configure.ac

   1 # $Id$
   2 #
   3 # Copyright (c) 1999-2004 Damien Miller
   4 #
   5 # Permission to use, copy, modify, and distribute this software for any
   6 # purpose with or without fee is hereby granted, provided that the above
   7 # copyright notice and this permission notice appear in all copies.
   8 #
   9 # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  10 # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  11 # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  12 # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  13 # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  14 # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  15 # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  16
  17 AC_INIT(OpenSSH, Portable)
  18 AC_CONFIG_SRCDIR([ssh.c])
  19
  20 AC_CONFIG_HEADER(config.h)
  21 AC_PROG_CC
  22 AC_CANONICAL_HOST
  23 AC_C_BIGENDIAN
  24
  25 # Checks for programs.
  26 AC_PROG_AWK
  27 AC_PROG_CPP
  28 AC_PROG_RANLIB
  29 AC_PROG_INSTALL
  30 AC_PATH_PROG(AR, ar)
  31 AC_PATH_PROG(CAT, cat)
  32 AC_PATH_PROG(KILL, kill)
  33 AC_PATH_PROGS(PERL, perl5 perl)
  34 AC_PATH_PROG(SED, sed)
  35 AC_SUBST(PERL)
  36 AC_PATH_PROG(ENT, ent)
  37 AC_SUBST(ENT)
  38 AC_PATH_PROG(TEST_MINUS_S_SH, bash)
  39 AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
  40 AC_PATH_PROG(TEST_MINUS_S_SH, sh)
  41 AC_PATH_PROG(SH, sh)
  42 AC_SUBST(TEST_SHELL,sh)
  43
  44 dnl for buildpkg.sh
  45 AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
  46         [/usr/sbin${PATH_SEPARATOR}/etc])
  47 AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
  48         [/usr/sbin${PATH_SEPARATOR}/etc])
  49 AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
  50
  51 # System features
  52 AC_SYS_LARGEFILE
  53
  54 if test -z "$AR" ; then
  55         AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
  56 fi
  57
  58 # Use LOGIN_PROGRAM from environment if possible
  59 if test ! -z "$LOGIN_PROGRAM" ; then
  60         AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM")
  61 else
  62         # Search for login
  63         AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
  64         if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
  65                 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
  66         fi
  67 fi
  68
  69 AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
  70 if test ! -z "$PATH_PASSWD_PROG" ; then
  71         AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG")
  72 fi
  73
  74 if test -z "$LD" ; then
  75         LD=$CC
  76 fi
  77 AC_SUBST(LD)
  78
  79 AC_C_INLINE
  80 if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
  81         CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wno-uninitialized"
  82 fi
  83
  84 AC_ARG_WITH(rpath,
  85         [  --without-rpath         Disable auto-added -R linker paths],
  86         [
  87                 if test "x$withval" = "xno" ; then
  88                         need_dash_r=""
  89                 fi
  90                 if test "x$withval" = "xyes" ; then
  91                         need_dash_r=1
  92                 fi
  93         ]
  94 )
  95
  96 # Check for some target-specific stuff
  97 case "$host" in
  98 *-*-aix*)
  99         AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
 100         if (test -z "$blibpath"); then
 101                 blibpath="/usr/lib:/lib"
 102         fi
 103         saved_LDFLAGS="$LDFLAGS"
 104         for tryflags in -blibpath: -Wl,-blibpath: -Wl,-rpath, ;do
 105                 if (test -z "$blibflags"); then
 106                         LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
 107                         AC_TRY_LINK([], [], [blibflags=$tryflags])
 108                 fi
 109         done
 110         if (test -z "$blibflags"); then
 111                 AC_MSG_RESULT(not found)
 112                 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
 113         else
 114                 AC_MSG_RESULT($blibflags)
 115         fi
 116         LDFLAGS="$saved_LDFLAGS"
 117         dnl Check for authenticate.  Might be in libs.a on older AIXes
 118         AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE)],
 119                 [AC_CHECK_LIB(s,authenticate,
 120                         [ AC_DEFINE(WITH_AIXAUTHENTICATE)
 121                                 LIBS="$LIBS -ls"
 122                         ])
 123                 ])
 124         dnl Check for various auth function declarations in headers.
 125         AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
 126             passwdexpired], , , [#include <usersec.h>])
 127         dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
 128         AC_CHECK_DECLS(loginfailed,
 129                  [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
 130                   AC_TRY_COMPILE(
 131                         [#include <usersec.h>],
 132                         [(void)loginfailed("user","host","tty",0);],
 133                         [AC_MSG_RESULT(yes)
 134                          AC_DEFINE(AIX_LOGINFAILED_4ARG)],
 135                         [AC_MSG_RESULT(no)]
 136                 )],
 137                 [],
 138                 [#include <usersec.h>]
 139         )
 140         AC_CHECK_FUNCS(setauthdb)
 141         check_for_aix_broken_getaddrinfo=1
 142         AC_DEFINE(BROKEN_REALPATH)
 143         AC_DEFINE(SETEUID_BREAKS_SETUID)
 144         AC_DEFINE(BROKEN_SETREUID)
 145         AC_DEFINE(BROKEN_SETREGID)
 146         dnl AIX handles lastlog as part of its login message
 147         AC_DEFINE(DISABLE_LASTLOG)
 148         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 149         AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
 150         ;;
 151 *-*-cygwin*)
 152         check_for_libcrypt_later=1
 153         LIBS="$LIBS /usr/lib/textmode.o"
 154         AC_DEFINE(HAVE_CYGWIN)
 155         AC_DEFINE(USE_PIPES)
 156         AC_DEFINE(DISABLE_SHADOW)
 157         AC_DEFINE(IP_TOS_IS_BROKEN)
 158         AC_DEFINE(NO_X11_UNIX_SOCKETS)
 159         AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT)
 160         AC_DEFINE(DISABLE_FD_PASSING)
 161         ;;
 162 *-*-dgux*)
 163         AC_DEFINE(IP_TOS_IS_BROKEN)
 164         AC_DEFINE(SETEUID_BREAKS_SETUID)
 165         AC_DEFINE(BROKEN_SETREUID)
 166         AC_DEFINE(BROKEN_SETREGID)
 167         ;;
 168 *-*-darwin*)
 169         AC_MSG_CHECKING(if we have working getaddrinfo)
 170         AC_TRY_RUN([#include <mach-o/dyld.h>
 171 main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
 172                 exit(0);
 173         else
 174                 exit(1);
 175 }], [AC_MSG_RESULT(working)],
 176         [AC_MSG_RESULT(buggy)
 177         AC_DEFINE(BROKEN_GETADDRINFO)],
 178         [AC_MSG_RESULT(assume it is working)])
 179         AC_DEFINE(SETEUID_BREAKS_SETUID)
 180         AC_DEFINE(BROKEN_SETREUID)
 181         AC_DEFINE(BROKEN_SETREGID)
 182         AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1)
 183         ;;
 184 *-*-hpux10.26)
 185         if test -z "$GCC"; then
 186                 CFLAGS="$CFLAGS -Ae"
 187         fi
 188         CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
 189         IPADDR_IN_DISPLAY=yes
 190         AC_DEFINE(HAVE_SECUREWARE)
 191         AC_DEFINE(USE_PIPES)
 192         AC_DEFINE(LOGIN_NO_ENDOPT)
 193         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 194         AC_DEFINE(LOCKED_PASSWD_STRING, "*")
 195         AC_DEFINE(SPT_TYPE,SPT_PSTAT)
 196         LIBS="$LIBS -lsec -lsecpw"
 197         AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
 198         disable_ptmx_check=yes
 199         ;;
 200 *-*-hpux10*)
 201         if test -z "$GCC"; then
 202                 CFLAGS="$CFLAGS -Ae"
 203         fi
 204         CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
 205         IPADDR_IN_DISPLAY=yes
 206         AC_DEFINE(USE_PIPES)
 207         AC_DEFINE(LOGIN_NO_ENDOPT)
 208         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 209         AC_DEFINE(LOCKED_PASSWD_STRING, "*")
 210         AC_DEFINE(SPT_TYPE,SPT_PSTAT)
 211         LIBS="$LIBS -lsec"
 212         AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
 213         ;;
 214 *-*-hpux11*)
 215         CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
 216         IPADDR_IN_DISPLAY=yes
 217         AC_DEFINE(PAM_SUN_CODEBASE)
 218         AC_DEFINE(USE_PIPES)
 219         AC_DEFINE(LOGIN_NO_ENDOPT)
 220         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 221         AC_DEFINE(DISABLE_UTMP)
 222         AC_DEFINE(LOCKED_PASSWD_STRING, "*")
 223         AC_DEFINE(SPT_TYPE,SPT_PSTAT)
 224         AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
 225         check_for_hpux_broken_getaddrinfo=1
 226         check_for_conflicting_getspnam=1
 227         LIBS="$LIBS -lsec"
 228         AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
 229         ;;
 230 *-*-irix5*)
 231         PATH="$PATH:/usr/etc"
 232         AC_DEFINE(BROKEN_INET_NTOA)
 233         AC_DEFINE(SETEUID_BREAKS_SETUID)
 234         AC_DEFINE(BROKEN_SETREUID)
 235         AC_DEFINE(BROKEN_SETREGID)
 236         AC_DEFINE(WITH_ABBREV_NO_TTY)
 237         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 238         ;;
 239 *-*-irix6*)
 240         PATH="$PATH:/usr/etc"
 241         AC_DEFINE(WITH_IRIX_ARRAY)
 242         AC_DEFINE(WITH_IRIX_PROJECT)
 243         AC_DEFINE(WITH_IRIX_AUDIT)
 244         AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS)])
 245         AC_DEFINE(BROKEN_INET_NTOA)
 246         AC_DEFINE(SETEUID_BREAKS_SETUID)
 247         AC_DEFINE(BROKEN_SETREUID)
 248         AC_DEFINE(BROKEN_SETREGID)
 249         AC_DEFINE(BROKEN_UPDWTMPX)
 250         AC_DEFINE(WITH_ABBREV_NO_TTY)
 251         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 252         ;;
 253 *-*-linux*)
