]> andersk Git - openssh.git/blame - configure.ac
andersk / openssh.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
- (dtucker) [Makefile.in configure.ac] Replace single-purpose LIBSELINUX,
[openssh.git] / configure.ac
CommitLineData
eb5d7ff6 1# $Id$
2b983b95 2#
3# Copyright (c) 1999-2004 Damien Miller
4#
5# Permission to use, copy, modify, and distribute this software for any
6# purpose with or without fee is hereby granted, provided that the above
7# copyright notice and this permission notice appear in all copies.
8#
9# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
0b202697 16
76e6410a 17AC_INIT(OpenSSH, Portable, openssh-unix-dev@mindrot.org)
823221b2 18AC_REVISION($Revision$)
98a7c37b 19AC_CONFIG_SRCDIR([ssh.c])
5881cd60 20
21AC_CONFIG_HEADER(config.h)
b14b2ae7 22AC_PROG_CC
a7effaac 23AC_CANONICAL_HOST
cf0c5df5 24AC_C_BIGENDIAN
5881cd60 25
a0391976 26# Checks for programs.
4bbf95fa 27AC_PROG_AWK
4cca272e 28AC_PROG_CPP
5881cd60 29AC_PROG_RANLIB
cf8dd513 30AC_PROG_INSTALL
c9ecc3c7 31AC_PROG_EGREP
bee0a37e 32AC_PATH_PROG(AR, ar)
ddd8c95b 33AC_PATH_PROG(CAT, cat)
34AC_PATH_PROG(KILL, kill)
13dd877b 35AC_PATH_PROGS(PERL, perl5 perl)
c3690df3 36AC_PATH_PROG(SED, sed)
a0f84251 37AC_SUBST(PERL)
ad85db64 38AC_PATH_PROG(ENT, ent)
39AC_SUBST(ENT)
6958bd37 40AC_PATH_PROG(TEST_MINUS_S_SH, bash)
41AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
42AC_PATH_PROG(TEST_MINUS_S_SH, sh)
6193497b 43AC_PATH_PROG(SH, sh)
a3245b92 44AC_SUBST(TEST_SHELL,sh)
f498ed15 45
9cefe228 46dnl for buildpkg.sh
47AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
48 [/usr/sbin${PATH_SEPARATOR}/etc])
49AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
50 [/usr/sbin${PATH_SEPARATOR}/etc])
51AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
eeb27c78 52if test -x /sbin/sh; then
53 AC_SUBST(STARTUP_SCRIPT_SHELL,/sbin/sh)
54else
55 AC_SUBST(STARTUP_SCRIPT_SHELL,/bin/sh)
56fi
9cefe228 57
948fd8b9 58# System features
59AC_SYS_LARGEFILE
60
c193d002 61if test -z "$AR" ; then
62 AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
63fi
64
2e73a022 65# Use LOGIN_PROGRAM from environment if possible
66if test ! -z "$LOGIN_PROGRAM" ; then
3466e002 67 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM",
68 [If your header files don't define LOGIN_PROGRAM,
69 then use this (detected) from environment and PATH])
2e73a022 70else
71 # Search for login
72 AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
73 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
74 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
75 fi
76fi
77
37656beb 78AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
79if test ! -z "$PATH_PASSWD_PROG" ; then
3466e002 80 AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG",
81 [Full path of your "passwd" program])
37656beb 82fi
83
d423d822 84if test -z "$LD" ; then
85 LD=$CC
86fi
87AC_SUBST(LD)
82f4e93d 88
d423d822 89AC_C_INLINE
dfafb2e1 90
91AC_CHECK_DECL(LLONG_MAX, have_llong_max=1, , [#include <limits.h>])
92
aff51935 93if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
af40ca44 94 CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wuninitialized"
eeee8237 95 GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'`
5fdabf45 96 case $GCC_VER in
97 1.*) ;;
98 2.8* | 2.9*) CFLAGS="$CFLAGS -Wsign-compare" ;;
99 2.*) ;;
dbf07ba2 100 3.*) CFLAGS="$CFLAGS -Wsign-compare" ;;
cd595991 101 4.*) CFLAGS="$CFLAGS -Wsign-compare -Wno-pointer-sign" ;;
102 *) ;;
5fdabf45 103 esac
8a3ff1aa 104
dfafb2e1 105 if test -z "$have_llong_max"; then
106 # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
107 unset ac_cv_have_decl_LLONG_MAX
108 saved_CFLAGS="$CFLAGS"
109 CFLAGS="$CFLAGS -std=gnu99"
110 AC_CHECK_DECL(LLONG_MAX,
111 [have_llong_max=1],
112 [CFLAGS="$saved_CFLAGS"],
113 [#include <limits.h>]
114 )
115 fi
d423d822 116fi
117
e6354014 118AC_ARG_WITH(rpath,
119 [ --without-rpath Disable auto-added -R linker paths],
120 [
82f4e93d 121 if test "x$withval" = "xno" ; then
e6354014 122 need_dash_r=""
123 fi
124 if test "x$withval" = "xyes" ; then
125 need_dash_r=1
126 fi
127 ]
128)
129
aa56f760 130# Allow user to specify flags
131AC_ARG_WITH(cflags,
132 [ --with-cflags Specify additional flags to pass to compiler],
133 [
134 if test -n "$withval" && test "x$withval" != "xno" && \
135 test "x${withval}" != "xyes"; then
136 CFLAGS="$CFLAGS $withval"
137 fi
138 ]
139)
140AC_ARG_WITH(cppflags,
141 [ --with-cppflags Specify additional flags to pass to preprocessor] ,
142 [
143 if test -n "$withval" && test "x$withval" != "xno" && \
144 test "x${withval}" != "xyes"; then
145 CPPFLAGS="$CPPFLAGS $withval"
146 fi
147 ]
148)
149AC_ARG_WITH(ldflags,
150 [ --with-ldflags Specify additional flags to pass to linker],
151 [
152 if test -n "$withval" && test "x$withval" != "xno" && \
153 test "x${withval}" != "xyes"; then
154 LDFLAGS="$LDFLAGS $withval"
155 fi
156 ]
157)
158AC_ARG_WITH(libs,
159 [ --with-libs Specify additional libraries to link with],
160 [
161 if test -n "$withval" && test "x$withval" != "xno" && \
162 test "x${withval}" != "xyes"; then
163 LIBS="$LIBS $withval"
164 fi
165 ]
166)
167AC_ARG_WITH(Werror,
168 [ --with-Werror Build main code with -Werror],
169 [
170 if test -n "$withval" && test "x$withval" != "xno"; then
171 werror_flags="-Werror"
172 if test "x${withval}" != "xyes"; then
173 werror_flags="$withval"
174 fi
175 fi
176 ]
177)
178
179AC_CHECK_HEADERS( \
180 bstring.h \
181 crypt.h \
182 crypto/sha2.h \
183 dirent.h \
184 endian.h \
185 features.h \
186 fcntl.h \
187 floatingpoint.h \
188 getopt.h \
189 glob.h \
190 ia.h \
191 iaf.h \
192 limits.h \
193 login.h \
194 maillock.h \
195 ndir.h \
196 net/if_tun.h \
197 netdb.h \
198 netgroup.h \
199 pam/pam_appl.h \
200 paths.h \
201 pty.h \
202 readpassphrase.h \
203 rpc/types.h \
204 security/pam_appl.h \
205 sha2.h \
206 shadow.h \
207 stddef.h \
208 stdint.h \
209 string.h \
210 strings.h \
211 sys/audit.h \
212 sys/bitypes.h \
213 sys/bsdtty.h \
214 sys/cdefs.h \
215 sys/dir.h \
216 sys/mman.h \
217 sys/ndir.h \
218 sys/prctl.h \
219 sys/pstat.h \
220 sys/select.h \
221 sys/stat.h \
222 sys/stream.h \
223 sys/stropts.h \
224 sys/strtio.h \
225 sys/sysmacros.h \
226 sys/time.h \
227 sys/timers.h \
228 sys/un.h \
229 time.h \
230 tmpdir.h \
231 ttyent.h \
232 unistd.h \
233 usersec.h \
234 util.h \
235 utime.h \
236 utmp.h \
237 utmpx.h \
238 vis.h \
239)
240
241# lastlog.h requires sys/time.h to be included first on Solaris
242AC_CHECK_HEADERS(lastlog.h, [], [], [
243#ifdef HAVE_SYS_TIME_H
244# include <sys/time.h>
245#endif
246])
247
248# sys/ptms.h requires sys/stream.h to be included first on Solaris
249AC_CHECK_HEADERS(sys/ptms.h, [], [], [
250#ifdef HAVE_SYS_STREAM_H
251# include <sys/stream.h>
252#endif
253])
254
255# login_cap.h requires sys/types.h on NetBSD
256AC_CHECK_HEADERS(login_cap.h, [], [], [
257#include <sys/types.h>
258])
259
5b84789f 260# Messages for features tested for in target-specific section
261SIA_MSG="no"
262SPC_MSG="no"
263
a0391976 264# Check for some target-specific stuff
a7effaac 265case "$host" in
9d6b1b96 266*-*-aix*)
25a2779b 267 # Some versions of VAC won't allow macro redefinitions at
268 # -qlanglevel=ansi, and autoconf 2.60 sometimes insists on using that
269 # particularly with older versions of vac or xlc.
270 # It also throws errors about null macro argments, but these are
271 # not fatal.
272 AC_MSG_CHECKING(if compiler allows macro redefinitions)
273 AC_COMPILE_IFELSE(
274 [AC_LANG_SOURCE([[
275#define testmacro foo
276#define testmacro bar
277int main(void) { exit(0); }
278 ]])],
279 [ AC_MSG_RESULT(yes) ],
280 [ AC_MSG_RESULT(no)
281 CC="`echo $CC | sed 's/-qlanglvl\=ansi//g'`"
282 LD="`echo $LD | sed 's/-qlanglvl\=ansi//g'`"
283 CFLAGS="`echo $CFLAGS | sed 's/-qlanglvl\=ansi//g'`"
284 CPPFLAGS="`echo $CPPFLAGS | sed 's/-qlanglvl\=ansi//g'`"
285 ]
286 )
287
aff51935 288 AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
68ece370 289 if (test -z "$blibpath"); then
0a15d73b 290 blibpath="/usr/lib:/lib"
68ece370 291 fi
292 saved_LDFLAGS="$LDFLAGS"
e7479666 293 if test "$GCC" = "yes"; then
294 flags="-Wl,-blibpath: -Wl,-rpath, -blibpath:"
295 else
296 flags="-blibpath: -Wl,-blibpath: -Wl,-rpath,"
297 fi
298 for tryflags in $flags ;do
68ece370 299 if (test -z "$blibflags"); then
300 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
301 AC_TRY_LINK([], [], [blibflags=$tryflags])
302 fi
303 done
304 if (test -z "$blibflags"); then
305 AC_MSG_RESULT(not found)
306 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
307 else
308 AC_MSG_RESULT($blibflags)
bd499f9e 309 fi
68ece370 310 LDFLAGS="$saved_LDFLAGS"
e351e493 311 dnl Check for authenticate. Might be in libs.a on older AIXes
3466e002 312 AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE, 1,
313 [Define if you want to enable AIX4's authenticate function])],
0764e748 314 [AC_CHECK_LIB(s,authenticate,
e351e493 315 [ AC_DEFINE(WITH_AIXAUTHENTICATE)
0764e748 316 LIBS="$LIBS -ls"
317 ])
318 ])
ba603e06 319 dnl Check for various auth function declarations in headers.
c85ed8e2 320 AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
72ad335d 321 passwdexpired, setauthdb], , , [#include <usersec.h>])
e351e493 322 dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
ba603e06 323 AC_CHECK_DECLS(loginfailed,
e351e493 324 [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
325 AC_TRY_COMPILE(
f58c0e01 326 [#include <usersec.h>],
e351e493 327 [(void)loginfailed("user","host","tty",0);],
328 [AC_MSG_RESULT(yes)
3466e002 329 AC_DEFINE(AIX_LOGINFAILED_4ARG, 1,
330 [Define if your AIX loginfailed() function
331 takes 4 arguments (AIX >= 5.2)])],
f58c0e01 332 [AC_MSG_RESULT(no)]
e351e493 333 )],
334 [],
335 [#include <usersec.h>]
336 )
2aa3a16c 337 AC_CHECK_FUNCS(setauthdb)
53c337ed 338 AC_CHECK_DECL(F_CLOSEM,
795e7517 339 AC_DEFINE(HAVE_FCNTL_CLOSEM, 1, [Use F_CLOSEM fcntl for closefrom]),
53c337ed 340 [],
341 [ #include <limits.h>
342 #include <fcntl.h> ]
343 )
5ccf88cb 344 check_for_aix_broken_getaddrinfo=1
3466e002 345 AC_DEFINE(BROKEN_REALPATH, 1, [Define if you have a broken realpath.])
346 AC_DEFINE(SETEUID_BREAKS_SETUID, 1,
347 [Define if your platform breaks doing a seteuid before a setuid])
348 AC_DEFINE(BROKEN_SETREUID, 1, [Define if your setreuid() is broken])
349 AC_DEFINE(BROKEN_SETREGID, 1, [Define if your setregid() is broken])
a3cef3ca 350 dnl AIX handles lastlog as part of its login message
3466e002 351 AC_DEFINE(DISABLE_LASTLOG, 1, [Define if you don't want to use lastlog])
352 AC_DEFINE(LOGIN_NEEDS_UTMPX, 1,
353 [Some systems need a utmpx entry for /bin/login to work])
354 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV,
355 [Define to a Set Process Title type if your system is
356 supported by bsd-setproctitle.c])
961c2997 357 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
358 [AIX 5.2 and 5.3 (and presumably newer) require this])
ea8c44d9 359 AC_DEFINE(PTY_ZEROREAD, 1, [read(1) can return 0 for a non-closed fd])
9d6b1b96 360 ;;
3c62e7eb 361*-*-cygwin*)
a52997bd 362 check_for_libcrypt_later=1
04765d02 363 LIBS="$LIBS /usr/lib/textreadmode.o"
3466e002 364 AC_DEFINE(HAVE_CYGWIN, 1, [Define if you are on Cygwin])
365 AC_DEFINE(USE_PIPES, 1, [Use PIPES instead of a socketpair()])
366 AC_DEFINE(DISABLE_SHADOW, 1,
367 [Define if you want to disable shadow passwords])
368 AC_DEFINE(IP_TOS_IS_BROKEN, 1,
369 [Define if your system choked on IP TOS setting])
370 AC_DEFINE(NO_X11_UNIX_SOCKETS, 1,
371 [Define if X11 doesn't support AF_UNIX sockets on that system])
372 AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT, 1,
373 [Define if the concept of ports only accessible to
374 superusers isn't known])
375 AC_DEFINE(DISABLE_FD_PASSING, 1,
376 [Define if your platform needs to skip post auth
377 file descriptor passing])
3c62e7eb 378 ;;
d6fdb079 379*-*-dgux*)
380 AC_DEFINE(IP_TOS_IS_BROKEN)
0c6a72a5 381 AC_DEFINE(SETEUID_BREAKS_SETUID)
382 AC_DEFINE(BROKEN_SETREUID)
383 AC_DEFINE(BROKEN_SETREGID)
d6fdb079 384 ;;
39c98ef7 385*-*-darwin*)
33e2e066 386 AC_MSG_CHECKING(if we have working getaddrinfo)
387 AC_TRY_RUN([#include <mach-o/dyld.h>
388main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
389 exit(0);
390 else
391 exit(1);
392}], [AC_MSG_RESULT(working)],
393 [AC_MSG_RESULT(buggy)
3466e002 394 AC_DEFINE(BROKEN_GETADDRINFO, 1, [getaddrinfo is broken (if present)])],
b27e573d 395 [AC_MSG_RESULT(assume it is working)])
635e0c42 396 AC_DEFINE(SETEUID_BREAKS_SETUID)
397 AC_DEFINE(BROKEN_SETREUID)
398 AC_DEFINE(BROKEN_SETREGID)
3466e002 399 AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1,
400 [Define if your resolver libs need this for getrrsetbyname])
e02505e2 401 AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
402 AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
403 [Use tunnel device compatibility to OpenBSD])
404 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
405 [Prepend the address family to IP tunnel traffic])
39c98ef7 406 ;;
36f36ba3 407*-*-dragonfly*)
408 SSHDLIBS="$SSHDLIBS -lcrypt"
409 ;;
7d458c86 410*-*-hpux*)
411 # first we define all of the options common to all HP-UX releases
b8fea62d 412 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
44839801 413 IPADDR_IN_DISPLAY=yes
2b10f47a 414 AC_DEFINE(USE_PIPES)
3466e002 415 AC_DEFINE(LOGIN_NO_ENDOPT, 1,
416 [Define if your login program cannot handle end of options ("--")])
a2572aa7 417 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3466e002 418 AC_DEFINE(LOCKED_PASSWD_STRING, "*",
419 [String used in /etc/passwd to denote locked account])
3a2b2b44 420 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
83f987c3 421 MAIL="/var/mail/username"
f75ca46d 422 LIBS="$LIBS -lsec"
7d458c86 423 AC_CHECK_LIB(xnet, t_error, ,
424 AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
425
426 # next, we define all of the options specific to major releases
427 case "$host" in
428 *-*-hpux10*)
429 if test -z "$GCC"; then
430 CFLAGS="$CFLAGS -Ae"
431 fi
432 ;;
433 *-*-hpux11*)
3466e002 434 AC_DEFINE(PAM_SUN_CODEBASE, 1,
435 [Define if you are using Solaris-derived PAM which
436 passes pam_messages to the conversation function
437 with an extra level of indirection])
438 AC_DEFINE(DISABLE_UTMP, 1,
439 [Define if you don't want to use utmp])
7d458c86 440 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
441 check_for_hpux_broken_getaddrinfo=1
442 check_for_conflicting_getspnam=1
443 ;;
444 esac
445
446 # lastly, we define options specific to minor releases
447 case "$host" in
448 *-*-hpux10.26)
3466e002 449 AC_DEFINE(HAVE_SECUREWARE, 1,
450 [Define if you have SecureWare-based
451 protected password database])
7d458c86 452 disable_ptmx_check=yes
453 LIBS="$LIBS -lsecpw"
454 ;;
455 esac
2b763e31 456 ;;
d94aa2ae 457*-*-irix5*)
6ac7829a 458 PATH="$PATH:/usr/etc"
3466e002 459 AC_DEFINE(BROKEN_INET_NTOA, 1,
460 [Define if you system's inet_ntoa is busted
461 (e.g. Irix gcc issue)])
cb433561 462 AC_DEFINE(SETEUID_BREAKS_SETUID)
463 AC_DEFINE(BROKEN_SETREUID)
464 AC_DEFINE(BROKEN_SETREGID)
3466e002 465 AC_DEFINE(WITH_ABBREV_NO_TTY, 1,
466 [Define if you shouldn't strip 'tty' from your
467 ttyname in [uw]tmp])
3e6e3da0 468 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
b9795b89 469 ;;
470*-*-irix6*)
6ac7829a 471 PATH="$PATH:/usr/etc"
3466e002 472 AC_DEFINE(WITH_IRIX_ARRAY, 1,
473 [Define if you have/want arrays
474 (cluster-wide session managment, not C arrays)])
475 AC_DEFINE(WITH_IRIX_PROJECT, 1,
476 [Define if you want IRIX project management])
477 AC_DEFINE(WITH_IRIX_AUDIT, 1,
478 [Define if you want IRIX audit trails])
479 AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS, 1,
480 [Define if you want IRIX kernel jobs])])
416ed5a7 481 AC_DEFINE(BROKEN_INET_NTOA)
412c0eaa 482 AC_DEFINE(SETEUID_BREAKS_SETUID)
483 AC_DEFINE(BROKEN_SETREUID)
484 AC_DEFINE(BROKEN_SETREGID)
3466e002 485 AC_DEFINE(BROKEN_UPDWTMPX, 1, [updwtmpx is broken (if present)])
0e8f4eba 486 AC_DEFINE(WITH_ABBREV_NO_TTY)
3e6e3da0 487 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
d94aa2ae 488 ;;
5cdfe03f 489*-*-linux*)
490 no_dev_ptmx=1
717057b6 491 check_for_libcrypt_later=1
eacb954e 492 check_for_openpty_ctty_bug=1
3466e002 493 AC_DEFINE(DONT_TRY_OTHER_AF, 1, [Workaround more Linux IPv6 quirks])
494 AC_DEFINE(PAM_TTY_KLUDGE, 1,
495 [Work around problematic Linux PAM modules handling of PAM_TTY])
496 AC_DEFINE(LOCKED_PASSWD_PREFIX, "!",
497 [String used in /etc/passwd to denote locked account])
3a2b2b44 498 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
3466e002 499 AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM,
500 [Define to whatever link() returns for "not supported"
501 if it doesn't return EOPNOTSUPP.])
