]> andersk Git - openssh.git/blame - configure.ac
andersk / openssh.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
- (djm) [Makefile.in openbsd-compat/Makefile.in] Add added files
[openssh.git] / configure.ac
CommitLineData
eb5d7ff6 1# $Id$
2b983b95 2#
3# Copyright (c) 1999-2004 Damien Miller
4#
5# Permission to use, copy, modify, and distribute this software for any
6# purpose with or without fee is hereby granted, provided that the above
7# copyright notice and this permission notice appear in all copies.
8#
9# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
0b202697 16
76e6410a 17AC_INIT(OpenSSH, Portable, openssh-unix-dev@mindrot.org)
823221b2 18AC_REVISION($Revision$)
98a7c37b 19AC_CONFIG_SRCDIR([ssh.c])
5881cd60 20
21AC_CONFIG_HEADER(config.h)
b14b2ae7 22AC_PROG_CC
a7effaac 23AC_CANONICAL_HOST
cf0c5df5 24AC_C_BIGENDIAN
5881cd60 25
a0391976 26# Checks for programs.
4bbf95fa 27AC_PROG_AWK
4cca272e 28AC_PROG_CPP
5881cd60 29AC_PROG_RANLIB
cf8dd513 30AC_PROG_INSTALL
c9ecc3c7 31AC_PROG_EGREP
bee0a37e 32AC_PATH_PROG(AR, ar)
ddd8c95b 33AC_PATH_PROG(CAT, cat)
34AC_PATH_PROG(KILL, kill)
13dd877b 35AC_PATH_PROGS(PERL, perl5 perl)
c3690df3 36AC_PATH_PROG(SED, sed)
a0f84251 37AC_SUBST(PERL)
ad85db64 38AC_PATH_PROG(ENT, ent)
39AC_SUBST(ENT)
6958bd37 40AC_PATH_PROG(TEST_MINUS_S_SH, bash)
41AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
42AC_PATH_PROG(TEST_MINUS_S_SH, sh)
6193497b 43AC_PATH_PROG(SH, sh)
a3245b92 44AC_SUBST(TEST_SHELL,sh)
f498ed15 45
9cefe228 46dnl for buildpkg.sh
47AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
48 [/usr/sbin${PATH_SEPARATOR}/etc])
49AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
50 [/usr/sbin${PATH_SEPARATOR}/etc])
51AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
eeb27c78 52if test -x /sbin/sh; then
53 AC_SUBST(STARTUP_SCRIPT_SHELL,/sbin/sh)
54else
55 AC_SUBST(STARTUP_SCRIPT_SHELL,/bin/sh)
56fi
9cefe228 57
948fd8b9 58# System features
59AC_SYS_LARGEFILE
60
c193d002 61if test -z "$AR" ; then
62 AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
63fi
64
2e73a022 65# Use LOGIN_PROGRAM from environment if possible
66if test ! -z "$LOGIN_PROGRAM" ; then
3466e002 67 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM",
68 [If your header files don't define LOGIN_PROGRAM,
69 then use this (detected) from environment and PATH])
2e73a022 70else
71 # Search for login
72 AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
73 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
74 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
75 fi
76fi
77
37656beb 78AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
79if test ! -z "$PATH_PASSWD_PROG" ; then
3466e002 80 AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG",
81 [Full path of your "passwd" program])
37656beb 82fi
83
d423d822 84if test -z "$LD" ; then
85 LD=$CC
86fi
87AC_SUBST(LD)
82f4e93d 88
d423d822 89AC_C_INLINE
dfafb2e1 90
91AC_CHECK_DECL(LLONG_MAX, have_llong_max=1, , [#include <limits.h>])
92
aff51935 93if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
af40ca44 94 CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wuninitialized"
eeee8237 95 GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'`
5fdabf45 96 case $GCC_VER in
97 1.*) ;;
98 2.8* | 2.9*) CFLAGS="$CFLAGS -Wsign-compare" ;;
99 2.*) ;;
dbf07ba2 100 3.*) CFLAGS="$CFLAGS -Wsign-compare" ;;
cd595991 101 4.*) CFLAGS="$CFLAGS -Wsign-compare -Wno-pointer-sign" ;;
102 *) ;;
5fdabf45 103 esac
8a3ff1aa 104
dfafb2e1 105 if test -z "$have_llong_max"; then
106 # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
107 unset ac_cv_have_decl_LLONG_MAX
108 saved_CFLAGS="$CFLAGS"
109 CFLAGS="$CFLAGS -std=gnu99"
110 AC_CHECK_DECL(LLONG_MAX,
111 [have_llong_max=1],
112 [CFLAGS="$saved_CFLAGS"],
113 [#include <limits.h>]
114 )
115 fi
d423d822 116fi
117
e6354014 118AC_ARG_WITH(rpath,
119 [ --without-rpath Disable auto-added -R linker paths],
120 [
82f4e93d 121 if test "x$withval" = "xno" ; then
e6354014 122 need_dash_r=""
123 fi
124 if test "x$withval" = "xyes" ; then
125 need_dash_r=1
126 fi
127 ]
128)
129
a0391976 130# Check for some target-specific stuff
a7effaac 131case "$host" in
9d6b1b96 132*-*-aix*)
aff51935 133 AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
68ece370 134 if (test -z "$blibpath"); then
0a15d73b 135 blibpath="/usr/lib:/lib"
68ece370 136 fi
137 saved_LDFLAGS="$LDFLAGS"
138 for tryflags in -blibpath: -Wl,-blibpath: -Wl,-rpath, ;do
139 if (test -z "$blibflags"); then
140 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
141 AC_TRY_LINK([], [], [blibflags=$tryflags])
142 fi
143 done
144 if (test -z "$blibflags"); then
145 AC_MSG_RESULT(not found)
146 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
147 else
148 AC_MSG_RESULT($blibflags)
bd499f9e 149 fi
68ece370 150 LDFLAGS="$saved_LDFLAGS"
e351e493 151 dnl Check for authenticate. Might be in libs.a on older AIXes
3466e002 152 AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE, 1,
153 [Define if you want to enable AIX4's authenticate function])],
0764e748 154 [AC_CHECK_LIB(s,authenticate,
e351e493 155 [ AC_DEFINE(WITH_AIXAUTHENTICATE)
0764e748 156 LIBS="$LIBS -ls"
157 ])
158 ])
ba603e06 159 dnl Check for various auth function declarations in headers.
c85ed8e2 160 AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
72ad335d 161 passwdexpired, setauthdb], , , [#include <usersec.h>])
e351e493 162 dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
ba603e06 163 AC_CHECK_DECLS(loginfailed,
e351e493 164 [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
165 AC_TRY_COMPILE(
f58c0e01 166 [#include <usersec.h>],
e351e493 167 [(void)loginfailed("user","host","tty",0);],
168 [AC_MSG_RESULT(yes)
3466e002 169 AC_DEFINE(AIX_LOGINFAILED_4ARG, 1,
170 [Define if your AIX loginfailed() function
171 takes 4 arguments (AIX >= 5.2)])],
f58c0e01 172 [AC_MSG_RESULT(no)]
e351e493 173 )],
174 [],
175 [#include <usersec.h>]
176 )
2aa3a16c 177 AC_CHECK_FUNCS(setauthdb)
5ccf88cb 178 check_for_aix_broken_getaddrinfo=1
3466e002 179 AC_DEFINE(BROKEN_REALPATH, 1, [Define if you have a broken realpath.])
180 AC_DEFINE(SETEUID_BREAKS_SETUID, 1,
181 [Define if your platform breaks doing a seteuid before a setuid])
182 AC_DEFINE(BROKEN_SETREUID, 1, [Define if your setreuid() is broken])
183 AC_DEFINE(BROKEN_SETREGID, 1, [Define if your setregid() is broken])
a3cef3ca 184 dnl AIX handles lastlog as part of its login message
3466e002 185 AC_DEFINE(DISABLE_LASTLOG, 1, [Define if you don't want to use lastlog])
186 AC_DEFINE(LOGIN_NEEDS_UTMPX, 1,
187 [Some systems need a utmpx entry for /bin/login to work])
188 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV,
189 [Define to a Set Process Title type if your system is
190 supported by bsd-setproctitle.c])
961c2997 191 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
192 [AIX 5.2 and 5.3 (and presumably newer) require this])
9d6b1b96 193 ;;
3c62e7eb 194*-*-cygwin*)
a52997bd 195 check_for_libcrypt_later=1
ffb8d130 196 LIBS="$LIBS /usr/lib/textmode.o"
3466e002 197 AC_DEFINE(HAVE_CYGWIN, 1, [Define if you are on Cygwin])
198 AC_DEFINE(USE_PIPES, 1, [Use PIPES instead of a socketpair()])
199 AC_DEFINE(DISABLE_SHADOW, 1,
200 [Define if you want to disable shadow passwords])
201 AC_DEFINE(IP_TOS_IS_BROKEN, 1,
202 [Define if your system choked on IP TOS setting])
203 AC_DEFINE(NO_X11_UNIX_SOCKETS, 1,
204 [Define if X11 doesn't support AF_UNIX sockets on that system])
205 AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT, 1,
206 [Define if the concept of ports only accessible to
207 superusers isn't known])
208 AC_DEFINE(DISABLE_FD_PASSING, 1,
209 [Define if your platform needs to skip post auth
210 file descriptor passing])
3c62e7eb 211 ;;
d6fdb079 212*-*-dgux*)
213 AC_DEFINE(IP_TOS_IS_BROKEN)
0c6a72a5 214 AC_DEFINE(SETEUID_BREAKS_SETUID)
215 AC_DEFINE(BROKEN_SETREUID)
216 AC_DEFINE(BROKEN_SETREGID)
d6fdb079 217 ;;
39c98ef7 218*-*-darwin*)
33e2e066 219 AC_MSG_CHECKING(if we have working getaddrinfo)
220 AC_TRY_RUN([#include <mach-o/dyld.h>
221main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
222 exit(0);
223 else
224 exit(1);
225}], [AC_MSG_RESULT(working)],
226 [AC_MSG_RESULT(buggy)
3466e002 227 AC_DEFINE(BROKEN_GETADDRINFO, 1, [getaddrinfo is broken (if present)])],
b27e573d 228 [AC_MSG_RESULT(assume it is working)])
635e0c42 229 AC_DEFINE(SETEUID_BREAKS_SETUID)
230 AC_DEFINE(BROKEN_SETREUID)
231 AC_DEFINE(BROKEN_SETREGID)
3466e002 232 AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1,
233 [Define if your resolver libs need this for getrrsetbyname])
39c98ef7 234 ;;
7d458c86 235*-*-hpux*)
236 # first we define all of the options common to all HP-UX releases
b8fea62d 237 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
44839801 238 IPADDR_IN_DISPLAY=yes
2b10f47a 239 AC_DEFINE(USE_PIPES)
3466e002 240 AC_DEFINE(LOGIN_NO_ENDOPT, 1,
241 [Define if your login program cannot handle end of options ("--")])
a2572aa7 242 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3466e002 243 AC_DEFINE(LOCKED_PASSWD_STRING, "*",
244 [String used in /etc/passwd to denote locked account])
3a2b2b44 245 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
83f987c3 246 MAIL="/var/mail/username"
f75ca46d 247 LIBS="$LIBS -lsec"
7d458c86 248 AC_CHECK_LIB(xnet, t_error, ,
249 AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
250
251 # next, we define all of the options specific to major releases
252 case "$host" in
253 *-*-hpux10*)
254 if test -z "$GCC"; then
255 CFLAGS="$CFLAGS -Ae"
256 fi
257 ;;
258 *-*-hpux11*)
3466e002 259 AC_DEFINE(PAM_SUN_CODEBASE, 1,
260 [Define if you are using Solaris-derived PAM which
261 passes pam_messages to the conversation function
262 with an extra level of indirection])
263 AC_DEFINE(DISABLE_UTMP, 1,
264 [Define if you don't want to use utmp])
7d458c86 265 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
266 check_for_hpux_broken_getaddrinfo=1
267 check_for_conflicting_getspnam=1
268 ;;
269 esac
270
271 # lastly, we define options specific to minor releases
272 case "$host" in
273 *-*-hpux10.26)
3466e002 274 AC_DEFINE(HAVE_SECUREWARE, 1,
275 [Define if you have SecureWare-based
276 protected password database])
7d458c86 277 disable_ptmx_check=yes
278 LIBS="$LIBS -lsecpw"
279 ;;
280 esac
2b763e31 281 ;;
d94aa2ae 282*-*-irix5*)
6ac7829a 283 PATH="$PATH:/usr/etc"
3466e002 284 AC_DEFINE(BROKEN_INET_NTOA, 1,
285 [Define if you system's inet_ntoa is busted
286 (e.g. Irix gcc issue)])
cb433561 287 AC_DEFINE(SETEUID_BREAKS_SETUID)
288 AC_DEFINE(BROKEN_SETREUID)
289 AC_DEFINE(BROKEN_SETREGID)
3466e002 290 AC_DEFINE(WITH_ABBREV_NO_TTY, 1,
291 [Define if you shouldn't strip 'tty' from your
292 ttyname in [uw]tmp])
3e6e3da0 293 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
b9795b89 294 ;;
295*-*-irix6*)
6ac7829a 296 PATH="$PATH:/usr/etc"
3466e002 297 AC_DEFINE(WITH_IRIX_ARRAY, 1,
298 [Define if you have/want arrays
299 (cluster-wide session managment, not C arrays)])
300 AC_DEFINE(WITH_IRIX_PROJECT, 1,
301 [Define if you want IRIX project management])
302 AC_DEFINE(WITH_IRIX_AUDIT, 1,
303 [Define if you want IRIX audit trails])
304 AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS, 1,
305 [Define if you want IRIX kernel jobs])])
416ed5a7 306 AC_DEFINE(BROKEN_INET_NTOA)
412c0eaa 307 AC_DEFINE(SETEUID_BREAKS_SETUID)
308 AC_DEFINE(BROKEN_SETREUID)
309 AC_DEFINE(BROKEN_SETREGID)
3466e002 310 AC_DEFINE(BROKEN_UPDWTMPX, 1, [updwtmpx is broken (if present)])
0e8f4eba 311 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 312 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
d94aa2ae 313 ;;
5cdfe03f 314*-*-linux*)
315 no_dev_ptmx=1
717057b6 316 check_for_libcrypt_later=1
eacb954e 317 check_for_openpty_ctty_bug=1
3466e002 318 AC_DEFINE(DONT_TRY_OTHER_AF, 1, [Workaround more Linux IPv6 quirks])
319 AC_DEFINE(PAM_TTY_KLUDGE, 1,
320 [Work around problematic Linux PAM modules handling of PAM_TTY])
321 AC_DEFINE(LOCKED_PASSWD_PREFIX, "!",
322 [String used in /etc/passwd to denote locked account])
3a2b2b44 323 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
3466e002 324 AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM,
325 [Define to whatever link() returns for "not supported"
326 if it doesn't return EOPNOTSUPP.])