 254         no_dev_ptmx=1
 255         check_for_libcrypt_later=1
 256         check_for_openpty_ctty_bug=1
 257         AC_DEFINE(DONT_TRY_OTHER_AF)
 258         AC_DEFINE(PAM_TTY_KLUDGE)
 259         AC_DEFINE(LOCKED_PASSWD_PREFIX, "!")
 260         AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
 261         AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM)
 262         AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
 263         AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
 264         inet6_default_4in6=yes
 265         case `uname -r` in
 266         1.*|2.0.*)
 267                 AC_DEFINE(BROKEN_CMSG_TYPE)
 268                 ;;
 269         esac
 270         ;;
 271 mips-sony-bsd|mips-sony-newsos4)
 272         AC_DEFINE(HAVE_NEWS4)
 273         SONY=1
 274         ;;
 275 *-*-netbsd*)
 276         check_for_libcrypt_before=1
 277         if test "x$withval" != "xno" ; then
 278                 need_dash_r=1
 279         fi
 280         ;;
 281 *-*-freebsd*)
 282         check_for_libcrypt_later=1
 283         ;;
 284 *-*-bsdi*)
 285         AC_DEFINE(SETEUID_BREAKS_SETUID)
 286         AC_DEFINE(BROKEN_SETREUID)
 287         AC_DEFINE(BROKEN_SETREGID)
 288         ;;
 289 *-next-*)
 290         conf_lastlog_location="/usr/adm/lastlog"
 291         conf_utmp_location=/etc/utmp
 292         conf_wtmp_location=/usr/adm/wtmp
 293         MAIL=/usr/spool/mail
 294         AC_DEFINE(HAVE_NEXT)
 295         AC_DEFINE(BROKEN_REALPATH)
 296         AC_DEFINE(USE_PIPES)
 297         AC_DEFINE(BROKEN_SAVED_UIDS)
 298         ;;
 299 *-*-solaris*)
 300         if test "x$withval" != "xno" ; then
 301                 need_dash_r=1
 302         fi
 303         AC_DEFINE(PAM_SUN_CODEBASE)
 304         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 305         AC_DEFINE(LOGIN_NEEDS_TERM)
 306         AC_DEFINE(PAM_TTY_KLUDGE)
 307         AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID)
 308         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 309         # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
 310         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 311         external_path_file=/etc/default/login
 312         # hardwire lastlog location (can't detect it on some versions)
 313         conf_lastlog_location="/var/adm/lastlog"
 314         AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
 315         sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
 316         if test "$sol2ver" -ge 8; then
 317                 AC_MSG_RESULT(yes)
 318                 AC_DEFINE(DISABLE_UTMP)
 319                 AC_DEFINE(DISABLE_WTMP)
 320         else
 321                 AC_MSG_RESULT(no)
 322         fi
 323         ;;
 324 *-*-sunos4*)
 325         CPPFLAGS="$CPPFLAGS -DSUNOS4"
 326         AC_CHECK_FUNCS(getpwanam)
 327         AC_DEFINE(PAM_SUN_CODEBASE)
 328         conf_utmp_location=/etc/utmp
 329         conf_wtmp_location=/var/adm/wtmp
 330         conf_lastlog_location=/var/adm/lastlog
 331         AC_DEFINE(USE_PIPES)
 332         ;;
 333 *-ncr-sysv*)
 334         LIBS="$LIBS -lc89"
 335         AC_DEFINE(USE_PIPES)
 336         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 337         AC_DEFINE(SETEUID_BREAKS_SETUID)
 338         AC_DEFINE(BROKEN_SETREUID)
 339         AC_DEFINE(BROKEN_SETREGID)
 340         ;;
 341 *-sni-sysv*)
 342         # /usr/ucblib MUST NOT be searched on ReliantUNIX
 343         AC_CHECK_LIB(dl, dlsym, ,)
 344         # -lresolv needs to be at then end of LIBS or DNS lookups break
 345         AC_CHECK_LIB(res_query, resolv, [ LIBS="$LIBS -lresolv" ])
 346         IPADDR_IN_DISPLAY=yes
 347         AC_DEFINE(USE_PIPES)
 348         AC_DEFINE(IP_TOS_IS_BROKEN)
 349         AC_DEFINE(SETEUID_BREAKS_SETUID)
 350         AC_DEFINE(BROKEN_SETREUID)
 351         AC_DEFINE(BROKEN_SETREGID)
 352         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 353         external_path_file=/etc/default/login
 354         # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
 355         # Attention: always take care to bind libsocket and libnsl before libc,
 356         # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
 357         ;;
 358 # UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
 359 *-*-sysv4.2*)
 360         AC_DEFINE(USE_PIPES)
 361         AC_DEFINE(SETEUID_BREAKS_SETUID)
 362         AC_DEFINE(BROKEN_SETREUID)
 363         AC_DEFINE(BROKEN_SETREGID)
 364         ;;
 365 # UnixWare 7.x, OpenUNIX 8
 366 *-*-sysv5*)
 367         AC_DEFINE(USE_PIPES)
 368         AC_DEFINE(SETEUID_BREAKS_SETUID)
 369         AC_DEFINE(BROKEN_SETREUID)
 370         AC_DEFINE(BROKEN_SETREGID)
 371         ;;
 372 *-*-sysv*)
 373         ;;
 374 # SCO UNIX and OEM versions of SCO UNIX
 375 *-*-sco3.2v4*)
 376         CPPFLAGS="$CPPFLAGS -Dftruncate=chsize"
 377         LIBS="$LIBS -los -lprot -lcrypt_i -lx -ltinfo -lm"
 378         RANLIB=true
 379         no_dev_ptmx=1
 380         AC_DEFINE(BROKEN_SYS_TERMIO_H)
 381         AC_DEFINE(USE_PIPES)
 382         AC_DEFINE(HAVE_SECUREWARE)
 383         AC_DEFINE(DISABLE_SHADOW)
 384         AC_DEFINE(BROKEN_SAVED_UIDS)
 385         AC_DEFINE(SETEUID_BREAKS_SETUID)
 386         AC_DEFINE(BROKEN_SETREUID)
 387         AC_DEFINE(BROKEN_SETREGID)
 388         AC_DEFINE(WITH_ABBREV_NO_TTY)
 389         AC_CHECK_FUNCS(getluid setluid)
 390         MANTYPE=man
 391         do_sco3_extra_lib_check=yes
 392         TEST_SHELL=ksh
 393         ;;
 394 # SCO OpenServer 5.x
 395 *-*-sco3.2v5*)
 396         if test -z "$GCC"; then
 397                 CFLAGS="$CFLAGS -belf"
 398         fi
 399         LIBS="$LIBS -lprot -lx -ltinfo -lm"
 400         no_dev_ptmx=1
 401         AC_DEFINE(USE_PIPES)
 402         AC_DEFINE(HAVE_SECUREWARE)
 403         AC_DEFINE(DISABLE_SHADOW)
 404         AC_DEFINE(DISABLE_FD_PASSING)
 405         AC_DEFINE(SETEUID_BREAKS_SETUID)
 406         AC_DEFINE(BROKEN_SETREUID)
 407         AC_DEFINE(BROKEN_SETREGID)
 408         AC_DEFINE(WITH_ABBREV_NO_TTY)
 409         AC_DEFINE(BROKEN_UPDWTMPX)
 410         AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
 411         AC_CHECK_FUNCS(getluid setluid)
 412         MANTYPE=man
 413         TEST_SHELL=ksh
 414         ;;
 415 *-*-unicosmk*)
 416         AC_DEFINE(NO_SSH_LASTLOG)
 417         AC_DEFINE(SETEUID_BREAKS_SETUID)
 418         AC_DEFINE(BROKEN_SETREUID)
 419         AC_DEFINE(BROKEN_SETREGID)
 420         AC_DEFINE(USE_PIPES)
 421         AC_DEFINE(DISABLE_FD_PASSING)
 422         LDFLAGS="$LDFLAGS"
 423         LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
 424         MANTYPE=cat
 425         ;;
 426 *-*-unicosmp*)
 427         AC_DEFINE(SETEUID_BREAKS_SETUID)
 428         AC_DEFINE(BROKEN_SETREUID)
 429         AC_DEFINE(BROKEN_SETREGID)
 430         AC_DEFINE(WITH_ABBREV_NO_TTY)
 431         AC_DEFINE(USE_PIPES)
 432         AC_DEFINE(DISABLE_FD_PASSING)
 433         LDFLAGS="$LDFLAGS"
 434         LIBS="$LIBS -lgen -lacid -ldb"
 435         MANTYPE=cat
 436         ;;
 437 *-*-unicos*)
 438         AC_DEFINE(SETEUID_BREAKS_SETUID)
 439         AC_DEFINE(BROKEN_SETREUID)
 440         AC_DEFINE(BROKEN_SETREGID)
 441         AC_DEFINE(USE_PIPES)
 442         AC_DEFINE(DISABLE_FD_PASSING)
 443         AC_DEFINE(NO_SSH_LASTLOG)
 444         LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
 445         LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
 446         MANTYPE=cat
 447         ;;
 448 *-dec-osf*)
 449         AC_MSG_CHECKING(for Digital Unix SIA)
 450         no_osfsia=""
 451         AC_ARG_WITH(osfsia,
 452                 [  --with-osfsia           Enable Digital Unix SIA],
 453                 [
 454                         if test "x$withval" = "xno" ; then
 455                                 AC_MSG_RESULT(disabled)
 456                                 no_osfsia=1
 457                         fi
 458                 ],
 459         )
 460         if test -z "$no_osfsia" ; then
 461                 if test -f /etc/sia/matrix.conf; then
 462                         AC_MSG_RESULT(yes)
 463                         AC_DEFINE(HAVE_OSF_SIA)
 464                         AC_DEFINE(DISABLE_LOGIN)
 465                         AC_DEFINE(DISABLE_FD_PASSING)
 466                         LIBS="$LIBS -lsecurity -ldb -lm -laud"
 467                 else
 468                         AC_MSG_RESULT(no)
 469                         AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin")
 470                 fi
 471         fi
 472         AC_DEFINE(BROKEN_GETADDRINFO)
 473         AC_DEFINE(SETEUID_BREAKS_SETUID)
 474         AC_DEFINE(BROKEN_SETREUID)
 475         AC_DEFINE(BROKEN_SETREGID)
 476         ;;
 477
 478 *-*-nto-qnx)
 479         AC_DEFINE(USE_PIPES)
 480         AC_DEFINE(NO_X11_UNIX_SOCKETS)
 481         AC_DEFINE(MISSING_NFDBITS)
 482         AC_DEFINE(MISSING_HOWMANY)
 483         AC_DEFINE(MISSING_FD_MASK)
 484         ;;
 485 esac
 486
 487 # Allow user to specify flags
 488 AC_ARG_WITH(cflags,
 489         [  --with-cflags           Specify additional flags to pass to compiler],
 490         [
 491                 if test "x$withval" != "xno" ; then
 492                         CFLAGS="$CFLAGS $withval"
 493                 fi
 494         ]
 495 )
 496 AC_ARG_WITH(cppflags,
 497         [  --with-cppflags         Specify additional flags to pass to preprocessor] ,
 498         [
 499                 if test "x$withval" != "xno"; then
 500                         CPPFLAGS="$CPPFLAGS $withval"
 501                 fi
 502         ]
 503 )
 504 AC_ARG_WITH(ldflags,
 505         [  --with-ldflags          Specify additional flags to pass to linker],
 506         [
 507                 if test "x$withval" != "xno" ; then
 508                         LDFLAGS="$LDFLAGS $withval"
 509                 fi
 510         ]
 511 )
 512 AC_ARG_WITH(libs,
 513         [  --with-libs             Specify additional libraries to link with],
 514         [
 515                 if test "x$withval" != "xno" ; then
 516                         LIBS="$LIBS $withval"
 517                 fi
 518         ]
 519 )
 520
 521 AC_MSG_CHECKING(compiler and flags for sanity)
 522 AC_RUN_IFELSE(
 523         [AC_LANG_SOURCE([
 524 #include <stdio.h>
 525 int main(){exit(0);}
 526         ])],
 527         [       AC_MSG_RESULT(yes) ],
 528         [
 529                 AC_MSG_RESULT(no)
 530                 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
 531         ],
 532         [       AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
 533 )
 534
 535 # Checks for header files.
 536 AC_CHECK_HEADERS(bstring.h crypt.h dirent.h endian.h features.h \
 537         floatingpoint.h getopt.h glob.h ia.h lastlog.h limits.h login.h \
 538         login_cap.h maillock.h ndir.h netdb.h netgroup.h \
 539         netinet/in_systm.h pam/pam_appl.h paths.h pty.h readpassphrase.h \
 540         rpc/types.h security/pam_appl.h shadow.h stddef.h stdint.h \
 541         strings.h sys/dir.h sys/strtio.h sys/audit.h sys/bitypes.h \
 542         sys/bsdtty.h sys/cdefs.h sys/mman.h sys/ndir.h sys/prctl.h \
 543         sys/pstat.h sys/select.h sys/stat.h sys/stream.h \
 544         sys/stropts.h sys/sysmacros.h sys/time.h sys/timers.h sys/un.h \
 545         time.h tmpdir.h ttyent.h usersec.h util.h utime.h utmp.h utmpx.h vis.h)
 546
 547 # sys/ptms.h requires sys/stream.h to be included first on Solaris
 548 AC_CHECK_HEADERS(sys/ptms.h, [], [], [
 549 #ifdef HAVE_SYS_STREAM_H
 550 # include <sys/stream.h>
 551 #endif
 552 ])
 553
 554 # Checks for libraries.
 555 AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
 556 AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
 557
 558 dnl SCO OS3 needs this for libwrap
 559 if test "x$with_tcp_wrappers" != "xno" ; then
 560     if test "x$do_sco3_extra_lib_check" = "xyes" ; then
 561         AC_CHECK_LIB(rpc, innetgr, LIBS="-lrpc -lyp -lrpc $LIBS" , , -lyp -lrpc)
 562     fi
 563 fi
 564
 565 dnl IRIX and Solaris 2.5.1 have dirname() in libgen
 566 AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
 567         AC_CHECK_LIB(gen, dirname,[
 568                 AC_CACHE_CHECK([for broken dirname],
 569                         ac_cv_have_broken_dirname, [
 570                         save_LIBS="$LIBS"
 571                         LIBS="$LIBS -lgen"
 572                         AC_TRY_RUN(
 573                                 [
 574 #include <libgen.h>
 575 #include <string.h>
 576
 577 int main(int argc, char **argv) {
 578     char *s, buf[32];
 579
 580     strncpy(buf,"/etc", 32);
 581     s = dirname(buf);
 582     if (!s || strncmp(s, "/", 32) != 0) {
 583         exit(1);
 584     } else {
 585         exit(0);
 586     }
 587 }
 588                                 ],
 589                                 [ ac_cv_have_broken_dirname="no" ],
 590                                 [ ac_cv_have_broken_dirname="yes" ]
 591                         )
 592                         LIBS="$save_LIBS"
 593                 ])
 594                 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
 595                         LIBS="$LIBS -lgen"
 596                         AC_DEFINE(HAVE_DIRNAME)
 597                         AC_CHECK_HEADERS(libgen.h)
 598                 fi
 599         ])
 600 ])
 601
 602 AC_CHECK_FUNC(getspnam, ,
 603         AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
 604 AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME))
 605
 606 dnl zlib is required
 607 AC_ARG_WITH(zlib,
 608         [  --with-zlib=PATH        Use zlib in PATH],
 609         [
 610                 if test "x$withval" = "xno" ; then
 611                         AC_MSG_ERROR([*** zlib is required ***])
 612                 fi
 613                 if test -d "$withval/lib"; then
 614                         if test -n "${need_dash_r}"; then
 615                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
 616                         else
 617                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
 618                         fi
 619                 else
 620                         if test -n "${need_dash_r}"; then
 621                                 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
 622                         else
 623                                 LDFLAGS="-L${withval} ${LDFLAGS}"
 624                         fi
 625                 fi
 626                 if test -d "$withval/include"; then
 627                         CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
 628                 else
 629                         CPPFLAGS="-I${withval} ${CPPFLAGS}"
 630                 fi
 631         ]
 632 )
 633
 634 AC_CHECK_LIB(z, deflate, ,
 635         [
 636                 saved_CPPFLAGS="$CPPFLAGS"
 637                 saved_LDFLAGS="$LDFLAGS"
 638                 save_LIBS="$LIBS"
 639                 dnl Check default zlib install dir
 640                 if test -n "${need_dash_r}"; then
 641                         LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
 642                 else
 643                         LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
 644                 fi
 645                 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
 646                 LIBS="$LIBS -lz"
 647                 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
 648                         [
 649                                 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
 650                         ]
 651                 )
 652         ]
 653 )
 654 AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
 655
 656 AC_ARG_WITH(zlib-version-check,
 657         [  --without-zlib-version-check Disable zlib version check],
 658         [  if test "x$withval" = "xno" ; then
 659                 zlib_check_nonfatal=1
 660            fi
 661         ]
 662 )
 663
 664 AC_MSG_CHECKING(for zlib 1.1.4 or greater)
 665 AC_RUN_IFELSE([AC_LANG_SOURCE([[
 666 #include <zlib.h>
 667 int main()
 668 {
 669         int a, b, c, v;
 670         if (sscanf(ZLIB_VERSION, "%d.%d.%d", &a, &b, &c) != 3)
 671                 exit(1);
 672         v = a*1000000 + b*1000 + c;
 673         if (v >= 1001004)
 674                 exit(0);
 675         exit(2);
 676 }
 677         ]])],
 678         AC_MSG_RESULT(yes),
 679         [ AC_MSG_RESULT(no)
 680           if test -z "$zlib_check_nonfatal" ; then
 681                 AC_MSG_ERROR([*** zlib too old - check config.log ***
 682 Your reported zlib version has known security problems.  It's possible your
 683 vendor has fixed these problems without changing the version number.  If you
 684 are sure this is the case, you can disable the check by running
 685 "./configure --without-zlib-version-check".
