configure.ac

   1 # $Id$
   2 #
   3 # Copyright (c) 1999-2004 Damien Miller
   4 #
   5 # Permission to use, copy, modify, and distribute this software for any
   6 # purpose with or without fee is hereby granted, provided that the above
   7 # copyright notice and this permission notice appear in all copies.
   8 #
   9 # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  10 # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  11 # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  12 # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  13 # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  14 # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  15 # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  16
  17 AC_INIT(OpenSSH, Portable, openssh-unix-dev@mindrot.org)
  18 AC_REVISION($Revision$)
  19 AC_CONFIG_SRCDIR([ssh.c])
  20
  21 AC_CONFIG_HEADER(config.h)
  22 AC_PROG_CC
  23 AC_CANONICAL_HOST
  24 AC_C_BIGENDIAN
  25
  26 # Checks for programs.
  27 AC_PROG_AWK
  28 AC_PROG_CPP
  29 AC_PROG_RANLIB
  30 AC_PROG_INSTALL
  31 AC_PROG_EGREP
  32 AC_PATH_PROG(AR, ar)
  33 AC_PATH_PROG(CAT, cat)
  34 AC_PATH_PROG(KILL, kill)
  35 AC_PATH_PROGS(PERL, perl5 perl)
  36 AC_PATH_PROG(SED, sed)
  37 AC_SUBST(PERL)
  38 AC_PATH_PROG(ENT, ent)
  39 AC_SUBST(ENT)
  40 AC_PATH_PROG(TEST_MINUS_S_SH, bash)
  41 AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
  42 AC_PATH_PROG(TEST_MINUS_S_SH, sh)
  43 AC_PATH_PROG(SH, sh)
  44 AC_SUBST(TEST_SHELL,sh)
  45
  46 dnl for buildpkg.sh
  47 AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
  48         [/usr/sbin${PATH_SEPARATOR}/etc])
  49 AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
  50         [/usr/sbin${PATH_SEPARATOR}/etc])
  51 AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
  52 if test -x /sbin/sh; then
  53         AC_SUBST(STARTUP_SCRIPT_SHELL,/sbin/sh)
  54 else
  55         AC_SUBST(STARTUP_SCRIPT_SHELL,/bin/sh)
  56 fi
  57
  58 # System features
  59 AC_SYS_LARGEFILE
  60
  61 if test -z "$AR" ; then
  62         AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
  63 fi
  64
  65 # Use LOGIN_PROGRAM from environment if possible
  66 if test ! -z "$LOGIN_PROGRAM" ; then
  67         AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM",
  68                 [If your header files don't define LOGIN_PROGRAM,
  69                 then use this (detected) from environment and PATH])
  70 else
  71         # Search for login
  72         AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
  73         if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
  74                 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
  75         fi
  76 fi
  77
  78 AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
  79 if test ! -z "$PATH_PASSWD_PROG" ; then
  80         AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG",
  81                 [Full path of your "passwd" program])
  82 fi
  83
  84 if test -z "$LD" ; then
  85         LD=$CC
  86 fi
  87 AC_SUBST(LD)
  88
  89 AC_C_INLINE
  90
  91 AC_CHECK_DECL(LLONG_MAX, have_llong_max=1, , [#include <limits.h>])
  92
  93 if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
  94         CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wuninitialized"
  95         GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'`
  96         case $GCC_VER in
  97                 1.*) no_attrib_nonnull=1 ;;
  98                 2.8* | 2.9*)
  99                      CFLAGS="$CFLAGS -Wsign-compare"
 100                      no_attrib_nonnull=1
 101                      ;;
 102                 2.*) no_attrib_nonnull=1 ;;
 103                 3.*) CFLAGS="$CFLAGS -Wsign-compare" ;;
 104                 4.*) CFLAGS="$CFLAGS -Wsign-compare -Wno-pointer-sign" ;;
 105                 *) ;;
 106         esac
 107
 108         if test -z "$have_llong_max"; then
 109                 # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
 110                 unset ac_cv_have_decl_LLONG_MAX
 111                 saved_CFLAGS="$CFLAGS"
 112                 CFLAGS="$CFLAGS -std=gnu99"
 113                 AC_CHECK_DECL(LLONG_MAX,
 114                     [have_llong_max=1],
 115                     [CFLAGS="$saved_CFLAGS"],
 116                     [#include <limits.h>]
 117                 )
 118         fi
 119 fi
 120
 121 if test "x$no_attrib_nonnull" != "x1" ; then
 122         AC_DEFINE(HAVE_ATTRIBUTE__NONNULL__, 1, [Have attribute nonnull])
 123 fi
 124
 125 AC_ARG_WITH(rpath,
 126         [  --without-rpath         Disable auto-added -R linker paths],
 127         [
 128                 if test "x$withval" = "xno" ; then
 129                         need_dash_r=""
 130                 fi
 131                 if test "x$withval" = "xyes" ; then
 132                         need_dash_r=1
 133                 fi
 134         ]
 135 )
 136
 137 # Allow user to specify flags
 138 AC_ARG_WITH(cflags,
 139         [  --with-cflags           Specify additional flags to pass to compiler],
 140         [
 141                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 142                     test "x${withval}" != "xyes"; then
 143                         CFLAGS="$CFLAGS $withval"
 144                 fi
 145         ]
 146 )
 147 AC_ARG_WITH(cppflags,
 148         [  --with-cppflags         Specify additional flags to pass to preprocessor] ,
 149         [
 150                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 151                     test "x${withval}" != "xyes"; then
 152                         CPPFLAGS="$CPPFLAGS $withval"
 153                 fi
 154         ]
 155 )
 156 AC_ARG_WITH(ldflags,
 157         [  --with-ldflags          Specify additional flags to pass to linker],
 158         [
