]> andersk Git - openssh.git/blame - configure.ac
andersk / openssh.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
- (dtucker) [monitor.c] Don't free buffers in audit functions, monitor_read
[openssh.git] / configure.ac
CommitLineData
eb5d7ff6 1# $Id$
2b983b95 2#
3# Copyright (c) 1999-2004 Damien Miller
4#
5# Permission to use, copy, modify, and distribute this software for any
6# purpose with or without fee is hereby granted, provided that the above
7# copyright notice and this permission notice appear in all copies.
8#
9# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
0b202697 16
bc6f919d 17AC_INIT(OpenSSH, Portable)
98a7c37b 18AC_CONFIG_SRCDIR([ssh.c])
5881cd60 19
20AC_CONFIG_HEADER(config.h)
b14b2ae7 21AC_PROG_CC
a7effaac 22AC_CANONICAL_HOST
cf0c5df5 23AC_C_BIGENDIAN
5881cd60 24
a0391976 25# Checks for programs.
4bbf95fa 26AC_PROG_AWK
4cca272e 27AC_PROG_CPP
5881cd60 28AC_PROG_RANLIB
cf8dd513 29AC_PROG_INSTALL
bee0a37e 30AC_PATH_PROG(AR, ar)
ddd8c95b 31AC_PATH_PROG(CAT, cat)
32AC_PATH_PROG(KILL, kill)
13dd877b 33AC_PATH_PROGS(PERL, perl5 perl)
c3690df3 34AC_PATH_PROG(SED, sed)
a0f84251 35AC_SUBST(PERL)
ad85db64 36AC_PATH_PROG(ENT, ent)
37AC_SUBST(ENT)
6958bd37 38AC_PATH_PROG(TEST_MINUS_S_SH, bash)
39AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
40AC_PATH_PROG(TEST_MINUS_S_SH, sh)
6193497b 41AC_PATH_PROG(SH, sh)
a3245b92 42AC_SUBST(TEST_SHELL,sh)
f498ed15 43
9cefe228 44dnl for buildpkg.sh
45AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
46 [/usr/sbin${PATH_SEPARATOR}/etc])
47AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
48 [/usr/sbin${PATH_SEPARATOR}/etc])
49AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
50
948fd8b9 51# System features
52AC_SYS_LARGEFILE
53
c193d002 54if test -z "$AR" ; then
55 AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
56fi
57
2e73a022 58# Use LOGIN_PROGRAM from environment if possible
59if test ! -z "$LOGIN_PROGRAM" ; then
60 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM")
61else
62 # Search for login
63 AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
64 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
65 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
66 fi
67fi
68
37656beb 69AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
70if test ! -z "$PATH_PASSWD_PROG" ; then
71 AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG")
72fi
73
d423d822 74if test -z "$LD" ; then
75 LD=$CC
76fi
77AC_SUBST(LD)
82f4e93d 78
d423d822 79AC_C_INLINE
aff51935 80if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
5ed2bb5b 81 CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wno-uninitialized"
d423d822 82fi
83
e6354014 84AC_ARG_WITH(rpath,
85 [ --without-rpath Disable auto-added -R linker paths],
86 [
82f4e93d 87 if test "x$withval" = "xno" ; then
e6354014 88 need_dash_r=""
89 fi
90 if test "x$withval" = "xyes" ; then
91 need_dash_r=1
92 fi
93 ]
94)
95
a0391976 96# Check for some target-specific stuff
a7effaac 97case "$host" in
9d6b1b96 98*-*-aix*)
aff51935 99 AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
68ece370 100 if (test -z "$blibpath"); then
0a15d73b 101 blibpath="/usr/lib:/lib"
68ece370 102 fi
103 saved_LDFLAGS="$LDFLAGS"
104 for tryflags in -blibpath: -Wl,-blibpath: -Wl,-rpath, ;do
105 if (test -z "$blibflags"); then
106 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
107 AC_TRY_LINK([], [], [blibflags=$tryflags])
108 fi
109 done
110 if (test -z "$blibflags"); then
111 AC_MSG_RESULT(not found)
112 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
113 else
114 AC_MSG_RESULT($blibflags)
bd499f9e 115 fi
68ece370 116 LDFLAGS="$saved_LDFLAGS"
e351e493 117 dnl Check for authenticate. Might be in libs.a on older AIXes
118 AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE)],
0764e748 119 [AC_CHECK_LIB(s,authenticate,
e351e493 120 [ AC_DEFINE(WITH_AIXAUTHENTICATE)
0764e748 121 LIBS="$LIBS -ls"
122 ])
123 ])
ba603e06 124 dnl Check for various auth function declarations in headers.
c85ed8e2 125 AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
72ad335d 126 passwdexpired, setauthdb], , , [#include <usersec.h>])
e351e493 127 dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
ba603e06 128 AC_CHECK_DECLS(loginfailed,
e351e493 129 [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
130 AC_TRY_COMPILE(
f58c0e01 131 [#include <usersec.h>],
e351e493 132 [(void)loginfailed("user","host","tty",0);],
133 [AC_MSG_RESULT(yes)
134 AC_DEFINE(AIX_LOGINFAILED_4ARG)],
f58c0e01 135 [AC_MSG_RESULT(no)]
e351e493 136 )],
137 [],
138 [#include <usersec.h>]
139 )
2aa3a16c 140 AC_CHECK_FUNCS(setauthdb)
5ccf88cb 141 check_for_aix_broken_getaddrinfo=1
1352689f 142 AC_DEFINE(BROKEN_REALPATH)
3b8dff69 143 AC_DEFINE(SETEUID_BREAKS_SETUID)
144 AC_DEFINE(BROKEN_SETREUID)
145 AC_DEFINE(BROKEN_SETREGID)
a3cef3ca 146 dnl AIX handles lastlog as part of its login message
147 AC_DEFINE(DISABLE_LASTLOG)
58177c0a 148 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3a2b2b44 149 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
9d6b1b96 150 ;;
3c62e7eb 151*-*-cygwin*)
a52997bd 152 check_for_libcrypt_later=1
ffb8d130 153 LIBS="$LIBS /usr/lib/textmode.o"
3c62e7eb 154 AC_DEFINE(HAVE_CYGWIN)
7043a38d 155 AC_DEFINE(USE_PIPES)
3c62e7eb 156 AC_DEFINE(DISABLE_SHADOW)
3c62e7eb 157 AC_DEFINE(IP_TOS_IS_BROKEN)
3d114925 158 AC_DEFINE(NO_X11_UNIX_SOCKETS)
e6f15ed1 159 AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT)
94d8258b 160 AC_DEFINE(DISABLE_FD_PASSING)
3c62e7eb 161 ;;
d6fdb079 162*-*-dgux*)
163 AC_DEFINE(IP_TOS_IS_BROKEN)
0c6a72a5 164 AC_DEFINE(SETEUID_BREAKS_SETUID)
165 AC_DEFINE(BROKEN_SETREUID)
166 AC_DEFINE(BROKEN_SETREGID)
d6fdb079 167 ;;
39c98ef7 168*-*-darwin*)
33e2e066 169 AC_MSG_CHECKING(if we have working getaddrinfo)
170 AC_TRY_RUN([#include <mach-o/dyld.h>
171main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
172 exit(0);
173 else
174 exit(1);
175}], [AC_MSG_RESULT(working)],
176 [AC_MSG_RESULT(buggy)
177 AC_DEFINE(BROKEN_GETADDRINFO)],
b27e573d 178 [AC_MSG_RESULT(assume it is working)])
635e0c42 179 AC_DEFINE(SETEUID_BREAKS_SETUID)
180 AC_DEFINE(BROKEN_SETREUID)
181 AC_DEFINE(BROKEN_SETREGID)
ff620033 182 AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1)
39c98ef7 183 ;;
6e879cb4 184*-*-hpux10.26)
185 if test -z "$GCC"; then
186 CFLAGS="$CFLAGS -Ae"
187 fi
188 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
189 IPADDR_IN_DISPLAY=yes
190 AC_DEFINE(HAVE_SECUREWARE)
191 AC_DEFINE(USE_PIPES)
192 AC_DEFINE(LOGIN_NO_ENDOPT)
193 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3e6e3da0 194 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
3a2b2b44 195 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
f75ca46d 196 LIBS="$LIBS -lsec -lsecpw"
197 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
6e879cb4 198 disable_ptmx_check=yes
199 ;;
a7effaac 200*-*-hpux10*)
201 if test -z "$GCC"; then
fc1e8bf4 202 CFLAGS="$CFLAGS -Ae"
a7effaac 203 fi
28564873 204 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
44839801 205 IPADDR_IN_DISPLAY=yes
137d7b6c 206 AC_DEFINE(USE_PIPES)
a2572aa7 207 AC_DEFINE(LOGIN_NO_ENDOPT)
208 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3e6e3da0 209 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
3a2b2b44 210 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
f75ca46d 211 LIBS="$LIBS -lsec"
212 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
a7effaac 213 ;;
2b763e31 214*-*-hpux11*)
b8fea62d 215 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
44839801 216 IPADDR_IN_DISPLAY=yes
adeebd37 217 AC_DEFINE(PAM_SUN_CODEBASE)
2b10f47a 218 AC_DEFINE(USE_PIPES)
a2572aa7 219 AC_DEFINE(LOGIN_NO_ENDOPT)
220 AC_DEFINE(LOGIN_NEEDS_UTMPX)
764d4113 221 AC_DEFINE(DISABLE_UTMP)
3e6e3da0 222 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
3a2b2b44 223 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
b6610e8f 224 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
2fe51906 225 check_for_hpux_broken_getaddrinfo=1
b29fd59f 226 check_for_conflicting_getspnam=1
f75ca46d 227 LIBS="$LIBS -lsec"
228 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
2b763e31 229 ;;
d94aa2ae 230*-*-irix5*)
6ac7829a 231 PATH="$PATH:/usr/etc"
416ed5a7 232 AC_DEFINE(BROKEN_INET_NTOA)
cb433561 233 AC_DEFINE(SETEUID_BREAKS_SETUID)
234 AC_DEFINE(BROKEN_SETREUID)
235 AC_DEFINE(BROKEN_SETREGID)
0e8f4eba 236 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 237 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
b9795b89 238 ;;
239*-*-irix6*)
6ac7829a 240 PATH="$PATH:/usr/etc"
3206bb3b 241 AC_DEFINE(WITH_IRIX_ARRAY)
242 AC_DEFINE(WITH_IRIX_PROJECT)
243 AC_DEFINE(WITH_IRIX_AUDIT)
b5171f93 244 AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS)])
416ed5a7 245 AC_DEFINE(BROKEN_INET_NTOA)
412c0eaa 246 AC_DEFINE(SETEUID_BREAKS_SETUID)
247 AC_DEFINE(BROKEN_SETREUID)
248 AC_DEFINE(BROKEN_SETREGID)
3d59832f 249 AC_DEFINE(BROKEN_UPDWTMPX)
0e8f4eba 250 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 251 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
d94aa2ae 252 ;;
5cdfe03f 253*-*-linux*)
254 no_dev_ptmx=1
717057b6 255 check_for_libcrypt_later=1
eacb954e 256 check_for_openpty_ctty_bug=1
80faa19f 257 AC_DEFINE(DONT_TRY_OTHER_AF)
a8545c6c 258 AC_DEFINE(PAM_TTY_KLUDGE)
b90bed9f 259 AC_DEFINE(LOCKED_PASSWD_PREFIX, "!")
3a2b2b44 260 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
cd698186 261 AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM)
b6610e8f 262 AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
263 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
80faa19f 264 inet6_default_4in6=yes
bf7c1e6c 265 case `uname -r` in
ad84c479 266 1.*|2.0.*)
bf7c1e6c 267 AC_DEFINE(BROKEN_CMSG_TYPE)
268 ;;
bf7c1e6c 269 esac
5cdfe03f 270 ;;
66d6c27e 271mips-sony-bsd|mips-sony-newsos4)
272 AC_DEFINE(HAVE_NEWS4)
273 SONY=1
66d6c27e 274 ;;
d468fc76 275*-*-netbsd*)
33e2e066 276 check_for_libcrypt_before=1
82f4e93d 277 if test "x$withval" != "xno" ; then
e6354014 278 need_dash_r=1
279 fi
d468fc76 280 ;;
86b416a7 281*-*-freebsd*)
282 check_for_libcrypt_later=1
283 ;;
8707b7eb 284*-*-bsdi*)
285 AC_DEFINE(SETEUID_BREAKS_SETUID)
286 AC_DEFINE(BROKEN_SETREUID)
287 AC_DEFINE(BROKEN_SETREGID)
288 ;;
729bfe59 289*-next-*)
729bfe59 290 conf_lastlog_location="/usr/adm/lastlog"
698d107e 291 conf_utmp_location=/etc/utmp
292 conf_wtmp_location=/usr/adm/wtmp
293 MAIL=/usr/spool/mail
729bfe59 294 AC_DEFINE(HAVE_NEXT)
443172c4 295 AC_DEFINE(BROKEN_REALPATH)
00937921 296 AC_DEFINE(USE_PIPES)
86b416a7 297 AC_DEFINE(BROKEN_SAVED_UIDS)
729bfe59 298 ;;
9d6b1b96 299*-*-solaris*)
82f4e93d 300 if test "x$withval" != "xno" ; then
010e9d5b 301 need_dash_r=1
302 fi
adeebd37 303 AC_DEFINE(PAM_SUN_CODEBASE)
7e2d5fa4 304 AC_DEFINE(LOGIN_NEEDS_UTMPX)
305 AC_DEFINE(LOGIN_NEEDS_TERM)
7f0a4ff1 306 AC_DEFINE(PAM_TTY_KLUDGE)
059d3165 307 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID)
3e6e3da0 308 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
ad84c479 309 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
310 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 311 external_path_file=/etc/default/login
1d7b9b20 312 # hardwire lastlog location (can't detect it on some versions)
313 conf_lastlog_location="/var/adm/lastlog"
32c80420 314 AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
315 sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
316 if test "$sol2ver" -ge 8; then
317 AC_MSG_RESULT(yes)
318 AC_DEFINE(DISABLE_UTMP)
319 AC_DEFINE(DISABLE_WTMP)
320 else
321 AC_MSG_RESULT(no)
322 fi
9d6b1b96 323 ;;
a423beaf 324*-*-sunos4*)
0c2fb82f 325 CPPFLAGS="$CPPFLAGS -DSUNOS4"
a423beaf 326 AC_CHECK_FUNCS(getpwanam)
adeebd37 327 AC_DEFINE(PAM_SUN_CODEBASE)
32eec038 328 conf_utmp_location=/etc/utmp
329 conf_wtmp_location=/var/adm/wtmp
330 conf_lastlog_location=/var/adm/lastlog
137d7b6c 331 AC_DEFINE(USE_PIPES)
a423beaf 332 ;;
6f68f28a 333*-ncr-sysv*)
98a7c37b 334 LIBS="$LIBS -lc89"
29525240 335 AC_DEFINE(USE_PIPES)
eabb99c6 336 AC_DEFINE(SSHD_ACQUIRES_CTTY)
6fb3618d 337 AC_DEFINE(SETEUID_BREAKS_SETUID)
338 AC_DEFINE(BROKEN_SETREUID)
339 AC_DEFINE(BROKEN_SETREGID)
6f68f28a 340 ;;
132dd316 341*-sni-sysv*)
c8c15bcb 342 # /usr/ucblib MUST NOT be searched on ReliantUNIX
e2798e96 343 AC_CHECK_LIB(dl, dlsym, ,)
85cf54ec 344 # -lresolv needs to be at then end of LIBS or DNS lookups break
345 AC_CHECK_LIB(res_query, resolv, [ LIBS="$LIBS -lresolv" ])
9548d6c8 346 IPADDR_IN_DISPLAY=yes
347 AC_DEFINE(USE_PIPES)
132dd316 348 AC_DEFINE(IP_TOS_IS_BROKEN)
605369bb 349 AC_DEFINE(SETEUID_BREAKS_SETUID)
350 AC_DEFINE(BROKEN_SETREUID)
351 AC_DEFINE(BROKEN_SETREGID)
eabb99c6 352 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 353 external_path_file=/etc/default/login
c8c15bcb 354 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
355 # Attention: always take care to bind libsocket and libnsl before libc,
356 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
132dd316 357 ;;
79a7ba96 358# UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
77bb0bca 359*-*-sysv4.2*)
ed6553e2 360 AC_DEFINE(USE_PIPES)
7ed101c0 361 AC_DEFINE(SETEUID_BREAKS_SETUID)
362 AC_DEFINE(BROKEN_SETREUID)
363 AC_DEFINE(BROKEN_SETREGID)
77bb0bca 364 ;;
79a7ba96 365# UnixWare 7.x, OpenUNIX 8
77bb0bca 366*-*-sysv5*)
ed6553e2 367 AC_DEFINE(USE_PIPES)
7ed101c0 368 AC_DEFINE(SETEUID_BREAKS_SETUID)
369 AC_DEFINE(BROKEN_SETREUID)
370 AC_DEFINE(BROKEN_SETREGID)
77bb0bca 371 ;;
9d6b1b96 372*-*-sysv*)
9d6b1b96 373 ;;
79a7ba96 374# SCO UNIX and OEM versions of SCO UNIX
77bb0bca 375*-*-sco3.2v4*)
11cf4f1f 376 AC_MSG_ERROR("This Platform is no longer supported.")