 686 If you are in doubt, upgrade zlib to version 1.1.4 or greater.])
 687           else
 688                 AC_MSG_WARN([zlib version may have security problems])
 689           fi
 690         ],
 691         [       AC_MSG_WARN([cross compiling: not checking zlib version]) ]
 692 )
 693
 694 dnl UnixWare 2.x
 695 AC_CHECK_FUNC(strcasecmp,
 696         [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
 697 )
 698 AC_CHECK_FUNC(utimes,
 699         [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
 700                                         LIBS="$LIBS -lc89"]) ]
 701 )
 702
 703 dnl    Checks for libutil functions
 704 AC_CHECK_HEADERS(libutil.h)
 705 AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN)])
 706 AC_CHECK_FUNCS(logout updwtmp logwtmp)
 707
 708 AC_FUNC_STRFTIME
 709
 710 # Check for ALTDIRFUNC glob() extension
 711 AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
 712 AC_EGREP_CPP(FOUNDIT,
 713         [
 714                 #include <glob.h>
 715                 #ifdef GLOB_ALTDIRFUNC
 716                 FOUNDIT
 717                 #endif
 718         ],
 719         [
 720                 AC_DEFINE(GLOB_HAS_ALTDIRFUNC)
 721                 AC_MSG_RESULT(yes)
 722         ],
 723         [
 724                 AC_MSG_RESULT(no)
 725         ]
 726 )
 727
 728 # Check for g.gl_matchc glob() extension
 729 AC_MSG_CHECKING(for gl_matchc field in glob_t)
 730 AC_EGREP_CPP(FOUNDIT,
 731         [
 732                 #include <glob.h>
 733                 int main(void){glob_t g; g.gl_matchc = 1;}
 734         ],
 735         [
 736                 AC_DEFINE(GLOB_HAS_GL_MATCHC)
 737                 AC_MSG_RESULT(yes)
 738         ],
 739         [
 740                 AC_MSG_RESULT(no)
 741         ]
 742 )
 743
 744 AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
 745 AC_RUN_IFELSE(
 746         [AC_LANG_SOURCE([[
 747 #include <sys/types.h>
 748 #include <dirent.h>
 749 int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
 750         ]])],
 751         [AC_MSG_RESULT(yes)],
 752         [
 753                 AC_MSG_RESULT(no)
 754                 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
 755         ],
 756         [
 757                 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
 758                 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
 759         ]
 760 )
 761
 762 AC_MSG_CHECKING([for /proc/pid/fd directory])
 763 if test -d "/proc/$$/fd" ; then
 764         AC_DEFINE(HAVE_PROC_PID)
 765         AC_MSG_RESULT(yes)
 766 else
 767         AC_MSG_RESULT(no)
 768 fi
 769
 770 # Check whether user wants S/Key support
 771 SKEY_MSG="no"
 772 AC_ARG_WITH(skey,
 773         [  --with-skey[[=PATH]]      Enable S/Key support (optionally in PATH)],
 774         [
 775                 if test "x$withval" != "xno" ; then
 776
 777                         if test "x$withval" != "xyes" ; then
 778                                 CPPFLAGS="$CPPFLAGS -I${withval}/include"
 779                                 LDFLAGS="$LDFLAGS -L${withval}/lib"
 780                         fi
 781
 782                         AC_DEFINE(SKEY)
 783                         LIBS="-lskey $LIBS"
 784                         SKEY_MSG="yes"
 785
 786                         AC_MSG_CHECKING([for s/key support])
 787                         AC_TRY_RUN(
 788                                 [
 789 #include <stdio.h>
 790 #include <skey.h>
 791 int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
 792                                 ],
 793                                 [AC_MSG_RESULT(yes)],
 794                                 [
 795                                         AC_MSG_RESULT(no)
 796                                         AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
 797                                 ])
 798                         AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
 799                         AC_TRY_COMPILE(
 800                                 [#include <stdio.h>
 801                                  #include <skey.h>],
 802                                 [(void)skeychallenge(NULL,"name","",0);],
 803                                 [AC_MSG_RESULT(yes)
 804                                  AC_DEFINE(SKEYCHALLENGE_4ARG)],
 805                                 [AC_MSG_RESULT(no)]
 806                         )
 807                 fi
 808         ]
 809 )
 810
 811 # Check whether user wants TCP wrappers support
 812 TCPW_MSG="no"
 813 AC_ARG_WITH(tcp-wrappers,
 814         [  --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
 815         [
 816                 if test "x$withval" != "xno" ; then
 817                         saved_LIBS="$LIBS"
 818                         saved_LDFLAGS="$LDFLAGS"
 819                         saved_CPPFLAGS="$CPPFLAGS"
 820                         if test -n "${withval}" -a "${withval}" != "yes"; then
 821                                 if test -d "${withval}/lib"; then
 822                                         if test -n "${need_dash_r}"; then
 823                                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
 824                                         else
 825                                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
 826                                         fi
 827                                 else
 828                                         if test -n "${need_dash_r}"; then
 829                                                 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
 830                                         else
 831                                                 LDFLAGS="-L${withval} ${LDFLAGS}"
 832                                         fi
 833                                 fi
 834                                 if test -d "${withval}/include"; then
 835                                         CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
 836                                 else
 837                                         CPPFLAGS="-I${withval} ${CPPFLAGS}"
 838                                 fi
 839                         fi
 840                         LIBWRAP="-lwrap"
 841                         LIBS="$LIBWRAP $LIBS"
 842                         AC_MSG_CHECKING(for libwrap)
 843                         AC_TRY_LINK(
 844                                 [
 845 #include <sys/types.h>
 846 #include <sys/socket.h>
 847 #include <netinet/in.h>
 848 #include <tcpd.h>
 849                                         int deny_severity = 0, allow_severity = 0;
 850                                 ],
 851                                 [hosts_access(0);],
 852                                 [
 853                                         AC_MSG_RESULT(yes)
 854                                         AC_DEFINE(LIBWRAP)
 855                                         AC_SUBST(LIBWRAP)
 856                                         TCPW_MSG="yes"
 857                                 ],
 858                                 [
 859                                         AC_MSG_ERROR([*** libwrap missing])
 860                                 ]
 861                         )
 862                         LIBS="$saved_LIBS"
 863                 fi
 864         ]
 865 )
 866
 867 # Check whether user wants libedit support
 868 LIBEDIT_MSG="no"
 869 AC_ARG_WITH(libedit,
 870         [  --with-libedit[[=PATH]]   Enable libedit support for sftp],
 871         [ if test "x$withval" != "xno" ; then
 872                 AC_CHECK_LIB(edit, el_init,
 873                         [ AC_DEFINE(USE_LIBEDIT, [], [Use libedit for sftp])
 874                           LIBEDIT="-ledit -lcurses"
 875                           LIBEDIT_MSG="yes"
 876                           AC_SUBST(LIBEDIT)
 877                         ],
 878                         [], [-lcurses]
 879                 )
 880         fi ]
 881 )
 882
 883 AUDIT_MODULE=none
 884 AC_ARG_WITH(audit,
 885         [  --with-audit=module     Enable EXPERIMENTAL audit support (modules=debug,bsm)],
 886         [
 887           AC_MSG_CHECKING(for supported audit module)
 888           case "$withval" in
 889           bsm)
 890                 AC_MSG_RESULT(bsm)
 891                 AUDIT_MODULE=bsm
 892                 dnl    Checks for headers, libs and functions
 893                 AC_CHECK_HEADERS(bsm/audit.h, [],
 894                     [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)])
 895                 AC_CHECK_LIB(bsm, getaudit, [],
 896                     [AC_MSG_ERROR(BSM enabled and required library not found)])
 897                 AC_CHECK_FUNCS(getaudit, [],
 898                     [AC_MSG_ERROR(BSM enabled and required function not found)])
 899                 # These are optional
 900                 AC_CHECK_FUNCS(getaudit_addr)
 901                 AC_DEFINE(USE_BSM_AUDIT, [], [Use BSM audit module])
 902                 ;;
 903           debug)
 904                 AUDIT_MODULE=debug
 905                 AC_MSG_RESULT(debug)
 906                 AC_DEFINE(SSH_AUDIT_EVENTS, [], Use audit debugging module)
 907                 ;;
 908           *)
 909                 AC_MSG_ERROR([Unknown audit module $withval])
 910                 ;;
 911         esac ]
 912 )
 913
 914 dnl    Checks for library functions. Please keep in alphabetical order
 915 AC_CHECK_FUNCS(\
 916         arc4random __b64_ntop b64_ntop __b64_pton b64_pton bcopy \
 917         bindresvport_sa clock closefrom dirfd fchdir fchmod fchown \
 918         freeaddrinfo futimes getaddrinfo getcwd getgrouplist getnameinfo \
 919         getopt getpeereid _getpty getrlimit getttyent glob inet_aton \
 920         inet_ntoa inet_ntop innetgr login_getcapbool md5_crypt memmove \
 921         mkdtemp mmap ngetaddrinfo nsleep ogetaddrinfo openlog_r openpty \
 922         pstat prctl readpassphrase realpath recvmsg rresvport_af sendmsg \
 923         setdtablesize setegid setenv seteuid setgroups setlogin setpcred \
 924         setproctitle setregid setreuid setrlimit \
 925         setsid setvbuf sigaction sigvec snprintf socketpair strerror \
 926         strlcat strlcpy strmode strnvis strtoul sysconf tcgetpgrp \
 927         truncate unsetenv updwtmpx utimes vhangup vsnprintf waitpid \
 928 )
 929
 930 # IRIX has a const char return value for gai_strerror()
 931 AC_CHECK_FUNCS(gai_strerror,[
 932         AC_DEFINE(HAVE_GAI_STRERROR)
 933         AC_TRY_COMPILE([
 934 #include <sys/types.h>
 935 #include <sys/socket.h>
 936 #include <netdb.h>
 937
 938 const char *gai_strerror(int);],[
 939 char *str;
 940
 941 str = gai_strerror(0);],[
 942                 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
 943                 [Define if gai_strerror() returns const char *])])])
 944
 945 AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP))
 946
 947 dnl Make sure prototypes are defined for these before using them.
 948 AC_CHECK_DECL(strsep, [AC_CHECK_FUNCS(strsep)])
 949 AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
 950
 951 dnl tcsendbreak might be a macro
 952 AC_CHECK_DECL(tcsendbreak,
 953         [AC_DEFINE(HAVE_TCSENDBREAK)],
 954         [AC_CHECK_FUNCS(tcsendbreak)],
 955         [#include <termios.h>]
 956 )
 957
 958 AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
 959
 960 AC_CHECK_FUNCS(setresuid, [
 961         dnl Some platorms have setresuid that isn't implemented, test for this
 962         AC_MSG_CHECKING(if setresuid seems to work)
 963         AC_RUN_IFELSE(
 964                 [AC_LANG_SOURCE([[
 965 #include <stdlib.h>
 966 #include <errno.h>
 967 int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
 968                 ]])],
 969                 [AC_MSG_RESULT(yes)],
 970                 [AC_DEFINE(BROKEN_SETRESUID)
 971                  AC_MSG_RESULT(not implemented)],
 972                 [AC_MSG_WARN([cross compiling: not checking setresuid])]
 973         )
 974 ])
 975
 976 AC_CHECK_FUNCS(setresgid, [
 977         dnl Some platorms have setresgid that isn't implemented, test for this
 978         AC_MSG_CHECKING(if setresgid seems to work)
 979         AC_RUN_IFELSE(
 980                 [AC_LANG_SOURCE([[
 981 #include <stdlib.h>
 982 #include <errno.h>
 983 int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
 984                 ]])],
 985                 [AC_MSG_RESULT(yes)],
 986                 [AC_DEFINE(BROKEN_SETRESGID)
 987                  AC_MSG_RESULT(not implemented)],
 988                 [AC_MSG_WARN([cross compiling: not checking setresuid])]
 989         )
 990 ])
 991
 992 dnl    Checks for time functions
 993 AC_CHECK_FUNCS(gettimeofday time)
 994 dnl    Checks for utmp functions
 995 AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
 996 AC_CHECK_FUNCS(utmpname)
 997 dnl    Checks for utmpx functions
 998 AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
 999 AC_CHECK_FUNCS(setutxent utmpxname)
1000
1001 AC_CHECK_FUNC(daemon,
1002         [AC_DEFINE(HAVE_DAEMON)],
1003         [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
1004 )
1005
1006 AC_CHECK_FUNC(getpagesize,
1007         [AC_DEFINE(HAVE_GETPAGESIZE)],
1008         [AC_CHECK_LIB(ucb, getpagesize, [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
1009 )
1010
1011 # Check for broken snprintf
1012 if test "x$ac_cv_func_snprintf" = "xyes" ; then
1013         AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1014         AC_RUN_IFELSE(
1015                 [AC_LANG_SOURCE([[
1016 #include <stdio.h>
1017 int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
1018                 ]])],
1019                 [AC_MSG_RESULT(yes)],
1020                 [
1021                         AC_MSG_RESULT(no)
1022                         AC_DEFINE(BROKEN_SNPRINTF)
1023                         AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1024                 ],
1025                 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
1026         )
1027 fi
1028
1029 # Check for missing getpeereid (or equiv) support
1030 NO_PEERCHECK=""
1031 if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1032         AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1033         AC_TRY_COMPILE(
1034                 [#include <sys/types.h>
1035                  #include <sys/socket.h>],
1036                 [int i = SO_PEERCRED;],
1037                 [AC_MSG_RESULT(yes)],
1038                 [AC_MSG_RESULT(no)
1039                 NO_PEERCHECK=1]
1040         )
1041 fi
1042
1043 dnl see whether mkstemp() requires XXXXXX
1044 if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1045 AC_MSG_CHECKING([for (overly) strict mkstemp])
1046 AC_TRY_RUN(
1047         [
1048 #include <stdlib.h>
1049 main() { char template[]="conftest.mkstemp-test";
1050 if (mkstemp(template) == -1)
1051         exit(1);
1052 unlink(template); exit(0);
1053 }
1054         ],
1055         [
1056                 AC_MSG_RESULT(no)
1057         ],
1058         [
1059                 AC_MSG_RESULT(yes)
1060                 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1061         ],
1062         [
1063                 AC_MSG_RESULT(yes)
1064                 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1065         ]
1066 )
1067 fi
1068
1069 dnl make sure that openpty does not reacquire controlling terminal
1070 if test ! -z "$check_for_openpty_ctty_bug"; then
1071         AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1072         AC_TRY_RUN(
1073                 [
1074 #include <stdio.h>
1075 #include <sys/fcntl.h>
1076 #include <sys/types.h>
1077 #include <sys/wait.h>
1078
1079 int
1080 main()
1081 {
1082         pid_t pid;
1083         int fd, ptyfd, ttyfd, status;