 159                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 160                     test "x${withval}" != "xyes"; then
 161                         LDFLAGS="$LDFLAGS $withval"
 162                 fi
 163         ]
 164 )
 165 AC_ARG_WITH(libs,
 166         [  --with-libs             Specify additional libraries to link with],
 167         [
 168                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 169                     test "x${withval}" != "xyes"; then
 170                         LIBS="$LIBS $withval"
 171                 fi
 172         ]
 173 )
 174 AC_ARG_WITH(Werror,
 175         [  --with-Werror           Build main code with -Werror],
 176         [
 177                 if test -n "$withval"  &&  test "x$withval" != "xno"; then
 178                         werror_flags="-Werror"
 179                         if test "x${withval}" != "xyes"; then
 180                                 werror_flags="$withval"
 181                         fi
 182                 fi
 183         ]
 184 )
 185
 186 AC_CHECK_HEADERS( \
 187         bstring.h \
 188         crypt.h \
 189         crypto/sha2.h \
 190         dirent.h \
 191         endian.h \
 192         features.h \
 193         fcntl.h \
 194         floatingpoint.h \
 195         getopt.h \
 196         glob.h \
 197         ia.h \
 198         iaf.h \
 199         limits.h \
 200         login.h \
 201         maillock.h \
 202         ndir.h \
 203         net/if_tun.h \
 204         netdb.h \
 205         netgroup.h \
 206         pam/pam_appl.h \
 207         paths.h \
 208         pty.h \
 209         readpassphrase.h \
 210         rpc/types.h \
 211         security/pam_appl.h \
 212         sha2.h \
 213         shadow.h \
 214         stddef.h \
 215         stdint.h \
 216         string.h \
 217         strings.h \
 218         sys/audit.h \
 219         sys/bitypes.h \
 220         sys/bsdtty.h \
 221         sys/cdefs.h \
 222         sys/dir.h \
 223         sys/mman.h \
 224         sys/ndir.h \
 225         sys/prctl.h \
 226         sys/pstat.h \
 227         sys/select.h \
 228         sys/stat.h \
 229         sys/stream.h \
 230         sys/stropts.h \
 231         sys/strtio.h \
 232         sys/sysmacros.h \
 233         sys/time.h \
 234         sys/timers.h \
 235         sys/un.h \
 236         time.h \
 237         tmpdir.h \
 238         ttyent.h \
 239         ucred.h \
 240         unistd.h \
 241         usersec.h \
 242         util.h \
 243         utime.h \
 244         utmp.h \
 245         utmpx.h \
 246         vis.h \
 247 )
 248
 249 # lastlog.h requires sys/time.h to be included first on Solaris
 250 AC_CHECK_HEADERS(lastlog.h, [], [], [
 251 #ifdef HAVE_SYS_TIME_H
 252 # include <sys/time.h>
 253 #endif
 254 ])
 255
 256 # sys/ptms.h requires sys/stream.h to be included first on Solaris
 257 AC_CHECK_HEADERS(sys/ptms.h, [], [], [
 258 #ifdef HAVE_SYS_STREAM_H
 259 # include <sys/stream.h>
 260 #endif
 261 ])
 262
 263 # login_cap.h requires sys/types.h on NetBSD
 264 AC_CHECK_HEADERS(login_cap.h, [], [], [
 265 #include <sys/types.h>
 266 ])
 267
 268 # Messages for features tested for in target-specific section
 269 SIA_MSG="no"
 270 SPC_MSG="no"
 271
 272 # Check for some target-specific stuff
 273 case "$host" in
 274 *-*-aix*)
 275         # Some versions of VAC won't allow macro redefinitions at
 276         # -qlanglevel=ansi, and autoconf 2.60 sometimes insists on using that
 277         # particularly with older versions of vac or xlc.
 278         # It also throws errors about null macro argments, but these are
 279         # not fatal.
 280         AC_MSG_CHECKING(if compiler allows macro redefinitions)
 281         AC_COMPILE_IFELSE(
 282             [AC_LANG_SOURCE([[
 283 #define testmacro foo
 284 #define testmacro bar
 285 int main(void) { exit(0); }
 286             ]])],
 287             [ AC_MSG_RESULT(yes) ],
 288             [ AC_MSG_RESULT(no)
 289               CC="`echo $CC | sed 's/-qlanglvl\=ansi//g'`"
 290               LD="`echo $LD | sed 's/-qlanglvl\=ansi//g'`"
 291               CFLAGS="`echo $CFLAGS | sed 's/-qlanglvl\=ansi//g'`"
 292               CPPFLAGS="`echo $CPPFLAGS | sed 's/-qlanglvl\=ansi//g'`"
 293             ]
 294         )
 295
 296         AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
 297         if (test -z "$blibpath"); then
 298                 blibpath="/usr/lib:/lib"
 299         fi
 300         saved_LDFLAGS="$LDFLAGS"
 301         if test "$GCC" = "yes"; then
 302                 flags="-Wl,-blibpath: -Wl,-rpath, -blibpath:"
 303         else
 304                 flags="-blibpath: -Wl,-blibpath: -Wl,-rpath,"
 305         fi
 306         for tryflags in $flags ;do
 307                 if (test -z "$blibflags"); then
 308                         LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
 309                         AC_TRY_LINK([], [], [blibflags=$tryflags])
 310                 fi
 311         done
 312         if (test -z "$blibflags"); then
 313                 AC_MSG_RESULT(not found)
 314                 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
 315         else
 316                 AC_MSG_RESULT($blibflags)
 317         fi
 318         LDFLAGS="$saved_LDFLAGS"
 319         dnl Check for authenticate.  Might be in libs.a on older AIXes
 320         AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE, 1,
 321                 [Define if you want to enable AIX4's authenticate function])],
 322                 [AC_CHECK_LIB(s,authenticate,
 323                         [ AC_DEFINE(WITH_AIXAUTHENTICATE)
 324                                 LIBS="$LIBS -ls"
 325                         ])
 326                 ])
 327         dnl Check for various auth function declarations in headers.