b6610e8f 327 AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
3466e002 328 AC_DEFINE(USE_BTMP)
80faa19f 329 inet6_default_4in6=yes
bf7c1e6c 330 case `uname -r` in
ad84c479 331 1.*|2.0.*)
3466e002 332 AC_DEFINE(BROKEN_CMSG_TYPE, 1,
333 [Define if cmsg_type is not passed correctly])
bf7c1e6c 334 ;;
bf7c1e6c 335 esac
c40f09ca 336 # tun(4) forwarding compat code
d91775e1 337 AC_CHECK_HEADERS(linux/if_tun.h)
b5081213 338 if test "x$ac_cv_header_linux_if_tun_h" = "xyes" ; then
c40f09ca 339 AC_DEFINE(SSH_TUN_LINUX, 1,
340 [Open tunnel devices the Linux tun/tap way])
341 AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
342 [Use tunnel device compatibility to OpenBSD])
343 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
344 [Prepend the address family to IP tunnel traffic])
345 fi
5cdfe03f 346 ;;
66d6c27e 347mips-sony-bsd|mips-sony-newsos4)
4b2cf3f1 348 AC_DEFINE(NEED_SETPGRP, 1, [Need setpgrp to acquire controlling tty])
66d6c27e 349 SONY=1
66d6c27e 350 ;;
d468fc76 351*-*-netbsd*)
33e2e066 352 check_for_libcrypt_before=1
82f4e93d 353 if test "x$withval" != "xno" ; then
e6354014 354 need_dash_r=1
355 fi
0f6cb079 356 AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
357 AC_CHECK_HEADER([net/if_tap.h], ,
358 AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
359 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
360 [Prepend the address family to IP tunnel traffic])
d468fc76 361 ;;
86b416a7 362*-*-freebsd*)
363 check_for_libcrypt_later=1
988c5031 364 AC_DEFINE(LOCKED_PASSWD_PREFIX, "*LOCKED*", [Account locked with pw(1)])
0f6cb079 365 AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
366 AC_CHECK_HEADER([net/if_tap.h], ,
367 AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
86b416a7 368 ;;
8707b7eb 369*-*-bsdi*)
370 AC_DEFINE(SETEUID_BREAKS_SETUID)
371 AC_DEFINE(BROKEN_SETREUID)
372 AC_DEFINE(BROKEN_SETREGID)
373 ;;
729bfe59 374*-next-*)
729bfe59 375 conf_lastlog_location="/usr/adm/lastlog"
698d107e 376 conf_utmp_location=/etc/utmp
377 conf_wtmp_location=/usr/adm/wtmp
378 MAIL=/usr/spool/mail
3466e002 379 AC_DEFINE(HAVE_NEXT, 1, [Define if you are on NeXT])
443172c4 380 AC_DEFINE(BROKEN_REALPATH)
00937921 381 AC_DEFINE(USE_PIPES)
3466e002 382 AC_DEFINE(BROKEN_SAVED_UIDS, 1, [Needed for NeXT])
729bfe59 383 ;;
5b7b5e23 384*-*-openbsd*)
385 AC_DEFINE(HAVE_ATTRIBUTE__SENTINEL__, 1, [OpenBSD's gcc has sentinel])
8034a348 386 AC_DEFINE(HAVE_ATTRIBUTE__BOUNDED__, 1, [OpenBSD's gcc has bounded])
0f6cb079 387 AC_DEFINE(SSH_TUN_OPENBSD, 1, [Open tunnel devices the OpenBSD way])
5b7b5e23 388 ;;
9d6b1b96 389*-*-solaris*)
82f4e93d 390 if test "x$withval" != "xno" ; then
010e9d5b 391 need_dash_r=1
392 fi
adeebd37 393 AC_DEFINE(PAM_SUN_CODEBASE)
7e2d5fa4 394 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3466e002 395 AC_DEFINE(LOGIN_NEEDS_TERM, 1,
396 [Some versions of /bin/login need the TERM supplied
397 on the commandline])
7f0a4ff1 398 AC_DEFINE(PAM_TTY_KLUDGE)
3466e002 399 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
400 [Define if pam_chauthtok wants real uid set
401 to the unpriv'ed user])
3e6e3da0 402 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
ad84c479 403 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
3466e002 404 AC_DEFINE(SSHD_ACQUIRES_CTTY, 1,
405 [Define if sshd somehow reacquires a controlling TTY
406 after setsid()])
95b99395 407 external_path_file=/etc/default/login
1d7b9b20 408 # hardwire lastlog location (can't detect it on some versions)
409 conf_lastlog_location="/var/adm/lastlog"
32c80420 410 AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
411 sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
412 if test "$sol2ver" -ge 8; then
413 AC_MSG_RESULT(yes)
414 AC_DEFINE(DISABLE_UTMP)
3466e002 415 AC_DEFINE(DISABLE_WTMP, 1,
416 [Define if you don't want to use wtmp])
32c80420 417 else
418 AC_MSG_RESULT(no)
419 fi
9d6b1b96 420 ;;
a423beaf 421*-*-sunos4*)
0c2fb82f 422 CPPFLAGS="$CPPFLAGS -DSUNOS4"
a423beaf 423 AC_CHECK_FUNCS(getpwanam)
adeebd37 424 AC_DEFINE(PAM_SUN_CODEBASE)
32eec038 425 conf_utmp_location=/etc/utmp
426 conf_wtmp_location=/var/adm/wtmp
427 conf_lastlog_location=/var/adm/lastlog
137d7b6c 428 AC_DEFINE(USE_PIPES)
a423beaf 429 ;;
6f68f28a 430*-ncr-sysv*)
98a7c37b 431 LIBS="$LIBS -lc89"
29525240 432 AC_DEFINE(USE_PIPES)
eabb99c6 433 AC_DEFINE(SSHD_ACQUIRES_CTTY)
6fb3618d 434 AC_DEFINE(SETEUID_BREAKS_SETUID)
435 AC_DEFINE(BROKEN_SETREUID)
436 AC_DEFINE(BROKEN_SETREGID)
6f68f28a 437 ;;
132dd316 438*-sni-sysv*)
c8c15bcb 439 # /usr/ucblib MUST NOT be searched on ReliantUNIX
e2798e96 440 AC_CHECK_LIB(dl, dlsym, ,)
d08db6d1 441 # -lresolv needs to be at the end of LIBS or DNS lookups break
442 AC_CHECK_LIB(resolv, res_query, [ LIBS="$LIBS -lresolv" ])
9548d6c8 443 IPADDR_IN_DISPLAY=yes
444 AC_DEFINE(USE_PIPES)
132dd316 445 AC_DEFINE(IP_TOS_IS_BROKEN)
605369bb 446 AC_DEFINE(SETEUID_BREAKS_SETUID)
447 AC_DEFINE(BROKEN_SETREUID)
448 AC_DEFINE(BROKEN_SETREGID)
eabb99c6 449 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 450 external_path_file=/etc/default/login
c8c15bcb 451 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
452 # Attention: always take care to bind libsocket and libnsl before libc,
453 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
132dd316 454 ;;
79a7ba96 455# UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
77bb0bca 456*-*-sysv4.2*)
9a406e1e 457 CFLAGS="$CFLAGS -Dva_list=_VA_LIST"
ed6553e2 458 AC_DEFINE(USE_PIPES)
7ed101c0 459 AC_DEFINE(SETEUID_BREAKS_SETUID)
460 AC_DEFINE(BROKEN_SETREUID)
461 AC_DEFINE(BROKEN_SETREGID)
46f853b9 462 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
e45da4d6 463 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
77bb0bca 464 ;;
79a7ba96 465# UnixWare 7.x, OpenUNIX 8
77bb0bca 466*-*-sysv5*)
d7d2cc6e 467 check_for_libcrypt_later=1
468 AC_DEFINE(UNIXWARE_LONG_PASSWORDS, 1, [Support passwords > 8 chars])
ed6553e2 469 AC_DEFINE(USE_PIPES)
7ed101c0 470 AC_DEFINE(SETEUID_BREAKS_SETUID)
471 AC_DEFINE(BROKEN_SETREUID)
472 AC_DEFINE(BROKEN_SETREGID)
3466e002 473 AC_DEFINE(PASSWD_NEEDS_USERNAME)
822015dd 474 case "$host" in
475 *-*-sysv5SCO_SV*) # SCO OpenServer 6.x
476 TEST_SHELL=/u95/bin/sh
3466e002 477 AC_DEFINE(BROKEN_LIBIAF, 1,
478 [ia_uinfo routines not supported by OS yet])
822015dd 479 ;;
e45da4d6 480 *) AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
481 ;;
822015dd 482 esac
77bb0bca 483 ;;
9d6b1b96 484*-*-sysv*)
9d6b1b96 485 ;;
79a7ba96 486# SCO UNIX and OEM versions of SCO UNIX
77bb0bca 487*-*-sco3.2v4*)
11cf4f1f 488 AC_MSG_ERROR("This Platform is no longer supported.")
77bb0bca 489 ;;
79a7ba96 490# SCO OpenServer 5.x
77bb0bca 491*-*-sco3.2v5*)
21710e39 492 if test -z "$GCC"; then
493 CFLAGS="$CFLAGS -belf"
494 fi
ed6553e2 495 LIBS="$LIBS -lprot -lx -ltinfo -lm"
509b1f88 496 no_dev_ptmx=1
ed6553e2 497 AC_DEFINE(USE_PIPES)
6e879cb4 498 AC_DEFINE(HAVE_SECUREWARE)
d287c664 499 AC_DEFINE(DISABLE_SHADOW)
94d8258b 500 AC_DEFINE(DISABLE_FD_PASSING)
7ed101c0 501 AC_DEFINE(SETEUID_BREAKS_SETUID)
502 AC_DEFINE(BROKEN_SETREUID)
503 AC_DEFINE(BROKEN_SETREGID)
bcebad47 504 AC_DEFINE(WITH_ABBREV_NO_TTY)
34f2baf0 505 AC_DEFINE(BROKEN_UPDWTMPX)
3466e002 506 AC_DEFINE(PASSWD_NEEDS_USERNAME)
aca75d94 507 AC_CHECK_FUNCS(getluid setluid)
533875af 508 MANTYPE=man
a3245b92 509 TEST_SHELL=ksh
509b1f88 510 ;;
ccbb983c 511*-*-unicosmk*)
3466e002 512 AC_DEFINE(NO_SSH_LASTLOG, 1,
513 [Define if you don't want to use lastlog in session.c])
c1ad5966 514 AC_DEFINE(SETEUID_BREAKS_SETUID)
515 AC_DEFINE(BROKEN_SETREUID)
516 AC_DEFINE(BROKEN_SETREGID)
ccbb983c 517 AC_DEFINE(USE_PIPES)
518 AC_DEFINE(DISABLE_FD_PASSING)
519 LDFLAGS="$LDFLAGS"
520 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
521 MANTYPE=cat
d262b7f2 522 ;;
7b9a8c6e 523*-*-unicosmp*)
c1ad5966 524 AC_DEFINE(SETEUID_BREAKS_SETUID)
525 AC_DEFINE(BROKEN_SETREUID)
526 AC_DEFINE(BROKEN_SETREGID)
7b9a8c6e 527 AC_DEFINE(WITH_ABBREV_NO_TTY)
528 AC_DEFINE(USE_PIPES)
529 AC_DEFINE(DISABLE_FD_PASSING)
530 LDFLAGS="$LDFLAGS"
c1ad5966 531 LIBS="$LIBS -lgen -lacid -ldb"
7b9a8c6e 532 MANTYPE=cat
533 ;;
ca5c7d6a 534*-*-unicos*)
c1ad5966 535 AC_DEFINE(SETEUID_BREAKS_SETUID)
536 AC_DEFINE(BROKEN_SETREUID)
537 AC_DEFINE(BROKEN_SETREGID)
ca5c7d6a 538 AC_DEFINE(USE_PIPES)
94d8258b 539 AC_DEFINE(DISABLE_FD_PASSING)
ef51930f 540 AC_DEFINE(NO_SSH_LASTLOG)
ccbb983c 541 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
542 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
543 MANTYPE=cat
a704dd54 544 ;;
4d33e531 545*-dec-osf*)
99c8ddac 546 AC_MSG_CHECKING(for Digital Unix SIA)
547 no_osfsia=""
548 AC_ARG_WITH(osfsia,
549 [ --with-osfsia Enable Digital Unix SIA],
550 [
551 if test "x$withval" = "xno" ; then
552 AC_MSG_RESULT(disabled)
553 no_osfsia=1
554 fi
555 ],
556 )
557 if test -z "$no_osfsia" ; then
4d33e531 558 if test -f /etc/sia/matrix.conf; then
559 AC_MSG_RESULT(yes)
3466e002 560 AC_DEFINE(HAVE_OSF_SIA, 1,
561 [Define if you have Digital Unix Security
562 Integration Architecture])
563 AC_DEFINE(DISABLE_LOGIN, 1,
564 [Define if you don't want to use your
565 system's login() call])
58d0df4e 566 AC_DEFINE(DISABLE_FD_PASSING)
4d33e531 567 LIBS="$LIBS -lsecurity -ldb -lm -laud"
568 else
569 AC_MSG_RESULT(no)
3466e002 570 AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin",
571 [String used in /etc/passwd to denote locked account])
4d33e531 572 fi
573 fi
a6e67b60 574 AC_DEFINE(BROKEN_GETADDRINFO)
f4f2ff4f 575 AC_DEFINE(SETEUID_BREAKS_SETUID)
08da2d08 576 AC_DEFINE(BROKEN_SETREUID)
577 AC_DEFINE(BROKEN_SETREGID)
4d33e531 578 ;;
41cb4569 579
9c54c067 580*-*-nto-qnx*)
41cb4569 581 AC_DEFINE(USE_PIPES)
582 AC_DEFINE(NO_X11_UNIX_SOCKETS)
3466e002 583 AC_DEFINE(MISSING_NFDBITS, 1, [Define on *nto-qnx systems])
584 AC_DEFINE(MISSING_HOWMANY, 1, [Define on *nto-qnx systems])
585 AC_DEFINE(MISSING_FD_MASK, 1, [Define on *nto-qnx systems])
9c54c067 586 AC_DEFINE(DISABLE_LASTLOG)
49c64dd6 587 AC_DEFINE(SSHD_ACQUIRES_CTTY)
0c7e8877 588 enable_etc_default_login=no # has incompatible /etc/default/login
41cb4569 589 ;;
35fc74ed 590
591*-*-ultrix*)
3466e002 592 AC_DEFINE(BROKEN_GETGROUPS, 1, [getgroups(0,NULL) will return -1])
593 AC_DEFINE(BROKEN_MMAP, 1, [Ultrix mmap can't map files])
4b2cf3f1 594 AC_DEFINE(NEED_SETPGRP)
b5765e1d 595 AC_DEFINE(HAVE_SYS_SYSLOG_H, 1, [Force use of sys/syslog.h on Ultrix])
596 ;;
157b6700 597
598*-*-lynxos)
599 CFLAGS="$CFLAGS -D__NO_INCLUDE_WARN__"
3466e002 600 AC_DEFINE(MISSING_HOWMANY)
157b6700 601 AC_DEFINE(BROKEN_SETVBUF, 1, [LynxOS has broken setvbuf() implementation])
602 ;;
a7effaac 603esac
604
8e7b16f8 605# Allow user to specify flags
606AC_ARG_WITH(cflags,
607 [ --with-cflags Specify additional flags to pass to compiler],
608 [
6cf0200f 609 if test -n "$withval" && test "x$withval" != "xno" && \
610 test "x${withval}" != "xyes"; then
8e7b16f8 611 CFLAGS="$CFLAGS $withval"
612 fi
82f4e93d 613 ]
8e7b16f8 614)
0c2fb82f 615AC_ARG_WITH(cppflags,
616 [ --with-cppflags Specify additional flags to pass to preprocessor] ,
617 [
6cf0200f 618 if test -n "$withval" && test "x$withval" != "xno" && \
619 test "x${withval}" != "xyes"; then
0c2fb82f 620 CPPFLAGS="$CPPFLAGS $withval"
621 fi
622 ]
623)
8e7b16f8 624AC_ARG_WITH(ldflags,
97b378bf 625 [ --with-ldflags Specify additional flags to pass to linker],
8e7b16f8 626 [
6cf0200f 627 if test -n "$withval" && test "x$withval" != "xno" && \
628 test "x${withval}" != "xyes"; then
8e7b16f8 629 LDFLAGS="$LDFLAGS $withval"
630 fi
82f4e93d 631 ]
8e7b16f8 632)
633AC_ARG_WITH(libs,
634 [ --with-libs Specify additional libraries to link with],
635 [
6cf0200f 636 if test -n "$withval" && test "x$withval" != "xno" && \
637 test "x${withval}" != "xyes"; then
8e7b16f8 638 LIBS="$LIBS $withval"
639 fi
82f4e93d 640 ]
8e7b16f8 641)
ed89c848 642AC_ARG_WITH(Werror,
643 [ --with-Werror Build main code with -Werror],
644 [
645 if test -n "$withval" && test "x$withval" != "xno"; then
646 werror_flags="-Werror"
1012885d 647 if test "x${withval}" != "xyes"; then
ed89c848 648 werror_flags="$withval"
649 fi
650 fi
651 ]
652)
8e7b16f8 653
c5829391 654AC_MSG_CHECKING(compiler and flags for sanity)
479cece8 655AC_RUN_IFELSE(
656 [AC_LANG_SOURCE([
c5829391 657#include <stdio.h>
658int main(){exit(0);}
479cece8 659 ])],
c5829391 660 [ AC_MSG_RESULT(yes) ],
661 [
662 AC_MSG_RESULT(no)
663 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
1a01a50c 664 ],
665 [ AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
c5829391 666)
667
b04a9f8c 668dnl Checks for header files.
669AC_CHECK_HEADERS( \
670 bstring.h \
671 crypt.h \
672 dirent.h \
673 endian.h \
674 features.h \
675 floatingpoint.h \
676 getopt.h \
677 glob.h \
678 ia.h \
4c653d8e 679 iaf.h \
b04a9f8c 680 limits.h \
681 login.h \
682 login_cap.h \
683 maillock.h \
684 ndir.h \
685 netdb.h \
686 netgroup.h \
b04a9f8c 687 pam/pam_appl.h \
688 paths.h \
689 pty.h \
690 readpassphrase.h \
691 rpc/types.h \
692 security/pam_appl.h \
693 shadow.h \
694 stddef.h \
695 stdint.h \
0957c2cf 696 string.h \
b04a9f8c 697 strings.h \
698 sys/audit.h \
699 sys/bitypes.h \
700 sys/bsdtty.h \
701 sys/cdefs.h \
702 sys/dir.h \
703 sys/mman.h \
704 sys/ndir.h \
705 sys/prctl.h \
706 sys/pstat.h \
707 sys/select.h \
708 sys/stat.h \
709 sys/stream.h \
710 sys/stropts.h \
711 sys/strtio.h \
712 sys/sysmacros.h \
713 sys/time.h \
714 sys/timers.h \
715 sys/un.h \
716 time.h \
717 tmpdir.h \
718 ttyent.h \
25dd2ce6 719 unistd.h \
b04a9f8c 720 usersec.h \
721 util.h \
722 utime.h \
723 utmp.h \
724 utmpx.h \
ea76f54c 725 vis.h \
b04a9f8c 726)
ddceb1c8 727
823221b2 728# lastlog.h requires sys/time.h to be included first on Solaris
729AC_CHECK_HEADERS(lastlog.h, [], [], [
730#ifdef HAVE_SYS_TIME_H
731# include <sys/time.h>
732#endif
733])
734
765a24cd 735# sys/ptms.h requires sys/stream.h to be included first on Solaris
736AC_CHECK_HEADERS(sys/ptms.h, [], [], [
737#ifdef HAVE_SYS_STREAM_H
738# include <sys/stream.h>
739#endif
740])
741
a0391976 742# Checks for libraries.
98a7c37b 743AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
744AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
2c523de9 745
446227d6 746dnl IRIX and Solaris 2.5.1 have dirname() in libgen
747AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
748 AC_CHECK_LIB(gen, dirname,[
749 AC_CACHE_CHECK([for broken dirname],
750 ac_cv_have_broken_dirname, [
751 save_LIBS="$LIBS"
752 LIBS="$LIBS -lgen"
b0e7249f 753 AC_RUN_IFELSE(
754 [AC_LANG_SOURCE([[
446227d6 755#include <libgen.h>
756#include <string.h>
757
758int main(int argc, char **argv) {
759 char *s, buf[32];
760
761 strncpy(buf,"/etc", 32);
762 s = dirname(buf);
763 if (!s || strncmp(s, "/", 32) != 0) {
764 exit(1);
765 } else {
766 exit(0);
767 }
768}
b0e7249f 769 ]])],
770 [ ac_cv_have_broken_dirname="no" ],
771 [ ac_cv_have_broken_dirname="yes" ],
446227d6 772 [ ac_cv_have_broken_dirname="no" ],
446227d6 773 )
774 LIBS="$save_LIBS"
775 ])
776 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
777 LIBS="$LIBS -lgen"
778 AC_DEFINE(HAVE_DIRNAME)
779 AC_CHECK_HEADERS(libgen.h)
780 fi
781 ])
782])
783
784AC_CHECK_FUNC(getspnam, ,
785 AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
3466e002 786AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME, 1,
787 [Define if you have the basename function.]))
446227d6 788
98a7c37b 789dnl zlib is required
790AC_ARG_WITH(zlib,
791 [ --with-zlib=PATH Use zlib in PATH],
6dd05556 792 [ if test "x$withval" = "xno" ; then
793 AC_MSG_ERROR([*** zlib is required ***])
794 elif test "x$withval" != "xyes"; then
98a7c37b 795 if test -d "$withval/lib"; then
796 if test -n "${need_dash_r}"; then
5a162955 797 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 798 else
5a162955 799 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 800 fi
801 else
802 if test -n "${need_dash_r}"; then
5a162955 803 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 804 else
5a162955 805 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 806 fi
807 fi
808 if test -d "$withval/include"; then
5a162955 809 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 810 else
5a162955 811 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 812 fi
6dd05556 813 fi ]
98a7c37b 814)
815
0a15d73b 816AC_CHECK_LIB(z, deflate, ,
817 [
818 saved_CPPFLAGS="$CPPFLAGS"
819 saved_LDFLAGS="$LDFLAGS"
820 save_LIBS="$LIBS"
821 dnl Check default zlib install dir
822 if test -n "${need_dash_r}"; then
823 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
824 else
825 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
826 fi
827 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
828 LIBS="$LIBS -lz"
829 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
830 [
831 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
832 ]
833 )
834 ]
835)
4ad65809 836AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
8068d564 837
838AC_ARG_WITH(zlib-version-check,
839 [ --without-zlib-version-check Disable zlib version check],
840 [ if test "x$withval" = "xno" ; then
841 zlib_check_nonfatal=1
842 fi
843 ]
844)
845
5c7fc85d 846AC_MSG_CHECKING(for possibly buggy zlib)
479cece8 847AC_RUN_IFELSE([AC_LANG_SOURCE([[
5c7fc85d 848#include <stdio.h>
4ad65809 849#include <zlib.h>
850int main()
851{
5c7fc85d 852 int a=0, b=0, c=0, d=0, n, v;
853 n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
854 if (n != 3 && n != 4)
4ad65809 855 exit(1);
5c7fc85d 856 v = a*1000000 + b*10000 + c*100 + d;
857 fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
858
859 /* 1.1.4 is OK */
860 if (a == 1 && b == 1 && c >= 4)
4ad65809 861 exit(0);
5c7fc85d 862
0072b59d 863 /* 1.2.3 and up are OK */
864 if (v >= 1020300)
5c7fc85d 865 exit(0);
866
4ad65809 867 exit(2);
868}
479cece8 869 ]])],
5c7fc85d 870 AC_MSG_RESULT(no),
871 [ AC_MSG_RESULT(yes)
8068d564 872 if test -z "$zlib_check_nonfatal" ; then
873 AC_MSG_ERROR([*** zlib too old - check config.log ***
874Your reported zlib version has known security problems. It's possible your
875vendor has fixed these problems without changing the version number. If you
876are sure this is the case, you can disable the check by running
877"./configure --without-zlib-version-check".
