]> andersk Git - openssh.git/blame - configure.ac
andersk / openssh.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
- (dtucker) [openbsd-compat/fake-rfc2553.h] MAX_INT -> INT_MAX since the
[openssh.git] / configure.ac
CommitLineData
eb5d7ff6 1# $Id$
2b983b95 2#
3# Copyright (c) 1999-2004 Damien Miller
4#
5# Permission to use, copy, modify, and distribute this software for any
6# purpose with or without fee is hereby granted, provided that the above
7# copyright notice and this permission notice appear in all copies.
8#
9# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
0b202697 16
76e6410a 17AC_INIT(OpenSSH, Portable, openssh-unix-dev@mindrot.org)
98a7c37b 18AC_CONFIG_SRCDIR([ssh.c])
5881cd60 19
20AC_CONFIG_HEADER(config.h)
b14b2ae7 21AC_PROG_CC
a7effaac 22AC_CANONICAL_HOST
cf0c5df5 23AC_C_BIGENDIAN
5881cd60 24
a0391976 25# Checks for programs.
4bbf95fa 26AC_PROG_AWK
4cca272e 27AC_PROG_CPP
5881cd60 28AC_PROG_RANLIB
cf8dd513 29AC_PROG_INSTALL
bee0a37e 30AC_PATH_PROG(AR, ar)
ddd8c95b 31AC_PATH_PROG(CAT, cat)
32AC_PATH_PROG(KILL, kill)
13dd877b 33AC_PATH_PROGS(PERL, perl5 perl)
c3690df3 34AC_PATH_PROG(SED, sed)
a0f84251 35AC_SUBST(PERL)
ad85db64 36AC_PATH_PROG(ENT, ent)
37AC_SUBST(ENT)
6958bd37 38AC_PATH_PROG(TEST_MINUS_S_SH, bash)
39AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
40AC_PATH_PROG(TEST_MINUS_S_SH, sh)
6193497b 41AC_PATH_PROG(SH, sh)
a3245b92 42AC_SUBST(TEST_SHELL,sh)
f498ed15 43
9cefe228 44dnl for buildpkg.sh
45AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
46 [/usr/sbin${PATH_SEPARATOR}/etc])
47AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
48 [/usr/sbin${PATH_SEPARATOR}/etc])
49AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
50
948fd8b9 51# System features
52AC_SYS_LARGEFILE
53
c193d002 54if test -z "$AR" ; then
55 AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
56fi
57
2e73a022 58# Use LOGIN_PROGRAM from environment if possible
59if test ! -z "$LOGIN_PROGRAM" ; then
60 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM")
61else
62 # Search for login
63 AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
64 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
65 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
66 fi
67fi
68
37656beb 69AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
70if test ! -z "$PATH_PASSWD_PROG" ; then
71 AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG")
72fi
73
d423d822 74if test -z "$LD" ; then
75 LD=$CC
76fi
77AC_SUBST(LD)
82f4e93d 78
d423d822 79AC_C_INLINE
dfafb2e1 80
81AC_CHECK_DECL(LLONG_MAX, have_llong_max=1, , [#include <limits.h>])
82
aff51935 83if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
af40ca44 84 CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wuninitialized"
44d71ad5 85 CFLAGS="$CFLAGS -Wsign-compare"
8a3ff1aa 86
dfafb2e1 87 if test -z "$have_llong_max"; then
88 # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
89 unset ac_cv_have_decl_LLONG_MAX
90 saved_CFLAGS="$CFLAGS"
91 CFLAGS="$CFLAGS -std=gnu99"
92 AC_CHECK_DECL(LLONG_MAX,
93 [have_llong_max=1],
94 [CFLAGS="$saved_CFLAGS"],
95 [#include <limits.h>]
96 )
97 fi
d423d822 98fi
99
343ba2ce 100if test -z "$have_llong_max"; then
101 AC_MSG_CHECKING([for max value of long long])
102 AC_RUN_IFELSE(
103 [AC_LANG_SOURCE([[
104#include <stdio.h>
105/* Why is this so damn hard? */
106#ifdef __GNUC__
107# undef __GNUC__
108#endif
109#define __USE_ISOC99
110#include <limits.h>
111#define DATA "conftest.llminmax"
112int main(void) {
113 FILE *f;
114 long long i, llmin, llmax = 0;
115
116 if((f = fopen(DATA,"w")) == NULL)
117 exit(1);
118
119#if defined(LLONG_MIN) && defined(LLONG_MAX)
120 fprintf(stderr, "Using system header for LLONG_MIN and LLONG_MAX\n");
121 llmin = LLONG_MIN;
122 llmax = LLONG_MAX;
123#else
124 fprintf(stderr, "Calculating LLONG_MIN and LLONG_MAX\n");
125 /* This will work on one's complement and two's complement */
126 for (i = 1; i > llmax; i <<= 1, i++)
127 llmax = i;
128 llmin = llmax + 1LL; /* wrap */
129#endif
130
131 /* Sanity check */
132 if (llmin + 1 < llmin || llmin - 1 < llmin || llmax + 1 > llmax
133 || llmax - 1 > llmax) {
134 fprintf(f, "unknown unknown\n");
135 exit(2);
136 }
137
138 if (fprintf(f ,"%lld %lld", llmin, llmax) < 0)
139 exit(3);
140
141 exit(0);
142}
143 ]])],
144 [
145 llong_min=`$AWK '{print $1}' conftest.llminmax`
146 llong_max=`$AWK '{print $2}' conftest.llminmax`
147 AC_MSG_RESULT($llong_max)
148 AC_DEFINE_UNQUOTED(LLONG_MAX, [${llong_max}LL],
149 [max value of long long calculated by configure])
150 AC_MSG_CHECKING([for min value of long long])
151 AC_MSG_RESULT($llong_min)
152 AC_DEFINE_UNQUOTED(LLONG_MIN, [${llong_min}LL],
153 [min value of long long calculated by configure])
154 ],
155 [
156 AC_MSG_RESULT(not found)
157 ],
158 [
159 AC_MSG_WARN([cross compiling: not checking])
160 ]
161 )
162fi
163
e6354014 164AC_ARG_WITH(rpath,
165 [ --without-rpath Disable auto-added -R linker paths],
166 [
82f4e93d 167 if test "x$withval" = "xno" ; then
e6354014 168 need_dash_r=""
169 fi
170 if test "x$withval" = "xyes" ; then
171 need_dash_r=1
172 fi
173 ]
174)
175
a0391976 176# Check for some target-specific stuff
a7effaac 177case "$host" in
9d6b1b96 178*-*-aix*)
aff51935 179 AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
68ece370 180 if (test -z "$blibpath"); then
0a15d73b 181 blibpath="/usr/lib:/lib"
68ece370 182 fi
183 saved_LDFLAGS="$LDFLAGS"
184 for tryflags in -blibpath: -Wl,-blibpath: -Wl,-rpath, ;do
185 if (test -z "$blibflags"); then
186 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
187 AC_TRY_LINK([], [], [blibflags=$tryflags])
188 fi
189 done
190 if (test -z "$blibflags"); then
191 AC_MSG_RESULT(not found)
192 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
193 else
194 AC_MSG_RESULT($blibflags)
bd499f9e 195 fi
68ece370 196 LDFLAGS="$saved_LDFLAGS"
e351e493 197 dnl Check for authenticate. Might be in libs.a on older AIXes
198 AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE)],
0764e748 199 [AC_CHECK_LIB(s,authenticate,
e351e493 200 [ AC_DEFINE(WITH_AIXAUTHENTICATE)
0764e748 201 LIBS="$LIBS -ls"
202 ])
203 ])
ba603e06 204 dnl Check for various auth function declarations in headers.
c85ed8e2 205 AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
72ad335d 206 passwdexpired, setauthdb], , , [#include <usersec.h>])
e351e493 207 dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
ba603e06 208 AC_CHECK_DECLS(loginfailed,
e351e493 209 [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
210 AC_TRY_COMPILE(
f58c0e01 211 [#include <usersec.h>],
e351e493 212 [(void)loginfailed("user","host","tty",0);],
213 [AC_MSG_RESULT(yes)
214 AC_DEFINE(AIX_LOGINFAILED_4ARG)],
f58c0e01 215 [AC_MSG_RESULT(no)]
e351e493 216 )],
217 [],
218 [#include <usersec.h>]
219 )
2aa3a16c 220 AC_CHECK_FUNCS(setauthdb)
5ccf88cb 221 check_for_aix_broken_getaddrinfo=1
1352689f 222 AC_DEFINE(BROKEN_REALPATH)
3b8dff69 223 AC_DEFINE(SETEUID_BREAKS_SETUID)
224 AC_DEFINE(BROKEN_SETREUID)
225 AC_DEFINE(BROKEN_SETREGID)
a3cef3ca 226 dnl AIX handles lastlog as part of its login message
227 AC_DEFINE(DISABLE_LASTLOG)
58177c0a 228 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3a2b2b44 229 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
9d6b1b96 230 ;;
3c62e7eb 231*-*-cygwin*)
a52997bd 232 check_for_libcrypt_later=1
ffb8d130 233 LIBS="$LIBS /usr/lib/textmode.o"
3c62e7eb 234 AC_DEFINE(HAVE_CYGWIN)
7043a38d 235 AC_DEFINE(USE_PIPES)
3c62e7eb 236 AC_DEFINE(DISABLE_SHADOW)
3c62e7eb 237 AC_DEFINE(IP_TOS_IS_BROKEN)
3d114925 238 AC_DEFINE(NO_X11_UNIX_SOCKETS)
e6f15ed1 239 AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT)
94d8258b 240 AC_DEFINE(DISABLE_FD_PASSING)
3c62e7eb 241 ;;
d6fdb079 242*-*-dgux*)
243 AC_DEFINE(IP_TOS_IS_BROKEN)
0c6a72a5 244 AC_DEFINE(SETEUID_BREAKS_SETUID)
245 AC_DEFINE(BROKEN_SETREUID)
246 AC_DEFINE(BROKEN_SETREGID)
d6fdb079 247 ;;
39c98ef7 248*-*-darwin*)
33e2e066 249 AC_MSG_CHECKING(if we have working getaddrinfo)
250 AC_TRY_RUN([#include <mach-o/dyld.h>
251main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
252 exit(0);
253 else
254 exit(1);
255}], [AC_MSG_RESULT(working)],
256 [AC_MSG_RESULT(buggy)
257 AC_DEFINE(BROKEN_GETADDRINFO)],
b27e573d 258 [AC_MSG_RESULT(assume it is working)])
635e0c42 259 AC_DEFINE(SETEUID_BREAKS_SETUID)
260 AC_DEFINE(BROKEN_SETREUID)
261 AC_DEFINE(BROKEN_SETREGID)
ff620033 262 AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1)
39c98ef7 263 ;;
7d458c86 264*-*-hpux*)
265 # first we define all of the options common to all HP-UX releases
b8fea62d 266 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
44839801 267 IPADDR_IN_DISPLAY=yes
2b10f47a 268 AC_DEFINE(USE_PIPES)
a2572aa7 269 AC_DEFINE(LOGIN_NO_ENDOPT)
270 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3e6e3da0 271 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
3a2b2b44 272 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
f75ca46d 273 LIBS="$LIBS -lsec"
7d458c86 274 AC_CHECK_LIB(xnet, t_error, ,
275 AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
276
277 # next, we define all of the options specific to major releases
278 case "$host" in
279 *-*-hpux10*)
280 if test -z "$GCC"; then
281 CFLAGS="$CFLAGS -Ae"
282 fi
283 ;;
284 *-*-hpux11*)
285 AC_DEFINE(PAM_SUN_CODEBASE)
286 AC_DEFINE(DISABLE_UTMP)
287 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
288 check_for_hpux_broken_getaddrinfo=1
289 check_for_conflicting_getspnam=1
290 ;;
291 esac
292
293 # lastly, we define options specific to minor releases
294 case "$host" in
295 *-*-hpux10.26)
296 AC_DEFINE(HAVE_SECUREWARE)
297 disable_ptmx_check=yes
298 LIBS="$LIBS -lsecpw"
299 ;;
300 esac
2b763e31 301 ;;
d94aa2ae 302*-*-irix5*)
6ac7829a 303 PATH="$PATH:/usr/etc"
416ed5a7 304 AC_DEFINE(BROKEN_INET_NTOA)
cb433561 305 AC_DEFINE(SETEUID_BREAKS_SETUID)
306 AC_DEFINE(BROKEN_SETREUID)
307 AC_DEFINE(BROKEN_SETREGID)
0e8f4eba 308 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 309 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
b9795b89 310 ;;
311*-*-irix6*)
6ac7829a 312 PATH="$PATH:/usr/etc"
3206bb3b 313 AC_DEFINE(WITH_IRIX_ARRAY)
314 AC_DEFINE(WITH_IRIX_PROJECT)
315 AC_DEFINE(WITH_IRIX_AUDIT)
b5171f93 316 AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS)])
416ed5a7 317 AC_DEFINE(BROKEN_INET_NTOA)
412c0eaa 318 AC_DEFINE(SETEUID_BREAKS_SETUID)
319 AC_DEFINE(BROKEN_SETREUID)
320 AC_DEFINE(BROKEN_SETREGID)
3d59832f 321 AC_DEFINE(BROKEN_UPDWTMPX)
0e8f4eba 322 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 323 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
d94aa2ae 324 ;;
5cdfe03f 325*-*-linux*)
326 no_dev_ptmx=1
717057b6 327 check_for_libcrypt_later=1
eacb954e 328 check_for_openpty_ctty_bug=1
80faa19f 329 AC_DEFINE(DONT_TRY_OTHER_AF)
a8545c6c 330 AC_DEFINE(PAM_TTY_KLUDGE)
b90bed9f 331 AC_DEFINE(LOCKED_PASSWD_PREFIX, "!")
