configure.in

   1 AC_INIT(ssh.c)
   2
   3 AC_CONFIG_HEADER(config.h)
   4 AC_PROG_CC
   5 AC_CANONICAL_HOST
   6
   7 # Checks for programs.
   8 AC_PROG_CPP
   9 AC_PROG_RANLIB
  10 AC_PROG_INSTALL
  11 AC_CHECK_PROG(AR, ar, ar)
  12 AC_PATH_PROG(PERL, perl)
  13 AC_SUBST(PERL)
  14 AC_PATH_PROG(ENT, ent)
  15 AC_SUBST(ENT)
  16 AC_PATH_PROGS(FILEPRIV, filepriv, true, /sbin:/usr/sbin)
  17
  18 # Use LOGIN_PROGRAM from environment if possible
  19 if test ! -z "$LOGIN_PROGRAM" ; then
  20         AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM")
  21 else
  22         # Search for login
  23         AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
  24         if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
  25                 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
  26         fi
  27 fi
  28
  29 if test -z "$LD" ; then
  30         LD=$CC
  31 fi
  32 AC_SUBST(LD)
  33
  34 # C Compiler features
  35 AC_C_INLINE
  36 if test "$GCC" = "yes"; then
  37         CFLAGS="$CFLAGS -Wall"
  38 fi
  39
  40 CFLAGS="$CFLAGS -I. -I${srcdir-.}"
  41
  42 # Check for some target-specific stuff
  43 case "$host" in
  44 *-*-aix*)
  45         AFS_LIBS="-lld"
  46         CFLAGS="$CFLAGS -I/usr/local/include"
  47         LDFLAGS="$LDFLAGS -L/usr/local/lib"
  48         if (test "$LD" != "gcc" && test -z "$blibpath"); then
  49                 blibpath="/usr/lib:/lib:/usr/local/lib"
  50         fi
  51         AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE)])
  52         AC_DEFINE(BROKEN_GETADDRINFO)
  53         MANTYPE='$(CATMAN)'
  54         mansubdir=cat
  55         dnl AIX handles lastlog as part of its login message
  56         AC_DEFINE(DISABLE_LASTLOG)
  57         MANTYPE='$(CATMAN)'
  58         mansubdir=cat
  59         ;;
  60 *-*-cygwin*)
  61         LIBS="$LIBS -lregex /usr/lib/textmode.o"
  62         AC_DEFINE(HAVE_CYGWIN)
  63         AC_DEFINE(DISABLE_PAM)
  64         AC_DEFINE(DISABLE_SHADOW)
  65         AC_DEFINE(IPV4_DEFAULT)
  66         AC_DEFINE(IP_TOS_IS_BROKEN)
  67         AC_DEFINE(BROKEN_VHANGUP)
  68         no_pam=1
  69         no_libsocket=1
  70         no_libnsl=1
  71         ;;
  72 *-*-hpux10*)
  73         if test -z "$GCC"; then
  74                 CFLAGS="$CFLAGS -Ae"
  75         fi
  76         CFLAGS="$CFLAGS -D_HPUX_SOURCE"
  77         IPADDR_IN_DISPLAY=yes
  78         AC_DEFINE(USE_PIPES)
  79         AC_DEFINE(DISABLE_SHADOW)
  80         AC_DEFINE(DISABLE_UTMP)
  81         AC_DEFINE(SPT_TYPE,SPT_PSTAT)
  82         LIBS="$LIBS -lsec"
  83         MANTYPE='$(CATMAN)'
  84         mansubdir=cat
  85         ;;
  86 *-*-hpux11*)
  87         CFLAGS="$CFLAGS -D_HPUX_SOURCE"
  88         IPADDR_IN_DISPLAY=yes
  89         AC_DEFINE(USE_PIPES)
  90         AC_DEFINE(DISABLE_SHADOW)
  91         AC_DEFINE(DISABLE_UTMP)
  92         AC_DEFINE(SPT_TYPE,SPT_PSTAT)
  93         LIBS="$LIBS -lsec"
  94         MANTYPE='$(CATMAN)'
  95         mansubdir=cat
  96         ;;
  97 *-*-irix5*)
  98         CFLAGS="$CFLAGS -I/usr/local/include"
  99         LDFLAGS="$LDFLAGS"
 100         PATH="$PATH:/usr/etc"
 101         MANTYPE='$(CATMAN)'
 102         no_libsocket=1
 103         no_libnsl=1
 104         AC_DEFINE(BROKEN_INET_NTOA)
 105         ;;
 106 *-*-irix6*)
 107         CFLAGS="$CFLAGS -I/usr/local/include"
 108         LDFLAGS="$LDFLAGS"
 109         PATH="$PATH:/usr/etc"
 110         MANTYPE='$(CATMAN)'
 111         AC_DEFINE(WITH_IRIX_ARRAY)
 112         AC_DEFINE(WITH_IRIX_PROJECT)
 113         AC_DEFINE(WITH_IRIX_AUDIT)
 114         no_libsocket=1
 115         no_libnsl=1
 116         AC_DEFINE(BROKEN_INET_NTOA)
 117         ;;
 118 *-*-linux*)
 119         no_dev_ptmx=1
 120         AC_DEFINE(DONT_TRY_OTHER_AF)
 121         AC_DEFINE(PAM_TTY_KLUDGE)
 122         inet6_default_4in6=yes
 123         ;;
 124 mips-sony-bsd|mips-sony-newsos4)
 125         AC_DEFINE(HAVE_NEWS4)
 126         SONY=1
 127         AC_CHECK_LIB(iberty, xatexit, AC_DEFINE(HAVE_XATEXIT),
 128                 AC_MSG_ERROR([*** libiberty missing - please install first ***])
 129         )
 130         ;;
 131 *-*-netbsd*)
 132         need_dash_r=1
 133         ;;
 134 *-next-*)
 135         conf_lastlog_location="/usr/adm/lastlog"
 136         conf_utmp_location=/etc/utmp
 137         conf_wtmp_location=/usr/adm/wtmp
 138         MAIL=/usr/spool/mail
 139         AC_DEFINE(HAVE_NEXT)
 140         AC_DEFINE(BROKEN_REALPATH)
 141         CFLAGS="$CFLAGS -I/usr/local/include"
 142         ;;
 143 *-*-solaris*)
 144         CFLAGS="$CFLAGS -I/usr/local/include"
 145         LDFLAGS="$LDFLAGS -L/usr/local/lib -R/usr/local/lib -L/usr/ucblib -R/usr/ucblib"
 146         need_dash_r=1
 147         # hardwire lastlog location (can't detect it on some versions)
 148         conf_lastlog_location="/var/adm/lastlog"
 149         AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
 150         sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
