]> andersk Git - openssh.git/blame - configure.ac
andersk / openssh.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
- (tim) [configure.ac] Allow --with-audit=no. OK dtucker@
[openssh.git] / configure.ac
CommitLineData
eb5d7ff6 1# $Id$
2b983b95 2#
3# Copyright (c) 1999-2004 Damien Miller
4#
5# Permission to use, copy, modify, and distribute this software for any
6# purpose with or without fee is hereby granted, provided that the above
7# copyright notice and this permission notice appear in all copies.
8#
9# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
0b202697 16
76e6410a 17AC_INIT(OpenSSH, Portable, openssh-unix-dev@mindrot.org)
98a7c37b 18AC_CONFIG_SRCDIR([ssh.c])
5881cd60 19
20AC_CONFIG_HEADER(config.h)
b14b2ae7 21AC_PROG_CC
a7effaac 22AC_CANONICAL_HOST
cf0c5df5 23AC_C_BIGENDIAN
5881cd60 24
a0391976 25# Checks for programs.
4bbf95fa 26AC_PROG_AWK
4cca272e 27AC_PROG_CPP
5881cd60 28AC_PROG_RANLIB
cf8dd513 29AC_PROG_INSTALL
bee0a37e 30AC_PATH_PROG(AR, ar)
ddd8c95b 31AC_PATH_PROG(CAT, cat)
32AC_PATH_PROG(KILL, kill)
13dd877b 33AC_PATH_PROGS(PERL, perl5 perl)
c3690df3 34AC_PATH_PROG(SED, sed)
a0f84251 35AC_SUBST(PERL)
ad85db64 36AC_PATH_PROG(ENT, ent)
37AC_SUBST(ENT)
6958bd37 38AC_PATH_PROG(TEST_MINUS_S_SH, bash)
39AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
40AC_PATH_PROG(TEST_MINUS_S_SH, sh)
6193497b 41AC_PATH_PROG(SH, sh)
a3245b92 42AC_SUBST(TEST_SHELL,sh)
f498ed15 43
9cefe228 44dnl for buildpkg.sh
45AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
46 [/usr/sbin${PATH_SEPARATOR}/etc])
47AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
48 [/usr/sbin${PATH_SEPARATOR}/etc])
49AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
50
948fd8b9 51# System features
52AC_SYS_LARGEFILE
53
c193d002 54if test -z "$AR" ; then
55 AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
56fi
57
2e73a022 58# Use LOGIN_PROGRAM from environment if possible
59if test ! -z "$LOGIN_PROGRAM" ; then
60 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM")
61else
62 # Search for login
63 AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
64 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
65 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
66 fi
67fi
68
37656beb 69AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
70if test ! -z "$PATH_PASSWD_PROG" ; then
71 AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG")
72fi
73
d423d822 74if test -z "$LD" ; then
75 LD=$CC
76fi
77AC_SUBST(LD)
82f4e93d 78
d423d822 79AC_C_INLINE
dfafb2e1 80
81AC_CHECK_DECL(LLONG_MAX, have_llong_max=1, , [#include <limits.h>])
82
aff51935 83if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
af40ca44 84 CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wuninitialized"
44d71ad5 85 CFLAGS="$CFLAGS -Wsign-compare"
8a3ff1aa 86
dfafb2e1 87 if test -z "$have_llong_max"; then
88 # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
89 unset ac_cv_have_decl_LLONG_MAX
90 saved_CFLAGS="$CFLAGS"
91 CFLAGS="$CFLAGS -std=gnu99"
92 AC_CHECK_DECL(LLONG_MAX,
93 [have_llong_max=1],
94 [CFLAGS="$saved_CFLAGS"],
95 [#include <limits.h>]
96 )
97 fi
d423d822 98fi
99
343ba2ce 100if test -z "$have_llong_max"; then
101 AC_MSG_CHECKING([for max value of long long])
102 AC_RUN_IFELSE(
103 [AC_LANG_SOURCE([[
104#include <stdio.h>
105/* Why is this so damn hard? */
106#ifdef __GNUC__
107# undef __GNUC__
108#endif
109#define __USE_ISOC99
110#include <limits.h>
111#define DATA "conftest.llminmax"
112int main(void) {
113 FILE *f;
114 long long i, llmin, llmax = 0;
115
116 if((f = fopen(DATA,"w")) == NULL)
117 exit(1);
118
119#if defined(LLONG_MIN) && defined(LLONG_MAX)
120 fprintf(stderr, "Using system header for LLONG_MIN and LLONG_MAX\n");
121 llmin = LLONG_MIN;
122 llmax = LLONG_MAX;
123#else
124 fprintf(stderr, "Calculating LLONG_MIN and LLONG_MAX\n");
125 /* This will work on one's complement and two's complement */
126 for (i = 1; i > llmax; i <<= 1, i++)
127 llmax = i;
128 llmin = llmax + 1LL; /* wrap */
129#endif
130
131 /* Sanity check */
132 if (llmin + 1 < llmin || llmin - 1 < llmin || llmax + 1 > llmax
133 || llmax - 1 > llmax) {
134 fprintf(f, "unknown unknown\n");
135 exit(2);
136 }
137
138 if (fprintf(f ,"%lld %lld", llmin, llmax) < 0)
139 exit(3);
140
141 exit(0);
142}
143 ]])],
144 [
145 llong_min=`$AWK '{print $1}' conftest.llminmax`
146 llong_max=`$AWK '{print $2}' conftest.llminmax`
147 AC_MSG_RESULT($llong_max)
148 AC_DEFINE_UNQUOTED(LLONG_MAX, [${llong_max}LL],
149 [max value of long long calculated by configure])
150 AC_MSG_CHECKING([for min value of long long])
151 AC_MSG_RESULT($llong_min)
152 AC_DEFINE_UNQUOTED(LLONG_MIN, [${llong_min}LL],
153 [min value of long long calculated by configure])
154 ],
155 [
156 AC_MSG_RESULT(not found)
157 ],
158 [
159 AC_MSG_WARN([cross compiling: not checking])
160 ]
161 )
162fi
163
e6354014 164AC_ARG_WITH(rpath,
165 [ --without-rpath Disable auto-added -R linker paths],
166 [
82f4e93d 167 if test "x$withval" = "xno" ; then
e6354014 168 need_dash_r=""
169 fi
170 if test "x$withval" = "xyes" ; then
171 need_dash_r=1
172 fi
173 ]
174)
175
a0391976 176# Check for some target-specific stuff
a7effaac 177case "$host" in
9d6b1b96 178*-*-aix*)
aff51935 179 AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
68ece370 180 if (test -z "$blibpath"); then
0a15d73b 181 blibpath="/usr/lib:/lib"
68ece370 182 fi
183 saved_LDFLAGS="$LDFLAGS"
184 for tryflags in -blibpath: -Wl,-blibpath: -Wl,-rpath, ;do
185 if (test -z "$blibflags"); then
186 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
187 AC_TRY_LINK([], [], [blibflags=$tryflags])
188 fi
189 done
190 if (test -z "$blibflags"); then
191 AC_MSG_RESULT(not found)
192 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
193 else
194 AC_MSG_RESULT($blibflags)
bd499f9e 195 fi
68ece370 196 LDFLAGS="$saved_LDFLAGS"
e351e493 197 dnl Check for authenticate. Might be in libs.a on older AIXes
198 AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE)],
0764e748 199 [AC_CHECK_LIB(s,authenticate,
e351e493 200 [ AC_DEFINE(WITH_AIXAUTHENTICATE)
0764e748 201 LIBS="$LIBS -ls"
202 ])
203 ])
ba603e06 204 dnl Check for various auth function declarations in headers.
c85ed8e2 205 AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
72ad335d 206 passwdexpired, setauthdb], , , [#include <usersec.h>])
e351e493 207 dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
ba603e06 208 AC_CHECK_DECLS(loginfailed,
e351e493 209 [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
210 AC_TRY_COMPILE(
f58c0e01 211 [#include <usersec.h>],
e351e493 212 [(void)loginfailed("user","host","tty",0);],
213 [AC_MSG_RESULT(yes)
214 AC_DEFINE(AIX_LOGINFAILED_4ARG)],
f58c0e01 215 [AC_MSG_RESULT(no)]
e351e493 216 )],
217 [],
218 [#include <usersec.h>]
219 )
2aa3a16c 220 AC_CHECK_FUNCS(setauthdb)
5ccf88cb 221 check_for_aix_broken_getaddrinfo=1
1352689f 222 AC_DEFINE(BROKEN_REALPATH)
3b8dff69 223 AC_DEFINE(SETEUID_BREAKS_SETUID)
224 AC_DEFINE(BROKEN_SETREUID)
225 AC_DEFINE(BROKEN_SETREGID)
a3cef3ca 226 dnl AIX handles lastlog as part of its login message
227 AC_DEFINE(DISABLE_LASTLOG)
58177c0a 228 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3a2b2b44 229 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
9d6b1b96 230 ;;
3c62e7eb 231*-*-cygwin*)
a52997bd 232 check_for_libcrypt_later=1
ffb8d130 233 LIBS="$LIBS /usr/lib/textmode.o"
3c62e7eb 234 AC_DEFINE(HAVE_CYGWIN)
7043a38d 235 AC_DEFINE(USE_PIPES)
3c62e7eb 236 AC_DEFINE(DISABLE_SHADOW)
3c62e7eb 237 AC_DEFINE(IP_TOS_IS_BROKEN)
3d114925 238 AC_DEFINE(NO_X11_UNIX_SOCKETS)
e6f15ed1 239 AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT)
94d8258b 240 AC_DEFINE(DISABLE_FD_PASSING)
3c62e7eb 241 ;;
d6fdb079 242*-*-dgux*)
243 AC_DEFINE(IP_TOS_IS_BROKEN)
0c6a72a5 244 AC_DEFINE(SETEUID_BREAKS_SETUID)
245 AC_DEFINE(BROKEN_SETREUID)
246 AC_DEFINE(BROKEN_SETREGID)
d6fdb079 247 ;;
39c98ef7 248*-*-darwin*)
33e2e066 249 AC_MSG_CHECKING(if we have working getaddrinfo)
250 AC_TRY_RUN([#include <mach-o/dyld.h>
251main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
252 exit(0);
253 else
254 exit(1);
255}], [AC_MSG_RESULT(working)],
256 [AC_MSG_RESULT(buggy)
257 AC_DEFINE(BROKEN_GETADDRINFO)],
b27e573d 258 [AC_MSG_RESULT(assume it is working)])
635e0c42 259 AC_DEFINE(SETEUID_BREAKS_SETUID)
260 AC_DEFINE(BROKEN_SETREUID)
261 AC_DEFINE(BROKEN_SETREGID)
ff620033 262 AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1)
39c98ef7 263 ;;
7d458c86 264*-*-hpux*)
265 # first we define all of the options common to all HP-UX releases
b8fea62d 266 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
44839801 267 IPADDR_IN_DISPLAY=yes
2b10f47a 268 AC_DEFINE(USE_PIPES)
a2572aa7 269 AC_DEFINE(LOGIN_NO_ENDOPT)
270 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3e6e3da0 271 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
3a2b2b44 272 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
f75ca46d 273 LIBS="$LIBS -lsec"
7d458c86 274 AC_CHECK_LIB(xnet, t_error, ,
275 AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
276
277 # next, we define all of the options specific to major releases
278 case "$host" in
279 *-*-hpux10*)
280 if test -z "$GCC"; then
281 CFLAGS="$CFLAGS -Ae"
282 fi
283 ;;
284 *-*-hpux11*)
285 AC_DEFINE(PAM_SUN_CODEBASE)
286 AC_DEFINE(DISABLE_UTMP)
287 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
288 check_for_hpux_broken_getaddrinfo=1
289 check_for_conflicting_getspnam=1
290 ;;
291 esac
292
293 # lastly, we define options specific to minor releases
294 case "$host" in
295 *-*-hpux10.26)
296 AC_DEFINE(HAVE_SECUREWARE)
297 disable_ptmx_check=yes
298 LIBS="$LIBS -lsecpw"
299 ;;
300 esac
2b763e31 301 ;;
d94aa2ae 302*-*-irix5*)
6ac7829a 303 PATH="$PATH:/usr/etc"
416ed5a7 304 AC_DEFINE(BROKEN_INET_NTOA)
cb433561 305 AC_DEFINE(SETEUID_BREAKS_SETUID)
306 AC_DEFINE(BROKEN_SETREUID)
307 AC_DEFINE(BROKEN_SETREGID)
0e8f4eba 308 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 309 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
b9795b89 310 ;;
311*-*-irix6*)
6ac7829a 312 PATH="$PATH:/usr/etc"
3206bb3b 313 AC_DEFINE(WITH_IRIX_ARRAY)
314 AC_DEFINE(WITH_IRIX_PROJECT)
315 AC_DEFINE(WITH_IRIX_AUDIT)
b5171f93 316 AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS)])
416ed5a7 317 AC_DEFINE(BROKEN_INET_NTOA)
412c0eaa 318 AC_DEFINE(SETEUID_BREAKS_SETUID)
319 AC_DEFINE(BROKEN_SETREUID)
320 AC_DEFINE(BROKEN_SETREGID)
3d59832f 321 AC_DEFINE(BROKEN_UPDWTMPX)
0e8f4eba 322 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 323 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
d94aa2ae 324 ;;
5cdfe03f 325*-*-linux*)
326 no_dev_ptmx=1
717057b6 327 check_for_libcrypt_later=1
eacb954e 328 check_for_openpty_ctty_bug=1
80faa19f 329 AC_DEFINE(DONT_TRY_OTHER_AF)
a8545c6c 330 AC_DEFINE(PAM_TTY_KLUDGE)
b90bed9f 331 AC_DEFINE(LOCKED_PASSWD_PREFIX, "!")
