configure.in

   1 AC_INIT(ssh.c)
   2
   3 AC_CONFIG_HEADER(config.h)
   4 AC_CANONICAL_HOST
   5
   6 # C Compiler features
   7 if test "$GCC" = "yes"; then CFLAGS="$CFLAGS -Wall"; fi
   8 AC_C_INLINE
   9
  10 # Checks for programs.
  11 AC_PROG_CC
  12 AC_PROG_CPP
  13 AC_PROG_RANLIB
  14 AC_PROG_INSTALL
  15 AC_CHECK_PROG(AR, ar, ar)
  16 AC_PATH_PROG(PERL, perl)
  17 AC_SUBST(PERL)
  18
  19 # Check for some target-specific stuff
  20 case "$host" in
  21 *-*-aix*)
  22         AFS_LIBS="-lld"
  23         AC_DEFINE(BROKEN_GETADDRINFO)
  24         ;;
  25 *-*-hpux10*)
  26         if test -z "$GCC"; then
  27                 CFLAGS="$CFLAGS -Aa"
  28         fi
  29         CFLAGS="$CFLAGS -D_HPUX_SOURCE"
  30         AC_DEFINE(IPADDR_IN_DISPLAY)
  31         AC_DEFINE(USE_UTMPX)
  32         AC_MSG_CHECKING(for HPUX trusted system password database)
  33         if test -f /tcb/files/auth/system/default; then
  34                 AC_MSG_RESULT(yes)
  35                 AC_DEFINE(HAVE_HPUX_TRUSTED_SYSTEM_PW)
  36                 LIBS="$LIBS -lsec"
  37                 AC_MSG_WARN([This configuration is untested])
  38         else
  39                 AC_MSG_RESULT(no)
  40                 AC_DEFINE(DISABLE_SHADOW)
  41         fi
  42         MANTYPE='$(CATMAN)'
  43         mansubdir=cat
  44         ;;
  45 *-*-irix5*)
  46         MANTYPE='$(CATMAN)'
  47         no_libsocket=1
  48         no_libnsl=1
  49         ;;
  50 *-*-irix6*)
  51         MANTYPE='$(CATMAN)'
  52         AC_MSG_WARN([*** Irix 6.x is not tested, please report you experiences *** ])
  53         no_libsocket=1
  54         no_libnsl=1
  55         ;;
  56 *-*-linux*)
  57         no_dev_ptmx=1
  58         need_pty_removed_on_close=1
  59         ;;
  60 *-*-netbsd*)
  61         need_dash_r=1
  62         ;;
  63 *-*-solaris*)
  64         need_dash_r=1
  65         AC_DEFINE(USE_UTMPX)
  66         ;;
  67 *-*-sysv*)
  68         AC_DEFINE(USE_UTMPX)
  69         MANTYPE='$(CATMAN)'
  70         mansubdir=cat
  71         LIBS="$LIBS -lgen -lsocket"
  72         ;;
  73 esac
  74
  75 # Checks for libraries.
  76 AC_CHECK_LIB(z, deflate, ,AC_MSG_ERROR([*** zlib missing - please install first ***]))
  77 AC_CHECK_LIB(util, login, AC_DEFINE(HAVE_LIBUTIL_LOGIN) LIBS="$LIBS -lutil")
  78
  79 if test -z "$no_libsocket" ; then
  80         AC_CHECK_LIB(nsl, yp_match, , )
  81 fi
  82 if test -z "$no_libnsl" ; then
  83         AC_CHECK_LIB(socket, main, , )
  84 fi
  85
  86 # Checks for header files.
  87 AC_CHECK_HEADERS(bstring.h endian.h lastlog.h login.h maillock.h netdb.h netgroup.h paths.h poll.h pty.h shadow.h security/pam_appl.h sys/bitypes.h sys/bsdtty.h sys/cdefs.h sys/poll.h sys/select.h sys/stropts.h sys/sysmacros.h sys/time.h sys/ttcompat.h stddef.h util.h utmp.h utmpx.h)
  88
  89 # Checks for library functions.