77bb0bca 377 ;;
79a7ba96 378# SCO OpenServer 5.x
77bb0bca 379*-*-sco3.2v5*)
21710e39 380 if test -z "$GCC"; then
381 CFLAGS="$CFLAGS -belf"
382 fi
ed6553e2 383 LIBS="$LIBS -lprot -lx -ltinfo -lm"
509b1f88 384 no_dev_ptmx=1
ed6553e2 385 AC_DEFINE(USE_PIPES)
6e879cb4 386 AC_DEFINE(HAVE_SECUREWARE)
d287c664 387 AC_DEFINE(DISABLE_SHADOW)
94d8258b 388 AC_DEFINE(DISABLE_FD_PASSING)
7ed101c0 389 AC_DEFINE(SETEUID_BREAKS_SETUID)
390 AC_DEFINE(BROKEN_SETREUID)
391 AC_DEFINE(BROKEN_SETREGID)
bcebad47 392 AC_DEFINE(WITH_ABBREV_NO_TTY)
34f2baf0 393 AC_DEFINE(BROKEN_UPDWTMPX)
3ade3b57 394 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
aca75d94 395 AC_CHECK_FUNCS(getluid setluid)
533875af 396 MANTYPE=man
a3245b92 397 TEST_SHELL=ksh
509b1f88 398 ;;
ccbb983c 399*-*-unicosmk*)
c1ad5966 400 AC_DEFINE(NO_SSH_LASTLOG)
401 AC_DEFINE(SETEUID_BREAKS_SETUID)
402 AC_DEFINE(BROKEN_SETREUID)
403 AC_DEFINE(BROKEN_SETREGID)
ccbb983c 404 AC_DEFINE(USE_PIPES)
405 AC_DEFINE(DISABLE_FD_PASSING)
406 LDFLAGS="$LDFLAGS"
407 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
408 MANTYPE=cat
d262b7f2 409 ;;
7b9a8c6e 410*-*-unicosmp*)
c1ad5966 411 AC_DEFINE(SETEUID_BREAKS_SETUID)
412 AC_DEFINE(BROKEN_SETREUID)
413 AC_DEFINE(BROKEN_SETREGID)
7b9a8c6e 414 AC_DEFINE(WITH_ABBREV_NO_TTY)
415 AC_DEFINE(USE_PIPES)
416 AC_DEFINE(DISABLE_FD_PASSING)
417 LDFLAGS="$LDFLAGS"
c1ad5966 418 LIBS="$LIBS -lgen -lacid -ldb"
7b9a8c6e 419 MANTYPE=cat
420 ;;
ca5c7d6a 421*-*-unicos*)
c1ad5966 422 AC_DEFINE(SETEUID_BREAKS_SETUID)
423 AC_DEFINE(BROKEN_SETREUID)
424 AC_DEFINE(BROKEN_SETREGID)
ca5c7d6a 425 AC_DEFINE(USE_PIPES)
94d8258b 426 AC_DEFINE(DISABLE_FD_PASSING)
ef51930f 427 AC_DEFINE(NO_SSH_LASTLOG)
ccbb983c 428 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
429 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
430 MANTYPE=cat
a704dd54 431 ;;
4d33e531 432*-dec-osf*)
99c8ddac 433 AC_MSG_CHECKING(for Digital Unix SIA)
434 no_osfsia=""
435 AC_ARG_WITH(osfsia,
436 [ --with-osfsia Enable Digital Unix SIA],
437 [
438 if test "x$withval" = "xno" ; then
439 AC_MSG_RESULT(disabled)
440 no_osfsia=1
441 fi
442 ],
443 )
444 if test -z "$no_osfsia" ; then
4d33e531 445 if test -f /etc/sia/matrix.conf; then
446 AC_MSG_RESULT(yes)
447 AC_DEFINE(HAVE_OSF_SIA)
448 AC_DEFINE(DISABLE_LOGIN)
58d0df4e 449 AC_DEFINE(DISABLE_FD_PASSING)
4d33e531 450 LIBS="$LIBS -lsecurity -ldb -lm -laud"
451 else
452 AC_MSG_RESULT(no)
dbf8efb3 453 AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin")
4d33e531 454 fi
455 fi
a6e67b60 456 AC_DEFINE(BROKEN_GETADDRINFO)
f4f2ff4f 457 AC_DEFINE(SETEUID_BREAKS_SETUID)
08da2d08 458 AC_DEFINE(BROKEN_SETREUID)
459 AC_DEFINE(BROKEN_SETREGID)
4d33e531 460 ;;
41cb4569 461
462*-*-nto-qnx)
463 AC_DEFINE(USE_PIPES)
464 AC_DEFINE(NO_X11_UNIX_SOCKETS)
465 AC_DEFINE(MISSING_NFDBITS)
466 AC_DEFINE(MISSING_HOWMANY)
467 AC_DEFINE(MISSING_FD_MASK)
468 ;;
a7effaac 469esac
470
8e7b16f8 471# Allow user to specify flags
472AC_ARG_WITH(cflags,
473 [ --with-cflags Specify additional flags to pass to compiler],
474 [
6cf0200f 475 if test -n "$withval" && test "x$withval" != "xno" && \
476 test "x${withval}" != "xyes"; then
8e7b16f8 477 CFLAGS="$CFLAGS $withval"
478 fi
82f4e93d 479 ]
8e7b16f8 480)
0c2fb82f 481AC_ARG_WITH(cppflags,
482 [ --with-cppflags Specify additional flags to pass to preprocessor] ,
483 [
6cf0200f 484 if test -n "$withval" && test "x$withval" != "xno" && \
485 test "x${withval}" != "xyes"; then
0c2fb82f 486 CPPFLAGS="$CPPFLAGS $withval"
487 fi
488 ]
489)
8e7b16f8 490AC_ARG_WITH(ldflags,
97b378bf 491 [ --with-ldflags Specify additional flags to pass to linker],
8e7b16f8 492 [
6cf0200f 493 if test -n "$withval" && test "x$withval" != "xno" && \
494 test "x${withval}" != "xyes"; then
8e7b16f8 495 LDFLAGS="$LDFLAGS $withval"
496 fi
82f4e93d 497 ]
8e7b16f8 498)
499AC_ARG_WITH(libs,
500 [ --with-libs Specify additional libraries to link with],
501 [
6cf0200f 502 if test -n "$withval" && test "x$withval" != "xno" && \
503 test "x${withval}" != "xyes"; then
8e7b16f8 504 LIBS="$LIBS $withval"
505 fi
82f4e93d 506 ]
8e7b16f8 507)
508
c5829391 509AC_MSG_CHECKING(compiler and flags for sanity)
479cece8 510AC_RUN_IFELSE(
511 [AC_LANG_SOURCE([
c5829391 512#include <stdio.h>
513int main(){exit(0);}
479cece8 514 ])],
c5829391 515 [ AC_MSG_RESULT(yes) ],
516 [
517 AC_MSG_RESULT(no)
518 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
1a01a50c 519 ],
520 [ AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
c5829391 521)
522
ddceb1c8 523# Checks for header files.
419e26e7 524AC_CHECK_HEADERS(bstring.h crypt.h dirent.h endian.h features.h \
525 floatingpoint.h getopt.h glob.h ia.h lastlog.h limits.h login.h \
526 login_cap.h maillock.h ndir.h netdb.h netgroup.h \
2511d104 527 netinet/in_systm.h pam/pam_appl.h paths.h pty.h readpassphrase.h \
5bbbc661 528 rpc/types.h security/pam_appl.h shadow.h stddef.h stdint.h \
419e26e7 529 strings.h sys/dir.h sys/strtio.h sys/audit.h sys/bitypes.h \
530 sys/bsdtty.h sys/cdefs.h sys/mman.h sys/ndir.h sys/prctl.h \
765a24cd 531 sys/pstat.h sys/select.h sys/stat.h sys/stream.h \
419e26e7 532 sys/stropts.h sys/sysmacros.h sys/time.h sys/timers.h sys/un.h \
533 time.h tmpdir.h ttyent.h usersec.h util.h utime.h utmp.h utmpx.h vis.h)
ddceb1c8 534
765a24cd 535# sys/ptms.h requires sys/stream.h to be included first on Solaris
536AC_CHECK_HEADERS(sys/ptms.h, [], [], [
537#ifdef HAVE_SYS_STREAM_H
538# include <sys/stream.h>
539#endif
540])
541
a0391976 542# Checks for libraries.
98a7c37b 543AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
544AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
2c523de9 545
446227d6 546dnl IRIX and Solaris 2.5.1 have dirname() in libgen
547AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
548 AC_CHECK_LIB(gen, dirname,[
549 AC_CACHE_CHECK([for broken dirname],
550 ac_cv_have_broken_dirname, [
551 save_LIBS="$LIBS"
552 LIBS="$LIBS -lgen"
553 AC_TRY_RUN(
554 [
555#include <libgen.h>
556#include <string.h>
557
558int main(int argc, char **argv) {
559 char *s, buf[32];
560
561 strncpy(buf,"/etc", 32);
562 s = dirname(buf);
563 if (!s || strncmp(s, "/", 32) != 0) {
564 exit(1);
565 } else {
566 exit(0);
567 }
568}
569 ],
570 [ ac_cv_have_broken_dirname="no" ],
571 [ ac_cv_have_broken_dirname="yes" ]
572 )
573 LIBS="$save_LIBS"
574 ])
575 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
576 LIBS="$LIBS -lgen"
577 AC_DEFINE(HAVE_DIRNAME)
578 AC_CHECK_HEADERS(libgen.h)
579 fi
580 ])
581])
582
583AC_CHECK_FUNC(getspnam, ,
584 AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
585AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME))
586
98a7c37b 587dnl zlib is required
588AC_ARG_WITH(zlib,
589 [ --with-zlib=PATH Use zlib in PATH],
6dd05556 590 [ if test "x$withval" = "xno" ; then
591 AC_MSG_ERROR([*** zlib is required ***])
592 elif test "x$withval" != "xyes"; then
98a7c37b 593 if test -d "$withval/lib"; then
594 if test -n "${need_dash_r}"; then
5a162955 595 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 596 else
5a162955 597 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 598 fi
599 else
600 if test -n "${need_dash_r}"; then
5a162955 601 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 602 else
5a162955 603 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 604 fi
605 fi
606 if test -d "$withval/include"; then
5a162955 607 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 608 else
5a162955 609 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 610 fi
6dd05556 611 fi ]
98a7c37b 612)
613
0a15d73b 614AC_CHECK_LIB(z, deflate, ,
615 [
616 saved_CPPFLAGS="$CPPFLAGS"
617 saved_LDFLAGS="$LDFLAGS"
618 save_LIBS="$LIBS"
619 dnl Check default zlib install dir
620 if test -n "${need_dash_r}"; then
621 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
622 else
623 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
624 fi
625 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
626 LIBS="$LIBS -lz"
627 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
628 [
629 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
630 ]
631 )
632 ]
633)
4ad65809 634AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
8068d564 635
636AC_ARG_WITH(zlib-version-check,
637 [ --without-zlib-version-check Disable zlib version check],
638 [ if test "x$withval" = "xno" ; then
639 zlib_check_nonfatal=1
640 fi
641 ]
642)
643
4ad65809 644AC_MSG_CHECKING(for zlib 1.1.4 or greater)
479cece8 645AC_RUN_IFELSE([AC_LANG_SOURCE([[
4ad65809 646#include <zlib.h>
647int main()
648{
649 int a, b, c, v;
650 if (sscanf(ZLIB_VERSION, "%d.%d.%d", &a, &b, &c) != 3)
651 exit(1);
652 v = a*1000000 + b*1000 + c;
653 if (v >= 1001004)
654 exit(0);
655 exit(2);
656}
479cece8 657 ]])],
4ad65809 658 AC_MSG_RESULT(yes),
659 [ AC_MSG_RESULT(no)
8068d564 660 if test -z "$zlib_check_nonfatal" ; then
661 AC_MSG_ERROR([*** zlib too old - check config.log ***
662Your reported zlib version has known security problems. It's possible your
663vendor has fixed these problems without changing the version number. If you
664are sure this is the case, you can disable the check by running
665"./configure --without-zlib-version-check".
666If you are in doubt, upgrade zlib to version 1.1.4 or greater.])