3a2b2b44 332 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
cd698186 333 AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM)
b6610e8f 334 AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
335 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
80faa19f 336 inet6_default_4in6=yes
bf7c1e6c 337 case `uname -r` in
ad84c479 338 1.*|2.0.*)
bf7c1e6c 339 AC_DEFINE(BROKEN_CMSG_TYPE)
340 ;;
bf7c1e6c 341 esac
5cdfe03f 342 ;;
66d6c27e 343mips-sony-bsd|mips-sony-newsos4)
35fc74ed 344 AC_DEFINE(NEED_SETPRGP, [], [Need setpgrp to acquire controlling tty])
66d6c27e 345 SONY=1
66d6c27e 346 ;;
d468fc76 347*-*-netbsd*)
33e2e066 348 check_for_libcrypt_before=1
82f4e93d 349 if test "x$withval" != "xno" ; then
e6354014 350 need_dash_r=1
351 fi
d468fc76 352 ;;
86b416a7 353*-*-freebsd*)
354 check_for_libcrypt_later=1
355 ;;
8707b7eb 356*-*-bsdi*)
357 AC_DEFINE(SETEUID_BREAKS_SETUID)
358 AC_DEFINE(BROKEN_SETREUID)
359 AC_DEFINE(BROKEN_SETREGID)
360 ;;
729bfe59 361*-next-*)
729bfe59 362 conf_lastlog_location="/usr/adm/lastlog"
698d107e 363 conf_utmp_location=/etc/utmp
364 conf_wtmp_location=/usr/adm/wtmp
365 MAIL=/usr/spool/mail
729bfe59 366 AC_DEFINE(HAVE_NEXT)
443172c4 367 AC_DEFINE(BROKEN_REALPATH)
00937921 368 AC_DEFINE(USE_PIPES)
86b416a7 369 AC_DEFINE(BROKEN_SAVED_UIDS)
729bfe59 370 ;;
5b7b5e23 371*-*-openbsd*)
372 AC_DEFINE(HAVE_ATTRIBUTE__SENTINEL__, 1, [OpenBSD's gcc has sentinel])
373 ;;
9d6b1b96 374*-*-solaris*)
82f4e93d 375 if test "x$withval" != "xno" ; then
010e9d5b 376 need_dash_r=1
377 fi
adeebd37 378 AC_DEFINE(PAM_SUN_CODEBASE)
7e2d5fa4 379 AC_DEFINE(LOGIN_NEEDS_UTMPX)
380 AC_DEFINE(LOGIN_NEEDS_TERM)
7f0a4ff1 381 AC_DEFINE(PAM_TTY_KLUDGE)
059d3165 382 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID)
3e6e3da0 383 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
ad84c479 384 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
385 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 386 external_path_file=/etc/default/login
1d7b9b20 387 # hardwire lastlog location (can't detect it on some versions)
388 conf_lastlog_location="/var/adm/lastlog"
32c80420 389 AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
390 sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
391 if test "$sol2ver" -ge 8; then
392 AC_MSG_RESULT(yes)
393 AC_DEFINE(DISABLE_UTMP)
394 AC_DEFINE(DISABLE_WTMP)
395 else
396 AC_MSG_RESULT(no)
397 fi
9d6b1b96 398 ;;
a423beaf 399*-*-sunos4*)
0c2fb82f 400 CPPFLAGS="$CPPFLAGS -DSUNOS4"
a423beaf 401 AC_CHECK_FUNCS(getpwanam)
adeebd37 402 AC_DEFINE(PAM_SUN_CODEBASE)
32eec038 403 conf_utmp_location=/etc/utmp
404 conf_wtmp_location=/var/adm/wtmp
405 conf_lastlog_location=/var/adm/lastlog
137d7b6c 406 AC_DEFINE(USE_PIPES)
a423beaf 407 ;;
6f68f28a 408*-ncr-sysv*)
98a7c37b 409 LIBS="$LIBS -lc89"
29525240 410 AC_DEFINE(USE_PIPES)
eabb99c6 411 AC_DEFINE(SSHD_ACQUIRES_CTTY)
6fb3618d 412 AC_DEFINE(SETEUID_BREAKS_SETUID)
413 AC_DEFINE(BROKEN_SETREUID)
414 AC_DEFINE(BROKEN_SETREGID)
6f68f28a 415 ;;
132dd316 416*-sni-sysv*)
c8c15bcb 417 # /usr/ucblib MUST NOT be searched on ReliantUNIX
e2798e96 418 AC_CHECK_LIB(dl, dlsym, ,)
85cf54ec 419 # -lresolv needs to be at then end of LIBS or DNS lookups break
420 AC_CHECK_LIB(res_query, resolv, [ LIBS="$LIBS -lresolv" ])
9548d6c8 421 IPADDR_IN_DISPLAY=yes
422 AC_DEFINE(USE_PIPES)
132dd316 423 AC_DEFINE(IP_TOS_IS_BROKEN)
605369bb 424 AC_DEFINE(SETEUID_BREAKS_SETUID)
425 AC_DEFINE(BROKEN_SETREUID)
426 AC_DEFINE(BROKEN_SETREGID)
eabb99c6 427 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 428 external_path_file=/etc/default/login
c8c15bcb 429 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
430 # Attention: always take care to bind libsocket and libnsl before libc,
431 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
132dd316 432 ;;
79a7ba96 433# UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
77bb0bca 434*-*-sysv4.2*)
ed6553e2 435 AC_DEFINE(USE_PIPES)
7ed101c0 436 AC_DEFINE(SETEUID_BREAKS_SETUID)
437 AC_DEFINE(BROKEN_SETREUID)
438 AC_DEFINE(BROKEN_SETREGID)
46f853b9 439 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
77bb0bca 440 ;;
79a7ba96 441# UnixWare 7.x, OpenUNIX 8
77bb0bca 442*-*-sysv5*)
ed6553e2 443 AC_DEFINE(USE_PIPES)
7ed101c0 444 AC_DEFINE(SETEUID_BREAKS_SETUID)
445 AC_DEFINE(BROKEN_SETREUID)
446 AC_DEFINE(BROKEN_SETREGID)
46f853b9 447 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
822015dd 448 case "$host" in
449 *-*-sysv5SCO_SV*) # SCO OpenServer 6.x
450 TEST_SHELL=/u95/bin/sh
451 ;;
452 esac
77bb0bca 453 ;;
9d6b1b96 454*-*-sysv*)
9d6b1b96 455 ;;
79a7ba96 456# SCO UNIX and OEM versions of SCO UNIX
77bb0bca 457*-*-sco3.2v4*)
11cf4f1f 458 AC_MSG_ERROR("This Platform is no longer supported.")
77bb0bca 459 ;;
79a7ba96 460# SCO OpenServer 5.x
77bb0bca 461*-*-sco3.2v5*)
21710e39 462 if test -z "$GCC"; then
463 CFLAGS="$CFLAGS -belf"
464 fi
ed6553e2 465 LIBS="$LIBS -lprot -lx -ltinfo -lm"
509b1f88 466 no_dev_ptmx=1
ed6553e2 467 AC_DEFINE(USE_PIPES)
6e879cb4 468 AC_DEFINE(HAVE_SECUREWARE)
d287c664 469 AC_DEFINE(DISABLE_SHADOW)
94d8258b 470 AC_DEFINE(DISABLE_FD_PASSING)
7ed101c0 471 AC_DEFINE(SETEUID_BREAKS_SETUID)
472 AC_DEFINE(BROKEN_SETREUID)
473 AC_DEFINE(BROKEN_SETREGID)
bcebad47 474 AC_DEFINE(WITH_ABBREV_NO_TTY)
34f2baf0 475 AC_DEFINE(BROKEN_UPDWTMPX)
3ade3b57 476 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
aca75d94 477 AC_CHECK_FUNCS(getluid setluid)
533875af 478 MANTYPE=man
a3245b92 479 TEST_SHELL=ksh
509b1f88 480 ;;
ccbb983c 481*-*-unicosmk*)
c1ad5966 482 AC_DEFINE(NO_SSH_LASTLOG)
483 AC_DEFINE(SETEUID_BREAKS_SETUID)
484 AC_DEFINE(BROKEN_SETREUID)
485 AC_DEFINE(BROKEN_SETREGID)
ccbb983c 486 AC_DEFINE(USE_PIPES)
487 AC_DEFINE(DISABLE_FD_PASSING)
488 LDFLAGS="$LDFLAGS"
489 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
490 MANTYPE=cat
d262b7f2 491 ;;
7b9a8c6e 492*-*-unicosmp*)
c1ad5966 493 AC_DEFINE(SETEUID_BREAKS_SETUID)
494 AC_DEFINE(BROKEN_SETREUID)
495 AC_DEFINE(BROKEN_SETREGID)
7b9a8c6e 496 AC_DEFINE(WITH_ABBREV_NO_TTY)
497 AC_DEFINE(USE_PIPES)
498 AC_DEFINE(DISABLE_FD_PASSING)
499 LDFLAGS="$LDFLAGS"
c1ad5966 500 LIBS="$LIBS -lgen -lacid -ldb"
7b9a8c6e 501 MANTYPE=cat
502 ;;
ca5c7d6a 503*-*-unicos*)
c1ad5966 504 AC_DEFINE(SETEUID_BREAKS_SETUID)
505 AC_DEFINE(BROKEN_SETREUID)
506 AC_DEFINE(BROKEN_SETREGID)
ca5c7d6a 507 AC_DEFINE(USE_PIPES)
94d8258b 508 AC_DEFINE(DISABLE_FD_PASSING)
ef51930f 509 AC_DEFINE(NO_SSH_LASTLOG)
ccbb983c 510 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
511 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
512 MANTYPE=cat
a704dd54 513 ;;
4d33e531 514*-dec-osf*)
99c8ddac 515 AC_MSG_CHECKING(for Digital Unix SIA)
516 no_osfsia=""
517 AC_ARG_WITH(osfsia,
518 [ --with-osfsia Enable Digital Unix SIA],
519 [
520 if test "x$withval" = "xno" ; then
521 AC_MSG_RESULT(disabled)
522 no_osfsia=1
523 fi
524 ],
525 )
526 if test -z "$no_osfsia" ; then
4d33e531 527 if test -f /etc/sia/matrix.conf; then
528 AC_MSG_RESULT(yes)
529 AC_DEFINE(HAVE_OSF_SIA)
530 AC_DEFINE(DISABLE_LOGIN)
58d0df4e 531 AC_DEFINE(DISABLE_FD_PASSING)
4d33e531 532 LIBS="$LIBS -lsecurity -ldb -lm -laud"
533 else
534 AC_MSG_RESULT(no)
dbf8efb3 535 AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin")
4d33e531 536 fi
537 fi
a6e67b60 538 AC_DEFINE(BROKEN_GETADDRINFO)
f4f2ff4f 539 AC_DEFINE(SETEUID_BREAKS_SETUID)
08da2d08 540 AC_DEFINE(BROKEN_SETREUID)
541 AC_DEFINE(BROKEN_SETREGID)
4d33e531 542 ;;
41cb4569 543
544*-*-nto-qnx)
545 AC_DEFINE(USE_PIPES)
546 AC_DEFINE(NO_X11_UNIX_SOCKETS)
547 AC_DEFINE(MISSING_NFDBITS)
548 AC_DEFINE(MISSING_HOWMANY)
549 AC_DEFINE(MISSING_FD_MASK)
550 ;;
35fc74ed 551
552*-*-ultrix*)
553 AC_DEFINE(BROKEN_GETGROUPS, [], [getgroups(0,NULL) will return -1])
554 AC_DEFINE(BROKEN_MMAP, [], [Ultrix mmap can't map files])
555 AC_DEFINE(NEED_SETPRGP, [], [Need setpgrp to acquire controlling tty])
b5765e1d 556 AC_DEFINE(HAVE_SYS_SYSLOG_H, 1, [Force use of sys/syslog.h on Ultrix])
557 ;;
a7effaac 558esac
559
8e7b16f8 560# Allow user to specify flags
561AC_ARG_WITH(cflags,
562 [ --with-cflags Specify additional flags to pass to compiler],
563 [
6cf0200f 564 if test -n "$withval" && test "x$withval" != "xno" && \
565 test "x${withval}" != "xyes"; then
8e7b16f8 566 CFLAGS="$CFLAGS $withval"
567 fi
82f4e93d 568 ]
8e7b16f8 569)
0c2fb82f 570AC_ARG_WITH(cppflags,
571 [ --with-cppflags Specify additional flags to pass to preprocessor] ,
572 [
6cf0200f 573 if test -n "$withval" && test "x$withval" != "xno" && \
574 test "x${withval}" != "xyes"; then
0c2fb82f 575 CPPFLAGS="$CPPFLAGS $withval"
576 fi
577 ]
578)
8e7b16f8 579AC_ARG_WITH(ldflags,
97b378bf 580 [ --with-ldflags Specify additional flags to pass to linker],
8e7b16f8 581 [
6cf0200f 582 if test -n "$withval" && test "x$withval" != "xno" && \
583 test "x${withval}" != "xyes"; then
8e7b16f8 584 LDFLAGS="$LDFLAGS $withval"
585 fi
82f4e93d 586 ]
8e7b16f8 587)
588AC_ARG_WITH(libs,
589 [ --with-libs Specify additional libraries to link with],
590 [
6cf0200f 591 if test -n "$withval" && test "x$withval" != "xno" && \
592 test "x${withval}" != "xyes"; then
8e7b16f8 593 LIBS="$LIBS $withval"
594 fi
82f4e93d 595 ]
8e7b16f8 596)
ed89c848 597AC_ARG_WITH(Werror,
598 [ --with-Werror Build main code with -Werror],
599 [
600 if test -n "$withval" && test "x$withval" != "xno"; then
601 werror_flags="-Werror"
602 if "x${withval}" != "xyes"; then
603 werror_flags="$withval"
604 fi
605 fi
606 ]
607)
8e7b16f8 608
c5829391 609AC_MSG_CHECKING(compiler and flags for sanity)
479cece8 610AC_RUN_IFELSE(
611 [AC_LANG_SOURCE([
c5829391 612#include <stdio.h>
613int main(){exit(0);}
479cece8 614 ])],
c5829391 615 [ AC_MSG_RESULT(yes) ],
616 [
617 AC_MSG_RESULT(no)
618 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
1a01a50c 619 ],
620 [ AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
c5829391 621)
622
b04a9f8c 623dnl Checks for header files.
624AC_CHECK_HEADERS( \
625 bstring.h \
626 crypt.h \
627 dirent.h \
628 endian.h \
629 features.h \
630 floatingpoint.h \
631 getopt.h \
632 glob.h \
633 ia.h \
634 lastlog.h \
635 limits.h \
636 login.h \
637 login_cap.h \
638 maillock.h \
639 ndir.h \
640 netdb.h \
641 netgroup.h \
642 netinet/in_systm.h \
643 pam/pam_appl.h \
644 paths.h \
645 pty.h \
646 readpassphrase.h \
647 rpc/types.h \
648 security/pam_appl.h \
649 shadow.h \
650 stddef.h \
651 stdint.h \
0957c2cf 652 string.h \
b04a9f8c 653 strings.h \
654 sys/audit.h \
655 sys/bitypes.h \
656 sys/bsdtty.h \
657 sys/cdefs.h \
658 sys/dir.h \
659 sys/mman.h \
660 sys/ndir.h \
661 sys/prctl.h \
662 sys/pstat.h \
663 sys/select.h \
664 sys/stat.h \
665 sys/stream.h \
666 sys/stropts.h \
667 sys/strtio.h \
668 sys/sysmacros.h \
669 sys/time.h \
670 sys/timers.h \
671 sys/un.h \
672 time.h \
673 tmpdir.h \
674 ttyent.h \
25dd2ce6 675 unistd.h \
b04a9f8c 676 usersec.h \
677 util.h \
678 utime.h \
679 utmp.h \
680 utmpx.h \
ea76f54c 681 vis.h \
b04a9f8c 682)
ddceb1c8 683
765a24cd 684# sys/ptms.h requires sys/stream.h to be included first on Solaris
685AC_CHECK_HEADERS(sys/ptms.h, [], [], [
686#ifdef HAVE_SYS_STREAM_H
687# include <sys/stream.h>
688#endif
689])
690
a0391976 691# Checks for libraries.
98a7c37b 692AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
693AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
2c523de9 694
446227d6 695dnl IRIX and Solaris 2.5.1 have dirname() in libgen
696AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
697 AC_CHECK_LIB(gen, dirname,[
698 AC_CACHE_CHECK([for broken dirname],
699 ac_cv_have_broken_dirname, [
700 save_LIBS="$LIBS"
701 LIBS="$LIBS -lgen"
702 AC_TRY_RUN(
703 [
704#include <libgen.h>
705#include <string.h>
706
707int main(int argc, char **argv) {
708 char *s, buf[32];
709
710 strncpy(buf,"/etc", 32);
711 s = dirname(buf);
712 if (!s || strncmp(s, "/", 32) != 0) {
713 exit(1);
714 } else {
715 exit(0);
716 }
717}
718 ],
719 [ ac_cv_have_broken_dirname="no" ],
720 [ ac_cv_have_broken_dirname="yes" ]
721 )
722 LIBS="$save_LIBS"
723 ])
724 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
725 LIBS="$LIBS -lgen"
726 AC_DEFINE(HAVE_DIRNAME)
727 AC_CHECK_HEADERS(libgen.h)
728 fi
729 ])
730])
731
732AC_CHECK_FUNC(getspnam, ,
733 AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
734AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME))
735
98a7c37b 736dnl zlib is required
737AC_ARG_WITH(zlib,
738 [ --with-zlib=PATH Use zlib in PATH],
6dd05556 739 [ if test "x$withval" = "xno" ; then
740 AC_MSG_ERROR([*** zlib is required ***])
741 elif test "x$withval" != "xyes"; then
98a7c37b 742 if test -d "$withval/lib"; then
743 if test -n "${need_dash_r}"; then
5a162955 744 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 745 else
5a162955 746 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 747 fi
748 else
749 if test -n "${need_dash_r}"; then
5a162955 750 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 751 else
5a162955 752 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 753 fi
754 fi
755 if test -d "$withval/include"; then
5a162955 756 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 757 else
5a162955 758 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 759 fi
6dd05556 760 fi ]
98a7c37b 761)
762
0a15d73b 763AC_CHECK_LIB(z, deflate, ,
764 [
765 saved_CPPFLAGS="$CPPFLAGS"
766 saved_LDFLAGS="$LDFLAGS"
767 save_LIBS="$LIBS"
768 dnl Check default zlib install dir
769 if test -n "${need_dash_r}"; then
770 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
771 else
772 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
773 fi
774 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
775 LIBS="$LIBS -lz"
776 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
777 [
778 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
779 ]
780 )
781 ]
782)
4ad65809 783AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
8068d564 784
785AC_ARG_WITH(zlib-version-check,
786 [ --without-zlib-version-check Disable zlib version check],
787 [ if test "x$withval" = "xno" ; then
788 zlib_check_nonfatal=1
789 fi
790 ]
791)
792
5c7fc85d 793AC_MSG_CHECKING(for possibly buggy zlib)
479cece8 794AC_RUN_IFELSE([AC_LANG_SOURCE([[
5c7fc85d 795#include <stdio.h>
4ad65809 796#include <zlib.h>
797int main()
798{
5c7fc85d 799 int a=0, b=0, c=0, d=0, n, v;
800 n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
801 if (n != 3 && n != 4)
4ad65809 802 exit(1);
5c7fc85d 803 v = a*1000000 + b*10000 + c*100 + d;
804 fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
805
806 /* 1.1.4 is OK */
807 if (a == 1 && b == 1 && c >= 4)
4ad65809 808 exit(0);
5c7fc85d 809
0072b59d 810 /* 1.2.3 and up are OK */
811 if (v >= 1020300)
5c7fc85d 812 exit(0);
813
4ad65809 814 exit(2);
815}
479cece8 816 ]])],
5c7fc85d 817 AC_MSG_RESULT(no),
818 [ AC_MSG_RESULT(yes)
8068d564 819 if test -z "$zlib_check_nonfatal" ; then
820 AC_MSG_ERROR([*** zlib too old - check config.log ***
821Your reported zlib version has known security problems. It's possible your
822vendor has fixed these problems without changing the version number. If you
823are sure this is the case, you can disable the check by running
824"./configure --without-zlib-version-check".