6090bcfe 878If you are in doubt, upgrade zlib to version 1.2.3 or greater.
5c7fc85d 879See http://www.gzip.org/zlib/ for details.])
8068d564 880 else
881 AC_MSG_WARN([zlib version may have security problems])
882 fi
1a01a50c 883 ],
884 [ AC_MSG_WARN([cross compiling: not checking zlib version]) ]
4ad65809 885)
48e7916f 886
2c523de9 887dnl UnixWare 2.x
aff51935 888AC_CHECK_FUNC(strcasecmp,
2c523de9 889 [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
890)
23361281 891AC_CHECK_FUNCS(utimes,
cda1ebcb 892 [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
893 LIBS="$LIBS -lc89"]) ]
2c523de9 894)
4cca272e 895
7c6d759d 896dnl Checks for libutil functions
897AC_CHECK_HEADERS(libutil.h)
3466e002 898AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN, 1,
899 [Define if your libraries define login()])])
7c6d759d 900AC_CHECK_FUNCS(logout updwtmp logwtmp)
901
a738c3b0 902AC_FUNC_STRFTIME
903
84ceda19 904# Check for ALTDIRFUNC glob() extension
905AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
906AC_EGREP_CPP(FOUNDIT,
907 [
908 #include <glob.h>
909 #ifdef GLOB_ALTDIRFUNC
910 FOUNDIT
911 #endif
aff51935 912 ],
84ceda19 913 [
3466e002 914 AC_DEFINE(GLOB_HAS_ALTDIRFUNC, 1,
915 [Define if your system glob() function has
916 the GLOB_ALTDIRFUNC extension])
84ceda19 917 AC_MSG_RESULT(yes)
918 ],
919 [
920 AC_MSG_RESULT(no)
921 ]
922)
4cca272e 923
40849fdb 924# Check for g.gl_matchc glob() extension
925AC_MSG_CHECKING(for gl_matchc field in glob_t)
13ff27b7 926AC_TRY_COMPILE(FOUNDIT,
927 [ #include <glob.h> ],
928 [glob_t g; g.gl_matchc = 1;],
aff51935 929 [
3466e002 930 AC_DEFINE(GLOB_HAS_GL_MATCHC, 1,
931 [Define if your system glob() function has
932 gl_matchc options in glob_t])
aff51935 933 AC_MSG_RESULT(yes)
934 ],
935 [
936 AC_MSG_RESULT(no)
937 ]
40849fdb 938)
939
edbe6722 940AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
1a01a50c 941AC_RUN_IFELSE(
479cece8 942 [AC_LANG_SOURCE([[
edbe6722 943#include <sys/types.h>
944#include <dirent.h>
aec4cb4f 945int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
479cece8 946 ]])],
aff51935 947 [AC_MSG_RESULT(yes)],
edbe6722 948 [
949 AC_MSG_RESULT(no)
3466e002 950 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME, 1,
d08db6d1 951 [Define if your struct dirent expects you to
3466e002 952 allocate extra space for d_name])
1a01a50c 953 ],
82f4e93d 954 [
1a01a50c 955 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
956 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
edbe6722 957 ]
958)
959
419e26e7 960AC_MSG_CHECKING([for /proc/pid/fd directory])
961if test -d "/proc/$$/fd" ; then
3466e002 962 AC_DEFINE(HAVE_PROC_PID, 1, [Define if you have /proc/$pid/fd])
419e26e7 963 AC_MSG_RESULT(yes)
964else
965 AC_MSG_RESULT(no)
966fi
967
278588d8 968# Check whether user wants S/Key support
aff51935 969SKEY_MSG="no"
278588d8 970AC_ARG_WITH(skey,
6ff3d0dc 971 [ --with-skey[[=PATH]] Enable S/Key support (optionally in PATH)],
278588d8 972 [
973 if test "x$withval" != "xno" ; then
974
975 if test "x$withval" != "xyes" ; then
976 CPPFLAGS="$CPPFLAGS -I${withval}/include"
977 LDFLAGS="$LDFLAGS -L${withval}/lib"
978 fi
979
3466e002 980 AC_DEFINE(SKEY, 1, [Define if you want S/Key support])
278588d8 981 LIBS="-lskey $LIBS"
aff51935 982 SKEY_MSG="yes"
82f4e93d 983
ddceb1c8 984 AC_MSG_CHECKING([for s/key support])
b0e7249f 985 AC_LINK_IFELSE(
986 [AC_LANG_SOURCE([[
ddceb1c8 987#include <stdio.h>
988#include <skey.h>
aec4cb4f 989int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
b0e7249f 990 ]])],
ddceb1c8 991 [AC_MSG_RESULT(yes)],
278588d8 992 [
ddceb1c8 993 AC_MSG_RESULT(no)
278588d8 994 AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
995 ])
141fc639 996 AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
997 AC_TRY_COMPILE(
998 [#include <stdio.h>
999 #include <skey.h>],
1000 [(void)skeychallenge(NULL,"name","",0);],
1001 [AC_MSG_RESULT(yes)
3466e002 1002 AC_DEFINE(SKEYCHALLENGE_4ARG, 1,
1003 [Define if your skeychallenge()
1004 function takes 4 arguments (NetBSD)])],
141fc639 1005 [AC_MSG_RESULT(no)]
1006 )
278588d8 1007 fi
1008 ]
1009)
1010
1011# Check whether user wants TCP wrappers support
98a7c37b 1012TCPW_MSG="no"
278588d8 1013AC_ARG_WITH(tcp-wrappers,
6ff3d0dc 1014 [ --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
278588d8 1015 [
1016 if test "x$withval" != "xno" ; then
1017 saved_LIBS="$LIBS"
98a7c37b 1018 saved_LDFLAGS="$LDFLAGS"
1019 saved_CPPFLAGS="$CPPFLAGS"
4b492aab 1020 if test -n "${withval}" && \
6cf0200f 1021 test "x${withval}" != "xyes"; then
98a7c37b 1022 if test -d "${withval}/lib"; then
1023 if test -n "${need_dash_r}"; then
5a162955 1024 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 1025 else
5a162955 1026 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 1027 fi
1028 else
1029 if test -n "${need_dash_r}"; then
5a162955 1030 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 1031 else
5a162955 1032 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 1033 fi
1034 fi
1035 if test -d "${withval}/include"; then
5a162955 1036 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 1037 else
5a162955 1038 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 1039 fi
98a7c37b 1040 fi
ddceb1c8 1041 LIBWRAP="-lwrap"
1042 LIBS="$LIBWRAP $LIBS"
278588d8 1043 AC_MSG_CHECKING(for libwrap)
1044 AC_TRY_LINK(
1045 [
77f09220 1046#include <sys/types.h>
1047#include <sys/socket.h>
1048#include <netinet/in.h>
278588d8 1049#include <tcpd.h>
1050 int deny_severity = 0, allow_severity = 0;
1051 ],
1052 [hosts_access(0);],
1053 [
1054 AC_MSG_RESULT(yes)
3466e002 1055 AC_DEFINE(LIBWRAP, 1,
1056 [Define if you want
1057 TCP Wrappers support])
ddceb1c8 1058 AC_SUBST(LIBWRAP)
98a7c37b 1059 TCPW_MSG="yes"
278588d8 1060 ],
1061 [
1062 AC_MSG_ERROR([*** libwrap missing])
1063 ]
1064 )
ddceb1c8 1065 LIBS="$saved_LIBS"
278588d8 1066 fi
1067 ]
1068)
1069
59031773 1070# Check whether user wants libedit support
1071LIBEDIT_MSG="no"
1072AC_ARG_WITH(libedit,
6ff3d0dc 1073 [ --with-libedit[[=PATH]] Enable libedit support for sftp],
59031773 1074 [ if test "x$withval" != "xno" ; then
737edf04 1075 if test "x$withval" != "xyes"; then
bb116c8e 1076 CPPFLAGS="$CPPFLAGS -I${withval}/include"
1077 if test -n "${need_dash_r}"; then
1078 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1079 else
1080 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1081 fi
737edf04 1082 fi
59031773 1083 AC_CHECK_LIB(edit, el_init,
3466e002 1084 [ AC_DEFINE(USE_LIBEDIT, 1, [Use libedit for sftp])
59031773 1085 LIBEDIT="-ledit -lcurses"
1086 LIBEDIT_MSG="yes"
1087 AC_SUBST(LIBEDIT)
1088 ],
737edf04 1089 [ AC_MSG_ERROR(libedit not found) ],
1090 [ -lcurses ]
59031773 1091 )
f47ddccb 1092 AC_MSG_CHECKING(if libedit version is compatible)
d92622f9 1093 AC_COMPILE_IFELSE(
1094 [AC_LANG_SOURCE([[
1095#include <histedit.h>
f47ddccb 1096int main(void)
1097{
1098 int i = H_SETSIZE;
1099 el_init("", NULL, NULL, NULL);
1100 exit(0);
1101}
d92622f9 1102 ]])],
f47ddccb 1103 [ AC_MSG_RESULT(yes) ],
1104 [ AC_MSG_RESULT(no)
1105 AC_MSG_ERROR(libedit version is not compatible) ]
1106 )
59031773 1107 fi ]
1108)
1109
7b578f7d 1110AUDIT_MODULE=none
1111AC_ARG_WITH(audit,
1112 [ --with-audit=module Enable EXPERIMENTAL audit support (modules=debug,bsm)],
1113 [
1114 AC_MSG_CHECKING(for supported audit module)
1115 case "$withval" in
1116 bsm)
1117 AC_MSG_RESULT(bsm)
1118 AUDIT_MODULE=bsm
1119 dnl Checks for headers, libs and functions
1120 AC_CHECK_HEADERS(bsm/audit.h, [],
1121 [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)])
1122 AC_CHECK_LIB(bsm, getaudit, [],
1123 [AC_MSG_ERROR(BSM enabled and required library not found)])
1124 AC_CHECK_FUNCS(getaudit, [],
1125 [AC_MSG_ERROR(BSM enabled and required function not found)])
1126 # These are optional
7939c496 1127 AC_CHECK_FUNCS(getaudit_addr)
3466e002 1128 AC_DEFINE(USE_BSM_AUDIT, 1, [Use BSM audit module])
7b578f7d 1129 ;;
1130 debug)
1131 AUDIT_MODULE=debug
1132 AC_MSG_RESULT(debug)
3466e002 1133 AC_DEFINE(SSH_AUDIT_EVENTS, 1, Use audit debugging module)
7b578f7d 1134 ;;
a2b3321d 1135 no)
d92622f9 1136 AC_MSG_RESULT(no)
a2b3321d 1137 ;;
7b578f7d 1138 *)
1139 AC_MSG_ERROR([Unknown audit module $withval])
1140 ;;
1141 esac ]
1142)
1143
19160674 1144dnl Checks for library functions. Please keep in alphabetical order
b04a9f8c 1145AC_CHECK_FUNCS( \
1146 arc4random \
9a406e1e 1147 asprintf \
b04a9f8c 1148 b64_ntop \
1149 __b64_ntop \
1150 b64_pton \
1151 __b64_pton \
1152 bcopy \
1153 bindresvport_sa \
1154 clock \
1155 closefrom \
1156 dirfd \
b04a9f8c 1157 fchmod \
1158 fchown \
1159 freeaddrinfo \
1160 futimes \
1161 getaddrinfo \
1162 getcwd \
1163 getgrouplist \
1164 getnameinfo \
1165 getopt \
1166 getpeereid \
1167 _getpty \
1168 getrlimit \
1169 getttyent \
1170 glob \
1171 inet_aton \
1172 inet_ntoa \
1173 inet_ntop \
1174 innetgr \
1175 login_getcapbool \
1176 md5_crypt \
1177 memmove \
1178 mkdtemp \
1179 mmap \
1180 ngetaddrinfo \
1181 nsleep \
1182 ogetaddrinfo \
1183 openlog_r \
1184 openpty \
1185 prctl \
1186 pstat \
1187 readpassphrase \
1188 realpath \
1189 recvmsg \
1190 rresvport_af \
1191 sendmsg \
1192 setdtablesize \
1193 setegid \
1194 setenv \
1195 seteuid \
1196 setgroups \
1197 setlogin \
1198 setpcred \
1199 setproctitle \
1200 setregid \
1201 setreuid \
1202 setrlimit \
1203 setsid \
1204 setvbuf \
1205 sigaction \
1206 sigvec \
1207 snprintf \
1208 socketpair \
1209 strdup \
1210 strerror \
1211 strlcat \
1212 strlcpy \
1213 strmode \
1214 strnvis \
1215 strtonum \
1e29a0c8 1216 strtoll \
b04a9f8c 1217 strtoul \
1218 sysconf \
1219 tcgetpgrp \
1220 truncate \
1221 unsetenv \
1222 updwtmpx \
9a406e1e 1223 vasprintf \
b04a9f8c 1224 vhangup \
1225 vsnprintf \
1226 waitpid \
19160674 1227)
98a7c37b 1228
1a086f97 1229# IRIX has a const char return value for gai_strerror()
1230AC_CHECK_FUNCS(gai_strerror,[
1231 AC_DEFINE(HAVE_GAI_STRERROR)
1232 AC_TRY_COMPILE([
1233#include <sys/types.h>
1234#include <sys/socket.h>
1235#include <netdb.h>
1236
1237const char *gai_strerror(int);],[
1238char *str;
1239
1240str = gai_strerror(0);],[
1241 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
1242 [Define if gai_strerror() returns const char *])])])
1243
3466e002 1244AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP, 1,
1245 [Some systems put nanosleep outside of libc]))
92b1decf 1246
309709db 1247dnl Make sure prototypes are defined for these before using them.
309709db 1248AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
0957c2cf 1249AC_CHECK_DECL(strsep,
1250 [AC_CHECK_FUNCS(strsep)],
1251 [],
1252 [
1253#ifdef HAVE_STRING_H
1254# include <string.h>
1255#endif
1256 ])
08412d26 1257
3490699c 1258dnl tcsendbreak might be a macro
1259AC_CHECK_DECL(tcsendbreak,
1260 [AC_DEFINE(HAVE_TCSENDBREAK)],
aff51935 1261 [AC_CHECK_FUNCS(tcsendbreak)],
3490699c 1262 [#include <termios.h>]
1263)
1264
41e0e158 1265AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
1266
3f176010 1267AC_CHECK_FUNCS(setresuid, [
1268 dnl Some platorms have setresuid that isn't implemented, test for this
1269 AC_MSG_CHECKING(if setresuid seems to work)
479cece8 1270 AC_RUN_IFELSE(
1271 [AC_LANG_SOURCE([[
9a3fe0e2 1272#include <stdlib.h>
1273#include <errno.h>
1274int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 1275 ]])],
3f176010 1276 [AC_MSG_RESULT(yes)],
3466e002 1277 [AC_DEFINE(BROKEN_SETRESUID, 1,
1278 [Define if your setresuid() is broken])
1a01a50c 1279 AC_MSG_RESULT(not implemented)],
1280 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 1281 )
1282])
9a3fe0e2 1283
3f176010 1284AC_CHECK_FUNCS(setresgid, [
1285 dnl Some platorms have setresgid that isn't implemented, test for this
1286 AC_MSG_CHECKING(if setresgid seems to work)
479cece8 1287 AC_RUN_IFELSE(
1288 [AC_LANG_SOURCE([[
9a3fe0e2 1289#include <stdlib.h>
1290#include <errno.h>
1291int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 1292 ]])],
3f176010 1293 [AC_MSG_RESULT(yes)],
3466e002 1294 [AC_DEFINE(BROKEN_SETRESGID, 1,
1295 [Define if your setresgid() is broken])
1a01a50c 1296 AC_MSG_RESULT(not implemented)],
1297 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 1298 )
1299])
9a3fe0e2 1300
2e73a022 1301dnl Checks for time functions
1d7b9b20 1302AC_CHECK_FUNCS(gettimeofday time)
2e73a022 1303dnl Checks for utmp functions
b03bd394 1304AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1d7b9b20 1305AC_CHECK_FUNCS(utmpname)
2e73a022 1306dnl Checks for utmpx functions
b03bd394 1307AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1d7b9b20 1308AC_CHECK_FUNCS(setutxent utmpxname)
76cd7316 1309
aff51935 1310AC_CHECK_FUNC(daemon,
3466e002 1311 [AC_DEFINE(HAVE_DAEMON, 1, [Define if your libraries define daemon()])],
1312 [AC_CHECK_LIB(bsd, daemon,
1313 [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
beb43d31 1314)
1315
aff51935 1316AC_CHECK_FUNC(getpagesize,
3466e002 1317 [AC_DEFINE(HAVE_GETPAGESIZE, 1,
1318 [Define if your libraries define getpagesize()])],
1319 [AC_CHECK_LIB(ucb, getpagesize,
1320 [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
aa6bd60a 1321)
1322
2647ae26 1323# Check for broken snprintf
1324if test "x$ac_cv_func_snprintf" = "xyes" ; then
1325 AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1a01a50c 1326 AC_RUN_IFELSE(
479cece8 1327 [AC_LANG_SOURCE([[
2647ae26 1328#include <stdio.h>
aec4cb4f 1329int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
479cece8 1330 ]])],
aff51935 1331 [AC_MSG_RESULT(yes)],
2647ae26 1332 [
1333 AC_MSG_RESULT(no)
3466e002 1334 AC_DEFINE(BROKEN_SNPRINTF, 1,
1335 [Define if your snprintf is busted])
2647ae26 1336 AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1a01a50c 1337 ],
1338 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
2647ae26 1339 )
1340fi
1341
9a406e1e 1342# If we don't have a working asprintf, then we strongly depend on vsnprintf
1343# returning the right thing on overflow: the number of characters it tried to
1344# create (as per SUSv3)
1345if test "x$ac_cv_func_asprintf" != "xyes" && \
1346 test "x$ac_cv_func_vsnprintf" = "xyes" ; then
1347 AC_MSG_CHECKING([whether vsnprintf returns correct values on overflow])
1348 AC_RUN_IFELSE(
1349 [AC_LANG_SOURCE([[
1350#include <sys/types.h>
1351#include <stdio.h>
1352#include <stdarg.h>
1353
1354int x_snprintf(char *str,size_t count,const char *fmt,...)
