]> andersk Git - openssh.git/blame - configure.ac
andersk / openssh.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
- (dtucker) [configure.ac] For AC_CHECK_HEADERS() and AC_CHECK_FUNCS() have
[openssh.git] / configure.ac
CommitLineData
eb5d7ff6 1# $Id$
2b983b95 2#
3# Copyright (c) 1999-2004 Damien Miller
4#
5# Permission to use, copy, modify, and distribute this software for any
6# purpose with or without fee is hereby granted, provided that the above
7# copyright notice and this permission notice appear in all copies.
8#
9# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
0b202697 16
bc6f919d 17AC_INIT(OpenSSH, Portable)
98a7c37b 18AC_CONFIG_SRCDIR([ssh.c])
5881cd60 19
20AC_CONFIG_HEADER(config.h)
b14b2ae7 21AC_PROG_CC
a7effaac 22AC_CANONICAL_HOST
cf0c5df5 23AC_C_BIGENDIAN
5881cd60 24
a0391976 25# Checks for programs.
4bbf95fa 26AC_PROG_AWK
4cca272e 27AC_PROG_CPP
5881cd60 28AC_PROG_RANLIB
cf8dd513 29AC_PROG_INSTALL
bee0a37e 30AC_PATH_PROG(AR, ar)
ddd8c95b 31AC_PATH_PROG(CAT, cat)
32AC_PATH_PROG(KILL, kill)
13dd877b 33AC_PATH_PROGS(PERL, perl5 perl)
c3690df3 34AC_PATH_PROG(SED, sed)
a0f84251 35AC_SUBST(PERL)
ad85db64 36AC_PATH_PROG(ENT, ent)
37AC_SUBST(ENT)
6958bd37 38AC_PATH_PROG(TEST_MINUS_S_SH, bash)
39AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
40AC_PATH_PROG(TEST_MINUS_S_SH, sh)
6193497b 41AC_PATH_PROG(SH, sh)
a3245b92 42AC_SUBST(TEST_SHELL,sh)
f498ed15 43
9cefe228 44dnl for buildpkg.sh
45AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
46 [/usr/sbin${PATH_SEPARATOR}/etc])
47AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
48 [/usr/sbin${PATH_SEPARATOR}/etc])
49AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
50
948fd8b9 51# System features
52AC_SYS_LARGEFILE
53
c193d002 54if test -z "$AR" ; then
55 AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
56fi
57
2e73a022 58# Use LOGIN_PROGRAM from environment if possible
59if test ! -z "$LOGIN_PROGRAM" ; then
60 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM")
61else
62 # Search for login
63 AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
64 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
65 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
66 fi
67fi
68
37656beb 69AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
70if test ! -z "$PATH_PASSWD_PROG" ; then
71 AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG")
72fi
73
d423d822 74if test -z "$LD" ; then
75 LD=$CC
76fi
77AC_SUBST(LD)
82f4e93d 78
d423d822 79AC_C_INLINE
aff51935 80if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
5ed2bb5b 81 CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wno-uninitialized"
8a3ff1aa 82
83 # Check for -std=gnu99 support (needed for LLONG_MIN/MAX on Linux)
84 saved_CFLAGS="$CFLAGS"
85 CFLAGS="$CFLAGS -std=gnu99"
86 AC_MSG_CHECKING(whether cc accepts -std=gnu99 option)
87 AC_TRY_COMPILE([], [return(0);], [AC_MSG_RESULT(yes)],
88 [AC_MSG_RESULT(no)
89 CFLAGS="$saved_CFLAGS"],
90 )
d423d822 91fi
92
e6354014 93AC_ARG_WITH(rpath,
94 [ --without-rpath Disable auto-added -R linker paths],
95 [
82f4e93d 96 if test "x$withval" = "xno" ; then
e6354014 97 need_dash_r=""
98 fi
99 if test "x$withval" = "xyes" ; then
100 need_dash_r=1
101 fi
102 ]
103)
104
a0391976 105# Check for some target-specific stuff
a7effaac 106case "$host" in
9d6b1b96 107*-*-aix*)
aff51935 108 AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
68ece370 109 if (test -z "$blibpath"); then
0a15d73b 110 blibpath="/usr/lib:/lib"
68ece370 111 fi
112 saved_LDFLAGS="$LDFLAGS"
113 for tryflags in -blibpath: -Wl,-blibpath: -Wl,-rpath, ;do
114 if (test -z "$blibflags"); then
115 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
116 AC_TRY_LINK([], [], [blibflags=$tryflags])
117 fi
118 done
119 if (test -z "$blibflags"); then
120 AC_MSG_RESULT(not found)
121 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
122 else
123 AC_MSG_RESULT($blibflags)
bd499f9e 124 fi
68ece370 125 LDFLAGS="$saved_LDFLAGS"
e351e493 126 dnl Check for authenticate. Might be in libs.a on older AIXes
127 AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE)],
0764e748 128 [AC_CHECK_LIB(s,authenticate,
e351e493 129 [ AC_DEFINE(WITH_AIXAUTHENTICATE)
0764e748 130 LIBS="$LIBS -ls"
131 ])
132 ])
ba603e06 133 dnl Check for various auth function declarations in headers.
c85ed8e2 134 AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
72ad335d 135 passwdexpired, setauthdb], , , [#include <usersec.h>])
e351e493 136 dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
ba603e06 137 AC_CHECK_DECLS(loginfailed,
e351e493 138 [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
139 AC_TRY_COMPILE(
f58c0e01 140 [#include <usersec.h>],
e351e493 141 [(void)loginfailed("user","host","tty",0);],
142 [AC_MSG_RESULT(yes)
143 AC_DEFINE(AIX_LOGINFAILED_4ARG)],
f58c0e01 144 [AC_MSG_RESULT(no)]
e351e493 145 )],
146 [],
147 [#include <usersec.h>]
148 )
2aa3a16c 149 AC_CHECK_FUNCS(setauthdb)
5ccf88cb 150 check_for_aix_broken_getaddrinfo=1
1352689f 151 AC_DEFINE(BROKEN_REALPATH)
3b8dff69 152 AC_DEFINE(SETEUID_BREAKS_SETUID)
153 AC_DEFINE(BROKEN_SETREUID)
154 AC_DEFINE(BROKEN_SETREGID)
a3cef3ca 155 dnl AIX handles lastlog as part of its login message
156 AC_DEFINE(DISABLE_LASTLOG)
58177c0a 157 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3a2b2b44 158 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
9d6b1b96 159 ;;
3c62e7eb 160*-*-cygwin*)
a52997bd 161 check_for_libcrypt_later=1
ffb8d130 162 LIBS="$LIBS /usr/lib/textmode.o"
3c62e7eb 163 AC_DEFINE(HAVE_CYGWIN)
7043a38d 164 AC_DEFINE(USE_PIPES)
3c62e7eb 165 AC_DEFINE(DISABLE_SHADOW)
3c62e7eb 166 AC_DEFINE(IP_TOS_IS_BROKEN)
3d114925 167 AC_DEFINE(NO_X11_UNIX_SOCKETS)
e6f15ed1 168 AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT)
94d8258b 169 AC_DEFINE(DISABLE_FD_PASSING)
3c62e7eb 170 ;;
d6fdb079 171*-*-dgux*)
172 AC_DEFINE(IP_TOS_IS_BROKEN)
0c6a72a5 173 AC_DEFINE(SETEUID_BREAKS_SETUID)
174 AC_DEFINE(BROKEN_SETREUID)
175 AC_DEFINE(BROKEN_SETREGID)
d6fdb079 176 ;;
39c98ef7 177*-*-darwin*)
33e2e066 178 AC_MSG_CHECKING(if we have working getaddrinfo)
179 AC_TRY_RUN([#include <mach-o/dyld.h>
180main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
181 exit(0);
182 else
183 exit(1);
184}], [AC_MSG_RESULT(working)],
185 [AC_MSG_RESULT(buggy)
186 AC_DEFINE(BROKEN_GETADDRINFO)],
b27e573d 187 [AC_MSG_RESULT(assume it is working)])
635e0c42 188 AC_DEFINE(SETEUID_BREAKS_SETUID)
189 AC_DEFINE(BROKEN_SETREUID)
190 AC_DEFINE(BROKEN_SETREGID)
ff620033 191 AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1)
39c98ef7 192 ;;
6e879cb4 193*-*-hpux10.26)
194 if test -z "$GCC"; then
195 CFLAGS="$CFLAGS -Ae"
196 fi
197 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
198 IPADDR_IN_DISPLAY=yes
199 AC_DEFINE(HAVE_SECUREWARE)
200 AC_DEFINE(USE_PIPES)
201 AC_DEFINE(LOGIN_NO_ENDOPT)
202 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3e6e3da0 203 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
3a2b2b44 204 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
f75ca46d 205 LIBS="$LIBS -lsec -lsecpw"
206 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
6e879cb4 207 disable_ptmx_check=yes
208 ;;
a7effaac 209*-*-hpux10*)
210 if test -z "$GCC"; then
fc1e8bf4 211 CFLAGS="$CFLAGS -Ae"
a7effaac 212 fi
28564873 213 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
44839801 214 IPADDR_IN_DISPLAY=yes
137d7b6c 215 AC_DEFINE(USE_PIPES)
a2572aa7 216 AC_DEFINE(LOGIN_NO_ENDOPT)
217 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3e6e3da0 218 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
3a2b2b44 219 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
f75ca46d 220 LIBS="$LIBS -lsec"
221 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
a7effaac 222 ;;
2b763e31 223*-*-hpux11*)
b8fea62d 224 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
44839801 225 IPADDR_IN_DISPLAY=yes
adeebd37 226 AC_DEFINE(PAM_SUN_CODEBASE)
2b10f47a 227 AC_DEFINE(USE_PIPES)
a2572aa7 228 AC_DEFINE(LOGIN_NO_ENDOPT)
229 AC_DEFINE(LOGIN_NEEDS_UTMPX)
764d4113 230 AC_DEFINE(DISABLE_UTMP)
3e6e3da0 231 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
3a2b2b44 232 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
b6610e8f 233 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
2fe51906 234 check_for_hpux_broken_getaddrinfo=1
b29fd59f 235 check_for_conflicting_getspnam=1
f75ca46d 236 LIBS="$LIBS -lsec"
237 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
2b763e31 238 ;;
d94aa2ae 239*-*-irix5*)
6ac7829a 240 PATH="$PATH:/usr/etc"
416ed5a7 241 AC_DEFINE(BROKEN_INET_NTOA)
cb433561 242 AC_DEFINE(SETEUID_BREAKS_SETUID)
243 AC_DEFINE(BROKEN_SETREUID)
244 AC_DEFINE(BROKEN_SETREGID)
0e8f4eba 245 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 246 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
b9795b89 247 ;;
248*-*-irix6*)
6ac7829a 249 PATH="$PATH:/usr/etc"
3206bb3b 250 AC_DEFINE(WITH_IRIX_ARRAY)
251 AC_DEFINE(WITH_IRIX_PROJECT)
252 AC_DEFINE(WITH_IRIX_AUDIT)
b5171f93 253 AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS)])
416ed5a7 254 AC_DEFINE(BROKEN_INET_NTOA)
412c0eaa 255 AC_DEFINE(SETEUID_BREAKS_SETUID)
256 AC_DEFINE(BROKEN_SETREUID)
257 AC_DEFINE(BROKEN_SETREGID)
3d59832f 258 AC_DEFINE(BROKEN_UPDWTMPX)
0e8f4eba 259 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 260 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
d94aa2ae 261 ;;
5cdfe03f 262*-*-linux*)
263 no_dev_ptmx=1
717057b6 264 check_for_libcrypt_later=1
eacb954e 265 check_for_openpty_ctty_bug=1
80faa19f 266 AC_DEFINE(DONT_TRY_OTHER_AF)
a8545c6c 267 AC_DEFINE(PAM_TTY_KLUDGE)
b90bed9f 268 AC_DEFINE(LOCKED_PASSWD_PREFIX, "!")
3a2b2b44 269 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
cd698186 270 AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM)
b6610e8f 271 AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
272 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
80faa19f 273 inet6_default_4in6=yes
bf7c1e6c 274 case `uname -r` in
ad84c479 275 1.*|2.0.*)
bf7c1e6c 276 AC_DEFINE(BROKEN_CMSG_TYPE)
277 ;;
bf7c1e6c 278 esac
5cdfe03f 279 ;;
66d6c27e 280mips-sony-bsd|mips-sony-newsos4)
35fc74ed 281 AC_DEFINE(NEED_SETPRGP, [], [Need setpgrp to acquire controlling tty])
66d6c27e 282 SONY=1
66d6c27e 283 ;;
d468fc76 284*-*-netbsd*)
33e2e066 285 check_for_libcrypt_before=1
82f4e93d 286 if test "x$withval" != "xno" ; then
e6354014 287 need_dash_r=1
288 fi
d468fc76 289 ;;
86b416a7 290*-*-freebsd*)
291 check_for_libcrypt_later=1
292 ;;
8707b7eb 293*-*-bsdi*)
294 AC_DEFINE(SETEUID_BREAKS_SETUID)
295 AC_DEFINE(BROKEN_SETREUID)
296 AC_DEFINE(BROKEN_SETREGID)
297 ;;
729bfe59 298*-next-*)
729bfe59 299 conf_lastlog_location="/usr/adm/lastlog"
698d107e 300 conf_utmp_location=/etc/utmp
301 conf_wtmp_location=/usr/adm/wtmp
302 MAIL=/usr/spool/mail
729bfe59 303 AC_DEFINE(HAVE_NEXT)
443172c4 304 AC_DEFINE(BROKEN_REALPATH)
00937921 305 AC_DEFINE(USE_PIPES)
86b416a7 306 AC_DEFINE(BROKEN_SAVED_UIDS)
729bfe59 307 ;;
9d6b1b96 308*-*-solaris*)
82f4e93d 309 if test "x$withval" != "xno" ; then
010e9d5b 310 need_dash_r=1
311 fi
adeebd37 312 AC_DEFINE(PAM_SUN_CODEBASE)
7e2d5fa4 313 AC_DEFINE(LOGIN_NEEDS_UTMPX)
314 AC_DEFINE(LOGIN_NEEDS_TERM)
7f0a4ff1 315 AC_DEFINE(PAM_TTY_KLUDGE)
059d3165 316 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID)
3e6e3da0 317 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
ad84c479 318 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
319 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 320 external_path_file=/etc/default/login
1d7b9b20 321 # hardwire lastlog location (can't detect it on some versions)
322 conf_lastlog_location="/var/adm/lastlog"
32c80420 323 AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
324 sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
325 if test "$sol2ver" -ge 8; then
326 AC_MSG_RESULT(yes)
327 AC_DEFINE(DISABLE_UTMP)
328 AC_DEFINE(DISABLE_WTMP)
329 else
330 AC_MSG_RESULT(no)
331 fi
9d6b1b96 332 ;;
a423beaf 333*-*-sunos4*)
0c2fb82f 334 CPPFLAGS="$CPPFLAGS -DSUNOS4"
a423beaf 335 AC_CHECK_FUNCS(getpwanam)
adeebd37 336 AC_DEFINE(PAM_SUN_CODEBASE)
32eec038 337 conf_utmp_location=/etc/utmp
338 conf_wtmp_location=/var/adm/wtmp
339 conf_lastlog_location=/var/adm/lastlog
137d7b6c 340 AC_DEFINE(USE_PIPES)
a423beaf 341 ;;
6f68f28a 342*-ncr-sysv*)
98a7c37b 343 LIBS="$LIBS -lc89"
29525240 344 AC_DEFINE(USE_PIPES)
eabb99c6 345 AC_DEFINE(SSHD_ACQUIRES_CTTY)
6fb3618d 346 AC_DEFINE(SETEUID_BREAKS_SETUID)
347 AC_DEFINE(BROKEN_SETREUID)
348 AC_DEFINE(BROKEN_SETREGID)
6f68f28a 349 ;;
132dd316 350*-sni-sysv*)
c8c15bcb 351 # /usr/ucblib MUST NOT be searched on ReliantUNIX
e2798e96 352 AC_CHECK_LIB(dl, dlsym, ,)
85cf54ec 353 # -lresolv needs to be at then end of LIBS or DNS lookups break
354 AC_CHECK_LIB(res_query, resolv, [ LIBS="$LIBS -lresolv" ])
9548d6c8 355 IPADDR_IN_DISPLAY=yes
356 AC_DEFINE(USE_PIPES)
132dd316 357 AC_DEFINE(IP_TOS_IS_BROKEN)
605369bb 358 AC_DEFINE(SETEUID_BREAKS_SETUID)
359 AC_DEFINE(BROKEN_SETREUID)
360 AC_DEFINE(BROKEN_SETREGID)
eabb99c6 361 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 362 external_path_file=/etc/default/login
c8c15bcb 363 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
364 # Attention: always take care to bind libsocket and libnsl before libc,
365 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
132dd316 366 ;;
79a7ba96 367# UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
77bb0bca 368*-*-sysv4.2*)
ed6553e2 369 AC_DEFINE(USE_PIPES)
7ed101c0 370 AC_DEFINE(SETEUID_BREAKS_SETUID)
371 AC_DEFINE(BROKEN_SETREUID)
372 AC_DEFINE(BROKEN_SETREGID)
46f853b9 373 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
77bb0bca 374 ;;
79a7ba96 375# UnixWare 7.x, OpenUNIX 8
77bb0bca 376*-*-sysv5*)
ed6553e2 377 AC_DEFINE(USE_PIPES)
7ed101c0 378 AC_DEFINE(SETEUID_BREAKS_SETUID)
379 AC_DEFINE(BROKEN_SETREUID)
380 AC_DEFINE(BROKEN_SETREGID)
46f853b9 381 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
77bb0bca 382 ;;
9d6b1b96 383*-*-sysv*)
9d6b1b96 384 ;;
79a7ba96 385# SCO UNIX and OEM versions of SCO UNIX
77bb0bca 386*-*-sco3.2v4*)
11cf4f1f 387 AC_MSG_ERROR("This Platform is no longer supported.")