6090bcfe 825If you are in doubt, upgrade zlib to version 1.2.3 or greater.
5c7fc85d 826See http://www.gzip.org/zlib/ for details.])
8068d564 827 else
828 AC_MSG_WARN([zlib version may have security problems])
829 fi
1a01a50c 830 ],
831 [ AC_MSG_WARN([cross compiling: not checking zlib version]) ]
4ad65809 832)
48e7916f 833
2c523de9 834dnl UnixWare 2.x
aff51935 835AC_CHECK_FUNC(strcasecmp,
2c523de9 836 [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
837)
aff51935 838AC_CHECK_FUNC(utimes,
cda1ebcb 839 [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
840 LIBS="$LIBS -lc89"]) ]
2c523de9 841)
4cca272e 842
7c6d759d 843dnl Checks for libutil functions
844AC_CHECK_HEADERS(libutil.h)
845AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN)])
846AC_CHECK_FUNCS(logout updwtmp logwtmp)
847
a738c3b0 848AC_FUNC_STRFTIME
849
84ceda19 850# Check for ALTDIRFUNC glob() extension
851AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
852AC_EGREP_CPP(FOUNDIT,
853 [
854 #include <glob.h>
855 #ifdef GLOB_ALTDIRFUNC
856 FOUNDIT
857 #endif
aff51935 858 ],
84ceda19 859 [
860 AC_DEFINE(GLOB_HAS_ALTDIRFUNC)
861 AC_MSG_RESULT(yes)
862 ],
863 [
864 AC_MSG_RESULT(no)
865 ]
866)
4cca272e 867
40849fdb 868# Check for g.gl_matchc glob() extension
869AC_MSG_CHECKING(for gl_matchc field in glob_t)
870AC_EGREP_CPP(FOUNDIT,
aff51935 871 [
872 #include <glob.h>
40849fdb 873 int main(void){glob_t g; g.gl_matchc = 1;}
aff51935 874 ],
875 [
876 AC_DEFINE(GLOB_HAS_GL_MATCHC)
877 AC_MSG_RESULT(yes)
878 ],
879 [
880 AC_MSG_RESULT(no)
881 ]
40849fdb 882)
883
edbe6722 884AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
1a01a50c 885AC_RUN_IFELSE(
479cece8 886 [AC_LANG_SOURCE([[
edbe6722 887#include <sys/types.h>
888#include <dirent.h>
aec4cb4f 889int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
479cece8 890 ]])],
aff51935 891 [AC_MSG_RESULT(yes)],
edbe6722 892 [
893 AC_MSG_RESULT(no)
894 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
1a01a50c 895 ],
82f4e93d 896 [
1a01a50c 897 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
898 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
edbe6722 899 ]
900)
901
419e26e7 902AC_MSG_CHECKING([for /proc/pid/fd directory])
903if test -d "/proc/$$/fd" ; then
904 AC_DEFINE(HAVE_PROC_PID)
905 AC_MSG_RESULT(yes)
906else
907 AC_MSG_RESULT(no)
908fi
909
278588d8 910# Check whether user wants S/Key support
aff51935 911SKEY_MSG="no"
278588d8 912AC_ARG_WITH(skey,
6ff3d0dc 913 [ --with-skey[[=PATH]] Enable S/Key support (optionally in PATH)],
278588d8 914 [
915 if test "x$withval" != "xno" ; then
916
917 if test "x$withval" != "xyes" ; then
918 CPPFLAGS="$CPPFLAGS -I${withval}/include"
919 LDFLAGS="$LDFLAGS -L${withval}/lib"
920 fi
921
922 AC_DEFINE(SKEY)
923 LIBS="-lskey $LIBS"
aff51935 924 SKEY_MSG="yes"
82f4e93d 925
ddceb1c8 926 AC_MSG_CHECKING([for s/key support])
927 AC_TRY_RUN(
928 [
929#include <stdio.h>
930#include <skey.h>
aec4cb4f 931int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
ddceb1c8 932 ],
933 [AC_MSG_RESULT(yes)],
278588d8 934 [
ddceb1c8 935 AC_MSG_RESULT(no)
278588d8 936 AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
937 ])
141fc639 938 AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
939 AC_TRY_COMPILE(
940 [#include <stdio.h>
941 #include <skey.h>],
942 [(void)skeychallenge(NULL,"name","",0);],
943 [AC_MSG_RESULT(yes)
944 AC_DEFINE(SKEYCHALLENGE_4ARG)],
945 [AC_MSG_RESULT(no)]
946 )
278588d8 947 fi
948 ]
949)
950
951# Check whether user wants TCP wrappers support
98a7c37b 952TCPW_MSG="no"
278588d8 953AC_ARG_WITH(tcp-wrappers,
6ff3d0dc 954 [ --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
278588d8 955 [
956 if test "x$withval" != "xno" ; then
957 saved_LIBS="$LIBS"
98a7c37b 958 saved_LDFLAGS="$LDFLAGS"
959 saved_CPPFLAGS="$CPPFLAGS"
4b492aab 960 if test -n "${withval}" && \
6cf0200f 961 test "x${withval}" != "xyes"; then
98a7c37b 962 if test -d "${withval}/lib"; then
963 if test -n "${need_dash_r}"; then
5a162955 964 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 965 else
5a162955 966 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 967 fi
968 else
969 if test -n "${need_dash_r}"; then
5a162955 970 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 971 else
5a162955 972 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 973 fi
974 fi
975 if test -d "${withval}/include"; then
5a162955 976 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 977 else
5a162955 978 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 979 fi
98a7c37b 980 fi
ddceb1c8 981 LIBWRAP="-lwrap"
982 LIBS="$LIBWRAP $LIBS"
278588d8 983 AC_MSG_CHECKING(for libwrap)
984 AC_TRY_LINK(
985 [
77f09220 986#include <sys/types.h>
987#include <sys/socket.h>
988#include <netinet/in.h>
278588d8 989#include <tcpd.h>
990 int deny_severity = 0, allow_severity = 0;
991 ],
992 [hosts_access(0);],
993 [
994 AC_MSG_RESULT(yes)
995 AC_DEFINE(LIBWRAP)
ddceb1c8 996 AC_SUBST(LIBWRAP)
98a7c37b 997 TCPW_MSG="yes"
278588d8 998 ],
999 [
1000 AC_MSG_ERROR([*** libwrap missing])
1001 ]
1002 )
ddceb1c8 1003 LIBS="$saved_LIBS"
278588d8 1004 fi
1005 ]
1006)
1007
59031773 1008# Check whether user wants libedit support
1009LIBEDIT_MSG="no"
1010AC_ARG_WITH(libedit,
6ff3d0dc 1011 [ --with-libedit[[=PATH]] Enable libedit support for sftp],
59031773 1012 [ if test "x$withval" != "xno" ; then
737edf04 1013 if test "x$withval" != "xyes"; then
1014 CPPFLAGS="$CPPFLAGS -I$withval/include"
1015 LDFLAGS="$LDFLAGS -L$withval/lib"
1016 fi
59031773 1017 AC_CHECK_LIB(edit, el_init,
1018 [ AC_DEFINE(USE_LIBEDIT, [], [Use libedit for sftp])
1019 LIBEDIT="-ledit -lcurses"
1020 LIBEDIT_MSG="yes"
1021 AC_SUBST(LIBEDIT)
1022 ],
737edf04 1023 [ AC_MSG_ERROR(libedit not found) ],
1024 [ -lcurses ]
59031773 1025 )
1026 fi ]
1027)
1028
7b578f7d 1029AUDIT_MODULE=none
1030AC_ARG_WITH(audit,
1031 [ --with-audit=module Enable EXPERIMENTAL audit support (modules=debug,bsm)],
1032 [
1033 AC_MSG_CHECKING(for supported audit module)
1034 case "$withval" in
1035 bsm)
1036 AC_MSG_RESULT(bsm)
1037 AUDIT_MODULE=bsm
1038 dnl Checks for headers, libs and functions
1039 AC_CHECK_HEADERS(bsm/audit.h, [],
1040 [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)])
1041 AC_CHECK_LIB(bsm, getaudit, [],
1042 [AC_MSG_ERROR(BSM enabled and required library not found)])
1043 AC_CHECK_FUNCS(getaudit, [],
1044 [AC_MSG_ERROR(BSM enabled and required function not found)])
1045 # These are optional
7939c496 1046 AC_CHECK_FUNCS(getaudit_addr)
7b578f7d 1047 AC_DEFINE(USE_BSM_AUDIT, [], [Use BSM audit module])
1048 ;;
1049 debug)
1050 AUDIT_MODULE=debug
1051 AC_MSG_RESULT(debug)
1052 AC_DEFINE(SSH_AUDIT_EVENTS, [], Use audit debugging module)
1053 ;;
1054 *)
1055 AC_MSG_ERROR([Unknown audit module $withval])
1056 ;;
1057 esac ]
1058)
1059
19160674 1060dnl Checks for library functions. Please keep in alphabetical order
b04a9f8c 1061AC_CHECK_FUNCS( \
1062 arc4random \
1063 b64_ntop \
1064 __b64_ntop \
1065 b64_pton \
1066 __b64_pton \
1067 bcopy \
1068 bindresvport_sa \
1069 clock \
1070 closefrom \
1071 dirfd \
1072 fchdir \
1073 fchmod \
1074 fchown \
1075 freeaddrinfo \
1076 futimes \
1077 getaddrinfo \
1078 getcwd \
1079 getgrouplist \
1080 getnameinfo \
1081 getopt \
1082 getpeereid \
1083 _getpty \
1084 getrlimit \
1085 getttyent \
1086 glob \
1087 inet_aton \
1088 inet_ntoa \
1089 inet_ntop \
1090 innetgr \
1091 login_getcapbool \
1092 md5_crypt \
1093 memmove \
1094 mkdtemp \
1095 mmap \
1096 ngetaddrinfo \
1097 nsleep \
1098 ogetaddrinfo \
1099 openlog_r \
1100 openpty \
1101 prctl \
1102 pstat \
1103 readpassphrase \
1104 realpath \
1105 recvmsg \
1106 rresvport_af \
1107 sendmsg \
1108 setdtablesize \
1109 setegid \
1110 setenv \
1111 seteuid \
1112 setgroups \
1113 setlogin \
1114 setpcred \
1115 setproctitle \
1116 setregid \
1117 setreuid \
1118 setrlimit \
1119 setsid \
1120 setvbuf \
1121 sigaction \
1122 sigvec \
1123 snprintf \
1124 socketpair \
1125 strdup \
1126 strerror \
1127 strlcat \
1128 strlcpy \
1129 strmode \
1130 strnvis \
1131 strtonum \
1e29a0c8 1132 strtoll \
b04a9f8c 1133 strtoul \
1134 sysconf \
1135 tcgetpgrp \
1136 truncate \
1137 unsetenv \
1138 updwtmpx \
1139 utimes \
1140 vhangup \
1141 vsnprintf \
1142 waitpid \
19160674 1143)
98a7c37b 1144
1a086f97 1145# IRIX has a const char return value for gai_strerror()
1146AC_CHECK_FUNCS(gai_strerror,[
1147 AC_DEFINE(HAVE_GAI_STRERROR)
1148 AC_TRY_COMPILE([
1149#include <sys/types.h>
1150#include <sys/socket.h>
1151#include <netdb.h>
1152
1153const char *gai_strerror(int);],[
1154char *str;
1155
1156str = gai_strerror(0);],[
1157 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
1158 [Define if gai_strerror() returns const char *])])])
1159
92b1decf 1160AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP))
1161
309709db 1162dnl Make sure prototypes are defined for these before using them.