1355{
1356 size_t ret; va_list ap;
1357 va_start(ap, fmt); ret = vsnprintf(str, count, fmt, ap); va_end(ap);
1358 return ret;
1359}
1360int main(void)
1361{
1362 char x[1];
1363 exit(x_snprintf(x, 1, "%s %d", "hello", 12345) == 11 ? 0 : 1);
1364} ]])],
1365 [AC_MSG_RESULT(yes)],
1366 [
1367 AC_MSG_RESULT(no)
1368 AC_DEFINE(BROKEN_SNPRINTF, 1,
1369 [Define if your snprintf is busted])
1370 AC_MSG_WARN([****** Your vsnprintf() function is broken, complain to your vendor])
1371 ],
1372 [ AC_MSG_WARN([cross compiling: Assuming working vsnprintf()]) ]
1373 )
1374fi
1375
31b0732a 1376# On systems where [v]snprintf is broken, but is declared in stdio,
1377# check that the fmt argument is const char * or just char *.
1378# This is only useful for when BROKEN_SNPRINTF
1379AC_MSG_CHECKING([whether snprintf can declare const char *fmt])
1380AC_COMPILE_IFELSE([AC_LANG_SOURCE([[#include <stdio.h>
1381 int snprintf(char *a, size_t b, const char *c, ...) { return 0; }
1382 int main(void) { snprintf(0, 0, 0); }
1383 ]])],
1384 [AC_MSG_RESULT(yes)
1385 AC_DEFINE(SNPRINTF_CONST, [const],
1386 [Define as const if snprintf() can declare const char *fmt])],
1387 [AC_MSG_RESULT(no)
1388 AC_DEFINE(SNPRINTF_CONST, [/* not const */])])
1389
2f6f9cff 1390# Check for missing getpeereid (or equiv) support
1391NO_PEERCHECK=""
1392if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1393 AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1394 AC_TRY_COMPILE(
1395 [#include <sys/types.h>
1396 #include <sys/socket.h>],
1397 [int i = SO_PEERCRED;],
62eb7db4 1398 [ AC_MSG_RESULT(yes)
3466e002 1399 AC_DEFINE(HAVE_SO_PEERCRED, 1, [Have PEERCRED socket option])
62eb7db4 1400 ],
2f6f9cff 1401 [AC_MSG_RESULT(no)
1402 NO_PEERCHECK=1]
1403 )
1404fi
1405
70e7d0b0 1406dnl see whether mkstemp() requires XXXXXX
1407if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1408AC_MSG_CHECKING([for (overly) strict mkstemp])
b0e7249f 1409AC_RUN_IFELSE(
1410 [AC_LANG_SOURCE([[
70e7d0b0 1411#include <stdlib.h>
1412main() { char template[]="conftest.mkstemp-test";
1413if (mkstemp(template) == -1)
1414 exit(1);
1415unlink(template); exit(0);
1416}
b0e7249f 1417 ]])],
70e7d0b0 1418 [
1419 AC_MSG_RESULT(no)
1420 ],
aff51935 1421 [
70e7d0b0 1422 AC_MSG_RESULT(yes)
3466e002 1423 AC_DEFINE(HAVE_STRICT_MKSTEMP, 1, [Silly mkstemp()])
70e7d0b0 1424 ],
1425 [
1426 AC_MSG_RESULT(yes)
1427 AC_DEFINE(HAVE_STRICT_MKSTEMP)
aff51935 1428 ]
70e7d0b0 1429)
1430fi
1431
eacb954e 1432dnl make sure that openpty does not reacquire controlling terminal
1433if test ! -z "$check_for_openpty_ctty_bug"; then
1434 AC_MSG_CHECKING(if openpty correctly handles controlling tty)
b0e7249f 1435 AC_RUN_IFELSE(
1436 [AC_LANG_SOURCE([[
eacb954e 1437#include <stdio.h>
1438#include <sys/fcntl.h>
1439#include <sys/types.h>
1440#include <sys/wait.h>
1441
1442int
1443main()
1444{
1445 pid_t pid;
1446 int fd, ptyfd, ttyfd, status;
1447
1448 pid = fork();
1449 if (pid < 0) { /* failed */
1450 exit(1);
1451 } else if (pid > 0) { /* parent */
1452 waitpid(pid, &status, 0);
aff51935 1453 if (WIFEXITED(status))
eacb954e 1454 exit(WEXITSTATUS(status));
1455 else
1456 exit(2);
1457 } else { /* child */
1458 close(0); close(1); close(2);
1459 setsid();
1460 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1461 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1462 if (fd >= 0)
1463 exit(3); /* Acquired ctty: broken */
1464 else
1465 exit(0); /* Did not acquire ctty: OK */
1466 }
1467}
b0e7249f 1468 ]])],
eacb954e 1469 [
1470 AC_MSG_RESULT(yes)
1471 ],
1472 [
1473 AC_MSG_RESULT(no)
1474 AC_DEFINE(SSHD_ACQUIRES_CTTY)
b0e7249f 1475 ],
1476 [
1477 AC_MSG_RESULT(cross-compiling, assuming yes)
eacb954e 1478 ]
1479 )
1480fi
1481
4b492aab 1482if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1483 test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
2fe51906 1484 AC_MSG_CHECKING(if getaddrinfo seems to work)
b0e7249f 1485 AC_RUN_IFELSE(
1486 [AC_LANG_SOURCE([[
2fe51906 1487#include <stdio.h>
1488#include <sys/socket.h>
1489#include <netdb.h>
1490#include <errno.h>
1491#include <netinet/in.h>
1492
1493#define TEST_PORT "2222"
1494
1495int
1496main(void)
1497{
1498 int err, sock;
1499 struct addrinfo *gai_ai, *ai, hints;
1500 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1501
1502 memset(&hints, 0, sizeof(hints));
1503 hints.ai_family = PF_UNSPEC;
1504 hints.ai_socktype = SOCK_STREAM;
1505 hints.ai_flags = AI_PASSIVE;
1506
1507 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1508 if (err != 0) {
1509 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1510 exit(1);
1511 }
1512
1513 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1514 if (ai->ai_family != AF_INET6)
1515 continue;
1516
1517 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1518 sizeof(ntop), strport, sizeof(strport),
1519 NI_NUMERICHOST|NI_NUMERICSERV);
1520
1521 if (err != 0) {
1522 if (err == EAI_SYSTEM)
1523 perror("getnameinfo EAI_SYSTEM");
1524 else
1525 fprintf(stderr, "getnameinfo failed: %s\n",
1526 gai_strerror(err));
1527 exit(2);
1528 }
1529
1530 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1531 if (sock < 0)
1532 perror("socket");
1533 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1534 if (errno == EBADF)
1535 exit(3);
1536 }
1537 }
1538 exit(0);
1539}
b0e7249f 1540 ]])],
2fe51906 1541 [
1542 AC_MSG_RESULT(yes)
1543 ],
1544 [
1545 AC_MSG_RESULT(no)
1546 AC_DEFINE(BROKEN_GETADDRINFO)
b0e7249f 1547 ],
1548 [
1549 AC_MSG_RESULT(cross-compiling, assuming yes)
2fe51906 1550 ]
1551 )
1552fi
1553
4b492aab 1554if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1555 test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
5ccf88cb 1556 AC_MSG_CHECKING(if getaddrinfo seems to work)
b0e7249f 1557 AC_RUN_IFELSE(
1558 [AC_LANG_SOURCE([[
5ccf88cb 1559#include <stdio.h>
1560#include <sys/socket.h>
1561#include <netdb.h>
1562#include <errno.h>
1563#include <netinet/in.h>
1564
1565#define TEST_PORT "2222"
1566
1567int
1568main(void)
1569{
1570 int err, sock;
1571 struct addrinfo *gai_ai, *ai, hints;
1572 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1573
1574 memset(&hints, 0, sizeof(hints));
1575 hints.ai_family = PF_UNSPEC;
1576 hints.ai_socktype = SOCK_STREAM;
1577 hints.ai_flags = AI_PASSIVE;
1578
1579 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1580 if (err != 0) {
1581 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1582 exit(1);
1583 }
1584
1585 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1586 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1587 continue;
1588
1589 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1590 sizeof(ntop), strport, sizeof(strport),
1591 NI_NUMERICHOST|NI_NUMERICSERV);
1592
1593 if (ai->ai_family == AF_INET && err != 0) {
1594 perror("getnameinfo");
1595 exit(2);
1596 }
1597 }
1598 exit(0);
1599}
b0e7249f 1600 ]])],
5ccf88cb 1601 [
1602 AC_MSG_RESULT(yes)
3466e002 1603 AC_DEFINE(AIX_GETNAMEINFO_HACK, 1,
1604 [Define if you have a getaddrinfo that fails
1605 for the all-zeros IPv6 address])
5ccf88cb 1606 ],
1607 [
1608 AC_MSG_RESULT(no)
1609 AC_DEFINE(BROKEN_GETADDRINFO)
b0e7249f 1610 ],
1611 AC_MSG_RESULT(cross-compiling, assuming no)
5ccf88cb 1612 ]
1613 )
1614fi
1615
b29fd59f 1616if test "x$check_for_conflicting_getspnam" = "x1"; then
1617 AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1618 AC_COMPILE_IFELSE(
1619 [
1620#include <shadow.h>
1621int main(void) {exit(0);}
1622 ],
1623 [
1624 AC_MSG_RESULT(no)
1625 ],
1626 [
1627 AC_MSG_RESULT(yes)
1628 AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1629 [Conflicting defs for getspnam])
1630 ]
1631 )
1632fi
1633
7f8f5e00 1634AC_FUNC_GETPGRP
1635
717057b6 1636# Check for PAM libs
cbd7492e 1637PAM_MSG="no"
a0391976 1638AC_ARG_WITH(pam,
717057b6 1639 [ --with-pam Enable PAM support ],
a0391976 1640 [
717057b6 1641 if test "x$withval" != "xno" ; then
2511d104 1642 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
1643 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
717057b6 1644 AC_MSG_ERROR([PAM headers not found])
1645 fi
a0391976 1646
717057b6 1647 AC_CHECK_LIB(dl, dlopen, , )
1648 AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
1649 AC_CHECK_FUNCS(pam_getenvlist)
749560dd 1650 AC_CHECK_FUNCS(pam_putenv)
2b763e31 1651
717057b6 1652 PAM_MSG="yes"
4cb5ffa0 1653
3466e002 1654 AC_DEFINE(USE_PAM, 1,
1655 [Define if you want to enable PAM support])
98f2d9d5 1656 if test $ac_cv_lib_dl_dlopen = yes; then
1657 LIBPAM="-lpam -ldl"
1658 else
1659 LIBPAM="-lpam"
1660 fi
1661 AC_SUBST(LIBPAM)
717057b6 1662 fi
1663 ]
1664)
cbd7492e 1665
717057b6 1666# Check for older PAM
1667if test "x$PAM_MSG" = "xyes" ; then
a0391976 1668 # Check PAM strerror arguments (old PAM)
1669 AC_MSG_CHECKING([whether pam_strerror takes only one argument])
1670 AC_TRY_COMPILE(
1671 [
18ba2aab 1672#include <stdlib.h>
2511d104 1673#if defined(HAVE_SECURITY_PAM_APPL_H)
18ba2aab 1674#include <security/pam_appl.h>
2511d104 1675#elif defined (HAVE_PAM_PAM_APPL_H)
1676#include <pam/pam_appl.h>
1677#endif
aff51935 1678 ],
1679 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
a0391976 1680 [AC_MSG_RESULT(no)],
1681 [
3466e002 1682 AC_DEFINE(HAVE_OLD_PAM, 1,
1683 [Define if you have an old version of PAM
1684 which takes only one argument to pam_strerror])
a0391976 1685 AC_MSG_RESULT(yes)
cbd7492e 1686 PAM_MSG="yes (old library)"
a0391976 1687 ]
717057b6 1688 )
a0391976 1689fi
1690
5b991353 1691# Search for OpenSSL
1692saved_CPPFLAGS="$CPPFLAGS"
1693saved_LDFLAGS="$LDFLAGS"
a0391976 1694AC_ARG_WITH(ssl-dir,
1695 [ --with-ssl-dir=PATH Specify path to OpenSSL installation ],
1696 [
e9e4a1c7 1697 if test "x$withval" != "xno" ; then
99eb0f64 1698 case "$withval" in
1699 # Relative paths
1700 ./*|../*) withval="`pwd`/$withval"
1701 esac
5b991353 1702 if test -d "$withval/lib"; then
1703 if test -n "${need_dash_r}"; then
1704 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1705 else
1706 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
d6f13fbb 1707 fi
1708 else
5b991353 1709 if test -n "${need_dash_r}"; then
1710 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1711 else
1712 LDFLAGS="-L${withval} ${LDFLAGS}"
d6f13fbb 1713 fi
1714 fi
5b991353 1715 if test -d "$withval/include"; then
1716 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
d6f13fbb 1717 else
5b991353 1718 CPPFLAGS="-I${withval} ${CPPFLAGS}"
58d100bf 1719 fi
a0391976 1720 fi
5b991353 1721 ]
1722)
5486a457 1723LIBS="-lcrypto $LIBS"
3466e002 1724AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL, 1,
1725 [Define if your ssl headers are included
1726 with #include <openssl/header.h>]),
d45e3d76 1727 [
5b991353 1728 dnl Check default openssl install dir
1729 if test -n "${need_dash_r}"; then
1730 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1731 else
5b991353 1732 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1733 fi
5b991353 1734 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1735 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1736 [
1737 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1738 ]
1739 )
1740 ]
1741)
1742
cd018561 1743# Determine OpenSSL header version
1744AC_MSG_CHECKING([OpenSSL header version])
1a01a50c 1745AC_RUN_IFELSE(
479cece8 1746 [AC_LANG_SOURCE([[
cd018561 1747#include <stdio.h>
1748#include <string.h>
1749#include <openssl/opensslv.h>
1750#define DATA "conftest.sslincver"
1751int main(void) {
aff51935 1752 FILE *fd;
1753 int rc;
cd018561 1754
aff51935 1755 fd = fopen(DATA,"w");
1756 if(fd == NULL)
1757 exit(1);
cd018561 1758
1759 if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1760 exit(1);
1761
1762 exit(0);
1763}
479cece8 1764 ]])],
cd018561 1765 [
1766 ssl_header_ver=`cat conftest.sslincver`
1767 AC_MSG_RESULT($ssl_header_ver)
1768 ],
1769 [
1770 AC_MSG_RESULT(not found)
1771 AC_MSG_ERROR(OpenSSL version header not found.)
1a01a50c 1772 ],
1773 [
1774 AC_MSG_WARN([cross compiling: not checking])
cd018561 1775 ]
1776)
1777
1778# Determine OpenSSL library version
1779AC_MSG_CHECKING([OpenSSL library version])
1a01a50c 1780AC_RUN_IFELSE(
479cece8 1781 [AC_LANG_SOURCE([[
cd018561 1782#include <stdio.h>
1783#include <string.h>
1784#include <openssl/opensslv.h>
1785#include <openssl/crypto.h>
1786#define DATA "conftest.ssllibver"
1787int main(void) {
aff51935 1788 FILE *fd;
1789 int rc;
cd018561 1790
aff51935 1791 fd = fopen(DATA,"w");
1792 if(fd == NULL)
1793 exit(1);
cd018561 1794
1795 if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1796 exit(1);
1797
1798 exit(0);
1799}
479cece8 1800 ]])],
cd018561 1801 [
1802 ssl_library_ver=`cat conftest.ssllibver`
1803 AC_MSG_RESULT($ssl_library_ver)
1804 ],
1805 [
1806 AC_MSG_RESULT(not found)
1807 AC_MSG_ERROR(OpenSSL library not found.)
1a01a50c 1808 ],
1809 [
1810 AC_MSG_WARN([cross compiling: not checking])
cd018561 1811 ]
1812)
58d100bf 1813
9780116c 1814# Sanity check OpenSSL headers
1815AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1a01a50c 1816AC_RUN_IFELSE(
479cece8 1817 [AC_LANG_SOURCE([[
9780116c 1818#include <string.h>
1819#include <openssl/opensslv.h>
aec4cb4f 1820int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
479cece8 1821 ]])],
9780116c 1822 [
1823 AC_MSG_RESULT(yes)
1824 ],
1825 [
1826 AC_MSG_RESULT(no)
e15ba28b 1827 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1828Check config.log for details.
1829Also see contrib/findssl.sh for help identifying header/library mismatches.])
1a01a50c 1830 ],
1831 [
1832 AC_MSG_WARN([cross compiling: not checking])
9780116c 1833 ]
1834)
1835
c7ad0d99 1836AC_ARG_WITH(ssl-engine,
1837 [ --with-ssl-engine Enable OpenSSL (hardware) ENGINE support ],
1838 [ if test "x$withval" != "xno" ; then
1839 AC_MSG_CHECKING(for OpenSSL ENGINE support)
1840 AC_TRY_COMPILE(
1841 [ #include <openssl/engine.h>],
1842 [
1843int main(void){ENGINE_load_builtin_engines();ENGINE_register_all_complete();}
1844 ],
1845 [ AC_MSG_RESULT(yes)
1846 AC_DEFINE(USE_OPENSSL_ENGINE, 1,
1847 [Enable OpenSSL engine support])
1848 ],
1849 [ AC_MSG_ERROR(OpenSSL ENGINE support not found)]
1850 )
1851 fi ]
1852)
1853
e5146707 1854# Check for OpenSSL without EVP_aes_{192,256}_cbc
1855AC_MSG_CHECKING([whether OpenSSL has crippled AES support])
1856AC_COMPILE_IFELSE(
1857 [AC_LANG_SOURCE([[
1858#include <string.h>
1859#include <openssl/evp.h>
300ea548 1860int main(void) { exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);}
e5146707 1861 ]])],
1862 [
1863 AC_MSG_RESULT(no)
1864 ],
1865 [
1866 AC_MSG_RESULT(yes)
1867 AC_DEFINE(OPENSSL_LOBOTOMISED_AES, 1,
1868 [libcrypto is missing AES 192 and 256 bit functions])
1869 ]
1870)
1871
5486a457 1872# Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1873# because the system crypt() is more featureful.
1874if test "x$check_for_libcrypt_before" = "x1"; then
1875 AC_CHECK_LIB(crypt, crypt)
1876fi
1877
aff51935 1878# Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
8087c5ee 1879# version in OpenSSL.