77bb0bca 388 ;;
79a7ba96 389# SCO OpenServer 5.x
77bb0bca 390*-*-sco3.2v5*)
21710e39 391 if test -z "$GCC"; then
392 CFLAGS="$CFLAGS -belf"
393 fi
ed6553e2 394 LIBS="$LIBS -lprot -lx -ltinfo -lm"
509b1f88 395 no_dev_ptmx=1
ed6553e2 396 AC_DEFINE(USE_PIPES)
6e879cb4 397 AC_DEFINE(HAVE_SECUREWARE)
d287c664 398 AC_DEFINE(DISABLE_SHADOW)
94d8258b 399 AC_DEFINE(DISABLE_FD_PASSING)
7ed101c0 400 AC_DEFINE(SETEUID_BREAKS_SETUID)
401 AC_DEFINE(BROKEN_SETREUID)
402 AC_DEFINE(BROKEN_SETREGID)
bcebad47 403 AC_DEFINE(WITH_ABBREV_NO_TTY)
34f2baf0 404 AC_DEFINE(BROKEN_UPDWTMPX)
3ade3b57 405 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
aca75d94 406 AC_CHECK_FUNCS(getluid setluid)
533875af 407 MANTYPE=man
a3245b92 408 TEST_SHELL=ksh
509b1f88 409 ;;
ccbb983c 410*-*-unicosmk*)
c1ad5966 411 AC_DEFINE(NO_SSH_LASTLOG)
412 AC_DEFINE(SETEUID_BREAKS_SETUID)
413 AC_DEFINE(BROKEN_SETREUID)
414 AC_DEFINE(BROKEN_SETREGID)
ccbb983c 415 AC_DEFINE(USE_PIPES)
416 AC_DEFINE(DISABLE_FD_PASSING)
417 LDFLAGS="$LDFLAGS"
418 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
419 MANTYPE=cat
d262b7f2 420 ;;
7b9a8c6e 421*-*-unicosmp*)
c1ad5966 422 AC_DEFINE(SETEUID_BREAKS_SETUID)
423 AC_DEFINE(BROKEN_SETREUID)
424 AC_DEFINE(BROKEN_SETREGID)
7b9a8c6e 425 AC_DEFINE(WITH_ABBREV_NO_TTY)
426 AC_DEFINE(USE_PIPES)
427 AC_DEFINE(DISABLE_FD_PASSING)
428 LDFLAGS="$LDFLAGS"
c1ad5966 429 LIBS="$LIBS -lgen -lacid -ldb"
7b9a8c6e 430 MANTYPE=cat
431 ;;
ca5c7d6a 432*-*-unicos*)
c1ad5966 433 AC_DEFINE(SETEUID_BREAKS_SETUID)
434 AC_DEFINE(BROKEN_SETREUID)
435 AC_DEFINE(BROKEN_SETREGID)
ca5c7d6a 436 AC_DEFINE(USE_PIPES)
94d8258b 437 AC_DEFINE(DISABLE_FD_PASSING)
ef51930f 438 AC_DEFINE(NO_SSH_LASTLOG)
ccbb983c 439 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
440 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
441 MANTYPE=cat
a704dd54 442 ;;
4d33e531 443*-dec-osf*)
99c8ddac 444 AC_MSG_CHECKING(for Digital Unix SIA)
445 no_osfsia=""
446 AC_ARG_WITH(osfsia,
447 [ --with-osfsia Enable Digital Unix SIA],
448 [
449 if test "x$withval" = "xno" ; then
450 AC_MSG_RESULT(disabled)
451 no_osfsia=1
452 fi
453 ],
454 )
455 if test -z "$no_osfsia" ; then
4d33e531 456 if test -f /etc/sia/matrix.conf; then
457 AC_MSG_RESULT(yes)
458 AC_DEFINE(HAVE_OSF_SIA)
459 AC_DEFINE(DISABLE_LOGIN)
58d0df4e 460 AC_DEFINE(DISABLE_FD_PASSING)
4d33e531 461 LIBS="$LIBS -lsecurity -ldb -lm -laud"
462 else
463 AC_MSG_RESULT(no)
dbf8efb3 464 AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin")
4d33e531 465 fi
466 fi
a6e67b60 467 AC_DEFINE(BROKEN_GETADDRINFO)
f4f2ff4f 468 AC_DEFINE(SETEUID_BREAKS_SETUID)
08da2d08 469 AC_DEFINE(BROKEN_SETREUID)
470 AC_DEFINE(BROKEN_SETREGID)
4d33e531 471 ;;
41cb4569 472
473*-*-nto-qnx)
474 AC_DEFINE(USE_PIPES)
475 AC_DEFINE(NO_X11_UNIX_SOCKETS)
476 AC_DEFINE(MISSING_NFDBITS)
477 AC_DEFINE(MISSING_HOWMANY)
478 AC_DEFINE(MISSING_FD_MASK)
479 ;;
35fc74ed 480
481*-*-ultrix*)
482 AC_DEFINE(BROKEN_GETGROUPS, [], [getgroups(0,NULL) will return -1])
483 AC_DEFINE(BROKEN_MMAP, [], [Ultrix mmap can't map files])
484 AC_DEFINE(NEED_SETPRGP, [], [Need setpgrp to acquire controlling tty])
485 AC_CHECK_HEADERS(sys/syslog.h)
a7effaac 486esac
487
8e7b16f8 488# Allow user to specify flags
489AC_ARG_WITH(cflags,
490 [ --with-cflags Specify additional flags to pass to compiler],
491 [
6cf0200f 492 if test -n "$withval" && test "x$withval" != "xno" && \
493 test "x${withval}" != "xyes"; then
8e7b16f8 494 CFLAGS="$CFLAGS $withval"
495 fi
82f4e93d 496 ]
8e7b16f8 497)
0c2fb82f 498AC_ARG_WITH(cppflags,
499 [ --with-cppflags Specify additional flags to pass to preprocessor] ,
500 [
6cf0200f 501 if test -n "$withval" && test "x$withval" != "xno" && \
502 test "x${withval}" != "xyes"; then
0c2fb82f 503 CPPFLAGS="$CPPFLAGS $withval"
504 fi
505 ]
506)
8e7b16f8 507AC_ARG_WITH(ldflags,
97b378bf 508 [ --with-ldflags Specify additional flags to pass to linker],
8e7b16f8 509 [
6cf0200f 510 if test -n "$withval" && test "x$withval" != "xno" && \
511 test "x${withval}" != "xyes"; then
8e7b16f8 512 LDFLAGS="$LDFLAGS $withval"
513 fi
82f4e93d 514 ]
8e7b16f8 515)
516AC_ARG_WITH(libs,
517 [ --with-libs Specify additional libraries to link with],
518 [
6cf0200f 519 if test -n "$withval" && test "x$withval" != "xno" && \
520 test "x${withval}" != "xyes"; then
8e7b16f8 521 LIBS="$LIBS $withval"
522 fi
82f4e93d 523 ]
8e7b16f8 524)
525
c5829391 526AC_MSG_CHECKING(compiler and flags for sanity)
479cece8 527AC_RUN_IFELSE(
528 [AC_LANG_SOURCE([
c5829391 529#include <stdio.h>
530int main(){exit(0);}
479cece8 531 ])],
c5829391 532 [ AC_MSG_RESULT(yes) ],
533 [
534 AC_MSG_RESULT(no)
535 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
1a01a50c 536 ],
537 [ AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
c5829391 538)
539
b04a9f8c 540dnl Checks for header files.
541AC_CHECK_HEADERS( \
542 bstring.h \
543 crypt.h \
544 dirent.h \
545 endian.h \
546 features.h \
547 floatingpoint.h \
548 getopt.h \
549 glob.h \
550 ia.h \
551 lastlog.h \
552 limits.h \
553 login.h \
554 login_cap.h \
555 maillock.h \
556 ndir.h \
557 netdb.h \
558 netgroup.h \
559 netinet/in_systm.h \
560 pam/pam_appl.h \
561 paths.h \
562 pty.h \
563 readpassphrase.h \
564 rpc/types.h \
565 security/pam_appl.h \
566 shadow.h \
567 stddef.h \
568 stdint.h \
569 strings.h \
570 sys/audit.h \
571 sys/bitypes.h \
572 sys/bsdtty.h \
573 sys/cdefs.h \
574 sys/dir.h \
575 sys/mman.h \
576 sys/ndir.h \
577 sys/prctl.h \
578 sys/pstat.h \
579 sys/select.h \
580 sys/stat.h \
581 sys/stream.h \
582 sys/stropts.h \
583 sys/strtio.h \
584 sys/sysmacros.h \
585 sys/time.h \
586 sys/timers.h \
587 sys/un.h \
588 time.h \
589 tmpdir.h \
590 ttyent.h \
591 usersec.h \
592 util.h \
593 utime.h \
594 utmp.h \
595 utmpx.h \
596 vis.h\
597)
ddceb1c8 598
765a24cd 599# sys/ptms.h requires sys/stream.h to be included first on Solaris
600AC_CHECK_HEADERS(sys/ptms.h, [], [], [
601#ifdef HAVE_SYS_STREAM_H
602# include <sys/stream.h>
603#endif
604])
605
a0391976 606# Checks for libraries.
98a7c37b 607AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
608AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
2c523de9 609
446227d6 610dnl IRIX and Solaris 2.5.1 have dirname() in libgen
611AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
612 AC_CHECK_LIB(gen, dirname,[
613 AC_CACHE_CHECK([for broken dirname],
614 ac_cv_have_broken_dirname, [
615 save_LIBS="$LIBS"
616 LIBS="$LIBS -lgen"
617 AC_TRY_RUN(
618 [
619#include <libgen.h>
620#include <string.h>
621
622int main(int argc, char **argv) {
623 char *s, buf[32];
624
625 strncpy(buf,"/etc", 32);
626 s = dirname(buf);
627 if (!s || strncmp(s, "/", 32) != 0) {
628 exit(1);
629 } else {
630 exit(0);
631 }
632}
633 ],
634 [ ac_cv_have_broken_dirname="no" ],
635 [ ac_cv_have_broken_dirname="yes" ]
636 )
637 LIBS="$save_LIBS"
638 ])
639 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
640 LIBS="$LIBS -lgen"
641 AC_DEFINE(HAVE_DIRNAME)
642 AC_CHECK_HEADERS(libgen.h)
643 fi
644 ])
645])
646
647AC_CHECK_FUNC(getspnam, ,
648 AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
649AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME))
650
98a7c37b 651dnl zlib is required
652AC_ARG_WITH(zlib,
653 [ --with-zlib=PATH Use zlib in PATH],
6dd05556 654 [ if test "x$withval" = "xno" ; then
655 AC_MSG_ERROR([*** zlib is required ***])
656 elif test "x$withval" != "xyes"; then
98a7c37b 657 if test -d "$withval/lib"; then
658 if test -n "${need_dash_r}"; then
5a162955 659 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 660 else
5a162955 661 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 662 fi
663 else
664 if test -n "${need_dash_r}"; then
5a162955 665 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 666 else
5a162955 667 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 668 fi
669 fi
670 if test -d "$withval/include"; then
5a162955 671 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 672 else
5a162955 673 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 674 fi
6dd05556 675 fi ]
98a7c37b 676)
677
0a15d73b 678AC_CHECK_LIB(z, deflate, ,
679 [
680 saved_CPPFLAGS="$CPPFLAGS"
681 saved_LDFLAGS="$LDFLAGS"
682 save_LIBS="$LIBS"
683 dnl Check default zlib install dir
684 if test -n "${need_dash_r}"; then
685 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
686 else
687 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
688 fi
689 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
690 LIBS="$LIBS -lz"
691 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
692 [
693 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
694 ]
695 )
696 ]
697)
4ad65809 698AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
8068d564 699
700AC_ARG_WITH(zlib-version-check,
701 [ --without-zlib-version-check Disable zlib version check],
702 [ if test "x$withval" = "xno" ; then
703 zlib_check_nonfatal=1
704 fi
705 ]
706)
707
5c7fc85d 708AC_MSG_CHECKING(for possibly buggy zlib)
479cece8 709AC_RUN_IFELSE([AC_LANG_SOURCE([[
5c7fc85d 710#include <stdio.h>
4ad65809 711#include <zlib.h>
712int main()
713{
5c7fc85d 714 int a=0, b=0, c=0, d=0, n, v;
715 n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
716 if (n != 3 && n != 4)
4ad65809 717 exit(1);
5c7fc85d 718 v = a*1000000 + b*10000 + c*100 + d;
719 fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
720
721 /* 1.1.4 is OK */
722 if (a == 1 && b == 1 && c >= 4)
4ad65809 723 exit(0);
5c7fc85d 724
725 /* 1.2.1.2 and up are OK */
726 if (v >= 1020102)
727 exit(0);
728
4ad65809 729 exit(2);
730}
479cece8 731 ]])],
5c7fc85d 732 AC_MSG_RESULT(no),
733 [ AC_MSG_RESULT(yes)
8068d564 734 if test -z "$zlib_check_nonfatal" ; then
735 AC_MSG_ERROR([*** zlib too old - check config.log ***
736Your reported zlib version has known security problems. It's possible your
737vendor has fixed these problems without changing the version number. If you
738are sure this is the case, you can disable the check by running
739"./configure --without-zlib-version-check".
5c7fc85d 740If you are in doubt, upgrade zlib to version 1.2.1.2 or greater.
741See http://www.gzip.org/zlib/ for details.])