 151         if test "$sol2ver" -ge 8; then
 152                 AC_MSG_RESULT(yes)
 153                 AC_DEFINE(DISABLE_UTMP)
 154                 AC_DEFINE(DISABLE_WTMP)
 155         else
 156                 AC_MSG_RESULT(no)
 157         fi
 158         ;;
 159 *-*-sunos4*)
 160         CFLAGS="$CFLAGS -DSUNOS4"
 161         AC_CHECK_FUNCS(getpwanam)
 162         conf_utmp_location=/etc/utmp
 163         conf_wtmp_location=/var/adm/wtmp
 164         conf_lastlog_location=/var/adm/lastlog
 165         AC_DEFINE(USE_PIPES)
 166         MANTYPE='$(CATMAN)'
 167         mansubdir=cat
 168         ;;
 169 *-sni-sysv*)
 170         CFLAGS="$CFLAGS -I/usr/local/include"
 171         LDFLAGS="$LDFLAGS -L/usr/local/lib -L/usr/ucblib"
 172         MANTYPE='$(CATMAN)'
 173         AC_DEFINE(IP_TOS_IS_BROKEN)
 174         mansubdir=cat
 175         LIBS="$LIBS -lgen -lnsl -lucb"
 176         ;;
 177 *-*-sysv4.2*)
 178         CFLAGS="$CFLAGS -I/usr/local/include"
 179         LDFLAGS="$LDFLAGS -L/usr/local/lib"
 180         MANTYPE='$(CATMAN)'
 181         mansubdir=cat
 182         LIBS="$LIBS -lgen -lsocket -lnsl -lresolv"
 183         enable_suid_ssh=no
 184         ;;
 185 *-*-sysv5*)
 186         CFLAGS="$CFLAGS -I/usr/local/include"
 187         LDFLAGS="$LDFLAGS -L/usr/local/lib"
 188         MANTYPE='$(CATMAN)'
 189         mansubdir=cat
 190         LIBS="$LIBS -lgen -lsocket"
 191         enable_suid_ssh=no
 192         ;;
 193 *-*-sysv*)
 194         CFLAGS="$CFLAGS -I/usr/local/include"
 195         LDFLAGS="$LDFLAGS -L/usr/local/lib"
 196         MANTYPE='$(CATMAN)'
 197         mansubdir=cat
 198         LIBS="$LIBS -lgen -lsocket"
 199         ;;
 200 *-*-sco3.2v4*)
 201         AC_DEFINE(USE_PIPES)
 202         CFLAGS="$CFLAGS -Dftruncate=chsize -I/usr/local/include"
 203         LDFLAGS="$LDFLAGS -L/usr/local/lib"
 204         MANTYPE='$(CATMAN)'
 205         mansubdir=cat
 206         LIBS="$LIBS -lgen -lsocket -los -lprot -lx"
 207         no_dev_ptmx=1
 208         RANLIB=true
 209         AC_DEFINE(BROKEN_SYS_TERMIO_H)
 210         rsh_path="/usr/bin/rcmd"
 211         AC_DEFINE(HAVE_SCO_PROTECTED_PW)
 212         ;;
 213 *-*-sco3.2v5*)
 214         CFLAGS="$CFLAGS -I/usr/local/include"
 215         LDFLAGS="$LDFLAGS -L/usr/local/lib"
 216         MANTYPE='$(CATMAN)'
 217         mansubdir=cat
 218         LIBS="$LIBS -lgen -lsocket -lprot -lx"
 219         no_dev_ptmx=1
 220         rsh_path="/usr/bin/rcmd"
 221         AC_DEFINE(HAVE_SCO_PROTECTED_PW)
 222         ;;
 223 *-dec-osf*)
 224 # This is untested
 225         if test ! -z "USE_SIA" ; then
 226                 AC_MSG_CHECKING(for Digital Unix Security Integration Architecture)
 227                 if test -f /etc/sia/matrix.conf; then
 228                         AC_MSG_RESULT(yes)
 229                         AC_DEFINE(HAVE_OSF_SIA)
 230                         AC_DEFINE(DISABLE_LOGIN)
 231                         LIBS="$LIBS -lsecurity -ldb -lm -laud"
 232                 else
 233                         AC_MSG_RESULT(no)
 234                 fi
 235         fi
 236         ;;
 237 esac
 238
 239 # Allow user to specify flags
 240 AC_ARG_WITH(cflags,
 241         [  --with-cflags           Specify additional flags to pass to compiler],
 242         [
 243                 if test "x$withval" != "xno" ; then
 244                         CFLAGS="$CFLAGS $withval"
 245                 fi
 246         ]
 247 )
 248 AC_ARG_WITH(ldflags,
 249         [  --with-ldlags           Specify additional flags to pass to linker],
 250         [
 251                 if test "x$withval" != "xno" ; then
 252                         LDFLAGS="$LDFLAGS $withval"
 253                 fi
 254         ]
 255 )
 256 AC_ARG_WITH(libs,
 257         [  --with-libs             Specify additional libraries to link with],
 258         [
 259                 if test "x$withval" != "xno" ; then
 260                         LIBS="$LIBS $withval"
 261                 fi
 262         ]
 263 )
 264
 265
 266 # Checks for libraries.
 267 AC_CHECK_LIB(z, deflate, ,AC_MSG_ERROR([*** zlib missing - please install first ***]))
 268 AC_CHECK_LIB(util, login, AC_DEFINE(HAVE_LIBUTIL_LOGIN) LIBS="$LIBS -lutil")
 269 AC_CHECK_LIB(pcre, pcre_info,
 270         AC_DEFINE(HAVE_LIBPCRE) LIBS="$LIBS -lpcreposix -lpcre")
 271
 272 if test -z "$no_libsocket" ; then
 273         AC_CHECK_LIB(nsl, yp_match, , )
 274 fi
 275 if test -z "$no_libnsl" ; then
 276         AC_CHECK_LIB(socket, main, , )
 277 fi
 278
 279 # Checks for header files.
 280 AC_CHECK_HEADERS(bstring.h endian.h floatingpoint.h getopt.h lastlog.h limits.h login.h login_cap.h maillock.h netdb.h netgroup.h netinet/in_systm.h paths.h poll.h pty.h shadow.h security/pam_appl.h sys/bitypes.h sys/bsdtty.h sys/cdefs.h sys/poll.h sys/select.h sys/stat.h sys/stropts.h sys/sysmacros.h sys/time.h sys/ttcompat.h sys/un.h stddef.h time.h ttyent.h usersec.h util.h utmp.h utmpx.h vis.h)
 281
 282 dnl    Checks for library functions.