3a2b2b44 332 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
cd698186 333 AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM)
b6610e8f 334 AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
335 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
80faa19f 336 inet6_default_4in6=yes
bf7c1e6c 337 case `uname -r` in
ad84c479 338 1.*|2.0.*)
bf7c1e6c 339 AC_DEFINE(BROKEN_CMSG_TYPE)
340 ;;
bf7c1e6c 341 esac
5cdfe03f 342 ;;
66d6c27e 343mips-sony-bsd|mips-sony-newsos4)
35fc74ed 344 AC_DEFINE(NEED_SETPRGP, [], [Need setpgrp to acquire controlling tty])
66d6c27e 345 SONY=1
66d6c27e 346 ;;
d468fc76 347*-*-netbsd*)
33e2e066 348 check_for_libcrypt_before=1
82f4e93d 349 if test "x$withval" != "xno" ; then
e6354014 350 need_dash_r=1
351 fi
d468fc76 352 ;;
86b416a7 353*-*-freebsd*)
354 check_for_libcrypt_later=1
355 ;;
8707b7eb 356*-*-bsdi*)
357 AC_DEFINE(SETEUID_BREAKS_SETUID)
358 AC_DEFINE(BROKEN_SETREUID)
359 AC_DEFINE(BROKEN_SETREGID)
360 ;;
729bfe59 361*-next-*)
729bfe59 362 conf_lastlog_location="/usr/adm/lastlog"
698d107e 363 conf_utmp_location=/etc/utmp
364 conf_wtmp_location=/usr/adm/wtmp
365 MAIL=/usr/spool/mail
729bfe59 366 AC_DEFINE(HAVE_NEXT)
443172c4 367 AC_DEFINE(BROKEN_REALPATH)
00937921 368 AC_DEFINE(USE_PIPES)
86b416a7 369 AC_DEFINE(BROKEN_SAVED_UIDS)
729bfe59 370 ;;
5b7b5e23 371*-*-openbsd*)
372 AC_DEFINE(HAVE_ATTRIBUTE__SENTINEL__, 1, [OpenBSD's gcc has sentinel])
373 ;;
9d6b1b96 374*-*-solaris*)
82f4e93d 375 if test "x$withval" != "xno" ; then
010e9d5b 376 need_dash_r=1
377 fi
adeebd37 378 AC_DEFINE(PAM_SUN_CODEBASE)
7e2d5fa4 379 AC_DEFINE(LOGIN_NEEDS_UTMPX)
380 AC_DEFINE(LOGIN_NEEDS_TERM)
7f0a4ff1 381 AC_DEFINE(PAM_TTY_KLUDGE)
059d3165 382 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID)
3e6e3da0 383 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
ad84c479 384 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
385 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 386 external_path_file=/etc/default/login
1d7b9b20 387 # hardwire lastlog location (can't detect it on some versions)
388 conf_lastlog_location="/var/adm/lastlog"
32c80420 389 AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
390 sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
391 if test "$sol2ver" -ge 8; then
392 AC_MSG_RESULT(yes)
393 AC_DEFINE(DISABLE_UTMP)
394 AC_DEFINE(DISABLE_WTMP)
395 else
396 AC_MSG_RESULT(no)
397 fi
9d6b1b96 398 ;;
a423beaf 399*-*-sunos4*)
0c2fb82f 400 CPPFLAGS="$CPPFLAGS -DSUNOS4"
a423beaf 401 AC_CHECK_FUNCS(getpwanam)
adeebd37 402 AC_DEFINE(PAM_SUN_CODEBASE)
32eec038 403 conf_utmp_location=/etc/utmp
404 conf_wtmp_location=/var/adm/wtmp
405 conf_lastlog_location=/var/adm/lastlog
137d7b6c 406 AC_DEFINE(USE_PIPES)
a423beaf 407 ;;
6f68f28a 408*-ncr-sysv*)
98a7c37b 409 LIBS="$LIBS -lc89"
29525240 410 AC_DEFINE(USE_PIPES)
eabb99c6 411 AC_DEFINE(SSHD_ACQUIRES_CTTY)
6fb3618d 412 AC_DEFINE(SETEUID_BREAKS_SETUID)
413 AC_DEFINE(BROKEN_SETREUID)
414 AC_DEFINE(BROKEN_SETREGID)
6f68f28a 415 ;;
132dd316 416*-sni-sysv*)
c8c15bcb 417 # /usr/ucblib MUST NOT be searched on ReliantUNIX
e2798e96 418 AC_CHECK_LIB(dl, dlsym, ,)
85cf54ec 419 # -lresolv needs to be at then end of LIBS or DNS lookups break
420 AC_CHECK_LIB(res_query, resolv, [ LIBS="$LIBS -lresolv" ])
9548d6c8 421 IPADDR_IN_DISPLAY=yes
422 AC_DEFINE(USE_PIPES)
132dd316 423 AC_DEFINE(IP_TOS_IS_BROKEN)
605369bb 424 AC_DEFINE(SETEUID_BREAKS_SETUID)
425 AC_DEFINE(BROKEN_SETREUID)
426 AC_DEFINE(BROKEN_SETREGID)
eabb99c6 427 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 428 external_path_file=/etc/default/login
c8c15bcb 429 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
430 # Attention: always take care to bind libsocket and libnsl before libc,
431 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
132dd316 432 ;;
79a7ba96 433# UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
77bb0bca 434*-*-sysv4.2*)
ed6553e2 435 AC_DEFINE(USE_PIPES)
7ed101c0 436 AC_DEFINE(SETEUID_BREAKS_SETUID)
437 AC_DEFINE(BROKEN_SETREUID)
438 AC_DEFINE(BROKEN_SETREGID)
46f853b9 439 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
77bb0bca 440 ;;
79a7ba96 441# UnixWare 7.x, OpenUNIX 8
77bb0bca 442*-*-sysv5*)
ed6553e2 443 AC_DEFINE(USE_PIPES)
7ed101c0 444 AC_DEFINE(SETEUID_BREAKS_SETUID)
445 AC_DEFINE(BROKEN_SETREUID)
446 AC_DEFINE(BROKEN_SETREGID)
46f853b9 447 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
822015dd 448 case "$host" in
449 *-*-sysv5SCO_SV*) # SCO OpenServer 6.x
450 TEST_SHELL=/u95/bin/sh
451 ;;
452 esac
77bb0bca 453 ;;
9d6b1b96 454*-*-sysv*)
9d6b1b96 455 ;;
79a7ba96 456# SCO UNIX and OEM versions of SCO UNIX
77bb0bca 457*-*-sco3.2v4*)
11cf4f1f 458 AC_MSG_ERROR("This Platform is no longer supported.")
77bb0bca 459 ;;
79a7ba96 460# SCO OpenServer 5.x
77bb0bca 461*-*-sco3.2v5*)
21710e39 462 if test -z "$GCC"; then
463 CFLAGS="$CFLAGS -belf"
464 fi
ed6553e2 465 LIBS="$LIBS -lprot -lx -ltinfo -lm"
509b1f88 466 no_dev_ptmx=1
ed6553e2 467 AC_DEFINE(USE_PIPES)
6e879cb4 468 AC_DEFINE(HAVE_SECUREWARE)
d287c664 469 AC_DEFINE(DISABLE_SHADOW)
94d8258b 470 AC_DEFINE(DISABLE_FD_PASSING)
7ed101c0 471 AC_DEFINE(SETEUID_BREAKS_SETUID)
472 AC_DEFINE(BROKEN_SETREUID)
473 AC_DEFINE(BROKEN_SETREGID)
bcebad47 474 AC_DEFINE(WITH_ABBREV_NO_TTY)
34f2baf0 475 AC_DEFINE(BROKEN_UPDWTMPX)
3ade3b57 476 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
aca75d94 477 AC_CHECK_FUNCS(getluid setluid)
533875af 478 MANTYPE=man
a3245b92 479 TEST_SHELL=ksh
509b1f88 480 ;;
ccbb983c 481*-*-unicosmk*)
c1ad5966 482 AC_DEFINE(NO_SSH_LASTLOG)
483 AC_DEFINE(SETEUID_BREAKS_SETUID)
484 AC_DEFINE(BROKEN_SETREUID)
485 AC_DEFINE(BROKEN_SETREGID)
ccbb983c 486 AC_DEFINE(USE_PIPES)
487 AC_DEFINE(DISABLE_FD_PASSING)
488 LDFLAGS="$LDFLAGS"
489 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
490 MANTYPE=cat
d262b7f2 491 ;;
7b9a8c6e 492*-*-unicosmp*)
c1ad5966 493 AC_DEFINE(SETEUID_BREAKS_SETUID)
494 AC_DEFINE(BROKEN_SETREUID)
495 AC_DEFINE(BROKEN_SETREGID)
7b9a8c6e 496 AC_DEFINE(WITH_ABBREV_NO_TTY)
497 AC_DEFINE(USE_PIPES)
498 AC_DEFINE(DISABLE_FD_PASSING)
499 LDFLAGS="$LDFLAGS"
c1ad5966 500 LIBS="$LIBS -lgen -lacid -ldb"
7b9a8c6e 501 MANTYPE=cat
502 ;;
ca5c7d6a 503*-*-unicos*)
c1ad5966 504 AC_DEFINE(SETEUID_BREAKS_SETUID)
505 AC_DEFINE(BROKEN_SETREUID)
506 AC_DEFINE(BROKEN_SETREGID)
ca5c7d6a 507 AC_DEFINE(USE_PIPES)
94d8258b 508 AC_DEFINE(DISABLE_FD_PASSING)
ef51930f 509 AC_DEFINE(NO_SSH_LASTLOG)
ccbb983c 510 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
511 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
512 MANTYPE=cat
a704dd54 513 ;;
4d33e531 514*-dec-osf*)
99c8ddac 515 AC_MSG_CHECKING(for Digital Unix SIA)
516 no_osfsia=""
517 AC_ARG_WITH(osfsia,
518 [ --with-osfsia Enable Digital Unix SIA],
519 [
520 if test "x$withval" = "xno" ; then
521 AC_MSG_RESULT(disabled)
522 no_osfsia=1
523 fi
524 ],
525 )
526 if test -z "$no_osfsia" ; then
4d33e531 527 if test -f /etc/sia/matrix.conf; then
528 AC_MSG_RESULT(yes)
529 AC_DEFINE(HAVE_OSF_SIA)
530 AC_DEFINE(DISABLE_LOGIN)
58d0df4e 531 AC_DEFINE(DISABLE_FD_PASSING)
4d33e531 532 LIBS="$LIBS -lsecurity -ldb -lm -laud"
533 else
534 AC_MSG_RESULT(no)
dbf8efb3 535 AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin")
4d33e531 536 fi
537 fi
a6e67b60 538 AC_DEFINE(BROKEN_GETADDRINFO)
f4f2ff4f 539 AC_DEFINE(SETEUID_BREAKS_SETUID)
08da2d08 540 AC_DEFINE(BROKEN_SETREUID)
541 AC_DEFINE(BROKEN_SETREGID)
4d33e531 542 ;;
41cb4569 543
544*-*-nto-qnx)
545 AC_DEFINE(USE_PIPES)
546 AC_DEFINE(NO_X11_UNIX_SOCKETS)
547 AC_DEFINE(MISSING_NFDBITS)
548 AC_DEFINE(MISSING_HOWMANY)
549 AC_DEFINE(MISSING_FD_MASK)
550 ;;
35fc74ed 551
552*-*-ultrix*)
553 AC_DEFINE(BROKEN_GETGROUPS, [], [getgroups(0,NULL) will return -1])
554 AC_DEFINE(BROKEN_MMAP, [], [Ultrix mmap can't map files])
555 AC_DEFINE(NEED_SETPRGP, [], [Need setpgrp to acquire controlling tty])
b5765e1d 556 AC_DEFINE(HAVE_SYS_SYSLOG_H, 1, [Force use of sys/syslog.h on Ultrix])
557 ;;
a7effaac 558esac
559
8e7b16f8 560# Allow user to specify flags
561AC_ARG_WITH(cflags,
562 [ --with-cflags Specify additional flags to pass to compiler],
563 [
6cf0200f 564 if test -n "$withval" && test "x$withval" != "xno" && \
565 test "x${withval}" != "xyes"; then
8e7b16f8 566 CFLAGS="$CFLAGS $withval"
567 fi
82f4e93d 568 ]
8e7b16f8 569)
0c2fb82f 570AC_ARG_WITH(cppflags,
571 [ --with-cppflags Specify additional flags to pass to preprocessor] ,
572 [
6cf0200f 573 if test -n "$withval" && test "x$withval" != "xno" && \
574 test "x${withval}" != "xyes"; then
0c2fb82f 575 CPPFLAGS="$CPPFLAGS $withval"
576 fi
577 ]
578)
8e7b16f8 579AC_ARG_WITH(ldflags,
97b378bf 580 [ --with-ldflags Specify additional flags to pass to linker],
8e7b16f8 581 [
6cf0200f 582 if test -n "$withval" && test "x$withval" != "xno" && \
583 test "x${withval}" != "xyes"; then
8e7b16f8 584 LDFLAGS="$LDFLAGS $withval"
585 fi
82f4e93d 586 ]
8e7b16f8 587)
588AC_ARG_WITH(libs,
589 [ --with-libs Specify additional libraries to link with],
590 [
6cf0200f 591 if test -n "$withval" && test "x$withval" != "xno" && \
592 test "x${withval}" != "xyes"; then
8e7b16f8 593 LIBS="$LIBS $withval"
594 fi
82f4e93d 595 ]
8e7b16f8 596)
ed89c848 597AC_ARG_WITH(Werror,
598 [ --with-Werror Build main code with -Werror],
599 [
600 if test -n "$withval" && test "x$withval" != "xno"; then
601 werror_flags="-Werror"
602 if "x${withval}" != "xyes"; then
603 werror_flags="$withval"
604 fi
605 fi
606 ]
607)
8e7b16f8 608
c5829391 609AC_MSG_CHECKING(compiler and flags for sanity)
479cece8 610AC_RUN_IFELSE(
611 [AC_LANG_SOURCE([
c5829391 612#include <stdio.h>
613int main(){exit(0);}
479cece8 614 ])],
c5829391 615 [ AC_MSG_RESULT(yes) ],
616 [
617 AC_MSG_RESULT(no)
618 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
1a01a50c 619 ],
620 [ AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
c5829391 621)
622
b04a9f8c 623dnl Checks for header files.
624AC_CHECK_HEADERS( \
625 bstring.h \
626 crypt.h \
627 dirent.h \
628 endian.h \
629 features.h \
630 floatingpoint.h \
631 getopt.h \
632 glob.h \
633 ia.h \
634 lastlog.h \
635 limits.h \
636 login.h \
637 login_cap.h \
638 maillock.h \
639 ndir.h \
640 netdb.h \
641 netgroup.h \
642 netinet/in_systm.h \
643 pam/pam_appl.h \
644 paths.h \
645 pty.h \
646 readpassphrase.h \
647 rpc/types.h \
648 security/pam_appl.h \
649 shadow.h \
650 stddef.h \
651 stdint.h \
0957c2cf 652 string.h \
b04a9f8c 653 strings.h \
654 sys/audit.h \
655 sys/bitypes.h \
656 sys/bsdtty.h \
657 sys/cdefs.h \
658 sys/dir.h \
659 sys/mman.h \
660 sys/ndir.h \
661 sys/prctl.h \
662 sys/pstat.h \
663 sys/select.h \
664 sys/stat.h \
665 sys/stream.h \
666 sys/stropts.h \
667 sys/strtio.h \
668 sys/sysmacros.h \
669 sys/time.h \
670 sys/timers.h \
671 sys/un.h \
672 time.h \
673 tmpdir.h \
674 ttyent.h \
25dd2ce6 675 unistd.h \
b04a9f8c 676 usersec.h \
677 util.h \
678 utime.h \
679 utmp.h \
680 utmpx.h \
ea76f54c 681 vis.h \
b04a9f8c 682)
ddceb1c8 683
765a24cd 684# sys/ptms.h requires sys/stream.h to be included first on Solaris
685AC_CHECK_HEADERS(sys/ptms.h, [], [], [
686#ifdef HAVE_SYS_STREAM_H
687# include <sys/stream.h>
688#endif
689])
690
a0391976 691# Checks for libraries.
98a7c37b 692AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
693AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
2c523de9 694
446227d6 695dnl IRIX and Solaris 2.5.1 have dirname() in libgen
696AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
697 AC_CHECK_LIB(gen, dirname,[
698 AC_CACHE_CHECK([for broken dirname],
699 ac_cv_have_broken_dirname, [
700 save_LIBS="$LIBS"
701 LIBS="$LIBS -lgen"
702 AC_TRY_RUN(
703 [
704#include <libgen.h>
705#include <string.h>
706
707int main(int argc, char **argv) {
708 char *s, buf[32];
709
710 strncpy(buf,"/etc", 32);
711 s = dirname(buf);
712 if (!s || strncmp(s, "/", 32) != 0) {
713 exit(1);
714 } else {
715 exit(0);
716 }
717}
718 ],
719 [ ac_cv_have_broken_dirname="no" ],
720 [ ac_cv_have_broken_dirname="yes" ]
721 )
722 LIBS="$save_LIBS"
723 ])
724 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
725 LIBS="$LIBS -lgen"
726 AC_DEFINE(HAVE_DIRNAME)
727 AC_CHECK_HEADERS(libgen.h)
728 fi
729 ])
730])
731
732AC_CHECK_FUNC(getspnam, ,
733 AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
734AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME))
735
98a7c37b 736dnl zlib is required
737AC_ARG_WITH(zlib,
738 [ --with-zlib=PATH Use zlib in PATH],
6dd05556 739 [ if test "x$withval" = "xno" ; then
740 AC_MSG_ERROR([*** zlib is required ***])
741 elif test "x$withval" != "xyes"; then
98a7c37b 742 if test -d "$withval/lib"; then
743 if test -n "${need_dash_r}"; then
5a162955 744 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 745 else
5a162955 746 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 747 fi
748 else
749 if test -n "${need_dash_r}"; then
5a162955 750 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 751 else
5a162955 752 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 753 fi
754 fi
755 if test -d "$withval/include"; then
5a162955 756 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 757 else
5a162955 758 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 759 fi
6dd05556 760 fi ]
98a7c37b 761)
762
0a15d73b 763AC_CHECK_LIB(z, deflate, ,
764 [
765 saved_CPPFLAGS="$CPPFLAGS"
766 saved_LDFLAGS="$LDFLAGS"
767 save_LIBS="$LIBS"
768 dnl Check default zlib install dir
769 if test -n "${need_dash_r}"; then
770 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
771 else
772 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
773 fi
774 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
775 LIBS="$LIBS -lz"
776 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
777 [
778 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
779 ]
780 )
781 ]
782)
4ad65809 783AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
8068d564 784
785AC_ARG_WITH(zlib-version-check,
786 [ --without-zlib-version-check Disable zlib version check],
787 [ if test "x$withval" = "xno" ; then
788 zlib_check_nonfatal=1
789 fi
790 ]
791)
792
5c7fc85d 793AC_MSG_CHECKING(for possibly buggy zlib)
479cece8 794AC_RUN_IFELSE([AC_LANG_SOURCE([[
5c7fc85d 795#include <stdio.h>
4ad65809 796#include <zlib.h>
797int main()
798{
5c7fc85d 799 int a=0, b=0, c=0, d=0, n, v;
800 n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
801 if (n != 3 && n != 4)
4ad65809 802 exit(1);
5c7fc85d 803 v = a*1000000 + b*10000 + c*100 + d;
804 fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
805
806 /* 1.1.4 is OK */
807 if (a == 1 && b == 1 && c >= 4)
4ad65809 808 exit(0);
5c7fc85d 809
0072b59d 810 /* 1.2.3 and up are OK */
811 if (v >= 1020300)
5c7fc85d 812 exit(0);
813
4ad65809 814 exit(2);
815}
479cece8 816 ]])],
5c7fc85d 817 AC_MSG_RESULT(no),
818 [ AC_MSG_RESULT(yes)
8068d564 819 if test -z "$zlib_check_nonfatal" ; then
820 AC_MSG_ERROR([*** zlib too old - check config.log ***
821Your reported zlib version has known security problems. It's possible your
822vendor has fixed these problems without changing the version number. If you
823are sure this is the case, you can disable the check by running
824"./configure --without-zlib-version-check".