8068d564 742 else
743 AC_MSG_WARN([zlib version may have security problems])
744 fi
1a01a50c 745 ],
746 [ AC_MSG_WARN([cross compiling: not checking zlib version]) ]
4ad65809 747)
48e7916f 748
2c523de9 749dnl UnixWare 2.x
aff51935 750AC_CHECK_FUNC(strcasecmp,
2c523de9 751 [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
752)
aff51935 753AC_CHECK_FUNC(utimes,
cda1ebcb 754 [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
755 LIBS="$LIBS -lc89"]) ]
2c523de9 756)
4cca272e 757
7c6d759d 758dnl Checks for libutil functions
759AC_CHECK_HEADERS(libutil.h)
760AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN)])
761AC_CHECK_FUNCS(logout updwtmp logwtmp)
762
a738c3b0 763AC_FUNC_STRFTIME
764
84ceda19 765# Check for ALTDIRFUNC glob() extension
766AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
767AC_EGREP_CPP(FOUNDIT,
768 [
769 #include <glob.h>
770 #ifdef GLOB_ALTDIRFUNC
771 FOUNDIT
772 #endif
aff51935 773 ],
84ceda19 774 [
775 AC_DEFINE(GLOB_HAS_ALTDIRFUNC)
776 AC_MSG_RESULT(yes)
777 ],
778 [
779 AC_MSG_RESULT(no)
780 ]
781)
4cca272e 782
40849fdb 783# Check for g.gl_matchc glob() extension
784AC_MSG_CHECKING(for gl_matchc field in glob_t)
785AC_EGREP_CPP(FOUNDIT,
aff51935 786 [
787 #include <glob.h>
40849fdb 788 int main(void){glob_t g; g.gl_matchc = 1;}
aff51935 789 ],
790 [
791 AC_DEFINE(GLOB_HAS_GL_MATCHC)
792 AC_MSG_RESULT(yes)
793 ],
794 [
795 AC_MSG_RESULT(no)
796 ]
40849fdb 797)
798
edbe6722 799AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
1a01a50c 800AC_RUN_IFELSE(
479cece8 801 [AC_LANG_SOURCE([[
edbe6722 802#include <sys/types.h>
803#include <dirent.h>
aec4cb4f 804int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
479cece8 805 ]])],
aff51935 806 [AC_MSG_RESULT(yes)],
edbe6722 807 [
808 AC_MSG_RESULT(no)
809 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
1a01a50c 810 ],
82f4e93d 811 [
1a01a50c 812 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
813 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
edbe6722 814 ]
815)
816
419e26e7 817AC_MSG_CHECKING([for /proc/pid/fd directory])
818if test -d "/proc/$$/fd" ; then
819 AC_DEFINE(HAVE_PROC_PID)
820 AC_MSG_RESULT(yes)
821else
822 AC_MSG_RESULT(no)
823fi
824
278588d8 825# Check whether user wants S/Key support
aff51935 826SKEY_MSG="no"
278588d8 827AC_ARG_WITH(skey,
6ff3d0dc 828 [ --with-skey[[=PATH]] Enable S/Key support (optionally in PATH)],
278588d8 829 [
830 if test "x$withval" != "xno" ; then
831
832 if test "x$withval" != "xyes" ; then
833 CPPFLAGS="$CPPFLAGS -I${withval}/include"
834 LDFLAGS="$LDFLAGS -L${withval}/lib"
835 fi
836
837 AC_DEFINE(SKEY)
838 LIBS="-lskey $LIBS"
aff51935 839 SKEY_MSG="yes"
82f4e93d 840
ddceb1c8 841 AC_MSG_CHECKING([for s/key support])
842 AC_TRY_RUN(
843 [
844#include <stdio.h>
845#include <skey.h>
aec4cb4f 846int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
ddceb1c8 847 ],
848 [AC_MSG_RESULT(yes)],
278588d8 849 [
ddceb1c8 850 AC_MSG_RESULT(no)
278588d8 851 AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
852 ])
141fc639 853 AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
854 AC_TRY_COMPILE(
855 [#include <stdio.h>
856 #include <skey.h>],
857 [(void)skeychallenge(NULL,"name","",0);],
858 [AC_MSG_RESULT(yes)
859 AC_DEFINE(SKEYCHALLENGE_4ARG)],
860 [AC_MSG_RESULT(no)]
861 )
278588d8 862 fi
863 ]
864)
865
866# Check whether user wants TCP wrappers support
98a7c37b 867TCPW_MSG="no"
278588d8 868AC_ARG_WITH(tcp-wrappers,
6ff3d0dc 869 [ --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
278588d8 870 [
871 if test "x$withval" != "xno" ; then
872 saved_LIBS="$LIBS"
98a7c37b 873 saved_LDFLAGS="$LDFLAGS"
874 saved_CPPFLAGS="$CPPFLAGS"
4b492aab 875 if test -n "${withval}" && \
6cf0200f 876 test "x${withval}" != "xyes"; then
98a7c37b 877 if test -d "${withval}/lib"; then
878 if test -n "${need_dash_r}"; then
5a162955 879 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 880 else
5a162955 881 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 882 fi
883 else
884 if test -n "${need_dash_r}"; then
5a162955 885 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 886 else
5a162955 887 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 888 fi
889 fi
890 if test -d "${withval}/include"; then
5a162955 891 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 892 else
5a162955 893 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 894 fi
98a7c37b 895 fi
ddceb1c8 896 LIBWRAP="-lwrap"
897 LIBS="$LIBWRAP $LIBS"
278588d8 898 AC_MSG_CHECKING(for libwrap)
899 AC_TRY_LINK(
900 [
77f09220 901#include <sys/types.h>
902#include <sys/socket.h>
903#include <netinet/in.h>
278588d8 904#include <tcpd.h>
905 int deny_severity = 0, allow_severity = 0;
906 ],
907 [hosts_access(0);],
908 [
909 AC_MSG_RESULT(yes)
910 AC_DEFINE(LIBWRAP)
ddceb1c8 911 AC_SUBST(LIBWRAP)
98a7c37b 912 TCPW_MSG="yes"
278588d8 913 ],
914 [
915 AC_MSG_ERROR([*** libwrap missing])
916 ]
917 )
ddceb1c8 918 LIBS="$saved_LIBS"
278588d8 919 fi
920 ]
921)
922
59031773 923# Check whether user wants libedit support
924LIBEDIT_MSG="no"
925AC_ARG_WITH(libedit,
6ff3d0dc 926 [ --with-libedit[[=PATH]] Enable libedit support for sftp],
59031773 927 [ if test "x$withval" != "xno" ; then
737edf04 928 if test "x$withval" != "xyes"; then
929 CPPFLAGS="$CPPFLAGS -I$withval/include"
930 LDFLAGS="$LDFLAGS -L$withval/lib"
931 fi
59031773 932 AC_CHECK_LIB(edit, el_init,
933 [ AC_DEFINE(USE_LIBEDIT, [], [Use libedit for sftp])
934 LIBEDIT="-ledit -lcurses"
935 LIBEDIT_MSG="yes"
936 AC_SUBST(LIBEDIT)
937 ],
737edf04 938 [ AC_MSG_ERROR(libedit not found) ],
939 [ -lcurses ]
59031773 940 )
941 fi ]
942)
943
7b578f7d 944AUDIT_MODULE=none
945AC_ARG_WITH(audit,
946 [ --with-audit=module Enable EXPERIMENTAL audit support (modules=debug,bsm)],
947 [
948 AC_MSG_CHECKING(for supported audit module)
949 case "$withval" in
950 bsm)
951 AC_MSG_RESULT(bsm)
952 AUDIT_MODULE=bsm
953 dnl Checks for headers, libs and functions
954 AC_CHECK_HEADERS(bsm/audit.h, [],
955 [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)])
956 AC_CHECK_LIB(bsm, getaudit, [],
957 [AC_MSG_ERROR(BSM enabled and required library not found)])
958 AC_CHECK_FUNCS(getaudit, [],
959 [AC_MSG_ERROR(BSM enabled and required function not found)])
960 # These are optional
7939c496 961 AC_CHECK_FUNCS(getaudit_addr)
7b578f7d 962 AC_DEFINE(USE_BSM_AUDIT, [], [Use BSM audit module])
963 ;;
964 debug)
965 AUDIT_MODULE=debug
966 AC_MSG_RESULT(debug)
967 AC_DEFINE(SSH_AUDIT_EVENTS, [], Use audit debugging module)
968 ;;
969 *)
970 AC_MSG_ERROR([Unknown audit module $withval])
971 ;;
972 esac ]
973)
974
19160674 975dnl Checks for library functions. Please keep in alphabetical order
b04a9f8c 976AC_CHECK_FUNCS( \
977 arc4random \
978 b64_ntop \
979 __b64_ntop \
980 b64_pton \
981 __b64_pton \
982 bcopy \
983 bindresvport_sa \
984 clock \
985 closefrom \
986 dirfd \
987 fchdir \
988 fchmod \
989 fchown \
990 freeaddrinfo \
991 futimes \
992 getaddrinfo \
993 getcwd \
994 getgrouplist \
995 getnameinfo \
996 getopt \
997 getpeereid \
998 _getpty \
999 getrlimit \
1000 getttyent \
1001 glob \
1002 inet_aton \
1003 inet_ntoa \
1004 inet_ntop \
1005 innetgr \
1006 login_getcapbool \
1007 md5_crypt \
1008 memmove \
1009 mkdtemp \
1010 mmap \
1011 ngetaddrinfo \
1012 nsleep \
1013 ogetaddrinfo \
1014 openlog_r \
1015 openpty \
1016 prctl \
1017 pstat \
1018 readpassphrase \
1019 realpath \
1020 recvmsg \
1021 rresvport_af \
1022 sendmsg \
1023 setdtablesize \
1024 setegid \
1025 setenv \
1026 seteuid \
1027 setgroups \
1028 setlogin \
1029 setpcred \
1030 setproctitle \
1031 setregid \
1032 setreuid \
1033 setrlimit \
1034 setsid \
1035 setvbuf \
1036 sigaction \
1037 sigvec \
1038 snprintf \
1039 socketpair \
1040 strdup \
1041 strerror \
1042 strlcat \
1043 strlcpy \
1044 strmode \
1045 strnvis \
1046 strtonum \
1047 strtoul \
1048 sysconf \
1049 tcgetpgrp \
1050 truncate \
1051 unsetenv \
1052 updwtmpx \
1053 utimes \
1054 vhangup \
1055 vsnprintf \
1056 waitpid \
19160674 1057)
98a7c37b 1058
1a086f97 1059# IRIX has a const char return value for gai_strerror()
1060AC_CHECK_FUNCS(gai_strerror,[
1061 AC_DEFINE(HAVE_GAI_STRERROR)
1062 AC_TRY_COMPILE([
1063#include <sys/types.h>
1064#include <sys/socket.h>
1065#include <netdb.h>
1066
1067const char *gai_strerror(int);],[
1068char *str;
1069
1070str = gai_strerror(0);],[
1071 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
1072 [Define if gai_strerror() returns const char *])])])
1073
92b1decf 1074AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP))
1075
309709db 1076dnl Make sure prototypes are defined for these before using them.