  90 AC_CHECK_FUNCS(arc4random bindresvport_af freeaddrinfo gai_strerror getaddrinfo getpagesize getnameinfo innetgr md5_crypt mkdtemp openpty rresvport_af setenv seteuid setlogin setproctitle setreuid snprintf strlcat strlcpy updwtmpx vsnprintf _getpty)
  91
  92 AC_CHECK_FUNC(login,
  93         [AC_DEFINE(HAVE_LOGIN)],
  94         [AC_CHECK_LIB(bsd, login, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_LOGIN)])]
  95 )
  96
  97 AC_CHECK_FUNC(daemon,
  98         [AC_DEFINE(HAVE_DAEMON)],
  99         [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
 100 )
 101
 102 AC_ARG_WITH(pam,
 103         [  --without-pam           Disable PAM support ],
 104         [
 105                 if test "x$withval" = "xno" ; then
 106                         no_pam=1
 107                         AC_DEFINE(DISABLE_PAM)
 108                 fi
 109         ]
 110 )
 111 if test -z "$no_pam" -a "x$ac_cv_header_security_pam_appl_h" = "xyes" ; then
 112         AC_CHECK_LIB(dl, dlopen, , )
 113         LIBS="$LIBS -lpam"
 114
 115         # Check PAM strerror arguments (old PAM)
 116         AC_MSG_CHECKING([whether pam_strerror takes only one argument])
 117         AC_TRY_COMPILE(
 118                 [
 119                         #include <stdlib.h>
 120                         #include <security/pam_appl.h>
 121                 ],
 122                 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
 123                 [AC_MSG_RESULT(no)],
 124                 [
 125                         AC_DEFINE(HAVE_OLD_PAM)
 126                         AC_MSG_RESULT(yes)
 127                 ]
 128         )
 129 fi
 130
 131 # The big search for OpenSSL
 132 AC_ARG_WITH(ssl-dir,
 133         [  --with-ssl-dir=PATH     Specify path to OpenSSL installation ],
 134         [
 135                 if test "x$withval" != "$xno" ; then
 136                         tryssldir=$withval
 137                 fi
 138         ]
 139 )
 140
 141 saved_LIBS="$LIBS"
 142 saved_CFLAGS="$CFLAGS"
 143 if test "x$prefix" != "xNONE" ; then
 144         tryssldir="$tryssldir $prefix"
 145 fi
 146 AC_MSG_CHECKING([for OpenSSL/SSLeay directory])
 147 for ssldir in "" $tryssldir /usr /usr/local/openssl /usr/lib/openssl /usr/local/ssl /usr/lib/ssl /usr/local /usr/pkg /opt /opt/openssl ; do
 148         if test ! -z "$ssldir" ; then
 149                 LIBS="$saved_LIBS -L$ssldir"
 150                 CFLAGS="$CFLAGS -I$ssldir/include"
 151                 if test "x$need_dash_r" = "x1" ; then
 152                         LIBS="$LIBS -R$ssldir"
 153                 fi
 154         fi
 155         LIBS="$LIBS -lcrypto"
 156
 157         AC_TRY_RUN(
 158                 [
 159                         #include <openssl/rsa.h>
 160                         #include <openssl/bn.h>
 161                         #include <openssl/sha.h>
 162                         int main(void)
 163                         {RSA *key; char seed[2048];memset(seed, 0, sizeof(seed));
 164                         RAND_seed(seed, sizeof(seed));key=RSA_generate_key(32,3,NULL,NULL);
 165                         return(key==NULL);}
 166                 ],
 167                 [
 168                         AC_DEFINE(HAVE_OPENSSL)
 169                         found_crypto=1
 170                         break;
 171                 ], []
 172         )
 173         AC_TRY_RUN(
 174                 [
 175                         #include <ssl/rsa.h>
 176                         #include <ssl/bn.h>
 177                         #include <ssl/sha.h>