667 else
668 AC_MSG_WARN([zlib version may have security problems])
669 fi
1a01a50c 670 ],
671 [ AC_MSG_WARN([cross compiling: not checking zlib version]) ]
4ad65809 672)
48e7916f 673
2c523de9 674dnl UnixWare 2.x
aff51935 675AC_CHECK_FUNC(strcasecmp,
2c523de9 676 [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
677)
aff51935 678AC_CHECK_FUNC(utimes,
cda1ebcb 679 [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
680 LIBS="$LIBS -lc89"]) ]
2c523de9 681)
4cca272e 682
7c6d759d 683dnl Checks for libutil functions
684AC_CHECK_HEADERS(libutil.h)
685AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN)])
686AC_CHECK_FUNCS(logout updwtmp logwtmp)
687
a738c3b0 688AC_FUNC_STRFTIME
689
84ceda19 690# Check for ALTDIRFUNC glob() extension
691AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
692AC_EGREP_CPP(FOUNDIT,
693 [
694 #include <glob.h>
695 #ifdef GLOB_ALTDIRFUNC
696 FOUNDIT
697 #endif
aff51935 698 ],
84ceda19 699 [
700 AC_DEFINE(GLOB_HAS_ALTDIRFUNC)
701 AC_MSG_RESULT(yes)
702 ],
703 [
704 AC_MSG_RESULT(no)
705 ]
706)
4cca272e 707
40849fdb 708# Check for g.gl_matchc glob() extension
709AC_MSG_CHECKING(for gl_matchc field in glob_t)
710AC_EGREP_CPP(FOUNDIT,
aff51935 711 [
712 #include <glob.h>
40849fdb 713 int main(void){glob_t g; g.gl_matchc = 1;}
aff51935 714 ],
715 [
716 AC_DEFINE(GLOB_HAS_GL_MATCHC)
717 AC_MSG_RESULT(yes)
718 ],
719 [
720 AC_MSG_RESULT(no)
721 ]
40849fdb 722)
723
edbe6722 724AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
1a01a50c 725AC_RUN_IFELSE(
479cece8 726 [AC_LANG_SOURCE([[
edbe6722 727#include <sys/types.h>
728#include <dirent.h>
aec4cb4f 729int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
479cece8 730 ]])],
aff51935 731 [AC_MSG_RESULT(yes)],
edbe6722 732 [
733 AC_MSG_RESULT(no)
734 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
1a01a50c 735 ],
82f4e93d 736 [
1a01a50c 737 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
738 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
edbe6722 739 ]
740)
741
419e26e7 742AC_MSG_CHECKING([for /proc/pid/fd directory])
743if test -d "/proc/$$/fd" ; then
744 AC_DEFINE(HAVE_PROC_PID)
745 AC_MSG_RESULT(yes)
746else
747 AC_MSG_RESULT(no)
748fi
749
278588d8 750# Check whether user wants S/Key support
aff51935 751SKEY_MSG="no"
278588d8 752AC_ARG_WITH(skey,
6ff3d0dc 753 [ --with-skey[[=PATH]] Enable S/Key support (optionally in PATH)],
278588d8 754 [
755 if test "x$withval" != "xno" ; then
756
757 if test "x$withval" != "xyes" ; then
758 CPPFLAGS="$CPPFLAGS -I${withval}/include"
759 LDFLAGS="$LDFLAGS -L${withval}/lib"
760 fi
761
762 AC_DEFINE(SKEY)
763 LIBS="-lskey $LIBS"
aff51935 764 SKEY_MSG="yes"
82f4e93d 765
ddceb1c8 766 AC_MSG_CHECKING([for s/key support])
767 AC_TRY_RUN(
768 [
769#include <stdio.h>
770#include <skey.h>
aec4cb4f 771int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
ddceb1c8 772 ],
773 [AC_MSG_RESULT(yes)],
278588d8 774 [
ddceb1c8 775 AC_MSG_RESULT(no)
278588d8 776 AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
777 ])
141fc639 778 AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
779 AC_TRY_COMPILE(
780 [#include <stdio.h>
781 #include <skey.h>],
782 [(void)skeychallenge(NULL,"name","",0);],
783 [AC_MSG_RESULT(yes)
784 AC_DEFINE(SKEYCHALLENGE_4ARG)],
785 [AC_MSG_RESULT(no)]
786 )
278588d8 787 fi
788 ]
789)
790
791# Check whether user wants TCP wrappers support
98a7c37b 792TCPW_MSG="no"
278588d8 793AC_ARG_WITH(tcp-wrappers,
6ff3d0dc 794 [ --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
278588d8 795 [
796 if test "x$withval" != "xno" ; then
797 saved_LIBS="$LIBS"
98a7c37b 798 saved_LDFLAGS="$LDFLAGS"
799 saved_CPPFLAGS="$CPPFLAGS"
4b492aab 800 if test -n "${withval}" && \
6cf0200f 801 test "x${withval}" != "xyes"; then
98a7c37b 802 if test -d "${withval}/lib"; then
803 if test -n "${need_dash_r}"; then
5a162955 804 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 805 else
5a162955 806 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 807 fi
808 else
809 if test -n "${need_dash_r}"; then
5a162955 810 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 811 else
5a162955 812 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 813 fi
814 fi
815 if test -d "${withval}/include"; then
5a162955 816 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 817 else
5a162955 818 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 819 fi
98a7c37b 820 fi
ddceb1c8 821 LIBWRAP="-lwrap"
822 LIBS="$LIBWRAP $LIBS"
278588d8 823 AC_MSG_CHECKING(for libwrap)
824 AC_TRY_LINK(
825 [
77f09220 826#include <sys/types.h>
827#include <sys/socket.h>
828#include <netinet/in.h>
278588d8 829#include <tcpd.h>
830 int deny_severity = 0, allow_severity = 0;
831 ],
832 [hosts_access(0);],
833 [
834 AC_MSG_RESULT(yes)
835 AC_DEFINE(LIBWRAP)
ddceb1c8 836 AC_SUBST(LIBWRAP)
98a7c37b 837 TCPW_MSG="yes"
278588d8 838 ],
839 [
840 AC_MSG_ERROR([*** libwrap missing])
841 ]
842 )
ddceb1c8 843 LIBS="$saved_LIBS"
278588d8 844 fi
845 ]
846)
847
59031773 848# Check whether user wants libedit support
849LIBEDIT_MSG="no"
850AC_ARG_WITH(libedit,
6ff3d0dc 851 [ --with-libedit[[=PATH]] Enable libedit support for sftp],
59031773 852 [ if test "x$withval" != "xno" ; then
737edf04 853 if test "x$withval" != "xyes"; then
854 CPPFLAGS="$CPPFLAGS -I$withval/include"
855 LDFLAGS="$LDFLAGS -L$withval/lib"
856 fi
59031773 857 AC_CHECK_LIB(edit, el_init,
858 [ AC_DEFINE(USE_LIBEDIT, [], [Use libedit for sftp])
859 LIBEDIT="-ledit -lcurses"
860 LIBEDIT_MSG="yes"
861 AC_SUBST(LIBEDIT)
862 ],
737edf04 863 [ AC_MSG_ERROR(libedit not found) ],
864 [ -lcurses ]
59031773 865 )
866 fi ]
867)
868
7b578f7d 869AUDIT_MODULE=none
870AC_ARG_WITH(audit,
871 [ --with-audit=module Enable EXPERIMENTAL audit support (modules=debug,bsm)],
872 [
873 AC_MSG_CHECKING(for supported audit module)
874 case "$withval" in
875 bsm)
876 AC_MSG_RESULT(bsm)
877 AUDIT_MODULE=bsm
878 dnl Checks for headers, libs and functions
879 AC_CHECK_HEADERS(bsm/audit.h, [],
880 [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)])
881 AC_CHECK_LIB(bsm, getaudit, [],
882 [AC_MSG_ERROR(BSM enabled and required library not found)])
883 AC_CHECK_FUNCS(getaudit, [],
884 [AC_MSG_ERROR(BSM enabled and required function not found)])
885 # These are optional
7939c496 886 AC_CHECK_FUNCS(getaudit_addr)
7b578f7d 887 AC_DEFINE(USE_BSM_AUDIT, [], [Use BSM audit module])
888 ;;
889 debug)
890 AUDIT_MODULE=debug
891 AC_MSG_RESULT(debug)
892 AC_DEFINE(SSH_AUDIT_EVENTS, [], Use audit debugging module)
893 ;;
894 *)
895 AC_MSG_ERROR([Unknown audit module $withval])
896 ;;
897 esac ]
898)
899
19160674 900dnl Checks for library functions. Please keep in alphabetical order
901AC_CHECK_FUNCS(\
2909d712 902 arc4random __b64_ntop b64_ntop __b64_pton b64_pton bcopy \
667abcc6 903 bindresvport_sa clock closefrom dirfd fchdir fchmod fchown \
904 freeaddrinfo futimes getaddrinfo getcwd getgrouplist getnameinfo \
905 getopt getpeereid _getpty getrlimit getttyent glob inet_aton \
19160674 906 inet_ntoa inet_ntop innetgr login_getcapbool md5_crypt memmove \
79d4fc55 907 mkdtemp mmap ngetaddrinfo nsleep ogetaddrinfo openlog_r openpty \
e7f6070d 908 pstat prctl readpassphrase realpath recvmsg rresvport_af sendmsg \
79d4fc55 909 setdtablesize setegid setenv seteuid setgroups setlogin setpcred \
3f176010 910 setproctitle setregid setreuid setrlimit \
688eed4a 911 setsid setvbuf sigaction sigvec snprintf socketpair strerror \
7111a85c 912 strlcat strlcpy strmode strnvis strtoul sysconf tcgetpgrp \
351f44a0 913 truncate unsetenv updwtmpx utimes vhangup vsnprintf waitpid \
19160674 914)
98a7c37b 915
1a086f97 916# IRIX has a const char return value for gai_strerror()
917AC_CHECK_FUNCS(gai_strerror,[
918 AC_DEFINE(HAVE_GAI_STRERROR)
919 AC_TRY_COMPILE([
920#include <sys/types.h>
921#include <sys/socket.h>
922#include <netdb.h>
923
924const char *gai_strerror(int);],[
925char *str;
926
927str = gai_strerror(0);],[
928 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
929 [Define if gai_strerror() returns const char *])])])
930
92b1decf 931AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP))
932
309709db 933dnl Make sure prototypes are defined for these before using them.
08412d26 934AC_CHECK_DECL(strsep, [AC_CHECK_FUNCS(strsep)])
309709db 935AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
08412d26 936
3490699c 937dnl tcsendbreak might be a macro
938AC_CHECK_DECL(tcsendbreak,
939 [AC_DEFINE(HAVE_TCSENDBREAK)],
aff51935 940 [AC_CHECK_FUNCS(tcsendbreak)],
3490699c 941 [#include <termios.h>]
942)
943
41e0e158 944AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
945
3f176010 946AC_CHECK_FUNCS(setresuid, [
947 dnl Some platorms have setresuid that isn't implemented, test for this
948 AC_MSG_CHECKING(if setresuid seems to work)
479cece8 949 AC_RUN_IFELSE(
950 [AC_LANG_SOURCE([[
9a3fe0e2 951#include <stdlib.h>
952#include <errno.h>
953int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 954 ]])],
3f176010 955 [AC_MSG_RESULT(yes)],
24a9171d 956 [AC_DEFINE(BROKEN_SETRESUID)
1a01a50c 957 AC_MSG_RESULT(not implemented)],
958 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 959 )
960])
9a3fe0e2 961
3f176010 962AC_CHECK_FUNCS(setresgid, [
963 dnl Some platorms have setresgid that isn't implemented, test for this
964 AC_MSG_CHECKING(if setresgid seems to work)
479cece8 965 AC_RUN_IFELSE(
966 [AC_LANG_SOURCE([[
9a3fe0e2 967#include <stdlib.h>
968#include <errno.h>
969int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 970 ]])],
3f176010 971 [AC_MSG_RESULT(yes)],
972 [AC_DEFINE(BROKEN_SETRESGID)
1a01a50c 973 AC_MSG_RESULT(not implemented)],
974 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 975 )
976])
9a3fe0e2 977
2e73a022 978dnl Checks for time functions
1d7b9b20 979AC_CHECK_FUNCS(gettimeofday time)
2e73a022 980dnl Checks for utmp functions
b03bd394 981AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1d7b9b20 982AC_CHECK_FUNCS(utmpname)
2e73a022 983dnl Checks for utmpx functions
b03bd394 984AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1d7b9b20 985AC_CHECK_FUNCS(setutxent utmpxname)
76cd7316 986
aff51935 987AC_CHECK_FUNC(daemon,
beb43d31 988 [AC_DEFINE(HAVE_DAEMON)],
989 [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
990)
991
aff51935 992AC_CHECK_FUNC(getpagesize,
aa6bd60a 993 [AC_DEFINE(HAVE_GETPAGESIZE)],
994 [AC_CHECK_LIB(ucb, getpagesize, [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
995)
996
2647ae26 997# Check for broken snprintf
998if test "x$ac_cv_func_snprintf" = "xyes" ; then
999 AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1a01a50c 1000 AC_RUN_IFELSE(
479cece8 1001 [AC_LANG_SOURCE([[
2647ae26 1002#include <stdio.h>
aec4cb4f 1003int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
479cece8 1004 ]])],
aff51935 1005 [AC_MSG_RESULT(yes)],
2647ae26 1006 [
1007 AC_MSG_RESULT(no)
1008 AC_DEFINE(BROKEN_SNPRINTF)
1009 AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1a01a50c 1010 ],
1011 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
2647ae26 1012 )
1013fi
1014
2f6f9cff 1015# Check for missing getpeereid (or equiv) support
1016NO_PEERCHECK=""
1017if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1018 AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1019 AC_TRY_COMPILE(
1020 [#include <sys/types.h>
1021 #include <sys/socket.h>],
1022 [int i = SO_PEERCRED;],
1023 [AC_MSG_RESULT(yes)],
1024 [AC_MSG_RESULT(no)
1025 NO_PEERCHECK=1]
1026 )
1027fi
1028
70e7d0b0 1029dnl see whether mkstemp() requires XXXXXX
1030if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1031AC_MSG_CHECKING([for (overly) strict mkstemp])
1032AC_TRY_RUN(
1033 [
1034#include <stdlib.h>
1035main() { char template[]="conftest.mkstemp-test";
1036if (mkstemp(template) == -1)
1037 exit(1);
1038unlink(template); exit(0);
1039}
1040 ],
1041 [
1042 AC_MSG_RESULT(no)
1043 ],
aff51935 1044 [
70e7d0b0 1045 AC_MSG_RESULT(yes)
1046 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1047 ],
1048 [
1049 AC_MSG_RESULT(yes)
1050 AC_DEFINE(HAVE_STRICT_MKSTEMP)
aff51935 1051 ]
70e7d0b0 1052)
1053fi
1054
eacb954e 1055dnl make sure that openpty does not reacquire controlling terminal
1056if test ! -z "$check_for_openpty_ctty_bug"; then
1057 AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1058 AC_TRY_RUN(
1059 [
1060#include <stdio.h>
1061#include <sys/fcntl.h>
1062#include <sys/types.h>
1063#include <sys/wait.h>
1064
1065int
1066main()
1067{
1068 pid_t pid;
1069 int fd, ptyfd, ttyfd, status;
1070
1071 pid = fork();
1072 if (pid < 0) { /* failed */
1073 exit(1);
1074 } else if (pid > 0) { /* parent */
1075 waitpid(pid, &status, 0);
aff51935 1076 if (WIFEXITED(status))
eacb954e 1077 exit(WEXITSTATUS(status));
1078 else
1079 exit(2);
1080 } else { /* child */
1081 close(0); close(1); close(2);
1082 setsid();
1083 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1084 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1085 if (fd >= 0)
1086 exit(3); /* Acquired ctty: broken */
1087 else
1088 exit(0); /* Did not acquire ctty: OK */
1089 }
1090}
1091 ],
1092 [
1093 AC_MSG_RESULT(yes)
1094 ],
1095 [
1096 AC_MSG_RESULT(no)
1097 AC_DEFINE(SSHD_ACQUIRES_CTTY)
1098 ]
1099 )
1100fi
1101
4b492aab 1102if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1103 test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
2fe51906 1104 AC_MSG_CHECKING(if getaddrinfo seems to work)
1105 AC_TRY_RUN(
1106 [
1107#include <stdio.h>
1108#include <sys/socket.h>
1109#include <netdb.h>
1110#include <errno.h>
1111#include <netinet/in.h>
1112
1113#define TEST_PORT "2222"
1114
1115int
1116main(void)
1117{
1118 int err, sock;
1119 struct addrinfo *gai_ai, *ai, hints;
1120 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1121
1122 memset(&hints, 0, sizeof(hints));
1123 hints.ai_family = PF_UNSPEC;
1124 hints.ai_socktype = SOCK_STREAM;
1125 hints.ai_flags = AI_PASSIVE;
1126
1127 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1128 if (err != 0) {