08412d26 1077AC_CHECK_DECL(strsep, [AC_CHECK_FUNCS(strsep)])
309709db 1078AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
08412d26 1079
3490699c 1080dnl tcsendbreak might be a macro
1081AC_CHECK_DECL(tcsendbreak,
1082 [AC_DEFINE(HAVE_TCSENDBREAK)],
aff51935 1083 [AC_CHECK_FUNCS(tcsendbreak)],
3490699c 1084 [#include <termios.h>]
1085)
1086
41e0e158 1087AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
1088
3f176010 1089AC_CHECK_FUNCS(setresuid, [
1090 dnl Some platorms have setresuid that isn't implemented, test for this
1091 AC_MSG_CHECKING(if setresuid seems to work)
479cece8 1092 AC_RUN_IFELSE(
1093 [AC_LANG_SOURCE([[
9a3fe0e2 1094#include <stdlib.h>
1095#include <errno.h>
1096int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 1097 ]])],
3f176010 1098 [AC_MSG_RESULT(yes)],
24a9171d 1099 [AC_DEFINE(BROKEN_SETRESUID)
1a01a50c 1100 AC_MSG_RESULT(not implemented)],
1101 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 1102 )
1103])
9a3fe0e2 1104
3f176010 1105AC_CHECK_FUNCS(setresgid, [
1106 dnl Some platorms have setresgid that isn't implemented, test for this
1107 AC_MSG_CHECKING(if setresgid seems to work)
479cece8 1108 AC_RUN_IFELSE(
1109 [AC_LANG_SOURCE([[
9a3fe0e2 1110#include <stdlib.h>
1111#include <errno.h>
1112int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 1113 ]])],
3f176010 1114 [AC_MSG_RESULT(yes)],
1115 [AC_DEFINE(BROKEN_SETRESGID)
1a01a50c 1116 AC_MSG_RESULT(not implemented)],
1117 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 1118 )
1119])
9a3fe0e2 1120
2e73a022 1121dnl Checks for time functions
1d7b9b20 1122AC_CHECK_FUNCS(gettimeofday time)
2e73a022 1123dnl Checks for utmp functions
b03bd394 1124AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1d7b9b20 1125AC_CHECK_FUNCS(utmpname)
2e73a022 1126dnl Checks for utmpx functions
b03bd394 1127AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1d7b9b20 1128AC_CHECK_FUNCS(setutxent utmpxname)
76cd7316 1129
aff51935 1130AC_CHECK_FUNC(daemon,
beb43d31 1131 [AC_DEFINE(HAVE_DAEMON)],
1132 [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
1133)
1134
aff51935 1135AC_CHECK_FUNC(getpagesize,
aa6bd60a 1136 [AC_DEFINE(HAVE_GETPAGESIZE)],
1137 [AC_CHECK_LIB(ucb, getpagesize, [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
1138)
1139
2647ae26 1140# Check for broken snprintf
1141if test "x$ac_cv_func_snprintf" = "xyes" ; then
1142 AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1a01a50c 1143 AC_RUN_IFELSE(
479cece8 1144 [AC_LANG_SOURCE([[
2647ae26 1145#include <stdio.h>
aec4cb4f 1146int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
479cece8 1147 ]])],
aff51935 1148 [AC_MSG_RESULT(yes)],
2647ae26 1149 [
1150 AC_MSG_RESULT(no)
1151 AC_DEFINE(BROKEN_SNPRINTF)
1152 AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1a01a50c 1153 ],
1154 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
2647ae26 1155 )
1156fi
1157
2f6f9cff 1158# Check for missing getpeereid (or equiv) support
1159NO_PEERCHECK=""
1160if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1161 AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1162 AC_TRY_COMPILE(
1163 [#include <sys/types.h>
1164 #include <sys/socket.h>],
1165 [int i = SO_PEERCRED;],
62eb7db4 1166 [ AC_MSG_RESULT(yes)
1167 AC_DEFINE(HAVE_SO_PEERCRED, [], [Have PEERCRED socket option])
1168 ],
2f6f9cff 1169 [AC_MSG_RESULT(no)
1170 NO_PEERCHECK=1]
1171 )
1172fi
1173
70e7d0b0 1174dnl see whether mkstemp() requires XXXXXX
1175if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1176AC_MSG_CHECKING([for (overly) strict mkstemp])
1177AC_TRY_RUN(
1178 [
1179#include <stdlib.h>
1180main() { char template[]="conftest.mkstemp-test";
1181if (mkstemp(template) == -1)
1182 exit(1);
1183unlink(template); exit(0);
1184}
1185 ],
1186 [
1187 AC_MSG_RESULT(no)
1188 ],
aff51935 1189 [
70e7d0b0 1190 AC_MSG_RESULT(yes)
1191 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1192 ],
1193 [
1194 AC_MSG_RESULT(yes)
1195 AC_DEFINE(HAVE_STRICT_MKSTEMP)
aff51935 1196 ]
70e7d0b0 1197)
1198fi
1199
eacb954e 1200dnl make sure that openpty does not reacquire controlling terminal
1201if test ! -z "$check_for_openpty_ctty_bug"; then
1202 AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1203 AC_TRY_RUN(
1204 [
1205#include <stdio.h>
1206#include <sys/fcntl.h>
1207#include <sys/types.h>
1208#include <sys/wait.h>
1209
1210int
1211main()
1212{
1213 pid_t pid;
1214 int fd, ptyfd, ttyfd, status;
1215
1216 pid = fork();
1217 if (pid < 0) { /* failed */
1218 exit(1);
1219 } else if (pid > 0) { /* parent */
1220 waitpid(pid, &status, 0);
aff51935 1221 if (WIFEXITED(status))
eacb954e 1222 exit(WEXITSTATUS(status));
1223 else
1224 exit(2);
1225 } else { /* child */
1226 close(0); close(1); close(2);
1227 setsid();
1228 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1229 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1230 if (fd >= 0)
1231 exit(3); /* Acquired ctty: broken */
1232 else
1233 exit(0); /* Did not acquire ctty: OK */
1234 }
1235}
1236 ],
1237 [
1238 AC_MSG_RESULT(yes)
1239 ],
1240 [
1241 AC_MSG_RESULT(no)
1242 AC_DEFINE(SSHD_ACQUIRES_CTTY)
1243 ]
1244 )
1245fi
1246
4b492aab 1247if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1248 test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
2fe51906 1249 AC_MSG_CHECKING(if getaddrinfo seems to work)
1250 AC_TRY_RUN(
1251 [
1252#include <stdio.h>
1253#include <sys/socket.h>
1254#include <netdb.h>
1255#include <errno.h>
1256#include <netinet/in.h>
1257
1258#define TEST_PORT "2222"
1259
1260int
1261main(void)
1262{
1263 int err, sock;
1264 struct addrinfo *gai_ai, *ai, hints;
1265 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1266
1267 memset(&hints, 0, sizeof(hints));
1268 hints.ai_family = PF_UNSPEC;
1269 hints.ai_socktype = SOCK_STREAM;
1270 hints.ai_flags = AI_PASSIVE;
1271
1272 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1273 if (err != 0) {
1274 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1275 exit(1);
1276 }
1277
1278 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1279 if (ai->ai_family != AF_INET6)
1280 continue;
1281
1282 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1283 sizeof(ntop), strport, sizeof(strport),
1284 NI_NUMERICHOST|NI_NUMERICSERV);
1285
1286 if (err != 0) {
1287 if (err == EAI_SYSTEM)
1288 perror("getnameinfo EAI_SYSTEM");
1289 else
1290 fprintf(stderr, "getnameinfo failed: %s\n",
1291 gai_strerror(err));
1292 exit(2);
1293 }
1294
1295 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1296 if (sock < 0)
1297 perror("socket");
1298 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1299 if (errno == EBADF)
1300 exit(3);
1301 }
1302 }
1303 exit(0);
1304}
1305 ],
1306 [
1307 AC_MSG_RESULT(yes)
1308 ],
1309 [
1310 AC_MSG_RESULT(no)
1311 AC_DEFINE(BROKEN_GETADDRINFO)
1312 ]
1313 )
1314fi
1315
4b492aab 1316if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1317 test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
5ccf88cb 1318 AC_MSG_CHECKING(if getaddrinfo seems to work)
1319 AC_TRY_RUN(
1320 [
1321#include <stdio.h>
1322#include <sys/socket.h>
1323#include <netdb.h>
1324#include <errno.h>
1325#include <netinet/in.h>
1326
1327#define TEST_PORT "2222"
1328
1329int
1330main(void)
1331{
1332 int err, sock;
1333 struct addrinfo *gai_ai, *ai, hints;
1334 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1335
1336 memset(&hints, 0, sizeof(hints));
1337 hints.ai_family = PF_UNSPEC;
1338 hints.ai_socktype = SOCK_STREAM;
1339 hints.ai_flags = AI_PASSIVE;
1340
1341 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1342 if (err != 0) {
1343 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1344 exit(1);
1345 }
1346
1347 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1348 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1349 continue;
1350
1351 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1352 sizeof(ntop), strport, sizeof(strport),
1353 NI_NUMERICHOST|NI_NUMERICSERV);
1354
1355 if (ai->ai_family == AF_INET && err != 0) {
1356 perror("getnameinfo");
1357 exit(2);
1358 }
1359 }
1360 exit(0);
1361}
1362 ],
1363 [
1364 AC_MSG_RESULT(yes)
1365 AC_DEFINE(AIX_GETNAMEINFO_HACK, [],
1366[Define if you have a getaddrinfo that fails for the all-zeros IPv6 address])
1367 ],
1368 [
1369 AC_MSG_RESULT(no)
1370 AC_DEFINE(BROKEN_GETADDRINFO)
1371 ]
1372 )
1373fi
1374
b29fd59f 1375if test "x$check_for_conflicting_getspnam" = "x1"; then
1376 AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1377 AC_COMPILE_IFELSE(
1378 [
1379#include <shadow.h>
1380int main(void) {exit(0);}
1381 ],
1382 [
1383 AC_MSG_RESULT(no)
1384 ],
1385 [
1386 AC_MSG_RESULT(yes)
1387 AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1388 [Conflicting defs for getspnam])
1389 ]
1390 )
1391fi
1392
7f8f5e00 1393AC_FUNC_GETPGRP
1394
717057b6 1395# Check for PAM libs
cbd7492e 1396PAM_MSG="no"
a0391976 1397AC_ARG_WITH(pam,
717057b6 1398 [ --with-pam Enable PAM support ],
a0391976 1399 [
717057b6 1400 if test "x$withval" != "xno" ; then
2511d104 1401 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
1402 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
717057b6 1403 AC_MSG_ERROR([PAM headers not found])
1404 fi
a0391976 1405
717057b6 1406 AC_CHECK_LIB(dl, dlopen, , )
1407 AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
1408 AC_CHECK_FUNCS(pam_getenvlist)
749560dd 1409 AC_CHECK_FUNCS(pam_putenv)
2b763e31 1410
717057b6 1411 PAM_MSG="yes"
4cb5ffa0 1412
717057b6 1413 AC_DEFINE(USE_PAM)
98f2d9d5 1414 if test $ac_cv_lib_dl_dlopen = yes; then
1415 LIBPAM="-lpam -ldl"
1416 else
1417 LIBPAM="-lpam"
1418 fi
1419 AC_SUBST(LIBPAM)
717057b6 1420 fi
1421 ]
1422)
cbd7492e 1423
717057b6 1424# Check for older PAM
1425if test "x$PAM_MSG" = "xyes" ; then
a0391976 1426 # Check PAM strerror arguments (old PAM)
1427 AC_MSG_CHECKING([whether pam_strerror takes only one argument])
1428 AC_TRY_COMPILE(
1429 [
18ba2aab 1430#include <stdlib.h>
2511d104 1431#if defined(HAVE_SECURITY_PAM_APPL_H)
18ba2aab 1432#include <security/pam_appl.h>
2511d104 1433#elif defined (HAVE_PAM_PAM_APPL_H)
1434#include <pam/pam_appl.h>
1435#endif
aff51935 1436 ],
1437 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
a0391976 1438 [AC_MSG_RESULT(no)],
1439 [
1440 AC_DEFINE(HAVE_OLD_PAM)
1441 AC_MSG_RESULT(yes)
cbd7492e 1442 PAM_MSG="yes (old library)"
a0391976 1443 ]
717057b6 1444 )
a0391976 1445fi
1446
5b991353 1447# Search for OpenSSL
1448saved_CPPFLAGS="$CPPFLAGS"
1449saved_LDFLAGS="$LDFLAGS"
a0391976 1450AC_ARG_WITH(ssl-dir,
1451 [ --with-ssl-dir=PATH Specify path to OpenSSL installation ],
1452 [
e9e4a1c7 1453 if test "x$withval" != "xno" ; then
99eb0f64 1454 case "$withval" in
1455 # Relative paths
1456 ./*|../*) withval="`pwd`/$withval"
1457 esac
5b991353 1458 if test -d "$withval/lib"; then
1459 if test -n "${need_dash_r}"; then
1460 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1461 else
1462 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
d6f13fbb 1463 fi
1464 else
5b991353 1465 if test -n "${need_dash_r}"; then
1466 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1467 else
1468 LDFLAGS="-L${withval} ${LDFLAGS}"
d6f13fbb 1469 fi
1470 fi
5b991353 1471 if test -d "$withval/include"; then
1472 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
d6f13fbb 1473 else
5b991353 1474 CPPFLAGS="-I${withval} ${CPPFLAGS}"
58d100bf 1475 fi
a0391976 1476 fi
5b991353 1477 ]
1478)
5486a457 1479LIBS="-lcrypto $LIBS"
5b991353 1480AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
d45e3d76 1481 [
5b991353 1482 dnl Check default openssl install dir
1483 if test -n "${need_dash_r}"; then
1484 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1485 else
5b991353 1486 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1487 fi
5b991353 1488 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1489 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1490 [
1491 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1492 ]
1493 )
1494 ]
1495)
1496
cd018561 1497# Determine OpenSSL header version
1498AC_MSG_CHECKING([OpenSSL header version])
1a01a50c 1499AC_RUN_IFELSE(
479cece8 1500 [AC_LANG_SOURCE([[
cd018561 1501#include <stdio.h>
1502#include <string.h>
1503#include <openssl/opensslv.h>
1504#define DATA "conftest.sslincver"
1505int main(void) {
aff51935 1506 FILE *fd;
1507 int rc;
cd018561 1508
aff51935 1509 fd = fopen(DATA,"w");
1510 if(fd == NULL)
1511 exit(1);
cd018561 1512
1513 if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1514 exit(1);
1515
1516 exit(0);
1517}
479cece8 1518 ]])],
cd018561 1519 [
1520 ssl_header_ver=`cat conftest.sslincver`
1521 AC_MSG_RESULT($ssl_header_ver)
1522 ],
1523 [
1524 AC_MSG_RESULT(not found)
1525 AC_MSG_ERROR(OpenSSL version header not found.)
1a01a50c 1526 ],
1527 [
1528 AC_MSG_WARN([cross compiling: not checking])
cd018561 1529 ]
1530)
1531
1532# Determine OpenSSL library version
1533AC_MSG_CHECKING([OpenSSL library version])
1a01a50c 1534AC_RUN_IFELSE(
479cece8 1535 [AC_LANG_SOURCE([[
cd018561 1536#include <stdio.h>
1537#include <string.h>
1538#include <openssl/opensslv.h>
1539#include <openssl/crypto.h>
1540#define DATA "conftest.ssllibver"
1541int main(void) {
aff51935 1542 FILE *fd;
1543 int rc;
cd018561 1544
aff51935 1545 fd = fopen(DATA,"w");
1546 if(fd == NULL)
1547 exit(1);
cd018561 1548
1549 if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1550 exit(1);
1551
1552 exit(0);
1553}
479cece8 1554 ]])],
cd018561 1555 [
1556 ssl_library_ver=`cat conftest.ssllibver`
1557 AC_MSG_RESULT($ssl_library_ver)
1558 ],
1559 [
1560 AC_MSG_RESULT(not found)
1561 AC_MSG_ERROR(OpenSSL library not found.)
1a01a50c 1562 ],
1563 [
1564 AC_MSG_WARN([cross compiling: not checking])
cd018561 1565 ]
1566)
58d100bf 1567
9780116c 1568# Sanity check OpenSSL headers
1569AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1a01a50c 1570AC_RUN_IFELSE(
479cece8 1571 [AC_LANG_SOURCE([[
9780116c 1572#include <string.h>
1573#include <openssl/opensslv.h>
aec4cb4f 1574int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
479cece8 1575 ]])],
9780116c 1576 [
1577 AC_MSG_RESULT(yes)
1578 ],
1579 [
1580 AC_MSG_RESULT(no)
e15ba28b 1581 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1582Check config.log for details.
1583Also see contrib/findssl.sh for help identifying header/library mismatches.])
1a01a50c 1584 ],
1585 [
1586 AC_MSG_WARN([cross compiling: not checking])
9780116c 1587 ]
1588)
1589
5486a457 1590# Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1591# because the system crypt() is more featureful.
1592if test "x$check_for_libcrypt_before" = "x1"; then
1593 AC_CHECK_LIB(crypt, crypt)
1594fi
1595
aff51935 1596# Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
8087c5ee 1597# version in OpenSSL.
05114c74 1598if test "x$check_for_libcrypt_later" = "x1"; then
20cad736 1599 AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
717057b6 1600fi
1601
f1b0ecc3 1602
1603### Configure cryptographic random number support
1604
1605# Check wheter OpenSSL seeds itself
1606AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1a01a50c 1607AC_RUN_IFELSE(
479cece8 1608 [AC_LANG_SOURCE([[
f1b0ecc3 1609#include <string.h>
1610#include <openssl/rand.h>
aec4cb4f 1611int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
479cece8 1612 ]])],
f1b0ecc3 1613 [
1614 OPENSSL_SEEDS_ITSELF=yes
1615 AC_MSG_RESULT(yes)
1616 ],
1617 [
1618 AC_MSG_RESULT(no)
1619 # Default to use of the rand helper if OpenSSL doesn't
1620 # seed itself
1621 USE_RAND_HELPER=yes
1a01a50c 1622 ],
1623 [
1624 AC_MSG_WARN([cross compiling: assuming yes])
1625 # This is safe, since all recent OpenSSL versions will
82f4e93d 1626 # complain at runtime if not seeded correctly.
1a01a50c 1627 OPENSSL_SEEDS_ITSELF=yes
f1b0ecc3 1628 ]
1629)
1630
1631
1632# Do we want to force the use of the rand helper?
1633AC_ARG_WITH(rand-helper,
1634 [ --with-rand-helper Use subprocess to gather strong randomness ],
1635 [
1636 if test "x$withval" = "xno" ; then
aff51935 1637 # Force use of OpenSSL's internal RNG, even if
f1b0ecc3 1638 # the previous test showed it to be unseeded.
1639 if test -z "$OPENSSL_SEEDS_ITSELF" ; then
1640 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
1641 OPENSSL_SEEDS_ITSELF=yes
1642 USE_RAND_HELPER=""
1643 fi
1644 else
1645 USE_RAND_HELPER=yes
1646 fi
1647 ],
82f4e93d 1648)
f1b0ecc3 1649
1650# Which randomness source do we use?