1084
1085         pid = fork();
1086         if (pid < 0) {          /* failed */
1087                 exit(1);
1088         } else if (pid > 0) {   /* parent */
1089                 waitpid(pid, &status, 0);
1090                 if (WIFEXITED(status))
1091                         exit(WEXITSTATUS(status));
1092                 else
1093                         exit(2);
1094         } else {                /* child */
1095                 close(0); close(1); close(2);
1096                 setsid();
1097                 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1098                 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1099                 if (fd >= 0)
1100                         exit(3);        /* Acquired ctty: broken */
1101                 else
1102                         exit(0);        /* Did not acquire ctty: OK */
1103         }
1104 }
1105                 ],
1106                 [
1107                         AC_MSG_RESULT(yes)
1108                 ],
1109                 [
1110                         AC_MSG_RESULT(no)
1111                         AC_DEFINE(SSHD_ACQUIRES_CTTY)
1112                 ]
1113         )
1114 fi
1115
1116 if test "x$ac_cv_func_getaddrinfo" = "xyes" -a "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
1117         AC_MSG_CHECKING(if getaddrinfo seems to work)
1118         AC_TRY_RUN(
1119                 [
1120 #include <stdio.h>
1121 #include <sys/socket.h>
1122 #include <netdb.h>
1123 #include <errno.h>
1124 #include <netinet/in.h>
1125
1126 #define TEST_PORT "2222"
1127
1128 int
1129 main(void)
1130 {
1131         int err, sock;
1132         struct addrinfo *gai_ai, *ai, hints;
1133         char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1134
1135         memset(&hints, 0, sizeof(hints));
1136         hints.ai_family = PF_UNSPEC;
1137         hints.ai_socktype = SOCK_STREAM;
1138         hints.ai_flags = AI_PASSIVE;
1139
1140         err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1141         if (err != 0) {
1142                 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1143                 exit(1);
1144         }
1145
1146         for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1147                 if (ai->ai_family != AF_INET6)
1148                         continue;
1149
1150                 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1151                     sizeof(ntop), strport, sizeof(strport),
1152                     NI_NUMERICHOST|NI_NUMERICSERV);
1153
1154                 if (err != 0) {
1155                         if (err == EAI_SYSTEM)
1156                                 perror("getnameinfo EAI_SYSTEM");
1157                         else
1158                                 fprintf(stderr, "getnameinfo failed: %s\n",
1159                                     gai_strerror(err));
1160                         exit(2);
1161                 }
1162
1163                 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1164                 if (sock < 0)
1165                         perror("socket");
1166                 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1167                         if (errno == EBADF)
1168                                 exit(3);
1169                 }
1170         }
1171         exit(0);
1172 }
1173                 ],
1174                 [
1175                         AC_MSG_RESULT(yes)
1176                 ],
1177                 [
1178                         AC_MSG_RESULT(no)
1179                         AC_DEFINE(BROKEN_GETADDRINFO)
1180                 ]
1181         )
1182 fi
1183
1184 if test "x$ac_cv_func_getaddrinfo" = "xyes" -a "x$check_for_aix_broken_getaddrinfo" = "x1"; then
1185         AC_MSG_CHECKING(if getaddrinfo seems to work)
1186         AC_TRY_RUN(
1187                 [
1188 #include <stdio.h>
1189 #include <sys/socket.h>
1190 #include <netdb.h>
1191 #include <errno.h>
1192 #include <netinet/in.h>
1193
1194 #define TEST_PORT "2222"
1195
1196 int
1197 main(void)
1198 {
1199         int err, sock;
1200         struct addrinfo *gai_ai, *ai, hints;
1201         char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1202
1203         memset(&hints, 0, sizeof(hints));
1204         hints.ai_family = PF_UNSPEC;
1205         hints.ai_socktype = SOCK_STREAM;
1206         hints.ai_flags = AI_PASSIVE;
1207
1208         err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1209         if (err != 0) {
1210                 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1211                 exit(1);
1212         }
1213
1214         for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1215                 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1216                         continue;
1217
1218                 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1219                     sizeof(ntop), strport, sizeof(strport),
1220                     NI_NUMERICHOST|NI_NUMERICSERV);
1221
1222                 if (ai->ai_family == AF_INET && err != 0) {
1223                         perror("getnameinfo");
1224                         exit(2);
1225                 }
1226         }
1227         exit(0);
1228 }
1229                 ],
1230                 [
1231                         AC_MSG_RESULT(yes)
1232                         AC_DEFINE(AIX_GETNAMEINFO_HACK, [],
1233 [Define if you have a getaddrinfo that fails for the all-zeros IPv6 address])
1234                 ],
1235                 [
1236                         AC_MSG_RESULT(no)
1237                         AC_DEFINE(BROKEN_GETADDRINFO)
1238                 ]
1239         )
1240 fi
1241
1242 if test "x$check_for_conflicting_getspnam" = "x1"; then
1243         AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1244         AC_COMPILE_IFELSE(
1245                 [
1246 #include <shadow.h>
1247 int main(void) {exit(0);}
1248                 ],
1249                 [
1250                         AC_MSG_RESULT(no)
1251                 ],
1252                 [
1253                         AC_MSG_RESULT(yes)
1254                         AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1255                             [Conflicting defs for getspnam])
1256                 ]
1257         )
1258 fi
1259
1260 AC_FUNC_GETPGRP
1261
1262 # Check for PAM libs
1263 PAM_MSG="no"
1264 AC_ARG_WITH(pam,
1265         [  --with-pam              Enable PAM support ],
1266         [
1267                 if test "x$withval" != "xno" ; then
1268                         if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
1269                            test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
1270                                 AC_MSG_ERROR([PAM headers not found])
1271                         fi
1272
1273                         AC_CHECK_LIB(dl, dlopen, , )
1274                         AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
1275                         AC_CHECK_FUNCS(pam_getenvlist)
1276                         AC_CHECK_FUNCS(pam_putenv)
1277
1278                         PAM_MSG="yes"
1279
1280                         AC_DEFINE(USE_PAM)
1281                         if test $ac_cv_lib_dl_dlopen = yes; then
1282                                 LIBPAM="-lpam -ldl"
1283                         else
1284                                 LIBPAM="-lpam"
1285                         fi
1286                         AC_SUBST(LIBPAM)
1287                 fi
1288         ]
1289 )
1290
1291 # Check for older PAM
1292 if test "x$PAM_MSG" = "xyes" ; then
1293         # Check PAM strerror arguments (old PAM)
1294         AC_MSG_CHECKING([whether pam_strerror takes only one argument])
1295         AC_TRY_COMPILE(
1296                 [
1297 #include <stdlib.h>
1298 #if defined(HAVE_SECURITY_PAM_APPL_H)
1299 #include <security/pam_appl.h>
1300 #elif defined (HAVE_PAM_PAM_APPL_H)
1301 #include <pam/pam_appl.h>
1302 #endif
1303                 ],
1304                 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
1305                 [AC_MSG_RESULT(no)],
1306                 [
1307                         AC_DEFINE(HAVE_OLD_PAM)
1308                         AC_MSG_RESULT(yes)
1309                         PAM_MSG="yes (old library)"
1310                 ]
1311         )
1312 fi
1313
1314 # Search for OpenSSL
1315 saved_CPPFLAGS="$CPPFLAGS"
1316 saved_LDFLAGS="$LDFLAGS"
1317 AC_ARG_WITH(ssl-dir,
1318         [  --with-ssl-dir=PATH     Specify path to OpenSSL installation ],
1319         [
1320                 if test "x$withval" != "xno" ; then
1321                         case "$withval" in
1322                                 # Relative paths
1323                                 ./*|../*)       withval="`pwd`/$withval"
1324                         esac
1325                         if test -d "$withval/lib"; then
1326                                 if test -n "${need_dash_r}"; then
1327                                         LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1328                                 else
1329                                         LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1330                                 fi
1331                         else
1332                                 if test -n "${need_dash_r}"; then
1333                                         LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1334                                 else
1335                                         LDFLAGS="-L${withval} ${LDFLAGS}"
1336                                 fi
1337                         fi
1338                         if test -d "$withval/include"; then
1339                                 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1340                         else
1341                                 CPPFLAGS="-I${withval} ${CPPFLAGS}"
1342                         fi
1343                 fi
1344         ]
1345 )
1346 LIBS="-lcrypto $LIBS"
1347 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1348         [
1349                 dnl Check default openssl install dir
1350                 if test -n "${need_dash_r}"; then
1351                         LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
1352                 else
1353                         LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
1354                 fi
1355                 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1356                 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1357                         [
1358                                 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1359                         ]
1360                 )
1361         ]
1362 )
1363
1364 # Determine OpenSSL header version
1365 AC_MSG_CHECKING([OpenSSL header version])
1366 AC_RUN_IFELSE(
1367         [AC_LANG_SOURCE([[
1368 #include <stdio.h>
1369 #include <string.h>
1370 #include <openssl/opensslv.h>
1371 #define DATA "conftest.sslincver"
1372 int main(void) {
1373         FILE *fd;
1374         int rc;
1375
1376         fd = fopen(DATA,"w");
1377         if(fd == NULL)
1378                 exit(1);
1379
1380         if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1381                 exit(1);
1382
1383         exit(0);
1384 }
1385         ]])],
1386         [
1387                 ssl_header_ver=`cat conftest.sslincver`
1388                 AC_MSG_RESULT($ssl_header_ver)
1389         ],
1390         [
1391                 AC_MSG_RESULT(not found)
1392                 AC_MSG_ERROR(OpenSSL version header not found.)
1393         ],
1394         [
1395                 AC_MSG_WARN([cross compiling: not checking])
1396         ]
1397 )
1398
1399 # Determine OpenSSL library version
1400 AC_MSG_CHECKING([OpenSSL library version])
1401 AC_RUN_IFELSE(
1402         [AC_LANG_SOURCE([[
1403 #include <stdio.h>
1404 #include <string.h>
1405 #include <openssl/opensslv.h>
1406 #include <openssl/crypto.h>
1407 #define DATA "conftest.ssllibver"
1408 int main(void) {
1409         FILE *fd;
1410         int rc;
1411
1412         fd = fopen(DATA,"w");
1413         if(fd == NULL)
1414                 exit(1);
1415
1416         if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1417                 exit(1);
1418
1419         exit(0);
1420 }
1421         ]])],
1422         [
1423                 ssl_library_ver=`cat conftest.ssllibver`
1424                 AC_MSG_RESULT($ssl_library_ver)
1425         ],
1426         [
1427                 AC_MSG_RESULT(not found)
1428                 AC_MSG_ERROR(OpenSSL library not found.)
1429         ],
1430         [
1431                 AC_MSG_WARN([cross compiling: not checking])
1432         ]
1433 )
1434
1435 # Sanity check OpenSSL headers
1436 AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1437 AC_RUN_IFELSE(
1438         [AC_LANG_SOURCE([[
1439 #include <string.h>
1440 #include <openssl/opensslv.h>
1441 int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
1442         ]])],
1443         [
1444                 AC_MSG_RESULT(yes)
1445         ],
1446         [
1447                 AC_MSG_RESULT(no)
1448                 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1449 Check config.log for details.
1450 Also see contrib/findssl.sh for help identifying header/library mismatches.])
1451         ],
1452         [
1453                 AC_MSG_WARN([cross compiling: not checking])
1454         ]
1455 )
1456
1457 # Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1458 # because the system crypt() is more featureful.
1459 if test "x$check_for_libcrypt_before" = "x1"; then
1460         AC_CHECK_LIB(crypt, crypt)
1461 fi
1462
1463 # Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
1464 # version in OpenSSL.
1465 if test "x$check_for_libcrypt_later" = "x1"; then
1466         AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
1467 fi
1468
1469
1470 ### Configure cryptographic random number support
1471
1472 # Check wheter OpenSSL seeds itself
1473 AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1474 AC_RUN_IFELSE(
1475         [AC_LANG_SOURCE([[
1476 #include <string.h>
1477 #include <openssl/rand.h>
1478 int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
1479         ]])],
1480         [
1481                 OPENSSL_SEEDS_ITSELF=yes
1482                 AC_MSG_RESULT(yes)
1483         ],
1484         [
1485                 AC_MSG_RESULT(no)
1486                 # Default to use of the rand helper if OpenSSL doesn't
1487                 # seed itself
1488                 USE_RAND_HELPER=yes
1489         ],
1490         [
1491                 AC_MSG_WARN([cross compiling: assuming yes])
1492                 # This is safe, since all recent OpenSSL versions will
1493                 # complain at runtime if not seeded correctly.
1494                 OPENSSL_SEEDS_ITSELF=yes
1495         ]
1496 )
1497
1498
1499 # Do we want to force the use of the rand helper?
1500 AC_ARG_WITH(rand-helper,
1501         [  --with-rand-helper      Use subprocess to gather strong randomness ],
1502         [
1503                 if test "x$withval" = "xno" ; then
1504                         # Force use of OpenSSL's internal RNG, even if
1505                         # the previous test showed it to be unseeded.
1506                         if test -z "$OPENSSL_SEEDS_ITSELF" ; then
1507                                 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
1508                                 OPENSSL_SEEDS_ITSELF=yes
1509                                 USE_RAND_HELPER=""
1510                         fi
1511                 else
1512                         USE_RAND_HELPER=yes
1513                 fi
1514         ],
1515 )
1516
1517 # Which randomness source do we use?