1129 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1130 exit(1);
1131 }
1132
1133 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1134 if (ai->ai_family != AF_INET6)
1135 continue;
1136
1137 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1138 sizeof(ntop), strport, sizeof(strport),
1139 NI_NUMERICHOST|NI_NUMERICSERV);
1140
1141 if (err != 0) {
1142 if (err == EAI_SYSTEM)
1143 perror("getnameinfo EAI_SYSTEM");
1144 else
1145 fprintf(stderr, "getnameinfo failed: %s\n",
1146 gai_strerror(err));
1147 exit(2);
1148 }
1149
1150 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1151 if (sock < 0)
1152 perror("socket");
1153 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1154 if (errno == EBADF)
1155 exit(3);
1156 }
1157 }
1158 exit(0);
1159}
1160 ],
1161 [
1162 AC_MSG_RESULT(yes)
1163 ],
1164 [
1165 AC_MSG_RESULT(no)
1166 AC_DEFINE(BROKEN_GETADDRINFO)
1167 ]
1168 )
1169fi
1170
4b492aab 1171if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1172 test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
5ccf88cb 1173 AC_MSG_CHECKING(if getaddrinfo seems to work)
1174 AC_TRY_RUN(
1175 [
1176#include <stdio.h>
1177#include <sys/socket.h>
1178#include <netdb.h>
1179#include <errno.h>
1180#include <netinet/in.h>
1181
1182#define TEST_PORT "2222"
1183
1184int
1185main(void)
1186{
1187 int err, sock;
1188 struct addrinfo *gai_ai, *ai, hints;
1189 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1190
1191 memset(&hints, 0, sizeof(hints));
1192 hints.ai_family = PF_UNSPEC;
1193 hints.ai_socktype = SOCK_STREAM;
1194 hints.ai_flags = AI_PASSIVE;
1195
1196 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1197 if (err != 0) {
1198 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1199 exit(1);
1200 }
1201
1202 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1203 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1204 continue;
1205
1206 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1207 sizeof(ntop), strport, sizeof(strport),
1208 NI_NUMERICHOST|NI_NUMERICSERV);
1209
1210 if (ai->ai_family == AF_INET && err != 0) {
1211 perror("getnameinfo");
1212 exit(2);
1213 }
1214 }
1215 exit(0);
1216}
1217 ],
1218 [
1219 AC_MSG_RESULT(yes)
1220 AC_DEFINE(AIX_GETNAMEINFO_HACK, [],
1221[Define if you have a getaddrinfo that fails for the all-zeros IPv6 address])
1222 ],
1223 [
1224 AC_MSG_RESULT(no)
1225 AC_DEFINE(BROKEN_GETADDRINFO)
1226 ]
1227 )
1228fi
1229
b29fd59f 1230if test "x$check_for_conflicting_getspnam" = "x1"; then
1231 AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1232 AC_COMPILE_IFELSE(
1233 [
1234#include <shadow.h>
1235int main(void) {exit(0);}
1236 ],
1237 [
1238 AC_MSG_RESULT(no)
1239 ],
1240 [
1241 AC_MSG_RESULT(yes)
1242 AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1243 [Conflicting defs for getspnam])
1244 ]
1245 )
1246fi
1247
7f8f5e00 1248AC_FUNC_GETPGRP
1249
717057b6 1250# Check for PAM libs
cbd7492e 1251PAM_MSG="no"
a0391976 1252AC_ARG_WITH(pam,
717057b6 1253 [ --with-pam Enable PAM support ],
a0391976 1254 [
717057b6 1255 if test "x$withval" != "xno" ; then
2511d104 1256 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
1257 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
717057b6 1258 AC_MSG_ERROR([PAM headers not found])
1259 fi
a0391976 1260
717057b6 1261 AC_CHECK_LIB(dl, dlopen, , )
1262 AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
1263 AC_CHECK_FUNCS(pam_getenvlist)
749560dd 1264 AC_CHECK_FUNCS(pam_putenv)
2b763e31 1265
717057b6 1266 PAM_MSG="yes"
4cb5ffa0 1267
717057b6 1268 AC_DEFINE(USE_PAM)
98f2d9d5 1269 if test $ac_cv_lib_dl_dlopen = yes; then
1270 LIBPAM="-lpam -ldl"
1271 else
1272 LIBPAM="-lpam"
1273 fi
1274 AC_SUBST(LIBPAM)
717057b6 1275 fi
1276 ]
1277)
cbd7492e 1278
717057b6 1279# Check for older PAM
1280if test "x$PAM_MSG" = "xyes" ; then
a0391976 1281 # Check PAM strerror arguments (old PAM)
1282 AC_MSG_CHECKING([whether pam_strerror takes only one argument])
1283 AC_TRY_COMPILE(
1284 [
18ba2aab 1285#include <stdlib.h>
2511d104 1286#if defined(HAVE_SECURITY_PAM_APPL_H)
18ba2aab 1287#include <security/pam_appl.h>
2511d104 1288#elif defined (HAVE_PAM_PAM_APPL_H)
1289#include <pam/pam_appl.h>
1290#endif
aff51935 1291 ],
1292 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
a0391976 1293 [AC_MSG_RESULT(no)],
1294 [
1295 AC_DEFINE(HAVE_OLD_PAM)
1296 AC_MSG_RESULT(yes)
cbd7492e 1297 PAM_MSG="yes (old library)"
a0391976 1298 ]
717057b6 1299 )
a0391976 1300fi
1301
5b991353 1302# Search for OpenSSL
1303saved_CPPFLAGS="$CPPFLAGS"
1304saved_LDFLAGS="$LDFLAGS"
a0391976 1305AC_ARG_WITH(ssl-dir,
1306 [ --with-ssl-dir=PATH Specify path to OpenSSL installation ],
1307 [
e9e4a1c7 1308 if test "x$withval" != "xno" ; then
99eb0f64 1309 case "$withval" in
1310 # Relative paths
1311 ./*|../*) withval="`pwd`/$withval"
1312 esac
5b991353 1313 if test -d "$withval/lib"; then
1314 if test -n "${need_dash_r}"; then
1315 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1316 else
1317 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
d6f13fbb 1318 fi
1319 else
5b991353 1320 if test -n "${need_dash_r}"; then
1321 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1322 else
1323 LDFLAGS="-L${withval} ${LDFLAGS}"
d6f13fbb 1324 fi
1325 fi
5b991353 1326 if test -d "$withval/include"; then
1327 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
d6f13fbb 1328 else
5b991353 1329 CPPFLAGS="-I${withval} ${CPPFLAGS}"
58d100bf 1330 fi
a0391976 1331 fi
5b991353 1332 ]
1333)
5486a457 1334LIBS="-lcrypto $LIBS"
5b991353 1335AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
d45e3d76 1336 [
5b991353 1337 dnl Check default openssl install dir
1338 if test -n "${need_dash_r}"; then
1339 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1340 else
5b991353 1341 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1342 fi
5b991353 1343 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1344 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1345 [
1346 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1347 ]
1348 )
1349 ]
1350)
1351
cd018561 1352# Determine OpenSSL header version
1353AC_MSG_CHECKING([OpenSSL header version])
1a01a50c 1354AC_RUN_IFELSE(
479cece8 1355 [AC_LANG_SOURCE([[
cd018561 1356#include <stdio.h>
1357#include <string.h>
1358#include <openssl/opensslv.h>
1359#define DATA "conftest.sslincver"
1360int main(void) {
aff51935 1361 FILE *fd;
1362 int rc;
cd018561 1363
aff51935 1364 fd = fopen(DATA,"w");
1365 if(fd == NULL)
1366 exit(1);
cd018561 1367
1368 if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1369 exit(1);
1370
1371 exit(0);
1372}
479cece8 1373 ]])],
cd018561 1374 [
1375 ssl_header_ver=`cat conftest.sslincver`
1376 AC_MSG_RESULT($ssl_header_ver)
1377 ],
1378 [
1379 AC_MSG_RESULT(not found)
1380 AC_MSG_ERROR(OpenSSL version header not found.)
1a01a50c 1381 ],
1382 [
1383 AC_MSG_WARN([cross compiling: not checking])
cd018561 1384 ]
1385)
1386
1387# Determine OpenSSL library version
1388AC_MSG_CHECKING([OpenSSL library version])
1a01a50c 1389AC_RUN_IFELSE(
479cece8 1390 [AC_LANG_SOURCE([[
cd018561 1391#include <stdio.h>
1392#include <string.h>
1393#include <openssl/opensslv.h>
1394#include <openssl/crypto.h>
1395#define DATA "conftest.ssllibver"
1396int main(void) {
aff51935 1397 FILE *fd;
1398 int rc;
cd018561 1399
aff51935 1400 fd = fopen(DATA,"w");
1401 if(fd == NULL)
1402 exit(1);
cd018561 1403
1404 if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1405 exit(1);
1406
1407 exit(0);
1408}
479cece8 1409 ]])],
cd018561 1410 [
1411 ssl_library_ver=`cat conftest.ssllibver`
1412 AC_MSG_RESULT($ssl_library_ver)
1413 ],
1414 [
1415 AC_MSG_RESULT(not found)
1416 AC_MSG_ERROR(OpenSSL library not found.)
1a01a50c 1417 ],
1418 [
1419 AC_MSG_WARN([cross compiling: not checking])
cd018561 1420 ]
1421)
58d100bf 1422
9780116c 1423# Sanity check OpenSSL headers
1424AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1a01a50c 1425AC_RUN_IFELSE(
479cece8 1426 [AC_LANG_SOURCE([[
9780116c 1427#include <string.h>
1428#include <openssl/opensslv.h>
aec4cb4f 1429int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
479cece8 1430 ]])],
9780116c 1431 [
1432 AC_MSG_RESULT(yes)
1433 ],
1434 [
1435 AC_MSG_RESULT(no)
e15ba28b 1436 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1437Check config.log for details.
1438Also see contrib/findssl.sh for help identifying header/library mismatches.])
1a01a50c 1439 ],
1440 [
1441 AC_MSG_WARN([cross compiling: not checking])
9780116c 1442 ]
1443)
1444
5486a457 1445# Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1446# because the system crypt() is more featureful.
1447if test "x$check_for_libcrypt_before" = "x1"; then
1448 AC_CHECK_LIB(crypt, crypt)
1449fi
1450
aff51935 1451# Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
8087c5ee 1452# version in OpenSSL.
05114c74 1453if test "x$check_for_libcrypt_later" = "x1"; then
20cad736 1454 AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
717057b6 1455fi
1456
f1b0ecc3 1457
1458### Configure cryptographic random number support
1459
1460# Check wheter OpenSSL seeds itself
1461AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1a01a50c 1462AC_RUN_IFELSE(
479cece8 1463 [AC_LANG_SOURCE([[
f1b0ecc3 1464#include <string.h>
1465#include <openssl/rand.h>
aec4cb4f 1466int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
479cece8 1467 ]])],
f1b0ecc3 1468 [
1469 OPENSSL_SEEDS_ITSELF=yes
1470 AC_MSG_RESULT(yes)
1471 ],
1472 [
1473 AC_MSG_RESULT(no)
1474 # Default to use of the rand helper if OpenSSL doesn't
1475 # seed itself
1476 USE_RAND_HELPER=yes
1a01a50c 1477 ],
1478 [
1479 AC_MSG_WARN([cross compiling: assuming yes])
1480 # This is safe, since all recent OpenSSL versions will
82f4e93d 1481 # complain at runtime if not seeded correctly.
1a01a50c 1482 OPENSSL_SEEDS_ITSELF=yes
f1b0ecc3 1483 ]
1484)
1485
1486
1487# Do we want to force the use of the rand helper?
1488AC_ARG_WITH(rand-helper,
1489 [ --with-rand-helper Use subprocess to gather strong randomness ],
1490 [
1491 if test "x$withval" = "xno" ; then
aff51935 1492 # Force use of OpenSSL's internal RNG, even if
f1b0ecc3 1493 # the previous test showed it to be unseeded.
1494 if test -z "$OPENSSL_SEEDS_ITSELF" ; then
1495 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
1496 OPENSSL_SEEDS_ITSELF=yes
1497 USE_RAND_HELPER=""
1498 fi
1499 else
1500 USE_RAND_HELPER=yes
1501 fi
1502 ],
82f4e93d 1503)
f1b0ecc3 1504
1505# Which randomness source do we use?
4b492aab 1506if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
f1b0ecc3 1507 # OpenSSL only
1508 AC_DEFINE(OPENSSL_PRNG_ONLY)
1509 RAND_MSG="OpenSSL internal ONLY"
1510 INSTALL_SSH_RAND_HELPER=""
70e2f2f3 1511elif test ! -z "$USE_RAND_HELPER" ; then
1512 # install rand helper
f1b0ecc3 1513 RAND_MSG="ssh-rand-helper"
1514 INSTALL_SSH_RAND_HELPER="yes"
1515fi
1516AC_SUBST(INSTALL_SSH_RAND_HELPER)
1517
1518### Configuration of ssh-rand-helper
1519
1520# PRNGD TCP socket
1521AC_ARG_WITH(prngd-port,
1522 [ --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT],
1523 [
eb5d7ff6 1524 case "$withval" in
1525 no)
1526 withval=""
1527 ;;
1528 [[0-9]]*)
1529 ;;
1530 *)
1531 AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
1532 ;;
1533 esac
1534 if test ! -z "$withval" ; then
f1b0ecc3 1535 PRNGD_PORT="$withval"
1536 AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT)
1537 fi
1538 ]
1539)
1540
1541# PRNGD Unix domain socket
1542AC_ARG_WITH(prngd-socket,
1543 [ --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
1544 [
eb5d7ff6 1545 case "$withval" in
1546 yes)
f1b0ecc3 1547 withval="/var/run/egd-pool"
eb5d7ff6 1548 ;;
1549 no)
1550 withval=""
1551 ;;
1552 /*)
1553 ;;
1554 *)
1555 AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
1556 ;;
1557 esac
1558
1559 if test ! -z "$withval" ; then
f1b0ecc3 1560 if test ! -z "$PRNGD_PORT" ; then
1561 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
1562 fi
906e811b 1563 if test ! -r "$withval" ; then
f1b0ecc3 1564 AC_MSG_WARN(Entropy socket is not readable)
1565 fi
1566 PRNGD_SOCKET="$withval"
1567 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1568 fi
ddceb1c8 1569 ],
1570 [
1571 # Check for existing socket only if we don't have a random device already
1572 if test "$USE_RAND_HELPER" = yes ; then
1573 AC_MSG_CHECKING(for PRNGD/EGD socket)
1574 # Insert other locations here
1575 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
1576 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
1577 PRNGD_SOCKET="$sock"
1578 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1579 break;
1580 fi
1581 done
1582 if test ! -z "$PRNGD_SOCKET" ; then
1583 AC_MSG_RESULT($PRNGD_SOCKET)
1584 else
1585 AC_MSG_RESULT(not found)
1586 fi
1587 fi
f1b0ecc3 1588 ]
1589)
1590
1591# Change default command timeout for hashing entropy source
1592entropy_timeout=200
1593AC_ARG_WITH(entropy-timeout,
1594 [ --with-entropy-timeout Specify entropy gathering command timeout (msec)],
1595 [
6cf0200f 1596 if test -n "$withval" && test "x$withval" != "xno" && \
1597 test "x${withval}" != "xyes"; then
f1b0ecc3 1598 entropy_timeout=$withval
1599 fi
82f4e93d 1600 ]
f1b0ecc3 1601)
f1b0ecc3 1602AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout)
1603
fd3cbf67 1604SSH_PRIVSEP_USER=sshd
9a0fbcb3 1605AC_ARG_WITH(privsep-user,
5222e7ef 1606 [ --with-privsep-user=user Specify non-privileged user for privilege separation],
9a0fbcb3 1607 [
6cf0200f 1608 if test -n "$withval" && test "x$withval" != "xno" && \
1609 test "x${withval}" != "xyes"; then
fd3cbf67 1610 SSH_PRIVSEP_USER=$withval
9a0fbcb3 1611 fi
82f4e93d 1612 ]
9a0fbcb3 1613)
fd3cbf67 1614AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER")
1615AC_SUBST(SSH_PRIVSEP_USER)
9a0fbcb3 1616
81dadca3 1617# We do this little dance with the search path to insure
1618# that programs that we select for use by installed programs
1619# (which may be run by the super-user) come from trusted
1620# locations before they come from the user's private area.