309709db 1163AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
0957c2cf 1164AC_CHECK_DECL(strsep,
1165 [AC_CHECK_FUNCS(strsep)],
1166 [],
1167 [
1168#ifdef HAVE_STRING_H
1169# include <string.h>
1170#endif
1171 ])
08412d26 1172
3490699c 1173dnl tcsendbreak might be a macro
1174AC_CHECK_DECL(tcsendbreak,
1175 [AC_DEFINE(HAVE_TCSENDBREAK)],
aff51935 1176 [AC_CHECK_FUNCS(tcsendbreak)],
3490699c 1177 [#include <termios.h>]
1178)
1179
41e0e158 1180AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
1181
3f176010 1182AC_CHECK_FUNCS(setresuid, [
1183 dnl Some platorms have setresuid that isn't implemented, test for this
1184 AC_MSG_CHECKING(if setresuid seems to work)
479cece8 1185 AC_RUN_IFELSE(
1186 [AC_LANG_SOURCE([[
9a3fe0e2 1187#include <stdlib.h>
1188#include <errno.h>
1189int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 1190 ]])],
3f176010 1191 [AC_MSG_RESULT(yes)],
24a9171d 1192 [AC_DEFINE(BROKEN_SETRESUID)
1a01a50c 1193 AC_MSG_RESULT(not implemented)],
1194 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 1195 )
1196])
9a3fe0e2 1197
3f176010 1198AC_CHECK_FUNCS(setresgid, [
1199 dnl Some platorms have setresgid that isn't implemented, test for this
1200 AC_MSG_CHECKING(if setresgid seems to work)
479cece8 1201 AC_RUN_IFELSE(
1202 [AC_LANG_SOURCE([[
9a3fe0e2 1203#include <stdlib.h>
1204#include <errno.h>
1205int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 1206 ]])],
3f176010 1207 [AC_MSG_RESULT(yes)],
1208 [AC_DEFINE(BROKEN_SETRESGID)
1a01a50c 1209 AC_MSG_RESULT(not implemented)],
1210 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 1211 )
1212])
9a3fe0e2 1213
2e73a022 1214dnl Checks for time functions
1d7b9b20 1215AC_CHECK_FUNCS(gettimeofday time)
2e73a022 1216dnl Checks for utmp functions
b03bd394 1217AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1d7b9b20 1218AC_CHECK_FUNCS(utmpname)
2e73a022 1219dnl Checks for utmpx functions
b03bd394 1220AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1d7b9b20 1221AC_CHECK_FUNCS(setutxent utmpxname)
76cd7316 1222
aff51935 1223AC_CHECK_FUNC(daemon,
beb43d31 1224 [AC_DEFINE(HAVE_DAEMON)],
1225 [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
1226)
1227
aff51935 1228AC_CHECK_FUNC(getpagesize,
aa6bd60a 1229 [AC_DEFINE(HAVE_GETPAGESIZE)],
1230 [AC_CHECK_LIB(ucb, getpagesize, [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
1231)
1232
2647ae26 1233# Check for broken snprintf
1234if test "x$ac_cv_func_snprintf" = "xyes" ; then
1235 AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1a01a50c 1236 AC_RUN_IFELSE(
479cece8 1237 [AC_LANG_SOURCE([[
2647ae26 1238#include <stdio.h>
aec4cb4f 1239int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
479cece8 1240 ]])],
aff51935 1241 [AC_MSG_RESULT(yes)],
2647ae26 1242 [
1243 AC_MSG_RESULT(no)
1244 AC_DEFINE(BROKEN_SNPRINTF)
1245 AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1a01a50c 1246 ],
1247 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
2647ae26 1248 )
1249fi
1250
2f6f9cff 1251# Check for missing getpeereid (or equiv) support
1252NO_PEERCHECK=""
1253if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1254 AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1255 AC_TRY_COMPILE(
1256 [#include <sys/types.h>
1257 #include <sys/socket.h>],
1258 [int i = SO_PEERCRED;],
62eb7db4 1259 [ AC_MSG_RESULT(yes)
1260 AC_DEFINE(HAVE_SO_PEERCRED, [], [Have PEERCRED socket option])
1261 ],
2f6f9cff 1262 [AC_MSG_RESULT(no)
1263 NO_PEERCHECK=1]
1264 )
1265fi
1266
70e7d0b0 1267dnl see whether mkstemp() requires XXXXXX
1268if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1269AC_MSG_CHECKING([for (overly) strict mkstemp])
1270AC_TRY_RUN(
1271 [
1272#include <stdlib.h>
1273main() { char template[]="conftest.mkstemp-test";
1274if (mkstemp(template) == -1)
1275 exit(1);
1276unlink(template); exit(0);
1277}
1278 ],
1279 [
1280 AC_MSG_RESULT(no)
1281 ],
aff51935 1282 [
70e7d0b0 1283 AC_MSG_RESULT(yes)
1284 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1285 ],
1286 [
1287 AC_MSG_RESULT(yes)
1288 AC_DEFINE(HAVE_STRICT_MKSTEMP)
aff51935 1289 ]
70e7d0b0 1290)
1291fi
1292
eacb954e 1293dnl make sure that openpty does not reacquire controlling terminal
1294if test ! -z "$check_for_openpty_ctty_bug"; then
1295 AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1296 AC_TRY_RUN(
1297 [
1298#include <stdio.h>
1299#include <sys/fcntl.h>
1300#include <sys/types.h>
1301#include <sys/wait.h>
1302
1303int
1304main()
1305{
1306 pid_t pid;
1307 int fd, ptyfd, ttyfd, status;
1308
1309 pid = fork();
1310 if (pid < 0) { /* failed */
1311 exit(1);
1312 } else if (pid > 0) { /* parent */
1313 waitpid(pid, &status, 0);
aff51935 1314 if (WIFEXITED(status))
eacb954e 1315 exit(WEXITSTATUS(status));
1316 else
1317 exit(2);
1318 } else { /* child */
1319 close(0); close(1); close(2);
1320 setsid();
1321 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1322 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1323 if (fd >= 0)
1324 exit(3); /* Acquired ctty: broken */
1325 else
1326 exit(0); /* Did not acquire ctty: OK */
1327 }
1328}
1329 ],
1330 [
1331 AC_MSG_RESULT(yes)
1332 ],
1333 [
1334 AC_MSG_RESULT(no)
1335 AC_DEFINE(SSHD_ACQUIRES_CTTY)
1336 ]
1337 )
1338fi
1339
4b492aab 1340if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1341 test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
2fe51906 1342 AC_MSG_CHECKING(if getaddrinfo seems to work)
1343 AC_TRY_RUN(
1344 [
1345#include <stdio.h>
1346#include <sys/socket.h>
1347#include <netdb.h>
1348#include <errno.h>
1349#include <netinet/in.h>
1350
1351#define TEST_PORT "2222"
1352
1353int
1354main(void)
1355{
1356 int err, sock;
1357 struct addrinfo *gai_ai, *ai, hints;
1358 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1359
1360 memset(&hints, 0, sizeof(hints));
1361 hints.ai_family = PF_UNSPEC;
1362 hints.ai_socktype = SOCK_STREAM;
1363 hints.ai_flags = AI_PASSIVE;
1364
1365 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1366 if (err != 0) {
1367 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1368 exit(1);
1369 }
1370
1371 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1372 if (ai->ai_family != AF_INET6)
1373 continue;
1374
1375 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1376 sizeof(ntop), strport, sizeof(strport),
1377 NI_NUMERICHOST|NI_NUMERICSERV);
1378
1379 if (err != 0) {
1380 if (err == EAI_SYSTEM)
1381 perror("getnameinfo EAI_SYSTEM");
1382 else
1383 fprintf(stderr, "getnameinfo failed: %s\n",
1384 gai_strerror(err));
1385 exit(2);
1386 }
1387
1388 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1389 if (sock < 0)
1390 perror("socket");
1391 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1392 if (errno == EBADF)
1393 exit(3);
1394 }
1395 }
1396 exit(0);
1397}
1398 ],
1399 [
1400 AC_MSG_RESULT(yes)
1401 ],
1402 [
1403 AC_MSG_RESULT(no)
1404 AC_DEFINE(BROKEN_GETADDRINFO)
1405 ]
1406 )
1407fi
1408
4b492aab 1409if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1410 test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
5ccf88cb 1411 AC_MSG_CHECKING(if getaddrinfo seems to work)
1412 AC_TRY_RUN(
1413 [
1414#include <stdio.h>
1415#include <sys/socket.h>
1416#include <netdb.h>
1417#include <errno.h>
1418#include <netinet/in.h>
1419
1420#define TEST_PORT "2222"
1421
1422int
1423main(void)
1424{
1425 int err, sock;
1426 struct addrinfo *gai_ai, *ai, hints;
1427 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1428
1429 memset(&hints, 0, sizeof(hints));
1430 hints.ai_family = PF_UNSPEC;
1431 hints.ai_socktype = SOCK_STREAM;
1432 hints.ai_flags = AI_PASSIVE;
1433
1434 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1435 if (err != 0) {
1436 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1437 exit(1);
1438 }
1439
1440 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1441 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1442 continue;
1443
1444 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1445 sizeof(ntop), strport, sizeof(strport),
1446 NI_NUMERICHOST|NI_NUMERICSERV);
1447
1448 if (ai->ai_family == AF_INET && err != 0) {
1449 perror("getnameinfo");
1450 exit(2);
1451 }
1452 }
1453 exit(0);
1454}
1455 ],
1456 [
1457 AC_MSG_RESULT(yes)
1458 AC_DEFINE(AIX_GETNAMEINFO_HACK, [],
1459[Define if you have a getaddrinfo that fails for the all-zeros IPv6 address])
1460 ],
1461 [
1462 AC_MSG_RESULT(no)
1463 AC_DEFINE(BROKEN_GETADDRINFO)
1464 ]
1465 )
1466fi
1467
b29fd59f 1468if test "x$check_for_conflicting_getspnam" = "x1"; then
1469 AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1470 AC_COMPILE_IFELSE(
1471 [
1472#include <shadow.h>
1473int main(void) {exit(0);}
1474 ],
1475 [
1476 AC_MSG_RESULT(no)
1477 ],
1478 [
1479 AC_MSG_RESULT(yes)
1480 AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1481 [Conflicting defs for getspnam])
1482 ]
1483 )
1484fi
1485
7f8f5e00 1486AC_FUNC_GETPGRP
1487
717057b6 1488# Check for PAM libs
cbd7492e 1489PAM_MSG="no"
a0391976 1490AC_ARG_WITH(pam,
717057b6 1491 [ --with-pam Enable PAM support ],
a0391976 1492 [
717057b6 1493 if test "x$withval" != "xno" ; then
2511d104 1494 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
1495 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
717057b6 1496 AC_MSG_ERROR([PAM headers not found])
1497 fi
a0391976 1498
717057b6 1499 AC_CHECK_LIB(dl, dlopen, , )
1500 AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
1501 AC_CHECK_FUNCS(pam_getenvlist)
749560dd 1502 AC_CHECK_FUNCS(pam_putenv)
2b763e31 1503
717057b6 1504 PAM_MSG="yes"
4cb5ffa0 1505
717057b6 1506 AC_DEFINE(USE_PAM)
98f2d9d5 1507 if test $ac_cv_lib_dl_dlopen = yes; then
1508 LIBPAM="-lpam -ldl"
1509 else
1510 LIBPAM="-lpam"
1511 fi
1512 AC_SUBST(LIBPAM)
717057b6 1513 fi
1514 ]
1515)
cbd7492e 1516
717057b6 1517# Check for older PAM
1518if test "x$PAM_MSG" = "xyes" ; then
a0391976 1519 # Check PAM strerror arguments (old PAM)
1520 AC_MSG_CHECKING([whether pam_strerror takes only one argument])
1521 AC_TRY_COMPILE(
1522 [
18ba2aab 1523#include <stdlib.h>
2511d104 1524#if defined(HAVE_SECURITY_PAM_APPL_H)
18ba2aab 1525#include <security/pam_appl.h>
2511d104 1526#elif defined (HAVE_PAM_PAM_APPL_H)
1527#include <pam/pam_appl.h>
1528#endif
aff51935 1529 ],
1530 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
a0391976 1531 [AC_MSG_RESULT(no)],
1532 [
1533 AC_DEFINE(HAVE_OLD_PAM)
1534 AC_MSG_RESULT(yes)
cbd7492e 1535 PAM_MSG="yes (old library)"
a0391976 1536 ]
717057b6 1537 )
a0391976 1538fi
1539
5b991353 1540# Search for OpenSSL
1541saved_CPPFLAGS="$CPPFLAGS"
1542saved_LDFLAGS="$LDFLAGS"
a0391976 1543AC_ARG_WITH(ssl-dir,
1544 [ --with-ssl-dir=PATH Specify path to OpenSSL installation ],
1545 [
e9e4a1c7 1546 if test "x$withval" != "xno" ; then
99eb0f64 1547 case "$withval" in
1548 # Relative paths
1549 ./*|../*) withval="`pwd`/$withval"
1550 esac
5b991353 1551 if test -d "$withval/lib"; then
1552 if test -n "${need_dash_r}"; then
1553 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1554 else
1555 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
d6f13fbb 1556 fi
1557 else
5b991353 1558 if test -n "${need_dash_r}"; then
1559 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1560 else
1561 LDFLAGS="-L${withval} ${LDFLAGS}"
d6f13fbb 1562 fi
1563 fi
5b991353 1564 if test -d "$withval/include"; then
1565 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
d6f13fbb 1566 else
5b991353 1567 CPPFLAGS="-I${withval} ${CPPFLAGS}"
58d100bf 1568 fi
a0391976 1569 fi
5b991353 1570 ]
1571)
5486a457 1572LIBS="-lcrypto $LIBS"
5b991353 1573AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
d45e3d76 1574 [
5b991353 1575 dnl Check default openssl install dir
1576 if test -n "${need_dash_r}"; then
1577 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1578 else
5b991353 1579 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1580 fi
5b991353 1581 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1582 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1583 [
1584 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1585 ]
1586 )
1587 ]
1588)
1589
cd018561 1590# Determine OpenSSL header version
1591AC_MSG_CHECKING([OpenSSL header version])
1a01a50c 1592AC_RUN_IFELSE(
479cece8 1593 [AC_LANG_SOURCE([[
cd018561 1594#include <stdio.h>
1595#include <string.h>
1596#include <openssl/opensslv.h>
1597#define DATA "conftest.sslincver"
1598int main(void) {
aff51935 1599 FILE *fd;
1600 int rc;
cd018561 1601
aff51935 1602 fd = fopen(DATA,"w");
1603 if(fd == NULL)
1604 exit(1);
cd018561 1605
1606 if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1607 exit(1);
1608
1609 exit(0);
1610}
479cece8 1611 ]])],
cd018561 1612 [
1613 ssl_header_ver=`cat conftest.sslincver`
1614 AC_MSG_RESULT($ssl_header_ver)
1615 ],
1616 [
1617 AC_MSG_RESULT(not found)
1618 AC_MSG_ERROR(OpenSSL version header not found.)
1a01a50c 1619 ],
1620 [
1621 AC_MSG_WARN([cross compiling: not checking])
cd018561 1622 ]
1623)
1624
1625# Determine OpenSSL library version
1626AC_MSG_CHECKING([OpenSSL library version])
1a01a50c 1627AC_RUN_IFELSE(
479cece8 1628 [AC_LANG_SOURCE([[
cd018561 1629#include <stdio.h>
1630#include <string.h>
1631#include <openssl/opensslv.h>
1632#include <openssl/crypto.h>
1633#define DATA "conftest.ssllibver"
1634int main(void) {
aff51935 1635 FILE *fd;
1636 int rc;
cd018561 1637
aff51935 1638 fd = fopen(DATA,"w");
1639 if(fd == NULL)
1640 exit(1);
cd018561 1641
1642 if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1643 exit(1);
1644
1645 exit(0);
1646}
479cece8 1647 ]])],
cd018561 1648 [
1649 ssl_library_ver=`cat conftest.ssllibver`
1650 AC_MSG_RESULT($ssl_library_ver)
1651 ],
1652 [
1653 AC_MSG_RESULT(not found)
1654 AC_MSG_ERROR(OpenSSL library not found.)
1a01a50c 1655 ],
1656 [
1657 AC_MSG_WARN([cross compiling: not checking])
cd018561 1658 ]
1659)
58d100bf 1660
9780116c 1661# Sanity check OpenSSL headers
1662AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1a01a50c 1663AC_RUN_IFELSE(
479cece8 1664 [AC_LANG_SOURCE([[
9780116c 1665#include <string.h>
1666#include <openssl/opensslv.h>
aec4cb4f 1667int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
479cece8 1668 ]])],
9780116c 1669 [
1670 AC_MSG_RESULT(yes)
1671 ],
1672 [
1673 AC_MSG_RESULT(no)
e15ba28b 1674 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1675Check config.log for details.
1676Also see contrib/findssl.sh for help identifying header/library mismatches.])
1a01a50c 1677 ],
1678 [
1679 AC_MSG_WARN([cross compiling: not checking])
9780116c 1680 ]
1681)
1682
5486a457 1683# Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1684# because the system crypt() is more featureful.
1685if test "x$check_for_libcrypt_before" = "x1"; then
1686 AC_CHECK_LIB(crypt, crypt)
1687fi
1688
aff51935 1689# Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
8087c5ee 1690# version in OpenSSL.
05114c74 1691if test "x$check_for_libcrypt_later" = "x1"; then
20cad736 1692 AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
717057b6 1693fi
1694
f1b0ecc3 1695
1696### Configure cryptographic random number support
1697
1698# Check wheter OpenSSL seeds itself
1699AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1a01a50c 1700AC_RUN_IFELSE(
479cece8 1701 [AC_LANG_SOURCE([[
f1b0ecc3 1702#include <string.h>
1703#include <openssl/rand.h>
aec4cb4f 1704int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
479cece8 1705 ]])],
f1b0ecc3 1706 [
1707 OPENSSL_SEEDS_ITSELF=yes
1708 AC_MSG_RESULT(yes)
1709 ],
1710 [
1711 AC_MSG_RESULT(no)
1712 # Default to use of the rand helper if OpenSSL doesn't
1713 # seed itself
1714 USE_RAND_HELPER=yes
1a01a50c 1715 ],
1716 [
1717 AC_MSG_WARN([cross compiling: assuming yes])
1718 # This is safe, since all recent OpenSSL versions will
82f4e93d 1719 # complain at runtime if not seeded correctly.
1a01a50c 1720 OPENSSL_SEEDS_ITSELF=yes
f1b0ecc3 1721 ]
1722)
1723
1724
1725# Do we want to force the use of the rand helper?
1726AC_ARG_WITH(rand-helper,
1727 [ --with-rand-helper Use subprocess to gather strong randomness ],
1728 [
1729 if test "x$withval" = "xno" ; then
aff51935 1730 # Force use of OpenSSL's internal RNG, even if
f1b0ecc3 1731 # the previous test showed it to be unseeded.