b6610e8f 502 AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
3466e002 503 AC_DEFINE(USE_BTMP)
80faa19f 504 inet6_default_4in6=yes
bf7c1e6c 505 case `uname -r` in
ad84c479 506 1.*|2.0.*)
3466e002 507 AC_DEFINE(BROKEN_CMSG_TYPE, 1,
508 [Define if cmsg_type is not passed correctly])
bf7c1e6c 509 ;;
bf7c1e6c 510 esac
c40f09ca 511 # tun(4) forwarding compat code
d91775e1 512 AC_CHECK_HEADERS(linux/if_tun.h)
b5081213 513 if test "x$ac_cv_header_linux_if_tun_h" = "xyes" ; then
c40f09ca 514 AC_DEFINE(SSH_TUN_LINUX, 1,
515 [Open tunnel devices the Linux tun/tap way])
516 AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
517 [Use tunnel device compatibility to OpenBSD])
518 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
519 [Prepend the address family to IP tunnel traffic])
520 fi
5cdfe03f 521 ;;
66d6c27e 522mips-sony-bsd|mips-sony-newsos4)
4b2cf3f1 523 AC_DEFINE(NEED_SETPGRP, 1, [Need setpgrp to acquire controlling tty])
66d6c27e 524 SONY=1
66d6c27e 525 ;;
d468fc76 526*-*-netbsd*)
33e2e066 527 check_for_libcrypt_before=1
82f4e93d 528 if test "x$withval" != "xno" ; then
e6354014 529 need_dash_r=1
530 fi
0f6cb079 531 AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
532 AC_CHECK_HEADER([net/if_tap.h], ,
533 AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
534 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
535 [Prepend the address family to IP tunnel traffic])
d468fc76 536 ;;
86b416a7 537*-*-freebsd*)
538 check_for_libcrypt_later=1
988c5031 539 AC_DEFINE(LOCKED_PASSWD_PREFIX, "*LOCKED*", [Account locked with pw(1)])
0f6cb079 540 AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
541 AC_CHECK_HEADER([net/if_tap.h], ,
542 AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
86b416a7 543 ;;
8707b7eb 544*-*-bsdi*)
545 AC_DEFINE(SETEUID_BREAKS_SETUID)
546 AC_DEFINE(BROKEN_SETREUID)
547 AC_DEFINE(BROKEN_SETREGID)
548 ;;
729bfe59 549*-next-*)
729bfe59 550 conf_lastlog_location="/usr/adm/lastlog"
698d107e 551 conf_utmp_location=/etc/utmp
552 conf_wtmp_location=/usr/adm/wtmp
553 MAIL=/usr/spool/mail
3466e002 554 AC_DEFINE(HAVE_NEXT, 1, [Define if you are on NeXT])
443172c4 555 AC_DEFINE(BROKEN_REALPATH)
00937921 556 AC_DEFINE(USE_PIPES)
3466e002 557 AC_DEFINE(BROKEN_SAVED_UIDS, 1, [Needed for NeXT])
729bfe59 558 ;;
5b7b5e23 559*-*-openbsd*)
560 AC_DEFINE(HAVE_ATTRIBUTE__SENTINEL__, 1, [OpenBSD's gcc has sentinel])
8034a348 561 AC_DEFINE(HAVE_ATTRIBUTE__BOUNDED__, 1, [OpenBSD's gcc has bounded])
0f6cb079 562 AC_DEFINE(SSH_TUN_OPENBSD, 1, [Open tunnel devices the OpenBSD way])
c79c4814 563 AC_DEFINE(SYSLOG_R_SAFE_IN_SIGHAND, 1,
564 [syslog_r function is safe to use in in a signal handler])
5b7b5e23 565 ;;
9d6b1b96 566*-*-solaris*)
82f4e93d 567 if test "x$withval" != "xno" ; then
010e9d5b 568 need_dash_r=1
569 fi
adeebd37 570 AC_DEFINE(PAM_SUN_CODEBASE)
7e2d5fa4 571 AC_DEFINE(LOGIN_NEEDS_UTMPX)
3466e002 572 AC_DEFINE(LOGIN_NEEDS_TERM, 1,
573 [Some versions of /bin/login need the TERM supplied
574 on the commandline])
7f0a4ff1 575 AC_DEFINE(PAM_TTY_KLUDGE)
3466e002 576 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
577 [Define if pam_chauthtok wants real uid set
578 to the unpriv'ed user])
3e6e3da0 579 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
ad84c479 580 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
3466e002 581 AC_DEFINE(SSHD_ACQUIRES_CTTY, 1,
582 [Define if sshd somehow reacquires a controlling TTY
583 after setsid()])
795aa5f5 584 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd
585 in case the name is longer than 8 chars])
95b99395 586 external_path_file=/etc/default/login
1d7b9b20 587 # hardwire lastlog location (can't detect it on some versions)
588 conf_lastlog_location="/var/adm/lastlog"
32c80420 589 AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
590 sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
591 if test "$sol2ver" -ge 8; then
592 AC_MSG_RESULT(yes)
593 AC_DEFINE(DISABLE_UTMP)
3466e002 594 AC_DEFINE(DISABLE_WTMP, 1,
595 [Define if you don't want to use wtmp])
32c80420 596 else
597 AC_MSG_RESULT(no)
598 fi
5b84789f 599 AC_ARG_WITH(solaris-contracts,
600 [ --with-solaris-contracts Enable Solaris process contracts (experimental)],
601 [
602 AC_CHECK_LIB(contract, ct_tmpl_activate,
603 [ AC_DEFINE(USE_SOLARIS_PROCESS_CONTRACTS, 1,
604 [Define if you have Solaris process contracts])
605 SSHDLIBS="$SSHDLIBS -lcontract"
606 AC_SUBST(SSHDLIBS)
607 SPC_MSG="yes" ], )
608 ],
609 )
9d6b1b96 610 ;;
a423beaf 611*-*-sunos4*)
0c2fb82f 612 CPPFLAGS="$CPPFLAGS -DSUNOS4"
a423beaf 613 AC_CHECK_FUNCS(getpwanam)
adeebd37 614 AC_DEFINE(PAM_SUN_CODEBASE)
32eec038 615 conf_utmp_location=/etc/utmp
616 conf_wtmp_location=/var/adm/wtmp
617 conf_lastlog_location=/var/adm/lastlog
137d7b6c 618 AC_DEFINE(USE_PIPES)
a423beaf 619 ;;
6f68f28a 620*-ncr-sysv*)
98a7c37b 621 LIBS="$LIBS -lc89"
29525240 622 AC_DEFINE(USE_PIPES)
eabb99c6 623 AC_DEFINE(SSHD_ACQUIRES_CTTY)
6fb3618d 624 AC_DEFINE(SETEUID_BREAKS_SETUID)
625 AC_DEFINE(BROKEN_SETREUID)
626 AC_DEFINE(BROKEN_SETREGID)
6f68f28a 627 ;;
132dd316 628*-sni-sysv*)
c8c15bcb 629 # /usr/ucblib MUST NOT be searched on ReliantUNIX
e2798e96 630 AC_CHECK_LIB(dl, dlsym, ,)
d08db6d1 631 # -lresolv needs to be at the end of LIBS or DNS lookups break
632 AC_CHECK_LIB(resolv, res_query, [ LIBS="$LIBS -lresolv" ])
9548d6c8 633 IPADDR_IN_DISPLAY=yes
634 AC_DEFINE(USE_PIPES)
132dd316 635 AC_DEFINE(IP_TOS_IS_BROKEN)
605369bb 636 AC_DEFINE(SETEUID_BREAKS_SETUID)
637 AC_DEFINE(BROKEN_SETREUID)
638 AC_DEFINE(BROKEN_SETREGID)
eabb99c6 639 AC_DEFINE(SSHD_ACQUIRES_CTTY)
95b99395 640 external_path_file=/etc/default/login
c8c15bcb 641 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
642 # Attention: always take care to bind libsocket and libnsl before libc,
643 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
132dd316 644 ;;
79a7ba96 645# UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
77bb0bca 646*-*-sysv4.2*)
ed6553e2 647 AC_DEFINE(USE_PIPES)
7ed101c0 648 AC_DEFINE(SETEUID_BREAKS_SETUID)
649 AC_DEFINE(BROKEN_SETREUID)
650 AC_DEFINE(BROKEN_SETREGID)
46f853b9 651 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
e45da4d6 652 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
77bb0bca 653 ;;
79a7ba96 654# UnixWare 7.x, OpenUNIX 8
77bb0bca 655*-*-sysv5*)
d7d2cc6e 656 check_for_libcrypt_later=1
657 AC_DEFINE(UNIXWARE_LONG_PASSWORDS, 1, [Support passwords > 8 chars])
ed6553e2 658 AC_DEFINE(USE_PIPES)
7ed101c0 659 AC_DEFINE(SETEUID_BREAKS_SETUID)
660 AC_DEFINE(BROKEN_SETREUID)
661 AC_DEFINE(BROKEN_SETREGID)
3466e002 662 AC_DEFINE(PASSWD_NEEDS_USERNAME)
822015dd 663 case "$host" in
664 *-*-sysv5SCO_SV*) # SCO OpenServer 6.x
665 TEST_SHELL=/u95/bin/sh
3466e002 666 AC_DEFINE(BROKEN_LIBIAF, 1,
667 [ia_uinfo routines not supported by OS yet])
5cc6ddad 668 AC_DEFINE(BROKEN_UPDWTMPX)
822015dd 669 ;;
e45da4d6 670 *) AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
671 ;;
822015dd 672 esac
77bb0bca 673 ;;
9d6b1b96 674*-*-sysv*)
9d6b1b96 675 ;;
79a7ba96 676# SCO UNIX and OEM versions of SCO UNIX
77bb0bca 677*-*-sco3.2v4*)
11cf4f1f 678 AC_MSG_ERROR("This Platform is no longer supported.")
77bb0bca 679 ;;
79a7ba96 680# SCO OpenServer 5.x
77bb0bca 681*-*-sco3.2v5*)
21710e39 682 if test -z "$GCC"; then
683 CFLAGS="$CFLAGS -belf"
684 fi
ed6553e2 685 LIBS="$LIBS -lprot -lx -ltinfo -lm"
509b1f88 686 no_dev_ptmx=1
ed6553e2 687 AC_DEFINE(USE_PIPES)
6e879cb4 688 AC_DEFINE(HAVE_SECUREWARE)
d287c664 689 AC_DEFINE(DISABLE_SHADOW)
94d8258b 690 AC_DEFINE(DISABLE_FD_PASSING)
7ed101c0 691 AC_DEFINE(SETEUID_BREAKS_SETUID)
692 AC_DEFINE(BROKEN_SETREUID)
693 AC_DEFINE(BROKEN_SETREGID)
bcebad47 694 AC_DEFINE(WITH_ABBREV_NO_TTY)
34f2baf0 695 AC_DEFINE(BROKEN_UPDWTMPX)
3466e002 696 AC_DEFINE(PASSWD_NEEDS_USERNAME)
aca75d94 697 AC_CHECK_FUNCS(getluid setluid)
533875af 698 MANTYPE=man
a3245b92 699 TEST_SHELL=ksh
509b1f88 700 ;;
ccbb983c 701*-*-unicosmk*)
3466e002 702 AC_DEFINE(NO_SSH_LASTLOG, 1,
703 [Define if you don't want to use lastlog in session.c])
c1ad5966 704 AC_DEFINE(SETEUID_BREAKS_SETUID)
705 AC_DEFINE(BROKEN_SETREUID)
706 AC_DEFINE(BROKEN_SETREGID)
ccbb983c 707 AC_DEFINE(USE_PIPES)
708 AC_DEFINE(DISABLE_FD_PASSING)
709 LDFLAGS="$LDFLAGS"
710 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
711 MANTYPE=cat
d262b7f2 712 ;;
7b9a8c6e 713*-*-unicosmp*)
c1ad5966 714 AC_DEFINE(SETEUID_BREAKS_SETUID)
715 AC_DEFINE(BROKEN_SETREUID)
716 AC_DEFINE(BROKEN_SETREGID)
7b9a8c6e 717 AC_DEFINE(WITH_ABBREV_NO_TTY)
718 AC_DEFINE(USE_PIPES)
719 AC_DEFINE(DISABLE_FD_PASSING)
720 LDFLAGS="$LDFLAGS"
c1ad5966 721 LIBS="$LIBS -lgen -lacid -ldb"
7b9a8c6e 722 MANTYPE=cat
723 ;;
ca5c7d6a 724*-*-unicos*)
c1ad5966 725 AC_DEFINE(SETEUID_BREAKS_SETUID)
726 AC_DEFINE(BROKEN_SETREUID)
727 AC_DEFINE(BROKEN_SETREGID)
ca5c7d6a 728 AC_DEFINE(USE_PIPES)
94d8258b 729 AC_DEFINE(DISABLE_FD_PASSING)
ef51930f 730 AC_DEFINE(NO_SSH_LASTLOG)
ccbb983c 731 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
732 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
733 MANTYPE=cat
a704dd54 734 ;;
4d33e531 735*-dec-osf*)
99c8ddac 736 AC_MSG_CHECKING(for Digital Unix SIA)
737 no_osfsia=""
738 AC_ARG_WITH(osfsia,
739 [ --with-osfsia Enable Digital Unix SIA],
740 [
741 if test "x$withval" = "xno" ; then
742 AC_MSG_RESULT(disabled)
743 no_osfsia=1
744 fi
745 ],
746 )
747 if test -z "$no_osfsia" ; then
4d33e531 748 if test -f /etc/sia/matrix.conf; then
749 AC_MSG_RESULT(yes)
3466e002 750 AC_DEFINE(HAVE_OSF_SIA, 1,
751 [Define if you have Digital Unix Security
752 Integration Architecture])
753 AC_DEFINE(DISABLE_LOGIN, 1,
754 [Define if you don't want to use your
755 system's login() call])
58d0df4e 756 AC_DEFINE(DISABLE_FD_PASSING)
4d33e531 757 LIBS="$LIBS -lsecurity -ldb -lm -laud"
5b84789f 758 SIA_MSG="yes"
4d33e531 759 else
760 AC_MSG_RESULT(no)
3466e002 761 AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin",
762 [String used in /etc/passwd to denote locked account])
4d33e531 763 fi
764 fi
a6e67b60 765 AC_DEFINE(BROKEN_GETADDRINFO)
f4f2ff4f 766 AC_DEFINE(SETEUID_BREAKS_SETUID)
08da2d08 767 AC_DEFINE(BROKEN_SETREUID)
768 AC_DEFINE(BROKEN_SETREGID)
4d33e531 769 ;;
41cb4569 770
9c54c067 771*-*-nto-qnx*)
41cb4569 772 AC_DEFINE(USE_PIPES)
773 AC_DEFINE(NO_X11_UNIX_SOCKETS)
3466e002 774 AC_DEFINE(MISSING_NFDBITS, 1, [Define on *nto-qnx systems])
775 AC_DEFINE(MISSING_HOWMANY, 1, [Define on *nto-qnx systems])
776 AC_DEFINE(MISSING_FD_MASK, 1, [Define on *nto-qnx systems])
9c54c067 777 AC_DEFINE(DISABLE_LASTLOG)
49c64dd6 778 AC_DEFINE(SSHD_ACQUIRES_CTTY)
0c7e8877 779 enable_etc_default_login=no # has incompatible /etc/default/login
41cb4569 780 ;;
35fc74ed 781
782*-*-ultrix*)
3466e002 783 AC_DEFINE(BROKEN_GETGROUPS, 1, [getgroups(0,NULL) will return -1])
784 AC_DEFINE(BROKEN_MMAP, 1, [Ultrix mmap can't map files])
4b2cf3f1 785 AC_DEFINE(NEED_SETPGRP)
b5765e1d 786 AC_DEFINE(HAVE_SYS_SYSLOG_H, 1, [Force use of sys/syslog.h on Ultrix])
787 ;;
157b6700 788
789*-*-lynxos)
790 CFLAGS="$CFLAGS -D__NO_INCLUDE_WARN__"
3466e002 791 AC_DEFINE(MISSING_HOWMANY)
157b6700 792 AC_DEFINE(BROKEN_SETVBUF, 1, [LynxOS has broken setvbuf() implementation])
793 ;;
a7effaac 794esac
795
c5829391 796AC_MSG_CHECKING(compiler and flags for sanity)
479cece8 797AC_RUN_IFELSE(
798 [AC_LANG_SOURCE([
c5829391 799#include <stdio.h>
800int main(){exit(0);}
479cece8 801 ])],
c5829391 802 [ AC_MSG_RESULT(yes) ],
803 [
804 AC_MSG_RESULT(no)
805 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
1a01a50c 806 ],
807 [ AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
c5829391 808)
809
b04a9f8c 810dnl Checks for header files.
a0391976 811# Checks for libraries.
98a7c37b 812AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
813AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
2c523de9 814
446227d6 815dnl IRIX and Solaris 2.5.1 have dirname() in libgen
816AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
817 AC_CHECK_LIB(gen, dirname,[
818 AC_CACHE_CHECK([for broken dirname],
819 ac_cv_have_broken_dirname, [
820 save_LIBS="$LIBS"
821 LIBS="$LIBS -lgen"
b0e7249f 822 AC_RUN_IFELSE(
823 [AC_LANG_SOURCE([[
446227d6 824#include <libgen.h>
825#include <string.h>
826
827int main(int argc, char **argv) {
828 char *s, buf[32];
829
830 strncpy(buf,"/etc", 32);
831 s = dirname(buf);
832 if (!s || strncmp(s, "/", 32) != 0) {
833 exit(1);
834 } else {
835 exit(0);
836 }
837}
b0e7249f 838 ]])],
839 [ ac_cv_have_broken_dirname="no" ],
840 [ ac_cv_have_broken_dirname="yes" ],
446227d6 841 [ ac_cv_have_broken_dirname="no" ],
446227d6 842 )
843 LIBS="$save_LIBS"
844 ])
845 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
846 LIBS="$LIBS -lgen"
847 AC_DEFINE(HAVE_DIRNAME)
848 AC_CHECK_HEADERS(libgen.h)
849 fi
850 ])
851])
852
853AC_CHECK_FUNC(getspnam, ,
854 AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
3466e002 855AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME, 1,
856 [Define if you have the basename function.]))