 283 AC_CHECK_FUNCS(arc4random atexit b64_ntop bcopy bindresvport_af clock fchmod freeaddrinfo futimes gai_strerror getcwd getaddrinfo getnameinfo getrusage getttyent inet_aton inet_ntoa innetgr login_getcapbool md5_crypt memmove mkdtemp on_exit openpty realpath rresvport_af setenv seteuid setlogin setproctitle setreuid setrlimit sigaction sigvec snprintf strerror strlcat strlcpy strsep strtok_r vsnprintf vhangup vis _getpty __b64_ntop)
 284 dnl    Checks for time functions
 285 AC_CHECK_FUNCS(gettimeofday time)
 286 dnl    Checks for libutil functions
 287 AC_CHECK_FUNCS(login logout updwtmp logwtmp)
 288 dnl    Checks for utmp functions
 289 AC_CHECK_FUNCS(entutent getutent getutid getutline pututline setutent)
 290 AC_CHECK_FUNCS(utmpname)
 291 dnl    Checks for utmpx functions
 292 AC_CHECK_FUNCS(entutxent getutxent getutxid getutxline pututxline )
 293 AC_CHECK_FUNCS(setutxent utmpxname)
 294
 295 AC_CHECK_FUNC(getuserattr,
 296         [AC_DEFINE(HAVE_GETUSERATTR)],
 297         [AC_CHECK_LIB(s, getuserattr, [LIBS="$LIBS -ls"; AC_DEFINE(HAVE_GETUSERATTR)])]
 298 )
 299
 300 AC_CHECK_FUNC(login,
 301         [AC_DEFINE(HAVE_LOGIN)],
 302         [AC_CHECK_LIB(bsd, login, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_LOGIN)])]
 303 )
 304
 305 AC_CHECK_FUNC(daemon,
 306         [AC_DEFINE(HAVE_DAEMON)],
 307         [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
 308 )
 309
 310 AC_CHECK_FUNC(getpagesize,
 311         [AC_DEFINE(HAVE_GETPAGESIZE)],
 312         [AC_CHECK_LIB(ucb, getpagesize, [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
 313 )
 314
 315 # Check for broken snprintf
 316 if test "x$ac_cv_func_snprintf" = "xyes" ; then
 317         AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
 318         AC_TRY_RUN(
 319                 [
 320 #include <stdio.h>
 321 int main(void){char b[5];snprintf(b,5,"123456789");return(b[4]!='\0');}
 322                 ],
 323                 [AC_MSG_RESULT(yes)],
 324                 [
 325                         AC_MSG_RESULT(no)
 326                         AC_DEFINE(BROKEN_SNPRINTF)
 327                         AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
 328                 ]
 329         )
 330 fi
 331
 332 AC_FUNC_GETPGRP
 333
 334 PAM_MSG="no"
 335 AC_ARG_WITH(pam,
 336         [  --without-pam           Disable PAM support ],
 337         [
 338                 if test "x$withval" = "xno" ; then
 339                         no_pam=1
 340                         AC_DEFINE(DISABLE_PAM)
 341                         PAM_MSG="disabled"
 342                 fi
 343         ]
 344 )
 345 if (test -z "$no_pam" && test "x$ac_cv_header_security_pam_appl_h" = "xyes") ; then
 346         AC_CHECK_LIB(dl, dlopen, , )
 347         LIBS="$LIBS -lpam"
 348
 349         AC_CHECK_FUNCS(pam_getenvlist)
 350
 351         disable_shadow=yes
 352
 353         PAM_MSG="yes"
 354
 355         # Check PAM strerror arguments (old PAM)
 356         AC_MSG_CHECKING([whether pam_strerror takes only one argument])
 357         AC_TRY_COMPILE(
 358                 [
 359 #include <stdlib.h>
 360 #include <security/pam_appl.h>
 361                 ],
 362                 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
 363                 [AC_MSG_RESULT(no)],
 364                 [
 365                         AC_DEFINE(HAVE_OLD_PAM)
 366                         AC_MSG_RESULT(yes)
 367                         PAM_MSG="yes (old library)"
 368                 ]
 369         )
 370 fi
 371
 372 # The big search for OpenSSL
 373 AC_ARG_WITH(ssl-dir,
 374         [  --with-ssl-dir=PATH     Specify path to OpenSSL installation ],
 375         [
 376                 if test "x$withval" != "$xno" ; then
 377                         tryssldir=$withval
 378                 fi
 379         ]
 380 )
 381
 382 saved_LIBS="$LIBS"
 383 saved_LDFLAGS="$LDFLAGS"
 384 saved_CFLAGS="$CFLAGS"
 385 if test "x$prefix" != "xNONE" ; then
 386         tryssldir="$tryssldir $prefix"
 387 fi
 388 AC_CACHE_CHECK([for OpenSSL directory], ac_cv_openssldir, [
 389
 390         for ssldir in $tryssldir "" /usr/local/openssl /usr/lib/openssl /usr/local/ssl /usr/lib/ssl /usr/local /usr/pkg /opt /opt/openssl ; do
 391                 if test ! -z "$ssldir" ; then
 392                         LDFLAGS="$saved_LDFLAGS -L$ssldir/lib -L$ssldir"
 393                         CFLAGS="$saved_CFLAGS -I$ssldir/include"
 394                         if test ! -z "$need_dash_r" ; then
 395                                 LDFLAGS="$LDFLAGS -R$ssldir/lib -R$ssldir"
 396                         fi
 397                 else
 398                         LDFLAGS="$saved_LDFLAGS"
 399                 fi
 400
 401                 LIBS="$saved_LIBS -lcrypto"
 402
 403                 # Basic test to check for compatible version and correct linking
 404                 # *does not* test for RSA - that comes later.
 405                 AC_TRY_RUN(
 406                         [
 407 #include <string.h>
 408 #include <openssl/rand.h>
 409 int main(void)
 410 {
 411         char a[2048];
 412         memset(a, 0, sizeof(a));
 413         RAND_add(a, sizeof(a), sizeof(a));
 414         return(RAND_status() <= 0);
 415 }
 416                         ],
 417                         [
 418                                 found_crypto=1
 419                                 break;
 420                         ], []
 421                 )
 422
 423                 if test ! -z "$found_crypto" ; then
 424                         break;
 425                 fi
 426         done
 427
 428         if test -z "$found_crypto" ; then
 429                 AC_MSG_ERROR([Could not find working SSLeay / OpenSSL libraries, please install])
 430         fi
 431         if test -z "$ssldir" ; then
 432                 ssldir="(system)"
 433         fi
 434
 435         ac_cv_openssldir=$ssldir
 436 ])
 437
 438 if (test ! -z "$ac_cv_openssldir" && test "x$ac_cv_openssldir" != "x(system)") ; then
 439         AC_DEFINE(HAVE_OPENSSL)
 440         dnl Need to recover ssldir - test above runs in subshell
 441         ssldir=$ac_cv_openssldir
 442         CFLAGS="$saved_CFLAGS -I$ssldir/include"
 443         LDFLAGS="$saved_LDFLAGS -L$ssldir/lib -L$ssldir"
 444         if test ! -z "$need_dash_r" ; then
 445                 LDFLAGS="$LDFLAGS -R$ssldir/lib -R$ssldir"
 446         fi
 447         if test ! -z "$blibpath" ; then
 448                 blibpath="$blibpath:$ssldir:$ssldir/lib"
 449         fi
 450 fi
 451 LIBS="$saved_LIBS -lcrypto"
 452
 453 # Now test RSA support
 454 saved_LIBS="$LIBS"
 455 AC_MSG_CHECKING([for RSA support])
 456 for WANTS_RSAREF in "" 1 ; do
 457         if test -z "$WANTS_RSAREF" ; then
 458                 LIBS="$saved_LIBS"
 459         else
 460                 LIBS="$saved_LIBS -lRSAglue -lrsaref"
 461         fi
 462         AC_TRY_RUN([
 463 #include <string.h>
 464 #include <openssl/rand.h>
 465 #include <openssl/rsa.h>
 466 #include <openssl/bn.h>
 467 #include <openssl/sha.h>
 468 int main(void)
 469 {
 470         int num; RSA *key; static unsigned char p_in[] = "blahblah";
 471         unsigned char c[256], p[256];
 472         memset(c, 0, sizeof(c)); RAND_add(c, sizeof(c), sizeof(c));
 473         if ((key=RSA_generate_key(512, 3, NULL, NULL))==NULL) return(1);
 474         num = RSA_public_encrypt(sizeof(p_in) - 1, p_in, c, key, RSA_PKCS1_PADDING);
 475         return(-1 == RSA_private_decrypt(num, c, p, key, RSA_PKCS1_PADDING));
 476 }
 477         ],
 478         [
 479                 rsa_works=1
 480                 break;
 481         ], [])
 482 done
 483
 484 if test ! -z "$no_rsa" ; then
 485         AC_MSG_RESULT(disabled)
 486         RSA_MSG="disabled"
 487 else
 488         if test -z "$rsa_works" ; then
 489                 AC_MSG_WARN([*** No RSA support found *** ])
 490                 RSA_MSG="no"
 491         else
 492                 if test -z "$WANTS_RSAREF" ; then
 493                         AC_MSG_RESULT(yes)
 494                         RSA_MSG="yes"
 495                 else
 496                         RSA_MSG="yes (using RSAref)"
 497                         AC_MSG_RESULT(using RSAref)
 498                         LIBS="$saved_LIBS -lcrypto -lRSAglue -lrsaref"
 499                 fi
 500         fi
 501 fi
 502
 503 # Cheap hack to ensure NEWS-OS libraries are arranged right.