4b492aab 1651if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
f1b0ecc3 1652 # OpenSSL only
1653 AC_DEFINE(OPENSSL_PRNG_ONLY)
1654 RAND_MSG="OpenSSL internal ONLY"
1655 INSTALL_SSH_RAND_HELPER=""
70e2f2f3 1656elif test ! -z "$USE_RAND_HELPER" ; then
1657 # install rand helper
f1b0ecc3 1658 RAND_MSG="ssh-rand-helper"
1659 INSTALL_SSH_RAND_HELPER="yes"
1660fi
1661AC_SUBST(INSTALL_SSH_RAND_HELPER)
1662
1663### Configuration of ssh-rand-helper
1664
1665# PRNGD TCP socket
1666AC_ARG_WITH(prngd-port,
1667 [ --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT],
1668 [
eb5d7ff6 1669 case "$withval" in
1670 no)
1671 withval=""
1672 ;;
1673 [[0-9]]*)
1674 ;;
1675 *)
1676 AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
1677 ;;
1678 esac
1679 if test ! -z "$withval" ; then
f1b0ecc3 1680 PRNGD_PORT="$withval"
1681 AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT)
1682 fi
1683 ]
1684)
1685
1686# PRNGD Unix domain socket
1687AC_ARG_WITH(prngd-socket,
1688 [ --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
1689 [
eb5d7ff6 1690 case "$withval" in
1691 yes)
f1b0ecc3 1692 withval="/var/run/egd-pool"
eb5d7ff6 1693 ;;
1694 no)
1695 withval=""
1696 ;;
1697 /*)
1698 ;;
1699 *)
1700 AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
1701 ;;
1702 esac
1703
1704 if test ! -z "$withval" ; then
f1b0ecc3 1705 if test ! -z "$PRNGD_PORT" ; then
1706 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
1707 fi
906e811b 1708 if test ! -r "$withval" ; then
f1b0ecc3 1709 AC_MSG_WARN(Entropy socket is not readable)
1710 fi
1711 PRNGD_SOCKET="$withval"
1712 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1713 fi
ddceb1c8 1714 ],
1715 [
1716 # Check for existing socket only if we don't have a random device already
1717 if test "$USE_RAND_HELPER" = yes ; then
1718 AC_MSG_CHECKING(for PRNGD/EGD socket)
1719 # Insert other locations here
1720 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
1721 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
1722 PRNGD_SOCKET="$sock"
1723 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1724 break;
1725 fi
1726 done
1727 if test ! -z "$PRNGD_SOCKET" ; then
1728 AC_MSG_RESULT($PRNGD_SOCKET)
1729 else
1730 AC_MSG_RESULT(not found)
1731 fi
1732 fi
f1b0ecc3 1733 ]
1734)
1735
1736# Change default command timeout for hashing entropy source
1737entropy_timeout=200
1738AC_ARG_WITH(entropy-timeout,
1739 [ --with-entropy-timeout Specify entropy gathering command timeout (msec)],
1740 [
6cf0200f 1741 if test -n "$withval" && test "x$withval" != "xno" && \
1742 test "x${withval}" != "xyes"; then
f1b0ecc3 1743 entropy_timeout=$withval
1744 fi
82f4e93d 1745 ]
f1b0ecc3 1746)
f1b0ecc3 1747AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout)
1748
fd3cbf67 1749SSH_PRIVSEP_USER=sshd
9a0fbcb3 1750AC_ARG_WITH(privsep-user,
5222e7ef 1751 [ --with-privsep-user=user Specify non-privileged user for privilege separation],
9a0fbcb3 1752 [
6cf0200f 1753 if test -n "$withval" && test "x$withval" != "xno" && \
1754 test "x${withval}" != "xyes"; then
fd3cbf67 1755 SSH_PRIVSEP_USER=$withval
9a0fbcb3 1756 fi
82f4e93d 1757 ]
9a0fbcb3 1758)
fd3cbf67 1759AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER")
1760AC_SUBST(SSH_PRIVSEP_USER)
9a0fbcb3 1761
81dadca3 1762# We do this little dance with the search path to insure
1763# that programs that we select for use by installed programs
1764# (which may be run by the super-user) come from trusted
1765# locations before they come from the user's private area.
1766# This should help avoid accidentally configuring some
1767# random version of a program in someone's personal bin.
1768
1769OPATH=$PATH
1770PATH=/bin:/usr/bin
f95c8ce8 1771test -h /bin 2> /dev/null && PATH=/usr/bin
81dadca3 1772test -d /sbin && PATH=$PATH:/sbin
1773test -d /usr/sbin && PATH=$PATH:/usr/sbin
1774PATH=$PATH:/etc:$OPATH
1775
aff51935 1776# These programs are used by the command hashing source to gather entropy
f1b0ecc3 1777OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
1778OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
1779OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
1780OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
1781OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
1782OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
1783OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
1784OSSH_PATH_ENTROPY_PROG(PROG_W, w)
1785OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
1786OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
1787OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
1788OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
1789OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
1790OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
1791OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
1792OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
81dadca3 1793# restore PATH
1794PATH=$OPATH
f1b0ecc3 1795
1796# Where does ssh-rand-helper get its randomness from?
1797INSTALL_SSH_PRNG_CMDS=""
1798if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
1799 if test ! -z "$PRNGD_PORT" ; then
1800 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
1801 elif test ! -z "$PRNGD_SOCKET" ; then
1802 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
1803 else
1804 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
1805 RAND_HELPER_CMDHASH=yes
1806 INSTALL_SSH_PRNG_CMDS="yes"
1807 fi
1808fi
1809AC_SUBST(INSTALL_SSH_PRNG_CMDS)
1810
1811
66d6c27e 1812# Cheap hack to ensure NEWS-OS libraries are arranged right.
1813if test ! -z "$SONY" ; then
1814 LIBS="$LIBS -liberty";
1815fi
1816
a0391976 1817# Checks for data types
976f7e19 1818AC_CHECK_SIZEOF(char, 1)
2b942fe0 1819AC_CHECK_SIZEOF(short int, 2)
1820AC_CHECK_SIZEOF(int, 4)
1821AC_CHECK_SIZEOF(long int, 4)
1822AC_CHECK_SIZEOF(long long int, 8)
1823
52f1ccb2 1824# Sanity check long long for some platforms (AIX)
1825if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
1826 ac_cv_sizeof_long_long_int=0
1827fi
1828
a0391976 1829# More checks for data types
14a9a859 1830AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
1831 AC_TRY_COMPILE(
aff51935 1832 [ #include <sys/types.h> ],
1833 [ u_int a; a = 1;],
14a9a859 1834 [ ac_cv_have_u_int="yes" ],
1835 [ ac_cv_have_u_int="no" ]
1836 )
1837])
1838if test "x$ac_cv_have_u_int" = "xyes" ; then
1839 AC_DEFINE(HAVE_U_INT)
1840 have_u_int=1
1841fi
1842
58d100bf 1843AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
1844 AC_TRY_COMPILE(
aff51935 1845 [ #include <sys/types.h> ],
1846 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
58d100bf 1847 [ ac_cv_have_intxx_t="yes" ],
1848 [ ac_cv_have_intxx_t="no" ]
1849 )
1850])
1851if test "x$ac_cv_have_intxx_t" = "xyes" ; then
1852 AC_DEFINE(HAVE_INTXX_T)
1853 have_intxx_t=1
1854fi
41cb4569 1855
1856if (test -z "$have_intxx_t" && \
aff51935 1857 test "x$ac_cv_header_stdint_h" = "xyes")
41cb4569 1858then
1859 AC_MSG_CHECKING([for intXX_t types in stdint.h])
1860 AC_TRY_COMPILE(
aff51935 1861 [ #include <stdint.h> ],
1862 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
41cb4569 1863 [
1864 AC_DEFINE(HAVE_INTXX_T)
1865 AC_MSG_RESULT(yes)
1866 ],
1867 [ AC_MSG_RESULT(no) ]
1868 )
1869fi
1870
bd590612 1871AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
1872 AC_TRY_COMPILE(
1cbbe6c8 1873 [
1874#include <sys/types.h>
1875#ifdef HAVE_STDINT_H
1876# include <stdint.h>
1877#endif
1878#include <sys/socket.h>
1879#ifdef HAVE_SYS_BITYPES_H
1880# include <sys/bitypes.h>
1881#endif
aff51935 1882 ],
1883 [ int64_t a; a = 1;],
bd590612 1884 [ ac_cv_have_int64_t="yes" ],
1885 [ ac_cv_have_int64_t="no" ]
1886 )
1887])
1888if test "x$ac_cv_have_int64_t" = "xyes" ; then
1889 AC_DEFINE(HAVE_INT64_T)
ddceb1c8 1890fi
1891
58d100bf 1892AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
1893 AC_TRY_COMPILE(
aff51935 1894 [ #include <sys/types.h> ],
1895 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
58d100bf 1896 [ ac_cv_have_u_intxx_t="yes" ],
1897 [ ac_cv_have_u_intxx_t="no" ]
1898 )
1899])
1900if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
1901 AC_DEFINE(HAVE_U_INTXX_T)
1902 have_u_intxx_t=1
1903fi
2b942fe0 1904
41cb4569 1905if test -z "$have_u_intxx_t" ; then
1906 AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
1907 AC_TRY_COMPILE(
aff51935 1908 [ #include <sys/socket.h> ],
1909 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
41cb4569 1910 [
1911 AC_DEFINE(HAVE_U_INTXX_T)
1912 AC_MSG_RESULT(yes)
1913 ],
1914 [ AC_MSG_RESULT(no) ]
1915 )
1916fi
1917
bd590612 1918AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
1919 AC_TRY_COMPILE(
aff51935 1920 [ #include <sys/types.h> ],
1921 [ u_int64_t a; a = 1;],
bd590612 1922 [ ac_cv_have_u_int64_t="yes" ],
1923 [ ac_cv_have_u_int64_t="no" ]
1924 )
1925])
1926if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
1927 AC_DEFINE(HAVE_U_INT64_T)
1928 have_u_int64_t=1
1929fi
1930
ddceb1c8 1931if test -z "$have_u_int64_t" ; then
1932 AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
1933 AC_TRY_COMPILE(
aff51935 1934 [ #include <sys/bitypes.h> ],
ddceb1c8 1935 [ u_int64_t a; a = 1],
1936 [
1937 AC_DEFINE(HAVE_U_INT64_T)
1938 AC_MSG_RESULT(yes)
1939 ],
1940 [ AC_MSG_RESULT(no) ]
1941 )
1942fi
1943
41cb4569 1944if test -z "$have_u_intxx_t" ; then
1945 AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
1946 AC_TRY_COMPILE(
1947 [
1948#include <sys/types.h>
aff51935 1949 ],
1950 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
41cb4569 1951 [ ac_cv_have_uintxx_t="yes" ],
1952 [ ac_cv_have_uintxx_t="no" ]
1953 )
1954 ])
1955 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
1956 AC_DEFINE(HAVE_UINTXX_T)
1957 fi
1958fi
1959
1960if test -z "$have_uintxx_t" ; then
1961 AC_MSG_CHECKING([for uintXX_t types in stdint.h])
1962 AC_TRY_COMPILE(
aff51935 1963 [ #include <stdint.h> ],
1964 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
41cb4569 1965 [
1966 AC_DEFINE(HAVE_UINTXX_T)
1967 AC_MSG_RESULT(yes)
1968 ],
1969 [ AC_MSG_RESULT(no) ]
1970 )
1971fi
1972
e5fe9a1f 1973if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
aff51935 1974 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
5cdfe03f 1975then
1976 AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
1977 AC_TRY_COMPILE(
58d100bf 1978 [
1979#include <sys/bitypes.h>
aff51935 1980 ],
5cdfe03f 1981 [
837c30b8 1982 int8_t a; int16_t b; int32_t c;
1983 u_int8_t e; u_int16_t f; u_int32_t g;
1984 a = b = c = e = f = g = 1;
aff51935 1985 ],
5cdfe03f 1986 [
1987 AC_DEFINE(HAVE_U_INTXX_T)
1988 AC_DEFINE(HAVE_INTXX_T)
1989 AC_MSG_RESULT(yes)
1990 ],
1991 [AC_MSG_RESULT(no)]
aff51935 1992 )
5cdfe03f 1993fi
1994
0362750e 1995
1996AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
1997 AC_TRY_COMPILE(
1998 [
1999#include <sys/types.h>
2000 ],
2001 [ u_char foo; foo = 125; ],
2002 [ ac_cv_have_u_char="yes" ],
2003 [ ac_cv_have_u_char="no" ]
2004 )
2005])
2006if test "x$ac_cv_have_u_char" = "xyes" ; then
2007 AC_DEFINE(HAVE_U_CHAR)
2008fi
2009
98a7c37b 2010TYPE_SOCKLEN_T
2b942fe0 2011
2d16d9a3 2012AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
ddceb1c8 2013
777ece68 2014AC_CHECK_TYPES(in_addr_t,,,
2015[#include <sys/types.h>
2016#include <netinet/in.h>])
7b578f7d 2017
58d100bf 2018AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
2019 AC_TRY_COMPILE(
2020 [
18ba2aab 2021#include <sys/types.h>
58d100bf 2022 ],
2023 [ size_t foo; foo = 1235; ],
2024 [ ac_cv_have_size_t="yes" ],
2025 [ ac_cv_have_size_t="no" ]
2026 )
2027])
2028if test "x$ac_cv_have_size_t" = "xyes" ; then
2029 AC_DEFINE(HAVE_SIZE_T)
2030fi
ea1970a3 2031
c04f75f1 2032AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
2033 AC_TRY_COMPILE(
2034 [
2035#include <sys/types.h>
2036 ],
2037 [ ssize_t foo; foo = 1235; ],
2038 [ ac_cv_have_ssize_t="yes" ],
2039 [ ac_cv_have_ssize_t="no" ]
2040 )
2041])
2042if test "x$ac_cv_have_ssize_t" = "xyes" ; then
2043 AC_DEFINE(HAVE_SSIZE_T)
2044fi
2045
f1c4659d 2046AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
2047 AC_TRY_COMPILE(
2048 [
2049#include <time.h>
2050 ],
2051 [ clock_t foo; foo = 1235; ],
2052 [ ac_cv_have_clock_t="yes" ],
2053 [ ac_cv_have_clock_t="no" ]
2054 )
2055])
2056if test "x$ac_cv_have_clock_t" = "xyes" ; then
2057 AC_DEFINE(HAVE_CLOCK_T)
2058fi
2059
1c04b088 2060AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
2061 AC_TRY_COMPILE(
2062 [
2063#include <sys/types.h>
2064#include <sys/socket.h>
2065 ],
2066 [ sa_family_t foo; foo = 1235; ],
2067 [ ac_cv_have_sa_family_t="yes" ],
77bb0bca 2068 [ AC_TRY_COMPILE(
2069 [
2070#include <sys/types.h>
2071#include <sys/socket.h>
2072#include <netinet/in.h>
2073 ],
2074 [ sa_family_t foo; foo = 1235; ],
2075 [ ac_cv_have_sa_family_t="yes" ],
2076
1c04b088 2077 [ ac_cv_have_sa_family_t="no" ]
77bb0bca 2078 )]
1c04b088 2079 )
2080])
2081if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
2082 AC_DEFINE(HAVE_SA_FAMILY_T)
2083fi
2084
729bfe59 2085AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
2086 AC_TRY_COMPILE(
2087 [
2088#include <sys/types.h>
2089 ],
2090 [ pid_t foo; foo = 1235; ],
2091 [ ac_cv_have_pid_t="yes" ],
2092 [ ac_cv_have_pid_t="no" ]
2093 )
2094])
2095if test "x$ac_cv_have_pid_t" = "xyes" ; then
2096 AC_DEFINE(HAVE_PID_T)
2097fi
2098
2099AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
2100 AC_TRY_COMPILE(
2101 [
2102#include <sys/types.h>
2103 ],
2104 [ mode_t foo; foo = 1235; ],
2105 [ ac_cv_have_mode_t="yes" ],
2106 [ ac_cv_have_mode_t="no" ]
2107 )
2108])
2109if test "x$ac_cv_have_mode_t" = "xyes" ; then
2110 AC_DEFINE(HAVE_MODE_T)
2111fi
2112
e3a93db0 2113
58d100bf 2114AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
2115 AC_TRY_COMPILE(
2116 [
18ba2aab 2117#include <sys/types.h>
2118#include <sys/socket.h>
58d100bf 2119 ],
2120 [ struct sockaddr_storage s; ],
2121 [ ac_cv_have_struct_sockaddr_storage="yes" ],
2122 [ ac_cv_have_struct_sockaddr_storage="no" ]
2123 )
2124])
2125if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
2126 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE)
2127fi
48e671d5 2128
58d100bf 2129AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2130 AC_TRY_COMPILE(
2131 [
cbd7492e 2132#include <sys/types.h>
58d100bf 2133#include <netinet/in.h>
2134 ],
2135 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2136 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2137 [ ac_cv_have_struct_sockaddr_in6="no" ]
2138 )
2139])
2140if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
2141 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6)
2142fi
48e671d5 2143
58d100bf 2144AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2145 AC_TRY_COMPILE(
2146 [
cbd7492e 2147#include <sys/types.h>
58d100bf 2148#include <netinet/in.h>
2149 ],
2150 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2151 [ ac_cv_have_struct_in6_addr="yes" ],
2152 [ ac_cv_have_struct_in6_addr="no" ]
2153 )
2154])
2155if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
2156 AC_DEFINE(HAVE_STRUCT_IN6_ADDR)
2157fi
48e671d5 2158
58d100bf 2159AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2160 AC_TRY_COMPILE(
2161 [
18ba2aab 2162#include <sys/types.h>
2163#include <sys/socket.h>
2164#include <netdb.h>
58d100bf 2165 ],
2166 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2167 [ ac_cv_have_struct_addrinfo="yes" ],
2168 [ ac_cv_have_struct_addrinfo="no" ]
2169 )
2170])
2171if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2172 AC_DEFINE(HAVE_STRUCT_ADDRINFO)
2173fi
2174
89c7e31c 2175AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2176 AC_TRY_COMPILE(
aff51935 2177 [ #include <sys/time.h> ],
2178 [ struct timeval tv; tv.tv_sec = 1;],
89c7e31c 2179 [ ac_cv_have_struct_timeval="yes" ],
2180 [ ac_cv_have_struct_timeval="no" ]
2181 )
2182])
2183if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2184 AC_DEFINE(HAVE_STRUCT_TIMEVAL)
2185 have_struct_timeval=1
2186fi
2187
5271b55c 2188AC_CHECK_TYPES(struct timespec)
2189
85abc74b 2190# We need int64_t or else certian parts of the compile will fail.