1621# This should help avoid accidentally configuring some
1622# random version of a program in someone's personal bin.
1623
1624OPATH=$PATH
1625PATH=/bin:/usr/bin
f95c8ce8 1626test -h /bin 2> /dev/null && PATH=/usr/bin
81dadca3 1627test -d /sbin && PATH=$PATH:/sbin
1628test -d /usr/sbin && PATH=$PATH:/usr/sbin
1629PATH=$PATH:/etc:$OPATH
1630
aff51935 1631# These programs are used by the command hashing source to gather entropy
f1b0ecc3 1632OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
1633OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
1634OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
1635OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
1636OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
1637OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
1638OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
1639OSSH_PATH_ENTROPY_PROG(PROG_W, w)
1640OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
1641OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
1642OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
1643OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
1644OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
1645OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
1646OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
1647OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
81dadca3 1648# restore PATH
1649PATH=$OPATH
f1b0ecc3 1650
1651# Where does ssh-rand-helper get its randomness from?
1652INSTALL_SSH_PRNG_CMDS=""
1653if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
1654 if test ! -z "$PRNGD_PORT" ; then
1655 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
1656 elif test ! -z "$PRNGD_SOCKET" ; then
1657 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
1658 else
1659 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
1660 RAND_HELPER_CMDHASH=yes
1661 INSTALL_SSH_PRNG_CMDS="yes"
1662 fi
1663fi
1664AC_SUBST(INSTALL_SSH_PRNG_CMDS)
1665
1666
66d6c27e 1667# Cheap hack to ensure NEWS-OS libraries are arranged right.
1668if test ! -z "$SONY" ; then
1669 LIBS="$LIBS -liberty";
1670fi
1671
a0391976 1672# Checks for data types
976f7e19 1673AC_CHECK_SIZEOF(char, 1)
2b942fe0 1674AC_CHECK_SIZEOF(short int, 2)
1675AC_CHECK_SIZEOF(int, 4)
1676AC_CHECK_SIZEOF(long int, 4)
1677AC_CHECK_SIZEOF(long long int, 8)
1678
52f1ccb2 1679# Sanity check long long for some platforms (AIX)
1680if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
1681 ac_cv_sizeof_long_long_int=0
1682fi
1683
a0391976 1684# More checks for data types
14a9a859 1685AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
1686 AC_TRY_COMPILE(
aff51935 1687 [ #include <sys/types.h> ],
1688 [ u_int a; a = 1;],
14a9a859 1689 [ ac_cv_have_u_int="yes" ],
1690 [ ac_cv_have_u_int="no" ]
1691 )
1692])
1693if test "x$ac_cv_have_u_int" = "xyes" ; then
1694 AC_DEFINE(HAVE_U_INT)
1695 have_u_int=1
1696fi
1697
58d100bf 1698AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
1699 AC_TRY_COMPILE(
aff51935 1700 [ #include <sys/types.h> ],
1701 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
58d100bf 1702 [ ac_cv_have_intxx_t="yes" ],
1703 [ ac_cv_have_intxx_t="no" ]
1704 )
1705])
1706if test "x$ac_cv_have_intxx_t" = "xyes" ; then
1707 AC_DEFINE(HAVE_INTXX_T)
1708 have_intxx_t=1
1709fi
41cb4569 1710
1711if (test -z "$have_intxx_t" && \
aff51935 1712 test "x$ac_cv_header_stdint_h" = "xyes")
41cb4569 1713then
1714 AC_MSG_CHECKING([for intXX_t types in stdint.h])
1715 AC_TRY_COMPILE(
aff51935 1716 [ #include <stdint.h> ],
1717 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
41cb4569 1718 [
1719 AC_DEFINE(HAVE_INTXX_T)
1720 AC_MSG_RESULT(yes)
1721 ],
1722 [ AC_MSG_RESULT(no) ]
1723 )
1724fi
1725
bd590612 1726AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
1727 AC_TRY_COMPILE(
1cbbe6c8 1728 [
1729#include <sys/types.h>
1730#ifdef HAVE_STDINT_H
1731# include <stdint.h>
1732#endif
1733#include <sys/socket.h>
1734#ifdef HAVE_SYS_BITYPES_H
1735# include <sys/bitypes.h>
1736#endif
aff51935 1737 ],
1738 [ int64_t a; a = 1;],
bd590612 1739 [ ac_cv_have_int64_t="yes" ],
1740 [ ac_cv_have_int64_t="no" ]
1741 )
1742])
1743if test "x$ac_cv_have_int64_t" = "xyes" ; then
1744 AC_DEFINE(HAVE_INT64_T)
ddceb1c8 1745fi
1746
58d100bf 1747AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
1748 AC_TRY_COMPILE(
aff51935 1749 [ #include <sys/types.h> ],
1750 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
58d100bf 1751 [ ac_cv_have_u_intxx_t="yes" ],
1752 [ ac_cv_have_u_intxx_t="no" ]
1753 )
1754])
1755if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
1756 AC_DEFINE(HAVE_U_INTXX_T)
1757 have_u_intxx_t=1
1758fi
2b942fe0 1759
41cb4569 1760if test -z "$have_u_intxx_t" ; then
1761 AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
1762 AC_TRY_COMPILE(
aff51935 1763 [ #include <sys/socket.h> ],
1764 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
41cb4569 1765 [
1766 AC_DEFINE(HAVE_U_INTXX_T)
1767 AC_MSG_RESULT(yes)
1768 ],
1769 [ AC_MSG_RESULT(no) ]
1770 )
1771fi
1772
bd590612 1773AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
1774 AC_TRY_COMPILE(
aff51935 1775 [ #include <sys/types.h> ],
1776 [ u_int64_t a; a = 1;],
bd590612 1777 [ ac_cv_have_u_int64_t="yes" ],
1778 [ ac_cv_have_u_int64_t="no" ]
1779 )
1780])
1781if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
1782 AC_DEFINE(HAVE_U_INT64_T)
1783 have_u_int64_t=1
1784fi
1785
ddceb1c8 1786if test -z "$have_u_int64_t" ; then
1787 AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
1788 AC_TRY_COMPILE(
aff51935 1789 [ #include <sys/bitypes.h> ],
ddceb1c8 1790 [ u_int64_t a; a = 1],
1791 [
1792 AC_DEFINE(HAVE_U_INT64_T)
1793 AC_MSG_RESULT(yes)
1794 ],
1795 [ AC_MSG_RESULT(no) ]
1796 )
1797fi
1798
41cb4569 1799if test -z "$have_u_intxx_t" ; then
1800 AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
1801 AC_TRY_COMPILE(
1802 [
1803#include <sys/types.h>
aff51935 1804 ],
1805 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
41cb4569 1806 [ ac_cv_have_uintxx_t="yes" ],
1807 [ ac_cv_have_uintxx_t="no" ]
1808 )
1809 ])
1810 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
1811 AC_DEFINE(HAVE_UINTXX_T)
1812 fi
1813fi
1814
1815if test -z "$have_uintxx_t" ; then
1816 AC_MSG_CHECKING([for uintXX_t types in stdint.h])
1817 AC_TRY_COMPILE(
aff51935 1818 [ #include <stdint.h> ],
1819 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
41cb4569 1820 [
1821 AC_DEFINE(HAVE_UINTXX_T)
1822 AC_MSG_RESULT(yes)
1823 ],
1824 [ AC_MSG_RESULT(no) ]
1825 )
1826fi
1827
e5fe9a1f 1828if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
aff51935 1829 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
5cdfe03f 1830then
1831 AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
1832 AC_TRY_COMPILE(
58d100bf 1833 [
1834#include <sys/bitypes.h>
aff51935 1835 ],
5cdfe03f 1836 [
837c30b8 1837 int8_t a; int16_t b; int32_t c;
1838 u_int8_t e; u_int16_t f; u_int32_t g;
1839 a = b = c = e = f = g = 1;
aff51935 1840 ],
5cdfe03f 1841 [
1842 AC_DEFINE(HAVE_U_INTXX_T)
1843 AC_DEFINE(HAVE_INTXX_T)
1844 AC_MSG_RESULT(yes)
1845 ],
1846 [AC_MSG_RESULT(no)]
aff51935 1847 )
5cdfe03f 1848fi
1849
0362750e 1850
1851AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
1852 AC_TRY_COMPILE(
1853 [
1854#include <sys/types.h>
1855 ],
1856 [ u_char foo; foo = 125; ],
1857 [ ac_cv_have_u_char="yes" ],
1858 [ ac_cv_have_u_char="no" ]
1859 )
1860])
1861if test "x$ac_cv_have_u_char" = "xyes" ; then
1862 AC_DEFINE(HAVE_U_CHAR)
1863fi
1864
98a7c37b 1865TYPE_SOCKLEN_T
2b942fe0 1866
2d16d9a3 1867AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
ddceb1c8 1868
777ece68 1869AC_CHECK_TYPES(in_addr_t,,,
1870[#include <sys/types.h>
1871#include <netinet/in.h>])
7b578f7d 1872
58d100bf 1873AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
1874 AC_TRY_COMPILE(
1875 [
18ba2aab 1876#include <sys/types.h>
58d100bf 1877 ],
1878 [ size_t foo; foo = 1235; ],
1879 [ ac_cv_have_size_t="yes" ],
1880 [ ac_cv_have_size_t="no" ]
1881 )
1882])
1883if test "x$ac_cv_have_size_t" = "xyes" ; then
1884 AC_DEFINE(HAVE_SIZE_T)
1885fi
ea1970a3 1886
c04f75f1 1887AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
1888 AC_TRY_COMPILE(
1889 [
1890#include <sys/types.h>
1891 ],
1892 [ ssize_t foo; foo = 1235; ],
1893 [ ac_cv_have_ssize_t="yes" ],
1894 [ ac_cv_have_ssize_t="no" ]
1895 )
1896])
1897if test "x$ac_cv_have_ssize_t" = "xyes" ; then
1898 AC_DEFINE(HAVE_SSIZE_T)
1899fi
1900
f1c4659d 1901AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
1902 AC_TRY_COMPILE(
1903 [
1904#include <time.h>
1905 ],
1906 [ clock_t foo; foo = 1235; ],
1907 [ ac_cv_have_clock_t="yes" ],
1908 [ ac_cv_have_clock_t="no" ]
1909 )
1910])
1911if test "x$ac_cv_have_clock_t" = "xyes" ; then
1912 AC_DEFINE(HAVE_CLOCK_T)
1913fi
1914
1c04b088 1915AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
1916 AC_TRY_COMPILE(
1917 [
1918#include <sys/types.h>
1919#include <sys/socket.h>
1920 ],
1921 [ sa_family_t foo; foo = 1235; ],
1922 [ ac_cv_have_sa_family_t="yes" ],
77bb0bca 1923 [ AC_TRY_COMPILE(
1924 [
1925#include <sys/types.h>
1926#include <sys/socket.h>
1927#include <netinet/in.h>
1928 ],
1929 [ sa_family_t foo; foo = 1235; ],
1930 [ ac_cv_have_sa_family_t="yes" ],
1931
1c04b088 1932 [ ac_cv_have_sa_family_t="no" ]
77bb0bca 1933 )]
1c04b088 1934 )
1935])
1936if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
1937 AC_DEFINE(HAVE_SA_FAMILY_T)
1938fi
1939
729bfe59 1940AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
1941 AC_TRY_COMPILE(
1942 [
1943#include <sys/types.h>
1944 ],
1945 [ pid_t foo; foo = 1235; ],
1946 [ ac_cv_have_pid_t="yes" ],
1947 [ ac_cv_have_pid_t="no" ]
1948 )
1949])
1950if test "x$ac_cv_have_pid_t" = "xyes" ; then
1951 AC_DEFINE(HAVE_PID_T)
1952fi
1953
1954AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
1955 AC_TRY_COMPILE(
1956 [
1957#include <sys/types.h>
1958 ],
1959 [ mode_t foo; foo = 1235; ],
1960 [ ac_cv_have_mode_t="yes" ],
1961 [ ac_cv_have_mode_t="no" ]
1962 )
1963])
1964if test "x$ac_cv_have_mode_t" = "xyes" ; then
1965 AC_DEFINE(HAVE_MODE_T)
1966fi
1967
e3a93db0 1968
58d100bf 1969AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
1970 AC_TRY_COMPILE(
1971 [
18ba2aab 1972#include <sys/types.h>
1973#include <sys/socket.h>
58d100bf 1974 ],
1975 [ struct sockaddr_storage s; ],
1976 [ ac_cv_have_struct_sockaddr_storage="yes" ],
1977 [ ac_cv_have_struct_sockaddr_storage="no" ]
1978 )
1979])
1980if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
1981 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE)
1982fi
48e671d5 1983
58d100bf 1984AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
1985 AC_TRY_COMPILE(
1986 [
cbd7492e 1987#include <sys/types.h>
58d100bf 1988#include <netinet/in.h>
1989 ],
1990 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
1991 [ ac_cv_have_struct_sockaddr_in6="yes" ],
1992 [ ac_cv_have_struct_sockaddr_in6="no" ]
1993 )
1994])
1995if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
1996 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6)
1997fi
48e671d5 1998
58d100bf 1999AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2000 AC_TRY_COMPILE(
2001 [
cbd7492e 2002#include <sys/types.h>
58d100bf 2003#include <netinet/in.h>
2004 ],
2005 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2006 [ ac_cv_have_struct_in6_addr="yes" ],
2007 [ ac_cv_have_struct_in6_addr="no" ]
2008 )
2009])
2010if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
2011 AC_DEFINE(HAVE_STRUCT_IN6_ADDR)
2012fi
48e671d5 2013
58d100bf 2014AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2015 AC_TRY_COMPILE(
2016 [
18ba2aab 2017#include <sys/types.h>
2018#include <sys/socket.h>
2019#include <netdb.h>
58d100bf 2020 ],
2021 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2022 [ ac_cv_have_struct_addrinfo="yes" ],
2023 [ ac_cv_have_struct_addrinfo="no" ]
2024 )
2025])
2026if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2027 AC_DEFINE(HAVE_STRUCT_ADDRINFO)
2028fi
2029
89c7e31c 2030AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2031 AC_TRY_COMPILE(
aff51935 2032 [ #include <sys/time.h> ],
2033 [ struct timeval tv; tv.tv_sec = 1;],
89c7e31c 2034 [ ac_cv_have_struct_timeval="yes" ],
2035 [ ac_cv_have_struct_timeval="no" ]
2036 )
2037])
2038if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2039 AC_DEFINE(HAVE_STRUCT_TIMEVAL)
2040 have_struct_timeval=1
2041fi
2042
5271b55c 2043AC_CHECK_TYPES(struct timespec)
2044
85abc74b 2045# We need int64_t or else certian parts of the compile will fail.