 504 if test ! -z "$SONY" ; then
 505   LIBS="$LIBS -liberty";
 506 fi
 507
 508 # Checks for data types
 509 AC_CHECK_SIZEOF(char, 1)
 510 AC_CHECK_SIZEOF(short int, 2)
 511 AC_CHECK_SIZEOF(int, 4)
 512 AC_CHECK_SIZEOF(long int, 4)
 513 AC_CHECK_SIZEOF(long long int, 8)
 514
 515 # More checks for data types
 516 AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
 517         AC_TRY_COMPILE(
 518                 [ #include <sys/types.h> ],
 519                 [ u_int a; a = 1;],
 520                 [ ac_cv_have_u_int="yes" ],
 521                 [ ac_cv_have_u_int="no" ]
 522         )
 523 ])
 524 if test "x$ac_cv_have_u_int" = "xyes" ; then
 525         AC_DEFINE(HAVE_U_INT)
 526         have_u_int=1
 527 fi
 528
 529 AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
 530         AC_TRY_COMPILE(
 531                 [ #include <sys/types.h> ],
 532                 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
 533                 [ ac_cv_have_intxx_t="yes" ],
 534                 [ ac_cv_have_intxx_t="no" ]
 535         )
 536 ])
 537 if test "x$ac_cv_have_intxx_t" = "xyes" ; then
 538         AC_DEFINE(HAVE_INTXX_T)
 539         have_intxx_t=1
 540 fi
 541
 542 AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
 543         AC_TRY_COMPILE(
 544                 [ #include <sys/types.h> ],
 545                 [ int64_t a; a = 1;],
 546                 [ ac_cv_have_int64_t="yes" ],
 547                 [ ac_cv_have_int64_t="no" ]
 548         )
 549 ])
 550 if test "x$ac_cv_have_int64_t" = "xyes" ; then
 551         AC_DEFINE(HAVE_INT64_T)
 552         have_int64_t=1
 553 fi
 554
 555 AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
 556         AC_TRY_COMPILE(
 557                 [ #include <sys/types.h> ],
 558                 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
 559                 [ ac_cv_have_u_intxx_t="yes" ],
 560                 [ ac_cv_have_u_intxx_t="no" ]
 561         )
 562 ])
 563 if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
 564         AC_DEFINE(HAVE_U_INTXX_T)
 565         have_u_intxx_t=1
 566 fi
 567
 568 AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
 569         AC_TRY_COMPILE(
 570                 [ #include <sys/types.h> ],
 571                 [ u_int64_t a; a = 1;],
 572                 [ ac_cv_have_u_int64_t="yes" ],
 573                 [ ac_cv_have_u_int64_t="no" ]
 574         )
 575 ])
 576 if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
 577         AC_DEFINE(HAVE_U_INT64_T)
 578         have_u_int64_t=1
 579 fi
 580
 581 if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
 582            test "x$ac_cv_header_sys_bitypes_h" = "xyes")
 583 then
 584         AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
 585         AC_TRY_COMPILE(
 586                 [
 587 #include <sys/bitypes.h>
 588                 ],
 589                 [
 590                         int8_t a; int16_t b; int32_t c;
 591                         u_int8_t e; u_int16_t f; u_int32_t g;
 592                         a = b = c = e = f = g = 1;
 593                 ],
 594                 [
 595                         AC_DEFINE(HAVE_U_INTXX_T)
 596                         AC_DEFINE(HAVE_INTXX_T)
 597                         AC_MSG_RESULT(yes)
 598                 ],
 599                 [AC_MSG_RESULT(no)]
 600         )
 601 fi
 602
 603 if test -z "$have_u_intxx_t" ; then
 604         AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
 605                 AC_TRY_COMPILE(
 606                         [
 607 #include <sys/types.h>
 608                         ],
 609                         [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
 610                         [ ac_cv_have_uintxx_t="yes" ],
 611                         [ ac_cv_have_uintxx_t="no" ]
 612                 )
 613         ])
 614         if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
 615                 AC_DEFINE(HAVE_UINTXX_T)
 616         fi
 617 fi
 618
 619 AC_CACHE_CHECK([for socklen_t], ac_cv_have_socklen_t, [
 620         AC_TRY_COMPILE(
 621                 [
 622 #include <sys/types.h>
 623 #include <sys/socket.h>
 624                 ],
 625                 [socklen_t foo; foo = 1235;],
 626                 [ ac_cv_have_socklen_t="yes" ],
 627                 [ ac_cv_have_socklen_t="no" ]
 628         )
 629 ])
 630 if test "x$ac_cv_have_socklen_t" = "xyes" ; then
 631         AC_DEFINE(HAVE_SOCKLEN_T)
 632 fi
 633
 634 AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
 635         AC_TRY_COMPILE(
 636                 [
 637 #include <sys/types.h>
 638                 ],
 639                 [ size_t foo; foo = 1235; ],
 640                 [ ac_cv_have_size_t="yes" ],
 641                 [ ac_cv_have_size_t="no" ]
 642         )
 643 ])
 644 if test "x$ac_cv_have_size_t" = "xyes" ; then
 645         AC_DEFINE(HAVE_SIZE_T)
 646 fi
 647
 648 AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
 649         AC_TRY_COMPILE(
 650                 [
 651 #include <sys/types.h>
 652                 ],
 653                 [ ssize_t foo; foo = 1235; ],
 654                 [ ac_cv_have_ssize_t="yes" ],
 655                 [ ac_cv_have_ssize_t="no" ]
 656         )
 657 ])
 658 if test "x$ac_cv_have_ssize_t" = "xyes" ; then
 659         AC_DEFINE(HAVE_SSIZE_T)
 660 fi
 661
 662 AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
 663         AC_TRY_COMPILE(
 664                 [
 665 #include <sys/types.h>
 666 #include <sys/socket.h>
 667                 ],
 668                 [ sa_family_t foo; foo = 1235; ],
 669                 [ ac_cv_have_sa_family_t="yes" ],
 670                 [ AC_TRY_COMPILE(
 671                   [
 672 #include <sys/types.h>
 673 #include <sys/socket.h>
 674 #include <netinet/in.h>
 675                 ],
 676                 [ sa_family_t foo; foo = 1235; ],
 677                 [ ac_cv_have_sa_family_t="yes" ],
 678
 679                 [ ac_cv_have_sa_family_t="no" ]
 680         )]
 681         )
 682 ])
 683 if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
 684         AC_DEFINE(HAVE_SA_FAMILY_T)
 685 fi
 686
 687 AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
 688         AC_TRY_COMPILE(
 689                 [
 690 #include <sys/types.h>
 691                 ],
 692                 [ pid_t foo; foo = 1235; ],
 693                 [ ac_cv_have_pid_t="yes" ],
 694                 [ ac_cv_have_pid_t="no" ]
 695         )
 696 ])
 697 if test "x$ac_cv_have_pid_t" = "xyes" ; then
 698         AC_DEFINE(HAVE_PID_T)
 699 fi
 700
 701 AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
 702         AC_TRY_COMPILE(
 703                 [
 704 #include <sys/types.h>
 705                 ],
 706                 [ mode_t foo; foo = 1235; ],
 707                 [ ac_cv_have_mode_t="yes" ],
 708                 [ ac_cv_have_mode_t="no" ]
 709         )
 710 ])
 711 if test "x$ac_cv_have_mode_t" = "xyes" ; then
 712         AC_DEFINE(HAVE_MODE_T)
 713 fi
 714
 715
 716 AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
 717         AC_TRY_COMPILE(
 718                 [
 719 #include <sys/types.h>
 720 #include <sys/socket.h>
 721                 ],
 722                 [ struct sockaddr_storage s; ],
 723                 [ ac_cv_have_struct_sockaddr_storage="yes" ],
 724                 [ ac_cv_have_struct_sockaddr_storage="no" ]
 725         )
 726 ])
 727 if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
 728         AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE)
 729 fi
 730
 731 AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
 732         AC_TRY_COMPILE(
 733                 [
 734 #include <sys/types.h>
 735 #include <netinet/in.h>
 736                 ],