05114c74 1880if test "x$check_for_libcrypt_later" = "x1"; then
20cad736 1881 AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
717057b6 1882fi
1883
13ff27b7 1884# Search for SHA256 support in libc and/or OpenSSL
1885AC_CHECK_FUNCS(SHA256_Update EVP_sha256)
1886
4c653d8e 1887AC_CHECK_LIB(iaf, ia_openinfo)
f1b0ecc3 1888
1889### Configure cryptographic random number support
1890
1891# Check wheter OpenSSL seeds itself
1892AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1a01a50c 1893AC_RUN_IFELSE(
479cece8 1894 [AC_LANG_SOURCE([[
f1b0ecc3 1895#include <string.h>
1896#include <openssl/rand.h>
aec4cb4f 1897int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
479cece8 1898 ]])],
f1b0ecc3 1899 [
1900 OPENSSL_SEEDS_ITSELF=yes
1901 AC_MSG_RESULT(yes)
1902 ],
1903 [
1904 AC_MSG_RESULT(no)
1905 # Default to use of the rand helper if OpenSSL doesn't
1906 # seed itself
1907 USE_RAND_HELPER=yes
1a01a50c 1908 ],
1909 [
1910 AC_MSG_WARN([cross compiling: assuming yes])
1911 # This is safe, since all recent OpenSSL versions will
82f4e93d 1912 # complain at runtime if not seeded correctly.
1a01a50c 1913 OPENSSL_SEEDS_ITSELF=yes
f1b0ecc3 1914 ]
1915)
1916
1917
1918# Do we want to force the use of the rand helper?
1919AC_ARG_WITH(rand-helper,
1920 [ --with-rand-helper Use subprocess to gather strong randomness ],
1921 [
1922 if test "x$withval" = "xno" ; then
aff51935 1923 # Force use of OpenSSL's internal RNG, even if
f1b0ecc3 1924 # the previous test showed it to be unseeded.
1925 if test -z "$OPENSSL_SEEDS_ITSELF" ; then
1926 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
1927 OPENSSL_SEEDS_ITSELF=yes
1928 USE_RAND_HELPER=""
1929 fi
1930 else
1931 USE_RAND_HELPER=yes
1932 fi
1933 ],
82f4e93d 1934)
f1b0ecc3 1935
1936# Which randomness source do we use?
4b492aab 1937if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
f1b0ecc3 1938 # OpenSSL only
3466e002 1939 AC_DEFINE(OPENSSL_PRNG_ONLY, 1,
1940 [Define if you want OpenSSL's internally seeded PRNG only])
f1b0ecc3 1941 RAND_MSG="OpenSSL internal ONLY"
1942 INSTALL_SSH_RAND_HELPER=""
70e2f2f3 1943elif test ! -z "$USE_RAND_HELPER" ; then
1944 # install rand helper
f1b0ecc3 1945 RAND_MSG="ssh-rand-helper"
1946 INSTALL_SSH_RAND_HELPER="yes"
1947fi
1948AC_SUBST(INSTALL_SSH_RAND_HELPER)
1949
1950### Configuration of ssh-rand-helper
1951
1952# PRNGD TCP socket
1953AC_ARG_WITH(prngd-port,
1954 [ --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT],
1955 [
eb5d7ff6 1956 case "$withval" in
1957 no)
1958 withval=""
1959 ;;
1960 [[0-9]]*)
1961 ;;
1962 *)
1963 AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
1964 ;;
1965 esac
1966 if test ! -z "$withval" ; then
f1b0ecc3 1967 PRNGD_PORT="$withval"
3466e002 1968 AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT,
1969 [Port number of PRNGD/EGD random number socket])
f1b0ecc3 1970 fi
1971 ]
1972)
1973
1974# PRNGD Unix domain socket
1975AC_ARG_WITH(prngd-socket,
1976 [ --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
1977 [
eb5d7ff6 1978 case "$withval" in
1979 yes)
f1b0ecc3 1980 withval="/var/run/egd-pool"
eb5d7ff6 1981 ;;
1982 no)
1983 withval=""
1984 ;;
1985 /*)
1986 ;;
1987 *)
1988 AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
1989 ;;
1990 esac
1991
1992 if test ! -z "$withval" ; then
f1b0ecc3 1993 if test ! -z "$PRNGD_PORT" ; then
1994 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
1995 fi
906e811b 1996 if test ! -r "$withval" ; then
f1b0ecc3 1997 AC_MSG_WARN(Entropy socket is not readable)
1998 fi
1999 PRNGD_SOCKET="$withval"
3466e002 2000 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET",
2001 [Location of PRNGD/EGD random number socket])
f1b0ecc3 2002 fi
ddceb1c8 2003 ],
2004 [
2005 # Check for existing socket only if we don't have a random device already
2006 if test "$USE_RAND_HELPER" = yes ; then
2007 AC_MSG_CHECKING(for PRNGD/EGD socket)
2008 # Insert other locations here
2009 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
2010 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
2011 PRNGD_SOCKET="$sock"
2012 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
2013 break;
2014 fi
2015 done
2016 if test ! -z "$PRNGD_SOCKET" ; then
2017 AC_MSG_RESULT($PRNGD_SOCKET)
2018 else
2019 AC_MSG_RESULT(not found)
2020 fi
2021 fi
f1b0ecc3 2022 ]
2023)
2024
2025# Change default command timeout for hashing entropy source
2026entropy_timeout=200
2027AC_ARG_WITH(entropy-timeout,
2028 [ --with-entropy-timeout Specify entropy gathering command timeout (msec)],
2029 [
6cf0200f 2030 if test -n "$withval" && test "x$withval" != "xno" && \
2031 test "x${withval}" != "xyes"; then
f1b0ecc3 2032 entropy_timeout=$withval
2033 fi
82f4e93d 2034 ]
f1b0ecc3 2035)
3466e002 2036AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout,
2037 [Builtin PRNG command timeout])
f1b0ecc3 2038
fd3cbf67 2039SSH_PRIVSEP_USER=sshd
9a0fbcb3 2040AC_ARG_WITH(privsep-user,
5222e7ef 2041 [ --with-privsep-user=user Specify non-privileged user for privilege separation],
9a0fbcb3 2042 [
6cf0200f 2043 if test -n "$withval" && test "x$withval" != "xno" && \
2044 test "x${withval}" != "xyes"; then
fd3cbf67 2045 SSH_PRIVSEP_USER=$withval
9a0fbcb3 2046 fi
82f4e93d 2047 ]
9a0fbcb3 2048)
3466e002 2049AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER",
2050 [non-privileged user for privilege separation])
fd3cbf67 2051AC_SUBST(SSH_PRIVSEP_USER)
9a0fbcb3 2052
81dadca3 2053# We do this little dance with the search path to insure
2054# that programs that we select for use by installed programs
2055# (which may be run by the super-user) come from trusted
2056# locations before they come from the user's private area.
2057# This should help avoid accidentally configuring some
2058# random version of a program in someone's personal bin.
2059
2060OPATH=$PATH
2061PATH=/bin:/usr/bin
f95c8ce8 2062test -h /bin 2> /dev/null && PATH=/usr/bin
81dadca3 2063test -d /sbin && PATH=$PATH:/sbin
2064test -d /usr/sbin && PATH=$PATH:/usr/sbin
2065PATH=$PATH:/etc:$OPATH
2066
aff51935 2067# These programs are used by the command hashing source to gather entropy
f1b0ecc3 2068OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
2069OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
2070OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
2071OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
2072OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
2073OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
2074OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
2075OSSH_PATH_ENTROPY_PROG(PROG_W, w)
2076OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
2077OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
2078OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
2079OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
2080OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
2081OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
2082OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
2083OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
81dadca3 2084# restore PATH
2085PATH=$OPATH
f1b0ecc3 2086
2087# Where does ssh-rand-helper get its randomness from?
2088INSTALL_SSH_PRNG_CMDS=""
2089if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
2090 if test ! -z "$PRNGD_PORT" ; then
2091 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
2092 elif test ! -z "$PRNGD_SOCKET" ; then
2093 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
2094 else
2095 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
2096 RAND_HELPER_CMDHASH=yes
2097 INSTALL_SSH_PRNG_CMDS="yes"
2098 fi
2099fi
2100AC_SUBST(INSTALL_SSH_PRNG_CMDS)
2101
2102
66d6c27e 2103# Cheap hack to ensure NEWS-OS libraries are arranged right.
2104if test ! -z "$SONY" ; then
2105 LIBS="$LIBS -liberty";
2106fi
2107
9a406e1e 2108# Check for long long datatypes
2109AC_CHECK_TYPES([long long, unsigned long long, long double])
2110
2111# Check datatype sizes
976f7e19 2112AC_CHECK_SIZEOF(char, 1)
2b942fe0 2113AC_CHECK_SIZEOF(short int, 2)
2114AC_CHECK_SIZEOF(int, 4)
2115AC_CHECK_SIZEOF(long int, 4)
2116AC_CHECK_SIZEOF(long long int, 8)
2117
52f1ccb2 2118# Sanity check long long for some platforms (AIX)
2119if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
2120 ac_cv_sizeof_long_long_int=0
2121fi
2122
90f15776 2123# compute LLONG_MIN and LLONG_MAX if we don't know them.
2124if test -z "$have_llong_max"; then
2125 AC_MSG_CHECKING([for max value of long long])
2126 AC_RUN_IFELSE(
2127 [AC_LANG_SOURCE([[
2128#include <stdio.h>
2129/* Why is this so damn hard? */
2130#ifdef __GNUC__
2131# undef __GNUC__
2132#endif
2133#define __USE_ISOC99
2134#include <limits.h>
2135#define DATA "conftest.llminmax"
055252ed 2136#define my_abs(a) ((a) < 0 ? ((a) * -1) : (a))
2137
2138/*
2139 * printf in libc on some platforms (eg old Tru64) does not understand %lld so
2140 * we do this the hard way.
2141 */
2142static int
2143fprint_ll(FILE *f, long long n)
2144{
2145 unsigned int i;
2146 int l[sizeof(long long) * 8];
2147
2148 if (n < 0)
2149 if (fprintf(f, "-") < 0)
2150 return -1;
2151 for (i = 0; n != 0; i++) {
2152 l[i] = my_abs(n % 10);
2153 n /= 10;
2154 }
2155 do {
2156 if (fprintf(f, "%d", l[--i]) < 0)
2157 return -1;
2158 } while (i != 0);
2159 if (fprintf(f, " ") < 0)
2160 return -1;
2161 return 0;
2162}
2163
90f15776 2164int main(void) {
2165 FILE *f;
2166 long long i, llmin, llmax = 0;
2167
2168 if((f = fopen(DATA,"w")) == NULL)
2169 exit(1);
2170
2171#if defined(LLONG_MIN) && defined(LLONG_MAX)
2172 fprintf(stderr, "Using system header for LLONG_MIN and LLONG_MAX\n");
2173 llmin = LLONG_MIN;
2174 llmax = LLONG_MAX;
2175#else
2176 fprintf(stderr, "Calculating LLONG_MIN and LLONG_MAX\n");
2177 /* This will work on one's complement and two's complement */
2178 for (i = 1; i > llmax; i <<= 1, i++)
2179 llmax = i;
2180 llmin = llmax + 1LL; /* wrap */
2181#endif
2182
2183 /* Sanity check */
2184 if (llmin + 1 < llmin || llmin - 1 < llmin || llmax + 1 > llmax
055252ed 2185 || llmax - 1 > llmax || llmin == llmax || llmin == 0
2186 || llmax == 0 || llmax < LONG_MAX || llmin > LONG_MIN) {
90f15776 2187 fprintf(f, "unknown unknown\n");
2188 exit(2);
2189 }
2190
055252ed 2191 if (fprint_ll(f, llmin) < 0)
90f15776 2192 exit(3);
055252ed 2193 if (fprint_ll(f, llmax) < 0)
2194 exit(4);
2195 if (fclose(f) < 0)
2196 exit(5);
90f15776 2197 exit(0);
2198}
2199 ]])],
2200 [
2201 llong_min=`$AWK '{print $1}' conftest.llminmax`
2202 llong_max=`$AWK '{print $2}' conftest.llminmax`
2203
90f15776 2204 AC_MSG_RESULT($llong_max)
2205 AC_DEFINE_UNQUOTED(LLONG_MAX, [${llong_max}LL],
2206 [max value of long long calculated by configure])
2207 AC_MSG_CHECKING([for min value of long long])
2208 AC_MSG_RESULT($llong_min)
2209 AC_DEFINE_UNQUOTED(LLONG_MIN, [${llong_min}LL],
2210 [min value of long long calculated by configure])
2211 ],
2212 [
2213 AC_MSG_RESULT(not found)
2214 ],
2215 [
2216 AC_MSG_WARN([cross compiling: not checking])
2217 ]
2218 )
2219fi
2220
2221
a0391976 2222# More checks for data types
14a9a859 2223AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
2224 AC_TRY_COMPILE(
aff51935 2225 [ #include <sys/types.h> ],
2226 [ u_int a; a = 1;],
14a9a859 2227 [ ac_cv_have_u_int="yes" ],
2228 [ ac_cv_have_u_int="no" ]
2229 )
2230])
2231if test "x$ac_cv_have_u_int" = "xyes" ; then
3466e002 2232 AC_DEFINE(HAVE_U_INT, 1, [define if you have u_int data type])
14a9a859 2233 have_u_int=1
2234fi
2235
58d100bf 2236AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
2237 AC_TRY_COMPILE(
aff51935 2238 [ #include <sys/types.h> ],
2239 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
58d100bf 2240 [ ac_cv_have_intxx_t="yes" ],
2241 [ ac_cv_have_intxx_t="no" ]
2242 )
2243])
2244if test "x$ac_cv_have_intxx_t" = "xyes" ; then
3466e002 2245 AC_DEFINE(HAVE_INTXX_T, 1, [define if you have intxx_t data type])
58d100bf 2246 have_intxx_t=1
2247fi
41cb4569 2248
2249if (test -z "$have_intxx_t" && \
aff51935 2250 test "x$ac_cv_header_stdint_h" = "xyes")
41cb4569 2251then
2252 AC_MSG_CHECKING([for intXX_t types in stdint.h])
2253 AC_TRY_COMPILE(
aff51935 2254 [ #include <stdint.h> ],
2255 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
41cb4569 2256 [
2257 AC_DEFINE(HAVE_INTXX_T)
2258 AC_MSG_RESULT(yes)
2259 ],
2260 [ AC_MSG_RESULT(no) ]
2261 )
2262fi
2263
bd590612 2264AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
2265 AC_TRY_COMPILE(
1cbbe6c8 2266 [
2267#include <sys/types.h>
2268#ifdef HAVE_STDINT_H
2269# include <stdint.h>
2270#endif
2271#include <sys/socket.h>
2272#ifdef HAVE_SYS_BITYPES_H
2273# include <sys/bitypes.h>
2274#endif
aff51935 2275 ],
2276 [ int64_t a; a = 1;],
bd590612 2277 [ ac_cv_have_int64_t="yes" ],
2278 [ ac_cv_have_int64_t="no" ]
2279 )
2280])
2281if test "x$ac_cv_have_int64_t" = "xyes" ; then
3466e002 2282 AC_DEFINE(HAVE_INT64_T, 1, [define if you have int64_t data type])
ddceb1c8 2283fi
2284
58d100bf 2285AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
2286 AC_TRY_COMPILE(
aff51935 2287 [ #include <sys/types.h> ],
2288 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
58d100bf 2289 [ ac_cv_have_u_intxx_t="yes" ],
2290 [ ac_cv_have_u_intxx_t="no" ]
2291 )
2292])
2293if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
3466e002 2294 AC_DEFINE(HAVE_U_INTXX_T, 1, [define if you have u_intxx_t data type])
58d100bf 2295 have_u_intxx_t=1
2296fi
2b942fe0 2297
41cb4569 2298if test -z "$have_u_intxx_t" ; then
2299 AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
2300 AC_TRY_COMPILE(
aff51935 2301 [ #include <sys/socket.h> ],
2302 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
41cb4569 2303 [
2304 AC_DEFINE(HAVE_U_INTXX_T)
2305 AC_MSG_RESULT(yes)
2306 ],
2307 [ AC_MSG_RESULT(no) ]
2308 )
2309fi
2310
bd590612 2311AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
2312 AC_TRY_COMPILE(
aff51935 2313 [ #include <sys/types.h> ],
2314 [ u_int64_t a; a = 1;],
bd590612 2315 [ ac_cv_have_u_int64_t="yes" ],
2316 [ ac_cv_have_u_int64_t="no" ]
2317 )
2318])
2319if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
3466e002 2320 AC_DEFINE(HAVE_U_INT64_T, 1, [define if you have u_int64_t data type])
bd590612 2321 have_u_int64_t=1
2322fi
2323
ddceb1c8 2324if test -z "$have_u_int64_t" ; then
2325 AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
2326 AC_TRY_COMPILE(
aff51935 2327 [ #include <sys/bitypes.h> ],
ddceb1c8 2328 [ u_int64_t a; a = 1],
2329 [
2330 AC_DEFINE(HAVE_U_INT64_T)
2331 AC_MSG_RESULT(yes)
2332 ],
2333 [ AC_MSG_RESULT(no) ]
2334 )
2335fi
2336
41cb4569 2337if test -z "$have_u_intxx_t" ; then
2338 AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
2339 AC_TRY_COMPILE(
2340 [
2341#include <sys/types.h>
aff51935 2342 ],
2343 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
41cb4569 2344 [ ac_cv_have_uintxx_t="yes" ],
2345 [ ac_cv_have_uintxx_t="no" ]
2346 )
2347 ])
2348 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
3466e002 2349 AC_DEFINE(HAVE_UINTXX_T, 1,
2350 [define if you have uintxx_t data type])
41cb4569 2351 fi
2352fi
2353
2354if test -z "$have_uintxx_t" ; then
2355 AC_MSG_CHECKING([for uintXX_t types in stdint.h])
2356 AC_TRY_COMPILE(
aff51935 2357 [ #include <stdint.h> ],
2358 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
41cb4569 2359 [
2360 AC_DEFINE(HAVE_UINTXX_T)
2361 AC_MSG_RESULT(yes)
2362 ],
2363 [ AC_MSG_RESULT(no) ]
2364 )
2365fi
2366
e5fe9a1f 2367if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
aff51935 2368 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
5cdfe03f 2369then
2370 AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
2371 AC_TRY_COMPILE(
58d100bf 2372 [
2373#include <sys/bitypes.h>
aff51935 2374 ],
5cdfe03f 2375 [
837c30b8 2376 int8_t a; int16_t b; int32_t c;
2377 u_int8_t e; u_int16_t f; u_int32_t g;
2378 a = b = c = e = f = g = 1;
aff51935 2379 ],
5cdfe03f 2380 [
2381 AC_DEFINE(HAVE_U_INTXX_T)
2382 AC_DEFINE(HAVE_INTXX_T)
2383 AC_MSG_RESULT(yes)
2384 ],
2385 [AC_MSG_RESULT(no)]
aff51935 2386 )
5cdfe03f 2387fi
2388
0362750e 2389