1732 if test -z "$OPENSSL_SEEDS_ITSELF" ; then
1733 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
1734 OPENSSL_SEEDS_ITSELF=yes
1735 USE_RAND_HELPER=""
1736 fi
1737 else
1738 USE_RAND_HELPER=yes
1739 fi
1740 ],
82f4e93d 1741)
f1b0ecc3 1742
1743# Which randomness source do we use?
4b492aab 1744if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
f1b0ecc3 1745 # OpenSSL only
1746 AC_DEFINE(OPENSSL_PRNG_ONLY)
1747 RAND_MSG="OpenSSL internal ONLY"
1748 INSTALL_SSH_RAND_HELPER=""
70e2f2f3 1749elif test ! -z "$USE_RAND_HELPER" ; then
1750 # install rand helper
f1b0ecc3 1751 RAND_MSG="ssh-rand-helper"
1752 INSTALL_SSH_RAND_HELPER="yes"
1753fi
1754AC_SUBST(INSTALL_SSH_RAND_HELPER)
1755
1756### Configuration of ssh-rand-helper
1757
1758# PRNGD TCP socket
1759AC_ARG_WITH(prngd-port,
1760 [ --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT],
1761 [
eb5d7ff6 1762 case "$withval" in
1763 no)
1764 withval=""
1765 ;;
1766 [[0-9]]*)
1767 ;;
1768 *)
1769 AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
1770 ;;
1771 esac
1772 if test ! -z "$withval" ; then
f1b0ecc3 1773 PRNGD_PORT="$withval"
1774 AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT)
1775 fi
1776 ]
1777)
1778
1779# PRNGD Unix domain socket
1780AC_ARG_WITH(prngd-socket,
1781 [ --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
1782 [
eb5d7ff6 1783 case "$withval" in
1784 yes)
f1b0ecc3 1785 withval="/var/run/egd-pool"
eb5d7ff6 1786 ;;
1787 no)
1788 withval=""
1789 ;;
1790 /*)
1791 ;;
1792 *)
1793 AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
1794 ;;
1795 esac
1796
1797 if test ! -z "$withval" ; then
f1b0ecc3 1798 if test ! -z "$PRNGD_PORT" ; then
1799 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
1800 fi
906e811b 1801 if test ! -r "$withval" ; then
f1b0ecc3 1802 AC_MSG_WARN(Entropy socket is not readable)
1803 fi
1804 PRNGD_SOCKET="$withval"
1805 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1806 fi
ddceb1c8 1807 ],
1808 [
1809 # Check for existing socket only if we don't have a random device already
1810 if test "$USE_RAND_HELPER" = yes ; then
1811 AC_MSG_CHECKING(for PRNGD/EGD socket)
1812 # Insert other locations here
1813 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
1814 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
1815 PRNGD_SOCKET="$sock"
1816 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1817 break;
1818 fi
1819 done
1820 if test ! -z "$PRNGD_SOCKET" ; then
1821 AC_MSG_RESULT($PRNGD_SOCKET)
1822 else
1823 AC_MSG_RESULT(not found)
1824 fi
1825 fi
f1b0ecc3 1826 ]
1827)
1828
1829# Change default command timeout for hashing entropy source
1830entropy_timeout=200
1831AC_ARG_WITH(entropy-timeout,
1832 [ --with-entropy-timeout Specify entropy gathering command timeout (msec)],
1833 [
6cf0200f 1834 if test -n "$withval" && test "x$withval" != "xno" && \
1835 test "x${withval}" != "xyes"; then
f1b0ecc3 1836 entropy_timeout=$withval
1837 fi
82f4e93d 1838 ]
f1b0ecc3 1839)
f1b0ecc3 1840AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout)
1841
fd3cbf67 1842SSH_PRIVSEP_USER=sshd
9a0fbcb3 1843AC_ARG_WITH(privsep-user,
5222e7ef 1844 [ --with-privsep-user=user Specify non-privileged user for privilege separation],
9a0fbcb3 1845 [
6cf0200f 1846 if test -n "$withval" && test "x$withval" != "xno" && \
1847 test "x${withval}" != "xyes"; then
fd3cbf67 1848 SSH_PRIVSEP_USER=$withval
9a0fbcb3 1849 fi
82f4e93d 1850 ]
9a0fbcb3 1851)
fd3cbf67 1852AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER")
1853AC_SUBST(SSH_PRIVSEP_USER)
9a0fbcb3 1854
81dadca3 1855# We do this little dance with the search path to insure
1856# that programs that we select for use by installed programs
1857# (which may be run by the super-user) come from trusted
1858# locations before they come from the user's private area.
1859# This should help avoid accidentally configuring some
1860# random version of a program in someone's personal bin.
1861
1862OPATH=$PATH
1863PATH=/bin:/usr/bin
f95c8ce8 1864test -h /bin 2> /dev/null && PATH=/usr/bin
81dadca3 1865test -d /sbin && PATH=$PATH:/sbin
1866test -d /usr/sbin && PATH=$PATH:/usr/sbin
1867PATH=$PATH:/etc:$OPATH
1868
aff51935 1869# These programs are used by the command hashing source to gather entropy
f1b0ecc3 1870OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
1871OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
1872OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
1873OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
1874OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
1875OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
1876OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
1877OSSH_PATH_ENTROPY_PROG(PROG_W, w)
1878OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
1879OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
1880OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
1881OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
1882OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
1883OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
1884OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
1885OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
81dadca3 1886# restore PATH
1887PATH=$OPATH
f1b0ecc3 1888
1889# Where does ssh-rand-helper get its randomness from?
1890INSTALL_SSH_PRNG_CMDS=""
1891if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
1892 if test ! -z "$PRNGD_PORT" ; then
1893 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
1894 elif test ! -z "$PRNGD_SOCKET" ; then
1895 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
1896 else
1897 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
1898 RAND_HELPER_CMDHASH=yes
1899 INSTALL_SSH_PRNG_CMDS="yes"
1900 fi
1901fi
1902AC_SUBST(INSTALL_SSH_PRNG_CMDS)
1903
1904
66d6c27e 1905# Cheap hack to ensure NEWS-OS libraries are arranged right.
1906if test ! -z "$SONY" ; then
1907 LIBS="$LIBS -liberty";
1908fi
1909
a0391976 1910# Checks for data types
976f7e19 1911AC_CHECK_SIZEOF(char, 1)
2b942fe0 1912AC_CHECK_SIZEOF(short int, 2)
1913AC_CHECK_SIZEOF(int, 4)
1914AC_CHECK_SIZEOF(long int, 4)
1915AC_CHECK_SIZEOF(long long int, 8)
1916
52f1ccb2 1917# Sanity check long long for some platforms (AIX)
1918if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
1919 ac_cv_sizeof_long_long_int=0
1920fi
1921
a0391976 1922# More checks for data types
14a9a859 1923AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
1924 AC_TRY_COMPILE(
aff51935 1925 [ #include <sys/types.h> ],
1926 [ u_int a; a = 1;],
14a9a859 1927 [ ac_cv_have_u_int="yes" ],
1928 [ ac_cv_have_u_int="no" ]
1929 )
1930])
1931if test "x$ac_cv_have_u_int" = "xyes" ; then
1932 AC_DEFINE(HAVE_U_INT)
1933 have_u_int=1
1934fi
1935
58d100bf 1936AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
1937 AC_TRY_COMPILE(
aff51935 1938 [ #include <sys/types.h> ],
1939 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
58d100bf 1940 [ ac_cv_have_intxx_t="yes" ],
1941 [ ac_cv_have_intxx_t="no" ]
1942 )
1943])
1944if test "x$ac_cv_have_intxx_t" = "xyes" ; then
1945 AC_DEFINE(HAVE_INTXX_T)
1946 have_intxx_t=1
1947fi
41cb4569 1948
1949if (test -z "$have_intxx_t" && \
aff51935 1950 test "x$ac_cv_header_stdint_h" = "xyes")
41cb4569 1951then
1952 AC_MSG_CHECKING([for intXX_t types in stdint.h])
1953 AC_TRY_COMPILE(
aff51935 1954 [ #include <stdint.h> ],
1955 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
41cb4569 1956 [
1957 AC_DEFINE(HAVE_INTXX_T)
1958 AC_MSG_RESULT(yes)
1959 ],
1960 [ AC_MSG_RESULT(no) ]
1961 )
1962fi
1963
bd590612 1964AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
1965 AC_TRY_COMPILE(
1cbbe6c8 1966 [
1967#include <sys/types.h>
1968#ifdef HAVE_STDINT_H
1969# include <stdint.h>
1970#endif
1971#include <sys/socket.h>
1972#ifdef HAVE_SYS_BITYPES_H
1973# include <sys/bitypes.h>
1974#endif
aff51935 1975 ],
1976 [ int64_t a; a = 1;],
bd590612 1977 [ ac_cv_have_int64_t="yes" ],
1978 [ ac_cv_have_int64_t="no" ]
1979 )
1980])
1981if test "x$ac_cv_have_int64_t" = "xyes" ; then
1982 AC_DEFINE(HAVE_INT64_T)
ddceb1c8 1983fi
1984
58d100bf 1985AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
1986 AC_TRY_COMPILE(
aff51935 1987 [ #include <sys/types.h> ],
1988 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
58d100bf 1989 [ ac_cv_have_u_intxx_t="yes" ],
1990 [ ac_cv_have_u_intxx_t="no" ]
1991 )
1992])
1993if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
1994 AC_DEFINE(HAVE_U_INTXX_T)
1995 have_u_intxx_t=1
1996fi
2b942fe0 1997
41cb4569 1998if test -z "$have_u_intxx_t" ; then
1999 AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
2000 AC_TRY_COMPILE(
aff51935 2001 [ #include <sys/socket.h> ],
2002 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
41cb4569 2003 [
2004 AC_DEFINE(HAVE_U_INTXX_T)
2005 AC_MSG_RESULT(yes)
2006 ],
2007 [ AC_MSG_RESULT(no) ]
2008 )
2009fi
2010
bd590612 2011AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
2012 AC_TRY_COMPILE(
aff51935 2013 [ #include <sys/types.h> ],
2014 [ u_int64_t a; a = 1;],
bd590612 2015 [ ac_cv_have_u_int64_t="yes" ],
2016 [ ac_cv_have_u_int64_t="no" ]
2017 )
2018])
2019if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
2020 AC_DEFINE(HAVE_U_INT64_T)
2021 have_u_int64_t=1
2022fi
2023
ddceb1c8 2024if test -z "$have_u_int64_t" ; then
2025 AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
2026 AC_TRY_COMPILE(
aff51935 2027 [ #include <sys/bitypes.h> ],
ddceb1c8 2028 [ u_int64_t a; a = 1],
2029 [
2030 AC_DEFINE(HAVE_U_INT64_T)
2031 AC_MSG_RESULT(yes)
2032 ],
2033 [ AC_MSG_RESULT(no) ]
2034 )
2035fi
2036
41cb4569 2037if test -z "$have_u_intxx_t" ; then
2038 AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
2039 AC_TRY_COMPILE(
2040 [
2041#include <sys/types.h>
aff51935 2042 ],
2043 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
41cb4569 2044 [ ac_cv_have_uintxx_t="yes" ],
2045 [ ac_cv_have_uintxx_t="no" ]
2046 )
2047 ])
2048 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
2049 AC_DEFINE(HAVE_UINTXX_T)
2050 fi
2051fi
2052
2053if test -z "$have_uintxx_t" ; then
2054 AC_MSG_CHECKING([for uintXX_t types in stdint.h])
2055 AC_TRY_COMPILE(
aff51935 2056 [ #include <stdint.h> ],
2057 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
41cb4569 2058 [
2059 AC_DEFINE(HAVE_UINTXX_T)
2060 AC_MSG_RESULT(yes)
2061 ],
2062 [ AC_MSG_RESULT(no) ]
2063 )
2064fi
2065
e5fe9a1f 2066if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
aff51935 2067 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
5cdfe03f 2068then
2069 AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
2070 AC_TRY_COMPILE(
58d100bf 2071 [
2072#include <sys/bitypes.h>
aff51935 2073 ],
5cdfe03f 2074 [
837c30b8 2075 int8_t a; int16_t b; int32_t c;
2076 u_int8_t e; u_int16_t f; u_int32_t g;
2077 a = b = c = e = f = g = 1;
aff51935 2078 ],
5cdfe03f 2079 [
2080 AC_DEFINE(HAVE_U_INTXX_T)
2081 AC_DEFINE(HAVE_INTXX_T)
2082 AC_MSG_RESULT(yes)
2083 ],
2084 [AC_MSG_RESULT(no)]
aff51935 2085 )
5cdfe03f 2086fi
2087
0362750e 2088
2089AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
2090 AC_TRY_COMPILE(
2091 [
2092#include <sys/types.h>
2093 ],
2094 [ u_char foo; foo = 125; ],
2095 [ ac_cv_have_u_char="yes" ],
2096 [ ac_cv_have_u_char="no" ]
2097 )
2098])
2099if test "x$ac_cv_have_u_char" = "xyes" ; then
2100 AC_DEFINE(HAVE_U_CHAR)
2101fi
2102
98a7c37b 2103TYPE_SOCKLEN_T
2b942fe0 2104
2d16d9a3 2105AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
ddceb1c8 2106
777ece68 2107AC_CHECK_TYPES(in_addr_t,,,
2108[#include <sys/types.h>
2109#include <netinet/in.h>])
7b578f7d 2110
58d100bf 2111AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
2112 AC_TRY_COMPILE(
2113 [
18ba2aab 2114#include <sys/types.h>
58d100bf 2115 ],
2116 [ size_t foo; foo = 1235; ],
2117 [ ac_cv_have_size_t="yes" ],
2118 [ ac_cv_have_size_t="no" ]
2119 )
2120])
2121if test "x$ac_cv_have_size_t" = "xyes" ; then
2122 AC_DEFINE(HAVE_SIZE_T)
2123fi
ea1970a3 2124
c04f75f1 2125AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
2126 AC_TRY_COMPILE(
2127 [
2128#include <sys/types.h>
2129 ],
2130 [ ssize_t foo; foo = 1235; ],
2131 [ ac_cv_have_ssize_t="yes" ],
2132 [ ac_cv_have_ssize_t="no" ]
2133 )
2134])
2135if test "x$ac_cv_have_ssize_t" = "xyes" ; then
2136 AC_DEFINE(HAVE_SSIZE_T)
2137fi
2138
f1c4659d 2139AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
2140 AC_TRY_COMPILE(
2141 [
2142#include <time.h>
2143 ],
2144 [ clock_t foo; foo = 1235; ],
2145 [ ac_cv_have_clock_t="yes" ],
2146 [ ac_cv_have_clock_t="no" ]
2147 )
2148])
2149if test "x$ac_cv_have_clock_t" = "xyes" ; then
2150 AC_DEFINE(HAVE_CLOCK_T)
2151fi
2152
1c04b088 2153AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
2154 AC_TRY_COMPILE(
2155 [
2156#include <sys/types.h>
2157#include <sys/socket.h>
2158 ],
2159 [ sa_family_t foo; foo = 1235; ],
2160 [ ac_cv_have_sa_family_t="yes" ],
77bb0bca 2161 [ AC_TRY_COMPILE(
2162 [
2163#include <sys/types.h>
2164#include <sys/socket.h>
2165#include <netinet/in.h>
2166 ],
2167 [ sa_family_t foo; foo = 1235; ],
2168 [ ac_cv_have_sa_family_t="yes" ],
2169
1c04b088 2170 [ ac_cv_have_sa_family_t="no" ]
77bb0bca 2171 )]
1c04b088 2172 )
2173])
2174if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
2175 AC_DEFINE(HAVE_SA_FAMILY_T)
2176fi
2177
729bfe59 2178AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
2179 AC_TRY_COMPILE(
2180 [
2181#include <sys/types.h>
2182 ],
2183 [ pid_t foo; foo = 1235; ],
2184 [ ac_cv_have_pid_t="yes" ],
2185 [ ac_cv_have_pid_t="no" ]
2186 )
2187])
2188if test "x$ac_cv_have_pid_t" = "xyes" ; then
2189 AC_DEFINE(HAVE_PID_T)
2190fi
2191
2192AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
2193 AC_TRY_COMPILE(
2194 [
2195#include <sys/types.h>
2196 ],
2197 [ mode_t foo; foo = 1235; ],
2198 [ ac_cv_have_mode_t="yes" ],
2199 [ ac_cv_have_mode_t="no" ]
2200 )
2201])
2202if test "x$ac_cv_have_mode_t" = "xyes" ; then
2203 AC_DEFINE(HAVE_MODE_T)
2204fi
2205
e3a93db0 2206
58d100bf 2207AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
2208 AC_TRY_COMPILE(
2209 [
18ba2aab 2210#include <sys/types.h>
2211#include <sys/socket.h>
58d100bf 2212 ],
2213 [ struct sockaddr_storage s; ],
2214 [ ac_cv_have_struct_sockaddr_storage="yes" ],
2215 [ ac_cv_have_struct_sockaddr_storage="no" ]
2216 )
2217])
2218if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
2219 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE)
2220fi
48e671d5 2221
58d100bf 2222AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2223 AC_TRY_COMPILE(
2224 [
cbd7492e 2225#include <sys/types.h>
58d100bf 2226#include <netinet/in.h>
2227 ],
2228 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2229 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2230 [ ac_cv_have_struct_sockaddr_in6="no" ]
2231 )
2232])
2233if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
2234 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6)
2235fi
48e671d5 2236
58d100bf 2237AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2238 AC_TRY_COMPILE(
2239 [
cbd7492e 2240#include <sys/types.h>
58d100bf 2241#include <netinet/in.h>
2242 ],
2243 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2244 [ ac_cv_have_struct_in6_addr="yes" ],
2245 [ ac_cv_have_struct_in6_addr="no" ]
2246 )
2247])
2248if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
2249 AC_DEFINE(HAVE_STRUCT_IN6_ADDR)
2250fi
48e671d5 2251
58d100bf 2252AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2253 AC_TRY_COMPILE(
2254 [
18ba2aab 2255#include <sys/types.h>
2256#include <sys/socket.h>
2257#include <netdb.h>
58d100bf 2258 ],
2259 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2260 [ ac_cv_have_struct_addrinfo="yes" ],
2261 [ ac_cv_have_struct_addrinfo="no" ]
2262 )
2263])
2264if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2265 AC_DEFINE(HAVE_STRUCT_ADDRINFO)
2266fi
2267
89c7e31c 2268AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2269 AC_TRY_COMPILE(
aff51935 2270 [ #include <sys/time.h> ],
2271 [ struct timeval tv; tv.tv_sec = 1;],
89c7e31c 2272 [ ac_cv_have_struct_timeval="yes" ],
2273 [ ac_cv_have_struct_timeval="no" ]
2274 )
2275])
2276if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2277 AC_DEFINE(HAVE_STRUCT_TIMEVAL)
2278 have_struct_timeval=1
2279fi
2280
5271b55c 2281AC_CHECK_TYPES(struct timespec)
2282
85abc74b 2283# We need int64_t or else certian parts of the compile will fail.