 737                 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
 738                 [ ac_cv_have_struct_sockaddr_in6="yes" ],
 739                 [ ac_cv_have_struct_sockaddr_in6="no" ]
 740         )
 741 ])
 742 if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
 743         AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6)
 744 fi
 745
 746 AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
 747         AC_TRY_COMPILE(
 748                 [
 749 #include <sys/types.h>
 750 #include <netinet/in.h>
 751                 ],
 752                 [ struct in6_addr s; s.s6_addr[0] = 0; ],
 753                 [ ac_cv_have_struct_in6_addr="yes" ],
 754                 [ ac_cv_have_struct_in6_addr="no" ]
 755         )
 756 ])
 757 if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
 758         AC_DEFINE(HAVE_STRUCT_IN6_ADDR)
 759 fi
 760
 761 AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
 762         AC_TRY_COMPILE(
 763                 [
 764 #include <sys/types.h>
 765 #include <sys/socket.h>
 766 #include <netdb.h>
 767                 ],
 768                 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
 769                 [ ac_cv_have_struct_addrinfo="yes" ],
 770                 [ ac_cv_have_struct_addrinfo="no" ]
 771         )
 772 ])
 773 if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
 774         AC_DEFINE(HAVE_STRUCT_ADDRINFO)
 775 fi
 776
 777 dnl Checks for structure members
 778 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
 779 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
 780 OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
 781 OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
 782 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
 783 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
 784 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
 785 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
 786 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
 787 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
 788 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
 789 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
 790 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
 791 OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
 792 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
 793 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
 794 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
 795 AC_STRUCT_ST_BLKSIZE
 796
 797 AC_CACHE_CHECK([for sun_len field in struct sockaddr_un],
 798                 ac_cv_have_sun_len_in_struct_sockaddr_un, [
 799         AC_TRY_COMPILE(
 800                 [
 801 #include <sys/types.h>
 802 #include <sys/socket.h>
 803                 ],
 804                 [ struct sockaddr_un s; s.sun_len = 1; ],
 805                 [ ac_cv_have_sun_len_in_struct_sockaddr_un="yes" ],
 806                 [ ac_cv_have_sun_len_in_struct_sockaddr_un="no" ],
 807         )
 808 ])
 809 if test "x$ac_cv_have_sun_len_in_struct_sockaddr_un" = "xyes" ; then
 810         AC_DEFINE(HAVE_SUN_LEN_IN_SOCKADDR_UN)
 811 fi
 812
 813 AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
 814                 ac_cv_have_ss_family_in_struct_ss, [
 815         AC_TRY_COMPILE(
 816                 [
 817 #include <sys/types.h>
 818 #include <sys/socket.h>
 819                 ],
 820                 [ struct sockaddr_storage s; s.ss_family = 1; ],
 821                 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
 822                 [ ac_cv_have_ss_family_in_struct_ss="no" ],
 823         )
 824 ])
 825 if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
 826         AC_DEFINE(HAVE_SS_FAMILY_IN_SS)
 827 fi
 828
 829 AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
 830                 ac_cv_have___ss_family_in_struct_ss, [
 831         AC_TRY_COMPILE(
 832                 [
 833 #include <sys/types.h>
 834 #include <sys/socket.h>
 835                 ],
 836                 [ struct sockaddr_storage s; s.__ss_family = 1; ],
 837                 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
 838                 [ ac_cv_have___ss_family_in_struct_ss="no" ]
 839         )
 840 ])
 841 if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
 842         AC_DEFINE(HAVE___SS_FAMILY_IN_SS)
 843 fi
 844
 845 AC_CACHE_CHECK([for pw_class field in struct passwd],
 846                 ac_cv_have_pw_class_in_struct_passwd, [
 847         AC_TRY_COMPILE(
 848                 [
 849 #include <pwd.h>
 850                 ],
 851                 [ struct passwd p; p.pw_class = 0; ],
 852                 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
 853                 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
 854         )
 855 ])
 856 if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
 857         AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD)
 858 fi
 859
 860
 861 AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
 862         AC_TRY_LINK([],
 863                 [ extern char *__progname; printf("%s", __progname); ],
 864                 [ ac_cv_libc_defines___progname="yes" ],
 865                 [ ac_cv_libc_defines___progname="no" ]
 866         )
 867 ])
 868 if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
 869         AC_DEFINE(HAVE___PROGNAME)
 870 fi
 871
 872
 873 AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
 874         AC_TRY_LINK([],
 875                 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
 876                 [ ac_cv_libc_defines_sys_errlist="yes" ],
 877                 [ ac_cv_libc_defines_sys_errlist="no" ]
 878         )
 879 ])
 880 if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
 881         AC_DEFINE(HAVE_SYS_ERRLIST)
 882 fi
 883
 884
 885 AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
 886         AC_TRY_LINK([],
 887                 [ extern int sys_nerr; printf("%i", sys_nerr);],
 888                 [ ac_cv_libc_defines_sys_nerr="yes" ],
 889                 [ ac_cv_libc_defines_sys_nerr="no" ]
 890         )
 891 ])
 892 if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
 893         AC_DEFINE(HAVE_SYS_NERR)
 894 fi
 895
 896
 897 # Looking for programs, paths and files
 898 AC_ARG_WITH(rsh,
 899         [  --with-rsh=PATH         Specify path to remote shell program ],
 900         [
 901                 if test "x$withval" != "$no" ; then
 902                         rsh_path=$withval
 903                 fi
 904         ],
 905         [
 906                 AC_PATH_PROG(rsh_path, rsh)
 907         ]
 908 )
 909
 910 AC_ARG_WITH(xauth,
 911         [  --with-xauth=PATH       Specify path to xauth program ],
 912         [
 913                 if test "x$withval" != "$xno" ; then
 914                         xauth_path=$withval
 915                 fi
 916         ],
 917         [
 918                 AC_PATH_PROG(xauth_path, xauth,,$PATH:/usr/X/bin:/usr/bin/X11:/usr/X11R6/bin:/usr/openwin/bin)
 919                 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
 920                         xauth_path="/usr/openwin/bin/xauth"
 921                 fi
 922         ]
 923 )
 924
 925 if test ! -z "$xauth_path" ; then
 926         AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path")
 927 fi
 928 if test ! -z "$rsh_path" ; then
 929         AC_DEFINE_UNQUOTED(RSH_PATH, "$rsh_path")
 930 fi
 931
 932 # Check for mail directory (last resort if we cannot get it from headers)
 933 if test ! -z "$MAIL" ; then
 934         maildir=`dirname $MAIL`
 935         AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir")
 936 fi
 937
 938 if test -z "$no_dev_ptmx" ; then
 939         AC_CHECK_FILE("/dev/ptmx",
 940                 [