2390AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
2391 AC_TRY_COMPILE(
2392 [
2393#include <sys/types.h>
2394 ],
2395 [ u_char foo; foo = 125; ],
2396 [ ac_cv_have_u_char="yes" ],
2397 [ ac_cv_have_u_char="no" ]
2398 )
2399])
2400if test "x$ac_cv_have_u_char" = "xyes" ; then
3466e002 2401 AC_DEFINE(HAVE_U_CHAR, 1, [define if you have u_char data type])
0362750e 2402fi
2403
98a7c37b 2404TYPE_SOCKLEN_T
2b942fe0 2405
2d16d9a3 2406AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
ddceb1c8 2407
777ece68 2408AC_CHECK_TYPES(in_addr_t,,,
2409[#include <sys/types.h>
2410#include <netinet/in.h>])
7b578f7d 2411
58d100bf 2412AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
2413 AC_TRY_COMPILE(
2414 [
18ba2aab 2415#include <sys/types.h>
58d100bf 2416 ],
2417 [ size_t foo; foo = 1235; ],
2418 [ ac_cv_have_size_t="yes" ],
2419 [ ac_cv_have_size_t="no" ]
2420 )
2421])
2422if test "x$ac_cv_have_size_t" = "xyes" ; then
3466e002 2423 AC_DEFINE(HAVE_SIZE_T, 1, [define if you have size_t data type])
58d100bf 2424fi
ea1970a3 2425
c04f75f1 2426AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
2427 AC_TRY_COMPILE(
2428 [
2429#include <sys/types.h>
2430 ],
2431 [ ssize_t foo; foo = 1235; ],
2432 [ ac_cv_have_ssize_t="yes" ],
2433 [ ac_cv_have_ssize_t="no" ]
2434 )
2435])
2436if test "x$ac_cv_have_ssize_t" = "xyes" ; then
3466e002 2437 AC_DEFINE(HAVE_SSIZE_T, 1, [define if you have ssize_t data type])
c04f75f1 2438fi
2439
f1c4659d 2440AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
2441 AC_TRY_COMPILE(
2442 [
2443#include <time.h>
2444 ],
2445 [ clock_t foo; foo = 1235; ],
2446 [ ac_cv_have_clock_t="yes" ],
2447 [ ac_cv_have_clock_t="no" ]
2448 )
2449])
2450if test "x$ac_cv_have_clock_t" = "xyes" ; then
3466e002 2451 AC_DEFINE(HAVE_CLOCK_T, 1, [define if you have clock_t data type])
f1c4659d 2452fi
2453
1c04b088 2454AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
2455 AC_TRY_COMPILE(
2456 [
2457#include <sys/types.h>
2458#include <sys/socket.h>
2459 ],
2460 [ sa_family_t foo; foo = 1235; ],
2461 [ ac_cv_have_sa_family_t="yes" ],
77bb0bca 2462 [ AC_TRY_COMPILE(
2463 [
2464#include <sys/types.h>
2465#include <sys/socket.h>
2466#include <netinet/in.h>
2467 ],
2468 [ sa_family_t foo; foo = 1235; ],
2469 [ ac_cv_have_sa_family_t="yes" ],
2470
1c04b088 2471 [ ac_cv_have_sa_family_t="no" ]
77bb0bca 2472 )]
1c04b088 2473 )
2474])
2475if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
3466e002 2476 AC_DEFINE(HAVE_SA_FAMILY_T, 1,
2477 [define if you have sa_family_t data type])
1c04b088 2478fi
2479
729bfe59 2480AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
2481 AC_TRY_COMPILE(
2482 [
2483#include <sys/types.h>
2484 ],
2485 [ pid_t foo; foo = 1235; ],
2486 [ ac_cv_have_pid_t="yes" ],
2487 [ ac_cv_have_pid_t="no" ]
2488 )
2489])
2490if test "x$ac_cv_have_pid_t" = "xyes" ; then
3466e002 2491 AC_DEFINE(HAVE_PID_T, 1, [define if you have pid_t data type])
729bfe59 2492fi
2493
2494AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
2495 AC_TRY_COMPILE(
2496 [
2497#include <sys/types.h>
2498 ],
2499 [ mode_t foo; foo = 1235; ],
2500 [ ac_cv_have_mode_t="yes" ],
2501 [ ac_cv_have_mode_t="no" ]
2502 )
2503])
2504if test "x$ac_cv_have_mode_t" = "xyes" ; then
3466e002 2505 AC_DEFINE(HAVE_MODE_T, 1, [define if you have mode_t data type])
729bfe59 2506fi
2507
e3a93db0 2508
58d100bf 2509AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
2510 AC_TRY_COMPILE(
2511 [
18ba2aab 2512#include <sys/types.h>
2513#include <sys/socket.h>
58d100bf 2514 ],
2515 [ struct sockaddr_storage s; ],
2516 [ ac_cv_have_struct_sockaddr_storage="yes" ],
2517 [ ac_cv_have_struct_sockaddr_storage="no" ]
2518 )
2519])
2520if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
3466e002 2521 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE, 1,
2522 [define if you have struct sockaddr_storage data type])
58d100bf 2523fi
48e671d5 2524
58d100bf 2525AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2526 AC_TRY_COMPILE(
2527 [
cbd7492e 2528#include <sys/types.h>
58d100bf 2529#include <netinet/in.h>
2530 ],
2531 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2532 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2533 [ ac_cv_have_struct_sockaddr_in6="no" ]
2534 )
2535])
2536if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
3466e002 2537 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6, 1,
2538 [define if you have struct sockaddr_in6 data type])
58d100bf 2539fi
48e671d5 2540
58d100bf 2541AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2542 AC_TRY_COMPILE(
2543 [
cbd7492e 2544#include <sys/types.h>
58d100bf 2545#include <netinet/in.h>
2546 ],
2547 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2548 [ ac_cv_have_struct_in6_addr="yes" ],
2549 [ ac_cv_have_struct_in6_addr="no" ]
2550 )
2551])
2552if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
3466e002 2553 AC_DEFINE(HAVE_STRUCT_IN6_ADDR, 1,
2554 [define if you have struct in6_addr data type])
58d100bf 2555fi
48e671d5 2556
58d100bf 2557AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2558 AC_TRY_COMPILE(
2559 [
18ba2aab 2560#include <sys/types.h>
2561#include <sys/socket.h>
2562#include <netdb.h>
58d100bf 2563 ],
2564 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2565 [ ac_cv_have_struct_addrinfo="yes" ],
2566 [ ac_cv_have_struct_addrinfo="no" ]
2567 )
2568])
2569if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
3466e002 2570 AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1,
2571 [define if you have struct addrinfo data type])
58d100bf 2572fi
2573
89c7e31c 2574AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2575 AC_TRY_COMPILE(
aff51935 2576 [ #include <sys/time.h> ],
2577 [ struct timeval tv; tv.tv_sec = 1;],
89c7e31c 2578 [ ac_cv_have_struct_timeval="yes" ],
2579 [ ac_cv_have_struct_timeval="no" ]
2580 )
2581])
2582if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
3466e002 2583 AC_DEFINE(HAVE_STRUCT_TIMEVAL, 1, [define if you have struct timeval])
89c7e31c 2584 have_struct_timeval=1
2585fi
2586
5271b55c 2587AC_CHECK_TYPES(struct timespec)
2588
85abc74b 2589# We need int64_t or else certian parts of the compile will fail.
4b492aab 2590if test "x$ac_cv_have_int64_t" = "xno" && \
2591 test "x$ac_cv_sizeof_long_int" != "x8" && \
2592 test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
85abc74b 2593 echo "OpenSSH requires int64_t support. Contact your vendor or install"
2594 echo "an alternative compiler (I.E., GCC) before continuing."
2595 echo ""
2596 exit 1;
733cf7f4 2597else
2598dnl test snprintf (broken on SCO w/gcc)
1a01a50c 2599 AC_RUN_IFELSE(
479cece8 2600 [AC_LANG_SOURCE([[
733cf7f4 2601#include <stdio.h>
2602#include <string.h>
2603#ifdef HAVE_SNPRINTF
2604main()
2605{
2606 char buf[50];
2607 char expected_out[50];
2608 int mazsize = 50 ;
2609#if (SIZEOF_LONG_INT == 8)
2610 long int num = 0x7fffffffffffffff;
2611#else
763a1a18 2612 long long num = 0x7fffffffffffffffll;
733cf7f4 2613#endif
2614 strcpy(expected_out, "9223372036854775807");
2615 snprintf(buf, mazsize, "%lld", num);
2616 if(strcmp(buf, expected_out) != 0)
aff51935 2617 exit(1);
733cf7f4 2618 exit(0);
2619}
2620#else
2621main() { exit(0); }
2622#endif
479cece8 2623 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
1a01a50c 2624 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
733cf7f4 2625 )
2c523de9 2626fi
2627
77bb0bca 2628dnl Checks for structure members
58d100bf 2629OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2630OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2631OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2632OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2633OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
25422c70 2634OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
58d100bf 2635OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2636OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
daaff4d5 2637OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
58d100bf 2638OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2639OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2640OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2641OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
1d7b9b20 2642OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2643OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2644OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2645OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
98a7c37b 2646
2647AC_CHECK_MEMBERS([struct stat.st_blksize])
ccc45ee0 2648AC_CHECK_MEMBER([struct __res_state.retrans], [], [AC_DEFINE(__res_state, state,
2649 [Define if we don't have struct __res_state in resolv.h])],
2650[
2651#include <stdio.h>
2652#if HAVE_SYS_TYPES_H
2653# include <sys/types.h>
2654#endif
2655#include <netinet/in.h>
2656#include <arpa/nameser.h>
2657#include <resolv.h>
2658])
1d7b9b20 2659
58d100bf 2660AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2661 ac_cv_have_ss_family_in_struct_ss, [
2662 AC_TRY_COMPILE(
2663 [
18ba2aab 2664#include <sys/types.h>
2665#include <sys/socket.h>
58d100bf 2666 ],
2667 [ struct sockaddr_storage s; s.ss_family = 1; ],
2668 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2669 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2670 )
2671])
2672if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
3466e002 2673 AC_DEFINE(HAVE_SS_FAMILY_IN_SS, 1, [Fields in struct sockaddr_storage])
58d100bf 2674fi
2675
58d100bf 2676AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2677 ac_cv_have___ss_family_in_struct_ss, [
2678 AC_TRY_COMPILE(
2679 [
18ba2aab 2680#include <sys/types.h>
2681#include <sys/socket.h>
58d100bf 2682 ],
2683 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2684 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2685 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2686 )
2687])
2688if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
3466e002 2689 AC_DEFINE(HAVE___SS_FAMILY_IN_SS, 1,
2690 [Fields in struct sockaddr_storage])
58d100bf 2691fi
2692
2e73a022 2693AC_CACHE_CHECK([for pw_class field in struct passwd],
2694 ac_cv_have_pw_class_in_struct_passwd, [
2695 AC_TRY_COMPILE(
2696 [
2e73a022 2697#include <pwd.h>
2698 ],
97994d32 2699 [ struct passwd p; p.pw_class = 0; ],
2e73a022 2700 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2701 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2702 )
2703])
2704if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
3466e002 2705 AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD, 1,
2706 [Define if your password has a pw_class field])
2e73a022 2707fi
2708
7751d4eb 2709AC_CACHE_CHECK([for pw_expire field in struct passwd],
2710 ac_cv_have_pw_expire_in_struct_passwd, [
2711 AC_TRY_COMPILE(
2712 [
2713#include <pwd.h>
2714 ],
2715 [ struct passwd p; p.pw_expire = 0; ],
2716 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2717 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2718 )
2719])
2720if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
3466e002 2721 AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD, 1,
2722 [Define if your password has a pw_expire field])
7751d4eb 2723fi
2724
2725AC_CACHE_CHECK([for pw_change field in struct passwd],
2726 ac_cv_have_pw_change_in_struct_passwd, [
2727 AC_TRY_COMPILE(
2728 [
2729#include <pwd.h>
2730 ],
2731 [ struct passwd p; p.pw_change = 0; ],
2732 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2733 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2734 )
2735])
2736if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
3466e002 2737 AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD, 1,
2738 [Define if your password has a pw_change field])
7751d4eb 2739fi
58d100bf 2740
637f9177 2741dnl make sure we're using the real structure members and not defines
6f34652e 2742AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2743 ac_cv_have_accrights_in_msghdr, [
1a01a50c 2744 AC_COMPILE_IFELSE(
6f34652e 2745 [
f95c8ce8 2746#include <sys/types.h>
6f34652e 2747#include <sys/socket.h>
2748#include <sys/uio.h>
637f9177 2749int main() {
2750#ifdef msg_accrights
1a01a50c 2751#error "msg_accrights is a macro"
637f9177 2752exit(1);
2753#endif
2754struct msghdr m;
2755m.msg_accrights = 0;
2756exit(0);
2757}
6f34652e 2758 ],
6f34652e 2759 [ ac_cv_have_accrights_in_msghdr="yes" ],
2760 [ ac_cv_have_accrights_in_msghdr="no" ]
2761 )
2762])
2763if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
3466e002 2764 AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR, 1,
2765 [Define if your system uses access rights style
2766 file descriptor passing])
6f34652e 2767fi
2768
7176df4f 2769AC_CACHE_CHECK([for msg_control field in struct msghdr],
2770 ac_cv_have_control_in_msghdr, [
1a01a50c 2771 AC_COMPILE_IFELSE(
7176df4f 2772 [
f95c8ce8 2773#include <sys/types.h>
7176df4f 2774#include <sys/socket.h>
2775#include <sys/uio.h>
637f9177 2776int main() {
2777#ifdef msg_control
1a01a50c 2778#error "msg_control is a macro"
637f9177 2779exit(1);
2780#endif
2781struct msghdr m;
2782m.msg_control = 0;
2783exit(0);
2784}
7176df4f 2785 ],
7176df4f 2786 [ ac_cv_have_control_in_msghdr="yes" ],
2787 [ ac_cv_have_control_in_msghdr="no" ]
2788 )
2789])
2790if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
3466e002 2791 AC_DEFINE(HAVE_CONTROL_IN_MSGHDR, 1,
2792 [Define if your system uses ancillary data style
2793 file descriptor passing])
7176df4f 2794fi
2795
58d100bf 2796AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
aff51935 2797 AC_TRY_LINK([],
2798 [ extern char *__progname; printf("%s", __progname); ],
58d100bf 2799 [ ac_cv_libc_defines___progname="yes" ],
2800 [ ac_cv_libc_defines___progname="no" ]
2801 )
2802])
2803if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
3466e002 2804 AC_DEFINE(HAVE___PROGNAME, 1, [Define if libc defines __progname])
58d100bf 2805fi
8946db53 2806
c921ee00 2807AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2808 AC_TRY_LINK([
2809#include <stdio.h>
aff51935 2810],
2811 [ printf("%s", __FUNCTION__); ],
c921ee00 2812 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2813 [ ac_cv_cc_implements___FUNCTION__="no" ]
2814 )
2815])
2816if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
3466e002 2817 AC_DEFINE(HAVE___FUNCTION__, 1,
2818 [Define if compiler implements __FUNCTION__])
c921ee00 2819fi
2820
2821AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2822 AC_TRY_LINK([
2823#include <stdio.h>
aff51935 2824],
2825 [ printf("%s", __func__); ],
c921ee00 2826 [ ac_cv_cc_implements___func__="yes" ],
2827 [ ac_cv_cc_implements___func__="no" ]
2828 )
2829])
2830if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
3466e002 2831 AC_DEFINE(HAVE___func__, 1, [Define if compiler implements __func__])
c921ee00 2832fi
2833
9a406e1e 2834AC_CACHE_CHECK([whether va_copy exists], ac_cv_have_va_copy, [
2835 AC_TRY_LINK(
2836 [#include <stdarg.h>
2837 va_list x,y;],
2838 [va_copy(x,y);],
2839 [ ac_cv_have_va_copy="yes" ],
2840 [ ac_cv_have_va_copy="no" ]
2841 )
2842])
2843if test "x$ac_cv_have_va_copy" = "xyes" ; then
2844 AC_DEFINE(HAVE_VA_COPY, 1, [Define if va_copy exists])
2845fi
2846
2847AC_CACHE_CHECK([whether __va_copy exists], ac_cv_have___va_copy, [
2848 AC_TRY_LINK(
2849 [#include <stdarg.h>
2850 va_list x,y;],
2851 [__va_copy(x,y);],
2852 [ ac_cv_have___va_copy="yes" ],
2853 [ ac_cv_have___va_copy="no" ]
2854 )
2855])
2856if test "x$ac_cv_have___va_copy" = "xyes" ; then
2857 AC_DEFINE(HAVE___VA_COPY, 1, [Define if __va_copy exists])
2858fi
2859
1812a662 2860AC_CACHE_CHECK([whether getopt has optreset support],
2861 ac_cv_have_getopt_optreset, [
2862 AC_TRY_LINK(
2863 [
2864#include <getopt.h>
2865 ],
2866 [ extern int optreset; optreset = 0; ],
2867 [ ac_cv_have_getopt_optreset="yes" ],
2868 [ ac_cv_have_getopt_optreset="no" ]
2869 )
2870])
2871if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
3466e002 2872 AC_DEFINE(HAVE_GETOPT_OPTRESET, 1,
2873 [Define if your getopt(3) defines and uses optreset])