4b492aab 2284if test "x$ac_cv_have_int64_t" = "xno" && \
2285 test "x$ac_cv_sizeof_long_int" != "x8" && \
2286 test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
85abc74b 2287 echo "OpenSSH requires int64_t support. Contact your vendor or install"
2288 echo "an alternative compiler (I.E., GCC) before continuing."
2289 echo ""
2290 exit 1;
733cf7f4 2291else
2292dnl test snprintf (broken on SCO w/gcc)
1a01a50c 2293 AC_RUN_IFELSE(
479cece8 2294 [AC_LANG_SOURCE([[
733cf7f4 2295#include <stdio.h>
2296#include <string.h>
2297#ifdef HAVE_SNPRINTF
2298main()
2299{
2300 char buf[50];
2301 char expected_out[50];
2302 int mazsize = 50 ;
2303#if (SIZEOF_LONG_INT == 8)
2304 long int num = 0x7fffffffffffffff;
2305#else
763a1a18 2306 long long num = 0x7fffffffffffffffll;
733cf7f4 2307#endif
2308 strcpy(expected_out, "9223372036854775807");
2309 snprintf(buf, mazsize, "%lld", num);
2310 if(strcmp(buf, expected_out) != 0)
aff51935 2311 exit(1);
733cf7f4 2312 exit(0);
2313}
2314#else
2315main() { exit(0); }
2316#endif
479cece8 2317 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
1a01a50c 2318 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
733cf7f4 2319 )
2c523de9 2320fi
2321
77bb0bca 2322dnl Checks for structure members
58d100bf 2323OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2324OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2325OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2326OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2327OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
25422c70 2328OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
58d100bf 2329OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2330OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
daaff4d5 2331OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
58d100bf 2332OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2333OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2334OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2335OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
1d7b9b20 2336OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2337OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2338OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2339OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
98a7c37b 2340
2341AC_CHECK_MEMBERS([struct stat.st_blksize])
1d7b9b20 2342
58d100bf 2343AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2344 ac_cv_have_ss_family_in_struct_ss, [
2345 AC_TRY_COMPILE(
2346 [
18ba2aab 2347#include <sys/types.h>
2348#include <sys/socket.h>
58d100bf 2349 ],
2350 [ struct sockaddr_storage s; s.ss_family = 1; ],
2351 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2352 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2353 )
2354])
2355if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2356 AC_DEFINE(HAVE_SS_FAMILY_IN_SS)
2357fi
2358
58d100bf 2359AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2360 ac_cv_have___ss_family_in_struct_ss, [
2361 AC_TRY_COMPILE(
2362 [
18ba2aab 2363#include <sys/types.h>
2364#include <sys/socket.h>
58d100bf 2365 ],
2366 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2367 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2368 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2369 )
2370])
2371if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2372 AC_DEFINE(HAVE___SS_FAMILY_IN_SS)
2373fi
2374
2e73a022 2375AC_CACHE_CHECK([for pw_class field in struct passwd],
2376 ac_cv_have_pw_class_in_struct_passwd, [
2377 AC_TRY_COMPILE(
2378 [
2e73a022 2379#include <pwd.h>
2380 ],
97994d32 2381 [ struct passwd p; p.pw_class = 0; ],
2e73a022 2382 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2383 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2384 )
2385])
2386if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2387 AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD)
2388fi
2389
7751d4eb 2390AC_CACHE_CHECK([for pw_expire field in struct passwd],
2391 ac_cv_have_pw_expire_in_struct_passwd, [
2392 AC_TRY_COMPILE(
2393 [
2394#include <pwd.h>
2395 ],
2396 [ struct passwd p; p.pw_expire = 0; ],
2397 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2398 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2399 )
2400])
2401if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2402 AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD)
2403fi
2404
2405AC_CACHE_CHECK([for pw_change field in struct passwd],
2406 ac_cv_have_pw_change_in_struct_passwd, [
2407 AC_TRY_COMPILE(
2408 [
2409#include <pwd.h>
2410 ],
2411 [ struct passwd p; p.pw_change = 0; ],
2412 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2413 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2414 )
2415])
2416if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2417 AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD)
2418fi
58d100bf 2419
637f9177 2420dnl make sure we're using the real structure members and not defines
6f34652e 2421AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2422 ac_cv_have_accrights_in_msghdr, [
1a01a50c 2423 AC_COMPILE_IFELSE(
6f34652e 2424 [
f95c8ce8 2425#include <sys/types.h>
6f34652e 2426#include <sys/socket.h>
2427#include <sys/uio.h>
637f9177 2428int main() {
2429#ifdef msg_accrights
1a01a50c 2430#error "msg_accrights is a macro"
637f9177 2431exit(1);
2432#endif
2433struct msghdr m;
2434m.msg_accrights = 0;
2435exit(0);
2436}
6f34652e 2437 ],
6f34652e 2438 [ ac_cv_have_accrights_in_msghdr="yes" ],
2439 [ ac_cv_have_accrights_in_msghdr="no" ]
2440 )
2441])
2442if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2443 AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR)
2444fi
2445
7176df4f 2446AC_CACHE_CHECK([for msg_control field in struct msghdr],
2447 ac_cv_have_control_in_msghdr, [
1a01a50c 2448 AC_COMPILE_IFELSE(
7176df4f 2449 [
f95c8ce8 2450#include <sys/types.h>
7176df4f 2451#include <sys/socket.h>
2452#include <sys/uio.h>
637f9177 2453int main() {
2454#ifdef msg_control
1a01a50c 2455#error "msg_control is a macro"
637f9177 2456exit(1);
2457#endif
2458struct msghdr m;
2459m.msg_control = 0;
2460exit(0);
2461}
7176df4f 2462 ],
7176df4f 2463 [ ac_cv_have_control_in_msghdr="yes" ],
2464 [ ac_cv_have_control_in_msghdr="no" ]
2465 )
2466])
2467if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2468 AC_DEFINE(HAVE_CONTROL_IN_MSGHDR)
2469fi
2470
58d100bf 2471AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
aff51935 2472 AC_TRY_LINK([],
2473 [ extern char *__progname; printf("%s", __progname); ],
58d100bf 2474 [ ac_cv_libc_defines___progname="yes" ],
2475 [ ac_cv_libc_defines___progname="no" ]
2476 )
2477])
2478if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2479 AC_DEFINE(HAVE___PROGNAME)
2480fi
8946db53 2481
c921ee00 2482AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2483 AC_TRY_LINK([
2484#include <stdio.h>
aff51935 2485],
2486 [ printf("%s", __FUNCTION__); ],
c921ee00 2487 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2488 [ ac_cv_cc_implements___FUNCTION__="no" ]
2489 )
2490])
2491if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2492 AC_DEFINE(HAVE___FUNCTION__)
2493fi
2494
2495AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2496 AC_TRY_LINK([
2497#include <stdio.h>
aff51935 2498],
2499 [ printf("%s", __func__); ],
c921ee00 2500 [ ac_cv_cc_implements___func__="yes" ],
2501 [ ac_cv_cc_implements___func__="no" ]
2502 )
2503])
2504if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
2505 AC_DEFINE(HAVE___func__)
2506fi
2507
1812a662 2508AC_CACHE_CHECK([whether getopt has optreset support],
2509 ac_cv_have_getopt_optreset, [
2510 AC_TRY_LINK(
2511 [
2512#include <getopt.h>
2513 ],
2514 [ extern int optreset; optreset = 0; ],
2515 [ ac_cv_have_getopt_optreset="yes" ],
2516 [ ac_cv_have_getopt_optreset="no" ]
2517 )
2518])
2519if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
2520 AC_DEFINE(HAVE_GETOPT_OPTRESET)
2521fi
a0391976 2522
819b676f 2523AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
aff51935 2524 AC_TRY_LINK([],
2525 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
819b676f 2526 [ ac_cv_libc_defines_sys_errlist="yes" ],
2527 [ ac_cv_libc_defines_sys_errlist="no" ]
2528 )
2529])
2530if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
2531 AC_DEFINE(HAVE_SYS_ERRLIST)
2532fi
2533
2534
416ed5a7 2535AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
aff51935 2536 AC_TRY_LINK([],
2537 [ extern int sys_nerr; printf("%i", sys_nerr);],
416ed5a7 2538 [ ac_cv_libc_defines_sys_nerr="yes" ],
2539 [ ac_cv_libc_defines_sys_nerr="no" ]
2540 )
2541])
2542if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
2543 AC_DEFINE(HAVE_SYS_NERR)
2544fi
2545
aff51935 2546SCARD_MSG="no"
295c8801 2547# Check whether user wants sectok support
2548AC_ARG_WITH(sectok,
2549 [ --with-sectok Enable smartcard support using libsectok],
d0b19c95 2550 [
2551 if test "x$withval" != "xno" ; then
2552 if test "x$withval" != "xyes" ; then
2553 CPPFLAGS="$CPPFLAGS -I${withval}"
2554 LDFLAGS="$LDFLAGS -L${withval}"
2555 if test ! -z "$need_dash_r" ; then
2556 LDFLAGS="$LDFLAGS -R${withval}"
2557 fi
2558 if test ! -z "$blibpath" ; then
2559 blibpath="$blibpath:${withval}"
2560 fi
2561 fi
2562 AC_CHECK_HEADERS(sectok.h)
2563 if test "$ac_cv_header_sectok_h" != yes; then
2564 AC_MSG_ERROR(Can't find sectok.h)
2565 fi
2566 AC_CHECK_LIB(sectok, sectok_open)
2567 if test "$ac_cv_lib_sectok_sectok_open" != yes; then
2568 AC_MSG_ERROR(Can't find libsectok)
2569 fi
2570 AC_DEFINE(SMARTCARD)
295c8801 2571 AC_DEFINE(USE_SECTOK)
aff51935 2572 SCARD_MSG="yes, using sectok"
295c8801 2573 fi
2574 ]
2575)
2576
2577# Check whether user wants OpenSC support
987b458f 2578OPENSC_CONFIG="no"
295c8801 2579AC_ARG_WITH(opensc,
987b458f 2580 [--with-opensc[[=PFX]] Enable smartcard support using OpenSC (optionally in PATH)],
2581 [
2582 if test "x$withval" != "xno" ; then
2583 if test "x$withval" != "xyes" ; then
2584 OPENSC_CONFIG=$withval/bin/opensc-config
2585 else
2586 AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
2587 fi
2588 if test "$OPENSC_CONFIG" != "no"; then
2589 LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
2590 LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
2591 CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
2592 LDFLAGS="$LDFLAGS $LIBOPENSC_LIBS"
2593 AC_DEFINE(SMARTCARD)
2594 AC_DEFINE(USE_OPENSC)
2595 SCARD_MSG="yes, using OpenSC"
2596 fi
2597 fi
2598 ]
2599)
d0b19c95 2600
c31dc31c 2601# Check libraries needed by DNS fingerprint support
aff51935 2602AC_SEARCH_LIBS(getrrsetbyname, resolv,
c31dc31c 2603 [AC_DEFINE(HAVE_GETRRSETBYNAME)],
3e05e934 2604 [
c31dc31c 2605 # Needed by our getrrsetbyname()
2606 AC_SEARCH_LIBS(res_query, resolv)
2607 AC_SEARCH_LIBS(dn_expand, resolv)
dabb524a 2608 AC_MSG_CHECKING(if res_query will link)
2609 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
2610 [AC_MSG_RESULT(no)
2611 saved_LIBS="$LIBS"
2612 LIBS="$LIBS -lresolv"
2613 AC_MSG_CHECKING(for res_query in -lresolv)
2614 AC_LINK_IFELSE([
2615#include <resolv.h>
2616int main()
2617{
2618 res_query (0, 0, 0, 0, 0);
2619 return 0;
2620}
2621 ],
2622 [LIBS="$LIBS -lresolv"
2623 AC_MSG_RESULT(yes)],
2624 [LIBS="$saved_LIBS"
2625 AC_MSG_RESULT(no)])