1518 if test ! -z "$OPENSSL_SEEDS_ITSELF" -a -z "$USE_RAND_HELPER" ; then
1519         # OpenSSL only
1520         AC_DEFINE(OPENSSL_PRNG_ONLY)
1521         RAND_MSG="OpenSSL internal ONLY"
1522         INSTALL_SSH_RAND_HELPER=""
1523 elif test ! -z "$USE_RAND_HELPER" ; then
1524         # install rand helper
1525         RAND_MSG="ssh-rand-helper"
1526         INSTALL_SSH_RAND_HELPER="yes"
1527 fi
1528 AC_SUBST(INSTALL_SSH_RAND_HELPER)
1529
1530 ### Configuration of ssh-rand-helper
1531
1532 # PRNGD TCP socket
1533 AC_ARG_WITH(prngd-port,
1534         [  --with-prngd-port=PORT  read entropy from PRNGD/EGD TCP localhost:PORT],
1535         [
1536                 case "$withval" in
1537                 no)
1538                         withval=""
1539                         ;;
1540                 [[0-9]]*)
1541                         ;;
1542                 *)
1543                         AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
1544                         ;;
1545                 esac
1546                 if test ! -z "$withval" ; then
1547                         PRNGD_PORT="$withval"
1548                         AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT)
1549                 fi
1550         ]
1551 )
1552
1553 # PRNGD Unix domain socket
1554 AC_ARG_WITH(prngd-socket,
1555         [  --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
1556         [
1557                 case "$withval" in
1558                 yes)
1559                         withval="/var/run/egd-pool"
1560                         ;;
1561                 no)
1562                         withval=""
1563                         ;;
1564                 /*)
1565                         ;;
1566                 *)
1567                         AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
1568                         ;;
1569                 esac
1570
1571                 if test ! -z "$withval" ; then
1572                         if test ! -z "$PRNGD_PORT" ; then
1573                                 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
1574                         fi
1575                         if test ! -r "$withval" ; then
1576                                 AC_MSG_WARN(Entropy socket is not readable)
1577                         fi
1578                         PRNGD_SOCKET="$withval"
1579                         AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1580                 fi
1581         ],
1582         [
1583                 # Check for existing socket only if we don't have a random device already
1584                 if test "$USE_RAND_HELPER" = yes ; then
1585                         AC_MSG_CHECKING(for PRNGD/EGD socket)
1586                         # Insert other locations here
1587                         for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
1588                                 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
1589                                         PRNGD_SOCKET="$sock"
1590                                         AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1591                                         break;
1592                                 fi
1593                         done
1594                         if test ! -z "$PRNGD_SOCKET" ; then
1595                                 AC_MSG_RESULT($PRNGD_SOCKET)
1596                         else
1597                                 AC_MSG_RESULT(not found)
1598                         fi
1599                 fi
1600         ]
1601 )
1602
1603 # Change default command timeout for hashing entropy source
1604 entropy_timeout=200
1605 AC_ARG_WITH(entropy-timeout,
1606         [  --with-entropy-timeout  Specify entropy gathering command timeout (msec)],
1607         [
1608                 if test "x$withval" != "xno" ; then
1609                         entropy_timeout=$withval
1610                 fi
1611         ]
1612 )
1613 AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout)
1614
1615 SSH_PRIVSEP_USER=sshd
1616 AC_ARG_WITH(privsep-user,
1617         [  --with-privsep-user=user Specify non-privileged user for privilege separation],
1618         [
1619                 if test -n "$withval"; then
1620                         SSH_PRIVSEP_USER=$withval
1621                 fi
1622         ]
1623 )
1624 AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER")
1625 AC_SUBST(SSH_PRIVSEP_USER)
1626
1627 # We do this little dance with the search path to insure
1628 # that programs that we select for use by installed programs
1629 # (which may be run by the super-user) come from trusted
1630 # locations before they come from the user's private area.
1631 # This should help avoid accidentally configuring some
1632 # random version of a program in someone's personal bin.
1633
1634 OPATH=$PATH
1635 PATH=/bin:/usr/bin
1636 test -h /bin 2> /dev/null && PATH=/usr/bin
1637 test -d /sbin && PATH=$PATH:/sbin
1638 test -d /usr/sbin && PATH=$PATH:/usr/sbin
1639 PATH=$PATH:/etc:$OPATH
1640
1641 # These programs are used by the command hashing source to gather entropy
1642 OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
1643 OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
1644 OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
1645 OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
1646 OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
1647 OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
1648 OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
1649 OSSH_PATH_ENTROPY_PROG(PROG_W, w)
1650 OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
1651 OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
1652 OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
1653 OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
1654 OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
1655 OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
1656 OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
1657 OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
1658 # restore PATH
1659 PATH=$OPATH
1660
1661 # Where does ssh-rand-helper get its randomness from?
1662 INSTALL_SSH_PRNG_CMDS=""
1663 if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
1664         if test ! -z "$PRNGD_PORT" ; then
1665                 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
1666         elif test ! -z "$PRNGD_SOCKET" ; then
1667                 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
1668         else
1669                 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
1670                 RAND_HELPER_CMDHASH=yes
1671                 INSTALL_SSH_PRNG_CMDS="yes"
1672         fi
1673 fi
1674 AC_SUBST(INSTALL_SSH_PRNG_CMDS)
1675
1676
1677 # Cheap hack to ensure NEWS-OS libraries are arranged right.
1678 if test ! -z "$SONY" ; then
1679   LIBS="$LIBS -liberty";
1680 fi
1681
1682 # Checks for data types
1683 AC_CHECK_SIZEOF(char, 1)
1684 AC_CHECK_SIZEOF(short int, 2)
1685 AC_CHECK_SIZEOF(int, 4)
1686 AC_CHECK_SIZEOF(long int, 4)
1687 AC_CHECK_SIZEOF(long long int, 8)
1688
1689 # Sanity check long long for some platforms (AIX)
1690 if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
1691         ac_cv_sizeof_long_long_int=0
1692 fi
1693
1694 # More checks for data types
1695 AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
1696         AC_TRY_COMPILE(
1697                 [ #include <sys/types.h> ],
1698                 [ u_int a; a = 1;],
1699                 [ ac_cv_have_u_int="yes" ],
1700                 [ ac_cv_have_u_int="no" ]
1701         )
1702 ])
1703 if test "x$ac_cv_have_u_int" = "xyes" ; then
1704         AC_DEFINE(HAVE_U_INT)
1705         have_u_int=1
1706 fi
1707
1708 AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
1709         AC_TRY_COMPILE(
1710                 [ #include <sys/types.h> ],
1711                 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
1712                 [ ac_cv_have_intxx_t="yes" ],
1713                 [ ac_cv_have_intxx_t="no" ]
1714         )
1715 ])
1716 if test "x$ac_cv_have_intxx_t" = "xyes" ; then
1717         AC_DEFINE(HAVE_INTXX_T)
1718         have_intxx_t=1
1719 fi
1720
1721 if (test -z "$have_intxx_t" && \
1722            test "x$ac_cv_header_stdint_h" = "xyes")
1723 then
1724     AC_MSG_CHECKING([for intXX_t types in stdint.h])
1725         AC_TRY_COMPILE(
1726                 [ #include <stdint.h> ],
1727                 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
1728                 [
1729                         AC_DEFINE(HAVE_INTXX_T)
1730                         AC_MSG_RESULT(yes)
1731                 ],
1732                 [ AC_MSG_RESULT(no) ]
1733         )
1734 fi
1735
1736 AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
1737         AC_TRY_COMPILE(
1738                 [
1739 #include <sys/types.h>
1740 #ifdef HAVE_STDINT_H
1741 # include <stdint.h>
1742 #endif
1743 #include <sys/socket.h>
1744 #ifdef HAVE_SYS_BITYPES_H
1745 # include <sys/bitypes.h>
1746 #endif
1747                 ],
1748                 [ int64_t a; a = 1;],
1749                 [ ac_cv_have_int64_t="yes" ],
1750                 [ ac_cv_have_int64_t="no" ]
1751         )
1752 ])
1753 if test "x$ac_cv_have_int64_t" = "xyes" ; then
1754         AC_DEFINE(HAVE_INT64_T)
1755 fi
1756
1757 AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
1758         AC_TRY_COMPILE(
1759                 [ #include <sys/types.h> ],
1760                 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
1761                 [ ac_cv_have_u_intxx_t="yes" ],
1762                 [ ac_cv_have_u_intxx_t="no" ]
1763         )
1764 ])
1765 if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
1766         AC_DEFINE(HAVE_U_INTXX_T)
1767         have_u_intxx_t=1
1768 fi
1769
1770 if test -z "$have_u_intxx_t" ; then
1771     AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
1772         AC_TRY_COMPILE(
1773                 [ #include <sys/socket.h> ],
1774                 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
1775                 [
1776                         AC_DEFINE(HAVE_U_INTXX_T)
1777                         AC_MSG_RESULT(yes)
1778                 ],
1779                 [ AC_MSG_RESULT(no) ]
1780         )
1781 fi
1782
1783 AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
1784         AC_TRY_COMPILE(
1785                 [ #include <sys/types.h> ],
1786                 [ u_int64_t a; a = 1;],
1787                 [ ac_cv_have_u_int64_t="yes" ],
1788                 [ ac_cv_have_u_int64_t="no" ]
1789         )
1790 ])
1791 if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
1792         AC_DEFINE(HAVE_U_INT64_T)
1793         have_u_int64_t=1
1794 fi
1795
1796 if test -z "$have_u_int64_t" ; then
1797     AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
1798         AC_TRY_COMPILE(
1799                 [ #include <sys/bitypes.h> ],
1800                 [ u_int64_t a; a = 1],
1801                 [
1802                         AC_DEFINE(HAVE_U_INT64_T)
1803                         AC_MSG_RESULT(yes)
1804                 ],
1805                 [ AC_MSG_RESULT(no) ]
1806         )
1807 fi
1808
1809 if test -z "$have_u_intxx_t" ; then
1810         AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
1811                 AC_TRY_COMPILE(
1812                         [
1813 #include <sys/types.h>
1814                         ],
1815                         [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
1816                         [ ac_cv_have_uintxx_t="yes" ],
1817                         [ ac_cv_have_uintxx_t="no" ]
1818                 )
1819         ])
1820         if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
1821                 AC_DEFINE(HAVE_UINTXX_T)
1822         fi
1823 fi
1824
1825 if test -z "$have_uintxx_t" ; then
1826     AC_MSG_CHECKING([for uintXX_t types in stdint.h])
1827         AC_TRY_COMPILE(
1828                 [ #include <stdint.h> ],
1829                 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
1830                 [
1831                         AC_DEFINE(HAVE_UINTXX_T)
1832                         AC_MSG_RESULT(yes)
1833                 ],
1834                 [ AC_MSG_RESULT(no) ]
1835         )
1836 fi
1837
1838 if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
1839            test "x$ac_cv_header_sys_bitypes_h" = "xyes")
1840 then
1841         AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
1842         AC_TRY_COMPILE(
1843                 [
1844 #include <sys/bitypes.h>
1845                 ],
1846                 [
1847                         int8_t a; int16_t b; int32_t c;
1848                         u_int8_t e; u_int16_t f; u_int32_t g;
1849                         a = b = c = e = f = g = 1;
1850                 ],
1851                 [
1852                         AC_DEFINE(HAVE_U_INTXX_T)
1853                         AC_DEFINE(HAVE_INTXX_T)
1854                         AC_MSG_RESULT(yes)
1855                 ],
1856                 [AC_MSG_RESULT(no)]
1857         )
1858 fi
1859
1860
1861 AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
1862         AC_TRY_COMPILE(
1863                 [
1864 #include <sys/types.h>
1865                 ],
1866                 [ u_char foo; foo = 125; ],
1867                 [ ac_cv_have_u_char="yes" ],
1868                 [ ac_cv_have_u_char="no" ]
1869         )
1870 ])
1871 if test "x$ac_cv_have_u_char" = "xyes" ; then
1872         AC_DEFINE(HAVE_U_CHAR)
1873 fi
1874
1875 TYPE_SOCKLEN_T
1876
1877 AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
1878
1879 AC_CHECK_TYPES(in_addr_t,,,
1880 [#include <sys/types.h>
1881 #include <netinet/in.h>])
1882
1883 AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
1884         AC_TRY_COMPILE(
1885                 [
1886 #include <sys/types.h>
1887                 ],
1888                 [ size_t foo; foo = 1235; ],
1889                 [ ac_cv_have_size_t="yes" ],
1890                 [ ac_cv_have_size_t="no" ]
1891         )
1892 ])
1893 if test "x$ac_cv_have_size_t" = "xyes" ; then
1894         AC_DEFINE(HAVE_SIZE_T)
1895 fi
1896
1897 AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
1898         AC_TRY_COMPILE(
1899                 [
1900 #include <sys/types.h>
1901                 ],
1902                 [ ssize_t foo; foo = 1235; ],
1903                 [ ac_cv_have_ssize_t="yes" ],
1904                 [ ac_cv_have_ssize_t="no" ]
1905         )
1906 ])
1907 if test "x$ac_cv_have_ssize_t" = "xyes" ; then
1908         AC_DEFINE(HAVE_SSIZE_T)
1909 fi
1910
1911 AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
1912         AC_TRY_COMPILE(
1913                 [
1914 #include <time.h>
1915                 ],
1916                 [ clock_t foo; foo = 1235; ],
1917                 [ ac_cv_have_clock_t="yes" ],
1918                 [ ac_cv_have_clock_t="no" ]
1919         )
1920 ])
1921 if test "x$ac_cv_have_clock_t" = "xyes" ; then
1922         AC_DEFINE(HAVE_CLOCK_T)
1923 fi
1924
1925 AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
1926         AC_TRY_COMPILE(
1927                 [
1928 #include <sys/types.h>
1929 #include <sys/socket.h>
1930                 ],
1931                 [ sa_family_t foo; foo = 1235; ],
1932                 [ ac_cv_have_sa_family_t="yes" ],
1933                 [ AC_TRY_COMPILE(
1934                   [
1935 #include <sys/types.h>
1936 #include <sys/socket.h>
1937 #include <netinet/in.h>
1938                 ],
1939                 [ sa_family_t foo; foo = 1235; ],
1940                 [ ac_cv_have_sa_family_t="yes" ],
1941
1942                 [ ac_cv_have_sa_family_t="no" ]
1943         )]
1944         )
1945 ])
1946 if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
1947         AC_DEFINE(HAVE_SA_FAMILY_T)
1948 fi
1949
1950 AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
1951         AC_TRY_COMPILE(
1952                 [
1953 #include <sys/types.h>
1954                 ],
1955                 [ pid_t foo; foo = 1235; ],
1956                 [ ac_cv_have_pid_t="yes" ],
1957                 [ ac_cv_have_pid_t="no" ]
1958         )
1959 ])
1960 if test "x$ac_cv_have_pid_t" = "xyes" ; then
1961         AC_DEFINE(HAVE_PID_T)
1962 fi
1963
1964 AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
1965         AC_TRY_COMPILE(
1966                 [
1967 #include <sys/types.h>
1968                 ],
1969                 [ mode_t foo; foo = 1235; ],
1970                 [ ac_cv_have_mode_t="yes" ],
1971                 [ ac_cv_have_mode_t="no" ]
1972         )
1973 ])
1974 if test "x$ac_cv_have_mode_t" = "xyes" ; then
1975         AC_DEFINE(HAVE_MODE_T)
1976 fi
1977
1978
1979 AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
1980         AC_TRY_COMPILE(
1981                 [
1982 #include <sys/types.h>
1983 #include <sys/socket.h>
1984                 ],
1985                 [ struct sockaddr_storage s; ],
1986                 [ ac_cv_have_struct_sockaddr_storage="yes" ],
1987                 [ ac_cv_have_struct_sockaddr_storage="no" ]
1988         )
1989 ])
1990 if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
1991         AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE)
1992 fi
1993
1994 AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
1995         AC_TRY_COMPILE(
1996                 [
1997 #include <sys/types.h>
1998 #include <netinet/in.h>
1999                 ],
2000                 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2001                 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2002                 [ ac_cv_have_struct_sockaddr_in6="no" ]
2003         )
2004 ])
2005 if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
2006         AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6)
2007 fi
2008
2009 AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2010         AC_TRY_COMPILE(
2011                 [
2012 #include <sys/types.h>
2013 #include <netinet/in.h>
2014                 ],
2015                 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2016                 [ ac_cv_have_struct_in6_addr="yes" ],
2017                 [ ac_cv_have_struct_in6_addr="no" ]
2018         )
2019 ])
2020 if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
2021         AC_DEFINE(HAVE_STRUCT_IN6_ADDR)
2022 fi
2023
2024 AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2025         AC_TRY_COMPILE(
2026                 [
2027 #include <sys/types.h>
2028 #include <sys/socket.h>
2029 #include <netdb.h>
2030                 ],
2031                 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2032                 [ ac_cv_have_struct_addrinfo="yes" ],
2033                 [ ac_cv_have_struct_addrinfo="no" ]
2034         )
2035 ])
2036 if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2037         AC_DEFINE(HAVE_STRUCT_ADDRINFO)
2038 fi
2039
2040 AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2041         AC_TRY_COMPILE(
2042                 [ #include <sys/time.h> ],
2043                 [ struct timeval tv; tv.tv_sec = 1;],
2044                 [ ac_cv_have_struct_timeval="yes" ],
2045                 [ ac_cv_have_struct_timeval="no" ]
2046         )
2047 ])
2048 if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2049         AC_DEFINE(HAVE_STRUCT_TIMEVAL)
2050         have_struct_timeval=1
2051 fi
2052
2053 AC_CHECK_TYPES(struct timespec)
2054
2055 # We need int64_t or else certian parts of the compile will fail.