 328         AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
 329             passwdexpired, setauthdb], , , [#include <usersec.h>])
 330         dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
 331         AC_CHECK_DECLS(loginfailed,
 332                  [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
 333                   AC_TRY_COMPILE(
 334                         [#include <usersec.h>],
 335                         [(void)loginfailed("user","host","tty",0);],
 336                         [AC_MSG_RESULT(yes)
 337                          AC_DEFINE(AIX_LOGINFAILED_4ARG, 1,
 338                                 [Define if your AIX loginfailed() function
 339                                 takes 4 arguments (AIX >= 5.2)])],
 340                         [AC_MSG_RESULT(no)]
 341                 )],
 342                 [],
 343                 [#include <usersec.h>]
 344         )
 345         AC_CHECK_FUNCS(setauthdb)
 346         AC_CHECK_DECL(F_CLOSEM,
 347             AC_DEFINE(HAVE_FCNTL_CLOSEM, 1, [Use F_CLOSEM fcntl for closefrom]),
 348             [],
 349             [ #include <limits.h>
 350               #include <fcntl.h> ]
 351         )
 352         check_for_aix_broken_getaddrinfo=1
 353         AC_DEFINE(BROKEN_REALPATH, 1, [Define if you have a broken realpath.])
 354         AC_DEFINE(SETEUID_BREAKS_SETUID, 1,
 355             [Define if your platform breaks doing a seteuid before a setuid])
 356         AC_DEFINE(BROKEN_SETREUID, 1, [Define if your setreuid() is broken])
 357         AC_DEFINE(BROKEN_SETREGID, 1, [Define if your setregid() is broken])
 358         dnl AIX handles lastlog as part of its login message
 359         AC_DEFINE(DISABLE_LASTLOG, 1, [Define if you don't want to use lastlog])
 360         AC_DEFINE(LOGIN_NEEDS_UTMPX, 1,
 361                 [Some systems need a utmpx entry for /bin/login to work])
 362         AC_DEFINE(SPT_TYPE,SPT_REUSEARGV,
 363                 [Define to a Set Process Title type if your system is
 364                 supported by bsd-setproctitle.c])
 365         AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
 366             [AIX 5.2 and 5.3 (and presumably newer) require this])
 367         AC_DEFINE(PTY_ZEROREAD, 1, [read(1) can return 0 for a non-closed fd])
 368         ;;
 369 *-*-cygwin*)
 370         check_for_libcrypt_later=1
 371         LIBS="$LIBS /usr/lib/textreadmode.o"
 372         AC_DEFINE(HAVE_CYGWIN, 1, [Define if you are on Cygwin])
 373         AC_DEFINE(USE_PIPES, 1, [Use PIPES instead of a socketpair()])
 374         AC_DEFINE(DISABLE_SHADOW, 1,
 375                 [Define if you want to disable shadow passwords])
 376         AC_DEFINE(IP_TOS_IS_BROKEN, 1,
 377                 [Define if your system choked on IP TOS setting])
 378         AC_DEFINE(NO_X11_UNIX_SOCKETS, 1,
 379                 [Define if X11 doesn't support AF_UNIX sockets on that system])
 380         AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT, 1,
 381                 [Define if the concept of ports only accessible to
 382                 superusers isn't known])
 383         AC_DEFINE(DISABLE_FD_PASSING, 1,
 384                 [Define if your platform needs to skip post auth
 385                 file descriptor passing])
 386         ;;
 387 *-*-dgux*)
 388         AC_DEFINE(IP_TOS_IS_BROKEN)
 389         AC_DEFINE(SETEUID_BREAKS_SETUID)
 390         AC_DEFINE(BROKEN_SETREUID)
 391         AC_DEFINE(BROKEN_SETREGID)
 392         ;;
 393 *-*-darwin*)
 394         AC_MSG_CHECKING(if we have working getaddrinfo)
 395         AC_TRY_RUN([#include <mach-o/dyld.h>
 396 main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
 397                 exit(0);
 398         else
 399                 exit(1);
 400 }], [AC_MSG_RESULT(working)],
 401         [AC_MSG_RESULT(buggy)
 402         AC_DEFINE(BROKEN_GETADDRINFO, 1, [getaddrinfo is broken (if present)])],
 403         [AC_MSG_RESULT(assume it is working)])
 404         AC_DEFINE(SETEUID_BREAKS_SETUID)
 405         AC_DEFINE(BROKEN_SETREUID)
 406         AC_DEFINE(BROKEN_SETREGID)
 407         AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1,
 408                 [Define if your resolver libs need this for getrrsetbyname])
 409         AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
 410         AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
 411             [Use tunnel device compatibility to OpenBSD])
 412         AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
 413             [Prepend the address family to IP tunnel traffic])
 414         ;;
 415 *-*-dragonfly*)
 416         SSHDLIBS="$SSHDLIBS -lcrypt"
 417         ;;
 418 *-*-hpux*)
 419         # first we define all of the options common to all HP-UX releases
 420         CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
 421         IPADDR_IN_DISPLAY=yes
 422         AC_DEFINE(USE_PIPES)
 423         AC_DEFINE(LOGIN_NO_ENDOPT, 1,
 424             [Define if your login program cannot handle end of options ("--")])
 425         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 426         AC_DEFINE(LOCKED_PASSWD_STRING, "*",
 427                 [String used in /etc/passwd to denote locked account])
 428         AC_DEFINE(SPT_TYPE,SPT_PSTAT)
 429         MAIL="/var/mail/username"
 430         LIBS="$LIBS -lsec"
 431         AC_CHECK_LIB(xnet, t_error, ,
 432             AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
 433
 434         # next, we define all of the options specific to major releases
 435         case "$host" in
 436         *-*-hpux10*)
 437                 if test -z "$GCC"; then
 438                         CFLAGS="$CFLAGS -Ae"