4b492aab 2046if test "x$ac_cv_have_int64_t" = "xno" && \
2047 test "x$ac_cv_sizeof_long_int" != "x8" && \
2048 test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
85abc74b 2049 echo "OpenSSH requires int64_t support. Contact your vendor or install"
2050 echo "an alternative compiler (I.E., GCC) before continuing."
2051 echo ""
2052 exit 1;
733cf7f4 2053else
2054dnl test snprintf (broken on SCO w/gcc)
1a01a50c 2055 AC_RUN_IFELSE(
479cece8 2056 [AC_LANG_SOURCE([[
733cf7f4 2057#include <stdio.h>
2058#include <string.h>
2059#ifdef HAVE_SNPRINTF
2060main()
2061{
2062 char buf[50];
2063 char expected_out[50];
2064 int mazsize = 50 ;
2065#if (SIZEOF_LONG_INT == 8)
2066 long int num = 0x7fffffffffffffff;
2067#else
763a1a18 2068 long long num = 0x7fffffffffffffffll;
733cf7f4 2069#endif
2070 strcpy(expected_out, "9223372036854775807");
2071 snprintf(buf, mazsize, "%lld", num);
2072 if(strcmp(buf, expected_out) != 0)
aff51935 2073 exit(1);
733cf7f4 2074 exit(0);
2075}
2076#else
2077main() { exit(0); }
2078#endif
479cece8 2079 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
1a01a50c 2080 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
733cf7f4 2081 )
2c523de9 2082fi
2083
77bb0bca 2084dnl Checks for structure members
58d100bf 2085OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2086OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2087OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2088OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2089OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
25422c70 2090OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
58d100bf 2091OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2092OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
daaff4d5 2093OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
58d100bf 2094OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2095OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2096OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2097OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
1d7b9b20 2098OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2099OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2100OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2101OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
98a7c37b 2102
2103AC_CHECK_MEMBERS([struct stat.st_blksize])
1d7b9b20 2104
58d100bf 2105AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2106 ac_cv_have_ss_family_in_struct_ss, [
2107 AC_TRY_COMPILE(
2108 [
18ba2aab 2109#include <sys/types.h>
2110#include <sys/socket.h>
58d100bf 2111 ],
2112 [ struct sockaddr_storage s; s.ss_family = 1; ],
2113 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2114 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2115 )
2116])
2117if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2118 AC_DEFINE(HAVE_SS_FAMILY_IN_SS)
2119fi
2120
58d100bf 2121AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2122 ac_cv_have___ss_family_in_struct_ss, [
2123 AC_TRY_COMPILE(
2124 [
18ba2aab 2125#include <sys/types.h>
2126#include <sys/socket.h>
58d100bf 2127 ],
2128 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2129 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2130 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2131 )
2132])
2133if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2134 AC_DEFINE(HAVE___SS_FAMILY_IN_SS)
2135fi
2136
2e73a022 2137AC_CACHE_CHECK([for pw_class field in struct passwd],
2138 ac_cv_have_pw_class_in_struct_passwd, [
2139 AC_TRY_COMPILE(
2140 [
2e73a022 2141#include <pwd.h>
2142 ],
97994d32 2143 [ struct passwd p; p.pw_class = 0; ],
2e73a022 2144 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2145 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2146 )
2147])
2148if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2149 AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD)
2150fi
2151
7751d4eb 2152AC_CACHE_CHECK([for pw_expire field in struct passwd],
2153 ac_cv_have_pw_expire_in_struct_passwd, [
2154 AC_TRY_COMPILE(
2155 [
2156#include <pwd.h>
2157 ],
2158 [ struct passwd p; p.pw_expire = 0; ],
2159 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2160 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2161 )
2162])
2163if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2164 AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD)
2165fi
2166
2167AC_CACHE_CHECK([for pw_change field in struct passwd],
2168 ac_cv_have_pw_change_in_struct_passwd, [
2169 AC_TRY_COMPILE(
2170 [
2171#include <pwd.h>
2172 ],
2173 [ struct passwd p; p.pw_change = 0; ],
2174 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2175 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2176 )
2177])
2178if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2179 AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD)
2180fi
58d100bf 2181
637f9177 2182dnl make sure we're using the real structure members and not defines
6f34652e 2183AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2184 ac_cv_have_accrights_in_msghdr, [
1a01a50c 2185 AC_COMPILE_IFELSE(
6f34652e 2186 [
f95c8ce8 2187#include <sys/types.h>
6f34652e 2188#include <sys/socket.h>
2189#include <sys/uio.h>
637f9177 2190int main() {
2191#ifdef msg_accrights
1a01a50c 2192#error "msg_accrights is a macro"
637f9177 2193exit(1);
2194#endif
2195struct msghdr m;
2196m.msg_accrights = 0;
2197exit(0);
2198}
6f34652e 2199 ],
6f34652e 2200 [ ac_cv_have_accrights_in_msghdr="yes" ],
2201 [ ac_cv_have_accrights_in_msghdr="no" ]
2202 )
2203])
2204if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2205 AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR)
2206fi
2207
7176df4f 2208AC_CACHE_CHECK([for msg_control field in struct msghdr],
2209 ac_cv_have_control_in_msghdr, [
1a01a50c 2210 AC_COMPILE_IFELSE(
7176df4f 2211 [
f95c8ce8 2212#include <sys/types.h>
7176df4f 2213#include <sys/socket.h>
2214#include <sys/uio.h>
637f9177 2215int main() {
2216#ifdef msg_control
1a01a50c 2217#error "msg_control is a macro"
637f9177 2218exit(1);
2219#endif
2220struct msghdr m;
2221m.msg_control = 0;
2222exit(0);
2223}
7176df4f 2224 ],
7176df4f 2225 [ ac_cv_have_control_in_msghdr="yes" ],
2226 [ ac_cv_have_control_in_msghdr="no" ]
2227 )
2228])
2229if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2230 AC_DEFINE(HAVE_CONTROL_IN_MSGHDR)
2231fi
2232
58d100bf 2233AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
aff51935 2234 AC_TRY_LINK([],
2235 [ extern char *__progname; printf("%s", __progname); ],
58d100bf 2236 [ ac_cv_libc_defines___progname="yes" ],
2237 [ ac_cv_libc_defines___progname="no" ]
2238 )
2239])
2240if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2241 AC_DEFINE(HAVE___PROGNAME)
2242fi
8946db53 2243
c921ee00 2244AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2245 AC_TRY_LINK([
2246#include <stdio.h>
aff51935 2247],
2248 [ printf("%s", __FUNCTION__); ],
c921ee00 2249 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2250 [ ac_cv_cc_implements___FUNCTION__="no" ]
2251 )
2252])
2253if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2254 AC_DEFINE(HAVE___FUNCTION__)
2255fi
2256
2257AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2258 AC_TRY_LINK([
2259#include <stdio.h>
aff51935 2260],
2261 [ printf("%s", __func__); ],
c921ee00 2262 [ ac_cv_cc_implements___func__="yes" ],
2263 [ ac_cv_cc_implements___func__="no" ]
2264 )
2265])
2266if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
2267 AC_DEFINE(HAVE___func__)
2268fi
2269
1812a662 2270AC_CACHE_CHECK([whether getopt has optreset support],
2271 ac_cv_have_getopt_optreset, [
2272 AC_TRY_LINK(
2273 [
2274#include <getopt.h>
2275 ],
2276 [ extern int optreset; optreset = 0; ],
2277 [ ac_cv_have_getopt_optreset="yes" ],
2278 [ ac_cv_have_getopt_optreset="no" ]
2279 )
2280])
2281if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
2282 AC_DEFINE(HAVE_GETOPT_OPTRESET)
2283fi
a0391976 2284
819b676f 2285AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
aff51935 2286 AC_TRY_LINK([],
2287 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
819b676f 2288 [ ac_cv_libc_defines_sys_errlist="yes" ],
2289 [ ac_cv_libc_defines_sys_errlist="no" ]
2290 )
2291])
2292if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
2293 AC_DEFINE(HAVE_SYS_ERRLIST)
2294fi
2295
2296
416ed5a7 2297AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
aff51935 2298 AC_TRY_LINK([],
2299 [ extern int sys_nerr; printf("%i", sys_nerr);],
416ed5a7 2300 [ ac_cv_libc_defines_sys_nerr="yes" ],
2301 [ ac_cv_libc_defines_sys_nerr="no" ]
2302 )
2303])
2304if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
2305 AC_DEFINE(HAVE_SYS_NERR)
2306fi
2307
aff51935 2308SCARD_MSG="no"
295c8801 2309# Check whether user wants sectok support
2310AC_ARG_WITH(sectok,
2311 [ --with-sectok Enable smartcard support using libsectok],
d0b19c95 2312 [
2313 if test "x$withval" != "xno" ; then
2314 if test "x$withval" != "xyes" ; then
2315 CPPFLAGS="$CPPFLAGS -I${withval}"
2316 LDFLAGS="$LDFLAGS -L${withval}"
2317 if test ! -z "$need_dash_r" ; then
2318 LDFLAGS="$LDFLAGS -R${withval}"
2319 fi
2320 if test ! -z "$blibpath" ; then
2321 blibpath="$blibpath:${withval}"
2322 fi
2323 fi
2324 AC_CHECK_HEADERS(sectok.h)
2325 if test "$ac_cv_header_sectok_h" != yes; then
2326 AC_MSG_ERROR(Can't find sectok.h)
2327 fi
2328 AC_CHECK_LIB(sectok, sectok_open)
2329 if test "$ac_cv_lib_sectok_sectok_open" != yes; then
2330 AC_MSG_ERROR(Can't find libsectok)
2331 fi
2332 AC_DEFINE(SMARTCARD)
295c8801 2333 AC_DEFINE(USE_SECTOK)
aff51935 2334 SCARD_MSG="yes, using sectok"
295c8801 2335 fi
2336 ]
2337)
2338
2339# Check whether user wants OpenSC support
987b458f 2340OPENSC_CONFIG="no"
295c8801 2341AC_ARG_WITH(opensc,
987b458f 2342 [--with-opensc[[=PFX]] Enable smartcard support using OpenSC (optionally in PATH)],
2343 [
2344 if test "x$withval" != "xno" ; then
2345 if test "x$withval" != "xyes" ; then
2346 OPENSC_CONFIG=$withval/bin/opensc-config
2347 else
2348 AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
2349 fi
2350 if test "$OPENSC_CONFIG" != "no"; then
2351 LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
2352 LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
2353 CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
2354 LDFLAGS="$LDFLAGS $LIBOPENSC_LIBS"
2355 AC_DEFINE(SMARTCARD)
2356 AC_DEFINE(USE_OPENSC)
2357 SCARD_MSG="yes, using OpenSC"
2358 fi
2359 fi
2360 ]
2361)
d0b19c95 2362
c31dc31c 2363# Check libraries needed by DNS fingerprint support
aff51935 2364AC_SEARCH_LIBS(getrrsetbyname, resolv,
c31dc31c 2365 [AC_DEFINE(HAVE_GETRRSETBYNAME)],
3e05e934 2366 [
c31dc31c 2367 # Needed by our getrrsetbyname()
2368 AC_SEARCH_LIBS(res_query, resolv)
2369 AC_SEARCH_LIBS(dn_expand, resolv)
dabb524a 2370 AC_MSG_CHECKING(if res_query will link)
2371 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
2372 [AC_MSG_RESULT(no)
2373 saved_LIBS="$LIBS"
2374 LIBS="$LIBS -lresolv"
2375 AC_MSG_CHECKING(for res_query in -lresolv)
2376 AC_LINK_IFELSE([
2377#include <resolv.h>
2378int main()
2379{
2380 res_query (0, 0, 0, 0, 0);
2381 return 0;
2382}
2383 ],
2384 [LIBS="$LIBS -lresolv"
2385 AC_MSG_RESULT(yes)],
2386 [LIBS="$saved_LIBS"