2626 ])
c31dc31c 2627 AC_CHECK_FUNCS(_getshort _getlong)
1c829da5 2628 AC_CHECK_DECLS([_getshort, _getlong], , ,
b5765e1d 2629 [#include <sys/types.h>
2630 #include <arpa/nameser.h>])
c31dc31c 2631 AC_CHECK_MEMBER(HEADER.ad,
2632 [AC_DEFINE(HAVE_HEADER_AD)],,
2633 [#include <arpa/nameser.h>])
2634 ])
3e05e934 2635
12928e80 2636# Check whether user wants Kerberos 5 support
aff51935 2637KRB5_MSG="no"
12928e80 2638AC_ARG_WITH(kerberos5,
aff51935 2639 [ --with-kerberos5=PATH Enable Kerberos 5 support],
5585c441 2640 [ if test "x$withval" != "xno" ; then
2641 if test "x$withval" = "xyes" ; then
2642 KRB5ROOT="/usr/local"
2643 else
2644 KRB5ROOT=${withval}
2645 fi
2646
2647 AC_DEFINE(KRB5)
2648 KRB5_MSG="yes"
2649
2650 AC_MSG_CHECKING(for krb5-config)
2651 if test -x $KRB5ROOT/bin/krb5-config ; then
2652 KRB5CONF=$KRB5ROOT/bin/krb5-config
2653 AC_MSG_RESULT($KRB5CONF)
2654
2655 AC_MSG_CHECKING(for gssapi support)
2656 if $KRB5CONF | grep gssapi >/dev/null ; then
2657 AC_MSG_RESULT(yes)
071970fb 2658 AC_DEFINE(GSSAPI)
2659 k5confopts=gssapi
aff51935 2660 else
5585c441 2661 AC_MSG_RESULT(no)
071970fb 2662 k5confopts=""
aff51935 2663 fi
071970fb 2664 K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
2665 K5LIBS="`$KRB5CONF --libs $k5confopts`"
5585c441 2666 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
5585c441 2667 AC_MSG_CHECKING(whether we are using Heimdal)
2668 AC_TRY_COMPILE([ #include <krb5.h> ],
2669 [ char *tmp = heimdal_version; ],
2670 [ AC_MSG_RESULT(yes)
2671 AC_DEFINE(HEIMDAL) ],
2672 AC_MSG_RESULT(no)
2673 )
2674 else
2675 AC_MSG_RESULT(no)
12928e80 2676 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
aff51935 2677 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
aff51935 2678 AC_MSG_CHECKING(whether we are using Heimdal)
2679 AC_TRY_COMPILE([ #include <krb5.h> ],
2680 [ char *tmp = heimdal_version; ],
2681 [ AC_MSG_RESULT(yes)
2682 AC_DEFINE(HEIMDAL)
41707f74 2683 K5LIBS="-lkrb5 -ldes"
2684 K5LIBS="$K5LIBS -lcom_err -lasn1"
82f4e93d 2685 AC_CHECK_LIB(roken, net_write,
41707f74 2686 [K5LIBS="$K5LIBS -lroken"])
aff51935 2687 ],
2688 [ AC_MSG_RESULT(no)
2689 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
2690 ]
2691 )
4e00038c 2692 AC_SEARCH_LIBS(dn_expand, resolv)
12928e80 2693
749560dd 2694 AC_CHECK_LIB(gssapi,gss_init_sec_context,
2695 [ AC_DEFINE(GSSAPI)
2696 K5LIBS="-lgssapi $K5LIBS" ],
2697 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
2698 [ AC_DEFINE(GSSAPI)
aff51935 2699 K5LIBS="-lgssapi_krb5 $K5LIBS" ],
749560dd 2700 AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
2701 $K5LIBS)
2702 ],
2703 $K5LIBS)
82f4e93d 2704
749560dd 2705 AC_CHECK_HEADER(gssapi.h, ,
2706 [ unset ac_cv_header_gssapi_h
aff51935 2707 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
749560dd 2708 AC_CHECK_HEADERS(gssapi.h, ,
2709 AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
aff51935 2710 )
749560dd 2711 ]
2712 )
2713
2714 oldCPP="$CPPFLAGS"
2715 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2716 AC_CHECK_HEADER(gssapi_krb5.h, ,
2717 [ CPPFLAGS="$oldCPP" ])
2718
aff51935 2719 fi
5585c441 2720 if test ! -z "$need_dash_r" ; then
2721 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
2722 fi
2723 if test ! -z "$blibpath" ; then
2724 blibpath="$blibpath:${KRB5ROOT}/lib"
2725 fi
071970fb 2726 fi
2727
2728 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
2729 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
2730 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
2731
2732 LIBS="$LIBS $K5LIBS"
2733 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS))
2734 ]
12928e80 2735)
b5b68128 2736
a0391976 2737# Looking for programs, paths and files
a0391976 2738
ecac8ee5 2739PRIVSEP_PATH=/var/empty
2740AC_ARG_WITH(privsep-path,
cda1ebcb 2741 [ --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
ecac8ee5 2742 [
6cf0200f 2743 if test -n "$withval" && test "x$withval" != "xno" && \
2744 test "x${withval}" != "xyes"; then
ecac8ee5 2745 PRIVSEP_PATH=$withval
2746 fi
2747 ]
2748)
2749AC_SUBST(PRIVSEP_PATH)
2750
a0391976 2751AC_ARG_WITH(xauth,
2752 [ --with-xauth=PATH Specify path to xauth program ],
2753 [
6cf0200f 2754 if test -n "$withval" && test "x$withval" != "xno" && \
2755 test "x${withval}" != "xyes"; then
cbd7492e 2756 xauth_path=$withval
a0391976 2757 fi
2758 ],
2759 [
2bf42e4a 2760 TestPath="$PATH"
2761 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
2762 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
2763 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
2764 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
2765 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
e5fe9a1f 2766 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
a0391976 2767 xauth_path="/usr/openwin/bin/xauth"
2768 fi
2769 ]
2770)
2771
65a4b4af 2772STRIP_OPT=-s
2773AC_ARG_ENABLE(strip,
2774 [ --disable-strip Disable calling strip(1) on install],
2775 [
2776 if test "x$enableval" = "xno" ; then
2777 STRIP_OPT=
2778 fi
2779 ]
2780)
2781AC_SUBST(STRIP_OPT)
2782
b3ec54b4 2783if test -z "$xauth_path" ; then
2784 XAUTH_PATH="undefined"
2785 AC_SUBST(XAUTH_PATH)
2786else
a0391976 2787 AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path")
b3ec54b4 2788 XAUTH_PATH=$xauth_path
2789 AC_SUBST(XAUTH_PATH)
a0391976 2790fi
a0391976 2791
2792# Check for mail directory (last resort if we cannot get it from headers)
2793if test ! -z "$MAIL" ; then
2794 maildir=`dirname $MAIL`
2795 AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir")
2796fi
2797
479cece8 2798if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
1a01a50c 2799 AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
2800 disable_ptmx_check=yes
2801fi
a0391976 2802if test -z "$no_dev_ptmx" ; then
6e879cb4 2803 if test "x$disable_ptmx_check" != "xyes" ; then
aff51935 2804 AC_CHECK_FILE("/dev/ptmx",
6e879cb4 2805 [
2806 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX)
2807 have_dev_ptmx=1
2808 ]
2809 )
2810 fi
3276571c 2811fi
1a01a50c 2812
479cece8 2813if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
1a01a50c 2814 AC_CHECK_FILE("/dev/ptc",
2815 [
2816 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC)
2817 have_dev_ptc=1
2818 ]
2819 )
2820else
2821 AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
2822fi
3276571c 2823
a0391976 2824# Options from here on. Some of these are preset by platform above
fdf6b7aa 2825AC_ARG_WITH(mantype,
5d97cfbf 2826 [ --with-mantype=man|cat|doc Set man page type],
c54a6257 2827 [
5d97cfbf 2828 case "$withval" in
2829 man|cat|doc)
2830 MANTYPE=$withval
2831 ;;
2832 *)
2833 AC_MSG_ERROR(invalid man type: $withval)
2834 ;;
2835 esac
c54a6257 2836 ]
2837)
e0c4d3ac 2838if test -z "$MANTYPE"; then
2bf42e4a 2839 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
2840 AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
e0c4d3ac 2841 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
2842 MANTYPE=doc
2843 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
2844 MANTYPE=man
2845 else
2846 MANTYPE=cat
2847 fi
2848fi
c54a6257 2849AC_SUBST(MANTYPE)
e0c4d3ac 2850if test "$MANTYPE" = "doc"; then
2851 mansubdir=man;
2852else
2853 mansubdir=$MANTYPE;
2854fi
2855AC_SUBST(mansubdir)
0bc5b6fb 2856
a0391976 2857# Check whether to enable MD5 passwords
aff51935 2858MD5_MSG="no"
2ddcfdf3 2859AC_ARG_WITH(md5-passwords,
caf3bc51 2860 [ --with-md5-passwords Enable use of MD5 passwords],
0bc5b6fb 2861 [
bcf36c78 2862 if test "x$withval" != "xno" ; then
0bc5b6fb 2863 AC_DEFINE(HAVE_MD5_PASSWORDS)
aff51935 2864 MD5_MSG="yes"
0bc5b6fb 2865 fi
2866 ]
caf3bc51 2867)
2868
a0391976 2869# Whether to disable shadow password support
a7effaac 2870AC_ARG_WITH(shadow,
2871 [ --without-shadow Disable shadow password support],
2872 [
82f4e93d 2873 if test "x$withval" = "xno" ; then
a7effaac 2874 AC_DEFINE(DISABLE_SHADOW)
4cb5ffa0 2875 disable_shadow=yes
a7effaac 2876 fi
2877 ]
2878)
2879
4cb5ffa0 2880if test -z "$disable_shadow" ; then
2881 AC_MSG_CHECKING([if the systems has expire shadow information])
2882 AC_TRY_COMPILE(
2883 [
2884#include <sys/types.h>
2885#include <shadow.h>
2886 struct spwd sp;
2887 ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
2888 [ sp_expire_available=yes ], []
2889 )
2890
2891 if test "x$sp_expire_available" = "xyes" ; then
2892 AC_MSG_RESULT(yes)
2893 AC_DEFINE(HAS_SHADOW_EXPIRE)
2894 else
2895 AC_MSG_RESULT(no)
2896 fi
2897fi
2898
a0391976 2899# Use ip address instead of hostname in $DISPLAY
44839801 2900if test ! -z "$IPADDR_IN_DISPLAY" ; then
2901 DISPLAY_HACK_MSG="yes"
2902 AC_DEFINE(IPADDR_IN_DISPLAY)
2903else
aff51935 2904 DISPLAY_HACK_MSG="no"
44839801 2905 AC_ARG_WITH(ipaddr-display,
2906 [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY],
2907 [
82f4e93d 2908 if test "x$withval" != "xno" ; then
44839801 2909 AC_DEFINE(IPADDR_IN_DISPLAY)
aff51935 2910 DISPLAY_HACK_MSG="yes"
44839801 2911 fi
2912 ]
2913 )
2914fi
a7effaac 2915
95b99395 2916# check for /etc/default/login and use it if present.
daa41e62 2917AC_ARG_ENABLE(etc-default-login,
6ff3d0dc 2918 [ --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
694d0cef 2919 [ if test "x$enableval" = "xno"; then
2920 AC_MSG_NOTICE([/etc/default/login handling disabled])
2921 etc_default_login=no
2922 else
2923 etc_default_login=yes
2924 fi ],
2925 [ etc_default_login=yes ]
2926)
95b99395 2927
694d0cef 2928if test "x$etc_default_login" != "xno"; then
2929 AC_CHECK_FILE("/etc/default/login",
2930 [ external_path_file=/etc/default/login ])
479cece8 2931 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
2932 then
1a01a50c 2933 AC_MSG_WARN([cross compiling: Disabling /etc/default/login test])
2934 elif test "x$external_path_file" = "x/etc/default/login"; then
2935 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN)
2936 fi
694d0cef 2937fi
95b99395 2938
8d184c09 2939dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
4b492aab 2940if test $ac_cv_func_login_getcapbool = "yes" && \
2941 test $ac_cv_header_login_cap_h = "yes" ; then
95b99395 2942 external_path_file=/etc/login.conf
8d184c09 2943fi
95b99395 2944
a0391976 2945# Whether to mess with the default path
aff51935 2946SERVER_PATH_MSG="(default)"
c43d69a9 2947AC_ARG_WITH(default-path,
75817f90 2948 [ --with-default-path= Specify default \$PATH environment for server],
cb807f40 2949 [
95b99395 2950 if test "x$external_path_file" = "x/etc/login.conf" ; then
8d184c09 2951 AC_MSG_WARN([
2952--with-default-path=PATH has no effect on this system.
2953Edit /etc/login.conf instead.])
82f4e93d 2954 elif test "x$withval" != "xno" ; then
89bbd457 2955 if test ! -z "$external_path_file" ; then
95b99395 2956 AC_MSG_WARN([
2957--with-default-path=PATH will only be used if PATH is not defined in
2958$external_path_file .])
2959 fi
b2d818e6 2960 user_path="$withval"
aff51935 2961 SERVER_PATH_MSG="$withval"
cb807f40 2962 fi
b2d818e6 2963 ],
95b99395 2964 [ if test "x$external_path_file" = "x/etc/login.conf" ; then
2965 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
8d184c09 2966 else
89bbd457 2967 if test ! -z "$external_path_file" ; then
95b99395 2968 AC_MSG_WARN([
2969If PATH is defined in $external_path_file, ensure the path to scp is included,
2970otherwise scp will not work.])