 178                         int main(void)
 179                         {RSA *key; char seed[2048];memset(seed, 0, sizeof(seed));
 180                         RAND_seed(seed, sizeof(seed));key=RSA_generate_key(32,3,NULL,NULL);
 181                         return(key==NULL);}
 182                 ],
 183                 [
 184                         AC_DEFINE(HAVE_SSL)
 185                         found_crypto=1
 186                         break;
 187                 ], []
 188         )
 189 done
 190
 191 if test -z "$found_crypto" ; then
 192         AC_MSG_ERROR([Could not find working SSLeay / OpenSSL libraries, please install])
 193 fi
 194 if test -z "$ssldir" ; then
 195         ssldir="(system)"
 196 else
 197         CFLAGS="$CFLAGS -I$ssldir/include"
 198         LDFLAGS="$LDFLAGS -L$ssldir/lib"
 199         if test "x$need_dash_r" = "x1" ; then
 200                 LDFLAGS="$LDFLAGS -R$ssldir"
 201         fi
 202 fi
 203 LIBS="$saved_LIBS -lcrypto"
 204 AC_MSG_RESULT($ssldir)
 205
 206 # Checks for data types
 207 AC_CHECK_SIZEOF(char, 1)
 208 AC_CHECK_SIZEOF(short int, 2)
 209 AC_CHECK_SIZEOF(int, 4)
 210 AC_CHECK_SIZEOF(long int, 4)
 211 AC_CHECK_SIZEOF(long long int, 8)
 212
 213 # More checks for data types
 214 AC_MSG_CHECKING([for intXX_t types])
 215 AC_TRY_COMPILE(
 216         [#include <sys/types.h>],
 217         [int16_t a; int32_t b; a = 1235; b = 1235;],
 218         [
 219                 AC_DEFINE(HAVE_INTXX_T)
 220                 AC_MSG_RESULT(yes)
 221                 have_intxx_t=1
 222         ],
 223         [AC_MSG_RESULT(no)]
 224 )
 225
 226 AC_MSG_CHECKING([for u_intXX_t types])
 227 AC_TRY_COMPILE(
 228         [#include <sys/types.h>],
 229         [u_int16_t c; u_int32_t d; c = 1235; d = 1235;],
 230         [
 231                 AC_DEFINE(HAVE_U_INTXX_T)
 232                 AC_MSG_RESULT(yes)
 233                 have_u_intxx_t=1
 234         ],
 235         [AC_MSG_RESULT(no)]
 236 )
 237
 238 if test -z "$have_u_intxx_t" -o -z "$have_intxx_t" -a \
 239            "x$ac_cv_header_sys_bitypes_h" = "xyes"
 240 then
 241         AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
 242         AC_TRY_COMPILE(
 243                 [#include <sys/bitypes.h>],
 244                 [
 245                         u_int16_t c; u_int32_t d;
 246                         int16_t e; int32_t f;
 247                         c = 1235; d = 1235;
 248                         e = 1235; f = 1235;
 249                 ],
 250                 [
 251                         AC_DEFINE(HAVE_U_INTXX_T)
 252                         AC_DEFINE(HAVE_INTXX_T)
 253                         AC_MSG_RESULT(yes)
 254                 ],
 255                 [AC_MSG_RESULT(no)]
 256         )
 257 fi
 258
 259 AC_MSG_CHECKING([for uintXX_t types])
 260 AC_TRY_COMPILE(
 261         [#include <sys/types.h>],
 262         [uint16_t c; uint32_t d; c = 1235; d = 1235;],
 263         [
 264                 AC_DEFINE(HAVE_UINTXX_T)
 265                 AC_MSG_RESULT(yes)
 266         ],
 267         [AC_MSG_RESULT(no)]
 268 )
 269
 270 AC_MSG_CHECKING([for socklen_t])
 271 AC_TRY_COMPILE(
 272         [
 273                 #include <sys/types.h>
 274                 #include <sys/socket.h>
 275         ],
 276         [socklen_t foo; foo = 1235;],
 277         [
 278                 AC_DEFINE(HAVE_SOCKLEN_T)
 279                 AC_MSG_RESULT(yes)
 280         ],
 281         [AC_MSG_RESULT(no)]
 282 )
 283
 284 AC_MSG_CHECKING([for size_t])