446227d6 857
98a7c37b 858dnl zlib is required
859AC_ARG_WITH(zlib,
860 [ --with-zlib=PATH Use zlib in PATH],
6dd05556 861 [ if test "x$withval" = "xno" ; then
862 AC_MSG_ERROR([*** zlib is required ***])
863 elif test "x$withval" != "xyes"; then
98a7c37b 864 if test -d "$withval/lib"; then
865 if test -n "${need_dash_r}"; then
5a162955 866 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 867 else
5a162955 868 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 869 fi
870 else
871 if test -n "${need_dash_r}"; then
5a162955 872 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 873 else
5a162955 874 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 875 fi
876 fi
877 if test -d "$withval/include"; then
5a162955 878 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 879 else
5a162955 880 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 881 fi
6dd05556 882 fi ]
98a7c37b 883)
884
0a15d73b 885AC_CHECK_LIB(z, deflate, ,
886 [
887 saved_CPPFLAGS="$CPPFLAGS"
888 saved_LDFLAGS="$LDFLAGS"
889 save_LIBS="$LIBS"
890 dnl Check default zlib install dir
891 if test -n "${need_dash_r}"; then
892 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
893 else
894 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
895 fi
896 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
897 LIBS="$LIBS -lz"
898 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
899 [
900 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
901 ]
902 )
903 ]
904)
4ad65809 905AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
8068d564 906
907AC_ARG_WITH(zlib-version-check,
908 [ --without-zlib-version-check Disable zlib version check],
909 [ if test "x$withval" = "xno" ; then
910 zlib_check_nonfatal=1
911 fi
912 ]
913)
914
5c7fc85d 915AC_MSG_CHECKING(for possibly buggy zlib)
479cece8 916AC_RUN_IFELSE([AC_LANG_SOURCE([[
5c7fc85d 917#include <stdio.h>
4ad65809 918#include <zlib.h>
919int main()
920{
5c7fc85d 921 int a=0, b=0, c=0, d=0, n, v;
922 n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
923 if (n != 3 && n != 4)
4ad65809 924 exit(1);
5c7fc85d 925 v = a*1000000 + b*10000 + c*100 + d;
926 fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
927
928 /* 1.1.4 is OK */
929 if (a == 1 && b == 1 && c >= 4)
4ad65809 930 exit(0);
5c7fc85d 931
0072b59d 932 /* 1.2.3 and up are OK */
933 if (v >= 1020300)
5c7fc85d 934 exit(0);
935
4ad65809 936 exit(2);
937}
479cece8 938 ]])],
5c7fc85d 939 AC_MSG_RESULT(no),
940 [ AC_MSG_RESULT(yes)
8068d564 941 if test -z "$zlib_check_nonfatal" ; then
942 AC_MSG_ERROR([*** zlib too old - check config.log ***
943Your reported zlib version has known security problems. It's possible your
944vendor has fixed these problems without changing the version number. If you
945are sure this is the case, you can disable the check by running
946"./configure --without-zlib-version-check".
6090bcfe 947If you are in doubt, upgrade zlib to version 1.2.3 or greater.
5c7fc85d 948See http://www.gzip.org/zlib/ for details.])
8068d564 949 else
950 AC_MSG_WARN([zlib version may have security problems])
951 fi
1a01a50c 952 ],
953 [ AC_MSG_WARN([cross compiling: not checking zlib version]) ]
4ad65809 954)
48e7916f 955
2c523de9 956dnl UnixWare 2.x
aff51935 957AC_CHECK_FUNC(strcasecmp,
2c523de9 958 [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
959)
23361281 960AC_CHECK_FUNCS(utimes,
cda1ebcb 961 [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
962 LIBS="$LIBS -lc89"]) ]
2c523de9 963)
4cca272e 964
7c6d759d 965dnl Checks for libutil functions
966AC_CHECK_HEADERS(libutil.h)
3466e002 967AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN, 1,
968 [Define if your libraries define login()])])
7c6d759d 969AC_CHECK_FUNCS(logout updwtmp logwtmp)
970
a738c3b0 971AC_FUNC_STRFTIME
972
84ceda19 973# Check for ALTDIRFUNC glob() extension
974AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
975AC_EGREP_CPP(FOUNDIT,
976 [
977 #include <glob.h>
978 #ifdef GLOB_ALTDIRFUNC
979 FOUNDIT
980 #endif
aff51935 981 ],
84ceda19 982 [
3466e002 983 AC_DEFINE(GLOB_HAS_ALTDIRFUNC, 1,
984 [Define if your system glob() function has
985 the GLOB_ALTDIRFUNC extension])
84ceda19 986 AC_MSG_RESULT(yes)
987 ],
988 [
989 AC_MSG_RESULT(no)
990 ]
991)
4cca272e 992
40849fdb 993# Check for g.gl_matchc glob() extension
994AC_MSG_CHECKING(for gl_matchc field in glob_t)
d90b9f9a 995AC_TRY_COMPILE(
13ff27b7 996 [ #include <glob.h> ],
997 [glob_t g; g.gl_matchc = 1;],
aff51935 998 [
3466e002 999 AC_DEFINE(GLOB_HAS_GL_MATCHC, 1,
1000 [Define if your system glob() function has
1001 gl_matchc options in glob_t])
aff51935 1002 AC_MSG_RESULT(yes)
1003 ],
1004 [
1005 AC_MSG_RESULT(no)
1006 ]
40849fdb 1007)
1008
78888bab 1009AC_CHECK_DECLS(GLOB_NOMATCH, , , [#include <glob.h>])
1010
edbe6722 1011AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
1a01a50c 1012AC_RUN_IFELSE(
479cece8 1013 [AC_LANG_SOURCE([[
edbe6722 1014#include <sys/types.h>
1015#include <dirent.h>
aec4cb4f 1016int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
479cece8 1017 ]])],
aff51935 1018 [AC_MSG_RESULT(yes)],
edbe6722 1019 [
1020 AC_MSG_RESULT(no)
3466e002 1021 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME, 1,
d08db6d1 1022 [Define if your struct dirent expects you to
3466e002 1023 allocate extra space for d_name])
1a01a50c 1024 ],
82f4e93d 1025 [
1a01a50c 1026 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
1027 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
edbe6722 1028 ]
1029)
1030
419e26e7 1031AC_MSG_CHECKING([for /proc/pid/fd directory])
1032if test -d "/proc/$$/fd" ; then
3466e002 1033 AC_DEFINE(HAVE_PROC_PID, 1, [Define if you have /proc/$pid/fd])
419e26e7 1034 AC_MSG_RESULT(yes)
1035else
1036 AC_MSG_RESULT(no)
1037fi
1038
278588d8 1039# Check whether user wants S/Key support
aff51935 1040SKEY_MSG="no"
278588d8 1041AC_ARG_WITH(skey,
6ff3d0dc 1042 [ --with-skey[[=PATH]] Enable S/Key support (optionally in PATH)],
278588d8 1043 [
1044 if test "x$withval" != "xno" ; then
1045
1046 if test "x$withval" != "xyes" ; then
1047 CPPFLAGS="$CPPFLAGS -I${withval}/include"
1048 LDFLAGS="$LDFLAGS -L${withval}/lib"
1049 fi
1050
3466e002 1051 AC_DEFINE(SKEY, 1, [Define if you want S/Key support])
278588d8 1052 LIBS="-lskey $LIBS"
aff51935 1053 SKEY_MSG="yes"
82f4e93d 1054
ddceb1c8 1055 AC_MSG_CHECKING([for s/key support])
b0e7249f 1056 AC_LINK_IFELSE(
1057 [AC_LANG_SOURCE([[
ddceb1c8 1058#include <stdio.h>
1059#include <skey.h>
aec4cb4f 1060int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
b0e7249f 1061 ]])],
ddceb1c8 1062 [AC_MSG_RESULT(yes)],
278588d8 1063 [
ddceb1c8 1064 AC_MSG_RESULT(no)
278588d8 1065 AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
1066 ])
141fc639 1067 AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
1068 AC_TRY_COMPILE(
1069 [#include <stdio.h>
1070 #include <skey.h>],
1071 [(void)skeychallenge(NULL,"name","",0);],
1072 [AC_MSG_RESULT(yes)
3466e002 1073 AC_DEFINE(SKEYCHALLENGE_4ARG, 1,
1074 [Define if your skeychallenge()
1075 function takes 4 arguments (NetBSD)])],
141fc639 1076 [AC_MSG_RESULT(no)]
1077 )
278588d8 1078 fi
1079 ]
1080)
1081
1082# Check whether user wants TCP wrappers support
98a7c37b 1083TCPW_MSG="no"
278588d8 1084AC_ARG_WITH(tcp-wrappers,
6ff3d0dc 1085 [ --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
278588d8 1086 [
1087 if test "x$withval" != "xno" ; then
1088 saved_LIBS="$LIBS"
98a7c37b 1089 saved_LDFLAGS="$LDFLAGS"
1090 saved_CPPFLAGS="$CPPFLAGS"
4b492aab 1091 if test -n "${withval}" && \
6cf0200f 1092 test "x${withval}" != "xyes"; then
98a7c37b 1093 if test -d "${withval}/lib"; then
1094 if test -n "${need_dash_r}"; then
5a162955 1095 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
98a7c37b 1096 else
5a162955 1097 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
98a7c37b 1098 fi
1099 else
1100 if test -n "${need_dash_r}"; then
5a162955 1101 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
98a7c37b 1102 else
5a162955 1103 LDFLAGS="-L${withval} ${LDFLAGS}"
98a7c37b 1104 fi
1105 fi
1106 if test -d "${withval}/include"; then
5a162955 1107 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
98a7c37b 1108 else
5a162955 1109 CPPFLAGS="-I${withval} ${CPPFLAGS}"
98a7c37b 1110 fi
98a7c37b 1111 fi
e54defb4 1112 LIBS="-lwrap $LIBS"
278588d8 1113 AC_MSG_CHECKING(for libwrap)
1114 AC_TRY_LINK(
1115 [
77f09220 1116#include <sys/types.h>
1117#include <sys/socket.h>
1118#include <netinet/in.h>
278588d8 1119#include <tcpd.h>
1120 int deny_severity = 0, allow_severity = 0;
1121 ],
1122 [hosts_access(0);],
1123 [
1124 AC_MSG_RESULT(yes)
3466e002 1125 AC_DEFINE(LIBWRAP, 1,
1126 [Define if you want
1127 TCP Wrappers support])
e54defb4 1128 SSHDLIBS="$SSHDLIBS -lwrap"
98a7c37b 1129 TCPW_MSG="yes"
278588d8 1130 ],
1131 [
1132 AC_MSG_ERROR([*** libwrap missing])
1133 ]
1134 )
ddceb1c8 1135 LIBS="$saved_LIBS"
278588d8 1136 fi
1137 ]
1138)
1139
59031773 1140# Check whether user wants libedit support
1141LIBEDIT_MSG="no"
1142AC_ARG_WITH(libedit,
6ff3d0dc 1143 [ --with-libedit[[=PATH]] Enable libedit support for sftp],
59031773 1144 [ if test "x$withval" != "xno" ; then
737edf04 1145 if test "x$withval" != "xyes"; then
bb116c8e 1146 CPPFLAGS="$CPPFLAGS -I${withval}/include"
1147 if test -n "${need_dash_r}"; then
1148 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1149 else
1150 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1151 fi
737edf04 1152 fi
59031773 1153 AC_CHECK_LIB(edit, el_init,
3466e002 1154 [ AC_DEFINE(USE_LIBEDIT, 1, [Use libedit for sftp])
59031773 1155 LIBEDIT="-ledit -lcurses"
1156 LIBEDIT_MSG="yes"
1157 AC_SUBST(LIBEDIT)
1158 ],
737edf04 1159 [ AC_MSG_ERROR(libedit not found) ],
1160 [ -lcurses ]
59031773 1161 )
f47ddccb 1162 AC_MSG_CHECKING(if libedit version is compatible)
d92622f9 1163 AC_COMPILE_IFELSE(
1164 [AC_LANG_SOURCE([[
1165#include <histedit.h>
f47ddccb 1166int main(void)
1167{
1168 int i = H_SETSIZE;
1169 el_init("", NULL, NULL, NULL);
1170 exit(0);
1171}
d92622f9 1172 ]])],
f47ddccb 1173 [ AC_MSG_RESULT(yes) ],
1174 [ AC_MSG_RESULT(no)
1175 AC_MSG_ERROR(libedit version is not compatible) ]
1176 )
59031773 1177 fi ]
1178)
1179
7b578f7d 1180AUDIT_MODULE=none
1181AC_ARG_WITH(audit,
1182 [ --with-audit=module Enable EXPERIMENTAL audit support (modules=debug,bsm)],
1183 [
1184 AC_MSG_CHECKING(for supported audit module)
1185 case "$withval" in
1186 bsm)
1187 AC_MSG_RESULT(bsm)
1188 AUDIT_MODULE=bsm
1189 dnl Checks for headers, libs and functions
1190 AC_CHECK_HEADERS(bsm/audit.h, [],
a01f637d 1191 [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)],
1192 [
1193#ifdef HAVE_TIME_H
1194# include <time.h>
1195#endif
1196 ]
1197)
7b578f7d 1198 AC_CHECK_LIB(bsm, getaudit, [],
1199 [AC_MSG_ERROR(BSM enabled and required library not found)])
1200 AC_CHECK_FUNCS(getaudit, [],
1201 [AC_MSG_ERROR(BSM enabled and required function not found)])
1202 # These are optional
7939c496 1203 AC_CHECK_FUNCS(getaudit_addr)
3466e002 1204 AC_DEFINE(USE_BSM_AUDIT, 1, [Use BSM audit module])
7b578f7d 1205 ;;
1206 debug)
1207 AUDIT_MODULE=debug
1208 AC_MSG_RESULT(debug)
3466e002 1209 AC_DEFINE(SSH_AUDIT_EVENTS, 1, Use audit debugging module)
7b578f7d 1210 ;;
a2b3321d 1211 no)
d92622f9 1212 AC_MSG_RESULT(no)
a2b3321d 1213 ;;
7b578f7d 1214 *)
1215 AC_MSG_ERROR([Unknown audit module $withval])
1216 ;;
1217 esac ]
1218)
1219
19160674 1220dnl Checks for library functions. Please keep in alphabetical order
b04a9f8c 1221AC_CHECK_FUNCS( \
1222 arc4random \
9a406e1e 1223 asprintf \
b04a9f8c 1224 b64_ntop \
1225 __b64_ntop \
1226 b64_pton \
1227 __b64_pton \
1228 bcopy \
1229 bindresvport_sa \
1230 clock \
1231 closefrom \
1232 dirfd \
b04a9f8c 1233 fchmod \
1234 fchown \
1235 freeaddrinfo \
1236 futimes \
1237 getaddrinfo \
1238 getcwd \
1239 getgrouplist \
1240 getnameinfo \
1241 getopt \
1242 getpeereid \
1961d660 1243 getpeerucred \
b04a9f8c 1244 _getpty \
1245 getrlimit \
1246 getttyent \
1247 glob \
1248 inet_aton \
1249 inet_ntoa \
1250 inet_ntop \
1251 innetgr \
1252 login_getcapbool \
1253 md5_crypt \
1254 memmove \
1255 mkdtemp \
1256 mmap \
1257 ngetaddrinfo \
1258 nsleep \
1259 ogetaddrinfo \
1260 openlog_r \
1261 openpty \
1262 prctl \
1263 pstat \
1264 readpassphrase \
1265 realpath \
1266 recvmsg \
1267 rresvport_af \
1268 sendmsg \
1269 setdtablesize \
1270 setegid \
1271 setenv \
1272 seteuid \
1273 setgroups \
1274 setlogin \
1275 setpcred \
1276 setproctitle \
1277 setregid \
1278 setreuid \
1279 setrlimit \
1280 setsid \
1281 setvbuf \
1282 sigaction \
1283 sigvec \
1284 snprintf \
1285 socketpair \
1286 strdup \
1287 strerror \
1288 strlcat \
1289 strlcpy \
1290 strmode \
1291 strnvis \
1292 strtonum \
1e29a0c8 1293 strtoll \
b04a9f8c 1294 strtoul \
1295 sysconf \
1296 tcgetpgrp \
1297 truncate \
1298 unsetenv \
1299 updwtmpx \
9a406e1e 1300 vasprintf \
b04a9f8c 1301 vhangup \
1302 vsnprintf \
1303 waitpid \
19160674 1304)
98a7c37b 1305
1a086f97 1306# IRIX has a const char return value for gai_strerror()
1307AC_CHECK_FUNCS(gai_strerror,[
1308 AC_DEFINE(HAVE_GAI_STRERROR)
1309 AC_TRY_COMPILE([
1310#include <sys/types.h>
1311#include <sys/socket.h>
1312#include <netdb.h>
1313
1314const char *gai_strerror(int);],[
1315char *str;
1316
1317str = gai_strerror(0);],[
1318 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
1319 [Define if gai_strerror() returns const char *])])])
1320
3466e002 1321AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP, 1,
1322 [Some systems put nanosleep outside of libc]))
92b1decf 1323
309709db 1324dnl Make sure prototypes are defined for these before using them.
309709db 1325AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
0957c2cf 1326AC_CHECK_DECL(strsep,
1327 [AC_CHECK_FUNCS(strsep)],
1328 [],
1329 [
1330#ifdef HAVE_STRING_H
1331# include <string.h>
1332#endif
1333 ])
08412d26 1334
3490699c 1335dnl tcsendbreak might be a macro
1336AC_CHECK_DECL(tcsendbreak,
1337 [AC_DEFINE(HAVE_TCSENDBREAK)],
aff51935 1338 [AC_CHECK_FUNCS(tcsendbreak)],
3490699c 1339 [#include <termios.h>]
1340)
1341
41e0e158 1342AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
1343
71f4c727 1344AC_CHECK_DECLS(SHUT_RD, , ,
1345 [
1346#include <sys/types.h>
1347#include <sys/socket.h>
1348 ])
956d6743 1349
1350AC_CHECK_DECLS(O_NONBLOCK, , ,
1351 [
1352#include <sys/types.h>
1353#ifdef HAVE_SYS_STAT_H
1354# include <sys/stat.h>
1355#endif
1356#ifdef HAVE_FCNTL_H
1357# include <fcntl.h>
1358#endif
1359 ])
1360
752994dd 1361AC_CHECK_DECLS(writev, , , [
1362#include <sys/types.h>
1363#include <sys/uio.h>
1364#include <unistd.h>
1365 ])
1366
3f176010 1367AC_CHECK_FUNCS(setresuid, [
1368 dnl Some platorms have setresuid that isn't implemented, test for this
1369 AC_MSG_CHECKING(if setresuid seems to work)
479cece8 1370 AC_RUN_IFELSE(
1371 [AC_LANG_SOURCE([[
9a3fe0e2 1372#include <stdlib.h>
1373#include <errno.h>
1374int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 1375 ]])],
3f176010 1376 [AC_MSG_RESULT(yes)],
3466e002 1377 [AC_DEFINE(BROKEN_SETRESUID, 1,
1378 [Define if your setresuid() is broken])
1a01a50c 1379 AC_MSG_RESULT(not implemented)],
1380 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 1381 )
1382])
9a3fe0e2 1383
3f176010 1384AC_CHECK_FUNCS(setresgid, [
1385 dnl Some platorms have setresgid that isn't implemented, test for this
1386 AC_MSG_CHECKING(if setresgid seems to work)
479cece8 1387 AC_RUN_IFELSE(
1388 [AC_LANG_SOURCE([[
9a3fe0e2 1389#include <stdlib.h>
1390#include <errno.h>
1391int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
479cece8 1392 ]])],
3f176010 1393 [AC_MSG_RESULT(yes)],
3466e002 1394 [AC_DEFINE(BROKEN_SETRESGID, 1,
1395 [Define if your setresgid() is broken])
1a01a50c 1396 AC_MSG_RESULT(not implemented)],
1397 [AC_MSG_WARN([cross compiling: not checking setresuid])]
3f176010 1398 )
1399])
9a3fe0e2 1400
2e73a022 1401dnl Checks for time functions
1d7b9b20 1402AC_CHECK_FUNCS(gettimeofday time)
2e73a022 1403dnl Checks for utmp functions
b03bd394 1404AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1d7b9b20 1405AC_CHECK_FUNCS(utmpname)
2e73a022 1406dnl Checks for utmpx functions
b03bd394 1407AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1d7b9b20 1408AC_CHECK_FUNCS(setutxent utmpxname)
76cd7316 1409
aff51935 1410AC_CHECK_FUNC(daemon,
3466e002 1411 [AC_DEFINE(HAVE_DAEMON, 1, [Define if your libraries define daemon()])],
1412 [AC_CHECK_LIB(bsd, daemon,
1413 [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
beb43d31 1414)
1415
aff51935 1416AC_CHECK_FUNC(getpagesize,
3466e002 1417 [AC_DEFINE(HAVE_GETPAGESIZE, 1,
1418 [Define if your libraries define getpagesize()])],
1419 [AC_CHECK_LIB(ucb, getpagesize,
1420 [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
aa6bd60a 1421)
1422
2647ae26 1423# Check for broken snprintf
1424if test "x$ac_cv_func_snprintf" = "xyes" ; then
1425 AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1a01a50c 1426 AC_RUN_IFELSE(
479cece8 1427 [AC_LANG_SOURCE([[
2647ae26 1428#include <stdio.h>
aec4cb4f 1429int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
479cece8 1430 ]])],
aff51935 1431 [AC_MSG_RESULT(yes)],
2647ae26 1432 [
1433 AC_MSG_RESULT(no)
3466e002 1434 AC_DEFINE(BROKEN_SNPRINTF, 1,
1435 [Define if your snprintf is busted])
2647ae26 1436 AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1a01a50c 1437 ],
1438 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
2647ae26 1439 )
1440fi
1441
9a406e1e 1442# If we don't have a working asprintf, then we strongly depend on vsnprintf
1443# returning the right thing on overflow: the number of characters it tried to
1444# create (as per SUSv3)
1445if test "x$ac_cv_func_asprintf" != "xyes" && \
1446 test "x$ac_cv_func_vsnprintf" = "xyes" ; then
1447 AC_MSG_CHECKING([whether vsnprintf returns correct values on overflow])
1448 AC_RUN_IFELSE(
1449 [AC_LANG_SOURCE([[
1450#include <sys/types.h>
1451#include <stdio.h>
1452#include <stdarg.h>
1453
1454int x_snprintf(char *str,size_t count,const char *fmt,...)