6090bcfe 825If you are in doubt, upgrade zlib to version 1.2.3 or greater.
5c7fc85d 826See http://www.gzip.org/zlib/ for details.])
8068d564 827 else
828 AC_MSG_WARN([zlib version may have security problems])
829 fi
1a01a50c 830 ],
831 [ AC_MSG_WARN([cross compiling: not checking zlib version]) ]
4ad65809 832)
48e7916f 833
2c523de9 834dnl UnixWare 2.x
aff51935 835AC_CHECK_FUNC(strcasecmp,
2c523de9 836 [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
837)
aff51935 838AC_CHECK_FUNC(utimes,
cda1ebcb 839 [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
840 LIBS="$LIBS -lc89"]) ]
2c523de9 841)
4cca272e 842
7c6d759d 843dnl Checks for libutil functions
844AC_CHECK_HEADERS(libutil.h)
845AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN)])
846AC_CHECK_FUNCS(logout updwtmp logwtmp)
847
a738c3b0 848AC_FUNC_STRFTIME
849
84ceda19 850# Check for ALTDIRFUNC glob() extension
851AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
852AC_EGREP_CPP(FOUNDIT,
853 [
854 #include <glob.h>
855 #ifdef GLOB_ALTDIRFUNC
856 FOUNDIT
857 #endif
aff51935 858 ],
84ceda19 859 [
860 AC_DEFINE(GLOB_HAS_ALTDIRFUNC)
861 AC_MSG_RESULT(yes)
862 ],
863 [
864 AC_MSG_RESULT(no)
865 ]
866)
4cca272e 867
40849fdb 868# Check for g.gl_matchc glob() extension
869AC_MSG_CHECKING(for gl_matchc field in glob_t)
870AC_EGREP_CPP(FOUNDIT,
aff51935 871 [
872 #include <glob.h>
40849fdb 873 int main(void){glob_t g; g.gl_matchc = 1;}
aff51935 874 ],
875 [
876 AC_DEFINE(GLOB_HAS_GL_MATCHC)
877 AC_MSG_RESULT(yes)
878 ],
879 [
880 AC_MSG_RESULT(no)
881 ]
40849fdb 882)
883
edbe6722 884AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
1a01a50c 885AC_RUN_IFELSE(
479cece8 886 [AC_LANG_SOURCE([[
edbe6722 887#include <sys/types.h>
888#include <dirent.h>
aec4cb4f 889int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
479cece8 890 ]])],
aff51935 891 [AC_MSG_RESULT(yes)],
edbe6722 892 [
893 AC_MSG_RESULT(no)
894 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
1a01a50c 895 ],
82f4e93d 896 [
1a01a50c 897 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
898 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
edbe6722 899 ]
900)
901
419e26e7 902AC_MSG_CHECKING([for /proc/pid/fd directory])
903if test -d "/proc/$$/fd" ; then
904 AC_DEFINE(HAVE_PROC_PID)
905 AC_MSG_RESULT(yes)
906else
907 AC_MSG_RESULT(no)
908fi
909
278588d8 910# Check whether user wants S/Key support
aff51935 911SKEY_MSG="no"
278588d8 912AC_ARG_WITH(skey,
6ff3d0dc 913 [ --with-skey[[=PATH]] Enable S/Key support (optionally in PATH)],
278588d8 914 [
915 if test "x$withval" != "xno" ; then
916
917 if test "x$withval" != "xyes" ; then
918 CPPFLAGS="$CPPFLAGS -I${withval}/include"
919 LDFLAGS="$LDFLAGS -L${withval}/lib"
920 fi
921
922 AC_DEFINE(SKEY)
923 LIBS="-lskey $LIBS"
aff51935 924 SKEY_MSG="yes"
82f4e93d 925
ddceb1c8 926 AC_MSG_CHECKING([for s/key support])
927 AC_TRY_RUN(
928 [
929#include <stdio.h>
930#include <skey.h>
aec4cb4f 931int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
ddceb1c8 932 ],
933 [AC_MSG_RESULT(yes)],
278588d8 934 [
ddceb1c8 935 AC_MSG_RESULT(no)
278588d8 936 AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
937 ])
141fc639 938 AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
939 AC_TRY_COMPILE(
940 [#include <stdio.h>
941 #include <skey.h>],
942 [(void)skeychallenge(NULL,"name","",0);],
943 [AC_MSG_RESULT(yes)
944 AC_DEFINE(SKEYCHALLENGE_4ARG)],
945 [AC_MSG_RESULT(no)]
946 )
278588d8 947 fi
948 ]
949)
950
951# Check whether user wants TCP wrappers support
98a7c37b 952TCPW_MSG="no"
278588d8 953AC_ARG_WITH(tcp-wrappers,
6ff3d0dc 954 [ --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
278588d8 955 [
956 if test "x$withval" != "xno" ; then
957 saved_LIBS="$LIBS"
98a7c37b 958 saved_LDFLAGS="$LDFLAGS"
959 saved_CPPFLAGS="$CPPFLAGS"
4b492aab 960 if test -n "${withval}" && \
6cf0200f 961 test "x${withval}" != "xyes"; then
98a7c37b 962 if test -d "${withval}/lib"; then
963 if test -n "${need_dash_r}"; then
5a162955 964 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 965 else
5a162955 966 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 967 fi
968 else
969 if test -n "${need_dash_r}"; then
5a162955 970 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 971 else
5a162955 972 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 973 fi
974 fi
975 if test -d "${withval}/include"; then
5a162955 976 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 977 else
5a162955 978 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 979 fi
98a7c37b 980 fi
ddceb1c8 981 LIBWRAP="-lwrap"
982 LIBS="$LIBWRAP $LIBS"
278588d8 983 AC_MSG_CHECKING(for libwrap)
984 AC_TRY_LINK(
985 [
77f09220 986#include <sys/types.h>
987#include <sys/socket.h>
988#include <netinet/in.h>
278588d8 989#include <tcpd.h>
990 int deny_severity = 0, allow_severity = 0;
991 ],
992 [hosts_access(0);],
993 [
994 AC_MSG_RESULT(yes)
995 AC_DEFINE(LIBWRAP)
ddceb1c8 996 AC_SUBST(LIBWRAP)
98a7c37b 997 TCPW_MSG="yes"
278588d8 998 ],
999 [
1000 AC_MSG_ERROR([*** libwrap missing])
1001 ]
1002 )
ddceb1c8 1003 LIBS="$saved_LIBS"
278588d8 1004 fi
1005 ]
1006)
1007
59031773 1008# Check whether user wants libedit support
1009LIBEDIT_MSG="no"
1010AC_ARG_WITH(libedit,
6ff3d0dc 1011 [ --with-libedit[[=PATH]] Enable libedit support for sftp],
59031773 1012 [ if test "x$withval" != "xno" ; then
737edf04 1013 if test "x$withval" != "xyes"; then
1014 CPPFLAGS="$CPPFLAGS -I$withval/include"
1015 LDFLAGS="$LDFLAGS -L$withval/lib"
1016 fi
59031773 1017 AC_CHECK_LIB(edit, el_init,
1018 [ AC_DEFINE(USE_LIBEDIT, [], [Use libedit for sftp])
1019 LIBEDIT="-ledit -lcurses"
1020 LIBEDIT_MSG="yes"
1021 AC_SUBST(LIBEDIT)
1022 ],
737edf04 1023 [ AC_MSG_ERROR(libedit not found) ],
1024 [ -lcurses ]
59031773 1025 )
1026 fi ]
1027)
1028
7b578f7d 1029AUDIT_MODULE=none
1030AC_ARG_WITH(audit,
1031 [ --with-audit=module Enable EXPERIMENTAL audit support (modules=debug,bsm)],
1032 [
1033 AC_MSG_CHECKING(for supported audit module)
1034 case "$withval" in
1035 bsm)
1036 AC_MSG_RESULT(bsm)
1037 AUDIT_MODULE=bsm
1038 dnl Checks for headers, libs and functions
1039 AC_CHECK_HEADERS(bsm/audit.h, [],
1040 [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)])
1041 AC_CHECK_LIB(bsm, getaudit, [],
1042 [AC_MSG_ERROR(BSM enabled and required library not found)])
1043 AC_CHECK_FUNCS(getaudit, [],
1044 [AC_MSG_ERROR(BSM enabled and required function not found)])
1045 # These are optional
7939c496 1046 AC_CHECK_FUNCS(getaudit_addr)
7b578f7d 1047 AC_DEFINE(USE_BSM_AUDIT, [], [Use BSM audit module])
1048 ;;
1049 debug)
1050 AUDIT_MODULE=debug
1051 AC_MSG_RESULT(debug)
1052 AC_DEFINE(SSH_AUDIT_EVENTS, [], Use audit debugging module)
1053 ;;
a2b3321d 1054 no)
1055 ;;
7b578f7d 1056 *)
1057 AC_MSG_ERROR([Unknown audit module $withval])
1058 ;;
1059 esac ]
1060)
1061
19160674 1062dnl Checks for library functions. Please keep in alphabetical order
b04a9f8c 1063AC_CHECK_FUNCS( \
1064 arc4random \
1065 b64_ntop \
1066 __b64_ntop \
1067 b64_pton \
1068 __b64_pton \
1069 bcopy \
1070 bindresvport_sa \
1071 clock \
1072 closefrom \
1073 dirfd \
1074 fchdir \
1075 fchmod \
1076 fchown \
1077 freeaddrinfo \
1078 futimes \
1079 getaddrinfo \
1080 getcwd \
1081 getgrouplist \
1082 getnameinfo \
1083 getopt \
1084 getpeereid \
1085 _getpty \
1086 getrlimit \
1087 getttyent \
1088 glob \
1089 inet_aton \
1090 inet_ntoa \
1091 inet_ntop \
1092 innetgr \
1093 login_getcapbool \
1094 md5_crypt \
1095 memmove \
1096 mkdtemp \
1097 mmap \
1098 ngetaddrinfo \
1099 nsleep \
1100 ogetaddrinfo \
1101 openlog_r \
1102 openpty \
1103 prctl \
1104 pstat \
1105 readpassphrase \
1106 realpath \
1107 recvmsg \
1108 rresvport_af \
1109 sendmsg \
1110 setdtablesize \
1111 setegid \
1112 setenv \
1113 seteuid \
1114 setgroups \
1115 setlogin \
1116 setpcred \
1117 setproctitle \
1118 setregid \
1119 setreuid \
1120 setrlimit \
1121 setsid \
1122 setvbuf \
1123 sigaction \
1124 sigvec \
1125 snprintf \
1126 socketpair \
1127 strdup \
1128 strerror \
1129 strlcat \
1130 strlcpy \
1131 strmode \
1132 strnvis \
1133 strtonum \
1e29a0c8 1134 strtoll \
b04a9f8c 1135 strtoul \
1136 sysconf \
1137 tcgetpgrp \
1138 truncate \
1139 unsetenv \
1140 updwtmpx \
1141 utimes \
1142 vhangup \
1143 vsnprintf \
1144 waitpid \
19160674 1145)
98a7c37b 1146
1a086f97 1147# IRIX has a const char return value for gai_strerror()
1148AC_CHECK_FUNCS(gai_strerror,[
1149 AC_DEFINE(HAVE_GAI_STRERROR)
1150 AC_TRY_COMPILE([
1151#include <sys/types.h>
1152#include <sys/socket.h>
1153#include <netdb.h>
1154
1155const char *gai_strerror(int);],[
1156char *str;
1157
1158str = gai_strerror(0);],[
1159 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
1160 [Define if gai_strerror() returns const char *])])])
1161
92b1decf 1162AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP))
1163
309709db 1164dnl Make sure prototypes are defined for these before using them.