 285 AC_TRY_COMPILE(
 286         [#include <sys/types.h>],
 287         [size_t foo; foo = 1235;],
 288         [
 289                 AC_DEFINE(HAVE_SIZE_T)
 290                 AC_MSG_RESULT(yes)
 291         ],
 292         [AC_MSG_RESULT(no)]
 293 )
 294
 295 AC_MSG_CHECKING([for struct sockaddr_storage])
 296 AC_TRY_COMPILE(
 297         [
 298                 #include <sys/types.h>
 299                 #include <sys/socket.h>
 300         ],
 301         [struct sockaddr_storage s;],
 302         [
 303                 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE)
 304                 AC_MSG_RESULT(yes)
 305         ],
 306         [AC_MSG_RESULT(no)]
 307 )
 308
 309 AC_MSG_CHECKING([for struct sockaddr_in6])
 310 AC_TRY_COMPILE(
 311         [#include <netinet/in.h>],
 312         [struct sockaddr_in6 s; s.sin6_family = 0;],
 313         [
 314                 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6)
 315                 AC_MSG_RESULT(yes)
 316         ],
 317         [AC_MSG_RESULT(no)]
 318 )
 319
 320 AC_MSG_CHECKING([for struct in6_addr])
 321 AC_TRY_COMPILE(
 322         [#include <netinet/in.h>],
 323         [struct in6_addr s; s.s6_addr[0] = 0;],
 324         [
 325                 AC_DEFINE(HAVE_STRUCT_IN6_ADDR)
 326                 AC_MSG_RESULT(yes)
 327         ],
 328         [AC_MSG_RESULT(no)]
 329 )
 330
 331 AC_MSG_CHECKING([for struct addrinfo])
 332 AC_TRY_COMPILE(
 333         [
 334                 #include <sys/types.h>
 335                 #include <sys/socket.h>
 336                 #include <netdb.h>
 337         ],
 338         [struct addrinfo s; s.ai_flags = AI_PASSIVE;],
 339         [
 340                 AC_DEFINE(HAVE_STRUCT_ADDRINFO)
 341                 AC_MSG_RESULT(yes)
 342         ],
 343         [AC_MSG_RESULT(no)]
 344 )
 345
 346 # Checks for structure members
 347 AC_MSG_CHECKING([whether utmp.h has ut_host field])
 348 AC_EGREP_HEADER(ut_host, utmp.h,
 349         [AC_DEFINE(HAVE_HOST_IN_UTMP) AC_MSG_RESULT(yes); ],
 350         [AC_MSG_RESULT(no)]
 351 )
 352 AC_MSG_CHECKING([whether utmpx.h has ut_host field])
 353 AC_EGREP_HEADER(ut_host, utmpx.h,
 354         [AC_DEFINE(HAVE_HOST_IN_UTMPX) AC_MSG_RESULT(yes); ],
 355         [AC_MSG_RESULT(no)]
 356 )
 357 AC_MSG_CHECKING([whether utmpx.h has syslen field])
 358 AC_EGREP_HEADER(syslen, utmpx.h,
 359         [AC_DEFINE(HAVE_SYSLEN_IN_UTMPX) AC_MSG_RESULT(yes); ],
 360         [AC_MSG_RESULT(no)]
 361 )
 362 AC_MSG_CHECKING([whether utmp.h has ut_pid field])
 363 AC_EGREP_HEADER(ut_pid, utmp.h,
 364         [AC_DEFINE(HAVE_PID_IN_UTMP) AC_MSG_RESULT(yes); ],
 365         [AC_MSG_RESULT(no)]
 366 )
 367 AC_MSG_CHECKING([whether utmp.h has ut_type field])
 368 AC_EGREP_HEADER(ut_type, utmp.h,
 369         [AC_DEFINE(HAVE_TYPE_IN_UTMP) AC_MSG_RESULT(yes); ],
 370         [AC_MSG_RESULT(no)]
 371 )
 372 AC_MSG_CHECKING([whether utmp.h has ut_tv field])
 373 AC_EGREP_HEADER(ut_tv, utmp.h,
 374         [AC_DEFINE(HAVE_TV_IN_UTMP) AC_MSG_RESULT(yes); ],
 375         [AC_MSG_RESULT(no)]
 376 )
 377 AC_MSG_CHECKING([whether utmp.h has ut_id field])
 378 AC_EGREP_HEADER(ut_id, utmp.h,
 379         [AC_DEFINE(HAVE_ID_IN_UTMP) AC_MSG_RESULT(yes); ],
 380         [AC_MSG_RESULT(no)]
 381 )
 382 AC_MSG_CHECKING([whether utmp.h has ut_addr field])
 383 AC_EGREP_HEADER(ut_addr, utmp.h,
 384         [AC_DEFINE(HAVE_ADDR_IN_UTMP) AC_MSG_RESULT(yes); ],
 385         [AC_MSG_RESULT(no)]
 386 )
 387 AC_MSG_CHECKING([whether utmpx.h has ut_addr field])