 439                 fi
 440                 ;;
 441         *-*-hpux11*)
 442                 AC_DEFINE(PAM_SUN_CODEBASE, 1,
 443                         [Define if you are using Solaris-derived PAM which
 444                         passes pam_messages to the conversation function
 445                         with an extra level of indirection])
 446                 AC_DEFINE(DISABLE_UTMP, 1,
 447                         [Define if you don't want to use utmp])
 448                 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
 449                 check_for_hpux_broken_getaddrinfo=1
 450                 check_for_conflicting_getspnam=1
 451                 ;;
 452         esac
 453
 454         # lastly, we define options specific to minor releases
 455         case "$host" in
 456         *-*-hpux10.26)
 457                 AC_DEFINE(HAVE_SECUREWARE, 1,
 458                         [Define if you have SecureWare-based
 459                         protected password database])
 460                 disable_ptmx_check=yes
 461                 LIBS="$LIBS -lsecpw"
 462                 ;;
 463         esac
 464         ;;
 465 *-*-irix5*)
 466         PATH="$PATH:/usr/etc"
 467         AC_DEFINE(BROKEN_INET_NTOA, 1,
 468                 [Define if you system's inet_ntoa is busted
 469                 (e.g. Irix gcc issue)])
 470         AC_DEFINE(SETEUID_BREAKS_SETUID)
 471         AC_DEFINE(BROKEN_SETREUID)
 472         AC_DEFINE(BROKEN_SETREGID)
 473         AC_DEFINE(WITH_ABBREV_NO_TTY, 1,
 474                 [Define if you shouldn't strip 'tty' from your
 475                 ttyname in [uw]tmp])
 476         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 477         ;;
 478 *-*-irix6*)
 479         PATH="$PATH:/usr/etc"
 480         AC_DEFINE(WITH_IRIX_ARRAY, 1,
 481                 [Define if you have/want arrays
 482                 (cluster-wide session managment, not C arrays)])
 483         AC_DEFINE(WITH_IRIX_PROJECT, 1,
 484                 [Define if you want IRIX project management])
 485         AC_DEFINE(WITH_IRIX_AUDIT, 1,
 486                 [Define if you want IRIX audit trails])
 487         AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS, 1,
 488                 [Define if you want IRIX kernel jobs])])
 489         AC_DEFINE(BROKEN_INET_NTOA)
 490         AC_DEFINE(SETEUID_BREAKS_SETUID)
 491         AC_DEFINE(BROKEN_SETREUID)
 492         AC_DEFINE(BROKEN_SETREGID)
 493         AC_DEFINE(BROKEN_UPDWTMPX, 1, [updwtmpx is broken (if present)])
 494         AC_DEFINE(WITH_ABBREV_NO_TTY)
 495         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 496         ;;
 497 *-*-linux*)
 498         no_dev_ptmx=1
 499         check_for_libcrypt_later=1
 500         check_for_openpty_ctty_bug=1
 501         AC_DEFINE(DONT_TRY_OTHER_AF, 1, [Workaround more Linux IPv6 quirks])
 502         AC_DEFINE(PAM_TTY_KLUDGE, 1,
 503                 [Work around problematic Linux PAM modules handling of PAM_TTY])
 504         AC_DEFINE(LOCKED_PASSWD_PREFIX, "!",
 505                 [String used in /etc/passwd to denote locked account])
 506         AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
 507         AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM,
 508                 [Define to whatever link() returns for "not supported"
 509                 if it doesn't return EOPNOTSUPP.])
 510         AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
 511         AC_DEFINE(USE_BTMP)
 512         inet6_default_4in6=yes
 513         case `uname -r` in
 514         1.*|2.0.*)
 515                 AC_DEFINE(BROKEN_CMSG_TYPE, 1,
 516                         [Define if cmsg_type is not passed correctly])
 517                 ;;
 518         esac
 519         # tun(4) forwarding compat code
 520         AC_CHECK_HEADERS(linux/if_tun.h)
 521         if test "x$ac_cv_header_linux_if_tun_h" = "xyes" ; then
 522                 AC_DEFINE(SSH_TUN_LINUX, 1,
 523                     [Open tunnel devices the Linux tun/tap way])
 524                 AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
 525                     [Use tunnel device compatibility to OpenBSD])
 526                 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
 527                     [Prepend the address family to IP tunnel traffic])
 528         fi
 529         ;;
 530 mips-sony-bsd|mips-sony-newsos4)
 531         AC_DEFINE(NEED_SETPGRP, 1, [Need setpgrp to acquire controlling tty])
 532         SONY=1
 533         ;;
 534 *-*-netbsd*)
 535         check_for_libcrypt_before=1
 536         if test "x$withval" != "xno" ; then
 537                 need_dash_r=1
 538         fi
 539         AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
 540         AC_CHECK_HEADER([net/if_tap.h], ,
 541             AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
 542         AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
 543             [Prepend the address family to IP tunnel traffic])
 544         ;;
 545 *-*-freebsd*)
 546         check_for_libcrypt_later=1
 547         AC_DEFINE(LOCKED_PASSWD_PREFIX, "*LOCKED*", [Account locked with pw(1)])
 548         AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
 549         AC_CHECK_HEADER([net/if_tap.h], ,
 550             AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
 551         ;;
 552 *-*-bsdi*)
 553         AC_DEFINE(SETEUID_BREAKS_SETUID)
 554         AC_DEFINE(BROKEN_SETREUID)
 555         AC_DEFINE(BROKEN_SETREGID)
 556         ;;
 557 *-next-*)
 558         conf_lastlog_location="/usr/adm/lastlog"
 559         conf_utmp_location=/etc/utmp
 560         conf_wtmp_location=/usr/adm/wtmp
 561         MAIL=/usr/spool/mail