309709db 1165AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
0957c2cf 1166AC_CHECK_DECL(strsep,
1167 [AC_CHECK_FUNCS(strsep)],
1168 [],
1169 [
1170#ifdef HAVE_STRING_H
1171# include <string.h>
1172#endif
1173 ])
08412d26 1174
3490699c 1175dnl tcsendbreak might be a macro
1176AC_CHECK_DECL(tcsendbreak,
1177 [AC_DEFINE(HAVE_TCSENDBREAK)],
aff51935 1178 [AC_CHECK_FUNCS(tcsendbreak)],
3490699c 1179 [#include <termios.h>]
1180)
1181
41e0e158 1182AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
1183
3f176010 1184AC_CHECK_FUNCS(setresuid, [
1185 dnl Some platorms have setresuid that isn't implemented, test for this
1186 AC_MSG_CHECKING(if setresuid seems to work)
479cece8 1187 AC_RUN_IFELSE(
1188 [AC_LANG_SOURCE([[
9a3fe0e2 1189#include <stdlib.h>
1190#include <errno.h>
1191int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 1192 ]])],
3f176010 1193 [AC_MSG_RESULT(yes)],
24a9171d 1194 [AC_DEFINE(BROKEN_SETRESUID)
1a01a50c 1195 AC_MSG_RESULT(not implemented)],
1196 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 1197 )
1198])
9a3fe0e2 1199
3f176010 1200AC_CHECK_FUNCS(setresgid, [
1201 dnl Some platorms have setresgid that isn't implemented, test for this
1202 AC_MSG_CHECKING(if setresgid seems to work)
479cece8 1203 AC_RUN_IFELSE(
1204 [AC_LANG_SOURCE([[
9a3fe0e2 1205#include <stdlib.h>
1206#include <errno.h>
1207int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 1208 ]])],
3f176010 1209 [AC_MSG_RESULT(yes)],
1210 [AC_DEFINE(BROKEN_SETRESGID)
1a01a50c 1211 AC_MSG_RESULT(not implemented)],
1212 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 1213 )
1214])
9a3fe0e2 1215
2e73a022 1216dnl Checks for time functions
1d7b9b20 1217AC_CHECK_FUNCS(gettimeofday time)
2e73a022 1218dnl Checks for utmp functions
b03bd394 1219AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1d7b9b20 1220AC_CHECK_FUNCS(utmpname)
2e73a022 1221dnl Checks for utmpx functions
b03bd394 1222AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1d7b9b20 1223AC_CHECK_FUNCS(setutxent utmpxname)
76cd7316 1224
aff51935 1225AC_CHECK_FUNC(daemon,
beb43d31 1226 [AC_DEFINE(HAVE_DAEMON)],
1227 [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
1228)
1229
aff51935 1230AC_CHECK_FUNC(getpagesize,
aa6bd60a 1231 [AC_DEFINE(HAVE_GETPAGESIZE)],
1232 [AC_CHECK_LIB(ucb, getpagesize, [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
1233)
1234
2647ae26 1235# Check for broken snprintf
1236if test "x$ac_cv_func_snprintf" = "xyes" ; then
1237 AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1a01a50c 1238 AC_RUN_IFELSE(
479cece8 1239 [AC_LANG_SOURCE([[
2647ae26 1240#include <stdio.h>
aec4cb4f 1241int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
479cece8 1242 ]])],
aff51935 1243 [AC_MSG_RESULT(yes)],
2647ae26 1244 [
1245 AC_MSG_RESULT(no)
1246 AC_DEFINE(BROKEN_SNPRINTF)
1247 AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1a01a50c 1248 ],
1249 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
2647ae26 1250 )
1251fi
1252
2f6f9cff 1253# Check for missing getpeereid (or equiv) support
1254NO_PEERCHECK=""
1255if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1256 AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1257 AC_TRY_COMPILE(
1258 [#include <sys/types.h>
1259 #include <sys/socket.h>],
1260 [int i = SO_PEERCRED;],
62eb7db4 1261 [ AC_MSG_RESULT(yes)
1262 AC_DEFINE(HAVE_SO_PEERCRED, [], [Have PEERCRED socket option])
1263 ],
2f6f9cff 1264 [AC_MSG_RESULT(no)
1265 NO_PEERCHECK=1]
1266 )
1267fi
1268
70e7d0b0 1269dnl see whether mkstemp() requires XXXXXX
1270if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1271AC_MSG_CHECKING([for (overly) strict mkstemp])
1272AC_TRY_RUN(
1273 [
1274#include <stdlib.h>
1275main() { char template[]="conftest.mkstemp-test";
1276if (mkstemp(template) == -1)
1277 exit(1);
1278unlink(template); exit(0);
1279}
1280 ],
1281 [
1282 AC_MSG_RESULT(no)
1283 ],
aff51935 1284 [
70e7d0b0 1285 AC_MSG_RESULT(yes)
1286 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1287 ],
1288 [
1289 AC_MSG_RESULT(yes)
1290 AC_DEFINE(HAVE_STRICT_MKSTEMP)
aff51935 1291 ]
70e7d0b0 1292)
1293fi
1294
eacb954e 1295dnl make sure that openpty does not reacquire controlling terminal
1296if test ! -z "$check_for_openpty_ctty_bug"; then
1297 AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1298 AC_TRY_RUN(
1299 [
1300#include <stdio.h>
1301#include <sys/fcntl.h>
1302#include <sys/types.h>
1303#include <sys/wait.h>
1304
1305int
1306main()
1307{
1308 pid_t pid;
1309 int fd, ptyfd, ttyfd, status;
1310
1311 pid = fork();
1312 if (pid < 0) { /* failed */
1313 exit(1);
1314 } else if (pid > 0) { /* parent */
1315 waitpid(pid, &status, 0);
aff51935 1316 if (WIFEXITED(status))
eacb954e 1317 exit(WEXITSTATUS(status));
1318 else
1319 exit(2);
1320 } else { /* child */
1321 close(0); close(1); close(2);
1322 setsid();
1323 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1324 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1325 if (fd >= 0)
1326 exit(3); /* Acquired ctty: broken */
1327 else
1328 exit(0); /* Did not acquire ctty: OK */
1329 }
1330}
1331 ],
1332 [
1333 AC_MSG_RESULT(yes)
1334 ],
1335 [
1336 AC_MSG_RESULT(no)
1337 AC_DEFINE(SSHD_ACQUIRES_CTTY)
1338 ]
1339 )
1340fi
1341
4b492aab 1342if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1343 test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
2fe51906 1344 AC_MSG_CHECKING(if getaddrinfo seems to work)
1345 AC_TRY_RUN(
1346 [
1347#include <stdio.h>
1348#include <sys/socket.h>
1349#include <netdb.h>
1350#include <errno.h>
1351#include <netinet/in.h>
1352
1353#define TEST_PORT "2222"
1354
1355int
1356main(void)
1357{
1358 int err, sock;
1359 struct addrinfo *gai_ai, *ai, hints;
1360 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1361
1362 memset(&hints, 0, sizeof(hints));
1363 hints.ai_family = PF_UNSPEC;
1364 hints.ai_socktype = SOCK_STREAM;
1365 hints.ai_flags = AI_PASSIVE;
1366
1367 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1368 if (err != 0) {
1369 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1370 exit(1);
1371 }
1372
1373 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1374 if (ai->ai_family != AF_INET6)
1375 continue;
1376
1377 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1378 sizeof(ntop), strport, sizeof(strport),
1379 NI_NUMERICHOST|NI_NUMERICSERV);
1380
1381 if (err != 0) {
1382 if (err == EAI_SYSTEM)
1383 perror("getnameinfo EAI_SYSTEM");
1384 else
1385 fprintf(stderr, "getnameinfo failed: %s\n",
1386 gai_strerror(err));
1387 exit(2);
1388 }
1389
1390 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1391 if (sock < 0)
1392 perror("socket");
1393 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1394 if (errno == EBADF)
1395 exit(3);
1396 }
1397 }
1398 exit(0);
1399}
1400 ],
1401 [
1402 AC_MSG_RESULT(yes)
1403 ],
1404 [
1405 AC_MSG_RESULT(no)
1406 AC_DEFINE(BROKEN_GETADDRINFO)
1407 ]
1408 )
1409fi
1410
4b492aab 1411if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1412 test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
5ccf88cb 1413 AC_MSG_CHECKING(if getaddrinfo seems to work)
1414 AC_TRY_RUN(
1415 [
1416#include <stdio.h>
1417#include <sys/socket.h>
1418#include <netdb.h>
1419#include <errno.h>
1420#include <netinet/in.h>
1421
1422#define TEST_PORT "2222"
1423
1424int
1425main(void)
1426{
1427 int err, sock;
1428 struct addrinfo *gai_ai, *ai, hints;
1429 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1430
1431 memset(&hints, 0, sizeof(hints));
1432 hints.ai_family = PF_UNSPEC;
1433 hints.ai_socktype = SOCK_STREAM;
1434 hints.ai_flags = AI_PASSIVE;
1435
1436 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1437 if (err != 0) {
1438 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1439 exit(1);
1440 }
1441
1442 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1443 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1444 continue;
1445
1446 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1447 sizeof(ntop), strport, sizeof(strport),
1448 NI_NUMERICHOST|NI_NUMERICSERV);
1449
1450 if (ai->ai_family == AF_INET && err != 0) {
1451 perror("getnameinfo");
1452 exit(2);
1453 }
1454 }
1455 exit(0);
1456}
1457 ],
1458 [
1459 AC_MSG_RESULT(yes)
1460 AC_DEFINE(AIX_GETNAMEINFO_HACK, [],
1461[Define if you have a getaddrinfo that fails for the all-zeros IPv6 address])
1462 ],
1463 [
1464 AC_MSG_RESULT(no)
1465 AC_DEFINE(BROKEN_GETADDRINFO)
1466 ]
1467 )
1468fi
1469
b29fd59f 1470if test "x$check_for_conflicting_getspnam" = "x1"; then
1471 AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1472 AC_COMPILE_IFELSE(
1473 [
1474#include <shadow.h>
1475int main(void) {exit(0);}
1476 ],
1477 [
1478 AC_MSG_RESULT(no)
1479 ],
1480 [
1481 AC_MSG_RESULT(yes)
1482 AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1483 [Conflicting defs for getspnam])
1484 ]
1485 )
1486fi
1487
7f8f5e00 1488AC_FUNC_GETPGRP
1489
717057b6 1490# Check for PAM libs
cbd7492e 1491PAM_MSG="no"
a0391976 1492AC_ARG_WITH(pam,
717057b6 1493 [ --with-pam Enable PAM support ],
a0391976 1494 [
717057b6 1495 if test "x$withval" != "xno" ; then
2511d104 1496 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
1497 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
717057b6 1498 AC_MSG_ERROR([PAM headers not found])
1499 fi
a0391976 1500
717057b6 1501 AC_CHECK_LIB(dl, dlopen, , )
1502 AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
1503 AC_CHECK_FUNCS(pam_getenvlist)
749560dd 1504 AC_CHECK_FUNCS(pam_putenv)
2b763e31 1505
717057b6 1506 PAM_MSG="yes"
4cb5ffa0 1507
717057b6 1508 AC_DEFINE(USE_PAM)
98f2d9d5 1509 if test $ac_cv_lib_dl_dlopen = yes; then
1510 LIBPAM="-lpam -ldl"
1511 else
1512 LIBPAM="-lpam"
1513 fi
1514 AC_SUBST(LIBPAM)
717057b6 1515 fi
1516 ]
1517)
cbd7492e 1518
717057b6 1519# Check for older PAM
1520if test "x$PAM_MSG" = "xyes" ; then
a0391976 1521 # Check PAM strerror arguments (old PAM)
1522 AC_MSG_CHECKING([whether pam_strerror takes only one argument])
1523 AC_TRY_COMPILE(
1524 [
18ba2aab 1525#include <stdlib.h>
2511d104 1526#if defined(HAVE_SECURITY_PAM_APPL_H)
18ba2aab 1527#include <security/pam_appl.h>
2511d104 1528#elif defined (HAVE_PAM_PAM_APPL_H)
1529#include <pam/pam_appl.h>
1530#endif
aff51935 1531 ],
1532 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
a0391976 1533 [AC_MSG_RESULT(no)],
1534 [
1535 AC_DEFINE(HAVE_OLD_PAM)
1536 AC_MSG_RESULT(yes)
cbd7492e 1537 PAM_MSG="yes (old library)"
a0391976 1538 ]
717057b6 1539 )
a0391976 1540fi
1541
5b991353 1542# Search for OpenSSL
1543saved_CPPFLAGS="$CPPFLAGS"
1544saved_LDFLAGS="$LDFLAGS"
a0391976 1545AC_ARG_WITH(ssl-dir,
1546 [ --with-ssl-dir=PATH Specify path to OpenSSL installation ],
1547 [
e9e4a1c7 1548 if test "x$withval" != "xno" ; then
99eb0f64 1549 case "$withval" in
1550 # Relative paths
1551 ./*|../*) withval="`pwd`/$withval"
1552 esac
5b991353 1553 if test -d "$withval/lib"; then
1554 if test -n "${need_dash_r}"; then
1555 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1556 else
1557 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
d6f13fbb 1558 fi
1559 else
5b991353 1560 if test -n "${need_dash_r}"; then
1561 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1562 else
1563 LDFLAGS="-L${withval} ${LDFLAGS}"
d6f13fbb 1564 fi
1565 fi
5b991353 1566 if test -d "$withval/include"; then
1567 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
d6f13fbb 1568 else
5b991353 1569 CPPFLAGS="-I${withval} ${CPPFLAGS}"
58d100bf 1570 fi
a0391976 1571 fi
5b991353 1572 ]
1573)
5486a457 1574LIBS="-lcrypto $LIBS"
5b991353 1575AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
d45e3d76 1576 [
5b991353 1577 dnl Check default openssl install dir
1578 if test -n "${need_dash_r}"; then
1579 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1580 else
5b991353 1581 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1582 fi
5b991353 1583 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1584 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1585 [
1586 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1587 ]
1588 )
1589 ]
1590)
1591
cd018561 1592# Determine OpenSSL header version
1593AC_MSG_CHECKING([OpenSSL header version])
1a01a50c 1594AC_RUN_IFELSE(
479cece8 1595 [AC_LANG_SOURCE([[
cd018561 1596#include <stdio.h>
1597#include <string.h>
1598#include <openssl/opensslv.h>
1599#define DATA "conftest.sslincver"
1600int main(void) {
aff51935 1601 FILE *fd;
1602 int rc;
cd018561 1603
aff51935 1604 fd = fopen(DATA,"w");
1605 if(fd == NULL)
1606 exit(1);
cd018561 1607
1608 if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1609 exit(1);
1610
1611 exit(0);
1612}
479cece8 1613 ]])],
cd018561 1614 [
1615 ssl_header_ver=`cat conftest.sslincver`
1616 AC_MSG_RESULT($ssl_header_ver)
1617 ],
1618 [
1619 AC_MSG_RESULT(not found)
1620 AC_MSG_ERROR(OpenSSL version header not found.)
1a01a50c 1621 ],
1622 [
1623 AC_MSG_WARN([cross compiling: not checking])
cd018561 1624 ]
1625)
1626
1627# Determine OpenSSL library version
1628AC_MSG_CHECKING([OpenSSL library version])
1a01a50c 1629AC_RUN_IFELSE(
479cece8 1630 [AC_LANG_SOURCE([[
cd018561 1631#include <stdio.h>
1632#include <string.h>
1633#include <openssl/opensslv.h>
1634#include <openssl/crypto.h>
1635#define DATA "conftest.ssllibver"
1636int main(void) {
aff51935 1637 FILE *fd;
1638 int rc;
cd018561 1639
aff51935 1640 fd = fopen(DATA,"w");
1641 if(fd == NULL)
1642 exit(1);
cd018561 1643
1644 if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1645 exit(1);
1646
1647 exit(0);
1648}
479cece8 1649 ]])],
cd018561 1650 [
1651 ssl_library_ver=`cat conftest.ssllibver`
1652 AC_MSG_RESULT($ssl_library_ver)
1653 ],
1654 [
1655 AC_MSG_RESULT(not found)
1656 AC_MSG_ERROR(OpenSSL library not found.)
1a01a50c 1657 ],
1658 [
1659 AC_MSG_WARN([cross compiling: not checking])
cd018561 1660 ]
1661)
58d100bf 1662
9780116c 1663# Sanity check OpenSSL headers
1664AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1a01a50c 1665AC_RUN_IFELSE(
479cece8 1666 [AC_LANG_SOURCE([[
9780116c 1667#include <string.h>
1668#include <openssl/opensslv.h>
aec4cb4f 1669int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
479cece8 1670 ]])],
9780116c 1671 [
1672 AC_MSG_RESULT(yes)
1673 ],
1674 [
1675 AC_MSG_RESULT(no)
e15ba28b 1676 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1677Check config.log for details.
1678Also see contrib/findssl.sh for help identifying header/library mismatches.])
1a01a50c 1679 ],
1680 [
1681 AC_MSG_WARN([cross compiling: not checking])
9780116c 1682 ]
1683)
1684
5486a457 1685# Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1686# because the system crypt() is more featureful.
1687if test "x$check_for_libcrypt_before" = "x1"; then
1688 AC_CHECK_LIB(crypt, crypt)
1689fi
1690
aff51935 1691# Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
8087c5ee 1692# version in OpenSSL.
05114c74 1693if test "x$check_for_libcrypt_later" = "x1"; then
20cad736 1694 AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
717057b6 1695fi
1696
f1b0ecc3 1697
1698### Configure cryptographic random number support
1699
1700# Check wheter OpenSSL seeds itself
1701AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1a01a50c 1702AC_RUN_IFELSE(
479cece8 1703 [AC_LANG_SOURCE([[
f1b0ecc3 1704#include <string.h>
1705#include <openssl/rand.h>
aec4cb4f 1706int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
479cece8 1707 ]])],
f1b0ecc3 1708 [
1709 OPENSSL_SEEDS_ITSELF=yes
1710 AC_MSG_RESULT(yes)
1711 ],
1712 [
1713 AC_MSG_RESULT(no)
1714 # Default to use of the rand helper if OpenSSL doesn't
1715 # seed itself
1716 USE_RAND_HELPER=yes
1a01a50c 1717 ],
1718 [
1719 AC_MSG_WARN([cross compiling: assuming yes])
1720 # This is safe, since all recent OpenSSL versions will
82f4e93d 1721 # complain at runtime if not seeded correctly.
1a01a50c 1722 OPENSSL_SEEDS_ITSELF=yes
f1b0ecc3 1723 ]
1724)
1725
1726
1727# Do we want to force the use of the rand helper?
