echo "SO_PEERCRED getsockopt() option. These facilities are used to "
3220 echo "enforce security checks to prevent unauthorised connections to "
3221 echo "ssh-agent. Their absence increases the risk that a malicious "
3222 echo "user can connect to your agent. "
3223 echo ""
3224fi
3225
7b578f7d 3226if test "$AUDIT_MODULE" = "bsm" ; then
3227 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
3228 echo "See the Solaris section in README.platform for details."
3229fi
git-cvsimport mirror of OpenSSH
This page took 0.848261 seconds and 5 git commands to generate.