2056 if test "x$ac_cv_have_int64_t" = "xno" -a \
2057         "x$ac_cv_sizeof_long_int" != "x8" -a \
2058         "x$ac_cv_sizeof_long_long_int" = "x0" ; then
2059         echo "OpenSSH requires int64_t support.  Contact your vendor or install"
2060         echo "an alternative compiler (I.E., GCC) before continuing."
2061         echo ""
2062         exit 1;
2063 else
2064 dnl test snprintf (broken on SCO w/gcc)
2065         AC_RUN_IFELSE(
2066                 [AC_LANG_SOURCE([[
2067 #include <stdio.h>
2068 #include <string.h>
2069 #ifdef HAVE_SNPRINTF
2070 main()
2071 {
2072         char buf[50];
2073         char expected_out[50];
2074         int mazsize = 50 ;
2075 #if (SIZEOF_LONG_INT == 8)
2076         long int num = 0x7fffffffffffffff;
2077 #else
2078         long long num = 0x7fffffffffffffffll;
2079 #endif
2080         strcpy(expected_out, "9223372036854775807");
2081         snprintf(buf, mazsize, "%lld", num);
2082         if(strcmp(buf, expected_out) != 0)
2083                 exit(1);
2084         exit(0);
2085 }
2086 #else
2087 main() { exit(0); }
2088 #endif
2089                 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
2090                 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
2091         )
2092 fi
2093
2094 dnl Checks for structure members
2095 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2096 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2097 OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2098 OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2099 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
2100 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
2101 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2102 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
2103 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
2104 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2105 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2106 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2107 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
2108 OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2109 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2110 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2111 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
2112
2113 AC_CHECK_MEMBERS([struct stat.st_blksize])
2114
2115 AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2116                 ac_cv_have_ss_family_in_struct_ss, [
2117         AC_TRY_COMPILE(
2118                 [
2119 #include <sys/types.h>
2120 #include <sys/socket.h>
2121                 ],
2122                 [ struct sockaddr_storage s; s.ss_family = 1; ],
2123                 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2124                 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2125         )
2126 ])
2127 if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2128         AC_DEFINE(HAVE_SS_FAMILY_IN_SS)
2129 fi
2130
2131 AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2132                 ac_cv_have___ss_family_in_struct_ss, [
2133         AC_TRY_COMPILE(
2134                 [
2135 #include <sys/types.h>
2136 #include <sys/socket.h>
2137                 ],
2138                 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2139                 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2140                 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2141         )
2142 ])
2143 if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2144         AC_DEFINE(HAVE___SS_FAMILY_IN_SS)
2145 fi
2146
2147 AC_CACHE_CHECK([for pw_class field in struct passwd],
2148                 ac_cv_have_pw_class_in_struct_passwd, [
2149         AC_TRY_COMPILE(
2150                 [
2151 #include <pwd.h>
2152                 ],
2153                 [ struct passwd p; p.pw_class = 0; ],
2154                 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2155                 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2156         )
2157 ])
2158 if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2159         AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD)
2160 fi
2161
2162 AC_CACHE_CHECK([for pw_expire field in struct passwd],
2163                 ac_cv_have_pw_expire_in_struct_passwd, [
2164         AC_TRY_COMPILE(
2165                 [
2166 #include <pwd.h>
2167                 ],
2168                 [ struct passwd p; p.pw_expire = 0; ],
2169                 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2170                 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2171         )
2172 ])
2173 if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2174         AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD)
2175 fi
2176
2177 AC_CACHE_CHECK([for pw_change field in struct passwd],
2178                 ac_cv_have_pw_change_in_struct_passwd, [
2179         AC_TRY_COMPILE(
2180                 [
2181 #include <pwd.h>
2182                 ],
2183                 [ struct passwd p; p.pw_change = 0; ],
2184                 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2185                 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2186         )
2187 ])
2188 if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2189         AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD)
2190 fi
2191
2192 dnl make sure we're using the real structure members and not defines
2193 AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2194                 ac_cv_have_accrights_in_msghdr, [
2195         AC_COMPILE_IFELSE(
2196                 [
2197 #include <sys/types.h>
2198 #include <sys/socket.h>
2199 #include <sys/uio.h>
2200 int main() {
2201 #ifdef msg_accrights
2202 #error "msg_accrights is a macro"
2203 exit(1);
2204 #endif
2205 struct msghdr m;
2206 m.msg_accrights = 0;
2207 exit(0);
2208 }
2209                 ],
2210                 [ ac_cv_have_accrights_in_msghdr="yes" ],
2211                 [ ac_cv_have_accrights_in_msghdr="no" ]
2212         )
2213 ])
2214 if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2215         AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR)
2216 fi
2217
2218 AC_CACHE_CHECK([for msg_control field in struct msghdr],
2219                 ac_cv_have_control_in_msghdr, [
2220         AC_COMPILE_IFELSE(
2221                 [
2222 #include <sys/types.h>
2223 #include <sys/socket.h>
2224 #include <sys/uio.h>
2225 int main() {
2226 #ifdef msg_control
2227 #error "msg_control is a macro"
2228 exit(1);
2229 #endif
2230 struct msghdr m;
2231 m.msg_control = 0;
2232 exit(0);
2233 }
2234                 ],
2235                 [ ac_cv_have_control_in_msghdr="yes" ],
2236                 [ ac_cv_have_control_in_msghdr="no" ]
2237         )
2238 ])
2239 if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2240         AC_DEFINE(HAVE_CONTROL_IN_MSGHDR)
2241 fi
2242
2243 AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
2244         AC_TRY_LINK([],
2245                 [ extern char *__progname; printf("%s", __progname); ],
2246                 [ ac_cv_libc_defines___progname="yes" ],
2247                 [ ac_cv_libc_defines___progname="no" ]
2248         )
2249 ])
2250 if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2251         AC_DEFINE(HAVE___PROGNAME)
2252 fi
2253
2254 AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2255         AC_TRY_LINK([
2256 #include <stdio.h>
2257 ],
2258                 [ printf("%s", __FUNCTION__); ],
2259                 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2260                 [ ac_cv_cc_implements___FUNCTION__="no" ]
2261         )
2262 ])
2263 if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2264         AC_DEFINE(HAVE___FUNCTION__)
2265 fi
2266
2267 AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2268         AC_TRY_LINK([
2269 #include <stdio.h>
2270 ],
2271                 [ printf("%s", __func__); ],
2272                 [ ac_cv_cc_implements___func__="yes" ],
2273                 [ ac_cv_cc_implements___func__="no" ]
2274         )
2275 ])
2276 if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
2277         AC_DEFINE(HAVE___func__)
2278 fi
2279
2280 AC_CACHE_CHECK([whether getopt has optreset support],
2281                 ac_cv_have_getopt_optreset, [
2282         AC_TRY_LINK(
2283                 [
2284 #include <getopt.h>
2285                 ],
2286                 [ extern int optreset; optreset = 0; ],
2287                 [ ac_cv_have_getopt_optreset="yes" ],
2288                 [ ac_cv_have_getopt_optreset="no" ]
2289         )
2290 ])
2291 if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
2292         AC_DEFINE(HAVE_GETOPT_OPTRESET)
2293 fi
2294
2295 AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
2296         AC_TRY_LINK([],
2297                 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
2298                 [ ac_cv_libc_defines_sys_errlist="yes" ],
2299                 [ ac_cv_libc_defines_sys_errlist="no" ]
2300         )
2301 ])
2302 if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
2303         AC_DEFINE(HAVE_SYS_ERRLIST)
2304 fi
2305
2306
2307 AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
2308         AC_TRY_LINK([],
2309                 [ extern int sys_nerr; printf("%i", sys_nerr);],
2310                 [ ac_cv_libc_defines_sys_nerr="yes" ],
2311                 [ ac_cv_libc_defines_sys_nerr="no" ]
2312         )
2313 ])
2314 if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
2315         AC_DEFINE(HAVE_SYS_NERR)
2316 fi
2317
2318 SCARD_MSG="no"
2319 # Check whether user wants sectok support
2320 AC_ARG_WITH(sectok,
2321         [  --with-sectok           Enable smartcard support using libsectok],
2322         [
2323                 if test "x$withval" != "xno" ; then
2324                         if test "x$withval" != "xyes" ; then
2325                                 CPPFLAGS="$CPPFLAGS -I${withval}"
2326                                 LDFLAGS="$LDFLAGS -L${withval}"
2327                                 if test ! -z "$need_dash_r" ; then
2328                                         LDFLAGS="$LDFLAGS -R${withval}"
2329                                 fi
2330                                 if test ! -z "$blibpath" ; then
2331                                         blibpath="$blibpath:${withval}"
2332                                 fi
2333                         fi
2334                         AC_CHECK_HEADERS(sectok.h)
2335                         if test "$ac_cv_header_sectok_h" != yes; then
2336                                 AC_MSG_ERROR(Can't find sectok.h)
2337                         fi
2338                         AC_CHECK_LIB(sectok, sectok_open)
2339                         if test "$ac_cv_lib_sectok_sectok_open" != yes; then
2340                                 AC_MSG_ERROR(Can't find libsectok)
2341                         fi
2342                         AC_DEFINE(SMARTCARD)
2343                         AC_DEFINE(USE_SECTOK)
2344                         SCARD_MSG="yes, using sectok"
2345                 fi
2346         ]
2347 )
2348
2349 # Check whether user wants OpenSC support
2350 AC_ARG_WITH(opensc,
2351         AC_HELP_STRING([--with-opensc=PFX],
2352                        [Enable smartcard support using OpenSC]),
2353         opensc_config_prefix="$withval", opensc_config_prefix="")
2354 if test x$opensc_config_prefix != x ; then
2355   OPENSC_CONFIG=$opensc_config_prefix/bin/opensc-config
2356   AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
2357   if test "$OPENSC_CONFIG" != "no"; then
2358     LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
2359     LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
2360     CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
2361     LDFLAGS="$LDFLAGS $LIBOPENSC_LIBS"
2362     AC_DEFINE(SMARTCARD)
2363     AC_DEFINE(USE_OPENSC)
2364     SCARD_MSG="yes, using OpenSC"
2365   fi
2366 fi
2367
2368 # Check libraries needed by DNS fingerprint support
2369 AC_SEARCH_LIBS(getrrsetbyname, resolv,
2370         [AC_DEFINE(HAVE_GETRRSETBYNAME)],
2371         [
2372                 # Needed by our getrrsetbyname()
2373                 AC_SEARCH_LIBS(res_query, resolv)
2374                 AC_SEARCH_LIBS(dn_expand, resolv)
2375                 AC_MSG_CHECKING(if res_query will link)
2376                 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
2377                    [AC_MSG_RESULT(no)
2378                     saved_LIBS="$LIBS"
2379                     LIBS="$LIBS -lresolv"
2380                     AC_MSG_CHECKING(for res_query in -lresolv)
2381                     AC_LINK_IFELSE([
2382 #include <resolv.h>
2383 int main()
2384 {
2385         res_query (0, 0, 0, 0, 0);
2386         return 0;
2387 }
2388                         ],
2389                         [LIBS="$LIBS -lresolv"
2390                          AC_MSG_RESULT(yes)],
2391                         [LIBS="$saved_LIBS"
2392                          AC_MSG_RESULT(no)])
2393                     ])
2394                 AC_CHECK_FUNCS(_getshort _getlong)
2395                 AC_CHECK_MEMBER(HEADER.ad,
2396                         [AC_DEFINE(HAVE_HEADER_AD)],,
2397                         [#include <arpa/nameser.h>])
2398         ])
2399
2400 # Check whether user wants Kerberos 5 support
2401 KRB5_MSG="no"
2402 AC_ARG_WITH(kerberos5,
2403         [  --with-kerberos5=PATH   Enable Kerberos 5 support],
2404         [ if test "x$withval" != "xno" ; then
2405                 if test "x$withval" = "xyes" ; then
2406                         KRB5ROOT="/usr/local"
2407                 else
2408                         KRB5ROOT=${withval}