4b492aab 2191if test "x$ac_cv_have_int64_t" = "xno" && \
2192 test "x$ac_cv_sizeof_long_int" != "x8" && \
2193 test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
85abc74b 2194 echo "OpenSSH requires int64_t support. Contact your vendor or install"
2195 echo "an alternative compiler (I.E., GCC) before continuing."
2196 echo ""
2197 exit 1;
733cf7f4 2198else
2199dnl test snprintf (broken on SCO w/gcc)
1a01a50c 2200 AC_RUN_IFELSE(
479cece8 2201 [AC_LANG_SOURCE([[
733cf7f4 2202#include <stdio.h>
2203#include <string.h>
2204#ifdef HAVE_SNPRINTF
2205main()
2206{
2207 char buf[50];
2208 char expected_out[50];
2209 int mazsize = 50 ;
2210#if (SIZEOF_LONG_INT == 8)
2211 long int num = 0x7fffffffffffffff;
2212#else
763a1a18 2213 long long num = 0x7fffffffffffffffll;
733cf7f4 2214#endif
2215 strcpy(expected_out, "9223372036854775807");
2216 snprintf(buf, mazsize, "%lld", num);
2217 if(strcmp(buf, expected_out) != 0)
aff51935 2218 exit(1);
733cf7f4 2219 exit(0);
2220}
2221#else
2222main() { exit(0); }
2223#endif
479cece8 2224 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
1a01a50c 2225 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
733cf7f4 2226 )
2c523de9 2227fi
2228
77bb0bca 2229dnl Checks for structure members
58d100bf 2230OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2231OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2232OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2233OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2234OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
25422c70 2235OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
58d100bf 2236OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2237OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
daaff4d5 2238OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
58d100bf 2239OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2240OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2241OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2242OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
1d7b9b20 2243OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2244OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2245OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2246OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
98a7c37b 2247
2248AC_CHECK_MEMBERS([struct stat.st_blksize])
1d7b9b20 2249
58d100bf 2250AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2251 ac_cv_have_ss_family_in_struct_ss, [
2252 AC_TRY_COMPILE(
2253 [
18ba2aab 2254#include <sys/types.h>
2255#include <sys/socket.h>
58d100bf 2256 ],
2257 [ struct sockaddr_storage s; s.ss_family = 1; ],
2258 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2259 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2260 )
2261])
2262if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2263 AC_DEFINE(HAVE_SS_FAMILY_IN_SS)
2264fi
2265
58d100bf 2266AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2267 ac_cv_have___ss_family_in_struct_ss, [
2268 AC_TRY_COMPILE(
2269 [
18ba2aab 2270#include <sys/types.h>
2271#include <sys/socket.h>
58d100bf 2272 ],
2273 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2274 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2275 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2276 )
2277])
2278if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2279 AC_DEFINE(HAVE___SS_FAMILY_IN_SS)
2280fi
2281
2e73a022 2282AC_CACHE_CHECK([for pw_class field in struct passwd],
2283 ac_cv_have_pw_class_in_struct_passwd, [
2284 AC_TRY_COMPILE(
2285 [
2e73a022 2286#include <pwd.h>
2287 ],
97994d32 2288 [ struct passwd p; p.pw_class = 0; ],
2e73a022 2289 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2290 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2291 )
2292])
2293if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2294 AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD)
2295fi
2296
7751d4eb 2297AC_CACHE_CHECK([for pw_expire field in struct passwd],
2298 ac_cv_have_pw_expire_in_struct_passwd, [
2299 AC_TRY_COMPILE(
2300 [
2301#include <pwd.h>
2302 ],
2303 [ struct passwd p; p.pw_expire = 0; ],
2304 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2305 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2306 )
2307])
2308if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2309 AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD)
2310fi
2311
2312AC_CACHE_CHECK([for pw_change field in struct passwd],
2313 ac_cv_have_pw_change_in_struct_passwd, [
2314 AC_TRY_COMPILE(
2315 [
2316#include <pwd.h>
2317 ],
2318 [ struct passwd p; p.pw_change = 0; ],
2319 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2320 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2321 )
2322])
2323if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2324 AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD)
2325fi
58d100bf 2326
637f9177 2327dnl make sure we're using the real structure members and not defines
6f34652e 2328AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2329 ac_cv_have_accrights_in_msghdr, [
1a01a50c 2330 AC_COMPILE_IFELSE(
6f34652e 2331 [
f95c8ce8 2332#include <sys/types.h>
6f34652e 2333#include <sys/socket.h>
2334#include <sys/uio.h>
637f9177 2335int main() {
2336#ifdef msg_accrights
1a01a50c 2337#error "msg_accrights is a macro"
637f9177 2338exit(1);
2339#endif
2340struct msghdr m;
2341m.msg_accrights = 0;
2342exit(0);
2343}
6f34652e 2344 ],
6f34652e 2345 [ ac_cv_have_accrights_in_msghdr="yes" ],
2346 [ ac_cv_have_accrights_in_msghdr="no" ]
2347 )
2348])
2349if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2350 AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR)
2351fi
2352
7176df4f 2353AC_CACHE_CHECK([for msg_control field in struct msghdr],
2354 ac_cv_have_control_in_msghdr, [
1a01a50c 2355 AC_COMPILE_IFELSE(
7176df4f 2356 [
f95c8ce8 2357#include <sys/types.h>
7176df4f 2358#include <sys/socket.h>
2359#include <sys/uio.h>
637f9177 2360int main() {
2361#ifdef msg_control
1a01a50c 2362#error "msg_control is a macro"
637f9177 2363exit(1);
2364#endif
2365struct msghdr m;
2366m.msg_control = 0;
2367exit(0);
2368}
7176df4f 2369 ],
7176df4f 2370 [ ac_cv_have_control_in_msghdr="yes" ],
2371 [ ac_cv_have_control_in_msghdr="no" ]
2372 )
2373])
2374if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2375 AC_DEFINE(HAVE_CONTROL_IN_MSGHDR)
2376fi
2377
58d100bf 2378AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
aff51935 2379 AC_TRY_LINK([],
2380 [ extern char *__progname; printf("%s", __progname); ],
58d100bf 2381 [ ac_cv_libc_defines___progname="yes" ],
2382 [ ac_cv_libc_defines___progname="no" ]
2383 )
2384])
2385if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2386 AC_DEFINE(HAVE___PROGNAME)
2387fi
8946db53 2388
c921ee00 2389AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2390 AC_TRY_LINK([
2391#include <stdio.h>
aff51935 2392],
2393 [ printf("%s", __FUNCTION__); ],
c921ee00 2394 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2395 [ ac_cv_cc_implements___FUNCTION__="no" ]
2396 )
2397])
2398if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2399 AC_DEFINE(HAVE___FUNCTION__)
2400fi
2401
2402AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2403 AC_TRY_LINK([
2404#include <stdio.h>
aff51935 2405],
2406 [ printf("%s", __func__); ],
c921ee00 2407 [ ac_cv_cc_implements___func__="yes" ],
2408 [ ac_cv_cc_implements___func__="no" ]
2409 )
2410])
2411if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
2412 AC_DEFINE(HAVE___func__)
2413fi
2414
1812a662 2415AC_CACHE_CHECK([whether getopt has optreset support],
2416 ac_cv_have_getopt_optreset, [
2417 AC_TRY_LINK(
2418 [
2419#include <getopt.h>
2420 ],
2421 [ extern int optreset; optreset = 0; ],
2422 [ ac_cv_have_getopt_optreset="yes" ],
2423 [ ac_cv_have_getopt_optreset="no" ]
2424 )
2425])
2426if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
2427 AC_DEFINE(HAVE_GETOPT_OPTRESET)
2428fi
a0391976 2429
819b676f 2430AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
aff51935 2431 AC_TRY_LINK([],
2432 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
819b676f 2433 [ ac_cv_libc_defines_sys_errlist="yes" ],
2434 [ ac_cv_libc_defines_sys_errlist="no" ]
2435 )
2436])
2437if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
2438 AC_DEFINE(HAVE_SYS_ERRLIST)
2439fi
2440
2441
416ed5a7 2442AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
aff51935 2443 AC_TRY_LINK([],
2444 [ extern int sys_nerr; printf("%i", sys_nerr);],
416ed5a7 2445 [ ac_cv_libc_defines_sys_nerr="yes" ],
2446 [ ac_cv_libc_defines_sys_nerr="no" ]
2447 )
2448])
2449if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
2450 AC_DEFINE(HAVE_SYS_NERR)
2451fi
2452
aff51935 2453SCARD_MSG="no"
295c8801 2454# Check whether user wants sectok support
2455AC_ARG_WITH(sectok,
2456 [ --with-sectok Enable smartcard support using libsectok],
d0b19c95 2457 [
2458 if test "x$withval" != "xno" ; then
2459 if test "x$withval" != "xyes" ; then
2460 CPPFLAGS="$CPPFLAGS -I${withval}"
2461 LDFLAGS="$LDFLAGS -L${withval}"
2462 if test ! -z "$need_dash_r" ; then
2463 LDFLAGS="$LDFLAGS -R${withval}"
2464 fi
2465 if test ! -z "$blibpath" ; then
2466 blibpath="$blibpath:${withval}"
2467 fi
2468 fi
2469 AC_CHECK_HEADERS(sectok.h)
2470 if test "$ac_cv_header_sectok_h" != yes; then
2471 AC_MSG_ERROR(Can't find sectok.h)
2472 fi
2473 AC_CHECK_LIB(sectok, sectok_open)
2474 if test "$ac_cv_lib_sectok_sectok_open" != yes; then
2475 AC_MSG_ERROR(Can't find libsectok)
2476 fi
2477 AC_DEFINE(SMARTCARD)
295c8801 2478 AC_DEFINE(USE_SECTOK)
aff51935 2479 SCARD_MSG="yes, using sectok"
295c8801 2480 fi
2481 ]
2482)
2483
2484# Check whether user wants OpenSC support
987b458f 2485OPENSC_CONFIG="no"
295c8801 2486AC_ARG_WITH(opensc,
987b458f 2487 [--with-opensc[[=PFX]] Enable smartcard support using OpenSC (optionally in PATH)],
2488 [
2489 if test "x$withval" != "xno" ; then
2490 if test "x$withval" != "xyes" ; then
2491 OPENSC_CONFIG=$withval/bin/opensc-config
2492 else
2493 AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
2494 fi
2495 if test "$OPENSC_CONFIG" != "no"; then
2496 LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
2497 LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
2498 CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
2499 LDFLAGS="$LDFLAGS $LIBOPENSC_LIBS"
2500 AC_DEFINE(SMARTCARD)
2501 AC_DEFINE(USE_OPENSC)
2502 SCARD_MSG="yes, using OpenSC"
2503 fi
2504 fi
2505 ]
2506)
d0b19c95 2507
c31dc31c 2508# Check libraries needed by DNS fingerprint support
aff51935 2509AC_SEARCH_LIBS(getrrsetbyname, resolv,
c31dc31c 2510 [AC_DEFINE(HAVE_GETRRSETBYNAME)],
3e05e934 2511 [
c31dc31c 2512 # Needed by our getrrsetbyname()
2513 AC_SEARCH_LIBS(res_query, resolv)
2514 AC_SEARCH_LIBS(dn_expand, resolv)
dabb524a 2515 AC_MSG_CHECKING(if res_query will link)
2516 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
2517 [AC_MSG_RESULT(no)
2518 saved_LIBS="$LIBS"
2519 LIBS="$LIBS -lresolv"
2520 AC_MSG_CHECKING(for res_query in -lresolv)
2521 AC_LINK_IFELSE([
2522#include <resolv.h>
2523int main()
2524{
2525 res_query (0, 0, 0, 0, 0);
2526 return 0;
2527}
2528 ],
2529 [LIBS="$LIBS -lresolv"
2530 AC_MSG_RESULT(yes)],
2531 [LIBS="$saved_LIBS"
2532 AC_MSG_RESULT(no)])
2533 ])