2387 AC_MSG_RESULT(no)])
2388 ])
c31dc31c 2389 AC_CHECK_FUNCS(_getshort _getlong)
2390 AC_CHECK_MEMBER(HEADER.ad,
2391 [AC_DEFINE(HAVE_HEADER_AD)],,
2392 [#include <arpa/nameser.h>])
2393 ])
3e05e934 2394
12928e80 2395# Check whether user wants Kerberos 5 support
aff51935 2396KRB5_MSG="no"
12928e80 2397AC_ARG_WITH(kerberos5,
aff51935 2398 [ --with-kerberos5=PATH Enable Kerberos 5 support],
5585c441 2399 [ if test "x$withval" != "xno" ; then
2400 if test "x$withval" = "xyes" ; then
2401 KRB5ROOT="/usr/local"
2402 else
2403 KRB5ROOT=${withval}
2404 fi
2405
2406 AC_DEFINE(KRB5)
2407 KRB5_MSG="yes"
2408
2409 AC_MSG_CHECKING(for krb5-config)
2410 if test -x $KRB5ROOT/bin/krb5-config ; then
2411 KRB5CONF=$KRB5ROOT/bin/krb5-config
2412 AC_MSG_RESULT($KRB5CONF)
2413
2414 AC_MSG_CHECKING(for gssapi support)
2415 if $KRB5CONF | grep gssapi >/dev/null ; then
2416 AC_MSG_RESULT(yes)
071970fb 2417 AC_DEFINE(GSSAPI)
2418 k5confopts=gssapi
aff51935 2419 else
5585c441 2420 AC_MSG_RESULT(no)
071970fb 2421 k5confopts=""
aff51935 2422 fi
071970fb 2423 K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
2424 K5LIBS="`$KRB5CONF --libs $k5confopts`"
5585c441 2425 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
5585c441 2426 AC_MSG_CHECKING(whether we are using Heimdal)
2427 AC_TRY_COMPILE([ #include <krb5.h> ],
2428 [ char *tmp = heimdal_version; ],
2429 [ AC_MSG_RESULT(yes)
2430 AC_DEFINE(HEIMDAL) ],
2431 AC_MSG_RESULT(no)
2432 )
2433 else
2434 AC_MSG_RESULT(no)
12928e80 2435 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
aff51935 2436 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
aff51935 2437 AC_MSG_CHECKING(whether we are using Heimdal)
2438 AC_TRY_COMPILE([ #include <krb5.h> ],
2439 [ char *tmp = heimdal_version; ],
2440 [ AC_MSG_RESULT(yes)
2441 AC_DEFINE(HEIMDAL)
41707f74 2442 K5LIBS="-lkrb5 -ldes"
2443 K5LIBS="$K5LIBS -lcom_err -lasn1"
82f4e93d 2444 AC_CHECK_LIB(roken, net_write,
41707f74 2445 [K5LIBS="$K5LIBS -lroken"])
aff51935 2446 ],
2447 [ AC_MSG_RESULT(no)
2448 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
2449 ]
2450 )
4e00038c 2451 AC_SEARCH_LIBS(dn_expand, resolv)
12928e80 2452
749560dd 2453 AC_CHECK_LIB(gssapi,gss_init_sec_context,
2454 [ AC_DEFINE(GSSAPI)
2455 K5LIBS="-lgssapi $K5LIBS" ],
2456 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
2457 [ AC_DEFINE(GSSAPI)
aff51935 2458 K5LIBS="-lgssapi_krb5 $K5LIBS" ],
749560dd 2459 AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
2460 $K5LIBS)
2461 ],
2462 $K5LIBS)
82f4e93d 2463
749560dd 2464 AC_CHECK_HEADER(gssapi.h, ,
2465 [ unset ac_cv_header_gssapi_h
aff51935 2466 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
749560dd 2467 AC_CHECK_HEADERS(gssapi.h, ,
2468 AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
aff51935 2469 )
749560dd 2470 ]
2471 )
2472
2473 oldCPP="$CPPFLAGS"
2474 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2475 AC_CHECK_HEADER(gssapi_krb5.h, ,
2476 [ CPPFLAGS="$oldCPP" ])
2477
aff51935 2478 fi
5585c441 2479 if test ! -z "$need_dash_r" ; then
2480 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
2481 fi
2482 if test ! -z "$blibpath" ; then
2483 blibpath="$blibpath:${KRB5ROOT}/lib"
2484 fi
071970fb 2485 fi
2486
2487 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
2488 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
2489 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
2490
2491 LIBS="$LIBS $K5LIBS"
2492 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS))
79753592 2493 AC_SEARCH_LIBS(krb5_init_ets, $K5LIBS, AC_DEFINE(KRB5_INIT_ETS))
071970fb 2494 ]
12928e80 2495)
b5b68128 2496
a0391976 2497# Looking for programs, paths and files
a0391976 2498
ecac8ee5 2499PRIVSEP_PATH=/var/empty
2500AC_ARG_WITH(privsep-path,
cda1ebcb 2501 [ --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
ecac8ee5 2502 [
6cf0200f 2503 if test -n "$withval" && test "x$withval" != "xno" && \
2504 test "x${withval}" != "xyes"; then
ecac8ee5 2505 PRIVSEP_PATH=$withval
2506 fi
2507 ]
2508)
2509AC_SUBST(PRIVSEP_PATH)
2510
a0391976 2511AC_ARG_WITH(xauth,
2512 [ --with-xauth=PATH Specify path to xauth program ],
2513 [
6cf0200f 2514 if test -n "$withval" && test "x$withval" != "xno" && \
2515 test "x${withval}" != "xyes"; then
cbd7492e 2516 xauth_path=$withval
a0391976 2517 fi
2518 ],
2519 [
2bf42e4a 2520 TestPath="$PATH"
2521 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
2522 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
2523 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
2524 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
2525 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
e5fe9a1f 2526 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
a0391976 2527 xauth_path="/usr/openwin/bin/xauth"
2528 fi
2529 ]
2530)
2531
65a4b4af 2532STRIP_OPT=-s
2533AC_ARG_ENABLE(strip,
2534 [ --disable-strip Disable calling strip(1) on install],
2535 [
2536 if test "x$enableval" = "xno" ; then
2537 STRIP_OPT=
2538 fi
2539 ]
2540)
2541AC_SUBST(STRIP_OPT)
2542
b3ec54b4 2543if test -z "$xauth_path" ; then
2544 XAUTH_PATH="undefined"
2545 AC_SUBST(XAUTH_PATH)
2546else
a0391976 2547 AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path")
b3ec54b4 2548 XAUTH_PATH=$xauth_path
2549 AC_SUBST(XAUTH_PATH)
a0391976 2550fi
a0391976 2551
2552# Check for mail directory (last resort if we cannot get it from headers)
2553if test ! -z "$MAIL" ; then
2554 maildir=`dirname $MAIL`
2555 AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir")
2556fi
2557
479cece8 2558if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
1a01a50c 2559 AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
2560 disable_ptmx_check=yes
2561fi
a0391976 2562if test -z "$no_dev_ptmx" ; then
6e879cb4 2563 if test "x$disable_ptmx_check" != "xyes" ; then
aff51935 2564 AC_CHECK_FILE("/dev/ptmx",
6e879cb4 2565 [
2566 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX)
2567 have_dev_ptmx=1
2568 ]
2569 )
2570 fi
3276571c 2571fi
1a01a50c 2572
479cece8 2573if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
1a01a50c 2574 AC_CHECK_FILE("/dev/ptc",
2575 [
2576 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC)
2577 have_dev_ptc=1
2578 ]
2579 )
2580else
2581 AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
2582fi
3276571c 2583
a0391976 2584# Options from here on. Some of these are preset by platform above
fdf6b7aa 2585AC_ARG_WITH(mantype,
5d97cfbf 2586 [ --with-mantype=man|cat|doc Set man page type],
c54a6257 2587 [
5d97cfbf 2588 case "$withval" in
2589 man|cat|doc)
2590 MANTYPE=$withval
2591 ;;
2592 *)
2593 AC_MSG_ERROR(invalid man type: $withval)
2594 ;;
2595 esac
c54a6257 2596 ]
2597)
e0c4d3ac 2598if test -z "$MANTYPE"; then
2bf42e4a 2599 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
2600 AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
e0c4d3ac 2601 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
2602 MANTYPE=doc
2603 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
2604 MANTYPE=man
2605 else
2606 MANTYPE=cat
2607 fi
2608fi
c54a6257 2609AC_SUBST(MANTYPE)
e0c4d3ac 2610if test "$MANTYPE" = "doc"; then
2611 mansubdir=man;
2612else
2613 mansubdir=$MANTYPE;
2614fi
2615AC_SUBST(mansubdir)
0bc5b6fb 2616
a0391976 2617# Check whether to enable MD5 passwords
aff51935 2618MD5_MSG="no"
2ddcfdf3 2619AC_ARG_WITH(md5-passwords,
caf3bc51 2620 [ --with-md5-passwords Enable use of MD5 passwords],
0bc5b6fb 2621 [
bcf36c78 2622 if test "x$withval" != "xno" ; then
0bc5b6fb 2623 AC_DEFINE(HAVE_MD5_PASSWORDS)
aff51935 2624 MD5_MSG="yes"
0bc5b6fb 2625 fi
2626 ]
caf3bc51 2627)
2628
a0391976 2629# Whether to disable shadow password support
a7effaac 2630AC_ARG_WITH(shadow,
2631 [ --without-shadow Disable shadow password support],
2632 [
82f4e93d 2633 if test "x$withval" = "xno" ; then
a7effaac 2634 AC_DEFINE(DISABLE_SHADOW)
4cb5ffa0 2635 disable_shadow=yes
a7effaac 2636 fi
2637 ]
2638)
2639
4cb5ffa0 2640if test -z "$disable_shadow" ; then
2641 AC_MSG_CHECKING([if the systems has expire shadow information])
2642 AC_TRY_COMPILE(
2643 [
2644#include <sys/types.h>
2645#include <shadow.h>
2646 struct spwd sp;
2647 ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
2648 [ sp_expire_available=yes ], []
2649 )
2650
2651 if test "x$sp_expire_available" = "xyes" ; then
2652 AC_MSG_RESULT(yes)
2653 AC_DEFINE(HAS_SHADOW_EXPIRE)
2654 else
2655 AC_MSG_RESULT(no)
2656 fi
2657fi
2658
a0391976 2659# Use ip address instead of hostname in $DISPLAY
44839801 2660if test ! -z "$IPADDR_IN_DISPLAY" ; then
2661 DISPLAY_HACK_MSG="yes"
2662 AC_DEFINE(IPADDR_IN_DISPLAY)
2663else
aff51935 2664 DISPLAY_HACK_MSG="no"
44839801 2665 AC_ARG_WITH(ipaddr-display,
2666 [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY],
2667 [
82f4e93d 2668 if test "x$withval" != "xno" ; then
44839801 2669 AC_DEFINE(IPADDR_IN_DISPLAY)
aff51935 2670 DISPLAY_HACK_MSG="yes"
44839801 2671 fi
2672 ]
2673 )
2674fi
a7effaac 2675
95b99395 2676# check for /etc/default/login and use it if present.
daa41e62 2677AC_ARG_ENABLE(etc-default-login,
6ff3d0dc 2678 [ --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
694d0cef 2679 [ if test "x$enableval" = "xno"; then
2680 AC_MSG_NOTICE([/etc/default/login handling disabled])
2681 etc_default_login=no
2682 else
2683 etc_default_login=yes
2684 fi ],
2685 [ etc_default_login=yes ]
2686)
95b99395 2687
694d0cef 2688if test "x$etc_default_login" != "xno"; then
2689 AC_CHECK_FILE("/etc/default/login",
2690 [ external_path_file=/etc/default/login ])
479cece8 2691 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
2692 then
1a01a50c 2693 AC_MSG_WARN([cross compiling: Disabling /etc/default/login test])
2694 elif test "x$external_path_file" = "x/etc/default/login"; then
2695 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN)
2696 fi
694d0cef 2697fi
95b99395 2698
8d184c09 2699dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
4b492aab 2700if test $ac_cv_func_login_getcapbool = "yes" && \
2701 test $ac_cv_header_login_cap_h = "yes" ; then
95b99395 2702 external_path_file=/etc/login.conf
8d184c09 2703fi
95b99395 2704
a0391976 2705# Whether to mess with the default path
aff51935 2706SERVER_PATH_MSG="(default)"
c43d69a9 2707AC_ARG_WITH(default-path,
75817f90 2708 [ --with-default-path= Specify default \$PATH environment for server],
cb807f40 2709 [
95b99395 2710 if test "x$external_path_file" = "x/etc/login.conf" ; then
8d184c09 2711 AC_MSG_WARN([
2712--with-default-path=PATH has no effect on this system.
2713Edit /etc/login.conf instead.])
82f4e93d 2714 elif test "x$withval" != "xno" ; then
89bbd457 2715 if test ! -z "$external_path_file" ; then
95b99395 2716 AC_MSG_WARN([
2717--with-default-path=PATH will only be used if PATH is not defined in
2718$external_path_file .])
2719 fi
b2d818e6 2720 user_path="$withval"
aff51935 2721 SERVER_PATH_MSG="$withval"
cb807f40 2722 fi
b2d818e6 2723 ],
95b99395 2724 [ if test "x$external_path_file" = "x/etc/login.conf" ; then
2725 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
8d184c09 2726 else
89bbd457 2727 if test ! -z "$external_path_file" ; then
95b99395 2728 AC_MSG_WARN([
2729If PATH is defined in $external_path_file, ensure the path to scp is included,
2730otherwise scp will not work.])