2971 fi
2972 AC_TRY_RUN(
2973 [
b2d818e6 2974/* find out what STDPATH is */
2975#include <stdio.h>
b2d818e6 2976#ifdef HAVE_PATHS_H
2977# include <paths.h>
2978#endif
2979#ifndef _PATH_STDPATH
d9a4e55b 2980# ifdef _PATH_USERPATH /* Irix */
2981# define _PATH_STDPATH _PATH_USERPATH
2982# else
2983# define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
2984# endif
b2d818e6 2985#endif
2986#include <sys/types.h>
2987#include <sys/stat.h>
2988#include <fcntl.h>
2989#define DATA "conftest.stdpath"
2990
2991main()
2992{
2993 FILE *fd;
2994 int rc;
82f4e93d 2995
b2d818e6 2996 fd = fopen(DATA,"w");
2997 if(fd == NULL)
2998 exit(1);
82f4e93d 2999
b2d818e6 3000 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
3001 exit(1);
3002
3003 exit(0);
3004}
3005 ], [ user_path=`cat conftest.stdpath` ],
3006 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
3007 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
3008 )
3009# make sure $bindir is in USER_PATH so scp will work
3010 t_bindir=`eval echo ${bindir}`
3011 case $t_bindir in
3012 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
3013 esac
3014 case $t_bindir in
3015 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
3016 esac
3017 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
3018 if test $? -ne 0 ; then
3019 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
3020 if test $? -ne 0 ; then
3021 user_path=$user_path:$t_bindir
3022 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
3023 fi
3024 fi
8d184c09 3025 fi ]
cb807f40 3026)
95b99395 3027if test "x$external_path_file" != "x/etc/login.conf" ; then
8d184c09 3028 AC_DEFINE_UNQUOTED(USER_PATH, "$user_path")
3029 AC_SUBST(user_path)
3030fi
cb807f40 3031
06617857 3032# Set superuser path separately to user path
06617857 3033AC_ARG_WITH(superuser-path,
3034 [ --with-superuser-path= Specify different path for super-user],
3035 [
6cf0200f 3036 if test -n "$withval" && test "x$withval" != "xno" && \
3037 test "x${withval}" != "xyes"; then
06617857 3038 AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval")
3039 superuser_path=$withval
3040 fi
3041 ]
3042)
3043
3044
58d100bf 3045AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
aff51935 3046IPV4_IN6_HACK_MSG="no"
80faa19f 3047AC_ARG_WITH(4in6,
3048 [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses],
3049 [
3050 if test "x$withval" != "xno" ; then
3051 AC_MSG_RESULT(yes)
3052 AC_DEFINE(IPV4_IN_IPV6)
aff51935 3053 IPV4_IN6_HACK_MSG="yes"
80faa19f 3054 else
3055 AC_MSG_RESULT(no)
3056 fi
3057 ],[
3058 if test "x$inet6_default_4in6" = "xyes"; then
3059 AC_MSG_RESULT([yes (default)])
3060 AC_DEFINE(IPV4_IN_IPV6)
aff51935 3061 IPV4_IN6_HACK_MSG="yes"
80faa19f 3062 else
3063 AC_MSG_RESULT([no (default)])
3064 fi
3065 ]
3066)
3067
af774732 3068# Whether to enable BSD auth support
f1b0ecc3 3069BSD_AUTH_MSG=no
af774732 3070AC_ARG_WITH(bsd-auth,
3071 [ --with-bsd-auth Enable BSD auth support],
3072 [
82f4e93d 3073 if test "x$withval" != "xno" ; then
af774732 3074 AC_DEFINE(BSD_AUTH)
f1b0ecc3 3075 BSD_AUTH_MSG=yes
af774732 3076 fi
3077 ]
3078)
3079
a0391976 3080# Where to place sshd.pid
19d9ac2a 3081piddir=/var/run
81dadca3 3082# make sure the directory exists
82f4e93d 3083if test ! -d $piddir ; then
81dadca3 3084 piddir=`eval echo ${sysconfdir}`
3085 case $piddir in
aff51935 3086 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
81dadca3 3087 esac
3088fi
3089
47e45e44 3090AC_ARG_WITH(pid-dir,
3091 [ --with-pid-dir=PATH Specify location of ssh.pid file],
3092 [
6cf0200f 3093 if test -n "$withval" && test "x$withval" != "xno" && \
3094 test "x${withval}" != "xyes"; then
19d9ac2a 3095 piddir=$withval
82f4e93d 3096 if test ! -d $piddir ; then
81dadca3 3097 AC_MSG_WARN([** no $piddir directory on this system **])
3098 fi
47e45e44 3099 fi
3100 ]
3101)
b7a87eea 3102
42f11eb2 3103AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir")
19d9ac2a 3104AC_SUBST(piddir)
47e45e44 3105
1d7b9b20 3106dnl allow user to disable some login recording features
3107AC_ARG_ENABLE(lastlog,
bfd550a2 3108 [ --disable-lastlog disable use of lastlog even if detected [no]],
ddb154b3 3109 [
3110 if test "x$enableval" = "xno" ; then
3111 AC_DEFINE(DISABLE_LASTLOG)
3112 fi
3113 ]
1d7b9b20 3114)
3115AC_ARG_ENABLE(utmp,
bfd550a2 3116 [ --disable-utmp disable use of utmp even if detected [no]],
ddb154b3 3117 [
3118 if test "x$enableval" = "xno" ; then
3119 AC_DEFINE(DISABLE_UTMP)
3120 fi
3121 ]
1d7b9b20 3122)
3123AC_ARG_ENABLE(utmpx,
bfd550a2 3124 [ --disable-utmpx disable use of utmpx even if detected [no]],
ddb154b3 3125 [
3126 if test "x$enableval" = "xno" ; then
3127 AC_DEFINE(DISABLE_UTMPX)
3128 fi
3129 ]
1d7b9b20 3130)
3131AC_ARG_ENABLE(wtmp,
bfd550a2 3132 [ --disable-wtmp disable use of wtmp even if detected [no]],
ddb154b3 3133 [
3134 if test "x$enableval" = "xno" ; then
3135 AC_DEFINE(DISABLE_WTMP)
3136 fi
3137 ]
1d7b9b20 3138)
3139AC_ARG_ENABLE(wtmpx,
bfd550a2 3140 [ --disable-wtmpx disable use of wtmpx even if detected [no]],
ddb154b3 3141 [
3142 if test "x$enableval" = "xno" ; then
3143 AC_DEFINE(DISABLE_WTMPX)
3144 fi
3145 ]
1d7b9b20 3146)
3147AC_ARG_ENABLE(libutil,
bfd550a2 3148 [ --disable-libutil disable use of libutil (login() etc.) [no]],
ddb154b3 3149 [
3150 if test "x$enableval" = "xno" ; then
3151 AC_DEFINE(DISABLE_LOGIN)
3152 fi
3153 ]
1d7b9b20 3154)
3155AC_ARG_ENABLE(pututline,
bfd550a2 3156 [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]],
ddb154b3 3157 [
3158 if test "x$enableval" = "xno" ; then
aff51935 3159 AC_DEFINE(DISABLE_PUTUTLINE)
ddb154b3 3160 fi
3161 ]
1d7b9b20 3162)
3163AC_ARG_ENABLE(pututxline,
bfd550a2 3164 [ --disable-pututxline disable use of pututxline() etc. ([uw]tmpx) [no]],
ddb154b3 3165 [
3166 if test "x$enableval" = "xno" ; then
3167 AC_DEFINE(DISABLE_PUTUTXLINE)
3168 fi
3169 ]
1d7b9b20 3170)
3171AC_ARG_WITH(lastlog,
bfd550a2 3172 [ --with-lastlog=FILE|DIR specify lastlog location [common locations]],
8c89dd2b 3173 [
82f4e93d 3174 if test "x$withval" = "xno" ; then
8c89dd2b 3175 AC_DEFINE(DISABLE_LASTLOG)
6cf0200f 3176 elif test -n "$withval" && test "x${withval}" != "xyes"; then
8c89dd2b 3177 conf_lastlog_location=$withval
3178 fi
3179 ]
3180)
1d7b9b20 3181
3182dnl lastlog, [uw]tmpx? detection
3183dnl NOTE: set the paths in the platform section to avoid the
3184dnl need for command-line parameters
3185dnl lastlog and [uw]tmp are subject to a file search if all else fails
3186
3187dnl lastlog detection
3188dnl NOTE: the code itself will detect if lastlog is a directory
3189AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
3190AC_TRY_COMPILE([
3191#include <sys/types.h>
3192#include <utmp.h>
3193#ifdef HAVE_LASTLOG_H
3194# include <lastlog.h>
3195#endif
d7c0f3d5 3196#ifdef HAVE_PATHS_H
1d7b9b20 3197# include <paths.h>
41cb4569 3198#endif
3199#ifdef HAVE_LOGIN_H
3200# include <login.h>
1d7b9b20 3201#endif
3202 ],
3203 [ char *lastlog = LASTLOG_FILE; ],
3204 [ AC_MSG_RESULT(yes) ],
d7c0f3d5 3205 [
3206 AC_MSG_RESULT(no)
3207 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
3208 AC_TRY_COMPILE([
3209#include <sys/types.h>
3210#include <utmp.h>
3211#ifdef HAVE_LASTLOG_H
3212# include <lastlog.h>
3213#endif
3214#ifdef HAVE_PATHS_H
3215# include <paths.h>
3216#endif
3217 ],
3218 [ char *lastlog = _PATH_LASTLOG; ],
3219 [ AC_MSG_RESULT(yes) ],
3220 [
f282b668 3221 AC_MSG_RESULT(no)
d7c0f3d5 3222 system_lastlog_path=no
3223 ])
3224 ]
1d7b9b20 3225)
d7c0f3d5 3226
1d7b9b20 3227if test -z "$conf_lastlog_location"; then
3228 if test x"$system_lastlog_path" = x"no" ; then
3229 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
e5fe9a1f 3230 if (test -d "$f" || test -f "$f") ; then
1d7b9b20 3231 conf_lastlog_location=$f
3232 fi
3233 done
3234 if test -z "$conf_lastlog_location"; then
f8119cef 3235 AC_MSG_WARN([** Cannot find lastlog **])
3236 dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
1d7b9b20 3237 fi
3238 fi
3239fi
3240
3241if test -n "$conf_lastlog_location"; then
3242 AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location")
82f4e93d 3243fi
1d7b9b20 3244
3245dnl utmp detection
3246AC_MSG_CHECKING([if your system defines UTMP_FILE])
3247AC_TRY_COMPILE([
3248#include <sys/types.h>
3249#include <utmp.h>
d7c0f3d5 3250#ifdef HAVE_PATHS_H
1d7b9b20 3251# include <paths.h>
3252#endif
3253 ],
3254 [ char *utmp = UTMP_FILE; ],
3255 [ AC_MSG_RESULT(yes) ],
3256 [ AC_MSG_RESULT(no)
3257 system_utmp_path=no ]
3258)
3259if test -z "$conf_utmp_location"; then
3260 if test x"$system_utmp_path" = x"no" ; then
3261 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3262 if test -f $f ; then
3263 conf_utmp_location=$f
3264 fi
3265 done
3266 if test -z "$conf_utmp_location"; then
3267 AC_DEFINE(DISABLE_UTMP)
3268 fi
3269 fi
3270fi
3271if test -n "$conf_utmp_location"; then
3272 AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location")
82f4e93d 3273fi
1d7b9b20 3274
3275dnl wtmp detection
3276AC_MSG_CHECKING([if your system defines WTMP_FILE])
3277AC_TRY_COMPILE([
3278#include <sys/types.h>
3279#include <utmp.h>
d7c0f3d5 3280#ifdef HAVE_PATHS_H
1d7b9b20 3281# include <paths.h>
3282#endif
3283 ],
3284 [ char *wtmp = WTMP_FILE; ],
3285 [ AC_MSG_RESULT(yes) ],
3286 [ AC_MSG_RESULT(no)
3287 system_wtmp_path=no ]
3288)
3289if test -z "$conf_wtmp_location"; then
3290 if test x"$system_wtmp_path" = x"no" ; then
3291 for f in /usr/adm/wtmp /var/log/wtmp; do
3292 if test -f $f ; then
3293 conf_wtmp_location=$f
3294 fi
3295 done
3296 if test -z "$conf_wtmp_location"; then
3297 AC_DEFINE(DISABLE_WTMP)
3298 fi
3299 fi
3300fi
3301if test -n "$conf_wtmp_location"; then
3302 AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location")
82f4e93d 3303fi
1d7b9b20 3304
3305
3306dnl utmpx detection - I don't know any system so perverse as to require
3307dnl utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3308dnl there, though.
3309AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3310AC_TRY_COMPILE([
3311#include <sys/types.h>
3312#include <utmp.h>
3313#ifdef HAVE_UTMPX_H
3314#include <utmpx.h>
3315#endif
d7c0f3d5 3316#ifdef HAVE_PATHS_H
1d7b9b20 3317# include <paths.h>
3318#endif
3319 ],
3320 [ char *utmpx = UTMPX_FILE; ],
3321 [ AC_MSG_RESULT(yes) ],
3322 [ AC_MSG_RESULT(no)
3323 system_utmpx_path=no ]
3324)
3325if test -z "$conf_utmpx_location"; then
3326 if test x"$system_utmpx_path" = x"no" ; then
3327 AC_DEFINE(DISABLE_UTMPX)
3328 fi
3329else
3330 AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location")
82f4e93d 3331fi
1d7b9b20 3332
3333dnl wtmpx detection
3334AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3335AC_TRY_COMPILE([
3336#include <sys/types.h>
3337#include <utmp.h>
3338#ifdef HAVE_UTMPX_H
3339#include <utmpx.h>
3340#endif
d7c0f3d5 3341#ifdef HAVE_PATHS_H
1d7b9b20 3342# include <paths.h>
3343#endif
3344 ],
3345 [ char *wtmpx = WTMPX_FILE; ],
3346 [ AC_MSG_RESULT(yes) ],
3347 [ AC_MSG_RESULT(no)
3348 system_wtmpx_path=no ]
3349)
3350if test -z "$conf_wtmpx_location"; then
3351 if test x"$system_wtmpx_path" = x"no" ; then
3352 AC_DEFINE(DISABLE_WTMPX)
3353 fi
3354else
3355 AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location")
82f4e93d 3356fi
1d7b9b20 3357
b7a87eea 3358
bd499f9e 3359if test ! -z "$blibpath" ; then
68ece370 3360 LDFLAGS="$LDFLAGS $blibflags$blibpath"
3361 AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
bd499f9e 3362fi
3363
ddceb1c8 3364dnl remove pam and dl because they are in $LIBPAM
3365if test "$PAM_MSG" = yes ; then
98f2d9d5 3366 LIBS=`echo $LIBS | sed 's/-lpam //'`
3367fi
3368if test "$ac_cv_lib_pam_pam_set_item" = yes ; then
3369 LIBS=`echo $LIBS | sed 's/-ldl //'`
ddceb1c8 3370fi
3371
ed89c848 3372dnl Adding -Werror to CFLAGS early prevents configure tests from running.
3373dnl Add now.
3374CFLAGS="$CFLAGS $werror_flags"
3375
3c62e7eb 3376AC_EXEEXT
d7cfdd7c 3377AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openbsd-compat/Makefile \
3378 scard/Makefile ssh_prng_cmds survey.sh])
98a7c37b 3379AC_OUTPUT
d3083fbd 3380
cbd7492e 3381# Print summary of options
3382
cbd7492e 3383# Someone please show me a better way :)
3384A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3385B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3386C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3387D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
f5665f6f 3388E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
e0c4d3ac 3389F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
cbd7492e 3390G=`eval echo ${piddir}` ; G=`eval echo ${G}`
ecac8ee5 3391H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3392I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3393J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
cbd7492e 3394
3395echo ""
26de7942 3396echo "OpenSSH has been configured with the following options:"
ecac8ee5 3397echo " User binaries: $B"
3398echo " System binaries: $C"
3399echo " Configuration files: $D"
3400echo " Askpass program: $E"
3401echo " Manual pages: $F"
3402echo " PID file: $G"
3403echo " Privilege separation chroot path: $H"
95b99395 3404if test "x$external_path_file" = "x/etc/login.conf" ; then
3405echo " At runtime, sshd will use the path defined in $external_path_file"
3406echo " Make sure the path to scp is present, otherwise scp will not work"
8d184c09 3407else
ecac8ee5 3408echo " sshd default user PATH: $I"
89bbd457 3409 if test ! -z "$external_path_file"; then
95b99395 3410echo " (If PATH is set in $external_path_file it will be used instead. If"
3411echo " used, ensure the path to scp is present, otherwise scp will not work.)"
3412 fi
8d184c09 3413fi
06617857 3414if test ! -z "$superuser_path" ; then
ecac8ee5 3415echo " sshd superuser user PATH: $J"
3416fi
3417echo " Manpage format: $MANTYPE"
3e05e934 3418echo " PAM support: $PAM_MSG"
ecac8ee5 3419echo " KerberosV support: $KRB5_MSG"
3420echo " Smartcard support: $SCARD_MSG"
ecac8ee5 3421echo " S/KEY support: $SKEY_MSG"
3422echo " TCP Wrappers support: $TCPW_MSG"
3423echo " MD5 password support: $MD5_MSG"
59031773 3424echo " libedit support: $LIBEDIT_MSG"
3deb1408 3425echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
ecac8ee5 3426echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3427echo " BSD Auth support: $BSD_AUTH_MSG"
3428echo " Random number source: $RAND_MSG"
f1b0ecc3 3429if test ! -z "$USE_RAND_HELPER" ; then
ecac8ee5 3430echo " ssh-rand-helper collects from: $RAND_HELPER_MSG"
af774732 3431fi
3432
cbd7492e 3433echo ""
3434
0c2fb82f 3435echo " Host: ${host}"
3436echo " Compiler: ${CC}"
3437echo " Compiler flags: ${CFLAGS}"
3438echo "Preprocessor flags: ${CPPFLAGS}"
3439echo " Linker flags: ${LDFLAGS}"
ddceb1c8 3440echo " Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
cbd7492e 3441
3442echo ""
3443
9cefe228 3444if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
b3146b5f 3445 echo "SVR4 style packages are supported with \"make package\""
3446 echo ""
9cefe228 3447fi
3448
adeebd37 3449if test "x$PAM_MSG" = "xyes" ; then
f1b0ecc3 3450 echo "PAM is enabled. You may need to install a PAM control file "
3451 echo "for sshd, otherwise password authentication may fail. "
aff51935 3452 echo "Example PAM control files can be found in the contrib/ "
f1b0ecc3 3453 echo "subdirectory"
adeebd37 3454 echo ""
3455fi
3456
f1b0ecc3 3457if test ! -z "$RAND_HELPER_CMDHASH" ; then
3458 echo "WARNING: you are using the builtin random number collection "
3459 echo "service. Please read WARNING.RNG and request that your OS "
3460 echo "vendor includes kernel-based random number collection in "
3461 echo "future versions of your OS."
2c523de9 3462 echo ""
3463fi
af774732 3464
2f6f9cff 3465if test ! -z "$NO_PEERCHECK" ; then
3466 echo "WARNING: the operating system that you are using does not "
3467 echo "appear to support either the getpeereid() API nor the "
3468 echo "SO_PEERCRED getsockopt() option. These facilities are used to "
3469 echo "enforce security checks to prevent unauthorised connections to "
3470 echo "ssh-agent. Their absence increases the risk that a malicious "
3471 echo "user can connect to your agent. "
3472 echo ""
3473fi
3474
7b578f7d 3475if test "$AUDIT_MODULE" = "bsm" ; then
3476 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
3477 echo "See the Solaris section in README.platform for details."
3478fi
git-cvsimport mirror of OpenSSH
This page took 0.966366 seconds and 5 git commands to generate.