1728AC_ARG_WITH(rand-helper,
1729 [ --with-rand-helper Use subprocess to gather strong randomness ],
1730 [
1731 if test "x$withval" = "xno" ; then
aff51935 1732 # Force use of OpenSSL's internal RNG, even if
f1b0ecc3 1733 # the previous test showed it to be unseeded.
1734 if test -z "$OPENSSL_SEEDS_ITSELF" ; then
1735 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
1736 OPENSSL_SEEDS_ITSELF=yes
1737 USE_RAND_HELPER=""
1738 fi
1739 else
1740 USE_RAND_HELPER=yes
1741 fi
1742 ],
82f4e93d 1743)
f1b0ecc3 1744
1745# Which randomness source do we use?
4b492aab 1746if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
f1b0ecc3 1747 # OpenSSL only
1748 AC_DEFINE(OPENSSL_PRNG_ONLY)
1749 RAND_MSG="OpenSSL internal ONLY"
1750 INSTALL_SSH_RAND_HELPER=""
70e2f2f3 1751elif test ! -z "$USE_RAND_HELPER" ; then
1752 # install rand helper
f1b0ecc3 1753 RAND_MSG="ssh-rand-helper"
1754 INSTALL_SSH_RAND_HELPER="yes"
1755fi
1756AC_SUBST(INSTALL_SSH_RAND_HELPER)
1757
1758### Configuration of ssh-rand-helper
1759
1760# PRNGD TCP socket
1761AC_ARG_WITH(prngd-port,
1762 [ --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT],
1763 [
eb5d7ff6 1764 case "$withval" in
1765 no)
1766 withval=""
1767 ;;
1768 [[0-9]]*)
1769 ;;
1770 *)
1771 AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
1772 ;;
1773 esac
1774 if test ! -z "$withval" ; then
f1b0ecc3 1775 PRNGD_PORT="$withval"
1776 AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT)
1777 fi
1778 ]
1779)
1780
1781# PRNGD Unix domain socket
1782AC_ARG_WITH(prngd-socket,
1783 [ --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
1784 [
eb5d7ff6 1785 case "$withval" in
1786 yes)
f1b0ecc3 1787 withval="/var/run/egd-pool"
eb5d7ff6 1788 ;;
1789 no)
1790 withval=""
1791 ;;
1792 /*)
1793 ;;
1794 *)
1795 AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
1796 ;;
1797 esac
1798
1799 if test ! -z "$withval" ; then
f1b0ecc3 1800 if test ! -z "$PRNGD_PORT" ; then
1801 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
1802 fi
906e811b 1803 if test ! -r "$withval" ; then
f1b0ecc3 1804 AC_MSG_WARN(Entropy socket is not readable)
1805 fi
1806 PRNGD_SOCKET="$withval"
1807 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1808 fi
ddceb1c8 1809 ],
1810 [
1811 # Check for existing socket only if we don't have a random device already
1812 if test "$USE_RAND_HELPER" = yes ; then
1813 AC_MSG_CHECKING(for PRNGD/EGD socket)
1814 # Insert other locations here
1815 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
1816 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
1817 PRNGD_SOCKET="$sock"
1818 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1819 break;
1820 fi
1821 done
1822 if test ! -z "$PRNGD_SOCKET" ; then
1823 AC_MSG_RESULT($PRNGD_SOCKET)
1824 else
1825 AC_MSG_RESULT(not found)
1826 fi
1827 fi
f1b0ecc3 1828 ]
1829)
1830
1831# Change default command timeout for hashing entropy source
1832entropy_timeout=200
1833AC_ARG_WITH(entropy-timeout,
1834 [ --with-entropy-timeout Specify entropy gathering command timeout (msec)],
1835 [
6cf0200f 1836 if test -n "$withval" && test "x$withval" != "xno" && \
1837 test "x${withval}" != "xyes"; then
f1b0ecc3 1838 entropy_timeout=$withval
1839 fi
82f4e93d 1840 ]
f1b0ecc3 1841)
f1b0ecc3 1842AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout)
1843
fd3cbf67 1844SSH_PRIVSEP_USER=sshd
9a0fbcb3 1845AC_ARG_WITH(privsep-user,
5222e7ef 1846 [ --with-privsep-user=user Specify non-privileged user for privilege separation],
9a0fbcb3 1847 [
6cf0200f 1848 if test -n "$withval" && test "x$withval" != "xno" && \
1849 test "x${withval}" != "xyes"; then
fd3cbf67 1850 SSH_PRIVSEP_USER=$withval
9a0fbcb3 1851 fi
82f4e93d 1852 ]
9a0fbcb3 1853)
fd3cbf67 1854AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER")
1855AC_SUBST(SSH_PRIVSEP_USER)
9a0fbcb3 1856
81dadca3 1857# We do this little dance with the search path to insure
1858# that programs that we select for use by installed programs
1859# (which may be run by the super-user) come from trusted
1860# locations before they come from the user's private area.
1861# This should help avoid accidentally configuring some
1862# random version of a program in someone's personal bin.
1863
1864OPATH=$PATH
1865PATH=/bin:/usr/bin
f95c8ce8 1866test -h /bin 2> /dev/null && PATH=/usr/bin
81dadca3 1867test -d /sbin && PATH=$PATH:/sbin
1868test -d /usr/sbin && PATH=$PATH:/usr/sbin
1869PATH=$PATH:/etc:$OPATH
1870
aff51935 1871# These programs are used by the command hashing source to gather entropy
f1b0ecc3 1872OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
1873OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
1874OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
1875OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
1876OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
1877OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
1878OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
1879OSSH_PATH_ENTROPY_PROG(PROG_W, w)
1880OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
1881OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
1882OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
1883OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
1884OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
1885OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
1886OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
1887OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
81dadca3 1888# restore PATH
1889PATH=$OPATH
f1b0ecc3 1890
1891# Where does ssh-rand-helper get its randomness from?
1892INSTALL_SSH_PRNG_CMDS=""
1893if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
1894 if test ! -z "$PRNGD_PORT" ; then
1895 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
1896 elif test ! -z "$PRNGD_SOCKET" ; then
1897 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
1898 else
1899 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
1900 RAND_HELPER_CMDHASH=yes
1901 INSTALL_SSH_PRNG_CMDS="yes"
1902 fi
1903fi
1904AC_SUBST(INSTALL_SSH_PRNG_CMDS)
1905
1906
66d6c27e 1907# Cheap hack to ensure NEWS-OS libraries are arranged right.
1908if test ! -z "$SONY" ; then
1909 LIBS="$LIBS -liberty";
1910fi
1911
a0391976 1912# Checks for data types
976f7e19 1913AC_CHECK_SIZEOF(char, 1)
2b942fe0 1914AC_CHECK_SIZEOF(short int, 2)
1915AC_CHECK_SIZEOF(int, 4)
1916AC_CHECK_SIZEOF(long int, 4)
1917AC_CHECK_SIZEOF(long long int, 8)
1918
52f1ccb2 1919# Sanity check long long for some platforms (AIX)
1920if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
1921 ac_cv_sizeof_long_long_int=0
1922fi
1923
a0391976 1924# More checks for data types
14a9a859 1925AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
1926 AC_TRY_COMPILE(
aff51935 1927 [ #include <sys/types.h> ],
1928 [ u_int a; a = 1;],
14a9a859 1929 [ ac_cv_have_u_int="yes" ],
1930 [ ac_cv_have_u_int="no" ]
1931 )
1932])
1933if test "x$ac_cv_have_u_int" = "xyes" ; then
1934 AC_DEFINE(HAVE_U_INT)
1935 have_u_int=1
1936fi
1937
58d100bf 1938AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
1939 AC_TRY_COMPILE(
aff51935 1940 [ #include <sys/types.h> ],
1941 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
58d100bf 1942 [ ac_cv_have_intxx_t="yes" ],
1943 [ ac_cv_have_intxx_t="no" ]
1944 )
1945])
1946if test "x$ac_cv_have_intxx_t" = "xyes" ; then
1947 AC_DEFINE(HAVE_INTXX_T)
1948 have_intxx_t=1
1949fi
41cb4569 1950
1951if (test -z "$have_intxx_t" && \
aff51935 1952 test "x$ac_cv_header_stdint_h" = "xyes")
41cb4569 1953then
1954 AC_MSG_CHECKING([for intXX_t types in stdint.h])
1955 AC_TRY_COMPILE(
aff51935 1956 [ #include <stdint.h> ],
1957 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
41cb4569 1958 [
1959 AC_DEFINE(HAVE_INTXX_T)
1960 AC_MSG_RESULT(yes)
1961 ],
1962 [ AC_MSG_RESULT(no) ]
1963 )
1964fi
1965
bd590612 1966AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
1967 AC_TRY_COMPILE(
1cbbe6c8 1968 [
1969#include <sys/types.h>
1970#ifdef HAVE_STDINT_H
1971# include <stdint.h>
1972#endif
1973#include <sys/socket.h>
1974#ifdef HAVE_SYS_BITYPES_H
1975# include <sys/bitypes.h>
1976#endif
aff51935 1977 ],
1978 [ int64_t a; a = 1;],
bd590612 1979 [ ac_cv_have_int64_t="yes" ],
1980 [ ac_cv_have_int64_t="no" ]
1981 )
1982])
1983if test "x$ac_cv_have_int64_t" = "xyes" ; then
1984 AC_DEFINE(HAVE_INT64_T)
ddceb1c8 1985fi
1986
58d100bf 1987AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
1988 AC_TRY_COMPILE(
aff51935 1989 [ #include <sys/types.h> ],
1990 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
58d100bf 1991 [ ac_cv_have_u_intxx_t="yes" ],
1992 [ ac_cv_have_u_intxx_t="no" ]
1993 )
1994])
1995if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
1996 AC_DEFINE(HAVE_U_INTXX_T)
1997 have_u_intxx_t=1
1998fi
2b942fe0 1999
41cb4569 2000if test -z "$have_u_intxx_t" ; then
2001 AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
2002 AC_TRY_COMPILE(
aff51935 2003 [ #include <sys/socket.h> ],
2004 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
41cb4569 2005 [
2006 AC_DEFINE(HAVE_U_INTXX_T)
2007 AC_MSG_RESULT(yes)
2008 ],
2009 [ AC_MSG_RESULT(no) ]
2010 )
2011fi
2012
bd590612 2013AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
2014 AC_TRY_COMPILE(
aff51935 2015 [ #include <sys/types.h> ],
2016 [ u_int64_t a; a = 1;],
bd590612 2017 [ ac_cv_have_u_int64_t="yes" ],
2018 [ ac_cv_have_u_int64_t="no" ]
2019 )
2020])
2021if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
2022 AC_DEFINE(HAVE_U_INT64_T)
2023 have_u_int64_t=1
2024fi
2025
ddceb1c8 2026if test -z "$have_u_int64_t" ; then
2027 AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
2028 AC_TRY_COMPILE(
aff51935 2029 [ #include <sys/bitypes.h> ],
ddceb1c8 2030 [ u_int64_t a; a = 1],
2031 [
2032 AC_DEFINE(HAVE_U_INT64_T)
2033 AC_MSG_RESULT(yes)
2034 ],
2035 [ AC_MSG_RESULT(no) ]
2036 )
2037fi
2038
41cb4569 2039if test -z "$have_u_intxx_t" ; then
2040 AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
2041 AC_TRY_COMPILE(
2042 [
2043#include <sys/types.h>
aff51935 2044 ],
2045 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
41cb4569 2046 [ ac_cv_have_uintxx_t="yes" ],
2047 [ ac_cv_have_uintxx_t="no" ]
2048 )
2049 ])
2050 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
2051 AC_DEFINE(HAVE_UINTXX_T)
2052 fi
2053fi
2054
2055if test -z "$have_uintxx_t" ; then
2056 AC_MSG_CHECKING([for uintXX_t types in stdint.h])
2057 AC_TRY_COMPILE(
aff51935 2058 [ #include <stdint.h> ],
2059 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
41cb4569 2060 [
2061 AC_DEFINE(HAVE_UINTXX_T)
2062 AC_MSG_RESULT(yes)
2063 ],
2064 [ AC_MSG_RESULT(no) ]
2065 )
2066fi
2067
e5fe9a1f 2068if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
aff51935 2069 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
5cdfe03f 2070then
2071 AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
2072 AC_TRY_COMPILE(
58d100bf 2073 [
2074#include <sys/bitypes.h>
aff51935 2075 ],
5cdfe03f 2076 [
837c30b8 2077 int8_t a; int16_t b; int32_t c;
2078 u_int8_t e; u_int16_t f; u_int32_t g;
2079 a = b = c = e = f = g = 1;
aff51935 2080 ],
5cdfe03f 2081 [
2082 AC_DEFINE(HAVE_U_INTXX_T)
2083 AC_DEFINE(HAVE_INTXX_T)
2084 AC_MSG_RESULT(yes)
2085 ],
2086 [AC_MSG_RESULT(no)]
aff51935 2087 )
5cdfe03f 2088fi
2089
0362750e 2090
2091AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
2092 AC_TRY_COMPILE(
2093 [
2094#include <sys/types.h>
2095 ],
2096 [ u_char foo; foo = 125; ],
2097 [ ac_cv_have_u_char="yes" ],
2098 [ ac_cv_have_u_char="no" ]
2099 )
2100])
2101if test "x$ac_cv_have_u_char" = "xyes" ; then
2102 AC_DEFINE(HAVE_U_CHAR)
2103fi
2104
98a7c37b 2105TYPE_SOCKLEN_T
2b942fe0 2106
2d16d9a3 2107AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
ddceb1c8 2108
777ece68 2109AC_CHECK_TYPES(in_addr_t,,,
2110[#include <sys/types.h>
2111#include <netinet/in.h>])
7b578f7d 2112
58d100bf 2113AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
2114 AC_TRY_COMPILE(
2115 [
18ba2aab 2116#include <sys/types.h>
58d100bf 2117 ],
2118 [ size_t foo; foo = 1235; ],
2119 [ ac_cv_have_size_t="yes" ],
2120 [ ac_cv_have_size_t="no" ]
2121 )
2122])
2123if test "x$ac_cv_have_size_t" = "xyes" ; then
2124 AC_DEFINE(HAVE_SIZE_T)
2125fi
ea1970a3 2126
c04f75f1 2127AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
2128 AC_TRY_COMPILE(
2129 [
2130#include <sys/types.h>
2131 ],
2132 [ ssize_t foo; foo = 1235; ],
2133 [ ac_cv_have_ssize_t="yes" ],
2134 [ ac_cv_have_ssize_t="no" ]
2135 )
2136])
2137if test "x$ac_cv_have_ssize_t" = "xyes" ; then
2138 AC_DEFINE(HAVE_SSIZE_T)
2139fi
2140
f1c4659d 2141AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
2142 AC_TRY_COMPILE(
2143 [
2144#include <time.h>
2145 ],
2146 [ clock_t foo; foo = 1235; ],
2147 [ ac_cv_have_clock_t="yes" ],
2148 [ ac_cv_have_clock_t="no" ]
2149 )
2150])
2151if test "x$ac_cv_have_clock_t" = "xyes" ; then
2152 AC_DEFINE(HAVE_CLOCK_T)
2153fi
2154
1c04b088 2155AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
2156 AC_TRY_COMPILE(
2157 [
2158#include <sys/types.h>
2159#include <sys/socket.h>
2160 ],
2161 [ sa_family_t foo; foo = 1235; ],
2162 [ ac_cv_have_sa_family_t="yes" ],
77bb0bca 2163 [ AC_TRY_COMPILE(
2164 [
2165#include <sys/types.h>
2166#include <sys/socket.h>
2167#include <netinet/in.h>
2168 ],
2169 [ sa_family_t foo; foo = 1235; ],
2170 [ ac_cv_have_sa_family_t="yes" ],
2171
1c04b088 2172 [ ac_cv_have_sa_family_t="no" ]
77bb0bca 2173 )]
1c04b088 2174 )
2175])
2176if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
2177 AC_DEFINE(HAVE_SA_FAMILY_T)
2178fi
2179
729bfe59 2180AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
2181 AC_TRY_COMPILE(
2182 [
2183#include <sys/types.h>
2184 ],
2185 [ pid_t foo; foo = 1235; ],
2186 [ ac_cv_have_pid_t="yes" ],
2187 [ ac_cv_have_pid_t="no" ]
2188 )
2189])
2190if test "x$ac_cv_have_pid_t" = "xyes" ; then
2191 AC_DEFINE(HAVE_PID_T)
2192fi
2193
2194AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
2195 AC_TRY_COMPILE(
2196 [
2197#include <sys/types.h>
2198 ],
2199 [ mode_t foo; foo = 1235; ],
2200 [ ac_cv_have_mode_t="yes" ],
2201 [ ac_cv_have_mode_t="no" ]
2202 )
2203])
2204if test "x$ac_cv_have_mode_t" = "xyes" ; then
2205 AC_DEFINE(HAVE_MODE_T)
2206fi
2207
e3a93db0 2208
58d100bf 2209AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
2210 AC_TRY_COMPILE(
2211 [
18ba2aab 2212#include <sys/types.h>
2213#include <sys/socket.h>
58d100bf 2214 ],
2215 [ struct sockaddr_storage s; ],
2216 [ ac_cv_have_struct_sockaddr_storage="yes" ],
2217 [ ac_cv_have_struct_sockaddr_storage="no" ]
2218 )
2219])
2220if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
2221 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE)
2222fi
48e671d5 2223
58d100bf 2224AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2225 AC_TRY_COMPILE(
2226 [
cbd7492e 2227#include <sys/types.h>
58d100bf 2228#include <netinet/in.h>
2229 ],
2230 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2231 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2232 [ ac_cv_have_struct_sockaddr_in6="no" ]
2233 )
2234])
2235if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
2236 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6)
2237fi
48e671d5 2238
58d100bf 2239AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2240 AC_TRY_COMPILE(
2241 [
cbd7492e 2242#include <sys/types.h>
58d100bf 2243#include <netinet/in.h>
2244 ],
2245 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2246 [ ac_cv_have_struct_in6_addr="yes" ],
2247 [ ac_cv_have_struct_in6_addr="no" ]
2248 )
2249])
2250if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
2251 AC_DEFINE(HAVE_STRUCT_IN6_ADDR)
2252fi
48e671d5 2253
58d100bf 2254AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2255 AC_TRY_COMPILE(
2256 [
18ba2aab 2257#include <sys/types.h>
2258#include <sys/socket.h>
2259#include <netdb.h>
58d100bf 2260 ],
2261 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2262 [ ac_cv_have_struct_addrinfo="yes" ],
2263 [ ac_cv_have_struct_addrinfo="no" ]
2264 )
2265])
2266if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2267 AC_DEFINE(HAVE_STRUCT_ADDRINFO)
2268fi
2269
89c7e31c 2270AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2271 AC_TRY_COMPILE(
aff51935 2272 [ #include <sys/time.h> ],
2273 [ struct timeval tv; tv.tv_sec = 1;],
89c7e31c 2274 [ ac_cv_have_struct_timeval="yes" ],
2275 [ ac_cv_have_struct_timeval="no" ]
2276 )
2277])
2278if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2279 AC_DEFINE(HAVE_STRUCT_TIMEVAL)
2280 have_struct_timeval=1
2281fi
2282
5271b55c 2283AC_CHECK_TYPES(struct timespec)
2284
85abc74b 2285# We need int64_t or else certian parts of the compile will fail.