 941                         AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX)
 942                         have_dev_ptmx=1
 943                 ]
 944         )
 945 fi
 946 AC_CHECK_FILE("/dev/ptc",
 947         [
 948                 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC)
 949                 have_dev_ptc=1
 950         ]
 951 )
 952
 953 # Options from here on. Some of these are preset by platform above
 954
 955 # Check for user-specified random device, otherwise check /dev/urandom
 956 AC_ARG_WITH(random,
 957         [  --with-random=FILE      read randomness from FILE (default=/dev/urandom)],
 958         [
 959                 if test "x$withval" != "xno" ; then
 960                         RANDOM_POOL="$withval";
 961                         AC_DEFINE_UNQUOTED(RANDOM_POOL, "$RANDOM_POOL")
 962                 fi
 963         ],
 964         [
 965                 # Check for random device
 966                 AC_CHECK_FILE("/dev/urandom",
 967                         [
 968                                 RANDOM_POOL="/dev/urandom";
 969                                 AC_SUBST(RANDOM_POOL)
 970                                 AC_DEFINE_UNQUOTED(RANDOM_POOL, "$RANDOM_POOL")
 971                         ]
 972                 )
 973         ]
 974 )
 975
 976 # Check for EGD pool file
 977 AC_ARG_WITH(egd-pool,
 978         [  --with-egd-pool=FILE    read randomness from EGD pool FILE (default none)],
 979         [
 980                 if test "x$withval" != "xno" ; then
 981                         EGD_SOCKET="$withval";
 982                         AC_DEFINE_UNQUOTED(EGD_SOCKET, "$EGD_SOCKET")
 983                 fi
 984         ]
 985 )
 986
 987 # detect pathnames for entropy gathering commands, if we need them
 988 INSTALL_SSH_PRNG_CMDS=""
 989 rm -f prng_commands
 990 if (test -z "$RANDOM_POOL" && test -z "$EGD_SOCKET") ; then
 991         # Use these commands to collect entropy
 992         OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
 993         OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
 994         OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
 995         OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
 996         OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
 997         OSSH_PATH_ENTROPY_PROG(PROG_W, w)
 998         OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
 999         OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
1000         OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
1001         OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
1002         OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
1003         OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
1004         OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
1005         OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
1006         OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
1007
1008         INSTALL_SSH_PRNG_CMDS="yes"
1009 fi
1010 AC_SUBST(INSTALL_SSH_PRNG_CMDS)
1011
1012
1013 AC_ARG_WITH(catman,
1014         [  --with-catman=man|cat   Install preformatted manpages[no]],
1015         [
1016                 MANTYPE='$(CATMAN)'
1017                 if test x"$withval" != x"yes" ; then
1018                    mansubdir=$withval
1019                 else
1020                    mansubdir=cat
1021                 fi
1022         ], [
1023                 if test -z "$MANTYPE" ; then
1024                         MANTYPE='$(TROFFMAN)'
1025                         mansubdir=man
1026                 fi
1027         ]
1028 )
1029 AC_SUBST(MANTYPE)
1030 AC_SUBST(mansubdir)
1031
1032 # Check whether user wants Kerberos support
1033 KRB4_MSG="no"
1034 AC_ARG_WITH(kerberos4,
1035         [  --with-kerberos4=PATH   Enable Kerberos 4 support],
1036         [
1037                 if test "x$withval" != "xno" ; then
1038
1039                         if test "x$withval" != "$xyes" ; then
1040                                 CFLAGS="$CFLAGS -I${withval}/include"
1041                                 LDFLAGS="$LDFLAGS -L${withval}/lib"
1042                                 if test ! -z "$need_dash_r" ; then
1043                                         LDFLAGS="$LDFLAGS -R${withval}/lib"
1044                                 fi
1045                                 if test ! -z "$blibpath" ; then
1046                                         blibpath="$blibpath:${withval}/lib"
1047                                 fi
1048                         else
1049                                 if test -d /usr/include/kerberosIV ; then
1050                                         CFLAGS="$CFLAGS -I/usr/include/kerberosIV"
1051                                 fi
1052                         fi
1053
1054                         AC_CHECK_HEADERS(krb.h)
1055                         AC_CHECK_LIB(krb, main)
1056                         if test "$ac_cv_header_krb_h" != yes; then
1057                                 AC_MSG_WARN([Cannot find krb.h, build may fail])
1058                         fi
1059                         if test "$ac_cv_lib_krb_main" != yes; then
1060                                 AC_MSG_WARN([Cannot find libkrb, build may fail])
1061                         fi
1062
1063                         KLIBS="-lkrb -ldes"
1064                         AC_CHECK_LIB(resolv, dn_expand, , )
1065                         KRB4=yes
1066                         KRB4_MSG="yes"
1067                         AC_DEFINE(KRB4)
1068                 fi
1069         ]
1070 )
1071
1072 # Check whether user wants AFS support
1073 AFS_MSG="no"
1074 AC_ARG_WITH(afs,
1075         [  --with-afs=PATH         Enable AFS support],
1076         [
1077                 if test "x$withval" != "xno" ; then
1078
1079                         if test "x$withval" != "$xyes" ; then
1080                                 CFLAGS="$CFLAGS -I${withval}/include"
1081                                 LFLAGS="$LFLAGS -L${withval}/lib"
1082                         fi
1083
1084                         if test -z "$KRB4" ; then
1085                                 AC_MSG_WARN([AFS requires Kerberos IV support, build may fail])
1086                         fi
1087
1088                         LIBS="$LIBS -lkafs"
1089                         if test ! -z "$AFS_LIBS" ; then
1090                                 LIBS="$LIBS $AFS_LIBS"
1091                         fi
1092                         AC_DEFINE(AFS)
1093                         AFS_MSG="yes"
1094                 fi
1095         ]
1096 )
1097 LIBS="$LIBS $KLIBS"
1098
1099 # Check whether user wants S/Key support
1100 SKEY_MSG="no"
1101 AC_ARG_WITH(skey,
1102         [  --with-skey             Enable S/Key support],
1103         [
1104                 if test "x$withval" != "xno" ; then
1105                         AC_DEFINE(SKEY)
1106                         LIBS="$LIBS -lskey"
1107                         SKEY_MSG="yes"
1108                 fi
1109         ]
1110 )
1111
1112 # Check whether user wants TCP wrappers support
1113 TCPW_MSG="no"
1114 AC_ARG_WITH(tcp-wrappers,
1115         [  --with-tcp-wrappers     Enable tcpwrappers support],
1116         [
1117                 if test "x$withval" != "xno" ; then
1118                         saved_LIBS="$LIBS"
1119                         LIBS="$LIBS -lwrap"
1120                         AC_MSG_CHECKING(for libwrap)
1121                         AC_TRY_LINK(
1122                                 [
1123 #include <tcpd.h>
1124                                         int deny_severity = 0, allow_severity = 0;
1125                                 ],
1126                                 [hosts_access(0);],
1127                                 [
1128                                         AC_MSG_RESULT(yes)