 388 AC_EGREP_HEADER(ut_addr, utmpx.h,
 389         [AC_DEFINE(HAVE_ADDR_IN_UTMPX) AC_MSG_RESULT(yes); ],
 390         [AC_MSG_RESULT(no)]
 391 )
 392 AC_MSG_CHECKING([whether utmp.h has ut_addr_v6 field])
 393 AC_EGREP_HEADER(ut_addr_v6, utmp.h,
 394         [AC_DEFINE(HAVE_ADDR_V6_IN_UTMP) AC_MSG_RESULT(yes); ],
 395         [AC_MSG_RESULT(no)]
 396 )
 397 AC_MSG_CHECKING([whether utmpx.h has ut_addr_v6 field])
 398 AC_EGREP_HEADER(ut_addr_v6, utmpx.h,
 399         [AC_DEFINE(HAVE_ADDR_V6_IN_UTMPX) AC_MSG_RESULT(yes); ],
 400         [AC_MSG_RESULT(no)]
 401 )
 402
 403 AC_MSG_CHECKING([whether struct sockaddr_storage has ss_family field])
 404 AC_TRY_COMPILE(
 405         [
 406                 #include <sys/types.h>
 407                 #include <sys/socket.h>
 408         ],
 409         [struct sockaddr_storage s; s.ss_family = 1;],
 410         [
 411                 AC_DEFINE(HAVE_SS_FAMILY_IN_SS)
 412                 AC_MSG_RESULT(yes)
 413         ],
 414         [AC_MSG_RESULT(no)]
 415 )
 416 AC_MSG_CHECKING([whether struct sockaddr_storage has __ss_family field])
 417 AC_TRY_COMPILE(
 418         [
 419                 #include <sys/types.h>
 420                 #include <sys/socket.h>
 421         ],
 422         [struct sockaddr_storage s; s.__ss_family = 1;],
 423         [
 424                 AC_DEFINE(HAVE___SS_FAMILY_IN_SS)
 425                 AC_MSG_RESULT(yes)
 426         ],
 427         [AC_MSG_RESULT(no)]
 428 )
 429
 430 AC_MSG_CHECKING([whether libc defines __progname])
 431 AC_TRY_LINK([],
 432         [extern char *__progname; printf("%s", __progname);],
 433         [
 434                 AC_DEFINE(HAVE___PROGNAME)
 435                 AC_MSG_RESULT(yes)
 436         ],
 437         [
 438                 AC_MSG_RESULT(no)
 439         ]
 440 )
 441
 442 # Looking for programs, paths and files
 443 AC_ARG_WITH(rsh,
 444         [  --with-rsh=PATH         Specify path to remote shell program ],
 445         [
 446                 if test "x$withval" != "$xno" ; then
 447                         AC_DEFINE_UNQUOTED(RSH_PATH, "$withval")
 448                 fi
 449         ],
 450         [
 451                 AC_PATH_PROG(rsh_path, rsh)
 452         ]
 453 )
 454
 455 AC_ARG_WITH(xauth,
 456         [  --with-xauth=PATH       Specify path to xauth program ],
 457         [
 458                 if test "x$withval" != "$xno" ; then
 459                         AC_DEFINE_UNQUOTED(XAUTH_PATH, "$withval")
 460                 fi
 461         ],
 462         [
 463                 AC_PATH_PROG(xauth_path, xauth)
 464                 if test ! -z "$xauth_path" -a -x "/usr/openwin/bin/xauth" ; then
 465                         xauth_path="/usr/openwin/bin/xauth"
 466                 fi
 467         ]
 468 )
 469
 470 if test ! -z "$xauth_path" ; then
 471         AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path")
 472 fi
 473 if test ! -z "$rsh_path" ; then
 474         AC_DEFINE_UNQUOTED(RSH_PATH, "$rsh_path")
 475 fi
 476
 477 # Check for mail directory (last resort if we cannot get it from headers)
 478 if test ! -z "$MAIL" ; then
 479         maildir=`dirname $MAIL`
 480         AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir")
 481 fi
 482
 483 # Look for lastlog location
 484 AC_ARG_WITH(lastlog,
 485         [  --with-lastlog=FILE     Location of lastlog file],
 486         [
 487                 if test "x$withval" = "xno" ; then
 488                         AC_DEFINE(DISABLE_LASTLOG)
 489                 else