 562         AC_DEFINE(HAVE_NEXT, 1, [Define if you are on NeXT])
 563         AC_DEFINE(BROKEN_REALPATH)
 564         AC_DEFINE(USE_PIPES)
 565         AC_DEFINE(BROKEN_SAVED_UIDS, 1, [Needed for NeXT])
 566         ;;
 567 *-*-openbsd*)
 568         AC_DEFINE(HAVE_ATTRIBUTE__SENTINEL__, 1, [OpenBSD's gcc has sentinel])
 569         AC_DEFINE(HAVE_ATTRIBUTE__BOUNDED__, 1, [OpenBSD's gcc has bounded])
 570         AC_DEFINE(SSH_TUN_OPENBSD, 1, [Open tunnel devices the OpenBSD way])
 571         AC_DEFINE(SYSLOG_R_SAFE_IN_SIGHAND, 1,
 572             [syslog_r function is safe to use in in a signal handler])
 573         ;;
 574 *-*-solaris*)
 575         if test "x$withval" != "xno" ; then
 576                 need_dash_r=1
 577         fi
 578         AC_DEFINE(PAM_SUN_CODEBASE)
 579         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 580         AC_DEFINE(LOGIN_NEEDS_TERM, 1,
 581                 [Some versions of /bin/login need the TERM supplied
 582                 on the commandline])
 583         AC_DEFINE(PAM_TTY_KLUDGE)
 584         AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
 585                 [Define if pam_chauthtok wants real uid set
 586                 to the unpriv'ed user])
 587         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 588         # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
 589         AC_DEFINE(SSHD_ACQUIRES_CTTY, 1,
 590                 [Define if sshd somehow reacquires a controlling TTY
 591                 after setsid()])
 592         AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd
 593                 in case the name is longer than 8 chars])
 594         external_path_file=/etc/default/login
 595         # hardwire lastlog location (can't detect it on some versions)
 596         conf_lastlog_location="/var/adm/lastlog"
 597         AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
 598         sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
 599         if test "$sol2ver" -ge 8; then
 600                 AC_MSG_RESULT(yes)
 601                 AC_DEFINE(DISABLE_UTMP)
 602                 AC_DEFINE(DISABLE_WTMP, 1,
 603                         [Define if you don't want to use wtmp])
 604         else
 605                 AC_MSG_RESULT(no)
 606         fi
 607         AC_ARG_WITH(solaris-contracts,
 608                 [  --with-solaris-contracts Enable Solaris process contracts (experimental)],
 609                 [
 610                 AC_CHECK_LIB(contract, ct_tmpl_activate,
 611                         [ AC_DEFINE(USE_SOLARIS_PROCESS_CONTRACTS, 1,
 612                                 [Define if you have Solaris process contracts])
 613                           SSHDLIBS="$SSHDLIBS -lcontract"
 614                           AC_SUBST(SSHDLIBS)
 615                           SPC_MSG="yes" ], )
 616                 ],
 617         )
 618         ;;
 619 *-*-sunos4*)
 620         CPPFLAGS="$CPPFLAGS -DSUNOS4"
 621         AC_CHECK_FUNCS(getpwanam)
 622         AC_DEFINE(PAM_SUN_CODEBASE)
 623         conf_utmp_location=/etc/utmp
 624         conf_wtmp_location=/var/adm/wtmp
 625         conf_lastlog_location=/var/adm/lastlog
 626         AC_DEFINE(USE_PIPES)
 627         ;;
 628 *-ncr-sysv*)
 629         LIBS="$LIBS -lc89"
 630         AC_DEFINE(USE_PIPES)
 631         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 632         AC_DEFINE(SETEUID_BREAKS_SETUID)
 633         AC_DEFINE(BROKEN_SETREUID)
 634         AC_DEFINE(BROKEN_SETREGID)
 635         ;;
 636 *-sni-sysv*)
 637         # /usr/ucblib MUST NOT be searched on ReliantUNIX
 638         AC_CHECK_LIB(dl, dlsym, ,)
 639         # -lresolv needs to be at the end of LIBS or DNS lookups break
 640         AC_CHECK_LIB(resolv, res_query, [ LIBS="$LIBS -lresolv" ])
 641         IPADDR_IN_DISPLAY=yes
 642         AC_DEFINE(USE_PIPES)
 643         AC_DEFINE(IP_TOS_IS_BROKEN)
 644         AC_DEFINE(SETEUID_BREAKS_SETUID)
 645         AC_DEFINE(BROKEN_SETREUID)
 646         AC_DEFINE(BROKEN_SETREGID)
 647         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 648         external_path_file=/etc/default/login
 649         # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
 650         # Attention: always take care to bind libsocket and libnsl before libc,
 651         # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
 652         ;;
 653 # UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
 654 *-*-sysv4.2*)
 655         AC_DEFINE(USE_PIPES)
 656         AC_DEFINE(SETEUID_BREAKS_SETUID)
 657         AC_DEFINE(BROKEN_SETREUID)
 658         AC_DEFINE(BROKEN_SETREGID)
 659         AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
 660         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 661         ;;
 662 # UnixWare 7.x, OpenUNIX 8
 663 *-*-sysv5*)
 664         check_for_libcrypt_later=1
 665         AC_DEFINE(UNIXWARE_LONG_PASSWORDS, 1, [Support passwords > 8 chars])
 666         AC_DEFINE(USE_PIPES)
 667         AC_DEFINE(SETEUID_BREAKS_SETUID)
 668         AC_DEFINE(BROKEN_SETREUID)
 669         AC_DEFINE(BROKEN_SETREGID)
 670         AC_DEFINE(PASSWD_NEEDS_USERNAME)
 671         case "$host" in
 672         *-*-sysv5SCO_SV*)       # SCO OpenServer 6.x
 673                 TEST_SHELL=/u95/bin/sh
 674                 AC_DEFINE(BROKEN_LIBIAF, 1,
 675                         [ia_uinfo routines not supported by OS yet])
 676                 AC_DEFINE(BROKEN_UPDWTMPX)
 677                 ;;
 678         *)      AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 679                 ;;
 680         esac
 681         ;;
 682 *-*-sysv*)
 683         ;;
 684 # SCO UNIX and OEM versions of SCO UNIX
 685 *-*-sco3.2v4*)