4b492aab 2286if test "x$ac_cv_have_int64_t" = "xno" && \
2287 test "x$ac_cv_sizeof_long_int" != "x8" && \
2288 test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
85abc74b 2289 echo "OpenSSH requires int64_t support. Contact your vendor or install"
2290 echo "an alternative compiler (I.E., GCC) before continuing."
2291 echo ""
2292 exit 1;
733cf7f4 2293else
2294dnl test snprintf (broken on SCO w/gcc)
1a01a50c 2295 AC_RUN_IFELSE(
479cece8 2296 [AC_LANG_SOURCE([[
733cf7f4 2297#include <stdio.h>
2298#include <string.h>
2299#ifdef HAVE_SNPRINTF
2300main()
2301{
2302 char buf[50];
2303 char expected_out[50];
2304 int mazsize = 50 ;
2305#if (SIZEOF_LONG_INT == 8)
2306 long int num = 0x7fffffffffffffff;
2307#else
763a1a18 2308 long long num = 0x7fffffffffffffffll;
733cf7f4 2309#endif
2310 strcpy(expected_out, "9223372036854775807");
2311 snprintf(buf, mazsize, "%lld", num);
2312 if(strcmp(buf, expected_out) != 0)
aff51935 2313 exit(1);
733cf7f4 2314 exit(0);
2315}
2316#else
2317main() { exit(0); }
2318#endif
479cece8 2319 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
1a01a50c 2320 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
733cf7f4 2321 )
2c523de9 2322fi
2323
77bb0bca 2324dnl Checks for structure members
58d100bf 2325OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2326OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2327OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2328OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2329OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
25422c70 2330OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
58d100bf 2331OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2332OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
daaff4d5 2333OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
58d100bf 2334OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2335OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2336OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2337OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
1d7b9b20 2338OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2339OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2340OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2341OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
98a7c37b 2342
2343AC_CHECK_MEMBERS([struct stat.st_blksize])
1d7b9b20 2344
58d100bf 2345AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2346 ac_cv_have_ss_family_in_struct_ss, [
2347 AC_TRY_COMPILE(
2348 [
18ba2aab 2349#include <sys/types.h>
2350#include <sys/socket.h>
58d100bf 2351 ],
2352 [ struct sockaddr_storage s; s.ss_family = 1; ],
2353 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2354 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2355 )
2356])
2357if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2358 AC_DEFINE(HAVE_SS_FAMILY_IN_SS)
2359fi
2360
58d100bf 2361AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2362 ac_cv_have___ss_family_in_struct_ss, [
2363 AC_TRY_COMPILE(
2364 [
18ba2aab 2365#include <sys/types.h>
2366#include <sys/socket.h>
58d100bf 2367 ],
2368 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2369 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2370 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2371 )
2372])
2373if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2374 AC_DEFINE(HAVE___SS_FAMILY_IN_SS)
2375fi
2376
2e73a022 2377AC_CACHE_CHECK([for pw_class field in struct passwd],
2378 ac_cv_have_pw_class_in_struct_passwd, [
2379 AC_TRY_COMPILE(
2380 [
2e73a022 2381#include <pwd.h>
2382 ],
97994d32 2383 [ struct passwd p; p.pw_class = 0; ],
2e73a022 2384 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2385 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2386 )
2387])
2388if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2389 AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD)
2390fi
2391
7751d4eb 2392AC_CACHE_CHECK([for pw_expire field in struct passwd],
2393 ac_cv_have_pw_expire_in_struct_passwd, [
2394 AC_TRY_COMPILE(
2395 [
2396#include <pwd.h>
2397 ],
2398 [ struct passwd p; p.pw_expire = 0; ],
2399 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2400 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2401 )
2402])
2403if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2404 AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD)
2405fi
2406
2407AC_CACHE_CHECK([for pw_change field in struct passwd],
2408 ac_cv_have_pw_change_in_struct_passwd, [
2409 AC_TRY_COMPILE(
2410 [
2411#include <pwd.h>
2412 ],
2413 [ struct passwd p; p.pw_change = 0; ],
2414 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2415 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2416 )
2417])
2418if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2419 AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD)
2420fi
58d100bf 2421
637f9177 2422dnl make sure we're using the real structure members and not defines
6f34652e 2423AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2424 ac_cv_have_accrights_in_msghdr, [
1a01a50c 2425 AC_COMPILE_IFELSE(
6f34652e 2426 [
f95c8ce8 2427#include <sys/types.h>
6f34652e 2428#include <sys/socket.h>
2429#include <sys/uio.h>
637f9177 2430int main() {
2431#ifdef msg_accrights
1a01a50c 2432#error "msg_accrights is a macro"
637f9177 2433exit(1);
2434#endif
2435struct msghdr m;
2436m.msg_accrights = 0;
2437exit(0);
2438}
6f34652e 2439 ],
6f34652e 2440 [ ac_cv_have_accrights_in_msghdr="yes" ],
2441 [ ac_cv_have_accrights_in_msghdr="no" ]
2442 )
2443])
2444if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2445 AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR)
2446fi
2447
7176df4f 2448AC_CACHE_CHECK([for msg_control field in struct msghdr],
2449 ac_cv_have_control_in_msghdr, [
1a01a50c 2450 AC_COMPILE_IFELSE(
7176df4f 2451 [
f95c8ce8 2452#include <sys/types.h>
7176df4f 2453#include <sys/socket.h>
2454#include <sys/uio.h>
637f9177 2455int main() {
2456#ifdef msg_control
1a01a50c 2457#error "msg_control is a macro"
637f9177 2458exit(1);
2459#endif
2460struct msghdr m;
2461m.msg_control = 0;
2462exit(0);
2463}
7176df4f 2464 ],
7176df4f 2465 [ ac_cv_have_control_in_msghdr="yes" ],
2466 [ ac_cv_have_control_in_msghdr="no" ]
2467 )
2468])
2469if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2470 AC_DEFINE(HAVE_CONTROL_IN_MSGHDR)
2471fi
2472
58d100bf 2473AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
aff51935 2474 AC_TRY_LINK([],
2475 [ extern char *__progname; printf("%s", __progname); ],
58d100bf 2476 [ ac_cv_libc_defines___progname="yes" ],
2477 [ ac_cv_libc_defines___progname="no" ]
2478 )
2479])
2480if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2481 AC_DEFINE(HAVE___PROGNAME)
2482fi
8946db53 2483
c921ee00 2484AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2485 AC_TRY_LINK([
2486#include <stdio.h>
aff51935 2487],
2488 [ printf("%s", __FUNCTION__); ],
c921ee00 2489 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2490 [ ac_cv_cc_implements___FUNCTION__="no" ]
2491 )
2492])
2493if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2494 AC_DEFINE(HAVE___FUNCTION__)
2495fi
2496
2497AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2498 AC_TRY_LINK([
2499#include <stdio.h>
aff51935 2500],
2501 [ printf("%s", __func__); ],
c921ee00 2502 [ ac_cv_cc_implements___func__="yes" ],
2503 [ ac_cv_cc_implements___func__="no" ]
2504 )
2505])
2506if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
2507 AC_DEFINE(HAVE___func__)
2508fi
2509
1812a662 2510AC_CACHE_CHECK([whether getopt has optreset support],
2511 ac_cv_have_getopt_optreset, [
2512 AC_TRY_LINK(
2513 [
2514#include <getopt.h>
2515 ],
2516 [ extern int optreset; optreset = 0; ],
2517 [ ac_cv_have_getopt_optreset="yes" ],
2518 [ ac_cv_have_getopt_optreset="no" ]
2519 )
2520])
2521if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
2522 AC_DEFINE(HAVE_GETOPT_OPTRESET)
2523fi
a0391976 2524
819b676f 2525AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
aff51935 2526 AC_TRY_LINK([],
2527 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
819b676f 2528 [ ac_cv_libc_defines_sys_errlist="yes" ],
2529 [ ac_cv_libc_defines_sys_errlist="no" ]
2530 )
2531])
2532if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
2533 AC_DEFINE(HAVE_SYS_ERRLIST)
2534fi
2535
2536
416ed5a7 2537AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
aff51935 2538 AC_TRY_LINK([],
2539 [ extern int sys_nerr; printf("%i", sys_nerr);],
416ed5a7 2540 [ ac_cv_libc_defines_sys_nerr="yes" ],
2541 [ ac_cv_libc_defines_sys_nerr="no" ]
2542 )
2543])
2544if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
2545 AC_DEFINE(HAVE_SYS_NERR)
2546fi
2547
aff51935 2548SCARD_MSG="no"
295c8801 2549# Check whether user wants sectok support
2550AC_ARG_WITH(sectok,
2551 [ --with-sectok Enable smartcard support using libsectok],
d0b19c95 2552 [
2553 if test "x$withval" != "xno" ; then
2554 if test "x$withval" != "xyes" ; then
2555 CPPFLAGS="$CPPFLAGS -I${withval}"
2556 LDFLAGS="$LDFLAGS -L${withval}"
2557 if test ! -z "$need_dash_r" ; then
2558 LDFLAGS="$LDFLAGS -R${withval}"
2559 fi
2560 if test ! -z "$blibpath" ; then
2561 blibpath="$blibpath:${withval}"
2562 fi
2563 fi
2564 AC_CHECK_HEADERS(sectok.h)
2565 if test "$ac_cv_header_sectok_h" != yes; then
2566 AC_MSG_ERROR(Can't find sectok.h)
2567 fi
2568 AC_CHECK_LIB(sectok, sectok_open)
2569 if test "$ac_cv_lib_sectok_sectok_open" != yes; then
2570 AC_MSG_ERROR(Can't find libsectok)
2571 fi
2572 AC_DEFINE(SMARTCARD)
295c8801 2573 AC_DEFINE(USE_SECTOK)
aff51935 2574 SCARD_MSG="yes, using sectok"
295c8801 2575 fi
2576 ]
2577)
2578
2579# Check whether user wants OpenSC support
987b458f 2580OPENSC_CONFIG="no"
295c8801 2581AC_ARG_WITH(opensc,
987b458f 2582 [--with-opensc[[=PFX]] Enable smartcard support using OpenSC (optionally in PATH)],
2583 [
2584 if test "x$withval" != "xno" ; then
2585 if test "x$withval" != "xyes" ; then
2586 OPENSC_CONFIG=$withval/bin/opensc-config
2587 else
2588 AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
2589 fi
2590 if test "$OPENSC_CONFIG" != "no"; then
2591 LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
2592 LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
2593 CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
2594 LDFLAGS="$LDFLAGS $LIBOPENSC_LIBS"
2595 AC_DEFINE(SMARTCARD)
2596 AC_DEFINE(USE_OPENSC)
2597 SCARD_MSG="yes, using OpenSC"
2598 fi
2599 fi
2600 ]
2601)
d0b19c95 2602
c31dc31c 2603# Check libraries needed by DNS fingerprint support
aff51935 2604AC_SEARCH_LIBS(getrrsetbyname, resolv,
c31dc31c 2605 [AC_DEFINE(HAVE_GETRRSETBYNAME)],
3e05e934 2606 [
c31dc31c 2607 # Needed by our getrrsetbyname()
2608 AC_SEARCH_LIBS(res_query, resolv)
2609 AC_SEARCH_LIBS(dn_expand, resolv)
dabb524a 2610 AC_MSG_CHECKING(if res_query will link)
2611 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
2612 [AC_MSG_RESULT(no)
2613 saved_LIBS="$LIBS"
2614 LIBS="$LIBS -lresolv"
2615 AC_MSG_CHECKING(for res_query in -lresolv)
2616 AC_LINK_IFELSE([
2617#include <resolv.h>
2618int main()
2619{
2620 res_query (0, 0, 0, 0, 0);
2621 return 0;
2622}
2623 ],
2624 [LIBS="$LIBS -lresolv"
2625 AC_MSG_RESULT(yes)],
2626 [LIBS="$saved_LIBS"
2627 AC_MSG_RESULT(no)])