 490                         AC_DEFINE_UNQUOTED(LASTLOG_LOCATION, "$withval")
 491                 fi
 492         ],
 493         [
 494                 AC_MSG_CHECKING([location of lastlog file])
 495                 for lastlog in /var/log/lastlog /var/adm/lastlog /usr/adm/lastlog  /etc/security/lastlog ; do
 496                         if test -f $lastlog ; then
 497                                 gotlastlog="file"
 498                                 break
 499                         fi
 500                         if test -d $lastlog ; then
 501                                 gotlastlog="dir"
 502                                 break
 503                         fi
 504                 done
 505                 if test -z "$gotlastlog" ; then
 506                         AC_MSG_RESULT(not found)
 507                         nolastlog=1
 508                 else
 509                         if test "x$gotlastlog" = "xdir" ; then
 510                                 AC_MSG_RESULT(${lastlog}/)
 511                                 AC_DEFINE(LASTLOG_IS_DIR)
 512                         else
 513                                 AC_MSG_RESULT($lastlog)
 514                                 AC_DEFINE_UNQUOTED(LASTLOG_LOCATION, "$lastlog")
 515                         fi
 516                 fi
 517         ]
 518 )
 519
 520 if test ! -z "$nolastlog" ; then
 521         AC_MSG_WARN([*** Disabling lastlog support *** ])
 522         AC_DEFINE(DISABLE_LASTLOG)
 523 fi
 524
 525 if test -z "$no_dev_ptmx" ; then
 526         AC_CHECK_FILE("/dev/ptmx",
 527                 [
 528                         AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX)
 529                         have_dev_ptmx=1
 530                 ]
 531         )
 532 fi
 533 AC_CHECK_FILE("/dev/ptc",
 534         [
 535                 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC)
 536                 have_dev_ptc=1
 537         ]
 538 )
 539
 540 # Some systems (defined in platform-specific code above) automagically remove
 541 # Unix98 ptys when they are closed
 542 if test "x$ac_cv_func_openpty" = "xyes" -o "x$have_dev_ptmx" = "x1" -o "x$have_dev_ptc" = "x1" ; then
 543         if test "x$need_pty_removed_on_close" = "x1" ; then
 544                 AC_DEFINE(PTY_REMOVED_ON_CLOSE)
 545         fi
 546 fi
 547
 548 # Options from here on. Some of these are preset by platform above
 549
 550 # Check whether user wants GNOME ssh-askpass
 551 AC_MSG_CHECKING([whether to build GNOME ssh-askpass])
 552 AC_ARG_WITH(gnome-askpass,
 553         [  --with-gnome-askpass    Build the GNOME passphrase requester (default=no)],
 554         [
 555                 if test x$withval = xno ; then
 556                         GNOME_ASKPASS="";
 557                 else
 558                         GNOME_ASKPASS="gnome-ssh-askpass";
 559                 fi
 560         ])
 561 AC_SUBST(GNOME_ASKPASS)
 562
 563 if test -z "$GNOME_ASKPASS" ; then
 564         AC_MSG_RESULT(no)
 565 else
 566         AC_MSG_RESULT(yes)
 567 fi
 568
 569 # Check for user-specified random device, otherwise check /dev/urandom
 570 AC_ARG_WITH(random,
 571         [  --with-random=FILE      read randomness from FILE (default=/dev/urandom)],
 572         [
 573                 RANDOM_POOL="$withval";
 574                 AC_DEFINE_UNQUOTED(RANDOM_POOL, "$RANDOM_POOL")
 575         ],
 576         [
 577                 # Check for random device
 578                 AC_CHECK_FILE("/dev/urandom",
 579                         [