1129                                         AC_DEFINE(LIBWRAP)
1130                                         TCPW_MSG="yes"
1131                                 ],
1132                                 [
1133                                         AC_MSG_ERROR([*** libwrap missing])
1134                                 ]
1135                         )
1136                 fi
1137         ]
1138 )
1139
1140 # Check whether to enable MD5 passwords
1141 MD5_MSG="no"
1142 AC_ARG_WITH(md5-passwords,
1143         [  --with-md5-passwords    Enable use of MD5 passwords],
1144         [
1145                 if test "x$withval" != "xno" ; then
1146                         AC_DEFINE(HAVE_MD5_PASSWORDS)
1147                         MD5_MSG="yes"
1148                 fi
1149         ]
1150 )
1151
1152 # Whether to disable shadow password support
1153 AC_ARG_WITH(shadow,
1154         [  --without-shadow        Disable shadow password support],
1155         [
1156                 if test "x$withval" = "xno" ; then
1157                         AC_DEFINE(DISABLE_SHADOW)
1158                         disable_shadow=yes
1159                 fi
1160         ]
1161 )
1162
1163 if test -z "$disable_shadow" ; then
1164         AC_MSG_CHECKING([if the systems has expire shadow information])
1165         AC_TRY_COMPILE(
1166         [
1167 #include <sys/types.h>
1168 #include <shadow.h>
1169         struct spwd sp;
1170         ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
1171         [ sp_expire_available=yes ], []
1172         )
1173
1174         if test "x$sp_expire_available" = "xyes" ; then
1175                 AC_MSG_RESULT(yes)
1176                 AC_DEFINE(HAS_SHADOW_EXPIRE)
1177         else
1178                 AC_MSG_RESULT(no)
1179         fi
1180 fi
1181
1182 # Use ip address instead of hostname in $DISPLAY
1183 if test ! -z "$IPADDR_IN_DISPLAY" ; then
1184         DISPLAY_HACK_MSG="yes"
1185         AC_DEFINE(IPADDR_IN_DISPLAY)
1186 else
1187         DISPLAY_HACK_MSG="no"
1188         AC_ARG_WITH(ipaddr-display,
1189                 [  --with-ipaddr-display   Use ip address instead of hostname in \$DISPLAY],
1190                 [
1191                         if test "x$withval" != "xno" ; then
1192                                 AC_DEFINE(IPADDR_IN_DISPLAY)
1193                                 DISPLAY_HACK_MSG="yes"
1194                         fi
1195                 ]
1196         )
1197 fi
1198
1199 # Whether to mess with the default path
1200 SERVER_PATH_MSG="(default)"
1201 AC_ARG_WITH(default-path,
1202         [  --with-default-path=PATH Specify default \$PATH environment for server],
1203         [
1204                 if test "x$withval" != "xno" ; then
1205                         AC_DEFINE_UNQUOTED(USER_PATH, "$withval")
1206                         SERVER_PATH_MSG="$withval"
1207                 fi
1208         ]
1209 )
1210
1211 # Whether to force IPv4 by default (needed on broken glibc Linux)
1212 IPV4_HACK_MSG="no"
1213 AC_ARG_WITH(ipv4-default,
1214         [  --with-ipv4-default     Use IPv4 by connections unless '-6' specified],
1215         [
1216                 if test "x$withval" != "xno" ; then
1217                         AC_DEFINE(IPV4_DEFAULT)
1218                         IPV4_HACK_MSG="yes"
1219                 fi
1220         ]
1221 )
1222
1223 AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
1224 IPV4_IN6_HACK_MSG="no"
1225 AC_ARG_WITH(4in6,
1226         [  --with-4in6             Check for and convert IPv4 in IPv6 mapped addresses],
1227         [
1228                 if test "x$withval" != "xno" ; then
1229                         AC_MSG_RESULT(yes)
1230                         AC_DEFINE(IPV4_IN_IPV6)
1231                         IPV4_IN6_HACK_MSG="yes"
1232                 else
1233                         AC_MSG_RESULT(no)
1234                 fi
1235         ],[
1236                 if test "x$inet6_default_4in6" = "xyes"; then
1237                         AC_MSG_RESULT([yes (default)])
1238                         AC_DEFINE(IPV4_IN_IPV6)
1239                         IPV4_IN6_HACK_MSG="yes"
1240                 else
1241                         AC_MSG_RESULT([no (default)])
1242                 fi
1243         ]
1244 )
1245
1246 AC_MSG_CHECKING(whether to install ssh as suid root)
1247 AC_ARG_ENABLE(suid-ssh,
1248 [  --enable-suid-ssh       Install ssh as suid root (default)
1249   --disable-suid-ssh      Install ssh without suid bit],
1250 [ case "$enableval" in
1251   no)
1252        AC_MSG_RESULT(no)
1253        SSHMODE=0711
1254        ;;
1255   *)   AC_MSG_RESULT(yes)
1256        SSHMODE=04711
1257        ;;
1258   esac ],
1259   AC_MSG_RESULT(yes)
1260   SSHMODE=04711
1261 )
1262 AC_SUBST(SSHMODE)
1263
1264
1265 # Where to place sshd.pid
1266 piddir=/var/run
1267 AC_ARG_WITH(pid-dir,
1268         [  --with-pid-dir=PATH     Specify location of ssh.pid file],
1269         [
1270                 if test "x$withval" != "xno" ; then
1271                         piddir=$withval
1272                 fi
1273         ]
1274 )
1275
1276 # make sure the directory exists
1277 if test ! -d $piddir ; then
1278         piddir=`eval echo ${sysconfdir}`
1279         case $piddir in
1280                 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
1281         esac
1282 fi
1283
1284 AC_DEFINE_UNQUOTED(PIDDIR, "$piddir")
1285 AC_SUBST(piddir)
1286
1287 dnl allow user to disable some login recording features
1288 AC_ARG_ENABLE(lastlog,
1289         [  --disable-lastlog       disable use of lastlog even if detected [no]],
1290         [ AC_DEFINE(DISABLE_LASTLOG) ]
1291 )
1292 AC_ARG_ENABLE(utmp,
1293         [  --disable-utmp          disable use of utmp even if detected [no]],
1294         [ AC_DEFINE(DISABLE_UTMP) ]
1295 )
1296 AC_ARG_ENABLE(utmpx,
1297         [  --disable-utmpx         disable use of utmpx even if detected [no]],
1298         [ AC_DEFINE(DISABLE_UTMPX) ]
1299 )
1300 AC_ARG_ENABLE(wtmp,
1301         [  --disable-wtmp          disable use of wtmp even if detected [no]],
1302         [ AC_DEFINE(DISABLE_WTMP) ]
1303 )
1304 AC_ARG_ENABLE(wtmpx,
1305         [  --disable-wtmpx         disable use of wtmpx even if detected [no]],
1306         [ AC_DEFINE(DISABLE_WTMPX) ]
1307 )
1308 AC_ARG_ENABLE(libutil,
1309         [  --disable-libutil       disable use of libutil (login() etc.) [no]],
1310         [ AC_DEFINE(DISABLE_LOGIN) ]
1311 )
1312 AC_ARG_ENABLE(pututline,
1313         [  --disable-pututline     disable use of pututline() etc. ([uw]tmp) [no]],
1314         [ AC_DEFINE(DISABLE_PUTUTLINE) ]
1315 )
1316 AC_ARG_ENABLE(pututxline,
1317         [  --disable-pututxline    disable use of pututxline() etc. ([uw]tmpx) [no]],
1318         [ AC_DEFINE(DISABLE_PUTUTXLINE) ]
1319 )
1320 AC_ARG_WITH(lastlog,
1321   [  --with-lastlog=FILE|DIR specify lastlog location [common locations]],
1322   [ conf_lastlog_location="$withval";  ],)
1323
1324 dnl lastlog, [uw]tmpx? detection
1325 dnl  NOTE: set the paths in the platform section to avoid the
1326 dnl   need for command-line parameters
1327 dnl lastlog and [uw]tmp are subject to a file search if all else fails
1328
1329 dnl lastlog detection
1330 dnl  NOTE: the code itself will detect if lastlog is a directory
1331 AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
1332 AC_TRY_COMPILE([
1333 #include <sys/types.h>
1334 #include <utmp.h>
1335 #ifdef HAVE_LASTLOG_H
1336 #  include <lastlog.h>
1337 #endif
1338 #ifdef HAVE_PATHS_H
1339 #  include <paths.h>
1340 #endif
1341         ],
1342         [ char *lastlog = LASTLOG_FILE; ],
1343         [ AC_MSG_RESULT(yes) ],
1344         [
1345                 AC_MSG_RESULT(no)
1346                 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
1347                 AC_TRY_COMPILE([
1348 #include <sys/types.h>