1455{
1456 size_t ret; va_list ap;
1457 va_start(ap, fmt); ret = vsnprintf(str, count, fmt, ap); va_end(ap);
1458 return ret;
1459}
1460int main(void)
1461{
1462 char x[1];
1463 exit(x_snprintf(x, 1, "%s %d", "hello", 12345) == 11 ? 0 : 1);
1464} ]])],
1465 [AC_MSG_RESULT(yes)],
1466 [
1467 AC_MSG_RESULT(no)
1468 AC_DEFINE(BROKEN_SNPRINTF, 1,
1469 [Define if your snprintf is busted])
1470 AC_MSG_WARN([****** Your vsnprintf() function is broken, complain to your vendor])
1471 ],
1472 [ AC_MSG_WARN([cross compiling: Assuming working vsnprintf()]) ]
1473 )
1474fi
1475
31b0732a 1476# On systems where [v]snprintf is broken, but is declared in stdio,
1477# check that the fmt argument is const char * or just char *.
1478# This is only useful for when BROKEN_SNPRINTF
1479AC_MSG_CHECKING([whether snprintf can declare const char *fmt])
1480AC_COMPILE_IFELSE([AC_LANG_SOURCE([[#include <stdio.h>
1481 int snprintf(char *a, size_t b, const char *c, ...) { return 0; }
1482 int main(void) { snprintf(0, 0, 0); }
1483 ]])],
1484 [AC_MSG_RESULT(yes)
1485 AC_DEFINE(SNPRINTF_CONST, [const],
1486 [Define as const if snprintf() can declare const char *fmt])],
1487 [AC_MSG_RESULT(no)
1488 AC_DEFINE(SNPRINTF_CONST, [/* not const */])])
1489
2f6f9cff 1490# Check for missing getpeereid (or equiv) support
1491NO_PEERCHECK=""
1961d660 1492if test "x$ac_cv_func_getpeereid" != "xyes" -a "x$ac_cv_func_getpeerucred" != "xyes"; then
2f6f9cff 1493 AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1494 AC_TRY_COMPILE(
1495 [#include <sys/types.h>
1496 #include <sys/socket.h>],
1497 [int i = SO_PEERCRED;],
62eb7db4 1498 [ AC_MSG_RESULT(yes)
3466e002 1499 AC_DEFINE(HAVE_SO_PEERCRED, 1, [Have PEERCRED socket option])
62eb7db4 1500 ],
2f6f9cff 1501 [AC_MSG_RESULT(no)
1502 NO_PEERCHECK=1]
1503 )
1504fi
1505
70e7d0b0 1506dnl see whether mkstemp() requires XXXXXX
1507if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1508AC_MSG_CHECKING([for (overly) strict mkstemp])
b0e7249f 1509AC_RUN_IFELSE(
1510 [AC_LANG_SOURCE([[
70e7d0b0 1511#include <stdlib.h>
1512main() { char template[]="conftest.mkstemp-test";
1513if (mkstemp(template) == -1)
1514 exit(1);
1515unlink(template); exit(0);
1516}
b0e7249f 1517 ]])],
70e7d0b0 1518 [
1519 AC_MSG_RESULT(no)
1520 ],
aff51935 1521 [
70e7d0b0 1522 AC_MSG_RESULT(yes)
3466e002 1523 AC_DEFINE(HAVE_STRICT_MKSTEMP, 1, [Silly mkstemp()])
70e7d0b0 1524 ],
1525 [
1526 AC_MSG_RESULT(yes)
1527 AC_DEFINE(HAVE_STRICT_MKSTEMP)
aff51935 1528 ]
70e7d0b0 1529)
1530fi
1531
eacb954e 1532dnl make sure that openpty does not reacquire controlling terminal
1533if test ! -z "$check_for_openpty_ctty_bug"; then
1534 AC_MSG_CHECKING(if openpty correctly handles controlling tty)
b0e7249f 1535 AC_RUN_IFELSE(
1536 [AC_LANG_SOURCE([[
eacb954e 1537#include <stdio.h>
1538#include <sys/fcntl.h>
1539#include <sys/types.h>
1540#include <sys/wait.h>
1541
1542int
1543main()
1544{
1545 pid_t pid;
1546 int fd, ptyfd, ttyfd, status;
1547
1548 pid = fork();
1549 if (pid < 0) { /* failed */
1550 exit(1);
1551 } else if (pid > 0) { /* parent */
1552 waitpid(pid, &status, 0);
aff51935 1553 if (WIFEXITED(status))
eacb954e 1554 exit(WEXITSTATUS(status));
1555 else
1556 exit(2);
1557 } else { /* child */
1558 close(0); close(1); close(2);
1559 setsid();
1560 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1561 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1562 if (fd >= 0)
1563 exit(3); /* Acquired ctty: broken */
1564 else
1565 exit(0); /* Did not acquire ctty: OK */
1566 }
1567}
b0e7249f 1568 ]])],
eacb954e 1569 [
1570 AC_MSG_RESULT(yes)
1571 ],
1572 [
1573 AC_MSG_RESULT(no)
1574 AC_DEFINE(SSHD_ACQUIRES_CTTY)
b0e7249f 1575 ],
1576 [
1577 AC_MSG_RESULT(cross-compiling, assuming yes)
eacb954e 1578 ]
1579 )
1580fi
1581
4b492aab 1582if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1583 test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
2fe51906 1584 AC_MSG_CHECKING(if getaddrinfo seems to work)
b0e7249f 1585 AC_RUN_IFELSE(
1586 [AC_LANG_SOURCE([[
2fe51906 1587#include <stdio.h>
1588#include <sys/socket.h>
1589#include <netdb.h>
1590#include <errno.h>
1591#include <netinet/in.h>
1592
1593#define TEST_PORT "2222"
1594
1595int
1596main(void)
1597{
1598 int err, sock;
1599 struct addrinfo *gai_ai, *ai, hints;
1600 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1601
1602 memset(&hints, 0, sizeof(hints));
1603 hints.ai_family = PF_UNSPEC;
1604 hints.ai_socktype = SOCK_STREAM;
1605 hints.ai_flags = AI_PASSIVE;
1606
1607 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1608 if (err != 0) {
1609 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1610 exit(1);
1611 }
1612
1613 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1614 if (ai->ai_family != AF_INET6)
1615 continue;
1616
1617 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1618 sizeof(ntop), strport, sizeof(strport),
1619 NI_NUMERICHOST|NI_NUMERICSERV);
1620
1621 if (err != 0) {
1622 if (err == EAI_SYSTEM)
1623 perror("getnameinfo EAI_SYSTEM");
1624 else
1625 fprintf(stderr, "getnameinfo failed: %s\n",
1626 gai_strerror(err));
1627 exit(2);
1628 }
1629
1630 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1631 if (sock < 0)
1632 perror("socket");
1633 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1634 if (errno == EBADF)
1635 exit(3);
1636 }
1637 }
1638 exit(0);
1639}
b0e7249f 1640 ]])],
2fe51906 1641 [
1642 AC_MSG_RESULT(yes)
1643 ],
1644 [
1645 AC_MSG_RESULT(no)
1646 AC_DEFINE(BROKEN_GETADDRINFO)
b0e7249f 1647 ],
1648 [
1649 AC_MSG_RESULT(cross-compiling, assuming yes)
2fe51906 1650 ]
1651 )
1652fi
1653
4b492aab 1654if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1655 test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
5ccf88cb 1656 AC_MSG_CHECKING(if getaddrinfo seems to work)
b0e7249f 1657 AC_RUN_IFELSE(
1658 [AC_LANG_SOURCE([[
5ccf88cb 1659#include <stdio.h>
1660#include <sys/socket.h>
1661#include <netdb.h>
1662#include <errno.h>
1663#include <netinet/in.h>
1664
1665#define TEST_PORT "2222"
1666
1667int
1668main(void)
1669{
1670 int err, sock;
1671 struct addrinfo *gai_ai, *ai, hints;
1672 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1673
1674 memset(&hints, 0, sizeof(hints));
1675 hints.ai_family = PF_UNSPEC;
1676 hints.ai_socktype = SOCK_STREAM;
1677 hints.ai_flags = AI_PASSIVE;
1678
1679 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1680 if (err != 0) {
1681 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1682 exit(1);
1683 }
1684
1685 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1686 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1687 continue;
1688
1689 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1690 sizeof(ntop), strport, sizeof(strport),
1691 NI_NUMERICHOST|NI_NUMERICSERV);
1692
1693 if (ai->ai_family == AF_INET && err != 0) {
1694 perror("getnameinfo");
1695 exit(2);
1696 }
1697 }
1698 exit(0);
1699}
b0e7249f 1700 ]])],
5ccf88cb 1701 [
1702 AC_MSG_RESULT(yes)
3466e002 1703 AC_DEFINE(AIX_GETNAMEINFO_HACK, 1,
1704 [Define if you have a getaddrinfo that fails
1705 for the all-zeros IPv6 address])
5ccf88cb 1706 ],
1707 [
1708 AC_MSG_RESULT(no)
1709 AC_DEFINE(BROKEN_GETADDRINFO)
b0e7249f 1710 ],
ecd9ec09 1711 [
b0e7249f 1712 AC_MSG_RESULT(cross-compiling, assuming no)
5ccf88cb 1713 ]
1714 )
1715fi
1716
b29fd59f 1717if test "x$check_for_conflicting_getspnam" = "x1"; then
1718 AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1719 AC_COMPILE_IFELSE(
1720 [
1721#include <shadow.h>
1722int main(void) {exit(0);}
1723 ],
1724 [
1725 AC_MSG_RESULT(no)
1726 ],
1727 [
1728 AC_MSG_RESULT(yes)
1729 AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1730 [Conflicting defs for getspnam])
1731 ]
1732 )
1733fi
1734
7f8f5e00 1735AC_FUNC_GETPGRP
1736
5b991353 1737# Search for OpenSSL
1738saved_CPPFLAGS="$CPPFLAGS"
1739saved_LDFLAGS="$LDFLAGS"
a0391976 1740AC_ARG_WITH(ssl-dir,
1741 [ --with-ssl-dir=PATH Specify path to OpenSSL installation ],
1742 [
e9e4a1c7 1743 if test "x$withval" != "xno" ; then
99eb0f64 1744 case "$withval" in
1745 # Relative paths
1746 ./*|../*) withval="`pwd`/$withval"
1747 esac
5b991353 1748 if test -d "$withval/lib"; then
1749 if test -n "${need_dash_r}"; then
1750 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1751 else
1752 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
d6f13fbb 1753 fi
1754 else
5b991353 1755 if test -n "${need_dash_r}"; then
1756 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1757 else
1758 LDFLAGS="-L${withval} ${LDFLAGS}"
d6f13fbb 1759 fi
1760 fi
5b991353 1761 if test -d "$withval/include"; then
1762 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
d6f13fbb 1763 else
5b991353 1764 CPPFLAGS="-I${withval} ${CPPFLAGS}"
58d100bf 1765 fi
a0391976 1766 fi
5b991353 1767 ]
1768)
5486a457 1769LIBS="-lcrypto $LIBS"
3466e002 1770AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL, 1,
1771 [Define if your ssl headers are included
1772 with #include <openssl/header.h>]),
d45e3d76 1773 [
5b991353 1774 dnl Check default openssl install dir
1775 if test -n "${need_dash_r}"; then
1776 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1777 else
5b991353 1778 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
d45e3d76 1779 fi
5b991353 1780 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1781 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1782 [
1783 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1784 ]
1785 )
1786 ]
1787)
1788
cd018561 1789# Determine OpenSSL header version
1790AC_MSG_CHECKING([OpenSSL header version])
1a01a50c 1791AC_RUN_IFELSE(
479cece8 1792 [AC_LANG_SOURCE([[
cd018561 1793#include <stdio.h>
1794#include <string.h>
1795#include <openssl/opensslv.h>
1796#define DATA "conftest.sslincver"
1797int main(void) {
aff51935 1798 FILE *fd;
1799 int rc;
cd018561 1800
aff51935 1801 fd = fopen(DATA,"w");
1802 if(fd == NULL)
1803 exit(1);
cd018561 1804
1805 if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1806 exit(1);
1807
1808 exit(0);
1809}
479cece8 1810 ]])],
cd018561 1811 [
1812 ssl_header_ver=`cat conftest.sslincver`
1813 AC_MSG_RESULT($ssl_header_ver)
1814 ],
1815 [
1816 AC_MSG_RESULT(not found)
1817 AC_MSG_ERROR(OpenSSL version header not found.)
1a01a50c 1818 ],
1819 [
1820 AC_MSG_WARN([cross compiling: not checking])
cd018561 1821 ]
1822)
1823
1824# Determine OpenSSL library version
1825AC_MSG_CHECKING([OpenSSL library version])
1a01a50c 1826AC_RUN_IFELSE(
479cece8 1827 [AC_LANG_SOURCE([[
cd018561 1828#include <stdio.h>
1829#include <string.h>
1830#include <openssl/opensslv.h>
1831#include <openssl/crypto.h>
1832#define DATA "conftest.ssllibver"
1833int main(void) {
aff51935 1834 FILE *fd;
1835 int rc;
cd018561 1836
aff51935 1837 fd = fopen(DATA,"w");
1838 if(fd == NULL)
1839 exit(1);
cd018561 1840
1841 if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1842 exit(1);
1843
1844 exit(0);
1845}
479cece8 1846 ]])],
cd018561 1847 [
1848 ssl_library_ver=`cat conftest.ssllibver`
1849 AC_MSG_RESULT($ssl_library_ver)
1850 ],
1851 [
1852 AC_MSG_RESULT(not found)
1853 AC_MSG_ERROR(OpenSSL library not found.)
1a01a50c 1854 ],
1855 [
1856 AC_MSG_WARN([cross compiling: not checking])
cd018561 1857 ]
1858)
58d100bf 1859
1d42bcce 1860AC_ARG_WITH(openssl-header-check,
1861 [ --without-openssl-header-check Disable OpenSSL version consistency check],
1862 [ if test "x$withval" = "xno" ; then
1863 openssl_check_nonfatal=1
1864 fi
1865 ]
1866)
1867
9780116c 1868# Sanity check OpenSSL headers
1869AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1a01a50c 1870AC_RUN_IFELSE(
479cece8 1871 [AC_LANG_SOURCE([[
9780116c 1872#include <string.h>
1873#include <openssl/opensslv.h>
aec4cb4f 1874int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
479cece8 1875 ]])],
9780116c 1876 [
1877 AC_MSG_RESULT(yes)
1878 ],
1879 [
1880 AC_MSG_RESULT(no)
1d42bcce 1881 if test "x$openssl_check_nonfatal" = "x"; then
1882 AC_MSG_ERROR([Your OpenSSL headers do not match your
1883library. Check config.log for details.
1884If you are sure your installation is consistent, you can disable the check
1885by running "./configure --without-openssl-header-check".
1886Also see contrib/findssl.sh for help identifying header/library mismatches.
1887])
1888 else
1889 AC_MSG_WARN([Your OpenSSL headers do not match your
1890library. Check config.log for details.
e15ba28b 1891Also see contrib/findssl.sh for help identifying header/library mismatches.])
1d42bcce 1892 fi
1a01a50c 1893 ],
1894 [
1895 AC_MSG_WARN([cross compiling: not checking])
9780116c 1896 ]
1897)
1898
282d6408 1899AC_MSG_CHECKING([if programs using OpenSSL functions will link])
1900AC_LINK_IFELSE(
1901 [AC_LANG_SOURCE([[
1902#include <openssl/evp.h>
1903int main(void) { SSLeay_add_all_algorithms(); }
1904 ]])],
1905 [
1906 AC_MSG_RESULT(yes)
1907 ],
1908 [
1909 AC_MSG_RESULT(no)
1910 saved_LIBS="$LIBS"
1911 LIBS="$LIBS -ldl"
1912 AC_MSG_CHECKING([if programs using OpenSSL need -ldl])
1913 AC_LINK_IFELSE(
1914 [AC_LANG_SOURCE([[
1915#include <openssl/evp.h>
1916int main(void) { SSLeay_add_all_algorithms(); }
1917 ]])],
1918 [
1919 AC_MSG_RESULT(yes)
1920 ],
1921 [
1922 AC_MSG_RESULT(no)
1923 LIBS="$saved_LIBS"
1924 ]
1925 )
1926 ]
1927)
1928
c7ad0d99 1929AC_ARG_WITH(ssl-engine,
1930 [ --with-ssl-engine Enable OpenSSL (hardware) ENGINE support ],
1931 [ if test "x$withval" != "xno" ; then
1932 AC_MSG_CHECKING(for OpenSSL ENGINE support)
1933 AC_TRY_COMPILE(
1934 [ #include <openssl/engine.h>],
1935 [
24b2647b 1936ENGINE_load_builtin_engines();ENGINE_register_all_complete();
c7ad0d99 1937 ],
1938 [ AC_MSG_RESULT(yes)
1939 AC_DEFINE(USE_OPENSSL_ENGINE, 1,
1940 [Enable OpenSSL engine support])
1941 ],
1942 [ AC_MSG_ERROR(OpenSSL ENGINE support not found)]
1943 )
1944 fi ]
1945)
1946
e5146707 1947# Check for OpenSSL without EVP_aes_{192,256}_cbc
1948AC_MSG_CHECKING([whether OpenSSL has crippled AES support])
3e05aa50 1949AC_LINK_IFELSE(
e5146707 1950 [AC_LANG_SOURCE([[
1951#include <string.h>
1952#include <openssl/evp.h>
300ea548 1953int main(void) { exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);}
e5146707 1954 ]])],
1955 [
1956 AC_MSG_RESULT(no)
1957 ],
1958 [
1959 AC_MSG_RESULT(yes)
1960 AC_DEFINE(OPENSSL_LOBOTOMISED_AES, 1,
1961 [libcrypto is missing AES 192 and 256 bit functions])
1962 ]
1963)
1964
5486a457 1965# Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1966# because the system crypt() is more featureful.
1967if test "x$check_for_libcrypt_before" = "x1"; then
1968 AC_CHECK_LIB(crypt, crypt)
1969fi
1970
aff51935 1971# Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
8087c5ee 1972# version in OpenSSL.