 580                                 RANDOM_POOL="/dev/urandom";
 581                                 AC_SUBST(RANDOM_POOL)
 582                                 AC_DEFINE_UNQUOTED(RANDOM_POOL, "$RANDOM_POOL")
 583                         ]
 584                 )
 585         ]
 586 )
 587
 588 # Check for EGD pool file
 589 AC_ARG_WITH(egd-pool,
 590         [  --with-egd-pool=FILE    read randomness from EGD pool FILE (default none)],
 591         [
 592                 RANDOM_POOL="$withval";
 593                 AC_DEFINE(HAVE_EGD)
 594                 AC_SUBST(RANDOM_POOL)
 595                 AC_DEFINE_UNQUOTED(RANDOM_POOL, "$RANDOM_POOL")
 596         ]
 597 )
 598
 599 # Make sure we have some random number support
 600 if test -z "$RANDOM_POOL" -a -z "$EGD_POOL"; then
 601         AC_MSG_ERROR([No random device found, and no EGD random pool specified])
 602 fi
 603
 604 AC_ARG_WITH(catman,
 605         [  --with-catman=man|cat   Install preformatted manpages[no]],
 606         [
 607                 MANTYPE='$(CATMAN)'
 608                 if test x"$withval" != x"yes" ; then
 609                    mansubdir=$withval
 610                 else
 611                    mansubdir=cat
 612                 fi
 613         ], [
 614                 if test -z "$MANTYPE" ; then
 615                         MANTYPE='$(TROFFMAN)'
 616                         mansubdir=man
 617                 fi
 618         ]
 619 )
 620 AC_SUBST(MANTYPE)
 621 AC_SUBST(mansubdir)
 622
 623 # Check whether user wants Kerberos support
 624 AC_ARG_WITH(kerberos4,
 625         [  --with-kerberos4=PATH   Enable Kerberos 4 support],
 626         [
 627                 if test "x$withval" != "$xno" ; then
 628
 629                         if test "x$withval" != "$xyes" ; then
 630                                 CFLAGS="$CFLAGS -I${withval}/include"
 631                                 LDFLAGS="$LDFLAGS -L${withval}/lib"
 632                         else
 633                                 if test -d /usr/include/kerberosIV ; then
 634                                         CFLAGS="$CFLAGS -I/usr/include/kerberosIV"
 635                                 fi
 636                         fi
 637
 638                         AC_CHECK_HEADERS(krb.h)
 639                         AC_CHECK_LIB(krb, main)
 640                         if test "$ac_cv_header_krb_h" != yes; then
 641                                 AC_MSG_WARN([Cannot find krb.h, build may fail])
 642                         fi
 643                         if test "$ac_cv_lib_krb_main" != yes; then
 644                                 AC_MSG_WARN([Cannot find libkrb, build may fail])
 645                         fi
 646
 647                         KLIBS="-lkrb -ldes"
 648                         AC_CHECK_LIB(resolv, dn_expand, , )
 649                         KRB4=yes
 650                         AC_DEFINE(KRB4)
 651                 fi
 652         ]
 653 )
 654
 655 # Check whether user wants AFS support
 656 AC_ARG_WITH(afs,
 657         [  --with-afs=PATH         Enable AFS support],
 658         [
 659                 if test "x$withval" != "$xno" ; then
 660
 661                         if test "x$withval" != "$xyes" ; then
 662                                 CFLAGS="$CFLAGS -I${withval}/include"
 663                                 LFLAGS="$LFLAGS -L${withval}/lib"
 664                         fi
 665
 666                         if test -z "$KRB4" ; then
 667                                 AC_MSG_WARN([AFS requires Kerberos IV support, build may fail])