1812a662 2874fi
a0391976 2875
819b676f 2876AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
aff51935 2877 AC_TRY_LINK([],
2878 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
819b676f 2879 [ ac_cv_libc_defines_sys_errlist="yes" ],
2880 [ ac_cv_libc_defines_sys_errlist="no" ]
2881 )
2882])
2883if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
3466e002 2884 AC_DEFINE(HAVE_SYS_ERRLIST, 1,
2885 [Define if your system defines sys_errlist[]])
819b676f 2886fi
2887
2888
416ed5a7 2889AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
aff51935 2890 AC_TRY_LINK([],
2891 [ extern int sys_nerr; printf("%i", sys_nerr);],
416ed5a7 2892 [ ac_cv_libc_defines_sys_nerr="yes" ],
2893 [ ac_cv_libc_defines_sys_nerr="no" ]
2894 )
2895])
2896if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
3466e002 2897 AC_DEFINE(HAVE_SYS_NERR, 1, [Define if your system defines sys_nerr])
416ed5a7 2898fi
2899
aff51935 2900SCARD_MSG="no"
295c8801 2901# Check whether user wants sectok support
2902AC_ARG_WITH(sectok,
2903 [ --with-sectok Enable smartcard support using libsectok],
d0b19c95 2904 [
2905 if test "x$withval" != "xno" ; then
2906 if test "x$withval" != "xyes" ; then
2907 CPPFLAGS="$CPPFLAGS -I${withval}"
2908 LDFLAGS="$LDFLAGS -L${withval}"
2909 if test ! -z "$need_dash_r" ; then
2910 LDFLAGS="$LDFLAGS -R${withval}"
2911 fi
2912 if test ! -z "$blibpath" ; then
2913 blibpath="$blibpath:${withval}"
2914 fi
2915 fi
2916 AC_CHECK_HEADERS(sectok.h)
2917 if test "$ac_cv_header_sectok_h" != yes; then
2918 AC_MSG_ERROR(Can't find sectok.h)
2919 fi
2920 AC_CHECK_LIB(sectok, sectok_open)
2921 if test "$ac_cv_lib_sectok_sectok_open" != yes; then
2922 AC_MSG_ERROR(Can't find libsectok)
2923 fi
3466e002 2924 AC_DEFINE(SMARTCARD, 1,
2925 [Define if you want smartcard support])
2926 AC_DEFINE(USE_SECTOK, 1,
2927 [Define if you want smartcard support
2928 using sectok])
aff51935 2929 SCARD_MSG="yes, using sectok"
295c8801 2930 fi
2931 ]
2932)
2933
2934# Check whether user wants OpenSC support
987b458f 2935OPENSC_CONFIG="no"
295c8801 2936AC_ARG_WITH(opensc,
e47fb473 2937 [ --with-opensc[[=PFX]] Enable smartcard support using OpenSC (optionally in PATH)],
987b458f 2938 [
2939 if test "x$withval" != "xno" ; then
2940 if test "x$withval" != "xyes" ; then
2941 OPENSC_CONFIG=$withval/bin/opensc-config
2942 else
2943 AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
2944 fi
2945 if test "$OPENSC_CONFIG" != "no"; then
2946 LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
2947 LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
2948 CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
2949 LDFLAGS="$LDFLAGS $LIBOPENSC_LIBS"
2950 AC_DEFINE(SMARTCARD)
3466e002 2951 AC_DEFINE(USE_OPENSC, 1,
2952 [Define if you want smartcard support
2953 using OpenSC])
987b458f 2954 SCARD_MSG="yes, using OpenSC"
2955 fi
2956 fi
2957 ]
2958)
d0b19c95 2959
c31dc31c 2960# Check libraries needed by DNS fingerprint support
aff51935 2961AC_SEARCH_LIBS(getrrsetbyname, resolv,
3466e002 2962 [AC_DEFINE(HAVE_GETRRSETBYNAME, 1,
2963 [Define if getrrsetbyname() exists])],
3e05e934 2964 [
c31dc31c 2965 # Needed by our getrrsetbyname()
2966 AC_SEARCH_LIBS(res_query, resolv)
2967 AC_SEARCH_LIBS(dn_expand, resolv)
dabb524a 2968 AC_MSG_CHECKING(if res_query will link)
2969 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
2970 [AC_MSG_RESULT(no)
2971 saved_LIBS="$LIBS"
2972 LIBS="$LIBS -lresolv"
2973 AC_MSG_CHECKING(for res_query in -lresolv)
2974 AC_LINK_IFELSE([
2975#include <resolv.h>
2976int main()
2977{
2978 res_query (0, 0, 0, 0, 0);
2979 return 0;
2980}
2981 ],
2982 [LIBS="$LIBS -lresolv"
2983 AC_MSG_RESULT(yes)],
2984 [LIBS="$saved_LIBS"
2985 AC_MSG_RESULT(no)])
2986 ])
c31dc31c 2987 AC_CHECK_FUNCS(_getshort _getlong)
1c829da5 2988 AC_CHECK_DECLS([_getshort, _getlong], , ,
b5765e1d 2989 [#include <sys/types.h>
2990 #include <arpa/nameser.h>])
c31dc31c 2991 AC_CHECK_MEMBER(HEADER.ad,
3466e002 2992 [AC_DEFINE(HAVE_HEADER_AD, 1,
2993 [Define if HEADER.ad exists in arpa/nameser.h])],,
c31dc31c 2994 [#include <arpa/nameser.h>])
2995 ])
3e05e934 2996
12928e80 2997# Check whether user wants Kerberos 5 support
aff51935 2998KRB5_MSG="no"
12928e80 2999AC_ARG_WITH(kerberos5,
aff51935 3000 [ --with-kerberos5=PATH Enable Kerberos 5 support],
5585c441 3001 [ if test "x$withval" != "xno" ; then
3002 if test "x$withval" = "xyes" ; then
3003 KRB5ROOT="/usr/local"
3004 else
3005 KRB5ROOT=${withval}
3006 fi
3007
3466e002 3008 AC_DEFINE(KRB5, 1, [Define if you want Kerberos 5 support])
5585c441 3009 KRB5_MSG="yes"
3010
3011 AC_MSG_CHECKING(for krb5-config)
3012 if test -x $KRB5ROOT/bin/krb5-config ; then
3013 KRB5CONF=$KRB5ROOT/bin/krb5-config
3014 AC_MSG_RESULT($KRB5CONF)
3015
3016 AC_MSG_CHECKING(for gssapi support)
3017 if $KRB5CONF | grep gssapi >/dev/null ; then
3018 AC_MSG_RESULT(yes)
3466e002 3019 AC_DEFINE(GSSAPI, 1,
3020 [Define this if you want GSSAPI
3021 support in the version 2 protocol])
071970fb 3022 k5confopts=gssapi
aff51935 3023 else
5585c441 3024 AC_MSG_RESULT(no)
071970fb 3025 k5confopts=""
aff51935 3026 fi
071970fb 3027 K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
3028 K5LIBS="`$KRB5CONF --libs $k5confopts`"
5585c441 3029 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
5585c441 3030 AC_MSG_CHECKING(whether we are using Heimdal)
3031 AC_TRY_COMPILE([ #include <krb5.h> ],
3032 [ char *tmp = heimdal_version; ],
3033 [ AC_MSG_RESULT(yes)
3466e002 3034 AC_DEFINE(HEIMDAL, 1,
3035 [Define this if you are using the
3036 Heimdal version of Kerberos V5]) ],
5585c441 3037 AC_MSG_RESULT(no)
3038 )
3039 else
3040 AC_MSG_RESULT(no)
12928e80 3041 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
aff51935 3042 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
aff51935 3043 AC_MSG_CHECKING(whether we are using Heimdal)
3044 AC_TRY_COMPILE([ #include <krb5.h> ],
3045 [ char *tmp = heimdal_version; ],
3046 [ AC_MSG_RESULT(yes)
3047 AC_DEFINE(HEIMDAL)
41707f74 3048 K5LIBS="-lkrb5 -ldes"
3049 K5LIBS="$K5LIBS -lcom_err -lasn1"
82f4e93d 3050 AC_CHECK_LIB(roken, net_write,
41707f74 3051 [K5LIBS="$K5LIBS -lroken"])
aff51935 3052 ],
3053 [ AC_MSG_RESULT(no)
3054 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
3055 ]
3056 )
4e00038c 3057 AC_SEARCH_LIBS(dn_expand, resolv)
12928e80 3058
749560dd 3059 AC_CHECK_LIB(gssapi,gss_init_sec_context,
3060 [ AC_DEFINE(GSSAPI)
3061 K5LIBS="-lgssapi $K5LIBS" ],
3062 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
3063 [ AC_DEFINE(GSSAPI)
aff51935 3064 K5LIBS="-lgssapi_krb5 $K5LIBS" ],
749560dd 3065 AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
3066 $K5LIBS)
3067 ],
3068 $K5LIBS)
82f4e93d 3069
749560dd 3070 AC_CHECK_HEADER(gssapi.h, ,
3071 [ unset ac_cv_header_gssapi_h
aff51935 3072 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
749560dd 3073 AC_CHECK_HEADERS(gssapi.h, ,
3074 AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
aff51935 3075 )
749560dd 3076 ]
3077 )
3078
3079 oldCPP="$CPPFLAGS"
3080 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
3081 AC_CHECK_HEADER(gssapi_krb5.h, ,
3082 [ CPPFLAGS="$oldCPP" ])
3083
aff51935 3084 fi
5585c441 3085 if test ! -z "$need_dash_r" ; then
3086 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
3087 fi
3088 if test ! -z "$blibpath" ; then
3089 blibpath="$blibpath:${KRB5ROOT}/lib"
3090 fi
071970fb 3091
f5555364 3092 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
3093 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
3094 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
071970fb 3095
f5555364 3096 LIBS="$LIBS $K5LIBS"
3466e002 3097 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS, 1,
3098 [Define this if you want to use libkafs' AFS support]))
f5555364 3099 fi
071970fb 3100 ]
12928e80 3101)
b5b68128 3102
a0391976 3103# Looking for programs, paths and files
a0391976 3104
ecac8ee5 3105PRIVSEP_PATH=/var/empty
3106AC_ARG_WITH(privsep-path,
cda1ebcb 3107 [ --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
ecac8ee5 3108 [
6cf0200f 3109 if test -n "$withval" && test "x$withval" != "xno" && \
3110 test "x${withval}" != "xyes"; then
ecac8ee5 3111 PRIVSEP_PATH=$withval
3112 fi
3113 ]
3114)
3115AC_SUBST(PRIVSEP_PATH)
3116
a0391976 3117AC_ARG_WITH(xauth,
3118 [ --with-xauth=PATH Specify path to xauth program ],
3119 [
6cf0200f 3120 if test -n "$withval" && test "x$withval" != "xno" && \
3121 test "x${withval}" != "xyes"; then
cbd7492e 3122 xauth_path=$withval
a0391976 3123 fi
3124 ],
3125 [
2bf42e4a 3126 TestPath="$PATH"
3127 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
3128 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
3129 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
3130 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
3131 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
e5fe9a1f 3132 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
a0391976 3133 xauth_path="/usr/openwin/bin/xauth"
3134 fi
3135 ]
3136)
3137
65a4b4af 3138STRIP_OPT=-s
3139AC_ARG_ENABLE(strip,
3140 [ --disable-strip Disable calling strip(1) on install],
3141 [
3142 if test "x$enableval" = "xno" ; then
3143 STRIP_OPT=
3144 fi
3145 ]
3146)
3147AC_SUBST(STRIP_OPT)
3148
b3ec54b4 3149if test -z "$xauth_path" ; then
3150 XAUTH_PATH="undefined"
3151 AC_SUBST(XAUTH_PATH)
3152else
3466e002 3153 AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path",
3154 [Define if xauth is found in your path])
b3ec54b4 3155 XAUTH_PATH=$xauth_path
3156 AC_SUBST(XAUTH_PATH)
a0391976 3157fi
a0391976 3158
3159# Check for mail directory (last resort if we cannot get it from headers)
3160if test ! -z "$MAIL" ; then
3161 maildir=`dirname $MAIL`
3466e002 3162 AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir",
3163 [Set this to your mail directory if you don't have maillock.h])
a0391976 3164fi
3165
479cece8 3166if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
1a01a50c 3167 AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
3168 disable_ptmx_check=yes
3169fi
a0391976 3170if test -z "$no_dev_ptmx" ; then
6e879cb4 3171 if test "x$disable_ptmx_check" != "xyes" ; then
aff51935 3172 AC_CHECK_FILE("/dev/ptmx",
6e879cb4 3173 [
3466e002 3174 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX, 1,
3175 [Define if you have /dev/ptmx])
6e879cb4 3176 have_dev_ptmx=1
3177 ]
3178 )
3179 fi
3276571c 3180fi
1a01a50c 3181
479cece8 3182if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
1a01a50c 3183 AC_CHECK_FILE("/dev/ptc",
3184 [
3466e002 3185 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC, 1,
3186 [Define if you have /dev/ptc])
1a01a50c 3187 have_dev_ptc=1
3188 ]
3189 )
3190else
3191 AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
3192fi
3276571c 3193
a0391976 3194# Options from here on. Some of these are preset by platform above
fdf6b7aa 3195AC_ARG_WITH(mantype,
5d97cfbf 3196 [ --with-mantype=man|cat|doc Set man page type],
c54a6257 3197 [
5d97cfbf 3198 case "$withval" in
3199 man|cat|doc)
3200 MANTYPE=$withval
3201 ;;
3202 *)
3203 AC_MSG_ERROR(invalid man type: $withval)
3204 ;;
3205 esac
c54a6257 3206 ]
3207)
e0c4d3ac 3208if test -z "$MANTYPE"; then
2bf42e4a 3209 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
3210 AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
e0c4d3ac 3211 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
3212 MANTYPE=doc
3213 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
3214 MANTYPE=man
3215 else
3216 MANTYPE=cat
3217 fi
3218fi
c54a6257 3219AC_SUBST(MANTYPE)
e0c4d3ac 3220if test "$MANTYPE" = "doc"; then
3221 mansubdir=man;
3222else
3223 mansubdir=$MANTYPE;
3224fi
3225AC_SUBST(mansubdir)
0bc5b6fb 3226
a0391976 3227# Check whether to enable MD5 passwords
aff51935 3228MD5_MSG="no"
2ddcfdf3 3229AC_ARG_WITH(md5-passwords,
caf3bc51 3230 [ --with-md5-passwords Enable use of MD5 passwords],
0bc5b6fb 3231 [
bcf36c78 3232 if test "x$withval" != "xno" ; then
3466e002 3233 AC_DEFINE(HAVE_MD5_PASSWORDS, 1,
3234 [Define if you want to allow MD5 passwords])
aff51935 3235 MD5_MSG="yes"
0bc5b6fb 3236 fi
3237 ]
caf3bc51 3238)
3239
a0391976 3240# Whether to disable shadow password support
a7effaac 3241AC_ARG_WITH(shadow,
3242 [ --without-shadow Disable shadow password support],
3243 [
82f4e93d 3244 if test "x$withval" = "xno" ; then
a7effaac 3245 AC_DEFINE(DISABLE_SHADOW)
4cb5ffa0 3246 disable_shadow=yes
a7effaac 3247 fi
3248 ]
3249)
3250
4cb5ffa0 3251if test -z "$disable_shadow" ; then
3252 AC_MSG_CHECKING([if the systems has expire shadow information])
3253 AC_TRY_COMPILE(
3254 [
3255#include <sys/types.h>
3256#include <shadow.h>
3257 struct spwd sp;
3258 ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
3259 [ sp_expire_available=yes ], []
3260 )
3261
3262 if test "x$sp_expire_available" = "xyes" ; then
3263 AC_MSG_RESULT(yes)
3466e002 3264 AC_DEFINE(HAS_SHADOW_EXPIRE, 1,
3265 [Define if you want to use shadow password expire field])
4cb5ffa0 3266 else
3267 AC_MSG_RESULT(no)
3268 fi
3269fi
3270
a0391976 3271# Use ip address instead of hostname in $DISPLAY
44839801 3272if test ! -z "$IPADDR_IN_DISPLAY" ; then
3273 DISPLAY_HACK_MSG="yes"
3466e002 3274 AC_DEFINE(IPADDR_IN_DISPLAY, 1,
3275 [Define if you need to use IP address
3276 instead of hostname in $DISPLAY])
44839801 3277else
aff51935 3278 DISPLAY_HACK_MSG="no"
44839801 3279 AC_ARG_WITH(ipaddr-display,
3280 [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY],
3281 [
82f4e93d 3282 if test "x$withval" != "xno" ; then
44839801 3283 AC_DEFINE(IPADDR_IN_DISPLAY)
aff51935 3284 DISPLAY_HACK_MSG="yes"
44839801 3285 fi
3286 ]
3287 )
3288fi
a7effaac 3289
95b99395 3290# check for /etc/default/login and use it if present.
daa41e62 3291AC_ARG_ENABLE(etc-default-login,
6ff3d0dc 3292 [ --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
694d0cef 3293 [ if test "x$enableval" = "xno"; then
3294 AC_MSG_NOTICE([/etc/default/login handling disabled])
3295 etc_default_login=no
3296 else
3297 etc_default_login=yes
3298 fi ],
b0e7249f 3299 [ if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
3300 then
3301 AC_MSG_WARN([cross compiling: not checking /etc/default/login])
3302 etc_default_login=no
3303 else
3304 etc_default_login=yes
3305 fi ]
694d0cef 3306)
95b99395 3307
694d0cef 3308if test "x$etc_default_login" != "xno"; then
3309 AC_CHECK_FILE("/etc/default/login",
3310 [ external_path_file=/etc/default/login ])
b0e7249f 3311 if test "x$external_path_file" = "x/etc/default/login"; then
3466e002 3312 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN, 1,
3313 [Define if your system has /etc/default/login])
1a01a50c 3314 fi
694d0cef 3315fi
95b99395 3316
8d184c09 3317dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
4b492aab 3318if test $ac_cv_func_login_getcapbool = "yes" && \
3319 test $ac_cv_header_login_cap_h = "yes" ; then
95b99395 3320 external_path_file=/etc/login.conf
8d184c09 3321fi
95b99395 3322
a0391976 3323# Whether to mess with the default path
aff51935 3324SERVER_PATH_MSG="(default)"
c43d69a9 3325AC_ARG_WITH(default-path,
75817f90 3326 [ --with-default-path= Specify default \$PATH environment for server],
cb807f40 3327 [
95b99395 3328 if test "x$external_path_file" = "x/etc/login.conf" ; then
8d184c09 3329 AC_MSG_WARN([
3330--with-default-path=PATH has no effect on this system.
3331Edit /etc/login.conf instead.])
82f4e93d 3332 elif test "x$withval" != "xno" ; then
89bbd457 3333 if test ! -z "$external_path_file" ; then
95b99395 3334 AC_MSG_WARN([
3335--with-default-path=PATH will only be used if PATH is not defined in
3336$external_path_file .])
3337 fi
b2d818e6 3338 user_path="$withval"
aff51935 3339 SERVER_PATH_MSG="$withval"
cb807f40 3340 fi
b2d818e6 3341 ],
95b99395 3342 [ if test "x$external_path_file" = "x/etc/login.conf" ; then
3343 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
8d184c09 3344 else
89bbd457 3345 if test ! -z "$external_path_file" ; then
95b99395 3346 AC_MSG_WARN([
3347If PATH is defined in $external_path_file, ensure the path to scp is included,
3348otherwise scp will not work.])