05114c74 1973if test "x$check_for_libcrypt_later" = "x1"; then
20cad736 1974 AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
717057b6 1975fi
1976
13ff27b7 1977# Search for SHA256 support in libc and/or OpenSSL
1978AC_CHECK_FUNCS(SHA256_Update EVP_sha256)
1979
4c653d8e 1980AC_CHECK_LIB(iaf, ia_openinfo)
f1b0ecc3 1981
1982### Configure cryptographic random number support
1983
1984# Check wheter OpenSSL seeds itself
1985AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1a01a50c 1986AC_RUN_IFELSE(
479cece8 1987 [AC_LANG_SOURCE([[
f1b0ecc3 1988#include <string.h>
1989#include <openssl/rand.h>
aec4cb4f 1990int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
479cece8 1991 ]])],
f1b0ecc3 1992 [
1993 OPENSSL_SEEDS_ITSELF=yes
1994 AC_MSG_RESULT(yes)
1995 ],
1996 [
1997 AC_MSG_RESULT(no)
1998 # Default to use of the rand helper if OpenSSL doesn't
1999 # seed itself
2000 USE_RAND_HELPER=yes
1a01a50c 2001 ],
2002 [
2003 AC_MSG_WARN([cross compiling: assuming yes])
2004 # This is safe, since all recent OpenSSL versions will
82f4e93d 2005 # complain at runtime if not seeded correctly.
1a01a50c 2006 OPENSSL_SEEDS_ITSELF=yes
f1b0ecc3 2007 ]
2008)
2009
a086f73b 2010# Check for PAM libs
2011PAM_MSG="no"
2012AC_ARG_WITH(pam,
2013 [ --with-pam Enable PAM support ],
2014 [
2015 if test "x$withval" != "xno" ; then
2016 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
2017 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
2018 AC_MSG_ERROR([PAM headers not found])
2019 fi
2020
2021 saved_LIBS="$LIBS"
2022 AC_CHECK_LIB(dl, dlopen, , )
2023 AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
2024 AC_CHECK_FUNCS(pam_getenvlist)
2025 AC_CHECK_FUNCS(pam_putenv)
2026 LIBS="$saved_LIBS"
2027
2028 PAM_MSG="yes"
2029
e54defb4 2030 SSHDLIBS="$SSHDLIBS -lpam"
a086f73b 2031 AC_DEFINE(USE_PAM, 1,
2032 [Define if you want to enable PAM support])
282d6408 2033
a086f73b 2034 if test $ac_cv_lib_dl_dlopen = yes; then
282d6408 2035 case "$LIBS" in
2036 *-ldl*)
2037 # libdl already in LIBS
2038 ;;
2039 *)
e54defb4 2040 SSHDLIBS="$SSHDLIBS -ldl"
282d6408 2041 ;;
2042 esac
a086f73b 2043 fi
a086f73b 2044 fi
2045 ]
2046)
2047
2048# Check for older PAM
2049if test "x$PAM_MSG" = "xyes" ; then
2050 # Check PAM strerror arguments (old PAM)
2051 AC_MSG_CHECKING([whether pam_strerror takes only one argument])
2052 AC_TRY_COMPILE(
2053 [
2054#include <stdlib.h>
2055#if defined(HAVE_SECURITY_PAM_APPL_H)
2056#include <security/pam_appl.h>
2057#elif defined (HAVE_PAM_PAM_APPL_H)
2058#include <pam/pam_appl.h>
2059#endif
2060 ],
2061 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
2062 [AC_MSG_RESULT(no)],
2063 [
2064 AC_DEFINE(HAVE_OLD_PAM, 1,
2065 [Define if you have an old version of PAM
2066 which takes only one argument to pam_strerror])
2067 AC_MSG_RESULT(yes)
2068 PAM_MSG="yes (old library)"
2069 ]
2070 )
2071fi
f1b0ecc3 2072
2073# Do we want to force the use of the rand helper?
2074AC_ARG_WITH(rand-helper,
2075 [ --with-rand-helper Use subprocess to gather strong randomness ],
2076 [
2077 if test "x$withval" = "xno" ; then
aff51935 2078 # Force use of OpenSSL's internal RNG, even if
f1b0ecc3 2079 # the previous test showed it to be unseeded.
2080 if test -z "$OPENSSL_SEEDS_ITSELF" ; then
2081 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
2082 OPENSSL_SEEDS_ITSELF=yes
2083 USE_RAND_HELPER=""
2084 fi
2085 else
2086 USE_RAND_HELPER=yes
2087 fi
2088 ],
82f4e93d 2089)
f1b0ecc3 2090
2091# Which randomness source do we use?
4b492aab 2092if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
f1b0ecc3 2093 # OpenSSL only
3466e002 2094 AC_DEFINE(OPENSSL_PRNG_ONLY, 1,
2095 [Define if you want OpenSSL's internally seeded PRNG only])
f1b0ecc3 2096 RAND_MSG="OpenSSL internal ONLY"
2097 INSTALL_SSH_RAND_HELPER=""
70e2f2f3 2098elif test ! -z "$USE_RAND_HELPER" ; then
2099 # install rand helper
f1b0ecc3 2100 RAND_MSG="ssh-rand-helper"
2101 INSTALL_SSH_RAND_HELPER="yes"
2102fi
2103AC_SUBST(INSTALL_SSH_RAND_HELPER)
2104
2105### Configuration of ssh-rand-helper
2106
2107# PRNGD TCP socket
2108AC_ARG_WITH(prngd-port,
2109 [ --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT],
2110 [
eb5d7ff6 2111 case "$withval" in
2112 no)
2113 withval=""
2114 ;;
2115 [[0-9]]*)
2116 ;;
2117 *)
2118 AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
2119 ;;
2120 esac
2121 if test ! -z "$withval" ; then
f1b0ecc3 2122 PRNGD_PORT="$withval"
3466e002 2123 AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT,
2124 [Port number of PRNGD/EGD random number socket])
f1b0ecc3 2125 fi
2126 ]
2127)
2128
2129# PRNGD Unix domain socket
2130AC_ARG_WITH(prngd-socket,
2131 [ --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
2132 [
eb5d7ff6 2133 case "$withval" in
2134 yes)
f1b0ecc3 2135 withval="/var/run/egd-pool"
eb5d7ff6 2136 ;;
2137 no)
2138 withval=""
2139 ;;
2140 /*)
2141 ;;
2142 *)
2143 AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
2144 ;;
2145 esac
2146
2147 if test ! -z "$withval" ; then
f1b0ecc3 2148 if test ! -z "$PRNGD_PORT" ; then
2149 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
2150 fi
906e811b 2151 if test ! -r "$withval" ; then
f1b0ecc3 2152 AC_MSG_WARN(Entropy socket is not readable)
2153 fi
2154 PRNGD_SOCKET="$withval"
3466e002 2155 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET",
2156 [Location of PRNGD/EGD random number socket])
f1b0ecc3 2157 fi
ddceb1c8 2158 ],
2159 [
2160 # Check for existing socket only if we don't have a random device already
2161 if test "$USE_RAND_HELPER" = yes ; then
2162 AC_MSG_CHECKING(for PRNGD/EGD socket)
2163 # Insert other locations here
2164 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
2165 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
2166 PRNGD_SOCKET="$sock"
2167 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
2168 break;
2169 fi
2170 done
2171 if test ! -z "$PRNGD_SOCKET" ; then
2172 AC_MSG_RESULT($PRNGD_SOCKET)
2173 else
2174 AC_MSG_RESULT(not found)
2175 fi
2176 fi
f1b0ecc3 2177 ]
2178)
2179
2180# Change default command timeout for hashing entropy source
2181entropy_timeout=200
2182AC_ARG_WITH(entropy-timeout,
2183 [ --with-entropy-timeout Specify entropy gathering command timeout (msec)],
2184 [
6cf0200f 2185 if test -n "$withval" && test "x$withval" != "xno" && \
2186 test "x${withval}" != "xyes"; then
f1b0ecc3 2187 entropy_timeout=$withval
2188 fi
82f4e93d 2189 ]
f1b0ecc3 2190)
3466e002 2191AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout,
2192 [Builtin PRNG command timeout])
f1b0ecc3 2193
fd3cbf67 2194SSH_PRIVSEP_USER=sshd
9a0fbcb3 2195AC_ARG_WITH(privsep-user,
5222e7ef 2196 [ --with-privsep-user=user Specify non-privileged user for privilege separation],
9a0fbcb3 2197 [
6cf0200f 2198 if test -n "$withval" && test "x$withval" != "xno" && \
2199 test "x${withval}" != "xyes"; then
fd3cbf67 2200 SSH_PRIVSEP_USER=$withval
9a0fbcb3 2201 fi
82f4e93d 2202 ]
9a0fbcb3 2203)
3466e002 2204AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER",
2205 [non-privileged user for privilege separation])
fd3cbf67 2206AC_SUBST(SSH_PRIVSEP_USER)
9a0fbcb3 2207
81dadca3 2208# We do this little dance with the search path to insure
2209# that programs that we select for use by installed programs
2210# (which may be run by the super-user) come from trusted
2211# locations before they come from the user's private area.
2212# This should help avoid accidentally configuring some
2213# random version of a program in someone's personal bin.
2214
2215OPATH=$PATH
2216PATH=/bin:/usr/bin
f95c8ce8 2217test -h /bin 2> /dev/null && PATH=/usr/bin
81dadca3 2218test -d /sbin && PATH=$PATH:/sbin
2219test -d /usr/sbin && PATH=$PATH:/usr/sbin
2220PATH=$PATH:/etc:$OPATH
2221
aff51935 2222# These programs are used by the command hashing source to gather entropy
f1b0ecc3 2223OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
2224OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
2225OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
2226OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
2227OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
2228OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
2229OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
2230OSSH_PATH_ENTROPY_PROG(PROG_W, w)
2231OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
2232OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
2233OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
2234OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
2235OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
2236OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
2237OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
2238OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
81dadca3 2239# restore PATH
2240PATH=$OPATH
f1b0ecc3 2241
2242# Where does ssh-rand-helper get its randomness from?
2243INSTALL_SSH_PRNG_CMDS=""
2244if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
2245 if test ! -z "$PRNGD_PORT" ; then
2246 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
2247 elif test ! -z "$PRNGD_SOCKET" ; then
2248 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
2249 else
2250 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
2251 RAND_HELPER_CMDHASH=yes
2252 INSTALL_SSH_PRNG_CMDS="yes"
2253 fi
2254fi
2255AC_SUBST(INSTALL_SSH_PRNG_CMDS)
2256
2257
66d6c27e 2258# Cheap hack to ensure NEWS-OS libraries are arranged right.
2259if test ! -z "$SONY" ; then
2260 LIBS="$LIBS -liberty";
2261fi
2262
9a406e1e 2263# Check for long long datatypes
2264AC_CHECK_TYPES([long long, unsigned long long, long double])
2265
2266# Check datatype sizes
976f7e19 2267AC_CHECK_SIZEOF(char, 1)
2b942fe0 2268AC_CHECK_SIZEOF(short int, 2)
2269AC_CHECK_SIZEOF(int, 4)
2270AC_CHECK_SIZEOF(long int, 4)
2271AC_CHECK_SIZEOF(long long int, 8)
2272
52f1ccb2 2273# Sanity check long long for some platforms (AIX)
2274if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
2275 ac_cv_sizeof_long_long_int=0
2276fi
2277
90f15776 2278# compute LLONG_MIN and LLONG_MAX if we don't know them.
2279if test -z "$have_llong_max"; then
2280 AC_MSG_CHECKING([for max value of long long])
2281 AC_RUN_IFELSE(
2282 [AC_LANG_SOURCE([[
2283#include <stdio.h>
2284/* Why is this so damn hard? */
2285#ifdef __GNUC__
2286# undef __GNUC__
2287#endif
2288#define __USE_ISOC99
2289#include <limits.h>
2290#define DATA "conftest.llminmax"
055252ed 2291#define my_abs(a) ((a) < 0 ? ((a) * -1) : (a))
2292
2293/*
2294 * printf in libc on some platforms (eg old Tru64) does not understand %lld so
2295 * we do this the hard way.
2296 */
2297static int
2298fprint_ll(FILE *f, long long n)
2299{
2300 unsigned int i;
2301 int l[sizeof(long long) * 8];
2302
2303 if (n < 0)
2304 if (fprintf(f, "-") < 0)
2305 return -1;
2306 for (i = 0; n != 0; i++) {
2307 l[i] = my_abs(n % 10);
2308 n /= 10;
2309 }
2310 do {
2311 if (fprintf(f, "%d", l[--i]) < 0)
2312 return -1;
2313 } while (i != 0);
2314 if (fprintf(f, " ") < 0)
2315 return -1;
2316 return 0;
2317}
2318
90f15776 2319int main(void) {
2320 FILE *f;
2321 long long i, llmin, llmax = 0;
2322
2323 if((f = fopen(DATA,"w")) == NULL)
2324 exit(1);
2325
2326#if defined(LLONG_MIN) && defined(LLONG_MAX)
2327 fprintf(stderr, "Using system header for LLONG_MIN and LLONG_MAX\n");
2328 llmin = LLONG_MIN;
2329 llmax = LLONG_MAX;
2330#else
2331 fprintf(stderr, "Calculating LLONG_MIN and LLONG_MAX\n");
2332 /* This will work on one's complement and two's complement */
2333 for (i = 1; i > llmax; i <<= 1, i++)
2334 llmax = i;
2335 llmin = llmax + 1LL; /* wrap */
2336#endif
2337
2338 /* Sanity check */
2339 if (llmin + 1 < llmin || llmin - 1 < llmin || llmax + 1 > llmax
055252ed 2340 || llmax - 1 > llmax || llmin == llmax || llmin == 0
2341 || llmax == 0 || llmax < LONG_MAX || llmin > LONG_MIN) {
90f15776 2342 fprintf(f, "unknown unknown\n");
2343 exit(2);
2344 }
2345
055252ed 2346 if (fprint_ll(f, llmin) < 0)
90f15776 2347 exit(3);
055252ed 2348 if (fprint_ll(f, llmax) < 0)
2349 exit(4);
2350 if (fclose(f) < 0)
2351 exit(5);
90f15776 2352 exit(0);
2353}
2354 ]])],
2355 [
2356 llong_min=`$AWK '{print $1}' conftest.llminmax`
2357 llong_max=`$AWK '{print $2}' conftest.llminmax`
2358
90f15776 2359 AC_MSG_RESULT($llong_max)
2360 AC_DEFINE_UNQUOTED(LLONG_MAX, [${llong_max}LL],
2361 [max value of long long calculated by configure])
2362 AC_MSG_CHECKING([for min value of long long])
2363 AC_MSG_RESULT($llong_min)
2364 AC_DEFINE_UNQUOTED(LLONG_MIN, [${llong_min}LL],
2365 [min value of long long calculated by configure])
2366 ],
2367 [
2368 AC_MSG_RESULT(not found)
2369 ],
2370 [
2371 AC_MSG_WARN([cross compiling: not checking])
2372 ]
2373 )
2374fi
2375
2376
a0391976 2377# More checks for data types
14a9a859 2378AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
2379 AC_TRY_COMPILE(
aff51935 2380 [ #include <sys/types.h> ],
2381 [ u_int a; a = 1;],
14a9a859 2382 [ ac_cv_have_u_int="yes" ],
2383 [ ac_cv_have_u_int="no" ]
2384 )
2385])
2386if test "x$ac_cv_have_u_int" = "xyes" ; then
3466e002 2387 AC_DEFINE(HAVE_U_INT, 1, [define if you have u_int data type])
14a9a859 2388 have_u_int=1
2389fi
2390
58d100bf 2391AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
2392 AC_TRY_COMPILE(
aff51935 2393 [ #include <sys/types.h> ],
2394 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
58d100bf 2395 [ ac_cv_have_intxx_t="yes" ],
2396 [ ac_cv_have_intxx_t="no" ]
2397 )
2398])
2399if test "x$ac_cv_have_intxx_t" = "xyes" ; then
3466e002 2400 AC_DEFINE(HAVE_INTXX_T, 1, [define if you have intxx_t data type])
58d100bf 2401 have_intxx_t=1
2402fi
41cb4569 2403
2404if (test -z "$have_intxx_t" && \
aff51935 2405 test "x$ac_cv_header_stdint_h" = "xyes")
41cb4569 2406then
2407 AC_MSG_CHECKING([for intXX_t types in stdint.h])
2408 AC_TRY_COMPILE(
aff51935 2409 [ #include <stdint.h> ],
2410 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
41cb4569 2411 [
2412 AC_DEFINE(HAVE_INTXX_T)
2413 AC_MSG_RESULT(yes)
2414 ],
2415 [ AC_MSG_RESULT(no) ]
2416 )
2417fi
2418
bd590612 2419AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
2420 AC_TRY_COMPILE(
1cbbe6c8 2421 [
2422#include <sys/types.h>
2423#ifdef HAVE_STDINT_H
2424# include <stdint.h>
2425#endif
2426#include <sys/socket.h>
2427#ifdef HAVE_SYS_BITYPES_H
2428# include <sys/bitypes.h>
2429#endif
aff51935 2430 ],
2431 [ int64_t a; a = 1;],
bd590612 2432 [ ac_cv_have_int64_t="yes" ],
2433 [ ac_cv_have_int64_t="no" ]
2434 )
2435])
2436if test "x$ac_cv_have_int64_t" = "xyes" ; then
3466e002 2437 AC_DEFINE(HAVE_INT64_T, 1, [define if you have int64_t data type])
ddceb1c8 2438fi
2439
58d100bf 2440AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
2441 AC_TRY_COMPILE(
aff51935 2442 [ #include <sys/types.h> ],
2443 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
58d100bf 2444 [ ac_cv_have_u_intxx_t="yes" ],
2445 [ ac_cv_have_u_intxx_t="no" ]
2446 )
2447])
2448if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
3466e002 2449 AC_DEFINE(HAVE_U_INTXX_T, 1, [define if you have u_intxx_t data type])
58d100bf 2450 have_u_intxx_t=1
2451fi
2b942fe0 2452
41cb4569 2453if test -z "$have_u_intxx_t" ; then
2454 AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
2455 AC_TRY_COMPILE(
aff51935 2456 [ #include <sys/socket.h> ],
2457 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
41cb4569 2458 [
2459 AC_DEFINE(HAVE_U_INTXX_T)
2460 AC_MSG_RESULT(yes)
2461 ],
2462 [ AC_MSG_RESULT(no) ]
2463 )
2464fi
2465
bd590612 2466AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
2467 AC_TRY_COMPILE(
aff51935 2468 [ #include <sys/types.h> ],
2469 [ u_int64_t a; a = 1;],
bd590612 2470 [ ac_cv_have_u_int64_t="yes" ],
2471 [ ac_cv_have_u_int64_t="no" ]
2472 )
2473])
2474if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
3466e002 2475 AC_DEFINE(HAVE_U_INT64_T, 1, [define if you have u_int64_t data type])
bd590612 2476 have_u_int64_t=1
2477fi
2478
ddceb1c8 2479if test -z "$have_u_int64_t" ; then
2480 AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
2481 AC_TRY_COMPILE(
aff51935 2482 [ #include <sys/bitypes.h> ],
ddceb1c8 2483 [ u_int64_t a; a = 1],
2484 [
2485 AC_DEFINE(HAVE_U_INT64_T)
2486 AC_MSG_RESULT(yes)
2487 ],
2488 [ AC_MSG_RESULT(no) ]
2489 )
2490fi
2491
41cb4569 2492if test -z "$have_u_intxx_t" ; then
2493 AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
2494 AC_TRY_COMPILE(
2495 [
2496#include <sys/types.h>
aff51935 2497 ],
2498 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
41cb4569 2499 [ ac_cv_have_uintxx_t="yes" ],
2500 [ ac_cv_have_uintxx_t="no" ]
2501 )
2502 ])
2503 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
3466e002 2504 AC_DEFINE(HAVE_UINTXX_T, 1,
2505 [define if you have uintxx_t data type])
41cb4569 2506 fi
2507fi
2508
2509if test -z "$have_uintxx_t" ; then
2510 AC_MSG_CHECKING([for uintXX_t types in stdint.h])
2511 AC_TRY_COMPILE(
aff51935 2512 [ #include <stdint.h> ],
2513 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
41cb4569 2514 [
2515 AC_DEFINE(HAVE_UINTXX_T)
2516 AC_MSG_RESULT(yes)
2517 ],
2518 [ AC_MSG_RESULT(no) ]
2519 )
2520fi
2521
e5fe9a1f 2522if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
aff51935 2523 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
5cdfe03f 2524then
2525 AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
2526 AC_TRY_COMPILE(
58d100bf 2527 [
2528#include <sys/bitypes.h>
aff51935 2529 ],
5cdfe03f 2530 [
837c30b8 2531 int8_t a; int16_t b; int32_t c;
2532 u_int8_t e; u_int16_t f; u_int32_t g;
2533 a = b = c = e = f = g = 1;
aff51935 2534 ],
5cdfe03f 2535 [
2536 AC_DEFINE(HAVE_U_INTXX_T)
2537 AC_DEFINE(HAVE_INTXX_T)
2538 AC_MSG_RESULT(yes)
2539 ],
2540 [AC_MSG_RESULT(no)]
aff51935 2541 )
5cdfe03f 2542fi
2543
0362750e 2544
2545AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
2546 AC_TRY_COMPILE(
2547 [
2548#include <sys/types.h>
2549 ],
2550 [ u_char foo; foo = 125; ],
2551 [ ac_cv_have_u_char="yes" ],
2552 [ ac_cv_have_u_char="no" ]
2553 )
2554])
2555if test "x$ac_cv_have_u_char" = "xyes" ; then
3466e002 2556 AC_DEFINE(HAVE_U_CHAR, 1, [define if you have u_char data type])
0362750e 2557fi
2558
98a7c37b 2559TYPE_SOCKLEN_T
2b942fe0 2560
2d16d9a3 2561AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
ddceb1c8 2562
777ece68 2563AC_CHECK_TYPES(in_addr_t,,,
2564[#include <sys/types.h>
2565#include <netinet/in.h>])
7b578f7d 2566
58d100bf 2567AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
2568 AC_TRY_COMPILE(
2569 [
18ba2aab 2570#include <sys/types.h>
58d100bf 2571 ],
2572 [ size_t foo; foo = 1235; ],
2573 [ ac_cv_have_size_t="yes" ],
2574 [ ac_cv_have_size_t="no" ]
2575 )
2576])
2577if test "x$ac_cv_have_size_t" = "xyes" ; then
3466e002 2578 AC_DEFINE(HAVE_SIZE_T, 1, [define if you have size_t data type])
58d100bf 2579fi
ea1970a3 2580
c04f75f1 2581AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
2582 AC_TRY_COMPILE(
2583 [
2584#include <sys/types.h>
2585 ],
2586 [ ssize_t foo; foo = 1235; ],
2587 [ ac_cv_have_ssize_t="yes" ],
2588 [ ac_cv_have_ssize_t="no" ]
2589 )
2590])
2591if test "x$ac_cv_have_ssize_t" = "xyes" ; then