2409                 fi
2410
2411                 AC_DEFINE(KRB5)
2412                 KRB5_MSG="yes"
2413
2414                 AC_MSG_CHECKING(for krb5-config)
2415                 if test -x  $KRB5ROOT/bin/krb5-config ; then
2416                         KRB5CONF=$KRB5ROOT/bin/krb5-config
2417                         AC_MSG_RESULT($KRB5CONF)
2418
2419                         AC_MSG_CHECKING(for gssapi support)
2420                         if $KRB5CONF | grep gssapi >/dev/null ; then
2421                                 AC_MSG_RESULT(yes)
2422                                 AC_DEFINE(GSSAPI)
2423                                 k5confopts=gssapi
2424                         else
2425                                 AC_MSG_RESULT(no)
2426                                 k5confopts=""
2427                         fi
2428                         K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
2429                         K5LIBS="`$KRB5CONF --libs $k5confopts`"
2430                         CPPFLAGS="$CPPFLAGS $K5CFLAGS"
2431                         AC_MSG_CHECKING(whether we are using Heimdal)
2432                         AC_TRY_COMPILE([ #include <krb5.h> ],
2433                                        [ char *tmp = heimdal_version; ],
2434                                        [ AC_MSG_RESULT(yes)
2435                                          AC_DEFINE(HEIMDAL) ],
2436                                          AC_MSG_RESULT(no)
2437                         )
2438                 else
2439                         AC_MSG_RESULT(no)
2440                         CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
2441                         LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
2442                         AC_MSG_CHECKING(whether we are using Heimdal)
2443                         AC_TRY_COMPILE([ #include <krb5.h> ],
2444                                        [ char *tmp = heimdal_version; ],
2445                                        [ AC_MSG_RESULT(yes)
2446                                          AC_DEFINE(HEIMDAL)
2447                                          K5LIBS="-lkrb5 -ldes"
2448                                          K5LIBS="$K5LIBS -lcom_err -lasn1"
2449                                          AC_CHECK_LIB(roken, net_write,
2450                                            [K5LIBS="$K5LIBS -lroken"])
2451                                        ],
2452                                        [ AC_MSG_RESULT(no)
2453                                          K5LIBS="-lkrb5 -lk5crypto -lcom_err"
2454                                        ]
2455                         )
2456                         AC_SEARCH_LIBS(dn_expand, resolv)
2457
2458                         AC_CHECK_LIB(gssapi,gss_init_sec_context,
2459                                 [ AC_DEFINE(GSSAPI)
2460                                   K5LIBS="-lgssapi $K5LIBS" ],
2461                                 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
2462                                         [ AC_DEFINE(GSSAPI)
2463                                           K5LIBS="-lgssapi_krb5 $K5LIBS" ],
2464                                         AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
2465                                         $K5LIBS)
2466                                 ],
2467                                 $K5LIBS)
2468
2469                         AC_CHECK_HEADER(gssapi.h, ,
2470                                 [ unset ac_cv_header_gssapi_h
2471                                   CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2472                                   AC_CHECK_HEADERS(gssapi.h, ,
2473                                         AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
2474                                   )
2475                                 ]
2476                         )
2477
2478                         oldCPP="$CPPFLAGS"
2479                         CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2480                         AC_CHECK_HEADER(gssapi_krb5.h, ,
2481                                         [ CPPFLAGS="$oldCPP" ])
2482
2483                 fi
2484                 if test ! -z "$need_dash_r" ; then
2485                         LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
2486                 fi
2487                 if test ! -z "$blibpath" ; then
2488                         blibpath="$blibpath:${KRB5ROOT}/lib"
2489                 fi
2490         fi
2491
2492         AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
2493         AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
2494         AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
2495
2496         LIBS="$LIBS $K5LIBS"
2497         AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS))
2498         AC_SEARCH_LIBS(krb5_init_ets, $K5LIBS, AC_DEFINE(KRB5_INIT_ETS))
2499         ]
2500 )
2501
2502 # Looking for programs, paths and files
2503
2504 PRIVSEP_PATH=/var/empty
2505 AC_ARG_WITH(privsep-path,
2506         [  --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
2507         [
2508                 if test "x$withval" != "$no" ; then
2509                         PRIVSEP_PATH=$withval
2510                 fi
2511         ]
2512 )
2513 AC_SUBST(PRIVSEP_PATH)
2514
2515 AC_ARG_WITH(xauth,
2516         [  --with-xauth=PATH       Specify path to xauth program ],
2517         [
2518                 if test "x$withval" != "xno" ; then
2519                         xauth_path=$withval
2520                 fi
2521         ],
2522         [
2523                 TestPath="$PATH"
2524                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
2525                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
2526                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
2527                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
2528                 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
2529                 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
2530                         xauth_path="/usr/openwin/bin/xauth"
2531                 fi
2532         ]
2533 )
2534
2535 STRIP_OPT=-s
2536 AC_ARG_ENABLE(strip,
2537         [  --disable-strip         Disable calling strip(1) on install],
2538         [
2539                 if test "x$enableval" = "xno" ; then
2540                         STRIP_OPT=
2541                 fi
2542         ]
2543 )
2544 AC_SUBST(STRIP_OPT)
2545
2546 if test -z "$xauth_path" ; then
2547         XAUTH_PATH="undefined"
2548         AC_SUBST(XAUTH_PATH)
2549 else
2550         AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path")
2551         XAUTH_PATH=$xauth_path
2552         AC_SUBST(XAUTH_PATH)
2553 fi
2554
2555 # Check for mail directory (last resort if we cannot get it from headers)
2556 if test ! -z "$MAIL" ; then
2557         maildir=`dirname $MAIL`
2558         AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir")
2559 fi
2560
2561 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
2562         AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
2563         disable_ptmx_check=yes
2564 fi
2565 if test -z "$no_dev_ptmx" ; then
2566         if test "x$disable_ptmx_check" != "xyes" ; then
2567                 AC_CHECK_FILE("/dev/ptmx",
2568                         [
2569                                 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX)
2570                                 have_dev_ptmx=1
2571                         ]
2572                 )
2573         fi
2574 fi
2575
2576 if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
2577         AC_CHECK_FILE("/dev/ptc",
2578                 [
2579                         AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC)
2580                         have_dev_ptc=1
2581                 ]
2582         )
2583 else
2584         AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
2585 fi
2586
2587 # Options from here on. Some of these are preset by platform above
2588 AC_ARG_WITH(mantype,
2589         [  --with-mantype=man|cat|doc  Set man page type],
2590         [
2591                 case "$withval" in
2592                 man|cat|doc)
2593                         MANTYPE=$withval
2594                         ;;
2595                 *)
2596                         AC_MSG_ERROR(invalid man type: $withval)
2597                         ;;
2598                 esac
2599         ]
2600 )
2601 if test -z "$MANTYPE"; then
2602         TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
2603         AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
2604         if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
2605                 MANTYPE=doc
2606         elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
2607                 MANTYPE=man
2608         else
2609                 MANTYPE=cat
2610         fi
2611 fi
2612 AC_SUBST(MANTYPE)
2613 if test "$MANTYPE" = "doc"; then
2614         mansubdir=man;
2615 else
2616         mansubdir=$MANTYPE;
2617 fi
2618 AC_SUBST(mansubdir)
2619
2620 # Check whether to enable MD5 passwords
2621 MD5_MSG="no"
2622 AC_ARG_WITH(md5-passwords,
2623         [  --with-md5-passwords    Enable use of MD5 passwords],
2624         [
2625                 if test "x$withval" != "xno" ; then
2626                         AC_DEFINE(HAVE_MD5_PASSWORDS)
2627                         MD5_MSG="yes"
2628                 fi
2629         ]
2630 )
2631
2632 # Whether to disable shadow password support
2633 AC_ARG_WITH(shadow,
2634         [  --without-shadow        Disable shadow password support],
2635         [
2636                 if test "x$withval" = "xno" ; then
2637                         AC_DEFINE(DISABLE_SHADOW)
2638                         disable_shadow=yes
2639                 fi
2640         ]
2641 )
2642
2643 if test -z "$disable_shadow" ; then
2644         AC_MSG_CHECKING([if the systems has expire shadow information])
2645         AC_TRY_COMPILE(
2646         [
2647 #include <sys/types.h>
2648 #include <shadow.h>
2649         struct spwd sp;
2650         ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
2651         [ sp_expire_available=yes ], []
2652         )
2653
2654         if test "x$sp_expire_available" = "xyes" ; then
2655                 AC_MSG_RESULT(yes)
2656                 AC_DEFINE(HAS_SHADOW_EXPIRE)
2657         else
2658                 AC_MSG_RESULT(no)
2659         fi
2660 fi
2661
2662 # Use ip address instead of hostname in $DISPLAY
2663 if test ! -z "$IPADDR_IN_DISPLAY" ; then
2664         DISPLAY_HACK_MSG="yes"
2665         AC_DEFINE(IPADDR_IN_DISPLAY)
2666 else
2667         DISPLAY_HACK_MSG="no"
2668         AC_ARG_WITH(ipaddr-display,
2669                 [  --with-ipaddr-display   Use ip address instead of hostname in \$DISPLAY],
2670                 [
2671                         if test "x$withval" != "xno" ; then
2672                                 AC_DEFINE(IPADDR_IN_DISPLAY)
2673                                 DISPLAY_HACK_MSG="yes"
2674                         fi
2675                 ]
2676         )
2677 fi
2678
2679 # check for /etc/default/login and use it if present.
2680 AC_ARG_ENABLE(etc-default-login,
2681         [  --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
2682         [ if test "x$enableval" = "xno"; then
2683                 AC_MSG_NOTICE([/etc/default/login handling disabled])
2684                 etc_default_login=no
2685           else
2686                 etc_default_login=yes
2687           fi ],
2688         [ etc_default_login=yes ]
2689 )
2690
2691 if test "x$etc_default_login" != "xno"; then
2692         AC_CHECK_FILE("/etc/default/login",
2693             [ external_path_file=/etc/default/login ])
2694         if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
2695         then
2696                 AC_MSG_WARN([cross compiling: Disabling /etc/default/login test])
2697         elif test "x$external_path_file" = "x/etc/default/login"; then
2698                 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN)
2699         fi
2700 fi
2701
2702 dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
2703 if test $ac_cv_func_login_getcapbool = "yes" -a \
2704         $ac_cv_header_login_cap_h = "yes" ; then
2705         external_path_file=/etc/login.conf
2706 fi
2707
2708 # Whether to mess with the default path
2709 SERVER_PATH_MSG="(default)"
2710 AC_ARG_WITH(default-path,
2711         [  --with-default-path=    Specify default \$PATH environment for server],
2712         [
2713                 if test "x$external_path_file" = "x/etc/login.conf" ; then
2714                         AC_MSG_WARN([
2715 --with-default-path=PATH has no effect on this system.
2716 Edit /etc/login.conf instead.])
2717                 elif test "x$withval" != "xno" ; then
2718                         if test ! -z "$external_path_file" ; then
2719                                 AC_MSG_WARN([
2720 --with-default-path=PATH will only be used if PATH is not defined in
2721 $external_path_file .])
2722                         fi
2723                         user_path="$withval"
2724                         SERVER_PATH_MSG="$withval"
2725                 fi
2726         ],
2727         [ if test "x$external_path_file" = "x/etc/login.conf" ; then
2728                 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
2729         else
2730                 if test ! -z "$external_path_file" ; then
2731                         AC_MSG_WARN([
2732 If PATH is defined in $external_path_file, ensure the path to scp is included,
2733 otherwise scp will not work.])