2628 ])
c31dc31c 2629 AC_CHECK_FUNCS(_getshort _getlong)
1c829da5 2630 AC_CHECK_DECLS([_getshort, _getlong], , ,
b5765e1d 2631 [#include <sys/types.h>
2632 #include <arpa/nameser.h>])
c31dc31c 2633 AC_CHECK_MEMBER(HEADER.ad,
2634 [AC_DEFINE(HAVE_HEADER_AD)],,
2635 [#include <arpa/nameser.h>])
2636 ])
3e05e934 2637
12928e80 2638# Check whether user wants Kerberos 5 support
aff51935 2639KRB5_MSG="no"
12928e80 2640AC_ARG_WITH(kerberos5,
aff51935 2641 [ --with-kerberos5=PATH Enable Kerberos 5 support],
5585c441 2642 [ if test "x$withval" != "xno" ; then
2643 if test "x$withval" = "xyes" ; then
2644 KRB5ROOT="/usr/local"
2645 else
2646 KRB5ROOT=${withval}
2647 fi
2648
2649 AC_DEFINE(KRB5)
2650 KRB5_MSG="yes"
2651
2652 AC_MSG_CHECKING(for krb5-config)
2653 if test -x $KRB5ROOT/bin/krb5-config ; then
2654 KRB5CONF=$KRB5ROOT/bin/krb5-config
2655 AC_MSG_RESULT($KRB5CONF)
2656
2657 AC_MSG_CHECKING(for gssapi support)
2658 if $KRB5CONF | grep gssapi >/dev/null ; then
2659 AC_MSG_RESULT(yes)
071970fb 2660 AC_DEFINE(GSSAPI)
2661 k5confopts=gssapi
aff51935 2662 else
5585c441 2663 AC_MSG_RESULT(no)
071970fb 2664 k5confopts=""
aff51935 2665 fi
071970fb 2666 K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
2667 K5LIBS="`$KRB5CONF --libs $k5confopts`"
5585c441 2668 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
5585c441 2669 AC_MSG_CHECKING(whether we are using Heimdal)
2670 AC_TRY_COMPILE([ #include <krb5.h> ],
2671 [ char *tmp = heimdal_version; ],
2672 [ AC_MSG_RESULT(yes)
2673 AC_DEFINE(HEIMDAL) ],
2674 AC_MSG_RESULT(no)
2675 )
2676 else
2677 AC_MSG_RESULT(no)
12928e80 2678 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
aff51935 2679 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
aff51935 2680 AC_MSG_CHECKING(whether we are using Heimdal)
2681 AC_TRY_COMPILE([ #include <krb5.h> ],
2682 [ char *tmp = heimdal_version; ],
2683 [ AC_MSG_RESULT(yes)
2684 AC_DEFINE(HEIMDAL)
41707f74 2685 K5LIBS="-lkrb5 -ldes"
2686 K5LIBS="$K5LIBS -lcom_err -lasn1"
82f4e93d 2687 AC_CHECK_LIB(roken, net_write,
41707f74 2688 [K5LIBS="$K5LIBS -lroken"])
aff51935 2689 ],
2690 [ AC_MSG_RESULT(no)
2691 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
2692 ]
2693 )
4e00038c 2694 AC_SEARCH_LIBS(dn_expand, resolv)
12928e80 2695
749560dd 2696 AC_CHECK_LIB(gssapi,gss_init_sec_context,
2697 [ AC_DEFINE(GSSAPI)
2698 K5LIBS="-lgssapi $K5LIBS" ],
2699 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
2700 [ AC_DEFINE(GSSAPI)
aff51935 2701 K5LIBS="-lgssapi_krb5 $K5LIBS" ],
749560dd 2702 AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
2703 $K5LIBS)
2704 ],
2705 $K5LIBS)
82f4e93d 2706
749560dd 2707 AC_CHECK_HEADER(gssapi.h, ,
2708 [ unset ac_cv_header_gssapi_h
aff51935 2709 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
749560dd 2710 AC_CHECK_HEADERS(gssapi.h, ,
2711 AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
aff51935 2712 )
749560dd 2713 ]
2714 )
2715
2716 oldCPP="$CPPFLAGS"
2717 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2718 AC_CHECK_HEADER(gssapi_krb5.h, ,
2719 [ CPPFLAGS="$oldCPP" ])
2720
aff51935 2721 fi
5585c441 2722 if test ! -z "$need_dash_r" ; then
2723 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
2724 fi
2725 if test ! -z "$blibpath" ; then
2726 blibpath="$blibpath:${KRB5ROOT}/lib"
2727 fi
071970fb 2728 fi
2729
2730 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
2731 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
2732 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
2733
2734 LIBS="$LIBS $K5LIBS"
2735 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS))
2736 ]
12928e80 2737)
b5b68128 2738
a0391976 2739# Looking for programs, paths and files
a0391976 2740
ecac8ee5 2741PRIVSEP_PATH=/var/empty
2742AC_ARG_WITH(privsep-path,
cda1ebcb 2743 [ --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
ecac8ee5 2744 [
6cf0200f 2745 if test -n "$withval" && test "x$withval" != "xno" && \
2746 test "x${withval}" != "xyes"; then
ecac8ee5 2747 PRIVSEP_PATH=$withval
2748 fi
2749 ]
2750)
2751AC_SUBST(PRIVSEP_PATH)
2752
a0391976 2753AC_ARG_WITH(xauth,
2754 [ --with-xauth=PATH Specify path to xauth program ],
2755 [
6cf0200f 2756 if test -n "$withval" && test "x$withval" != "xno" && \
2757 test "x${withval}" != "xyes"; then
cbd7492e 2758 xauth_path=$withval
a0391976 2759 fi
2760 ],
2761 [
2bf42e4a 2762 TestPath="$PATH"
2763 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
2764 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
2765 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
2766 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
2767 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
e5fe9a1f 2768 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
a0391976 2769 xauth_path="/usr/openwin/bin/xauth"
2770 fi
2771 ]
2772)
2773
65a4b4af 2774STRIP_OPT=-s
2775AC_ARG_ENABLE(strip,
2776 [ --disable-strip Disable calling strip(1) on install],
2777 [
2778 if test "x$enableval" = "xno" ; then
2779 STRIP_OPT=
2780 fi
2781 ]
2782)
2783AC_SUBST(STRIP_OPT)
2784
b3ec54b4 2785if test -z "$xauth_path" ; then
2786 XAUTH_PATH="undefined"
2787 AC_SUBST(XAUTH_PATH)
2788else
a0391976 2789 AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path")
b3ec54b4 2790 XAUTH_PATH=$xauth_path
2791 AC_SUBST(XAUTH_PATH)
a0391976 2792fi
a0391976 2793
2794# Check for mail directory (last resort if we cannot get it from headers)
2795if test ! -z "$MAIL" ; then
2796 maildir=`dirname $MAIL`
2797 AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir")
2798fi
2799
479cece8 2800if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
1a01a50c 2801 AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
2802 disable_ptmx_check=yes
2803fi
a0391976 2804if test -z "$no_dev_ptmx" ; then
6e879cb4 2805 if test "x$disable_ptmx_check" != "xyes" ; then
aff51935 2806 AC_CHECK_FILE("/dev/ptmx",
6e879cb4 2807 [
2808 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX)
2809 have_dev_ptmx=1
2810 ]
2811 )
2812 fi
3276571c 2813fi
1a01a50c 2814
479cece8 2815if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
1a01a50c 2816 AC_CHECK_FILE("/dev/ptc",
2817 [
2818 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC)
2819 have_dev_ptc=1
2820 ]
2821 )
2822else
2823 AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
2824fi
3276571c 2825
a0391976 2826# Options from here on. Some of these are preset by platform above
fdf6b7aa 2827AC_ARG_WITH(mantype,
5d97cfbf 2828 [ --with-mantype=man|cat|doc Set man page type],
c54a6257 2829 [
5d97cfbf 2830 case "$withval" in
2831 man|cat|doc)
2832 MANTYPE=$withval
2833 ;;
2834 *)
2835 AC_MSG_ERROR(invalid man type: $withval)
2836 ;;
2837 esac
c54a6257 2838 ]
2839)
e0c4d3ac 2840if test -z "$MANTYPE"; then
2bf42e4a 2841 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
2842 AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
e0c4d3ac 2843 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
2844 MANTYPE=doc
2845 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
2846 MANTYPE=man
2847 else
2848 MANTYPE=cat
2849 fi
2850fi
c54a6257 2851AC_SUBST(MANTYPE)
e0c4d3ac 2852if test "$MANTYPE" = "doc"; then
2853 mansubdir=man;
2854else
2855 mansubdir=$MANTYPE;
2856fi
2857AC_SUBST(mansubdir)
0bc5b6fb 2858
a0391976 2859# Check whether to enable MD5 passwords
aff51935 2860MD5_MSG="no"
2ddcfdf3 2861AC_ARG_WITH(md5-passwords,
caf3bc51 2862 [ --with-md5-passwords Enable use of MD5 passwords],
0bc5b6fb 2863 [
bcf36c78 2864 if test "x$withval" != "xno" ; then
0bc5b6fb 2865 AC_DEFINE(HAVE_MD5_PASSWORDS)
aff51935 2866 MD5_MSG="yes"
0bc5b6fb 2867 fi
2868 ]
caf3bc51 2869)
2870
a0391976 2871# Whether to disable shadow password support
a7effaac 2872AC_ARG_WITH(shadow,
2873 [ --without-shadow Disable shadow password support],
2874 [
82f4e93d 2875 if test "x$withval" = "xno" ; then
a7effaac 2876 AC_DEFINE(DISABLE_SHADOW)
4cb5ffa0 2877 disable_shadow=yes
a7effaac 2878 fi
2879 ]
2880)
2881
4cb5ffa0 2882if test -z "$disable_shadow" ; then
2883 AC_MSG_CHECKING([if the systems has expire shadow information])
2884 AC_TRY_COMPILE(
2885 [
2886#include <sys/types.h>
2887#include <shadow.h>
2888 struct spwd sp;
2889 ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
2890 [ sp_expire_available=yes ], []
2891 )
2892
2893 if test "x$sp_expire_available" = "xyes" ; then
2894 AC_MSG_RESULT(yes)
2895 AC_DEFINE(HAS_SHADOW_EXPIRE)
2896 else
2897 AC_MSG_RESULT(no)
2898 fi
2899fi
2900
a0391976 2901# Use ip address instead of hostname in $DISPLAY
44839801 2902if test ! -z "$IPADDR_IN_DISPLAY" ; then
2903 DISPLAY_HACK_MSG="yes"
2904 AC_DEFINE(IPADDR_IN_DISPLAY)
2905else
aff51935 2906 DISPLAY_HACK_MSG="no"
44839801 2907 AC_ARG_WITH(ipaddr-display,
2908 [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY],
2909 [
82f4e93d 2910 if test "x$withval" != "xno" ; then
44839801 2911 AC_DEFINE(IPADDR_IN_DISPLAY)
aff51935 2912 DISPLAY_HACK_MSG="yes"
44839801 2913 fi
2914 ]
2915 )
2916fi
a7effaac 2917
95b99395 2918# check for /etc/default/login and use it if present.
daa41e62 2919AC_ARG_ENABLE(etc-default-login,
6ff3d0dc 2920 [ --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
694d0cef 2921 [ if test "x$enableval" = "xno"; then
2922 AC_MSG_NOTICE([/etc/default/login handling disabled])
2923 etc_default_login=no
2924 else
2925 etc_default_login=yes
2926 fi ],
2927 [ etc_default_login=yes ]
2928)
95b99395 2929
694d0cef 2930if test "x$etc_default_login" != "xno"; then
2931 AC_CHECK_FILE("/etc/default/login",
2932 [ external_path_file=/etc/default/login ])
479cece8 2933 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
2934 then
1a01a50c 2935 AC_MSG_WARN([cross compiling: Disabling /etc/default/login test])
2936 elif test "x$external_path_file" = "x/etc/default/login"; then
2937 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN)
2938 fi
694d0cef 2939fi
95b99395 2940
8d184c09 2941dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
4b492aab 2942if test $ac_cv_func_login_getcapbool = "yes" && \
2943 test $ac_cv_header_login_cap_h = "yes" ; then
95b99395 2944 external_path_file=/etc/login.conf
8d184c09 2945fi
95b99395 2946
a0391976 2947# Whether to mess with the default path
aff51935 2948SERVER_PATH_MSG="(default)"
c43d69a9 2949AC_ARG_WITH(default-path,
75817f90 2950 [ --with-default-path= Specify default \$PATH environment for server],
cb807f40 2951 [
95b99395 2952 if test "x$external_path_file" = "x/etc/login.conf" ; then
8d184c09 2953 AC_MSG_WARN([
2954--with-default-path=PATH has no effect on this system.
2955Edit /etc/login.conf instead.])
82f4e93d 2956 elif test "x$withval" != "xno" ; then
89bbd457 2957 if test ! -z "$external_path_file" ; then
95b99395 2958 AC_MSG_WARN([
2959--with-default-path=PATH will only be used if PATH is not defined in
2960$external_path_file .])
2961 fi
b2d818e6 2962 user_path="$withval"
aff51935 2963 SERVER_PATH_MSG="$withval"
cb807f40 2964 fi
b2d818e6 2965 ],
95b99395 2966 [ if test "x$external_path_file" = "x/etc/login.conf" ; then
2967 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
8d184c09 2968 else
89bbd457 2969 if test ! -z "$external_path_file" ; then
95b99395 2970 AC_MSG_WARN([
2971If PATH is defined in $external_path_file, ensure the path to scp is included,
2972otherwise scp will not work.])