1349 #include <utmp.h>
1350 #ifdef HAVE_LASTLOG_H
1351 #  include <lastlog.h>
1352 #endif
1353 #ifdef HAVE_PATHS_H
1354 #  include <paths.h>
1355 #endif
1356                 ],
1357                 [ char *lastlog = _PATH_LASTLOG; ],
1358                 [ AC_MSG_RESULT(yes) ],
1359                 [
1360                         AC_MSG_RESULT(no)
1361                         system_lastlog_path=no
1362                 ])
1363         ]
1364 )
1365
1366 if test -z "$conf_lastlog_location"; then
1367         if test x"$system_lastlog_path" = x"no" ; then
1368                 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
1369                                 if (test -d "$f" || test -f "$f") ; then
1370                                         conf_lastlog_location=$f
1371                                 fi
1372                 done
1373                 if test -z "$conf_lastlog_location"; then
1374                         AC_MSG_WARN([** Cannot find lastlog **])
1375                         dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
1376                 fi
1377         fi
1378 fi
1379
1380 if test -n "$conf_lastlog_location"; then
1381         AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location")
1382 fi
1383
1384 dnl utmp detection
1385 AC_MSG_CHECKING([if your system defines UTMP_FILE])
1386 AC_TRY_COMPILE([
1387 #include <sys/types.h>
1388 #include <utmp.h>
1389 #ifdef HAVE_PATHS_H
1390 #  include <paths.h>
1391 #endif
1392         ],
1393         [ char *utmp = UTMP_FILE; ],
1394         [ AC_MSG_RESULT(yes) ],
1395         [ AC_MSG_RESULT(no)
1396           system_utmp_path=no ]
1397 )
1398 if test -z "$conf_utmp_location"; then
1399         if test x"$system_utmp_path" = x"no" ; then
1400                 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
1401                         if test -f $f ; then
1402                                 conf_utmp_location=$f
1403                         fi
1404                 done
1405                 if test -z "$conf_utmp_location"; then
1406                         AC_DEFINE(DISABLE_UTMP)
1407                 fi
1408         fi
1409 fi
1410 if test -n "$conf_utmp_location"; then
1411         AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location")
1412 fi
1413
1414 dnl wtmp detection
1415 AC_MSG_CHECKING([if your system defines WTMP_FILE])
1416 AC_TRY_COMPILE([
1417 #include <sys/types.h>
1418 #include <utmp.h>
1419 #ifdef HAVE_PATHS_H
1420 #  include <paths.h>
1421 #endif
1422         ],
1423         [ char *wtmp = WTMP_FILE; ],
1424         [ AC_MSG_RESULT(yes) ],
1425         [ AC_MSG_RESULT(no)
1426           system_wtmp_path=no ]
1427 )
1428 if test -z "$conf_wtmp_location"; then
1429         if test x"$system_wtmp_path" = x"no" ; then
1430                 for f in /usr/adm/wtmp /var/log/wtmp; do
1431                         if test -f $f ; then
1432                                 conf_wtmp_location=$f
1433                         fi
1434                 done
1435                 if test -z "$conf_wtmp_location"; then
1436                         AC_DEFINE(DISABLE_WTMP)
1437                 fi
1438         fi
1439 fi
1440 if test -n "$conf_wtmp_location"; then
1441         AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location")
1442 fi
1443
1444
1445 dnl utmpx detection - I don't know any system so perverse as to require
1446 dnl  utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
1447 dnl  there, though.
1448 AC_MSG_CHECKING([if your system defines UTMPX_FILE])
1449 AC_TRY_COMPILE([
1450 #include <sys/types.h>
1451 #include <utmp.h>
1452 #ifdef HAVE_UTMPX_H
1453 #include <utmpx.h>
1454 #endif
1455 #ifdef HAVE_PATHS_H
1456 #  include <paths.h>
1457 #endif
1458         ],
1459         [ char *utmpx = UTMPX_FILE; ],
1460         [ AC_MSG_RESULT(yes) ],
1461         [ AC_MSG_RESULT(no)
1462           system_utmpx_path=no ]
1463 )
1464 if test -z "$conf_utmpx_location"; then
1465         if test x"$system_utmpx_path" = x"no" ; then
1466                 AC_DEFINE(DISABLE_UTMPX)
1467         fi
1468 else
1469         AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location")
1470 fi
1471
1472 dnl wtmpx detection
1473 AC_MSG_CHECKING([if your system defines WTMPX_FILE])
1474 AC_TRY_COMPILE([
1475 #include <sys/types.h>
1476 #include <utmp.h>
1477 #ifdef HAVE_UTMPX_H
1478 #include <utmpx.h>
1479 #endif
1480 #ifdef HAVE_PATHS_H
1481 #  include <paths.h>
1482 #endif
1483         ],
1484         [ char *wtmpx = WTMPX_FILE; ],
1485         [ AC_MSG_RESULT(yes) ],
1486         [ AC_MSG_RESULT(no)
1487           system_wtmpx_path=no ]
1488 )
1489 if test -z "$conf_wtmpx_location"; then
1490         if test x"$system_wtmpx_path" = x"no" ; then
1491                 AC_DEFINE(DISABLE_WTMPX)
1492         fi
1493 else
1494         AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location")
1495 fi
1496
1497
1498 # Change default command timeout for builtin PRNG
1499 entropy_timeout=200
1500 AC_ARG_WITH(entropy-timeout,
1501         [  --with-entropy-timeout  Specify entropy gathering command timeout (msec)],
1502         [
1503                 if test "x$withval" != "xno" ; then
1504                         entropy_timeout=$withval
1505                 fi
1506         ]
1507 )
1508 AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout)
1509
1510
1511 if test ! -z "$blibpath" ; then
1512         LDFLAGS="$LDFLAGS -blibpath:$blibpath"
1513         AC_MSG_WARN([Please check and edit -blibpath in LDFLAGS in Makefile])
1514 fi
1515
1516 AC_EXEEXT
1517
1518 AC_OUTPUT(Makefile ssh_prng_cmds)
1519
1520 # Print summary of options
1521
1522 if test x$MANTYPE = x'$(CATMAN)' ; then
1523         MAN_MSG=cat
1524 else
1525         MAN_MSG=man
1526 fi
1527 if test ! -z "$RANDOM_POOL" ; then
1528         RAND_MSG="Device ($RANDOM_POOL)"
1529 else
1530         if test ! -z "$EGD_SOCKET" ; then
1531                 RAND_MSG="EGD ($EGD_SOCKET)"
1532         else
1533                 RAND_MSG="Builtin (timeout $entropy_timeout)"
1534         fi
1535 fi
1536
1537 # Someone please show me a better way :)
1538 A=`eval echo ${prefix}` ; A=`eval echo ${A}`
1539 B=`eval echo ${bindir}` ; B=`eval echo ${B}`
1540 C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
1541 D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
1542 E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
1543 F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
1544 G=`eval echo ${piddir}` ; G=`eval echo ${G}`
1545
1546 echo ""
1547 echo "OpenSSH configured has been configured with the following options."
1548 echo "                 User binaries: $B"
1549 echo "                 User binaries: $B"
1550 echo "               System binaries: $C"
1551 echo "           Configuration files: $D"
1552 echo "               Askpass program: $E"
1553 echo "                  Manual pages: $F"
1554 echo "                      PID file: $G"
1555 echo "      Random number collection: $RAND_MSG"
1556 echo "                Manpage format: $MAN_MSG"
1557 echo "                   PAM support: ${PAM_MSG}"
1558 echo "            KerberosIV support: $KRB4_MSG"
1559 echo "                   AFS support: $AFS_MSG"
1560 echo "                 S/KEY support: $SKEY_MSG"
1561 echo "          TCP Wrappers support: $TCPW_MSG"
1562 echo "          MD5 password support: $MD5_MSG"
1563 echo "   IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
1564 echo "      Use IPv4 by default hack: $IPV4_HACK_MSG"
1565 echo "       Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
1566
1567 echo ""
1568
1569 echo "             Host: ${host}"
1570 echo "         Compiler: ${CC}"
1571 echo "   Compiler flags: ${CFLAGS}"
1572 echo "     Linker flags: ${LDFLAGS}"
1573 echo "        Libraries: ${LIBS}"
1574
1575 echo ""
1576