3466e002 2592 AC_DEFINE(HAVE_SSIZE_T, 1, [define if you have ssize_t data type])
c04f75f1 2593fi
2594
f1c4659d 2595AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
2596 AC_TRY_COMPILE(
2597 [
2598#include <time.h>
2599 ],
2600 [ clock_t foo; foo = 1235; ],
2601 [ ac_cv_have_clock_t="yes" ],
2602 [ ac_cv_have_clock_t="no" ]
2603 )
2604])
2605if test "x$ac_cv_have_clock_t" = "xyes" ; then
3466e002 2606 AC_DEFINE(HAVE_CLOCK_T, 1, [define if you have clock_t data type])
f1c4659d 2607fi
2608
1c04b088 2609AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
2610 AC_TRY_COMPILE(
2611 [
2612#include <sys/types.h>
2613#include <sys/socket.h>
2614 ],
2615 [ sa_family_t foo; foo = 1235; ],
2616 [ ac_cv_have_sa_family_t="yes" ],
77bb0bca 2617 [ AC_TRY_COMPILE(
2618 [
2619#include <sys/types.h>
2620#include <sys/socket.h>
2621#include <netinet/in.h>
2622 ],
2623 [ sa_family_t foo; foo = 1235; ],
2624 [ ac_cv_have_sa_family_t="yes" ],
2625
1c04b088 2626 [ ac_cv_have_sa_family_t="no" ]
77bb0bca 2627 )]
1c04b088 2628 )
2629])
2630if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
3466e002 2631 AC_DEFINE(HAVE_SA_FAMILY_T, 1,
2632 [define if you have sa_family_t data type])
1c04b088 2633fi
2634
729bfe59 2635AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
2636 AC_TRY_COMPILE(
2637 [
2638#include <sys/types.h>
2639 ],
2640 [ pid_t foo; foo = 1235; ],
2641 [ ac_cv_have_pid_t="yes" ],
2642 [ ac_cv_have_pid_t="no" ]
2643 )
2644])
2645if test "x$ac_cv_have_pid_t" = "xyes" ; then
3466e002 2646 AC_DEFINE(HAVE_PID_T, 1, [define if you have pid_t data type])
729bfe59 2647fi
2648
2649AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
2650 AC_TRY_COMPILE(
2651 [
2652#include <sys/types.h>
2653 ],
2654 [ mode_t foo; foo = 1235; ],
2655 [ ac_cv_have_mode_t="yes" ],
2656 [ ac_cv_have_mode_t="no" ]
2657 )
2658])
2659if test "x$ac_cv_have_mode_t" = "xyes" ; then
3466e002 2660 AC_DEFINE(HAVE_MODE_T, 1, [define if you have mode_t data type])
729bfe59 2661fi
2662
e3a93db0 2663
58d100bf 2664AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
2665 AC_TRY_COMPILE(
2666 [
18ba2aab 2667#include <sys/types.h>
2668#include <sys/socket.h>
58d100bf 2669 ],
2670 [ struct sockaddr_storage s; ],
2671 [ ac_cv_have_struct_sockaddr_storage="yes" ],
2672 [ ac_cv_have_struct_sockaddr_storage="no" ]
2673 )
2674])
2675if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
3466e002 2676 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE, 1,
2677 [define if you have struct sockaddr_storage data type])
58d100bf 2678fi
48e671d5 2679
58d100bf 2680AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2681 AC_TRY_COMPILE(
2682 [
cbd7492e 2683#include <sys/types.h>
58d100bf 2684#include <netinet/in.h>
2685 ],
2686 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2687 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2688 [ ac_cv_have_struct_sockaddr_in6="no" ]
2689 )
2690])
2691if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
3466e002 2692 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6, 1,
2693 [define if you have struct sockaddr_in6 data type])
58d100bf 2694fi
48e671d5 2695
58d100bf 2696AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2697 AC_TRY_COMPILE(
2698 [
cbd7492e 2699#include <sys/types.h>
58d100bf 2700#include <netinet/in.h>
2701 ],
2702 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2703 [ ac_cv_have_struct_in6_addr="yes" ],
2704 [ ac_cv_have_struct_in6_addr="no" ]
2705 )
2706])
2707if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
3466e002 2708 AC_DEFINE(HAVE_STRUCT_IN6_ADDR, 1,
2709 [define if you have struct in6_addr data type])
58d100bf 2710fi
48e671d5 2711
58d100bf 2712AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2713 AC_TRY_COMPILE(
2714 [
18ba2aab 2715#include <sys/types.h>
2716#include <sys/socket.h>
2717#include <netdb.h>
58d100bf 2718 ],
2719 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2720 [ ac_cv_have_struct_addrinfo="yes" ],
2721 [ ac_cv_have_struct_addrinfo="no" ]
2722 )
2723])
2724if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
3466e002 2725 AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1,
2726 [define if you have struct addrinfo data type])
58d100bf 2727fi
2728
89c7e31c 2729AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2730 AC_TRY_COMPILE(
aff51935 2731 [ #include <sys/time.h> ],
2732 [ struct timeval tv; tv.tv_sec = 1;],
89c7e31c 2733 [ ac_cv_have_struct_timeval="yes" ],
2734 [ ac_cv_have_struct_timeval="no" ]
2735 )
2736])
2737if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
3466e002 2738 AC_DEFINE(HAVE_STRUCT_TIMEVAL, 1, [define if you have struct timeval])
89c7e31c 2739 have_struct_timeval=1
2740fi
2741
5271b55c 2742AC_CHECK_TYPES(struct timespec)
2743
85abc74b 2744# We need int64_t or else certian parts of the compile will fail.
4b492aab 2745if test "x$ac_cv_have_int64_t" = "xno" && \
2746 test "x$ac_cv_sizeof_long_int" != "x8" && \
2747 test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
85abc74b 2748 echo "OpenSSH requires int64_t support. Contact your vendor or install"
2749 echo "an alternative compiler (I.E., GCC) before continuing."
2750 echo ""
2751 exit 1;
733cf7f4 2752else
2753dnl test snprintf (broken on SCO w/gcc)
1a01a50c 2754 AC_RUN_IFELSE(
479cece8 2755 [AC_LANG_SOURCE([[
733cf7f4 2756#include <stdio.h>
2757#include <string.h>
2758#ifdef HAVE_SNPRINTF
2759main()
2760{
2761 char buf[50];
2762 char expected_out[50];
2763 int mazsize = 50 ;
2764#if (SIZEOF_LONG_INT == 8)
2765 long int num = 0x7fffffffffffffff;
2766#else
763a1a18 2767 long long num = 0x7fffffffffffffffll;
733cf7f4 2768#endif
2769 strcpy(expected_out, "9223372036854775807");
2770 snprintf(buf, mazsize, "%lld", num);
2771 if(strcmp(buf, expected_out) != 0)
aff51935 2772 exit(1);
733cf7f4 2773 exit(0);
2774}
2775#else
2776main() { exit(0); }
2777#endif
479cece8 2778 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
1a01a50c 2779 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
733cf7f4 2780 )
2c523de9 2781fi
2782
77bb0bca 2783dnl Checks for structure members
58d100bf 2784OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2785OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2786OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2787OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2788OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
25422c70 2789OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
58d100bf 2790OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2791OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
daaff4d5 2792OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
58d100bf 2793OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2794OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2795OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2796OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
1d7b9b20 2797OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2798OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2799OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2800OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
98a7c37b 2801
2802AC_CHECK_MEMBERS([struct stat.st_blksize])
ccc45ee0 2803AC_CHECK_MEMBER([struct __res_state.retrans], [], [AC_DEFINE(__res_state, state,
2804 [Define if we don't have struct __res_state in resolv.h])],
2805[
2806#include <stdio.h>
2807#if HAVE_SYS_TYPES_H
2808# include <sys/types.h>
2809#endif
2810#include <netinet/in.h>
2811#include <arpa/nameser.h>
2812#include <resolv.h>
2813])
1d7b9b20 2814
58d100bf 2815AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2816 ac_cv_have_ss_family_in_struct_ss, [
2817 AC_TRY_COMPILE(
2818 [
18ba2aab 2819#include <sys/types.h>
2820#include <sys/socket.h>
58d100bf 2821 ],
2822 [ struct sockaddr_storage s; s.ss_family = 1; ],
2823 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2824 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2825 )
2826])
2827if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
3466e002 2828 AC_DEFINE(HAVE_SS_FAMILY_IN_SS, 1, [Fields in struct sockaddr_storage])
58d100bf 2829fi
2830
58d100bf 2831AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2832 ac_cv_have___ss_family_in_struct_ss, [
2833 AC_TRY_COMPILE(
2834 [
18ba2aab 2835#include <sys/types.h>
2836#include <sys/socket.h>
58d100bf 2837 ],
2838 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2839 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2840 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2841 )
2842])
2843if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
3466e002 2844 AC_DEFINE(HAVE___SS_FAMILY_IN_SS, 1,
2845 [Fields in struct sockaddr_storage])
58d100bf 2846fi
2847
2e73a022 2848AC_CACHE_CHECK([for pw_class field in struct passwd],
2849 ac_cv_have_pw_class_in_struct_passwd, [
2850 AC_TRY_COMPILE(
2851 [
2e73a022 2852#include <pwd.h>
2853 ],
97994d32 2854 [ struct passwd p; p.pw_class = 0; ],
2e73a022 2855 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2856 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2857 )
2858])
2859if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
3466e002 2860 AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD, 1,
2861 [Define if your password has a pw_class field])
2e73a022 2862fi
2863
7751d4eb 2864AC_CACHE_CHECK([for pw_expire field in struct passwd],
2865 ac_cv_have_pw_expire_in_struct_passwd, [
2866 AC_TRY_COMPILE(
2867 [
2868#include <pwd.h>
2869 ],
2870 [ struct passwd p; p.pw_expire = 0; ],
2871 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2872 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2873 )
2874])
2875if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
3466e002 2876 AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD, 1,
2877 [Define if your password has a pw_expire field])
7751d4eb 2878fi
2879
2880AC_CACHE_CHECK([for pw_change field in struct passwd],
2881 ac_cv_have_pw_change_in_struct_passwd, [
2882 AC_TRY_COMPILE(
2883 [
2884#include <pwd.h>
2885 ],
2886 [ struct passwd p; p.pw_change = 0; ],
2887 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2888 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2889 )
2890])
2891if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
3466e002 2892 AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD, 1,
2893 [Define if your password has a pw_change field])
7751d4eb 2894fi
58d100bf 2895
637f9177 2896dnl make sure we're using the real structure members and not defines
6f34652e 2897AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2898 ac_cv_have_accrights_in_msghdr, [
1a01a50c 2899 AC_COMPILE_IFELSE(
6f34652e 2900 [
f95c8ce8 2901#include <sys/types.h>
6f34652e 2902#include <sys/socket.h>
2903#include <sys/uio.h>
637f9177 2904int main() {
2905#ifdef msg_accrights
1a01a50c 2906#error "msg_accrights is a macro"
637f9177 2907exit(1);
2908#endif
2909struct msghdr m;
2910m.msg_accrights = 0;
2911exit(0);
2912}
6f34652e 2913 ],
6f34652e 2914 [ ac_cv_have_accrights_in_msghdr="yes" ],
2915 [ ac_cv_have_accrights_in_msghdr="no" ]
2916 )
2917])
2918if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
3466e002 2919 AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR, 1,
2920 [Define if your system uses access rights style
2921 file descriptor passing])
6f34652e 2922fi
2923
7176df4f 2924AC_CACHE_CHECK([for msg_control field in struct msghdr],
2925 ac_cv_have_control_in_msghdr, [
1a01a50c 2926 AC_COMPILE_IFELSE(
7176df4f 2927 [
f95c8ce8 2928#include <sys/types.h>
7176df4f 2929#include <sys/socket.h>
2930#include <sys/uio.h>
637f9177 2931int main() {
2932#ifdef msg_control
1a01a50c 2933#error "msg_control is a macro"
637f9177 2934exit(1);
2935#endif
2936struct msghdr m;
2937m.msg_control = 0;
2938exit(0);
2939}
7176df4f 2940 ],
7176df4f 2941 [ ac_cv_have_control_in_msghdr="yes" ],
2942 [ ac_cv_have_control_in_msghdr="no" ]
2943 )
2944])
2945if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
3466e002 2946 AC_DEFINE(HAVE_CONTROL_IN_MSGHDR, 1,
2947 [Define if your system uses ancillary data style
2948 file descriptor passing])
7176df4f 2949fi
2950
58d100bf 2951AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
aff51935 2952 AC_TRY_LINK([],
2953 [ extern char *__progname; printf("%s", __progname); ],
58d100bf 2954 [ ac_cv_libc_defines___progname="yes" ],
2955 [ ac_cv_libc_defines___progname="no" ]
2956 )
2957])
2958if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
3466e002 2959 AC_DEFINE(HAVE___PROGNAME, 1, [Define if libc defines __progname])
58d100bf 2960fi
8946db53 2961
c921ee00 2962AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2963 AC_TRY_LINK([
2964#include <stdio.h>
aff51935 2965],
2966 [ printf("%s", __FUNCTION__); ],
c921ee00 2967 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2968 [ ac_cv_cc_implements___FUNCTION__="no" ]
2969 )
2970])
2971if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
3466e002 2972 AC_DEFINE(HAVE___FUNCTION__, 1,
2973 [Define if compiler implements __FUNCTION__])
c921ee00 2974fi
2975
2976AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2977 AC_TRY_LINK([
2978#include <stdio.h>
aff51935 2979],
2980 [ printf("%s", __func__); ],
c921ee00 2981 [ ac_cv_cc_implements___func__="yes" ],
2982 [ ac_cv_cc_implements___func__="no" ]
2983 )
2984])
2985if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
3466e002 2986 AC_DEFINE(HAVE___func__, 1, [Define if compiler implements __func__])
c921ee00 2987fi
2988
9a406e1e 2989AC_CACHE_CHECK([whether va_copy exists], ac_cv_have_va_copy, [
2990 AC_TRY_LINK(
2991 [#include <stdarg.h>
2992 va_list x,y;],
2993 [va_copy(x,y);],
2994 [ ac_cv_have_va_copy="yes" ],
2995 [ ac_cv_have_va_copy="no" ]
2996 )
2997])
2998if test "x$ac_cv_have_va_copy" = "xyes" ; then
2999 AC_DEFINE(HAVE_VA_COPY, 1, [Define if va_copy exists])
3000fi
3001
3002AC_CACHE_CHECK([whether __va_copy exists], ac_cv_have___va_copy, [
3003 AC_TRY_LINK(
3004 [#include <stdarg.h>
3005 va_list x,y;],
3006 [__va_copy(x,y);],
3007 [ ac_cv_have___va_copy="yes" ],
3008 [ ac_cv_have___va_copy="no" ]
3009 )
3010])
3011if test "x$ac_cv_have___va_copy" = "xyes" ; then
3012 AC_DEFINE(HAVE___VA_COPY, 1, [Define if __va_copy exists])
3013fi
3014
1812a662 3015AC_CACHE_CHECK([whether getopt has optreset support],
3016 ac_cv_have_getopt_optreset, [
3017 AC_TRY_LINK(
3018 [
3019#include <getopt.h>
3020 ],
3021 [ extern int optreset; optreset = 0; ],
3022 [ ac_cv_have_getopt_optreset="yes" ],
3023 [ ac_cv_have_getopt_optreset="no" ]
3024 )
3025])
3026if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
3466e002 3027 AC_DEFINE(HAVE_GETOPT_OPTRESET, 1,
3028 [Define if your getopt(3) defines and uses optreset])
1812a662 3029fi
a0391976 3030
819b676f 3031AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
aff51935 3032 AC_TRY_LINK([],
3033 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
819b676f 3034 [ ac_cv_libc_defines_sys_errlist="yes" ],
3035 [ ac_cv_libc_defines_sys_errlist="no" ]
3036 )
3037])
3038if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
3466e002 3039 AC_DEFINE(HAVE_SYS_ERRLIST, 1,
3040 [Define if your system defines sys_errlist[]])
819b676f 3041fi
3042
3043
416ed5a7 3044AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
aff51935 3045 AC_TRY_LINK([],
3046 [ extern int sys_nerr; printf("%i", sys_nerr);],
416ed5a7 3047 [ ac_cv_libc_defines_sys_nerr="yes" ],
3048 [ ac_cv_libc_defines_sys_nerr="no" ]
3049 )
3050])
3051if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
3466e002 3052 AC_DEFINE(HAVE_SYS_NERR, 1, [Define if your system defines sys_nerr])
416ed5a7 3053fi
3054
aff51935 3055SCARD_MSG="no"
295c8801 3056# Check whether user wants sectok support
3057AC_ARG_WITH(sectok,
3058 [ --with-sectok Enable smartcard support using libsectok],
d0b19c95 3059 [
3060 if test "x$withval" != "xno" ; then
3061 if test "x$withval" != "xyes" ; then
3062 CPPFLAGS="$CPPFLAGS -I${withval}"
3063 LDFLAGS="$LDFLAGS -L${withval}"
3064 if test ! -z "$need_dash_r" ; then
3065 LDFLAGS="$LDFLAGS -R${withval}"
3066 fi
3067 if test ! -z "$blibpath" ; then
3068 blibpath="$blibpath:${withval}"
3069 fi
3070 fi
3071 AC_CHECK_HEADERS(sectok.h)
3072 if test "$ac_cv_header_sectok_h" != yes; then
3073 AC_MSG_ERROR(Can't find sectok.h)
3074 fi
3075 AC_CHECK_LIB(sectok, sectok_open)
3076 if test "$ac_cv_lib_sectok_sectok_open" != yes; then
3077 AC_MSG_ERROR(Can't find libsectok)
3078 fi
3466e002 3079 AC_DEFINE(SMARTCARD, 1,
3080 [Define if you want smartcard support])
3081 AC_DEFINE(USE_SECTOK, 1,
3082 [Define if you want smartcard support
3083 using sectok])
aff51935 3084 SCARD_MSG="yes, using sectok"
295c8801 3085 fi
3086 ]
3087)
3088
3089# Check whether user wants OpenSC support
987b458f 3090OPENSC_CONFIG="no"
295c8801 3091AC_ARG_WITH(opensc,
e47fb473 3092 [ --with-opensc[[=PFX]] Enable smartcard support using OpenSC (optionally in PATH)],
987b458f 3093 [
3094 if test "x$withval" != "xno" ; then
3095 if test "x$withval" != "xyes" ; then
3096 OPENSC_CONFIG=$withval/bin/opensc-config
3097 else
3098 AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
3099 fi
3100 if test "$OPENSC_CONFIG" != "no"; then
3101 LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
3102 LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
3103 CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
530456f4 3104 LIBS="$LIBS $LIBOPENSC_LIBS"
987b458f 3105 AC_DEFINE(SMARTCARD)
3466e002 3106 AC_DEFINE(USE_OPENSC, 1,
3107 [Define if you want smartcard support
3108 using OpenSC])
987b458f 3109 SCARD_MSG="yes, using OpenSC"
3110 fi
3111 fi
3112 ]
3113)
d0b19c95 3114
c31dc31c 3115# Check libraries needed by DNS fingerprint support
aff51935 3116AC_SEARCH_LIBS(getrrsetbyname, resolv,
3466e002 3117 [AC_DEFINE(HAVE_GETRRSETBYNAME, 1,
3118 [Define if getrrsetbyname() exists])],
3e05e934 3119 [
c31dc31c 3120 # Needed by our getrrsetbyname()
3121 AC_SEARCH_LIBS(res_query, resolv)
3122 AC_SEARCH_LIBS(dn_expand, resolv)
dabb524a 3123 AC_MSG_CHECKING(if res_query will link)
3124 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
3125 [AC_MSG_RESULT(no)
3126 saved_LIBS="$LIBS"
3127 LIBS="$LIBS -lresolv"
3128 AC_MSG_CHECKING(for res_query in -lresolv)
3129 AC_LINK_IFELSE([
3130#include <resolv.h>
3131int main()
3132{
3133 res_query (0, 0, 0, 0, 0);
3134 return 0;
3135}
3136 ],
3137 [LIBS="$LIBS -lresolv"
3138 AC_MSG_RESULT(yes)],
3139 [LIBS="$saved_LIBS"
3140 AC_MSG_RESULT(no)])
3141 ])
c31dc31c 3142 AC_CHECK_FUNCS(_getshort _getlong)
1c829da5 3143 AC_CHECK_DECLS([_getshort, _getlong], , ,
b5765e1d 3144 [#include <sys/types.h>
3145 #include <arpa/nameser.h>])
c31dc31c 3146 AC_CHECK_MEMBER(HEADER.ad,
3466e002 3147 [AC_DEFINE(HAVE_HEADER_AD, 1,
3148 [Define if HEADER.ad exists in arpa/nameser.h])],,
c31dc31c 3149 [#include <arpa/nameser.h>])
3150 ])
3e05e934 3151
ef4d1846 3152# Check whether user wants SELinux support
3153SELINUX_MSG="no"
3154LIBSELINUX=""
3155AC_ARG_WITH(selinux,
3156 [ --with-selinux Enable SELinux support],
3157 [ if test "x$withval" != "xno" ; then
e54defb4 3158 save_LIBS="$LIBS"
ef4d1846 3159 AC_DEFINE(WITH_SELINUX,1,[Define if you want SELinux support.])