2973 fi
2974 AC_TRY_RUN(
2975 [
b2d818e6 2976/* find out what STDPATH is */
2977#include <stdio.h>
b2d818e6 2978#ifdef HAVE_PATHS_H
2979# include <paths.h>
2980#endif
2981#ifndef _PATH_STDPATH
d9a4e55b 2982# ifdef _PATH_USERPATH /* Irix */
2983# define _PATH_STDPATH _PATH_USERPATH
2984# else
2985# define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
2986# endif
b2d818e6 2987#endif
2988#include <sys/types.h>
2989#include <sys/stat.h>
2990#include <fcntl.h>
2991#define DATA "conftest.stdpath"
2992
2993main()
2994{
2995 FILE *fd;
2996 int rc;
82f4e93d 2997
b2d818e6 2998 fd = fopen(DATA,"w");
2999 if(fd == NULL)
3000 exit(1);
82f4e93d 3001
b2d818e6 3002 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
3003 exit(1);
3004
3005 exit(0);
3006}
3007 ], [ user_path=`cat conftest.stdpath` ],
3008 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
3009 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
3010 )
3011# make sure $bindir is in USER_PATH so scp will work
3012 t_bindir=`eval echo ${bindir}`
3013 case $t_bindir in
3014 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
3015 esac
3016 case $t_bindir in
3017 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
3018 esac
3019 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
3020 if test $? -ne 0 ; then
3021 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
3022 if test $? -ne 0 ; then
3023 user_path=$user_path:$t_bindir
3024 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
3025 fi
3026 fi
8d184c09 3027 fi ]
cb807f40 3028)
95b99395 3029if test "x$external_path_file" != "x/etc/login.conf" ; then
8d184c09 3030 AC_DEFINE_UNQUOTED(USER_PATH, "$user_path")
3031 AC_SUBST(user_path)
3032fi
cb807f40 3033
06617857 3034# Set superuser path separately to user path
06617857 3035AC_ARG_WITH(superuser-path,
3036 [ --with-superuser-path= Specify different path for super-user],
3037 [
6cf0200f 3038 if test -n "$withval" && test "x$withval" != "xno" && \
3039 test "x${withval}" != "xyes"; then
06617857 3040 AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval")
3041 superuser_path=$withval
3042 fi
3043 ]
3044)
3045
3046
58d100bf 3047AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
aff51935 3048IPV4_IN6_HACK_MSG="no"
80faa19f 3049AC_ARG_WITH(4in6,
3050 [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses],
3051 [
3052 if test "x$withval" != "xno" ; then
3053 AC_MSG_RESULT(yes)
3054 AC_DEFINE(IPV4_IN_IPV6)
aff51935 3055 IPV4_IN6_HACK_MSG="yes"
80faa19f 3056 else
3057 AC_MSG_RESULT(no)
3058 fi
3059 ],[
3060 if test "x$inet6_default_4in6" = "xyes"; then
3061 AC_MSG_RESULT([yes (default)])
3062 AC_DEFINE(IPV4_IN_IPV6)
aff51935 3063 IPV4_IN6_HACK_MSG="yes"
80faa19f 3064 else
3065 AC_MSG_RESULT([no (default)])
3066 fi
3067 ]
3068)
3069
af774732 3070# Whether to enable BSD auth support
f1b0ecc3 3071BSD_AUTH_MSG=no
af774732 3072AC_ARG_WITH(bsd-auth,
3073 [ --with-bsd-auth Enable BSD auth support],
3074 [
82f4e93d 3075 if test "x$withval" != "xno" ; then
af774732 3076 AC_DEFINE(BSD_AUTH)
f1b0ecc3 3077 BSD_AUTH_MSG=yes
af774732 3078 fi
3079 ]
3080)
3081
a0391976 3082# Where to place sshd.pid
19d9ac2a 3083piddir=/var/run
81dadca3 3084# make sure the directory exists
82f4e93d 3085if test ! -d $piddir ; then
81dadca3 3086 piddir=`eval echo ${sysconfdir}`
3087 case $piddir in
aff51935 3088 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
81dadca3 3089 esac
3090fi
3091
47e45e44 3092AC_ARG_WITH(pid-dir,
3093 [ --with-pid-dir=PATH Specify location of ssh.pid file],
3094 [
6cf0200f 3095 if test -n "$withval" && test "x$withval" != "xno" && \
3096 test "x${withval}" != "xyes"; then
19d9ac2a 3097 piddir=$withval
82f4e93d 3098 if test ! -d $piddir ; then
81dadca3 3099 AC_MSG_WARN([** no $piddir directory on this system **])
3100 fi
47e45e44 3101 fi
3102 ]
3103)
b7a87eea 3104
42f11eb2 3105AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir")
19d9ac2a 3106AC_SUBST(piddir)
47e45e44 3107
1d7b9b20 3108dnl allow user to disable some login recording features
3109AC_ARG_ENABLE(lastlog,
bfd550a2 3110 [ --disable-lastlog disable use of lastlog even if detected [no]],
ddb154b3 3111 [
3112 if test "x$enableval" = "xno" ; then
3113 AC_DEFINE(DISABLE_LASTLOG)
3114 fi
3115 ]
1d7b9b20 3116)
3117AC_ARG_ENABLE(utmp,
bfd550a2 3118 [ --disable-utmp disable use of utmp even if detected [no]],
ddb154b3 3119 [
3120 if test "x$enableval" = "xno" ; then
3121 AC_DEFINE(DISABLE_UTMP)
3122 fi
3123 ]
1d7b9b20 3124)
3125AC_ARG_ENABLE(utmpx,
bfd550a2 3126 [ --disable-utmpx disable use of utmpx even if detected [no]],
ddb154b3 3127 [
3128 if test "x$enableval" = "xno" ; then
3129 AC_DEFINE(DISABLE_UTMPX)
3130 fi
3131 ]
1d7b9b20 3132)
3133AC_ARG_ENABLE(wtmp,
bfd550a2 3134 [ --disable-wtmp disable use of wtmp even if detected [no]],
ddb154b3 3135 [
3136 if test "x$enableval" = "xno" ; then
3137 AC_DEFINE(DISABLE_WTMP)
3138 fi
3139 ]
1d7b9b20 3140)
3141AC_ARG_ENABLE(wtmpx,
bfd550a2 3142 [ --disable-wtmpx disable use of wtmpx even if detected [no]],
ddb154b3 3143 [
3144 if test "x$enableval" = "xno" ; then
3145 AC_DEFINE(DISABLE_WTMPX)
3146 fi
3147 ]
1d7b9b20 3148)
3149AC_ARG_ENABLE(libutil,
bfd550a2 3150 [ --disable-libutil disable use of libutil (login() etc.) [no]],
ddb154b3 3151 [
3152 if test "x$enableval" = "xno" ; then
3153 AC_DEFINE(DISABLE_LOGIN)
3154 fi
3155 ]
1d7b9b20 3156)
3157AC_ARG_ENABLE(pututline,
bfd550a2 3158 [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]],
ddb154b3 3159 [
3160 if test "x$enableval" = "xno" ; then
aff51935 3161 AC_DEFINE(DISABLE_PUTUTLINE)
ddb154b3 3162 fi
3163 ]
1d7b9b20 3164)
3165AC_ARG_ENABLE(pututxline,
bfd550a2 3166 [ --disable-pututxline disable use of pututxline() etc. ([uw]tmpx) [no]],
ddb154b3 3167 [
3168 if test "x$enableval" = "xno" ; then
3169 AC_DEFINE(DISABLE_PUTUTXLINE)
3170 fi
3171 ]
1d7b9b20 3172)
3173AC_ARG_WITH(lastlog,
bfd550a2 3174 [ --with-lastlog=FILE|DIR specify lastlog location [common locations]],
8c89dd2b 3175 [
82f4e93d 3176 if test "x$withval" = "xno" ; then
8c89dd2b 3177 AC_DEFINE(DISABLE_LASTLOG)
6cf0200f 3178 elif test -n "$withval" && test "x${withval}" != "xyes"; then
8c89dd2b 3179 conf_lastlog_location=$withval
3180 fi
3181 ]
3182)
1d7b9b20 3183
3184dnl lastlog, [uw]tmpx? detection
3185dnl NOTE: set the paths in the platform section to avoid the
3186dnl need for command-line parameters
3187dnl lastlog and [uw]tmp are subject to a file search if all else fails
3188
3189dnl lastlog detection
3190dnl NOTE: the code itself will detect if lastlog is a directory
3191AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
3192AC_TRY_COMPILE([
3193#include <sys/types.h>
3194#include <utmp.h>
3195#ifdef HAVE_LASTLOG_H
3196# include <lastlog.h>
3197#endif
d7c0f3d5 3198#ifdef HAVE_PATHS_H
1d7b9b20 3199# include <paths.h>
41cb4569 3200#endif
3201#ifdef HAVE_LOGIN_H
3202# include <login.h>
1d7b9b20 3203#endif
3204 ],
3205 [ char *lastlog = LASTLOG_FILE; ],
3206 [ AC_MSG_RESULT(yes) ],
d7c0f3d5 3207 [
3208 AC_MSG_RESULT(no)
3209 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
3210 AC_TRY_COMPILE([
3211#include <sys/types.h>
3212#include <utmp.h>
3213#ifdef HAVE_LASTLOG_H
3214# include <lastlog.h>
3215#endif
3216#ifdef HAVE_PATHS_H
3217# include <paths.h>
3218#endif
3219 ],
3220 [ char *lastlog = _PATH_LASTLOG; ],
3221 [ AC_MSG_RESULT(yes) ],
3222 [
f282b668 3223 AC_MSG_RESULT(no)
d7c0f3d5 3224 system_lastlog_path=no
3225 ])
3226 ]
1d7b9b20 3227)
d7c0f3d5 3228
1d7b9b20 3229if test -z "$conf_lastlog_location"; then
3230 if test x"$system_lastlog_path" = x"no" ; then
3231 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
e5fe9a1f 3232 if (test -d "$f" || test -f "$f") ; then
1d7b9b20 3233 conf_lastlog_location=$f
3234 fi
3235 done
3236 if test -z "$conf_lastlog_location"; then
f8119cef 3237 AC_MSG_WARN([** Cannot find lastlog **])
3238 dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
1d7b9b20 3239 fi
3240 fi
3241fi
3242
3243if test -n "$conf_lastlog_location"; then
3244 AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location")
82f4e93d 3245fi
1d7b9b20 3246
3247dnl utmp detection
3248AC_MSG_CHECKING([if your system defines UTMP_FILE])
3249AC_TRY_COMPILE([
3250#include <sys/types.h>
3251#include <utmp.h>
d7c0f3d5 3252#ifdef HAVE_PATHS_H
1d7b9b20 3253# include <paths.h>
3254#endif
3255 ],
3256 [ char *utmp = UTMP_FILE; ],
3257 [ AC_MSG_RESULT(yes) ],
3258 [ AC_MSG_RESULT(no)
3259 system_utmp_path=no ]
3260)
3261if test -z "$conf_utmp_location"; then
3262 if test x"$system_utmp_path" = x"no" ; then
3263 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3264 if test -f $f ; then
3265 conf_utmp_location=$f
3266 fi
3267 done
3268 if test -z "$conf_utmp_location"; then
3269 AC_DEFINE(DISABLE_UTMP)
3270 fi
3271 fi
3272fi
3273if test -n "$conf_utmp_location"; then
3274 AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location")
82f4e93d 3275fi
1d7b9b20 3276
3277dnl wtmp detection
3278AC_MSG_CHECKING([if your system defines WTMP_FILE])
3279AC_TRY_COMPILE([
3280#include <sys/types.h>
3281#include <utmp.h>
d7c0f3d5 3282#ifdef HAVE_PATHS_H
1d7b9b20 3283# include <paths.h>
3284#endif
3285 ],
3286 [ char *wtmp = WTMP_FILE; ],
3287 [ AC_MSG_RESULT(yes) ],
3288 [ AC_MSG_RESULT(no)
3289 system_wtmp_path=no ]
3290)
3291if test -z "$conf_wtmp_location"; then
3292 if test x"$system_wtmp_path" = x"no" ; then
3293 for f in /usr/adm/wtmp /var/log/wtmp; do
3294 if test -f $f ; then
3295 conf_wtmp_location=$f
3296 fi
3297 done
3298 if test -z "$conf_wtmp_location"; then
3299 AC_DEFINE(DISABLE_WTMP)
3300 fi
3301 fi
3302fi
3303if test -n "$conf_wtmp_location"; then
3304 AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location")
82f4e93d 3305fi
1d7b9b20 3306
3307
3308dnl utmpx detection - I don't know any system so perverse as to require
3309dnl utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3310dnl there, though.
3311AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3312AC_TRY_COMPILE([
3313#include <sys/types.h>
3314#include <utmp.h>
3315#ifdef HAVE_UTMPX_H
3316#include <utmpx.h>
3317#endif
d7c0f3d5 3318#ifdef HAVE_PATHS_H
1d7b9b20 3319# include <paths.h>
3320#endif
3321 ],
3322 [ char *utmpx = UTMPX_FILE; ],
3323 [ AC_MSG_RESULT(yes) ],
3324 [ AC_MSG_RESULT(no)
3325 system_utmpx_path=no ]
3326)
3327if test -z "$conf_utmpx_location"; then
3328 if test x"$system_utmpx_path" = x"no" ; then
3329 AC_DEFINE(DISABLE_UTMPX)
3330 fi
3331else
3332 AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location")
82f4e93d 3333fi
1d7b9b20 3334
3335dnl wtmpx detection
3336AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3337AC_TRY_COMPILE([
3338#include <sys/types.h>
3339#include <utmp.h>
3340#ifdef HAVE_UTMPX_H
3341#include <utmpx.h>
3342#endif
d7c0f3d5 3343#ifdef HAVE_PATHS_H
1d7b9b20 3344# include <paths.h>
3345#endif
3346 ],
3347 [ char *wtmpx = WTMPX_FILE; ],
3348 [ AC_MSG_RESULT(yes) ],
3349 [ AC_MSG_RESULT(no)
3350 system_wtmpx_path=no ]
3351)
3352if test -z "$conf_wtmpx_location"; then
3353 if test x"$system_wtmpx_path" = x"no" ; then
3354 AC_DEFINE(DISABLE_WTMPX)
3355 fi
3356else
3357 AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location")
82f4e93d 3358fi
1d7b9b20 3359
b7a87eea 3360
bd499f9e 3361if test ! -z "$blibpath" ; then
68ece370 3362 LDFLAGS="$LDFLAGS $blibflags$blibpath"
3363 AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
bd499f9e 3364fi
3365
ddceb1c8 3366dnl remove pam and dl because they are in $LIBPAM
3367if test "$PAM_MSG" = yes ; then
98f2d9d5 3368 LIBS=`echo $LIBS | sed 's/-lpam //'`
3369fi
3370if test "$ac_cv_lib_pam_pam_set_item" = yes ; then
3371 LIBS=`echo $LIBS | sed 's/-ldl //'`
ddceb1c8 3372fi
3373
ed89c848 3374dnl Adding -Werror to CFLAGS early prevents configure tests from running.
3375dnl Add now.
3376CFLAGS="$CFLAGS $werror_flags"
3377
3c62e7eb 3378AC_EXEEXT
d7cfdd7c 3379AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openbsd-compat/Makefile \
3380 scard/Makefile ssh_prng_cmds survey.sh])
98a7c37b 3381AC_OUTPUT
d3083fbd 3382
cbd7492e 3383# Print summary of options
3384
cbd7492e 3385# Someone please show me a better way :)
3386A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3387B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3388C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3389D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
f5665f6f 3390E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
e0c4d3ac 3391F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
cbd7492e 3392G=`eval echo ${piddir}` ; G=`eval echo ${G}`
ecac8ee5 3393H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3394I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3395J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
cbd7492e 3396
3397echo ""
26de7942 3398echo "OpenSSH has been configured with the following options:"
ecac8ee5 3399echo " User binaries: $B"
3400echo " System binaries: $C"
3401echo " Configuration files: $D"
3402echo " Askpass program: $E"
3403echo " Manual pages: $F"
3404echo " PID file: $G"
3405echo " Privilege separation chroot path: $H"
95b99395 3406if test "x$external_path_file" = "x/etc/login.conf" ; then
3407echo " At runtime, sshd will use the path defined in $external_path_file"
3408echo " Make sure the path to scp is present, otherwise scp will not work"
8d184c09 3409else
ecac8ee5 3410echo " sshd default user PATH: $I"
89bbd457 3411 if test ! -z "$external_path_file"; then
95b99395 3412echo " (If PATH is set in $external_path_file it will be used instead. If"
3413echo " used, ensure the path to scp is present, otherwise scp will not work.)"
3414 fi
8d184c09 3415fi
06617857 3416if test ! -z "$superuser_path" ; then
ecac8ee5 3417echo " sshd superuser user PATH: $J"
3418fi
3419echo " Manpage format: $MANTYPE"
3e05e934 3420echo " PAM support: $PAM_MSG"
ecac8ee5 3421echo " KerberosV support: $KRB5_MSG"
3422echo " Smartcard support: $SCARD_MSG"
ecac8ee5 3423echo " S/KEY support: $SKEY_MSG"
3424echo " TCP Wrappers support: $TCPW_MSG"
3425echo " MD5 password support: $MD5_MSG"
59031773 3426echo " libedit support: $LIBEDIT_MSG"
3deb1408 3427echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
ecac8ee5 3428echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3429echo " BSD Auth support: $BSD_AUTH_MSG"
3430echo " Random number source: $RAND_MSG"
f1b0ecc3 3431if test ! -z "$USE_RAND_HELPER" ; then
ecac8ee5 3432echo " ssh-rand-helper collects from: $RAND_HELPER_MSG"
af774732 3433fi
3434
cbd7492e 3435echo ""
3436
0c2fb82f 3437echo " Host: ${host}"
3438echo " Compiler: ${CC}"
3439echo " Compiler flags: ${CFLAGS}"
3440echo "Preprocessor flags: ${CPPFLAGS}"
3441echo " Linker flags: ${LDFLAGS}"
ddceb1c8 3442echo " Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
cbd7492e 3443
3444echo ""
3445
9cefe228 3446if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
b3146b5f 3447 echo "SVR4 style packages are supported with \"make package\""
3448 echo ""
9cefe228 3449fi
3450
adeebd37 3451if test "x$PAM_MSG" = "xyes" ; then
f1b0ecc3 3452 echo "PAM is enabled. You may need to install a PAM control file "
3453 echo "for sshd, otherwise password authentication may fail. "
aff51935 3454 echo "Example PAM control files can be found in the contrib/ "
f1b0ecc3 3455 echo "subdirectory"
adeebd37 3456 echo ""
3457fi
3458
f1b0ecc3 3459if test ! -z "$RAND_HELPER_CMDHASH" ; then
3460 echo "WARNING: you are using the builtin random number collection "
3461 echo "service. Please read WARNING.RNG and request that your OS "
3462 echo "vendor includes kernel-based random number collection in "
3463 echo "future versions of your OS."
2c523de9 3464 echo ""
3465fi
af774732 3466
2f6f9cff 3467if test ! -z "$NO_PEERCHECK" ; then
3468 echo "WARNING: the operating system that you are using does not "
3469 echo "appear to support either the getpeereid() API nor the "
3470 echo "SO_PEERCRED getsockopt() option. These facilities are used to "
3471 echo "enforce security checks to prevent unauthorised connections to "
3472 echo "ssh-agent. Their absence increases the risk that a malicious "
3473 echo "user can connect to your agent. "
3474 echo ""
3475fi
3476
7b578f7d 3477if test "$AUDIT_MODULE" = "bsm" ; then
3478 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
3479 echo "See the Solaris section in README.platform for details."
3480fi
git-cvsimport mirror of OpenSSH
This page took 1.046744 seconds and 5 git commands to generate.