3349 fi
b0e7249f 3350 AC_RUN_IFELSE(
3351 [AC_LANG_SOURCE([[
b2d818e6 3352/* find out what STDPATH is */
3353#include <stdio.h>
b2d818e6 3354#ifdef HAVE_PATHS_H
3355# include <paths.h>
3356#endif
3357#ifndef _PATH_STDPATH
d9a4e55b 3358# ifdef _PATH_USERPATH /* Irix */
3359# define _PATH_STDPATH _PATH_USERPATH
3360# else
3361# define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
3362# endif
b2d818e6 3363#endif
3364#include <sys/types.h>
3365#include <sys/stat.h>
3366#include <fcntl.h>
3367#define DATA "conftest.stdpath"
3368
3369main()
3370{
3371 FILE *fd;
3372 int rc;
82f4e93d 3373
b2d818e6 3374 fd = fopen(DATA,"w");
3375 if(fd == NULL)
3376 exit(1);
82f4e93d 3377
b2d818e6 3378 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
3379 exit(1);
3380
3381 exit(0);
3382}
b0e7249f 3383 ]])],
3384 [ user_path=`cat conftest.stdpath` ],
b2d818e6 3385 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
3386 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
3387 )
3388# make sure $bindir is in USER_PATH so scp will work
3389 t_bindir=`eval echo ${bindir}`
3390 case $t_bindir in
3391 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
3392 esac
3393 case $t_bindir in
3394 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
3395 esac
3396 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
3397 if test $? -ne 0 ; then
3398 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
3399 if test $? -ne 0 ; then
3400 user_path=$user_path:$t_bindir
3401 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
3402 fi
3403 fi
8d184c09 3404 fi ]
cb807f40 3405)
95b99395 3406if test "x$external_path_file" != "x/etc/login.conf" ; then
3466e002 3407 AC_DEFINE_UNQUOTED(USER_PATH, "$user_path", [Specify default $PATH])
8d184c09 3408 AC_SUBST(user_path)
3409fi
cb807f40 3410
06617857 3411# Set superuser path separately to user path
06617857 3412AC_ARG_WITH(superuser-path,
3413 [ --with-superuser-path= Specify different path for super-user],
3414 [
6cf0200f 3415 if test -n "$withval" && test "x$withval" != "xno" && \
3416 test "x${withval}" != "xyes"; then
3466e002 3417 AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval",
3418 [Define if you want a different $PATH
3419 for the superuser])
06617857 3420 superuser_path=$withval
3421 fi
3422 ]
3423)
3424
3425
58d100bf 3426AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
aff51935 3427IPV4_IN6_HACK_MSG="no"
80faa19f 3428AC_ARG_WITH(4in6,
3429 [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses],
3430 [
3431 if test "x$withval" != "xno" ; then
3432 AC_MSG_RESULT(yes)
3466e002 3433 AC_DEFINE(IPV4_IN_IPV6, 1,
3434 [Detect IPv4 in IPv6 mapped addresses
3435 and treat as IPv4])
aff51935 3436 IPV4_IN6_HACK_MSG="yes"
80faa19f 3437 else
3438 AC_MSG_RESULT(no)
3439 fi
3440 ],[
3441 if test "x$inet6_default_4in6" = "xyes"; then
3442 AC_MSG_RESULT([yes (default)])
3443 AC_DEFINE(IPV4_IN_IPV6)
aff51935 3444 IPV4_IN6_HACK_MSG="yes"
80faa19f 3445 else
3446 AC_MSG_RESULT([no (default)])
3447 fi
3448 ]
3449)
3450
af774732 3451# Whether to enable BSD auth support
f1b0ecc3 3452BSD_AUTH_MSG=no
af774732 3453AC_ARG_WITH(bsd-auth,
3454 [ --with-bsd-auth Enable BSD auth support],
3455 [
82f4e93d 3456 if test "x$withval" != "xno" ; then
3466e002 3457 AC_DEFINE(BSD_AUTH, 1,
3458 [Define if you have BSD auth support])
f1b0ecc3 3459 BSD_AUTH_MSG=yes
af774732 3460 fi
3461 ]
3462)
3463
a0391976 3464# Where to place sshd.pid
19d9ac2a 3465piddir=/var/run
81dadca3 3466# make sure the directory exists
82f4e93d 3467if test ! -d $piddir ; then
81dadca3 3468 piddir=`eval echo ${sysconfdir}`
3469 case $piddir in
aff51935 3470 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
81dadca3 3471 esac
3472fi
3473
47e45e44 3474AC_ARG_WITH(pid-dir,
3475 [ --with-pid-dir=PATH Specify location of ssh.pid file],
3476 [
6cf0200f 3477 if test -n "$withval" && test "x$withval" != "xno" && \
3478 test "x${withval}" != "xyes"; then
19d9ac2a 3479 piddir=$withval
82f4e93d 3480 if test ! -d $piddir ; then
81dadca3 3481 AC_MSG_WARN([** no $piddir directory on this system **])
3482 fi
47e45e44 3483 fi
3484 ]
3485)
b7a87eea 3486
3466e002 3487AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir", [Specify location of ssh.pid])
19d9ac2a 3488AC_SUBST(piddir)
47e45e44 3489
1d7b9b20 3490dnl allow user to disable some login recording features
3491AC_ARG_ENABLE(lastlog,
bfd550a2 3492 [ --disable-lastlog disable use of lastlog even if detected [no]],
ddb154b3 3493 [
3494 if test "x$enableval" = "xno" ; then
3495 AC_DEFINE(DISABLE_LASTLOG)
3496 fi
3497 ]
1d7b9b20 3498)
3499AC_ARG_ENABLE(utmp,
bfd550a2 3500 [ --disable-utmp disable use of utmp even if detected [no]],
ddb154b3 3501 [
3502 if test "x$enableval" = "xno" ; then
3503 AC_DEFINE(DISABLE_UTMP)
3504 fi
3505 ]
1d7b9b20 3506)
3507AC_ARG_ENABLE(utmpx,
bfd550a2 3508 [ --disable-utmpx disable use of utmpx even if detected [no]],
ddb154b3 3509 [
3510 if test "x$enableval" = "xno" ; then
3466e002 3511 AC_DEFINE(DISABLE_UTMPX, 1,
3512 [Define if you don't want to use utmpx])
ddb154b3 3513 fi
3514 ]
1d7b9b20 3515)
3516AC_ARG_ENABLE(wtmp,
bfd550a2 3517 [ --disable-wtmp disable use of wtmp even if detected [no]],
ddb154b3 3518 [
3519 if test "x$enableval" = "xno" ; then
3520 AC_DEFINE(DISABLE_WTMP)
3521 fi
3522 ]
1d7b9b20 3523)
3524AC_ARG_ENABLE(wtmpx,
bfd550a2 3525 [ --disable-wtmpx disable use of wtmpx even if detected [no]],
ddb154b3 3526 [
3527 if test "x$enableval" = "xno" ; then
3466e002 3528 AC_DEFINE(DISABLE_WTMPX, 1,
3529 [Define if you don't want to use wtmpx])
ddb154b3 3530 fi
3531 ]
1d7b9b20 3532)
3533AC_ARG_ENABLE(libutil,
bfd550a2 3534 [ --disable-libutil disable use of libutil (login() etc.) [no]],
ddb154b3 3535 [
3536 if test "x$enableval" = "xno" ; then
3537 AC_DEFINE(DISABLE_LOGIN)
3538 fi
3539 ]
1d7b9b20 3540)
3541AC_ARG_ENABLE(pututline,
bfd550a2 3542 [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]],
ddb154b3 3543 [
3544 if test "x$enableval" = "xno" ; then
3466e002 3545 AC_DEFINE(DISABLE_PUTUTLINE, 1,
3546 [Define if you don't want to use pututline()
3547 etc. to write [uw]tmp])
ddb154b3 3548 fi
3549 ]
1d7b9b20 3550)
3551AC_ARG_ENABLE(pututxline,
bfd550a2 3552 [ --disable-pututxline disable use of pututxline() etc. ([uw]tmpx) [no]],
ddb154b3 3553 [
3554 if test "x$enableval" = "xno" ; then
3466e002 3555 AC_DEFINE(DISABLE_PUTUTXLINE, 1,
3556 [Define if you don't want to use pututxline()
3557 etc. to write [uw]tmpx])
ddb154b3 3558 fi
3559 ]
1d7b9b20 3560)
3561AC_ARG_WITH(lastlog,
bfd550a2 3562 [ --with-lastlog=FILE|DIR specify lastlog location [common locations]],
8c89dd2b 3563 [
82f4e93d 3564 if test "x$withval" = "xno" ; then
8c89dd2b 3565 AC_DEFINE(DISABLE_LASTLOG)
6cf0200f 3566 elif test -n "$withval" && test "x${withval}" != "xyes"; then
8c89dd2b 3567 conf_lastlog_location=$withval
3568 fi
3569 ]
3570)
1d7b9b20 3571
3572dnl lastlog, [uw]tmpx? detection
3573dnl NOTE: set the paths in the platform section to avoid the
3574dnl need for command-line parameters
3575dnl lastlog and [uw]tmp are subject to a file search if all else fails
3576
3577dnl lastlog detection
3578dnl NOTE: the code itself will detect if lastlog is a directory
3579AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
3580AC_TRY_COMPILE([
3581#include <sys/types.h>
3582#include <utmp.h>
3583#ifdef HAVE_LASTLOG_H
3584# include <lastlog.h>
3585#endif
d7c0f3d5 3586#ifdef HAVE_PATHS_H
1d7b9b20 3587# include <paths.h>
41cb4569 3588#endif
3589#ifdef HAVE_LOGIN_H
3590# include <login.h>
1d7b9b20 3591#endif
3592 ],
3593 [ char *lastlog = LASTLOG_FILE; ],
3594 [ AC_MSG_RESULT(yes) ],
d7c0f3d5 3595 [
3596 AC_MSG_RESULT(no)
3597 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
3598 AC_TRY_COMPILE([
3599#include <sys/types.h>
3600#include <utmp.h>
3601#ifdef HAVE_LASTLOG_H
3602# include <lastlog.h>
3603#endif
3604#ifdef HAVE_PATHS_H
3605# include <paths.h>
3606#endif
3607 ],
3608 [ char *lastlog = _PATH_LASTLOG; ],
3609 [ AC_MSG_RESULT(yes) ],
3610 [
f282b668 3611 AC_MSG_RESULT(no)
d7c0f3d5 3612 system_lastlog_path=no
3613 ])
3614 ]
1d7b9b20 3615)
d7c0f3d5 3616
1d7b9b20 3617if test -z "$conf_lastlog_location"; then
3618 if test x"$system_lastlog_path" = x"no" ; then
3619 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
e5fe9a1f 3620 if (test -d "$f" || test -f "$f") ; then
1d7b9b20 3621 conf_lastlog_location=$f
3622 fi
3623 done
3624 if test -z "$conf_lastlog_location"; then
f8119cef 3625 AC_MSG_WARN([** Cannot find lastlog **])
3626 dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
1d7b9b20 3627 fi
3628 fi
3629fi
3630
3631if test -n "$conf_lastlog_location"; then
3466e002 3632 AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location",
3633 [Define if you want to specify the path to your lastlog file])
82f4e93d 3634fi
1d7b9b20 3635
3636dnl utmp detection
3637AC_MSG_CHECKING([if your system defines UTMP_FILE])
3638AC_TRY_COMPILE([
3639#include <sys/types.h>
3640#include <utmp.h>
d7c0f3d5 3641#ifdef HAVE_PATHS_H
1d7b9b20 3642# include <paths.h>
3643#endif
3644 ],
3645 [ char *utmp = UTMP_FILE; ],
3646 [ AC_MSG_RESULT(yes) ],
3647 [ AC_MSG_RESULT(no)
3648 system_utmp_path=no ]
3649)
3650if test -z "$conf_utmp_location"; then
3651 if test x"$system_utmp_path" = x"no" ; then
3652 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3653 if test -f $f ; then
3654 conf_utmp_location=$f
3655 fi
3656 done
3657 if test -z "$conf_utmp_location"; then
3658 AC_DEFINE(DISABLE_UTMP)
3659 fi
3660 fi
3661fi
3662if test -n "$conf_utmp_location"; then
3466e002 3663 AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location",
3664 [Define if you want to specify the path to your utmp file])
82f4e93d 3665fi
1d7b9b20 3666
3667dnl wtmp detection
3668AC_MSG_CHECKING([if your system defines WTMP_FILE])
3669AC_TRY_COMPILE([
3670#include <sys/types.h>
3671#include <utmp.h>
d7c0f3d5 3672#ifdef HAVE_PATHS_H
1d7b9b20 3673# include <paths.h>
3674#endif
3675 ],
3676 [ char *wtmp = WTMP_FILE; ],
3677 [ AC_MSG_RESULT(yes) ],
3678 [ AC_MSG_RESULT(no)
3679 system_wtmp_path=no ]
3680)
3681if test -z "$conf_wtmp_location"; then
3682 if test x"$system_wtmp_path" = x"no" ; then
3683 for f in /usr/adm/wtmp /var/log/wtmp; do
3684 if test -f $f ; then
3685 conf_wtmp_location=$f
3686 fi
3687 done
3688 if test -z "$conf_wtmp_location"; then
3689 AC_DEFINE(DISABLE_WTMP)
3690 fi
3691 fi
3692fi
3693if test -n "$conf_wtmp_location"; then
3466e002 3694 AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location",
3695 [Define if you want to specify the path to your wtmp file])
82f4e93d 3696fi
1d7b9b20 3697
3698
3699dnl utmpx detection - I don't know any system so perverse as to require
3700dnl utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3701dnl there, though.
3702AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3703AC_TRY_COMPILE([
3704#include <sys/types.h>
3705#include <utmp.h>
3706#ifdef HAVE_UTMPX_H
3707#include <utmpx.h>
3708#endif
d7c0f3d5 3709#ifdef HAVE_PATHS_H
1d7b9b20 3710# include <paths.h>
3711#endif
3712 ],
3713 [ char *utmpx = UTMPX_FILE; ],
3714 [ AC_MSG_RESULT(yes) ],
3715 [ AC_MSG_RESULT(no)
3716 system_utmpx_path=no ]
3717)
3718if test -z "$conf_utmpx_location"; then
3719 if test x"$system_utmpx_path" = x"no" ; then
3720 AC_DEFINE(DISABLE_UTMPX)
3721 fi
3722else
3466e002 3723 AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location",
3724 [Define if you want to specify the path to your utmpx file])
82f4e93d 3725fi
1d7b9b20 3726
3727dnl wtmpx detection
3728AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3729AC_TRY_COMPILE([
3730#include <sys/types.h>
3731#include <utmp.h>
3732#ifdef HAVE_UTMPX_H
3733#include <utmpx.h>
3734#endif
d7c0f3d5 3735#ifdef HAVE_PATHS_H
1d7b9b20 3736# include <paths.h>
3737#endif
3738 ],
3739 [ char *wtmpx = WTMPX_FILE; ],
3740 [ AC_MSG_RESULT(yes) ],
3741 [ AC_MSG_RESULT(no)
3742 system_wtmpx_path=no ]
3743)
3744if test -z "$conf_wtmpx_location"; then
3745 if test x"$system_wtmpx_path" = x"no" ; then
3746 AC_DEFINE(DISABLE_WTMPX)
3747 fi
3748else
3466e002 3749 AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location",
3750 [Define if you want to specify the path to your wtmpx file])
82f4e93d 3751fi
1d7b9b20 3752
b7a87eea 3753
bd499f9e 3754if test ! -z "$blibpath" ; then
68ece370 3755 LDFLAGS="$LDFLAGS $blibflags$blibpath"
3756 AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
bd499f9e 3757fi
3758
ddceb1c8 3759dnl remove pam and dl because they are in $LIBPAM
3760if test "$PAM_MSG" = yes ; then
98f2d9d5 3761 LIBS=`echo $LIBS | sed 's/-lpam //'`
3762fi
3763if test "$ac_cv_lib_pam_pam_set_item" = yes ; then
3764 LIBS=`echo $LIBS | sed 's/-ldl //'`
ddceb1c8 3765fi
3766
ed89c848 3767dnl Adding -Werror to CFLAGS early prevents configure tests from running.
3768dnl Add now.
3769CFLAGS="$CFLAGS $werror_flags"
3770
3c62e7eb 3771AC_EXEEXT
d7cfdd7c 3772AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openbsd-compat/Makefile \
46096a5b 3773 openbsd-compat/regress/Makefile scard/Makefile ssh_prng_cmds survey.sh])
98a7c37b 3774AC_OUTPUT
d3083fbd 3775
cbd7492e 3776# Print summary of options
3777
cbd7492e 3778# Someone please show me a better way :)
3779A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3780B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3781C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3782D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
f5665f6f 3783E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
e0c4d3ac 3784F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
cbd7492e 3785G=`eval echo ${piddir}` ; G=`eval echo ${G}`
ecac8ee5 3786H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3787I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3788J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
cbd7492e 3789
3790echo ""
26de7942 3791echo "OpenSSH has been configured with the following options:"
ecac8ee5 3792echo " User binaries: $B"
3793echo " System binaries: $C"
3794echo " Configuration files: $D"
3795echo " Askpass program: $E"
3796echo " Manual pages: $F"
3797echo " PID file: $G"
3798echo " Privilege separation chroot path: $H"
95b99395 3799if test "x$external_path_file" = "x/etc/login.conf" ; then
3800echo " At runtime, sshd will use the path defined in $external_path_file"
3801echo " Make sure the path to scp is present, otherwise scp will not work"
8d184c09 3802else
ecac8ee5 3803echo " sshd default user PATH: $I"
89bbd457 3804 if test ! -z "$external_path_file"; then
95b99395 3805echo " (If PATH is set in $external_path_file it will be used instead. If"
3806echo " used, ensure the path to scp is present, otherwise scp will not work.)"
3807 fi
8d184c09 3808fi
06617857 3809if test ! -z "$superuser_path" ; then
ecac8ee5 3810echo " sshd superuser user PATH: $J"
3811fi
3812echo " Manpage format: $MANTYPE"
3e05e934 3813echo " PAM support: $PAM_MSG"
ecac8ee5 3814echo " KerberosV support: $KRB5_MSG"
3815echo " Smartcard support: $SCARD_MSG"
ecac8ee5 3816echo " S/KEY support: $SKEY_MSG"
3817echo " TCP Wrappers support: $TCPW_MSG"
3818echo " MD5 password support: $MD5_MSG"
59031773 3819echo " libedit support: $LIBEDIT_MSG"
3deb1408 3820echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
ecac8ee5 3821echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3822echo " BSD Auth support: $BSD_AUTH_MSG"
3823echo " Random number source: $RAND_MSG"
f1b0ecc3 3824if test ! -z "$USE_RAND_HELPER" ; then
ecac8ee5 3825echo " ssh-rand-helper collects from: $RAND_HELPER_MSG"
af774732 3826fi
3827
cbd7492e 3828echo ""
3829
0c2fb82f 3830echo " Host: ${host}"
3831echo " Compiler: ${CC}"
3832echo " Compiler flags: ${CFLAGS}"
3833echo "Preprocessor flags: ${CPPFLAGS}"
3834echo " Linker flags: ${LDFLAGS}"
ddceb1c8 3835echo " Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
cbd7492e 3836
3837echo ""
3838
9cefe228 3839if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
b3146b5f 3840 echo "SVR4 style packages are supported with \"make package\""
3841 echo ""
9cefe228 3842fi
3843
adeebd37 3844if test "x$PAM_MSG" = "xyes" ; then
f1b0ecc3 3845 echo "PAM is enabled. You may need to install a PAM control file "
3846 echo "for sshd, otherwise password authentication may fail. "
aff51935 3847 echo "Example PAM control files can be found in the contrib/ "
f1b0ecc3 3848 echo "subdirectory"
adeebd37 3849 echo ""
3850fi
3851
f1b0ecc3 3852if test ! -z "$RAND_HELPER_CMDHASH" ; then
3853 echo "WARNING: you are using the builtin random number collection "
3854 echo "service. Please read WARNING.RNG and request that your OS "
3855 echo "vendor includes kernel-based random number collection in "
3856 echo "future versions of your OS."
2c523de9 3857 echo ""
3858fi
af774732 3859
2f6f9cff 3860if test ! -z "$NO_PEERCHECK" ; then
3861 echo "WARNING: the operating system that you are using does not "
3862 echo "appear to support either the getpeereid() API nor the "
3863 echo "SO_PEERCRED getsockopt() option. These facilities are used to "
3864 echo "enforce security checks to prevent unauthorised connections to "
3865 echo "ssh-agent. Their absence increases the risk that a malicious "
3866 echo "user can connect to your agent. "
3867 echo ""
3868fi
3869
7b578f7d 3870if test "$AUDIT_MODULE" = "bsm" ; then
3871 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
3872 echo "See the Solaris section in README.platform for details."
3873fi
git-cvsimport mirror of OpenSSH
This page took 0.998762 seconds and 5 git commands to generate.