 686         AC_MSG_ERROR("This Platform is no longer supported.")
 687         ;;
 688 # SCO OpenServer 5.x
 689 *-*-sco3.2v5*)
 690         if test -z "$GCC"; then
 691                 CFLAGS="$CFLAGS -belf"
 692         fi
 693         LIBS="$LIBS -lprot -lx -ltinfo -lm"
 694         no_dev_ptmx=1
 695         AC_DEFINE(USE_PIPES)
 696         AC_DEFINE(HAVE_SECUREWARE)
 697         AC_DEFINE(DISABLE_SHADOW)
 698         AC_DEFINE(DISABLE_FD_PASSING)
 699         AC_DEFINE(SETEUID_BREAKS_SETUID)
 700         AC_DEFINE(BROKEN_SETREUID)
 701         AC_DEFINE(BROKEN_SETREGID)
 702         AC_DEFINE(WITH_ABBREV_NO_TTY)
 703         AC_DEFINE(BROKEN_UPDWTMPX)
 704         AC_DEFINE(PASSWD_NEEDS_USERNAME)
 705         AC_CHECK_FUNCS(getluid setluid)
 706         MANTYPE=man
 707         TEST_SHELL=ksh
 708         ;;
 709 *-*-unicosmk*)
 710         AC_DEFINE(NO_SSH_LASTLOG, 1,
 711                 [Define if you don't want to use lastlog in session.c])
 712         AC_DEFINE(SETEUID_BREAKS_SETUID)
 713         AC_DEFINE(BROKEN_SETREUID)
 714         AC_DEFINE(BROKEN_SETREGID)
 715         AC_DEFINE(USE_PIPES)
 716         AC_DEFINE(DISABLE_FD_PASSING)
 717         LDFLAGS="$LDFLAGS"
 718         LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
 719         MANTYPE=cat
 720         ;;
 721 *-*-unicosmp*)
 722         AC_DEFINE(SETEUID_BREAKS_SETUID)
 723         AC_DEFINE(BROKEN_SETREUID)
 724         AC_DEFINE(BROKEN_SETREGID)
 725         AC_DEFINE(WITH_ABBREV_NO_TTY)
 726         AC_DEFINE(USE_PIPES)
 727         AC_DEFINE(DISABLE_FD_PASSING)
 728         LDFLAGS="$LDFLAGS"
 729         LIBS="$LIBS -lgen -lacid -ldb"
 730         MANTYPE=cat
 731         ;;
 732 *-*-unicos*)
 733         AC_DEFINE(SETEUID_BREAKS_SETUID)
 734         AC_DEFINE(BROKEN_SETREUID)
 735         AC_DEFINE(BROKEN_SETREGID)
 736         AC_DEFINE(USE_PIPES)
 737         AC_DEFINE(DISABLE_FD_PASSING)
 738         AC_DEFINE(NO_SSH_LASTLOG)
 739         LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
 740         LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
 741         MANTYPE=cat
 742         ;;
 743 *-dec-osf*)
 744         AC_MSG_CHECKING(for Digital Unix SIA)
 745         no_osfsia=""
 746         AC_ARG_WITH(osfsia,
 747                 [  --with-osfsia           Enable Digital Unix SIA],
 748                 [
 749                         if test "x$withval" = "xno" ; then
 750                                 AC_MSG_RESULT(disabled)
 751                                 no_osfsia=1
 752                         fi
 753                 ],
 754         )
 755         if test -z "$no_osfsia" ; then
 756                 if test -f /etc/sia/matrix.conf; then
 757                         AC_MSG_RESULT(yes)
 758                         AC_DEFINE(HAVE_OSF_SIA, 1,
 759                                 [Define if you have Digital Unix Security
 760                                 Integration Architecture])
 761                         AC_DEFINE(DISABLE_LOGIN, 1,
 762                                 [Define if you don't want to use your
 763                                 system's login() call])
 764                         AC_DEFINE(DISABLE_FD_PASSING)
 765                         LIBS="$LIBS -lsecurity -ldb -lm -laud"
 766                         SIA_MSG="yes"
 767                 else
 768                         AC_MSG_RESULT(no)
 769                         AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin",
 770                           [String used in /etc/passwd to denote locked account])
 771                 fi
 772         fi
 773         AC_DEFINE(BROKEN_GETADDRINFO)
 774         AC_DEFINE(SETEUID_BREAKS_SETUID)
 775         AC_DEFINE(BROKEN_SETREUID)
 776         AC_DEFINE(BROKEN_SETREGID)
 777         ;;
 778
 779 *-*-nto-qnx*)
 780         AC_DEFINE(USE_PIPES)
 781         AC_DEFINE(NO_X11_UNIX_SOCKETS)
 782         AC_DEFINE(MISSING_NFDBITS, 1, [Define on *nto-qnx systems])
 783         AC_DEFINE(MISSING_HOWMANY, 1, [Define on *nto-qnx systems])
 784         AC_DEFINE(MISSING_FD_MASK, 1, [Define on *nto-qnx systems])
 785         AC_DEFINE(DISABLE_LASTLOG)
 786         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 787         enable_etc_default_login=no     # has incompatible /etc/default/login
 788         ;;
 789
 790 *-*-ultrix*)
 791         AC_DEFINE(BROKEN_GETGROUPS, 1, [getgroups(0,NULL) will return -1])
 792         AC_DEFINE(BROKEN_MMAP, 1, [Ultrix mmap can't map files])
 793         AC_DEFINE(NEED_SETPGRP)
 794         AC_DEFINE(HAVE_SYS_SYSLOG_H, 1, [Force use of sys/syslog.h on Ultrix])
 795         ;;
 796
 797 *-*-lynxos)
 798         CFLAGS="$CFLAGS -D__NO_INCLUDE_WARN__"
 799         AC_DEFINE(MISSING_HOWMANY)
 800         AC_DEFINE(BROKEN_SETVBUF, 1, [LynxOS has broken setvbuf() implementation])
 801         ;;
 802 esac
 803
 804 AC_MSG_CHECKING(compiler and flags for sanity)
 805 AC_RUN_IFELSE(
 806         [AC_LANG_SOURCE([
 807 #include <stdio.h>
 808 int main(){exit(0);}
 809         ])],
 810         [       AC_MSG_RESULT(yes) ],
 811         [
 812                 AC_MSG_RESULT(no)
 813                 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
 814         ],
 815         [       AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
 816 )
 817
 818 dnl Checks for header files.