3160 SELINUX_MSG="yes"
3161 AC_CHECK_HEADER([selinux/selinux.h], ,
3162 AC_MSG_ERROR(SELinux support requires selinux.h header))
3163 AC_CHECK_LIB(selinux, setexeccon, [ LIBSELINUX="-lselinux" ],
3164 AC_MSG_ERROR(SELinux support requires libselinux library))
e54defb4 3165 SSHDLIBS="$SSHDLIBS $LIBSELINUX"
ef4d1846 3166 AC_CHECK_FUNCS(getseuserbyname get_default_context_with_level)
5ba277eb 3167 LIBS="$save_LIBS"
ef4d1846 3168 fi ]
3169)
ef4d1846 3170
12928e80 3171# Check whether user wants Kerberos 5 support
aff51935 3172KRB5_MSG="no"
12928e80 3173AC_ARG_WITH(kerberos5,
aff51935 3174 [ --with-kerberos5=PATH Enable Kerberos 5 support],
5585c441 3175 [ if test "x$withval" != "xno" ; then
3176 if test "x$withval" = "xyes" ; then
3177 KRB5ROOT="/usr/local"
3178 else
3179 KRB5ROOT=${withval}
3180 fi
3181
3466e002 3182 AC_DEFINE(KRB5, 1, [Define if you want Kerberos 5 support])
5585c441 3183 KRB5_MSG="yes"
3184
3185 AC_MSG_CHECKING(for krb5-config)
3186 if test -x $KRB5ROOT/bin/krb5-config ; then
3187 KRB5CONF=$KRB5ROOT/bin/krb5-config
3188 AC_MSG_RESULT($KRB5CONF)
3189
3190 AC_MSG_CHECKING(for gssapi support)
3191 if $KRB5CONF | grep gssapi >/dev/null ; then
3192 AC_MSG_RESULT(yes)
3466e002 3193 AC_DEFINE(GSSAPI, 1,
3194 [Define this if you want GSSAPI
3195 support in the version 2 protocol])
071970fb 3196 k5confopts=gssapi
aff51935 3197 else
5585c441 3198 AC_MSG_RESULT(no)
071970fb 3199 k5confopts=""
aff51935 3200 fi
071970fb 3201 K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
3202 K5LIBS="`$KRB5CONF --libs $k5confopts`"
5585c441 3203 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
5585c441 3204 AC_MSG_CHECKING(whether we are using Heimdal)
3205 AC_TRY_COMPILE([ #include <krb5.h> ],
3206 [ char *tmp = heimdal_version; ],
3207 [ AC_MSG_RESULT(yes)
3466e002 3208 AC_DEFINE(HEIMDAL, 1,
3209 [Define this if you are using the
3210 Heimdal version of Kerberos V5]) ],
5585c441 3211 AC_MSG_RESULT(no)
3212 )
3213 else
3214 AC_MSG_RESULT(no)
12928e80 3215 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
aff51935 3216 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
aff51935 3217 AC_MSG_CHECKING(whether we are using Heimdal)
3218 AC_TRY_COMPILE([ #include <krb5.h> ],
3219 [ char *tmp = heimdal_version; ],
3220 [ AC_MSG_RESULT(yes)
3221 AC_DEFINE(HEIMDAL)
41707f74 3222 K5LIBS="-lkrb5 -ldes"
3223 K5LIBS="$K5LIBS -lcom_err -lasn1"
82f4e93d 3224 AC_CHECK_LIB(roken, net_write,
41707f74 3225 [K5LIBS="$K5LIBS -lroken"])
aff51935 3226 ],
3227 [ AC_MSG_RESULT(no)
3228 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
3229 ]
3230 )
4e00038c 3231 AC_SEARCH_LIBS(dn_expand, resolv)
12928e80 3232
749560dd 3233 AC_CHECK_LIB(gssapi,gss_init_sec_context,
3234 [ AC_DEFINE(GSSAPI)
3235 K5LIBS="-lgssapi $K5LIBS" ],
3236 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
3237 [ AC_DEFINE(GSSAPI)
aff51935 3238 K5LIBS="-lgssapi_krb5 $K5LIBS" ],
749560dd 3239 AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
3240 $K5LIBS)
3241 ],
3242 $K5LIBS)
82f4e93d 3243
749560dd 3244 AC_CHECK_HEADER(gssapi.h, ,
3245 [ unset ac_cv_header_gssapi_h
aff51935 3246 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
749560dd 3247 AC_CHECK_HEADERS(gssapi.h, ,
3248 AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
aff51935 3249 )
749560dd 3250 ]
3251 )
3252
3253 oldCPP="$CPPFLAGS"
3254 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
3255 AC_CHECK_HEADER(gssapi_krb5.h, ,
3256 [ CPPFLAGS="$oldCPP" ])
3257
aff51935 3258 fi
5585c441 3259 if test ! -z "$need_dash_r" ; then
3260 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
3261 fi
3262 if test ! -z "$blibpath" ; then
3263 blibpath="$blibpath:${KRB5ROOT}/lib"
3264 fi
071970fb 3265
f5555364 3266 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
3267 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
3268 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
071970fb 3269
f5555364 3270 LIBS="$LIBS $K5LIBS"
3466e002 3271 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS, 1,
3272 [Define this if you want to use libkafs' AFS support]))
f5555364 3273 fi
071970fb 3274 ]
12928e80 3275)
b5b68128 3276
a0391976 3277# Looking for programs, paths and files
a0391976 3278
ecac8ee5 3279PRIVSEP_PATH=/var/empty
3280AC_ARG_WITH(privsep-path,
cda1ebcb 3281 [ --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
ecac8ee5 3282 [
6cf0200f 3283 if test -n "$withval" && test "x$withval" != "xno" && \
3284 test "x${withval}" != "xyes"; then
ecac8ee5 3285 PRIVSEP_PATH=$withval
3286 fi
3287 ]
3288)
3289AC_SUBST(PRIVSEP_PATH)
3290
a0391976 3291AC_ARG_WITH(xauth,
3292 [ --with-xauth=PATH Specify path to xauth program ],
3293 [
6cf0200f 3294 if test -n "$withval" && test "x$withval" != "xno" && \
3295 test "x${withval}" != "xyes"; then
cbd7492e 3296 xauth_path=$withval
a0391976 3297 fi
3298 ],
3299 [
2bf42e4a 3300 TestPath="$PATH"
3301 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
3302 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
3303 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
3304 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
3305 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
e5fe9a1f 3306 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
a0391976 3307 xauth_path="/usr/openwin/bin/xauth"
3308 fi
3309 ]
3310)
3311
65a4b4af 3312STRIP_OPT=-s
3313AC_ARG_ENABLE(strip,
3314 [ --disable-strip Disable calling strip(1) on install],
3315 [
3316 if test "x$enableval" = "xno" ; then
3317 STRIP_OPT=
3318 fi
3319 ]
3320)
3321AC_SUBST(STRIP_OPT)
3322
b3ec54b4 3323if test -z "$xauth_path" ; then
3324 XAUTH_PATH="undefined"
3325 AC_SUBST(XAUTH_PATH)
3326else
3466e002 3327 AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path",
3328 [Define if xauth is found in your path])
b3ec54b4 3329 XAUTH_PATH=$xauth_path
3330 AC_SUBST(XAUTH_PATH)
a0391976 3331fi
a0391976 3332
3333# Check for mail directory (last resort if we cannot get it from headers)
3334if test ! -z "$MAIL" ; then
3335 maildir=`dirname $MAIL`
3466e002 3336 AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir",
3337 [Set this to your mail directory if you don't have maillock.h])
a0391976 3338fi
3339
479cece8 3340if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
1a01a50c 3341 AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
3342 disable_ptmx_check=yes
3343fi
a0391976 3344if test -z "$no_dev_ptmx" ; then
6e879cb4 3345 if test "x$disable_ptmx_check" != "xyes" ; then
aff51935 3346 AC_CHECK_FILE("/dev/ptmx",
6e879cb4 3347 [
3466e002 3348 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX, 1,
3349 [Define if you have /dev/ptmx])
6e879cb4 3350 have_dev_ptmx=1
3351 ]
3352 )
3353 fi
3276571c 3354fi
1a01a50c 3355
479cece8 3356if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
1a01a50c 3357 AC_CHECK_FILE("/dev/ptc",
3358 [
3466e002 3359 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC, 1,
3360 [Define if you have /dev/ptc])
1a01a50c 3361 have_dev_ptc=1
3362 ]
3363 )
3364else
3365 AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
3366fi
3276571c 3367
a0391976 3368# Options from here on. Some of these are preset by platform above
fdf6b7aa 3369AC_ARG_WITH(mantype,
5d97cfbf 3370 [ --with-mantype=man|cat|doc Set man page type],
c54a6257 3371 [
5d97cfbf 3372 case "$withval" in
3373 man|cat|doc)
3374 MANTYPE=$withval
3375 ;;
3376 *)
3377 AC_MSG_ERROR(invalid man type: $withval)
3378 ;;
3379 esac
c54a6257 3380 ]
3381)
e0c4d3ac 3382if test -z "$MANTYPE"; then
2bf42e4a 3383 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
3384 AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
e0c4d3ac 3385 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
3386 MANTYPE=doc
3387 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
3388 MANTYPE=man
3389 else
3390 MANTYPE=cat
3391 fi
3392fi
c54a6257 3393AC_SUBST(MANTYPE)
e0c4d3ac 3394if test "$MANTYPE" = "doc"; then
3395 mansubdir=man;
3396else
3397 mansubdir=$MANTYPE;
3398fi
3399AC_SUBST(mansubdir)
0bc5b6fb 3400
a0391976 3401# Check whether to enable MD5 passwords
aff51935 3402MD5_MSG="no"
2ddcfdf3 3403AC_ARG_WITH(md5-passwords,
caf3bc51 3404 [ --with-md5-passwords Enable use of MD5 passwords],
0bc5b6fb 3405 [
bcf36c78 3406 if test "x$withval" != "xno" ; then
3466e002 3407 AC_DEFINE(HAVE_MD5_PASSWORDS, 1,
3408 [Define if you want to allow MD5 passwords])
aff51935 3409 MD5_MSG="yes"
0bc5b6fb 3410 fi
3411 ]
caf3bc51 3412)
3413
a0391976 3414# Whether to disable shadow password support
a7effaac 3415AC_ARG_WITH(shadow,
3416 [ --without-shadow Disable shadow password support],
3417 [
82f4e93d 3418 if test "x$withval" = "xno" ; then
a7effaac 3419 AC_DEFINE(DISABLE_SHADOW)
4cb5ffa0 3420 disable_shadow=yes
a7effaac 3421 fi
3422 ]
3423)
3424
4cb5ffa0 3425if test -z "$disable_shadow" ; then
3426 AC_MSG_CHECKING([if the systems has expire shadow information])
3427 AC_TRY_COMPILE(
3428 [
3429#include <sys/types.h>
3430#include <shadow.h>
3431 struct spwd sp;
3432 ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
3433 [ sp_expire_available=yes ], []
3434 )
3435
3436 if test "x$sp_expire_available" = "xyes" ; then
3437 AC_MSG_RESULT(yes)
3466e002 3438 AC_DEFINE(HAS_SHADOW_EXPIRE, 1,
3439 [Define if you want to use shadow password expire field])
4cb5ffa0 3440 else
3441 AC_MSG_RESULT(no)
3442 fi
3443fi
3444
a0391976 3445# Use ip address instead of hostname in $DISPLAY
44839801 3446if test ! -z "$IPADDR_IN_DISPLAY" ; then
3447 DISPLAY_HACK_MSG="yes"
3466e002 3448 AC_DEFINE(IPADDR_IN_DISPLAY, 1,
3449 [Define if you need to use IP address
3450 instead of hostname in $DISPLAY])
44839801 3451else
aff51935 3452 DISPLAY_HACK_MSG="no"
44839801 3453 AC_ARG_WITH(ipaddr-display,
3454 [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY],
3455 [
82f4e93d 3456 if test "x$withval" != "xno" ; then
44839801 3457 AC_DEFINE(IPADDR_IN_DISPLAY)
aff51935 3458 DISPLAY_HACK_MSG="yes"
44839801 3459 fi
3460 ]
3461 )
3462fi
a7effaac 3463
95b99395 3464# check for /etc/default/login and use it if present.
daa41e62 3465AC_ARG_ENABLE(etc-default-login,
6ff3d0dc 3466 [ --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
694d0cef 3467 [ if test "x$enableval" = "xno"; then
3468 AC_MSG_NOTICE([/etc/default/login handling disabled])
3469 etc_default_login=no
3470 else
3471 etc_default_login=yes
3472 fi ],
b0e7249f 3473 [ if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
3474 then
3475 AC_MSG_WARN([cross compiling: not checking /etc/default/login])
3476 etc_default_login=no
3477 else
3478 etc_default_login=yes
3479 fi ]
694d0cef 3480)
95b99395 3481
694d0cef 3482if test "x$etc_default_login" != "xno"; then
3483 AC_CHECK_FILE("/etc/default/login",
3484 [ external_path_file=/etc/default/login ])
b0e7249f 3485 if test "x$external_path_file" = "x/etc/default/login"; then
3466e002 3486 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN, 1,
3487 [Define if your system has /etc/default/login])
1a01a50c 3488 fi
694d0cef 3489fi
95b99395 3490
8d184c09 3491dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
4b492aab 3492if test $ac_cv_func_login_getcapbool = "yes" && \
3493 test $ac_cv_header_login_cap_h = "yes" ; then
95b99395 3494 external_path_file=/etc/login.conf
8d184c09 3495fi
95b99395 3496
a0391976 3497# Whether to mess with the default path
aff51935 3498SERVER_PATH_MSG="(default)"
c43d69a9 3499AC_ARG_WITH(default-path,
75817f90 3500 [ --with-default-path= Specify default \$PATH environment for server],
cb807f40 3501 [
95b99395 3502 if test "x$external_path_file" = "x/etc/login.conf" ; then
8d184c09 3503 AC_MSG_WARN([
3504--with-default-path=PATH has no effect on this system.
3505Edit /etc/login.conf instead.])
82f4e93d 3506 elif test "x$withval" != "xno" ; then
89bbd457 3507 if test ! -z "$external_path_file" ; then
95b99395 3508 AC_MSG_WARN([
3509--with-default-path=PATH will only be used if PATH is not defined in
3510$external_path_file .])
3511 fi
b2d818e6 3512 user_path="$withval"
aff51935 3513 SERVER_PATH_MSG="$withval"
cb807f40 3514 fi
b2d818e6 3515 ],
95b99395 3516 [ if test "x$external_path_file" = "x/etc/login.conf" ; then
3517 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
8d184c09 3518 else
89bbd457 3519 if test ! -z "$external_path_file" ; then
95b99395 3520 AC_MSG_WARN([
3521If PATH is defined in $external_path_file, ensure the path to scp is included,
3522otherwise scp will not work.])