c31dc31c 2534 AC_CHECK_FUNCS(_getshort _getlong)
03f5da4c 2535 AC_CHECK_DECLS([_getshort, _getlong])
c31dc31c 2536 AC_CHECK_MEMBER(HEADER.ad,
2537 [AC_DEFINE(HAVE_HEADER_AD)],,
2538 [#include <arpa/nameser.h>])
2539 ])
3e05e934 2540
12928e80 2541# Check whether user wants Kerberos 5 support
aff51935 2542KRB5_MSG="no"
12928e80 2543AC_ARG_WITH(kerberos5,
aff51935 2544 [ --with-kerberos5=PATH Enable Kerberos 5 support],
5585c441 2545 [ if test "x$withval" != "xno" ; then
2546 if test "x$withval" = "xyes" ; then
2547 KRB5ROOT="/usr/local"
2548 else
2549 KRB5ROOT=${withval}
2550 fi
2551
2552 AC_DEFINE(KRB5)
2553 KRB5_MSG="yes"
2554
2555 AC_MSG_CHECKING(for krb5-config)
2556 if test -x $KRB5ROOT/bin/krb5-config ; then
2557 KRB5CONF=$KRB5ROOT/bin/krb5-config
2558 AC_MSG_RESULT($KRB5CONF)
2559
2560 AC_MSG_CHECKING(for gssapi support)
2561 if $KRB5CONF | grep gssapi >/dev/null ; then
2562 AC_MSG_RESULT(yes)
071970fb 2563 AC_DEFINE(GSSAPI)
2564 k5confopts=gssapi
aff51935 2565 else
5585c441 2566 AC_MSG_RESULT(no)
071970fb 2567 k5confopts=""
aff51935 2568 fi
071970fb 2569 K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
2570 K5LIBS="`$KRB5CONF --libs $k5confopts`"
5585c441 2571 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
5585c441 2572 AC_MSG_CHECKING(whether we are using Heimdal)
2573 AC_TRY_COMPILE([ #include <krb5.h> ],
2574 [ char *tmp = heimdal_version; ],
2575 [ AC_MSG_RESULT(yes)
2576 AC_DEFINE(HEIMDAL) ],
2577 AC_MSG_RESULT(no)
2578 )
2579 else
2580 AC_MSG_RESULT(no)
12928e80 2581 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
aff51935 2582 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
aff51935 2583 AC_MSG_CHECKING(whether we are using Heimdal)
2584 AC_TRY_COMPILE([ #include <krb5.h> ],
2585 [ char *tmp = heimdal_version; ],
2586 [ AC_MSG_RESULT(yes)
2587 AC_DEFINE(HEIMDAL)
41707f74 2588 K5LIBS="-lkrb5 -ldes"
2589 K5LIBS="$K5LIBS -lcom_err -lasn1"
82f4e93d 2590 AC_CHECK_LIB(roken, net_write,
41707f74 2591 [K5LIBS="$K5LIBS -lroken"])
aff51935 2592 ],
2593 [ AC_MSG_RESULT(no)
2594 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
2595 ]
2596 )
4e00038c 2597 AC_SEARCH_LIBS(dn_expand, resolv)
12928e80 2598
749560dd 2599 AC_CHECK_LIB(gssapi,gss_init_sec_context,
2600 [ AC_DEFINE(GSSAPI)
2601 K5LIBS="-lgssapi $K5LIBS" ],
2602 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
2603 [ AC_DEFINE(GSSAPI)
aff51935 2604 K5LIBS="-lgssapi_krb5 $K5LIBS" ],
749560dd 2605 AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
2606 $K5LIBS)
2607 ],
2608 $K5LIBS)
82f4e93d 2609
749560dd 2610 AC_CHECK_HEADER(gssapi.h, ,
2611 [ unset ac_cv_header_gssapi_h
aff51935 2612 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
749560dd 2613 AC_CHECK_HEADERS(gssapi.h, ,
2614 AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
aff51935 2615 )
749560dd 2616 ]
2617 )
2618
2619 oldCPP="$CPPFLAGS"
2620 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2621 AC_CHECK_HEADER(gssapi_krb5.h, ,
2622 [ CPPFLAGS="$oldCPP" ])
2623
aff51935 2624 fi
5585c441 2625 if test ! -z "$need_dash_r" ; then
2626 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
2627 fi
2628 if test ! -z "$blibpath" ; then
2629 blibpath="$blibpath:${KRB5ROOT}/lib"
2630 fi
071970fb 2631 fi
2632
2633 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
2634 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
2635 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
2636
2637 LIBS="$LIBS $K5LIBS"
2638 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS))
79753592 2639 AC_SEARCH_LIBS(krb5_init_ets, $K5LIBS, AC_DEFINE(KRB5_INIT_ETS))
071970fb 2640 ]
12928e80 2641)
b5b68128 2642
a0391976 2643# Looking for programs, paths and files
a0391976 2644
ecac8ee5 2645PRIVSEP_PATH=/var/empty
2646AC_ARG_WITH(privsep-path,
cda1ebcb 2647 [ --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
ecac8ee5 2648 [
6cf0200f 2649 if test -n "$withval" && test "x$withval" != "xno" && \
2650 test "x${withval}" != "xyes"; then
ecac8ee5 2651 PRIVSEP_PATH=$withval
2652 fi
2653 ]
2654)
2655AC_SUBST(PRIVSEP_PATH)
2656
a0391976 2657AC_ARG_WITH(xauth,
2658 [ --with-xauth=PATH Specify path to xauth program ],
2659 [
6cf0200f 2660 if test -n "$withval" && test "x$withval" != "xno" && \
2661 test "x${withval}" != "xyes"; then
cbd7492e 2662 xauth_path=$withval
a0391976 2663 fi
2664 ],
2665 [
2bf42e4a 2666 TestPath="$PATH"
2667 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
2668 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
2669 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
2670 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
2671 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
e5fe9a1f 2672 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
a0391976 2673 xauth_path="/usr/openwin/bin/xauth"
2674 fi
2675 ]
2676)
2677
65a4b4af 2678STRIP_OPT=-s
2679AC_ARG_ENABLE(strip,
2680 [ --disable-strip Disable calling strip(1) on install],
2681 [
2682 if test "x$enableval" = "xno" ; then
2683 STRIP_OPT=
2684 fi
2685 ]
2686)
2687AC_SUBST(STRIP_OPT)
2688
b3ec54b4 2689if test -z "$xauth_path" ; then
2690 XAUTH_PATH="undefined"
2691 AC_SUBST(XAUTH_PATH)
2692else
a0391976 2693 AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path")
b3ec54b4 2694 XAUTH_PATH=$xauth_path
2695 AC_SUBST(XAUTH_PATH)
a0391976 2696fi
a0391976 2697
2698# Check for mail directory (last resort if we cannot get it from headers)
2699if test ! -z "$MAIL" ; then
2700 maildir=`dirname $MAIL`
2701 AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir")
2702fi
2703
479cece8 2704if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
1a01a50c 2705 AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
2706 disable_ptmx_check=yes
2707fi
a0391976 2708if test -z "$no_dev_ptmx" ; then
6e879cb4 2709 if test "x$disable_ptmx_check" != "xyes" ; then
aff51935 2710 AC_CHECK_FILE("/dev/ptmx",
6e879cb4 2711 [
2712 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX)
2713 have_dev_ptmx=1
2714 ]
2715 )
2716 fi
3276571c 2717fi
1a01a50c 2718
479cece8 2719if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
1a01a50c 2720 AC_CHECK_FILE("/dev/ptc",
2721 [
2722 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC)
2723 have_dev_ptc=1
2724 ]
2725 )
2726else
2727 AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
2728fi
3276571c 2729
a0391976 2730# Options from here on. Some of these are preset by platform above
fdf6b7aa 2731AC_ARG_WITH(mantype,
5d97cfbf 2732 [ --with-mantype=man|cat|doc Set man page type],
c54a6257 2733 [
5d97cfbf 2734 case "$withval" in
2735 man|cat|doc)
2736 MANTYPE=$withval
2737 ;;
2738 *)
2739 AC_MSG_ERROR(invalid man type: $withval)
2740 ;;
2741 esac
c54a6257 2742 ]
2743)
e0c4d3ac 2744if test -z "$MANTYPE"; then
2bf42e4a 2745 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
2746 AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
e0c4d3ac 2747 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
2748 MANTYPE=doc
2749 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
2750 MANTYPE=man
2751 else
2752 MANTYPE=cat
2753 fi
2754fi
c54a6257 2755AC_SUBST(MANTYPE)
e0c4d3ac 2756if test "$MANTYPE" = "doc"; then
2757 mansubdir=man;
2758else
2759 mansubdir=$MANTYPE;
2760fi
2761AC_SUBST(mansubdir)
0bc5b6fb 2762
a0391976 2763# Check whether to enable MD5 passwords
aff51935 2764MD5_MSG="no"
2ddcfdf3 2765AC_ARG_WITH(md5-passwords,
caf3bc51 2766 [ --with-md5-passwords Enable use of MD5 passwords],
0bc5b6fb 2767 [
bcf36c78 2768 if test "x$withval" != "xno" ; then
0bc5b6fb 2769 AC_DEFINE(HAVE_MD5_PASSWORDS)
aff51935 2770 MD5_MSG="yes"
0bc5b6fb 2771 fi
2772 ]
caf3bc51 2773)
2774
a0391976 2775# Whether to disable shadow password support
a7effaac 2776AC_ARG_WITH(shadow,
2777 [ --without-shadow Disable shadow password support],
2778 [
82f4e93d 2779 if test "x$withval" = "xno" ; then
a7effaac 2780 AC_DEFINE(DISABLE_SHADOW)
4cb5ffa0 2781 disable_shadow=yes
a7effaac 2782 fi
2783 ]
2784)
2785
4cb5ffa0 2786if test -z "$disable_shadow" ; then
2787 AC_MSG_CHECKING([if the systems has expire shadow information])
2788 AC_TRY_COMPILE(
2789 [
2790#include <sys/types.h>
2791#include <shadow.h>
2792 struct spwd sp;
2793 ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
2794 [ sp_expire_available=yes ], []
2795 )
2796
2797 if test "x$sp_expire_available" = "xyes" ; then
2798 AC_MSG_RESULT(yes)
2799 AC_DEFINE(HAS_SHADOW_EXPIRE)
2800 else
2801 AC_MSG_RESULT(no)
2802 fi
2803fi
2804
a0391976 2805# Use ip address instead of hostname in $DISPLAY
44839801 2806if test ! -z "$IPADDR_IN_DISPLAY" ; then
2807 DISPLAY_HACK_MSG="yes"
2808 AC_DEFINE(IPADDR_IN_DISPLAY)
2809else
aff51935 2810 DISPLAY_HACK_MSG="no"
44839801 2811 AC_ARG_WITH(ipaddr-display,
2812 [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY],
2813 [
82f4e93d 2814 if test "x$withval" != "xno" ; then
44839801 2815 AC_DEFINE(IPADDR_IN_DISPLAY)
aff51935 2816 DISPLAY_HACK_MSG="yes"
44839801 2817 fi
2818 ]
2819 )
2820fi
a7effaac 2821
95b99395 2822# check for /etc/default/login and use it if present.
daa41e62 2823AC_ARG_ENABLE(etc-default-login,
6ff3d0dc 2824 [ --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
694d0cef 2825 [ if test "x$enableval" = "xno"; then
2826 AC_MSG_NOTICE([/etc/default/login handling disabled])
2827 etc_default_login=no
2828 else
2829 etc_default_login=yes
2830 fi ],
2831 [ etc_default_login=yes ]
2832)
95b99395 2833
694d0cef 2834if test "x$etc_default_login" != "xno"; then
2835 AC_CHECK_FILE("/etc/default/login",
2836 [ external_path_file=/etc/default/login ])
479cece8 2837 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
2838 then
1a01a50c 2839 AC_MSG_WARN([cross compiling: Disabling /etc/default/login test])
2840 elif test "x$external_path_file" = "x/etc/default/login"; then
2841 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN)
2842 fi
694d0cef 2843fi
95b99395 2844
8d184c09 2845dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
4b492aab 2846if test $ac_cv_func_login_getcapbool = "yes" && \
2847 test $ac_cv_header_login_cap_h = "yes" ; then
95b99395 2848 external_path_file=/etc/login.conf
8d184c09 2849fi
95b99395 2850
a0391976 2851# Whether to mess with the default path
aff51935 2852SERVER_PATH_MSG="(default)"
c43d69a9 2853AC_ARG_WITH(default-path,
75817f90 2854 [ --with-default-path= Specify default \$PATH environment for server],
cb807f40 2855 [
95b99395 2856 if test "x$external_path_file" = "x/etc/login.conf" ; then
8d184c09 2857 AC_MSG_WARN([
2858--with-default-path=PATH has no effect on this system.
2859Edit /etc/login.conf instead.])
82f4e93d 2860 elif test "x$withval" != "xno" ; then
89bbd457 2861 if test ! -z "$external_path_file" ; then
95b99395 2862 AC_MSG_WARN([
2863--with-default-path=PATH will only be used if PATH is not defined in
2864$external_path_file .])
2865 fi
b2d818e6 2866 user_path="$withval"
aff51935 2867 SERVER_PATH_MSG="$withval"
cb807f40 2868 fi
b2d818e6 2869 ],
95b99395 2870 [ if test "x$external_path_file" = "x/etc/login.conf" ; then
2871 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
8d184c09 2872 else
89bbd457 2873 if test ! -z "$external_path_file" ; then
95b99395 2874 AC_MSG_WARN([
2875If PATH is defined in $external_path_file, ensure the path to scp is included,
2876otherwise scp will not work.])