 819 # Checks for libraries.
 820 AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
 821 AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
 822
 823 dnl IRIX and Solaris 2.5.1 have dirname() in libgen
 824 AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
 825         AC_CHECK_LIB(gen, dirname,[
 826                 AC_CACHE_CHECK([for broken dirname],
 827                         ac_cv_have_broken_dirname, [
 828                         save_LIBS="$LIBS"
 829                         LIBS="$LIBS -lgen"
 830                         AC_RUN_IFELSE(
 831                                 [AC_LANG_SOURCE([[
 832 #include <libgen.h>
 833 #include <string.h>
 834
 835 int main(int argc, char **argv) {
 836     char *s, buf[32];
 837
 838     strncpy(buf,"/etc", 32);
 839     s = dirname(buf);
 840     if (!s || strncmp(s, "/", 32) != 0) {
 841         exit(1);
 842     } else {
 843         exit(0);
 844     }
 845 }
 846                                 ]])],
 847                                 [ ac_cv_have_broken_dirname="no" ],
 848                                 [ ac_cv_have_broken_dirname="yes" ],
 849                                 [ ac_cv_have_broken_dirname="no" ],
 850                         )
 851                         LIBS="$save_LIBS"
 852                 ])
 853                 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
 854                         LIBS="$LIBS -lgen"
 855                         AC_DEFINE(HAVE_DIRNAME)
 856                         AC_CHECK_HEADERS(libgen.h)
 857                 fi
 858         ])
 859 ])
 860
 861 AC_CHECK_FUNC(getspnam, ,
 862         AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
 863 AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME, 1,
 864         [Define if you have the basename function.]))
 865
 866 dnl zlib is required
 867 AC_ARG_WITH(zlib,
 868         [  --with-zlib=PATH        Use zlib in PATH],
 869         [ if test "x$withval" = "xno" ; then
 870                 AC_MSG_ERROR([*** zlib is required ***])
 871           elif test "x$withval" != "xyes"; then
 872                 if test -d "$withval/lib"; then
 873                         if test -n "${need_dash_r}"; then
 874                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
 875                         else
 876                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
 877                         fi
 878                 else
 879                         if test -n "${need_dash_r}"; then
 880                                 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
 881                         else
 882                                 LDFLAGS="-L${withval} ${LDFLAGS}"
 883                         fi
 884                 fi
 885                 if test -d "$withval/include"; then
 886                         CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
 887                 else
 888                         CPPFLAGS="-I${withval} ${CPPFLAGS}"
 889                 fi
 890         fi ]
 891 )
 892
 893 AC_CHECK_LIB(z, deflate, ,
 894         [
 895                 saved_CPPFLAGS="$CPPFLAGS"
 896                 saved_LDFLAGS="$LDFLAGS"
 897                 save_LIBS="$LIBS"
 898                 dnl Check default zlib install dir
 899                 if test -n "${need_dash_r}"; then
 900                         LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
 901                 else
 902                         LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
 903                 fi
 904                 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
 905                 LIBS="$LIBS -lz"
 906                 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
 907                         [
 908                                 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
 909                         ]
 910                 )
 911         ]
 912 )
 913 AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
 914
 915 AC_ARG_WITH(zlib-version-check,
 916         [  --without-zlib-version-check Disable zlib version check],
 917         [  if test "x$withval" = "xno" ; then
 918                 zlib_check_nonfatal=1
 919            fi
 920         ]
 921 )
 922
 923 AC_MSG_CHECKING(for possibly buggy zlib)
 924 AC_RUN_IFELSE([AC_LANG_SOURCE([[
 925 #include <stdio.h>
 926 #include <zlib.h>
 927 int main()
 928 {
 929         int a=0, b=0, c=0, d=0, n, v;
 930         n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
 931         if (n != 3 && n != 4)
 932                 exit(1);
 933         v = a*1000000 + b*10000 + c*100 + d;
 934         fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
 935
 936         /* 1.1.4 is OK */
 937         if (a == 1 && b == 1 && c >= 4)
 938                 exit(0);
 939
 940         /* 1.2.3 and up are OK */
 941         if (v >= 1020300)
 942                 exit(0);
 943
 944         exit(2);
 945 }
 946         ]])],
 947         AC_MSG_RESULT(no),
 948         [ AC_MSG_RESULT(yes)
 949           if test -z "$zlib_check_nonfatal" ; then
 950                 AC_MSG_ERROR([*** zlib too old - check config.log ***
 951 Your reported zlib version has known security problems.  It's possible your
 952 vendor has fixed these problems without changing the version number.  If you
 953 are sure this is the case, you can disable the check by running
 954 "./configure --without-zlib-version-check".