 668                         fi
 669
 670                         LIBS="$LIBS -lkafs"
 671                         if test ! -z "$AFS_LIBS" ; then
 672                                 LIBS="$LIBS $AFS_LIBS"
 673                         fi
 674                         AC_DEFINE(AFS)
 675                 fi
 676         ]
 677 )
 678 LIBS="$LIBS $KLIBS"
 679
 680 # Check whether user wants S/Key support
 681 AC_ARG_WITH(skey,
 682         [  --with-skey             Enable S/Key support],
 683         [
 684                 if test "x$withval" != "$xno" ; then
 685                         AC_DEFINE(SKEY)
 686                         LIBS="$LIBS -lskey"
 687                 fi
 688         ]
 689 )
 690
 691 # Check whether user wants TCP wrappers support
 692 AC_ARG_WITH(tcp-wrappers,
 693         [  --with-tcp-wrappers     Enable tcpwrappers support],
 694         [
 695                 if test "x$withval" != "$xno" ; then
 696                         AC_DEFINE(LIBWRAP)
 697                         LIBS="$LIBS -lwrap"
 698                 fi
 699         ]
 700 )
 701
 702 # Check whether to enable MD5 passwords
 703 AC_ARG_WITH(md5-passwords,
 704         [  --with-md5-passwords    Enable use of MD5 passwords],
 705         [
 706                 if test "x$withval" != "$xno" ; then
 707                         AC_DEFINE(HAVE_MD5_PASSWORDS)
 708                 fi
 709         ]
 710 )
 711
 712 # Check whether to enable utmpx support
 713 AC_ARG_WITH(utmpx,
 714         [  --with-utmpx            Enable utmpx support],
 715         [
 716                 if test "x$withval" != "xno" ; then
 717                         AC_DEFINE(USE_UTMPX)
 718                 fi
 719         ]
 720 )
 721
 722 # Whether to disable shadow password support
 723 AC_ARG_WITH(shadow,
 724         [  --without-shadow        Disable shadow password support],
 725         [
 726                 if test "x$withval" = "xno" ; then
 727                         AC_DEFINE(DISABLE_SHADOW)
 728                 fi
 729         ]
 730 )
 731
 732 # Use ip address instead of hostname in $DISPLAY
 733 AC_ARG_WITH(ipaddr-display,
 734         [  --with-ipaddr-display   Use ip address instead of hostname in \$DISPLAY],
 735         [
 736                 if test "x$withval" = "xno" ; then
 737                         AC_DEFINE(IPADDR_IN_DISPLAY)
 738                 fi
 739         ]
 740 )
 741
 742 # Whether to mess with the default path
 743 AC_ARG_WITH(default-path,
 744         [  --with-default-path=PATH Specify default \$PATH environment for server],
 745         [
 746                 if test "x$withval" != "xno" ; then
 747                         AC_DEFINE_UNQUOTED(USER_PATH, "$withval")
 748                 fi
 749         ]
 750 )
 751
 752 # Whether to force IPv4 by default (needed on broken glibc Linux)
 753 AC_ARG_WITH(ipv4-default,
 754         [  --with-ipv4-default     Use IPv4 by connections unless '-6' specified],
 755         [
 756                 if test "x$withval" != "xno" ; then
 757                         AC_DEFINE(IPV4_DEFAULT)
 758                 fi
 759         ]
 760 )
 761
 762 # Where to place sshd.pid
 763 piddir=/var/run
 764 AC_ARG_WITH(pid-dir,
 765         [  --with-pid-dir=PATH     Specify location of ssh.pid file],
 766         [
 767                 if test "x$withval" != "xno" ; then
 768                         piddir=$withval
 769                 fi
 770         ]
 771 )
 772 AC_DEFINE_UNQUOTED(PIDDIR, "$piddir")
 773 AC_SUBST(piddir)
 774
 775 AC_OUTPUT(Makefile)