2734                 fi
2735                 AC_TRY_RUN(
2736                         [
2737 /* find out what STDPATH is */
2738 #include <stdio.h>
2739 #ifdef HAVE_PATHS_H
2740 # include <paths.h>
2741 #endif
2742 #ifndef _PATH_STDPATH
2743 # ifdef _PATH_USERPATH  /* Irix */
2744 #  define _PATH_STDPATH _PATH_USERPATH
2745 # else
2746 #  define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
2747 # endif
2748 #endif
2749 #include <sys/types.h>
2750 #include <sys/stat.h>
2751 #include <fcntl.h>
2752 #define DATA "conftest.stdpath"
2753
2754 main()
2755 {
2756         FILE *fd;
2757         int rc;
2758
2759         fd = fopen(DATA,"w");
2760         if(fd == NULL)
2761                 exit(1);
2762
2763         if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
2764                 exit(1);
2765
2766         exit(0);
2767 }
2768                 ], [ user_path=`cat conftest.stdpath` ],
2769                 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
2770                 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
2771         )
2772 # make sure $bindir is in USER_PATH so scp will work
2773                 t_bindir=`eval echo ${bindir}`
2774                 case $t_bindir in
2775                         NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
2776                 esac
2777                 case $t_bindir in
2778                         NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
2779                 esac
2780                 echo $user_path | grep ":$t_bindir"  > /dev/null 2>&1
2781                 if test $? -ne 0  ; then
2782                         echo $user_path | grep "^$t_bindir"  > /dev/null 2>&1
2783                         if test $? -ne 0  ; then
2784                                 user_path=$user_path:$t_bindir
2785                                 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
2786                         fi
2787                 fi
2788         fi ]
2789 )
2790 if test "x$external_path_file" != "x/etc/login.conf" ; then
2791         AC_DEFINE_UNQUOTED(USER_PATH, "$user_path")
2792         AC_SUBST(user_path)
2793 fi
2794
2795 # Set superuser path separately to user path
2796 AC_ARG_WITH(superuser-path,
2797         [  --with-superuser-path=  Specify different path for super-user],
2798         [
2799                 if test "x$withval" != "xno" ; then
2800                         AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval")
2801                         superuser_path=$withval
2802                 fi
2803         ]
2804 )
2805
2806
2807 AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
2808 IPV4_IN6_HACK_MSG="no"
2809 AC_ARG_WITH(4in6,
2810         [  --with-4in6             Check for and convert IPv4 in IPv6 mapped addresses],
2811         [
2812                 if test "x$withval" != "xno" ; then
2813                         AC_MSG_RESULT(yes)
2814                         AC_DEFINE(IPV4_IN_IPV6)
2815                         IPV4_IN6_HACK_MSG="yes"
2816                 else
2817                         AC_MSG_RESULT(no)
2818                 fi
2819         ],[
2820                 if test "x$inet6_default_4in6" = "xyes"; then
2821                         AC_MSG_RESULT([yes (default)])
2822                         AC_DEFINE(IPV4_IN_IPV6)
2823                         IPV4_IN6_HACK_MSG="yes"
2824                 else
2825                         AC_MSG_RESULT([no (default)])
2826                 fi
2827         ]
2828 )
2829
2830 # Whether to enable BSD auth support
2831 BSD_AUTH_MSG=no
2832 AC_ARG_WITH(bsd-auth,
2833         [  --with-bsd-auth         Enable BSD auth support],
2834         [
2835                 if test "x$withval" != "xno" ; then
2836                         AC_DEFINE(BSD_AUTH)
2837                         BSD_AUTH_MSG=yes
2838                 fi
2839         ]
2840 )
2841
2842 # Where to place sshd.pid
2843 piddir=/var/run
2844 # make sure the directory exists
2845 if test ! -d $piddir ; then
2846         piddir=`eval echo ${sysconfdir}`
2847         case $piddir in
2848                 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
2849         esac
2850 fi
2851
2852 AC_ARG_WITH(pid-dir,
2853         [  --with-pid-dir=PATH     Specify location of ssh.pid file],
2854         [
2855                 if test "x$withval" != "xno" ; then
2856                         piddir=$withval
2857                         if test ! -d $piddir ; then
2858                         AC_MSG_WARN([** no $piddir directory on this system **])
2859                         fi
2860                 fi
2861         ]
2862 )
2863
2864 AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir")
2865 AC_SUBST(piddir)
2866
2867 dnl allow user to disable some login recording features
2868 AC_ARG_ENABLE(lastlog,
2869         [  --disable-lastlog       disable use of lastlog even if detected [no]],
2870         [
2871                 if test "x$enableval" = "xno" ; then
2872                         AC_DEFINE(DISABLE_LASTLOG)
2873                 fi
2874         ]
2875 )
2876 AC_ARG_ENABLE(utmp,
2877         [  --disable-utmp          disable use of utmp even if detected [no]],
2878         [
2879                 if test "x$enableval" = "xno" ; then
2880                         AC_DEFINE(DISABLE_UTMP)
2881                 fi
2882         ]
2883 )
2884 AC_ARG_ENABLE(utmpx,
2885         [  --disable-utmpx         disable use of utmpx even if detected [no]],
2886         [
2887                 if test "x$enableval" = "xno" ; then
2888                         AC_DEFINE(DISABLE_UTMPX)
2889                 fi
2890         ]
2891 )
2892 AC_ARG_ENABLE(wtmp,
2893         [  --disable-wtmp          disable use of wtmp even if detected [no]],
2894         [
2895                 if test "x$enableval" = "xno" ; then
2896                         AC_DEFINE(DISABLE_WTMP)
2897                 fi
2898         ]
2899 )
2900 AC_ARG_ENABLE(wtmpx,
2901         [  --disable-wtmpx         disable use of wtmpx even if detected [no]],
2902         [
2903                 if test "x$enableval" = "xno" ; then
2904                         AC_DEFINE(DISABLE_WTMPX)
2905                 fi
2906         ]
2907 )
2908 AC_ARG_ENABLE(libutil,
2909         [  --disable-libutil       disable use of libutil (login() etc.) [no]],
2910         [
2911                 if test "x$enableval" = "xno" ; then
2912                         AC_DEFINE(DISABLE_LOGIN)
2913                 fi
2914         ]
2915 )
2916 AC_ARG_ENABLE(pututline,
2917         [  --disable-pututline     disable use of pututline() etc. ([uw]tmp) [no]],
2918         [
2919                 if test "x$enableval" = "xno" ; then
2920                         AC_DEFINE(DISABLE_PUTUTLINE)
2921                 fi
2922         ]
2923 )
2924 AC_ARG_ENABLE(pututxline,
2925         [  --disable-pututxline    disable use of pututxline() etc. ([uw]tmpx) [no]],
2926         [
2927                 if test "x$enableval" = "xno" ; then
2928                         AC_DEFINE(DISABLE_PUTUTXLINE)
2929                 fi
2930         ]
2931 )
2932 AC_ARG_WITH(lastlog,
2933   [  --with-lastlog=FILE|DIR specify lastlog location [common locations]],
2934         [
2935                 if test "x$withval" = "xno" ; then
2936                         AC_DEFINE(DISABLE_LASTLOG)
2937                 else
2938                         conf_lastlog_location=$withval
2939                 fi
2940         ]
2941 )
2942
2943 dnl lastlog, [uw]tmpx? detection
2944 dnl  NOTE: set the paths in the platform section to avoid the
2945 dnl   need for command-line parameters
2946 dnl lastlog and [uw]tmp are subject to a file search if all else fails
2947
2948 dnl lastlog detection
2949 dnl  NOTE: the code itself will detect if lastlog is a directory
2950 AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
2951 AC_TRY_COMPILE([
2952 #include <sys/types.h>
2953 #include <utmp.h>
2954 #ifdef HAVE_LASTLOG_H
2955 #  include <lastlog.h>
2956 #endif
2957 #ifdef HAVE_PATHS_H
2958 #  include <paths.h>
2959 #endif
2960 #ifdef HAVE_LOGIN_H
2961 # include <login.h>
2962 #endif
2963         ],
2964         [ char *lastlog = LASTLOG_FILE; ],
2965         [ AC_MSG_RESULT(yes) ],
2966         [
2967                 AC_MSG_RESULT(no)
2968                 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
2969                 AC_TRY_COMPILE([
2970 #include <sys/types.h>
2971 #include <utmp.h>
2972 #ifdef HAVE_LASTLOG_H
2973 #  include <lastlog.h>
2974 #endif
2975 #ifdef HAVE_PATHS_H
2976 #  include <paths.h>
2977 #endif
2978                 ],
2979                 [ char *lastlog = _PATH_LASTLOG; ],
2980                 [ AC_MSG_RESULT(yes) ],
2981                 [
2982                         AC_MSG_RESULT(no)
2983                         system_lastlog_path=no
2984                 ])
2985         ]
2986 )
2987
2988 if test -z "$conf_lastlog_location"; then
2989         if test x"$system_lastlog_path" = x"no" ; then
2990                 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
2991                                 if (test -d "$f" || test -f "$f") ; then
2992                                         conf_lastlog_location=$f
2993                                 fi
2994                 done
2995                 if test -z "$conf_lastlog_location"; then
2996                         AC_MSG_WARN([** Cannot find lastlog **])
2997                         dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
2998                 fi
2999         fi
3000 fi
3001
3002 if test -n "$conf_lastlog_location"; then
3003         AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location")
3004 fi
3005
3006 dnl utmp detection
3007 AC_MSG_CHECKING([if your system defines UTMP_FILE])
3008 AC_TRY_COMPILE([
3009 #include <sys/types.h>
3010 #include <utmp.h>
3011 #ifdef HAVE_PATHS_H
3012 #  include <paths.h>
3013 #endif
3014         ],
3015         [ char *utmp = UTMP_FILE; ],
3016         [ AC_MSG_RESULT(yes) ],
3017         [ AC_MSG_RESULT(no)
3018           system_utmp_path=no ]
3019 )
3020 if test -z "$conf_utmp_location"; then
3021         if test x"$system_utmp_path" = x"no" ; then
3022                 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3023                         if test -f $f ; then
3024                                 conf_utmp_location=$f
3025                         fi
3026                 done
3027                 if test -z "$conf_utmp_location"; then
3028                         AC_DEFINE(DISABLE_UTMP)
3029                 fi
3030         fi
3031 fi
3032 if test -n "$conf_utmp_location"; then
3033         AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location")
3034 fi
3035
3036 dnl wtmp detection
3037 AC_MSG_CHECKING([if your system defines WTMP_FILE])
3038 AC_TRY_COMPILE([
3039 #include <sys/types.h>
3040 #include <utmp.h>
3041 #ifdef HAVE_PATHS_H
3042 #  include <paths.h>
3043 #endif
3044         ],
3045         [ char *wtmp = WTMP_FILE; ],
3046         [ AC_MSG_RESULT(yes) ],
3047         [ AC_MSG_RESULT(no)
3048           system_wtmp_path=no ]
3049 )
3050 if test -z "$conf_wtmp_location"; then
3051         if test x"$system_wtmp_path" = x"no" ; then
3052                 for f in /usr/adm/wtmp /var/log/wtmp; do
3053                         if test -f $f ; then
3054                                 conf_wtmp_location=$f
3055                         fi
3056                 done
3057                 if test -z "$conf_wtmp_location"; then
3058                         AC_DEFINE(DISABLE_WTMP)
3059                 fi
3060         fi
3061 fi
3062 if test -n "$conf_wtmp_location"; then
3063         AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location")
3064 fi
3065
3066
3067 dnl utmpx detection - I don't know any system so perverse as to require
3068 dnl  utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3069 dnl  there, though.
3070 AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3071 AC_TRY_COMPILE([
3072 #include <sys/types.h>
3073 #include <utmp.h>
3074 #ifdef HAVE_UTMPX_H
3075 #include <utmpx.h>
3076 #endif
3077 #ifdef HAVE_PATHS_H
3078 #  include <paths.h>
3079 #endif
3080         ],
3081         [ char *utmpx = UTMPX_FILE; ],
3082         [ AC_MSG_RESULT(yes) ],
3083         [ AC_MSG_RESULT(no)
3084           system_utmpx_path=no ]
3085 )
3086 if test -z "$conf_utmpx_location"; then
3087         if test x"$system_utmpx_path" = x"no" ; then
3088                 AC_DEFINE(DISABLE_UTMPX)
3089         fi
3090 else
3091         AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location")
3092 fi
3093
3094 dnl wtmpx detection
3095 AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3096 AC_TRY_COMPILE([
3097 #include <sys/types.h>
3098 #include <utmp.h>
3099 #ifdef HAVE_UTMPX_H
3100 #include <utmpx.h>
3101 #endif
3102 #ifdef HAVE_PATHS_H
3103 #  include <paths.h>
3104 #endif
3105         ],
3106         [ char *wtmpx = WTMPX_FILE; ],
3107         [ AC_MSG_RESULT(yes) ],
3108         [ AC_MSG_RESULT(no)
3109           system_wtmpx_path=no ]
3110 )
3111 if test -z "$conf_wtmpx_location"; then
3112         if test x"$system_wtmpx_path" = x"no" ; then
3113                 AC_DEFINE(DISABLE_WTMPX)
3114         fi
3115 else
3116         AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location")
3117 fi
3118
3119
3120 if test ! -z "$blibpath" ; then
3121         LDFLAGS="$LDFLAGS $blibflags$blibpath"
3122         AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
3123 fi
3124
3125 dnl remove pam and dl because they are in $LIBPAM
3126 if test "$PAM_MSG" = yes ; then
3127         LIBS=`echo $LIBS | sed 's/-lpam //'`
3128 fi
3129 if test "$ac_cv_lib_pam_pam_set_item" = yes ; then
3130         LIBS=`echo $LIBS | sed 's/-ldl //'`
3131 fi
3132
3133 AC_EXEEXT
3134 AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openbsd-compat/Makefile \
3135         scard/Makefile ssh_prng_cmds survey.sh])
3136 AC_OUTPUT
3137
3138 # Print summary of options
3139
3140 # Someone please show me a better way :)
3141 A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3142 B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3143 C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3144 D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
3145 E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
3146 F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
3147 G=`eval echo ${piddir}` ; G=`eval echo ${G}`
3148 H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3149 I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3150 J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
3151
3152 echo ""
3153 echo "OpenSSH has been configured with the following options:"
3154 echo "                     User binaries: $B"
3155 echo "                   System binaries: $C"
3156 echo "               Configuration files: $D"
3157 echo "                   Askpass program: $E"
3158 echo "                      Manual pages: $F"
3159 echo "                          PID file: $G"
3160 echo "  Privilege separation chroot path: $H"
3161 if test "x$external_path_file" = "x/etc/login.conf" ; then
3162 echo "   At runtime, sshd will use the path defined in $external_path_file"
3163 echo "   Make sure the path to scp is present, otherwise scp will not work"
3164 else
3165 echo "            sshd default user PATH: $I"
3166         if test ! -z "$external_path_file"; then
3167 echo "   (If PATH is set in $external_path_file it will be used instead. If"
3168 echo "   used, ensure the path to scp is present, otherwise scp will not work.)"
3169         fi
3170 fi
3171 if test ! -z "$superuser_path" ; then
3172 echo "          sshd superuser user PATH: $J"
3173 fi
3174 echo "                    Manpage format: $MANTYPE"
3175 echo "                       PAM support: $PAM_MSG"
3176 echo "                 KerberosV support: $KRB5_MSG"
3177 echo "                 Smartcard support: $SCARD_MSG"
3178 echo "                     S/KEY support: $SKEY_MSG"
3179 echo "              TCP Wrappers support: $TCPW_MSG"
3180 echo "              MD5 password support: $MD5_MSG"
3181 echo "                   libedit support: $LIBEDIT_MSG"
3182 echo "       IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
3183 echo "           Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3184 echo "                  BSD Auth support: $BSD_AUTH_MSG"
3185 echo "              Random number source: $RAND_MSG"
3186 if test ! -z "$USE_RAND_HELPER" ; then
3187 echo "     ssh-rand-helper collects from: $RAND_HELPER_MSG"
3188 fi
3189
3190 echo ""
3191
3192 echo "              Host: ${host}"
3193 echo "          Compiler: ${CC}"
3194 echo "    Compiler flags: ${CFLAGS}"
3195 echo "Preprocessor flags: ${CPPFLAGS}"
3196 echo "      Linker flags: ${LDFLAGS}"
3197 echo "         Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
3198
3199 echo ""
3200
3201 if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
3202         echo "SVR4 style packages are supported with \"make package\""
3203         echo ""
3204 fi
3205
3206 if test "x$PAM_MSG" = "xyes" ; then
3207         echo "PAM is enabled. You may need to install a PAM control file "
3208         echo "for sshd, otherwise password authentication may fail. "
3209         echo "Example PAM control files can be found in the contrib/ "
3210         echo "subdirectory"
3211         echo ""
3212 fi
3213
3214 if test ! -z "$RAND_HELPER_CMDHASH" ; then
3215         echo "WARNING: you are using the builtin random number collection "
3216         echo "service. Please read WARNING.RNG and request that your OS "
3217         echo "vendor includes kernel-based random number collection in "
3218         echo "future versions of your OS."
3219         echo ""
3220 fi
3221
3222 if test ! -z "$NO_PEERCHECK" ; then
3223         echo "WARNING: the operating system that you are using does not "
3224         echo "appear to support either the getpeereid() API nor the "
3225         echo "SO_PEERCRED getsockopt() option. These facilities are used to "
3226         echo "enforce security checks to prevent unauthorised connections to "
3227         echo "ssh-agent. Their absence increases the risk that a malicious "
3228         echo "user can connect to your agent. "
3229         echo ""
3230 fi
3231
3232 if test "$AUDIT_MODULE" = "bsm" ; then
3233         echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
3234         echo "See the Solaris section in README.platform for details."
3235 fi