3523 fi
b0e7249f 3524 AC_RUN_IFELSE(
3525 [AC_LANG_SOURCE([[
b2d818e6 3526/* find out what STDPATH is */
3527#include <stdio.h>
b2d818e6 3528#ifdef HAVE_PATHS_H
3529# include <paths.h>
3530#endif
3531#ifndef _PATH_STDPATH
d9a4e55b 3532# ifdef _PATH_USERPATH /* Irix */
3533# define _PATH_STDPATH _PATH_USERPATH
3534# else
3535# define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
3536# endif
b2d818e6 3537#endif
3538#include <sys/types.h>
3539#include <sys/stat.h>
3540#include <fcntl.h>
3541#define DATA "conftest.stdpath"
3542
3543main()
3544{
3545 FILE *fd;
3546 int rc;
82f4e93d 3547
b2d818e6 3548 fd = fopen(DATA,"w");
3549 if(fd == NULL)
3550 exit(1);
82f4e93d 3551
b2d818e6 3552 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
3553 exit(1);
3554
3555 exit(0);
3556}
b0e7249f 3557 ]])],
3558 [ user_path=`cat conftest.stdpath` ],
b2d818e6 3559 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
3560 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
3561 )
3562# make sure $bindir is in USER_PATH so scp will work
3563 t_bindir=`eval echo ${bindir}`
3564 case $t_bindir in
3565 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
3566 esac
3567 case $t_bindir in
3568 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
3569 esac
3570 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
3571 if test $? -ne 0 ; then
3572 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
3573 if test $? -ne 0 ; then
3574 user_path=$user_path:$t_bindir
3575 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
3576 fi
3577 fi
8d184c09 3578 fi ]
cb807f40 3579)
95b99395 3580if test "x$external_path_file" != "x/etc/login.conf" ; then
3466e002 3581 AC_DEFINE_UNQUOTED(USER_PATH, "$user_path", [Specify default $PATH])
8d184c09 3582 AC_SUBST(user_path)
3583fi
cb807f40 3584
06617857 3585# Set superuser path separately to user path
06617857 3586AC_ARG_WITH(superuser-path,
3587 [ --with-superuser-path= Specify different path for super-user],
3588 [
6cf0200f 3589 if test -n "$withval" && test "x$withval" != "xno" && \
3590 test "x${withval}" != "xyes"; then
3466e002 3591 AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval",
3592 [Define if you want a different $PATH
3593 for the superuser])
06617857 3594 superuser_path=$withval
3595 fi
3596 ]
3597)
3598
3599
58d100bf 3600AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
aff51935 3601IPV4_IN6_HACK_MSG="no"
80faa19f 3602AC_ARG_WITH(4in6,
3603 [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses],
3604 [
3605 if test "x$withval" != "xno" ; then
3606 AC_MSG_RESULT(yes)
3466e002 3607 AC_DEFINE(IPV4_IN_IPV6, 1,
3608 [Detect IPv4 in IPv6 mapped addresses
3609 and treat as IPv4])
aff51935 3610 IPV4_IN6_HACK_MSG="yes"
80faa19f 3611 else
3612 AC_MSG_RESULT(no)
3613 fi
3614 ],[
3615 if test "x$inet6_default_4in6" = "xyes"; then
3616 AC_MSG_RESULT([yes (default)])
3617 AC_DEFINE(IPV4_IN_IPV6)
aff51935 3618 IPV4_IN6_HACK_MSG="yes"
80faa19f 3619 else
3620 AC_MSG_RESULT([no (default)])
3621 fi
3622 ]
3623)
3624
af774732 3625# Whether to enable BSD auth support
f1b0ecc3 3626BSD_AUTH_MSG=no
af774732 3627AC_ARG_WITH(bsd-auth,
3628 [ --with-bsd-auth Enable BSD auth support],
3629 [
82f4e93d 3630 if test "x$withval" != "xno" ; then
3466e002 3631 AC_DEFINE(BSD_AUTH, 1,
3632 [Define if you have BSD auth support])
f1b0ecc3 3633 BSD_AUTH_MSG=yes
af774732 3634 fi
3635 ]
3636)
3637
a0391976 3638# Where to place sshd.pid
19d9ac2a 3639piddir=/var/run
81dadca3 3640# make sure the directory exists
82f4e93d 3641if test ! -d $piddir ; then
81dadca3 3642 piddir=`eval echo ${sysconfdir}`
3643 case $piddir in
aff51935 3644 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
81dadca3 3645 esac
3646fi
3647
47e45e44 3648AC_ARG_WITH(pid-dir,
3649 [ --with-pid-dir=PATH Specify location of ssh.pid file],
3650 [
6cf0200f 3651 if test -n "$withval" && test "x$withval" != "xno" && \
3652 test "x${withval}" != "xyes"; then
19d9ac2a 3653 piddir=$withval
82f4e93d 3654 if test ! -d $piddir ; then
81dadca3 3655 AC_MSG_WARN([** no $piddir directory on this system **])
3656 fi
47e45e44 3657 fi
3658 ]
3659)
b7a87eea 3660
3466e002 3661AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir", [Specify location of ssh.pid])
19d9ac2a 3662AC_SUBST(piddir)
47e45e44 3663
1d7b9b20 3664dnl allow user to disable some login recording features
3665AC_ARG_ENABLE(lastlog,
bfd550a2 3666 [ --disable-lastlog disable use of lastlog even if detected [no]],
ddb154b3 3667 [
3668 if test "x$enableval" = "xno" ; then
3669 AC_DEFINE(DISABLE_LASTLOG)
3670 fi
3671 ]
1d7b9b20 3672)
3673AC_ARG_ENABLE(utmp,
bfd550a2 3674 [ --disable-utmp disable use of utmp even if detected [no]],
ddb154b3 3675 [
3676 if test "x$enableval" = "xno" ; then
3677 AC_DEFINE(DISABLE_UTMP)
3678 fi
3679 ]
1d7b9b20 3680)
3681AC_ARG_ENABLE(utmpx,
bfd550a2 3682 [ --disable-utmpx disable use of utmpx even if detected [no]],
ddb154b3 3683 [
3684 if test "x$enableval" = "xno" ; then
3466e002 3685 AC_DEFINE(DISABLE_UTMPX, 1,
3686 [Define if you don't want to use utmpx])
ddb154b3 3687 fi
3688 ]
1d7b9b20 3689)
3690AC_ARG_ENABLE(wtmp,
bfd550a2 3691 [ --disable-wtmp disable use of wtmp even if detected [no]],
ddb154b3 3692 [
3693 if test "x$enableval" = "xno" ; then
3694 AC_DEFINE(DISABLE_WTMP)
3695 fi
3696 ]
1d7b9b20 3697)
3698AC_ARG_ENABLE(wtmpx,
bfd550a2 3699 [ --disable-wtmpx disable use of wtmpx even if detected [no]],
ddb154b3 3700 [
3701 if test "x$enableval" = "xno" ; then
3466e002 3702 AC_DEFINE(DISABLE_WTMPX, 1,
3703 [Define if you don't want to use wtmpx])
ddb154b3 3704 fi
3705 ]
1d7b9b20 3706)
3707AC_ARG_ENABLE(libutil,
bfd550a2 3708 [ --disable-libutil disable use of libutil (login() etc.) [no]],
ddb154b3 3709 [
3710 if test "x$enableval" = "xno" ; then
3711 AC_DEFINE(DISABLE_LOGIN)
3712 fi
3713 ]
1d7b9b20 3714)
3715AC_ARG_ENABLE(pututline,
bfd550a2 3716 [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]],
ddb154b3 3717 [
3718 if test "x$enableval" = "xno" ; then
3466e002 3719 AC_DEFINE(DISABLE_PUTUTLINE, 1,
3720 [Define if you don't want to use pututline()
3721 etc. to write [uw]tmp])
ddb154b3 3722 fi
3723 ]
1d7b9b20 3724)
3725AC_ARG_ENABLE(pututxline,
bfd550a2 3726 [ --disable-pututxline disable use of pututxline() etc. ([uw]tmpx) [no]],
ddb154b3 3727 [
3728 if test "x$enableval" = "xno" ; then
3466e002 3729 AC_DEFINE(DISABLE_PUTUTXLINE, 1,
3730 [Define if you don't want to use pututxline()
3731 etc. to write [uw]tmpx])
ddb154b3 3732 fi
3733 ]
1d7b9b20 3734)
3735AC_ARG_WITH(lastlog,
bfd550a2 3736 [ --with-lastlog=FILE|DIR specify lastlog location [common locations]],
8c89dd2b 3737 [
82f4e93d 3738 if test "x$withval" = "xno" ; then
8c89dd2b 3739 AC_DEFINE(DISABLE_LASTLOG)
6cf0200f 3740 elif test -n "$withval" && test "x${withval}" != "xyes"; then
8c89dd2b 3741 conf_lastlog_location=$withval
3742 fi
3743 ]
3744)
1d7b9b20 3745
3746dnl lastlog, [uw]tmpx? detection
3747dnl NOTE: set the paths in the platform section to avoid the
3748dnl need for command-line parameters
3749dnl lastlog and [uw]tmp are subject to a file search if all else fails
3750
3751dnl lastlog detection
3752dnl NOTE: the code itself will detect if lastlog is a directory
3753AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
3754AC_TRY_COMPILE([
3755#include <sys/types.h>
3756#include <utmp.h>
3757#ifdef HAVE_LASTLOG_H
3758# include <lastlog.h>
3759#endif
d7c0f3d5 3760#ifdef HAVE_PATHS_H
1d7b9b20 3761# include <paths.h>
41cb4569 3762#endif
3763#ifdef HAVE_LOGIN_H
3764# include <login.h>
1d7b9b20 3765#endif
3766 ],
3767 [ char *lastlog = LASTLOG_FILE; ],
3768 [ AC_MSG_RESULT(yes) ],
d7c0f3d5 3769 [
3770 AC_MSG_RESULT(no)
3771 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
3772 AC_TRY_COMPILE([
3773#include <sys/types.h>
3774#include <utmp.h>
3775#ifdef HAVE_LASTLOG_H
3776# include <lastlog.h>
3777#endif
3778#ifdef HAVE_PATHS_H
3779# include <paths.h>
3780#endif
3781 ],
3782 [ char *lastlog = _PATH_LASTLOG; ],
3783 [ AC_MSG_RESULT(yes) ],
3784 [
f282b668 3785 AC_MSG_RESULT(no)
d7c0f3d5 3786 system_lastlog_path=no
3787 ])
3788 ]
1d7b9b20 3789)
d7c0f3d5 3790
1d7b9b20 3791if test -z "$conf_lastlog_location"; then
3792 if test x"$system_lastlog_path" = x"no" ; then
3793 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
e5fe9a1f 3794 if (test -d "$f" || test -f "$f") ; then
1d7b9b20 3795 conf_lastlog_location=$f
3796 fi
3797 done
3798 if test -z "$conf_lastlog_location"; then
f8119cef 3799 AC_MSG_WARN([** Cannot find lastlog **])
3800 dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
1d7b9b20 3801 fi
3802 fi
3803fi
3804
3805if test -n "$conf_lastlog_location"; then
3466e002 3806 AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location",
3807 [Define if you want to specify the path to your lastlog file])
82f4e93d 3808fi
1d7b9b20 3809
3810dnl utmp detection
3811AC_MSG_CHECKING([if your system defines UTMP_FILE])
3812AC_TRY_COMPILE([
3813#include <sys/types.h>
3814#include <utmp.h>
d7c0f3d5 3815#ifdef HAVE_PATHS_H
1d7b9b20 3816# include <paths.h>
3817#endif
3818 ],
3819 [ char *utmp = UTMP_FILE; ],
3820 [ AC_MSG_RESULT(yes) ],
3821 [ AC_MSG_RESULT(no)
3822 system_utmp_path=no ]
3823)
3824if test -z "$conf_utmp_location"; then
3825 if test x"$system_utmp_path" = x"no" ; then
3826 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3827 if test -f $f ; then
3828 conf_utmp_location=$f
3829 fi
3830 done
3831 if test -z "$conf_utmp_location"; then
3832 AC_DEFINE(DISABLE_UTMP)
3833 fi
3834 fi
3835fi
3836if test -n "$conf_utmp_location"; then
3466e002 3837 AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location",
3838 [Define if you want to specify the path to your utmp file])
82f4e93d 3839fi
1d7b9b20 3840
3841dnl wtmp detection
3842AC_MSG_CHECKING([if your system defines WTMP_FILE])
3843AC_TRY_COMPILE([
3844#include <sys/types.h>
3845#include <utmp.h>
d7c0f3d5 3846#ifdef HAVE_PATHS_H
1d7b9b20 3847# include <paths.h>
3848#endif
3849 ],
3850 [ char *wtmp = WTMP_FILE; ],
3851 [ AC_MSG_RESULT(yes) ],
3852 [ AC_MSG_RESULT(no)
3853 system_wtmp_path=no ]
3854)
3855if test -z "$conf_wtmp_location"; then
3856 if test x"$system_wtmp_path" = x"no" ; then
3857 for f in /usr/adm/wtmp /var/log/wtmp; do
3858 if test -f $f ; then
3859 conf_wtmp_location=$f
3860 fi
3861 done
3862 if test -z "$conf_wtmp_location"; then
3863 AC_DEFINE(DISABLE_WTMP)
3864 fi
3865 fi
3866fi
3867if test -n "$conf_wtmp_location"; then
3466e002 3868 AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location",
3869 [Define if you want to specify the path to your wtmp file])
82f4e93d 3870fi
1d7b9b20 3871
3872
3873dnl utmpx detection - I don't know any system so perverse as to require
3874dnl utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3875dnl there, though.
3876AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3877AC_TRY_COMPILE([
3878#include <sys/types.h>
3879#include <utmp.h>
3880#ifdef HAVE_UTMPX_H
3881#include <utmpx.h>
3882#endif
d7c0f3d5 3883#ifdef HAVE_PATHS_H
1d7b9b20 3884# include <paths.h>
3885#endif
3886 ],
3887 [ char *utmpx = UTMPX_FILE; ],
3888 [ AC_MSG_RESULT(yes) ],
3889 [ AC_MSG_RESULT(no)
3890 system_utmpx_path=no ]
3891)
3892if test -z "$conf_utmpx_location"; then
3893 if test x"$system_utmpx_path" = x"no" ; then
3894 AC_DEFINE(DISABLE_UTMPX)
3895 fi
3896else
3466e002 3897 AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location",
3898 [Define if you want to specify the path to your utmpx file])
82f4e93d 3899fi
1d7b9b20 3900
3901dnl wtmpx detection
3902AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3903AC_TRY_COMPILE([
3904#include <sys/types.h>
3905#include <utmp.h>
3906#ifdef HAVE_UTMPX_H
3907#include <utmpx.h>
3908#endif
d7c0f3d5 3909#ifdef HAVE_PATHS_H
1d7b9b20 3910# include <paths.h>
3911#endif
3912 ],
3913 [ char *wtmpx = WTMPX_FILE; ],
3914 [ AC_MSG_RESULT(yes) ],
3915 [ AC_MSG_RESULT(no)
3916 system_wtmpx_path=no ]
3917)
3918if test -z "$conf_wtmpx_location"; then
3919 if test x"$system_wtmpx_path" = x"no" ; then
3920 AC_DEFINE(DISABLE_WTMPX)
3921 fi
3922else
3466e002 3923 AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location",
3924 [Define if you want to specify the path to your wtmpx file])
82f4e93d 3925fi
1d7b9b20 3926
b7a87eea 3927
bd499f9e 3928if test ! -z "$blibpath" ; then
68ece370 3929 LDFLAGS="$LDFLAGS $blibflags$blibpath"
3930 AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
bd499f9e 3931fi
3932
ed89c848 3933dnl Adding -Werror to CFLAGS early prevents configure tests from running.
3934dnl Add now.
3935CFLAGS="$CFLAGS $werror_flags"
3936
3c62e7eb 3937AC_EXEEXT
29eadd7c 3938AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openssh.xml \
3939 openbsd-compat/Makefile openbsd-compat/regress/Makefile \
3940 scard/Makefile ssh_prng_cmds survey.sh])
98a7c37b 3941AC_OUTPUT
d3083fbd 3942
cbd7492e 3943# Print summary of options
3944
cbd7492e 3945# Someone please show me a better way :)
3946A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3947B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3948C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3949D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
f5665f6f 3950E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
e0c4d3ac 3951F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
cbd7492e 3952G=`eval echo ${piddir}` ; G=`eval echo ${G}`
ecac8ee5 3953H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3954I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3955J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
cbd7492e 3956
3957echo ""
26de7942 3958echo "OpenSSH has been configured with the following options:"
ecac8ee5 3959echo " User binaries: $B"
3960echo " System binaries: $C"
3961echo " Configuration files: $D"
3962echo " Askpass program: $E"
3963echo " Manual pages: $F"
3964echo " PID file: $G"
3965echo " Privilege separation chroot path: $H"
95b99395 3966if test "x$external_path_file" = "x/etc/login.conf" ; then
3967echo " At runtime, sshd will use the path defined in $external_path_file"
3968echo " Make sure the path to scp is present, otherwise scp will not work"
8d184c09 3969else
ecac8ee5 3970echo " sshd default user PATH: $I"
89bbd457 3971 if test ! -z "$external_path_file"; then
95b99395 3972echo " (If PATH is set in $external_path_file it will be used instead. If"
3973echo " used, ensure the path to scp is present, otherwise scp will not work.)"
3974 fi
8d184c09 3975fi
06617857 3976if test ! -z "$superuser_path" ; then
ecac8ee5 3977echo " sshd superuser user PATH: $J"
3978fi
3979echo " Manpage format: $MANTYPE"
3e05e934 3980echo " PAM support: $PAM_MSG"
5b84789f 3981echo " OSF SIA support: $SIA_MSG"
ecac8ee5 3982echo " KerberosV support: $KRB5_MSG"
ef4d1846 3983echo " SELinux support: $SELINUX_MSG"
ecac8ee5 3984echo " Smartcard support: $SCARD_MSG"
ecac8ee5 3985echo " S/KEY support: $SKEY_MSG"
3986echo " TCP Wrappers support: $TCPW_MSG"
3987echo " MD5 password support: $MD5_MSG"
59031773 3988echo " libedit support: $LIBEDIT_MSG"
5b84789f 3989echo " Solaris process contract support: $SPC_MSG"
3deb1408 3990echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
ecac8ee5 3991echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3992echo " BSD Auth support: $BSD_AUTH_MSG"
3993echo " Random number source: $RAND_MSG"
f1b0ecc3 3994if test ! -z "$USE_RAND_HELPER" ; then
ecac8ee5 3995echo " ssh-rand-helper collects from: $RAND_HELPER_MSG"
af774732 3996fi
3997
cbd7492e 3998echo ""
3999
0c2fb82f 4000echo " Host: ${host}"
4001echo " Compiler: ${CC}"
4002echo " Compiler flags: ${CFLAGS}"
4003echo "Preprocessor flags: ${CPPFLAGS}"
4004echo " Linker flags: ${LDFLAGS}"
e54defb4 4005echo " Libraries: ${LIBS}"
4006if test ! -z "${SSHDLIBS}"; then
4007echo " +for sshd: ${SSHDLIBS}"
4008fi
cbd7492e 4009
4010echo ""
4011
9cefe228 4012if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
b3146b5f 4013 echo "SVR4 style packages are supported with \"make package\""
4014 echo ""
9cefe228 4015fi
4016
adeebd37 4017if test "x$PAM_MSG" = "xyes" ; then
f1b0ecc3 4018 echo "PAM is enabled. You may need to install a PAM control file "
4019 echo "for sshd, otherwise password authentication may fail. "
aff51935 4020 echo "Example PAM control files can be found in the contrib/ "
f1b0ecc3 4021 echo "subdirectory"
adeebd37 4022 echo ""
4023fi
4024
f1b0ecc3 4025if test ! -z "$RAND_HELPER_CMDHASH" ; then
4026 echo "WARNING: you are using the builtin random number collection "
4027 echo "service. Please read WARNING.RNG and request that your OS "
4028 echo "vendor includes kernel-based random number collection in "
4029 echo "future versions of your OS."
2c523de9 4030 echo ""
4031fi
af774732 4032
2f6f9cff 4033if test ! -z "$NO_PEERCHECK" ; then
1961d660 4034 echo "WARNING: the operating system that you are using does not"
4035 echo "appear to support getpeereid(), getpeerucred() or the"
4036 echo "SO_PEERCRED getsockopt() option. These facilities are used to"
4037 echo "enforce security checks to prevent unauthorised connections to"
4038 echo "ssh-agent. Their absence increases the risk that a malicious"
4039 echo "user can connect to your agent."
2f6f9cff 4040 echo ""
4041fi
4042
7b578f7d 4043if test "$AUDIT_MODULE" = "bsm" ; then
4044 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
4045 echo "See the Solaris section in README.platform for details."
4046fi
git-cvsimport mirror of OpenSSH
This page took 1.10077 seconds and 5 git commands to generate.