2877 fi
2878 AC_TRY_RUN(
2879 [
b2d818e6 2880/* find out what STDPATH is */
2881#include <stdio.h>
b2d818e6 2882#ifdef HAVE_PATHS_H
2883# include <paths.h>
2884#endif
2885#ifndef _PATH_STDPATH
d9a4e55b 2886# ifdef _PATH_USERPATH /* Irix */
2887# define _PATH_STDPATH _PATH_USERPATH
2888# else
2889# define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
2890# endif
b2d818e6 2891#endif
2892#include <sys/types.h>
2893#include <sys/stat.h>
2894#include <fcntl.h>
2895#define DATA "conftest.stdpath"
2896
2897main()
2898{
2899 FILE *fd;
2900 int rc;
82f4e93d 2901
b2d818e6 2902 fd = fopen(DATA,"w");
2903 if(fd == NULL)
2904 exit(1);
82f4e93d 2905
b2d818e6 2906 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
2907 exit(1);
2908
2909 exit(0);
2910}
2911 ], [ user_path=`cat conftest.stdpath` ],
2912 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
2913 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
2914 )
2915# make sure $bindir is in USER_PATH so scp will work
2916 t_bindir=`eval echo ${bindir}`
2917 case $t_bindir in
2918 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
2919 esac
2920 case $t_bindir in
2921 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
2922 esac
2923 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
2924 if test $? -ne 0 ; then
2925 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
2926 if test $? -ne 0 ; then
2927 user_path=$user_path:$t_bindir
2928 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
2929 fi
2930 fi
8d184c09 2931 fi ]
cb807f40 2932)
95b99395 2933if test "x$external_path_file" != "x/etc/login.conf" ; then
8d184c09 2934 AC_DEFINE_UNQUOTED(USER_PATH, "$user_path")
2935 AC_SUBST(user_path)
2936fi
cb807f40 2937
06617857 2938# Set superuser path separately to user path
06617857 2939AC_ARG_WITH(superuser-path,
2940 [ --with-superuser-path= Specify different path for super-user],
2941 [
6cf0200f 2942 if test -n "$withval" && test "x$withval" != "xno" && \
2943 test "x${withval}" != "xyes"; then
06617857 2944 AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval")
2945 superuser_path=$withval
2946 fi
2947 ]
2948)
2949
2950
58d100bf 2951AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
aff51935 2952IPV4_IN6_HACK_MSG="no"
80faa19f 2953AC_ARG_WITH(4in6,
2954 [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses],
2955 [
2956 if test "x$withval" != "xno" ; then
2957 AC_MSG_RESULT(yes)
2958 AC_DEFINE(IPV4_IN_IPV6)
aff51935 2959 IPV4_IN6_HACK_MSG="yes"
80faa19f 2960 else
2961 AC_MSG_RESULT(no)
2962 fi
2963 ],[
2964 if test "x$inet6_default_4in6" = "xyes"; then
2965 AC_MSG_RESULT([yes (default)])
2966 AC_DEFINE(IPV4_IN_IPV6)
aff51935 2967 IPV4_IN6_HACK_MSG="yes"
80faa19f 2968 else
2969 AC_MSG_RESULT([no (default)])
2970 fi
2971 ]
2972)
2973
af774732 2974# Whether to enable BSD auth support
f1b0ecc3 2975BSD_AUTH_MSG=no
af774732 2976AC_ARG_WITH(bsd-auth,
2977 [ --with-bsd-auth Enable BSD auth support],
2978 [
82f4e93d 2979 if test "x$withval" != "xno" ; then
af774732 2980 AC_DEFINE(BSD_AUTH)
f1b0ecc3 2981 BSD_AUTH_MSG=yes
af774732 2982 fi
2983 ]
2984)
2985
a0391976 2986# Where to place sshd.pid
19d9ac2a 2987piddir=/var/run
81dadca3 2988# make sure the directory exists
82f4e93d 2989if test ! -d $piddir ; then
81dadca3 2990 piddir=`eval echo ${sysconfdir}`
2991 case $piddir in
aff51935 2992 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
81dadca3 2993 esac
2994fi
2995
47e45e44 2996AC_ARG_WITH(pid-dir,
2997 [ --with-pid-dir=PATH Specify location of ssh.pid file],
2998 [
6cf0200f 2999 if test -n "$withval" && test "x$withval" != "xno" && \
3000 test "x${withval}" != "xyes"; then
19d9ac2a 3001 piddir=$withval
82f4e93d 3002 if test ! -d $piddir ; then
81dadca3 3003 AC_MSG_WARN([** no $piddir directory on this system **])
3004 fi
47e45e44 3005 fi
3006 ]
3007)
b7a87eea 3008
42f11eb2 3009AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir")
19d9ac2a 3010AC_SUBST(piddir)
47e45e44 3011
1d7b9b20 3012dnl allow user to disable some login recording features
3013AC_ARG_ENABLE(lastlog,
bfd550a2 3014 [ --disable-lastlog disable use of lastlog even if detected [no]],
ddb154b3 3015 [
3016 if test "x$enableval" = "xno" ; then
3017 AC_DEFINE(DISABLE_LASTLOG)
3018 fi
3019 ]
1d7b9b20 3020)
3021AC_ARG_ENABLE(utmp,
bfd550a2 3022 [ --disable-utmp disable use of utmp even if detected [no]],
ddb154b3 3023 [
3024 if test "x$enableval" = "xno" ; then
3025 AC_DEFINE(DISABLE_UTMP)
3026 fi
3027 ]
1d7b9b20 3028)
3029AC_ARG_ENABLE(utmpx,
bfd550a2 3030 [ --disable-utmpx disable use of utmpx even if detected [no]],
ddb154b3 3031 [
3032 if test "x$enableval" = "xno" ; then
3033 AC_DEFINE(DISABLE_UTMPX)
3034 fi
3035 ]
1d7b9b20 3036)
3037AC_ARG_ENABLE(wtmp,
bfd550a2 3038 [ --disable-wtmp disable use of wtmp even if detected [no]],
ddb154b3 3039 [
3040 if test "x$enableval" = "xno" ; then
3041 AC_DEFINE(DISABLE_WTMP)
3042 fi
3043 ]
1d7b9b20 3044)
3045AC_ARG_ENABLE(wtmpx,
bfd550a2 3046 [ --disable-wtmpx disable use of wtmpx even if detected [no]],
ddb154b3 3047 [
3048 if test "x$enableval" = "xno" ; then
3049 AC_DEFINE(DISABLE_WTMPX)
3050 fi
3051 ]
1d7b9b20 3052)
3053AC_ARG_ENABLE(libutil,
bfd550a2 3054 [ --disable-libutil disable use of libutil (login() etc.) [no]],
ddb154b3 3055 [
3056 if test "x$enableval" = "xno" ; then
3057 AC_DEFINE(DISABLE_LOGIN)
3058 fi
3059 ]
1d7b9b20 3060)
3061AC_ARG_ENABLE(pututline,
bfd550a2 3062 [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]],
ddb154b3 3063 [
3064 if test "x$enableval" = "xno" ; then
aff51935 3065 AC_DEFINE(DISABLE_PUTUTLINE)
ddb154b3 3066 fi
3067 ]
1d7b9b20 3068)
3069AC_ARG_ENABLE(pututxline,
bfd550a2 3070 [ --disable-pututxline disable use of pututxline() etc. ([uw]tmpx) [no]],
ddb154b3 3071 [
3072 if test "x$enableval" = "xno" ; then
3073 AC_DEFINE(DISABLE_PUTUTXLINE)
3074 fi
3075 ]
1d7b9b20 3076)
3077AC_ARG_WITH(lastlog,
bfd550a2 3078 [ --with-lastlog=FILE|DIR specify lastlog location [common locations]],
8c89dd2b 3079 [
82f4e93d 3080 if test "x$withval" = "xno" ; then
8c89dd2b 3081 AC_DEFINE(DISABLE_LASTLOG)
6cf0200f 3082 elif test -n "$withval" && test "x${withval}" != "xyes"; then
8c89dd2b 3083 conf_lastlog_location=$withval
3084 fi
3085 ]
3086)
1d7b9b20 3087
3088dnl lastlog, [uw]tmpx? detection
3089dnl NOTE: set the paths in the platform section to avoid the
3090dnl need for command-line parameters
3091dnl lastlog and [uw]tmp are subject to a file search if all else fails
3092
3093dnl lastlog detection
3094dnl NOTE: the code itself will detect if lastlog is a directory
3095AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
3096AC_TRY_COMPILE([
3097#include <sys/types.h>
3098#include <utmp.h>
3099#ifdef HAVE_LASTLOG_H
3100# include <lastlog.h>
3101#endif
d7c0f3d5 3102#ifdef HAVE_PATHS_H
1d7b9b20 3103# include <paths.h>
41cb4569 3104#endif
3105#ifdef HAVE_LOGIN_H
3106# include <login.h>
1d7b9b20 3107#endif
3108 ],
3109 [ char *lastlog = LASTLOG_FILE; ],
3110 [ AC_MSG_RESULT(yes) ],
d7c0f3d5 3111 [
3112 AC_MSG_RESULT(no)
3113 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
3114 AC_TRY_COMPILE([
3115#include <sys/types.h>
3116#include <utmp.h>
3117#ifdef HAVE_LASTLOG_H
3118# include <lastlog.h>
3119#endif
3120#ifdef HAVE_PATHS_H
3121# include <paths.h>
3122#endif
3123 ],
3124 [ char *lastlog = _PATH_LASTLOG; ],
3125 [ AC_MSG_RESULT(yes) ],
3126 [
f282b668 3127 AC_MSG_RESULT(no)
d7c0f3d5 3128 system_lastlog_path=no
3129 ])
3130 ]
1d7b9b20 3131)
d7c0f3d5 3132
1d7b9b20 3133if test -z "$conf_lastlog_location"; then
3134 if test x"$system_lastlog_path" = x"no" ; then
3135 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
e5fe9a1f 3136 if (test -d "$f" || test -f "$f") ; then
1d7b9b20 3137 conf_lastlog_location=$f
3138 fi
3139 done
3140 if test -z "$conf_lastlog_location"; then
f8119cef 3141 AC_MSG_WARN([** Cannot find lastlog **])
3142 dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
1d7b9b20 3143 fi
3144 fi
3145fi
3146
3147if test -n "$conf_lastlog_location"; then
3148 AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location")
82f4e93d 3149fi
1d7b9b20 3150
3151dnl utmp detection
3152AC_MSG_CHECKING([if your system defines UTMP_FILE])
3153AC_TRY_COMPILE([
3154#include <sys/types.h>
3155#include <utmp.h>
d7c0f3d5 3156#ifdef HAVE_PATHS_H
1d7b9b20 3157# include <paths.h>
3158#endif
3159 ],
3160 [ char *utmp = UTMP_FILE; ],
3161 [ AC_MSG_RESULT(yes) ],
3162 [ AC_MSG_RESULT(no)
3163 system_utmp_path=no ]
3164)
3165if test -z "$conf_utmp_location"; then
3166 if test x"$system_utmp_path" = x"no" ; then
3167 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3168 if test -f $f ; then
3169 conf_utmp_location=$f
3170 fi
3171 done
3172 if test -z "$conf_utmp_location"; then
3173 AC_DEFINE(DISABLE_UTMP)
3174 fi
3175 fi
3176fi
3177if test -n "$conf_utmp_location"; then
3178 AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location")
82f4e93d 3179fi
1d7b9b20 3180
3181dnl wtmp detection
3182AC_MSG_CHECKING([if your system defines WTMP_FILE])
3183AC_TRY_COMPILE([
3184#include <sys/types.h>
3185#include <utmp.h>
d7c0f3d5 3186#ifdef HAVE_PATHS_H
1d7b9b20 3187# include <paths.h>
3188#endif
3189 ],
3190 [ char *wtmp = WTMP_FILE; ],
3191 [ AC_MSG_RESULT(yes) ],
3192 [ AC_MSG_RESULT(no)
3193 system_wtmp_path=no ]
3194)
3195if test -z "$conf_wtmp_location"; then
3196 if test x"$system_wtmp_path" = x"no" ; then
3197 for f in /usr/adm/wtmp /var/log/wtmp; do
3198 if test -f $f ; then
3199 conf_wtmp_location=$f
3200 fi
3201 done
3202 if test -z "$conf_wtmp_location"; then
3203 AC_DEFINE(DISABLE_WTMP)
3204 fi
3205 fi
3206fi
3207if test -n "$conf_wtmp_location"; then
3208 AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location")
82f4e93d 3209fi
1d7b9b20 3210
3211
3212dnl utmpx detection - I don't know any system so perverse as to require
3213dnl utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3214dnl there, though.
3215AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3216AC_TRY_COMPILE([
3217#include <sys/types.h>
3218#include <utmp.h>
3219#ifdef HAVE_UTMPX_H
3220#include <utmpx.h>
3221#endif
d7c0f3d5 3222#ifdef HAVE_PATHS_H
1d7b9b20 3223# include <paths.h>
3224#endif
3225 ],
3226 [ char *utmpx = UTMPX_FILE; ],
3227 [ AC_MSG_RESULT(yes) ],
3228 [ AC_MSG_RESULT(no)
3229 system_utmpx_path=no ]
3230)
3231if test -z "$conf_utmpx_location"; then
3232 if test x"$system_utmpx_path" = x"no" ; then
3233 AC_DEFINE(DISABLE_UTMPX)
3234 fi
3235else
3236 AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location")
82f4e93d 3237fi
1d7b9b20 3238
3239dnl wtmpx detection
3240AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3241AC_TRY_COMPILE([
3242#include <sys/types.h>
3243#include <utmp.h>
3244#ifdef HAVE_UTMPX_H
3245#include <utmpx.h>
3246#endif
d7c0f3d5 3247#ifdef HAVE_PATHS_H
1d7b9b20 3248# include <paths.h>
3249#endif
3250 ],
3251 [ char *wtmpx = WTMPX_FILE; ],
3252 [ AC_MSG_RESULT(yes) ],
3253 [ AC_MSG_RESULT(no)
3254 system_wtmpx_path=no ]
3255)
3256if test -z "$conf_wtmpx_location"; then
3257 if test x"$system_wtmpx_path" = x"no" ; then
3258 AC_DEFINE(DISABLE_WTMPX)
3259 fi
3260else
3261 AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location")
82f4e93d 3262fi
1d7b9b20 3263
b7a87eea 3264
bd499f9e 3265if test ! -z "$blibpath" ; then
68ece370 3266 LDFLAGS="$LDFLAGS $blibflags$blibpath"
3267 AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
bd499f9e 3268fi
3269
ddceb1c8 3270dnl remove pam and dl because they are in $LIBPAM
3271if test "$PAM_MSG" = yes ; then
98f2d9d5 3272 LIBS=`echo $LIBS | sed 's/-lpam //'`
3273fi
3274if test "$ac_cv_lib_pam_pam_set_item" = yes ; then
3275 LIBS=`echo $LIBS | sed 's/-ldl //'`
ddceb1c8 3276fi
3277
3c62e7eb 3278AC_EXEEXT
d7cfdd7c 3279AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openbsd-compat/Makefile \
3280 scard/Makefile ssh_prng_cmds survey.sh])
98a7c37b 3281AC_OUTPUT
d3083fbd 3282
cbd7492e 3283# Print summary of options
3284
cbd7492e 3285# Someone please show me a better way :)
3286A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3287B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3288C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3289D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
f5665f6f 3290E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
e0c4d3ac 3291F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
cbd7492e 3292G=`eval echo ${piddir}` ; G=`eval echo ${G}`
ecac8ee5 3293H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3294I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3295J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
cbd7492e 3296
3297echo ""
26de7942 3298echo "OpenSSH has been configured with the following options:"
ecac8ee5 3299echo " User binaries: $B"
3300echo " System binaries: $C"
3301echo " Configuration files: $D"
3302echo " Askpass program: $E"
3303echo " Manual pages: $F"
3304echo " PID file: $G"
3305echo " Privilege separation chroot path: $H"
95b99395 3306if test "x$external_path_file" = "x/etc/login.conf" ; then
3307echo " At runtime, sshd will use the path defined in $external_path_file"
3308echo " Make sure the path to scp is present, otherwise scp will not work"
8d184c09 3309else
ecac8ee5 3310echo " sshd default user PATH: $I"
89bbd457 3311 if test ! -z "$external_path_file"; then
95b99395 3312echo " (If PATH is set in $external_path_file it will be used instead. If"
3313echo " used, ensure the path to scp is present, otherwise scp will not work.)"
3314 fi
8d184c09 3315fi
06617857 3316if test ! -z "$superuser_path" ; then
ecac8ee5 3317echo " sshd superuser user PATH: $J"
3318fi
3319echo " Manpage format: $MANTYPE"
3e05e934 3320echo " PAM support: $PAM_MSG"
ecac8ee5 3321echo " KerberosV support: $KRB5_MSG"
3322echo " Smartcard support: $SCARD_MSG"
ecac8ee5 3323echo " S/KEY support: $SKEY_MSG"
3324echo " TCP Wrappers support: $TCPW_MSG"
3325echo " MD5 password support: $MD5_MSG"
59031773 3326echo " libedit support: $LIBEDIT_MSG"
3deb1408 3327echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
ecac8ee5 3328echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3329echo " BSD Auth support: $BSD_AUTH_MSG"
3330echo " Random number source: $RAND_MSG"
f1b0ecc3 3331if test ! -z "$USE_RAND_HELPER" ; then
ecac8ee5 3332echo " ssh-rand-helper collects from: $RAND_HELPER_MSG"
af774732 3333fi
3334
cbd7492e 3335echo ""
3336
0c2fb82f 3337echo " Host: ${host}"
3338echo " Compiler: ${CC}"
3339echo " Compiler flags: ${CFLAGS}"
3340echo "Preprocessor flags: ${CPPFLAGS}"
3341echo " Linker flags: ${LDFLAGS}"
ddceb1c8 3342echo " Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
cbd7492e 3343
3344echo ""
3345
9cefe228 3346if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
b3146b5f 3347 echo "SVR4 style packages are supported with \"make package\""
3348 echo ""
9cefe228 3349fi
3350
adeebd37 3351if test "x$PAM_MSG" = "xyes" ; then
f1b0ecc3 3352 echo "PAM is enabled. You may need to install a PAM control file "
3353 echo "for sshd, otherwise password authentication may fail. "
aff51935 3354 echo "Example PAM control files can be found in the contrib/ "
f1b0ecc3 3355 echo "subdirectory"
adeebd37 3356 echo ""
3357fi
3358
f1b0ecc3 3359if test ! -z "$RAND_HELPER_CMDHASH" ; then
3360 echo "WARNING: you are using the builtin random number collection "
3361 echo "service. Please read WARNING.RNG and request that your OS "
3362 echo "vendor includes kernel-based random number collection in "
3363 echo "future versions of your OS."
2c523de9 3364 echo ""
3365fi
af774732 3366
2f6f9cff 3367if test ! -z "$NO_PEERCHECK" ; then
3368 echo "WARNING: the operating system that you are using does not "
3369 echo "appear to support either the getpeereid() API nor the "
3370 echo "SO_PEERCRED getsockopt() option. These facilities are used to "
3371 echo "enforce security checks to prevent unauthorised connections to "
3372 echo "ssh-agent. Their absence increases the risk that a malicious "
3373 echo "user can connect to your agent. "
3374 echo ""
3375fi
3376
7b578f7d 3377if test "$AUDIT_MODULE" = "bsm" ; then
3378 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
3379 echo "See the Solaris section in README.platform for details."
3380fi
git-cvsimport mirror of OpenSSH
This page took 1.125577 seconds and 5 git commands to generate.