2731 fi
2732 AC_TRY_RUN(
2733 [
b2d818e6 2734/* find out what STDPATH is */
2735#include <stdio.h>
b2d818e6 2736#ifdef HAVE_PATHS_H
2737# include <paths.h>
2738#endif
2739#ifndef _PATH_STDPATH
d9a4e55b 2740# ifdef _PATH_USERPATH /* Irix */
2741# define _PATH_STDPATH _PATH_USERPATH
2742# else
2743# define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
2744# endif
b2d818e6 2745#endif
2746#include <sys/types.h>
2747#include <sys/stat.h>
2748#include <fcntl.h>
2749#define DATA "conftest.stdpath"
2750
2751main()
2752{
2753 FILE *fd;
2754 int rc;
82f4e93d 2755
b2d818e6 2756 fd = fopen(DATA,"w");
2757 if(fd == NULL)
2758 exit(1);
82f4e93d 2759
b2d818e6 2760 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
2761 exit(1);
2762
2763 exit(0);
2764}
2765 ], [ user_path=`cat conftest.stdpath` ],
2766 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
2767 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
2768 )
2769# make sure $bindir is in USER_PATH so scp will work
2770 t_bindir=`eval echo ${bindir}`
2771 case $t_bindir in
2772 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
2773 esac
2774 case $t_bindir in
2775 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
2776 esac
2777 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
2778 if test $? -ne 0 ; then
2779 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
2780 if test $? -ne 0 ; then
2781 user_path=$user_path:$t_bindir
2782 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
2783 fi
2784 fi
8d184c09 2785 fi ]
cb807f40 2786)
95b99395 2787if test "x$external_path_file" != "x/etc/login.conf" ; then
8d184c09 2788 AC_DEFINE_UNQUOTED(USER_PATH, "$user_path")
2789 AC_SUBST(user_path)
2790fi
cb807f40 2791
06617857 2792# Set superuser path separately to user path
06617857 2793AC_ARG_WITH(superuser-path,
2794 [ --with-superuser-path= Specify different path for super-user],
2795 [
6cf0200f 2796 if test -n "$withval" && test "x$withval" != "xno" && \
2797 test "x${withval}" != "xyes"; then
06617857 2798 AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval")
2799 superuser_path=$withval
2800 fi
2801 ]
2802)
2803
2804
58d100bf 2805AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
aff51935 2806IPV4_IN6_HACK_MSG="no"
80faa19f 2807AC_ARG_WITH(4in6,
2808 [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses],
2809 [
2810 if test "x$withval" != "xno" ; then
2811 AC_MSG_RESULT(yes)
2812 AC_DEFINE(IPV4_IN_IPV6)
aff51935 2813 IPV4_IN6_HACK_MSG="yes"
80faa19f 2814 else
2815 AC_MSG_RESULT(no)
2816 fi
2817 ],[
2818 if test "x$inet6_default_4in6" = "xyes"; then
2819 AC_MSG_RESULT([yes (default)])
2820 AC_DEFINE(IPV4_IN_IPV6)
aff51935 2821 IPV4_IN6_HACK_MSG="yes"
80faa19f 2822 else
2823 AC_MSG_RESULT([no (default)])
2824 fi
2825 ]
2826)
2827
af774732 2828# Whether to enable BSD auth support
f1b0ecc3 2829BSD_AUTH_MSG=no
af774732 2830AC_ARG_WITH(bsd-auth,
2831 [ --with-bsd-auth Enable BSD auth support],
2832 [
82f4e93d 2833 if test "x$withval" != "xno" ; then
af774732 2834 AC_DEFINE(BSD_AUTH)
f1b0ecc3 2835 BSD_AUTH_MSG=yes
af774732 2836 fi
2837 ]
2838)
2839
a0391976 2840# Where to place sshd.pid
19d9ac2a 2841piddir=/var/run
81dadca3 2842# make sure the directory exists
82f4e93d 2843if test ! -d $piddir ; then
81dadca3 2844 piddir=`eval echo ${sysconfdir}`
2845 case $piddir in
aff51935 2846 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
81dadca3 2847 esac
2848fi
2849
47e45e44 2850AC_ARG_WITH(pid-dir,
2851 [ --with-pid-dir=PATH Specify location of ssh.pid file],
2852 [
6cf0200f 2853 if test -n "$withval" && test "x$withval" != "xno" && \
2854 test "x${withval}" != "xyes"; then
19d9ac2a 2855 piddir=$withval
82f4e93d 2856 if test ! -d $piddir ; then
81dadca3 2857 AC_MSG_WARN([** no $piddir directory on this system **])
2858 fi
47e45e44 2859 fi
2860 ]
2861)
b7a87eea 2862
42f11eb2 2863AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir")
19d9ac2a 2864AC_SUBST(piddir)
47e45e44 2865
1d7b9b20 2866dnl allow user to disable some login recording features
2867AC_ARG_ENABLE(lastlog,
bfd550a2 2868 [ --disable-lastlog disable use of lastlog even if detected [no]],
ddb154b3 2869 [
2870 if test "x$enableval" = "xno" ; then
2871 AC_DEFINE(DISABLE_LASTLOG)
2872 fi
2873 ]
1d7b9b20 2874)
2875AC_ARG_ENABLE(utmp,
bfd550a2 2876 [ --disable-utmp disable use of utmp even if detected [no]],
ddb154b3 2877 [
2878 if test "x$enableval" = "xno" ; then
2879 AC_DEFINE(DISABLE_UTMP)
2880 fi
2881 ]
1d7b9b20 2882)
2883AC_ARG_ENABLE(utmpx,
bfd550a2 2884 [ --disable-utmpx disable use of utmpx even if detected [no]],
ddb154b3 2885 [
2886 if test "x$enableval" = "xno" ; then
2887 AC_DEFINE(DISABLE_UTMPX)
2888 fi
2889 ]
1d7b9b20 2890)
2891AC_ARG_ENABLE(wtmp,
bfd550a2 2892 [ --disable-wtmp disable use of wtmp even if detected [no]],
ddb154b3 2893 [
2894 if test "x$enableval" = "xno" ; then
2895 AC_DEFINE(DISABLE_WTMP)
2896 fi
2897 ]
1d7b9b20 2898)
2899AC_ARG_ENABLE(wtmpx,
bfd550a2 2900 [ --disable-wtmpx disable use of wtmpx even if detected [no]],
ddb154b3 2901 [
2902 if test "x$enableval" = "xno" ; then
2903 AC_DEFINE(DISABLE_WTMPX)
2904 fi
2905 ]
1d7b9b20 2906)
2907AC_ARG_ENABLE(libutil,
bfd550a2 2908 [ --disable-libutil disable use of libutil (login() etc.) [no]],
ddb154b3 2909 [
2910 if test "x$enableval" = "xno" ; then
2911 AC_DEFINE(DISABLE_LOGIN)
2912 fi
2913 ]
1d7b9b20 2914)
2915AC_ARG_ENABLE(pututline,
bfd550a2 2916 [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]],
ddb154b3 2917 [
2918 if test "x$enableval" = "xno" ; then
aff51935 2919 AC_DEFINE(DISABLE_PUTUTLINE)
ddb154b3 2920 fi
2921 ]
1d7b9b20 2922)
2923AC_ARG_ENABLE(pututxline,
bfd550a2 2924 [ --disable-pututxline disable use of pututxline() etc. ([uw]tmpx) [no]],
ddb154b3 2925 [
2926 if test "x$enableval" = "xno" ; then
2927 AC_DEFINE(DISABLE_PUTUTXLINE)
2928 fi
2929 ]
1d7b9b20 2930)
2931AC_ARG_WITH(lastlog,
bfd550a2 2932 [ --with-lastlog=FILE|DIR specify lastlog location [common locations]],
8c89dd2b 2933 [
82f4e93d 2934 if test "x$withval" = "xno" ; then
8c89dd2b 2935 AC_DEFINE(DISABLE_LASTLOG)
6cf0200f 2936 elif test -n "$withval" && test "x${withval}" != "xyes"; then
8c89dd2b 2937 conf_lastlog_location=$withval
2938 fi
2939 ]
2940)
1d7b9b20 2941
2942dnl lastlog, [uw]tmpx? detection
2943dnl NOTE: set the paths in the platform section to avoid the
2944dnl need for command-line parameters
2945dnl lastlog and [uw]tmp are subject to a file search if all else fails
2946
2947dnl lastlog detection
2948dnl NOTE: the code itself will detect if lastlog is a directory
2949AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
2950AC_TRY_COMPILE([
2951#include <sys/types.h>
2952#include <utmp.h>
2953#ifdef HAVE_LASTLOG_H
2954# include <lastlog.h>
2955#endif
d7c0f3d5 2956#ifdef HAVE_PATHS_H
1d7b9b20 2957# include <paths.h>
41cb4569 2958#endif
2959#ifdef HAVE_LOGIN_H
2960# include <login.h>
1d7b9b20 2961#endif
2962 ],
2963 [ char *lastlog = LASTLOG_FILE; ],
2964 [ AC_MSG_RESULT(yes) ],
d7c0f3d5 2965 [
2966 AC_MSG_RESULT(no)
2967 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
2968 AC_TRY_COMPILE([
2969#include <sys/types.h>
2970#include <utmp.h>
2971#ifdef HAVE_LASTLOG_H
2972# include <lastlog.h>
2973#endif
2974#ifdef HAVE_PATHS_H
2975# include <paths.h>
2976#endif
2977 ],
2978 [ char *lastlog = _PATH_LASTLOG; ],
2979 [ AC_MSG_RESULT(yes) ],
2980 [
f282b668 2981 AC_MSG_RESULT(no)
d7c0f3d5 2982 system_lastlog_path=no
2983 ])
2984 ]
1d7b9b20 2985)
d7c0f3d5 2986
1d7b9b20 2987if test -z "$conf_lastlog_location"; then
2988 if test x"$system_lastlog_path" = x"no" ; then
2989 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
e5fe9a1f 2990 if (test -d "$f" || test -f "$f") ; then
1d7b9b20 2991 conf_lastlog_location=$f
2992 fi
2993 done
2994 if test -z "$conf_lastlog_location"; then
f8119cef 2995 AC_MSG_WARN([** Cannot find lastlog **])
2996 dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
1d7b9b20 2997 fi
2998 fi
2999fi
3000
3001if test -n "$conf_lastlog_location"; then
3002 AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location")
82f4e93d 3003fi
1d7b9b20 3004
3005dnl utmp detection
3006AC_MSG_CHECKING([if your system defines UTMP_FILE])
3007AC_TRY_COMPILE([
3008#include <sys/types.h>
3009#include <utmp.h>
d7c0f3d5 3010#ifdef HAVE_PATHS_H
1d7b9b20 3011# include <paths.h>
3012#endif
3013 ],
3014 [ char *utmp = UTMP_FILE; ],
3015 [ AC_MSG_RESULT(yes) ],
3016 [ AC_MSG_RESULT(no)
3017 system_utmp_path=no ]
3018)
3019if test -z "$conf_utmp_location"; then
3020 if test x"$system_utmp_path" = x"no" ; then
3021 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3022 if test -f $f ; then
3023 conf_utmp_location=$f
3024 fi
3025 done
3026 if test -z "$conf_utmp_location"; then
3027 AC_DEFINE(DISABLE_UTMP)
3028 fi
3029 fi
3030fi
3031if test -n "$conf_utmp_location"; then
3032 AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location")
82f4e93d 3033fi
1d7b9b20 3034
3035dnl wtmp detection
3036AC_MSG_CHECKING([if your system defines WTMP_FILE])
3037AC_TRY_COMPILE([
3038#include <sys/types.h>
3039#include <utmp.h>
d7c0f3d5 3040#ifdef HAVE_PATHS_H
1d7b9b20 3041# include <paths.h>
3042#endif
3043 ],
3044 [ char *wtmp = WTMP_FILE; ],
3045 [ AC_MSG_RESULT(yes) ],
3046 [ AC_MSG_RESULT(no)
3047 system_wtmp_path=no ]
3048)
3049if test -z "$conf_wtmp_location"; then
3050 if test x"$system_wtmp_path" = x"no" ; then
3051 for f in /usr/adm/wtmp /var/log/wtmp; do
3052 if test -f $f ; then
3053 conf_wtmp_location=$f
3054 fi
3055 done
3056 if test -z "$conf_wtmp_location"; then
3057 AC_DEFINE(DISABLE_WTMP)
3058 fi
3059 fi
3060fi
3061if test -n "$conf_wtmp_location"; then
3062 AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location")
82f4e93d 3063fi
1d7b9b20 3064
3065
3066dnl utmpx detection - I don't know any system so perverse as to require
3067dnl utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3068dnl there, though.
3069AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3070AC_TRY_COMPILE([
3071#include <sys/types.h>
3072#include <utmp.h>
3073#ifdef HAVE_UTMPX_H
3074#include <utmpx.h>
3075#endif
d7c0f3d5 3076#ifdef HAVE_PATHS_H
1d7b9b20 3077# include <paths.h>
3078#endif
3079 ],
3080 [ char *utmpx = UTMPX_FILE; ],
3081 [ AC_MSG_RESULT(yes) ],
3082 [ AC_MSG_RESULT(no)
3083 system_utmpx_path=no ]
3084)
3085if test -z "$conf_utmpx_location"; then
3086 if test x"$system_utmpx_path" = x"no" ; then
3087 AC_DEFINE(DISABLE_UTMPX)
3088 fi
3089else
3090 AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location")
82f4e93d 3091fi
1d7b9b20 3092
3093dnl wtmpx detection
3094AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3095AC_TRY_COMPILE([
3096#include <sys/types.h>
3097#include <utmp.h>
3098#ifdef HAVE_UTMPX_H
3099#include <utmpx.h>
3100#endif
d7c0f3d5 3101#ifdef HAVE_PATHS_H
1d7b9b20 3102# include <paths.h>
3103#endif
3104 ],
3105 [ char *wtmpx = WTMPX_FILE; ],
3106 [ AC_MSG_RESULT(yes) ],
3107 [ AC_MSG_RESULT(no)
3108 system_wtmpx_path=no ]
3109)
3110if test -z "$conf_wtmpx_location"; then
3111 if test x"$system_wtmpx_path" = x"no" ; then
3112 AC_DEFINE(DISABLE_WTMPX)
3113 fi
3114else
3115 AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location")
82f4e93d 3116fi
1d7b9b20 3117
b7a87eea 3118
bd499f9e 3119if test ! -z "$blibpath" ; then
68ece370 3120 LDFLAGS="$LDFLAGS $blibflags$blibpath"
3121 AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
bd499f9e 3122fi
3123
ddceb1c8 3124dnl remove pam and dl because they are in $LIBPAM
3125if test "$PAM_MSG" = yes ; then
98f2d9d5 3126 LIBS=`echo $LIBS | sed 's/-lpam //'`
3127fi
3128if test "$ac_cv_lib_pam_pam_set_item" = yes ; then
3129 LIBS=`echo $LIBS | sed 's/-ldl //'`
ddceb1c8 3130fi
3131
3c62e7eb 3132AC_EXEEXT
d7cfdd7c 3133AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openbsd-compat/Makefile \
3134 scard/Makefile ssh_prng_cmds survey.sh])
98a7c37b 3135AC_OUTPUT
d3083fbd 3136
cbd7492e 3137# Print summary of options
3138
cbd7492e 3139# Someone please show me a better way :)
3140A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3141B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3142C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3143D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
f5665f6f 3144E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
e0c4d3ac 3145F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
cbd7492e 3146G=`eval echo ${piddir}` ; G=`eval echo ${G}`
ecac8ee5 3147H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3148I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3149J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
cbd7492e 3150
3151echo ""
26de7942 3152echo "OpenSSH has been configured with the following options:"
ecac8ee5 3153echo " User binaries: $B"
3154echo " System binaries: $C"
3155echo " Configuration files: $D"
3156echo " Askpass program: $E"
3157echo " Manual pages: $F"
3158echo " PID file: $G"
3159echo " Privilege separation chroot path: $H"
95b99395 3160if test "x$external_path_file" = "x/etc/login.conf" ; then
3161echo " At runtime, sshd will use the path defined in $external_path_file"
3162echo " Make sure the path to scp is present, otherwise scp will not work"
8d184c09 3163else
ecac8ee5 3164echo " sshd default user PATH: $I"
89bbd457 3165 if test ! -z "$external_path_file"; then
95b99395 3166echo " (If PATH is set in $external_path_file it will be used instead. If"
3167echo " used, ensure the path to scp is present, otherwise scp will not work.)"
3168 fi
8d184c09 3169fi
06617857 3170if test ! -z "$superuser_path" ; then
ecac8ee5 3171echo " sshd superuser user PATH: $J"
3172fi
3173echo " Manpage format: $MANTYPE"
3e05e934 3174echo " PAM support: $PAM_MSG"
ecac8ee5 3175echo " KerberosV support: $KRB5_MSG"
3176echo " Smartcard support: $SCARD_MSG"
ecac8ee5 3177echo " S/KEY support: $SKEY_MSG"
3178echo " TCP Wrappers support: $TCPW_MSG"
3179echo " MD5 password support: $MD5_MSG"
59031773 3180echo " libedit support: $LIBEDIT_MSG"
3deb1408 3181echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
ecac8ee5 3182echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3183echo " BSD Auth support: $BSD_AUTH_MSG"
3184echo " Random number source: $RAND_MSG"
f1b0ecc3 3185if test ! -z "$USE_RAND_HELPER" ; then
ecac8ee5 3186echo " ssh-rand-helper collects from: $RAND_HELPER_MSG"
af774732 3187fi
3188
cbd7492e 3189echo ""
3190
0c2fb82f 3191echo " Host: ${host}"
3192echo " Compiler: ${CC}"
3193echo " Compiler flags: ${CFLAGS}"
3194echo "Preprocessor flags: ${CPPFLAGS}"
3195echo " Linker flags: ${LDFLAGS}"
ddceb1c8 3196echo " Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
cbd7492e 3197
3198echo ""
3199
9cefe228 3200if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
b3146b5f 3201 echo "SVR4 style packages are supported with \"make package\""
3202 echo ""
9cefe228 3203fi
3204
adeebd37 3205if test "x$PAM_MSG" = "xyes" ; then
f1b0ecc3 3206 echo "PAM is enabled. You may need to install a PAM control file "
3207 echo "for sshd, otherwise password authentication may fail. "
aff51935 3208 echo "Example PAM control files can be found in the contrib/ "
f1b0ecc3 3209 echo "subdirectory"
adeebd37 3210 echo ""
3211fi
3212
f1b0ecc3 3213if test ! -z "$RAND_HELPER_CMDHASH" ; then
3214 echo "WARNING: you are using the builtin random number collection "
3215 echo "service. Please read WARNING.RNG and request that your OS "
3216 echo "vendor includes kernel-based random number collection in "
3217 echo "future versions of your OS."
2c523de9 3218 echo ""
3219fi
af774732 3220
2f6f9cff 3221if test ! -z "$NO_PEERCHECK" ; then
3222 echo "WARNING: the operating system that you are using does not "
3223 echo "appear to support either the getpeereid() API nor the "
3224 echo "SO_PEERCRED getsockopt() option. These facilities are used to "
3225 echo "enforce security checks to prevent unauthorised connections to "
3226 echo "ssh-agent. Their absence increases the risk that a malicious "
3227 echo "user can connect to your agent. "
3228 echo ""
3229fi
3230
7b578f7d 3231if test "$AUDIT_MODULE" = "bsm" ; then
3232 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
3233 echo "See the Solaris section in README.platform for details."
3234fi
git-cvsimport mirror of OpenSSH
This page took 8.562092 seconds and 5 git commands to generate.