 955 If you are in doubt, upgrade zlib to version 1.2.3 or greater.
 956 See http://www.gzip.org/zlib/ for details.])
 957           else
 958                 AC_MSG_WARN([zlib version may have security problems])
 959           fi
 960         ],
 961         [       AC_MSG_WARN([cross compiling: not checking zlib version]) ]
 962 )
 963
 964 dnl UnixWare 2.x
 965 AC_CHECK_FUNC(strcasecmp,
 966         [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
 967 )
 968 AC_CHECK_FUNCS(utimes,
 969         [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
 970                                         LIBS="$LIBS -lc89"]) ]
 971 )
 972
 973 dnl    Checks for libutil functions
 974 AC_CHECK_HEADERS(libutil.h)
 975 AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN, 1,
 976         [Define if your libraries define login()])])
 977 AC_CHECK_FUNCS(logout updwtmp logwtmp)
 978
 979 AC_FUNC_STRFTIME
 980
 981 # Check for ALTDIRFUNC glob() extension
 982 AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
 983 AC_EGREP_CPP(FOUNDIT,
 984         [
 985                 #include <glob.h>
 986                 #ifdef GLOB_ALTDIRFUNC
 987                 FOUNDIT
 988                 #endif
 989         ],
 990         [
 991                 AC_DEFINE(GLOB_HAS_ALTDIRFUNC, 1,
 992                         [Define if your system glob() function has
 993                         the GLOB_ALTDIRFUNC extension])
 994                 AC_MSG_RESULT(yes)
 995         ],
 996         [
 997                 AC_MSG_RESULT(no)
 998         ]
 999 )
1000
1001 # Check for g.gl_matchc glob() extension
1002 AC_MSG_CHECKING(for gl_matchc field in glob_t)
1003 AC_TRY_COMPILE(
1004         [ #include <glob.h> ],
1005         [glob_t g; g.gl_matchc = 1;],
1006         [
1007                 AC_DEFINE(GLOB_HAS_GL_MATCHC, 1,
1008                         [Define if your system glob() function has
1009                         gl_matchc options in glob_t])
1010                 AC_MSG_RESULT(yes)
1011         ],
1012         [
1013                 AC_MSG_RESULT(no)
1014         ]
1015 )
1016
1017 AC_CHECK_DECLS(GLOB_NOMATCH, , , [#include <glob.h>])
1018
1019 AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
1020 AC_RUN_IFELSE(
1021         [AC_LANG_SOURCE([[
1022 #include <sys/types.h>
1023 #include <dirent.h>
1024 int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
1025         ]])],
1026         [AC_MSG_RESULT(yes)],
1027         [
1028                 AC_MSG_RESULT(no)
1029                 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME, 1,
1030                         [Define if your struct dirent expects you to
1031                         allocate extra space for d_name])
1032         ],
1033         [
1034                 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
1035                 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
1036         ]
1037 )
1038
1039 AC_MSG_CHECKING([for /proc/pid/fd directory])
1040 if test -d "/proc/$$/fd" ; then
1041         AC_DEFINE(HAVE_PROC_PID, 1, [Define if you have /proc/$pid/fd])
1042         AC_MSG_RESULT(yes)
1043 else
1044         AC_MSG_RESULT(no)
1045 fi
1046
1047 # Check whether user wants S/Key support
1048 SKEY_MSG="no"
1049 AC_ARG_WITH(skey,
1050         [  --with-skey[[=PATH]]      Enable S/Key support (optionally in PATH)],
1051         [
1052                 if test "x$withval" != "xno" ; then
1053
1054                         if test "x$withval" != "xyes" ; then
1055                                 CPPFLAGS="$CPPFLAGS -I${withval}/include"
1056                                 LDFLAGS="$LDFLAGS -L${withval}/lib"
1057                         fi
1058
1059                         AC_DEFINE(SKEY, 1, [Define if you want S/Key support])
1060                         LIBS="-lskey $LIBS"
1061                         SKEY_MSG="yes"
1062
1063                         AC_MSG_CHECKING([for s/key support])
1064                         AC_LINK_IFELSE(
1065                                 [AC_LANG_SOURCE([[
1066 #include <stdio.h>
1067 #include <skey.h>
1068 int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
1069                                 ]])],
1070                                 [AC_MSG_RESULT(yes)],
1071                                 [
1072                                         AC_MSG_RESULT(no)
1073                                         AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
1074                                 ])
1075                         AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
1076                         AC_TRY_COMPILE(
1077                                 [#include <stdio.h>
1078                                  #include <skey.h>],
1079                                 [(void)skeychallenge(NULL,"name","",0);],
1080                                 [AC_MSG_RESULT(yes)
1081                                  AC_DEFINE(SKEYCHALLENGE_4ARG, 1,
1082                                         [Define if your skeychallenge()
1083                                         function takes 4 arguments (NetBSD)])],
1084                                 [AC_MSG_RESULT(no)]
1085                         )
1086                 fi
1087         ]
1088 )
1089
1090 # Check whether user wants TCP wrappers support
1091 TCPW_MSG="no"
1092 AC_ARG_WITH(tcp-wrappers,
1093         [  --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
1094         [
1095                 if test "x$withval" != "xno" ; then
1096                         saved_LIBS="$LIBS"
1097                         saved_LDFLAGS="$LDFLAGS"
1098                         saved_CPPFLAGS="$CPPFLAGS"
1099                         if test -n "${withval}" && \
1100                             test "x${withval}" != "xyes"; then
1101                                 if test -d "${withval}/lib"; then
1102                                         if test -n "${need_dash_r}"; then
1103                                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1104                                         else
1105                                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1106                                         fi
1107                                 else
1108                                         if test -n "${need_dash_r}"; then
1109                                                 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1110                                         else
1111                                                 LDFLAGS="-L${withval} ${LDFLAGS}"
1112                                         fi
1113                                 fi
1114                                 if test -d "${withval}/include"; then
1115                                         CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1116                                 else
1117                                         CPPFLAGS="-I${withval} ${CPPFLAGS}"
1118                                 fi
1119                         fi
1120                         LIBS="-lwrap $LIBS"
1121                         AC_MSG_CHECKING(for libwrap)
1122                         AC_TRY_LINK(
1123                                 [
1124 #include <sys/types.h>
1125 #include <sys/socket.h>
1126 #include <netinet/in.h>
1127 #include <tcpd.h>
1128                                         int deny_severity = 0, allow_severity = 0;
1129                                 ],
1130                                 [hosts_access(0);],
1131                                 [
1132                                         AC_MSG_RESULT(yes)
1133                                         AC_DEFINE(LIBWRAP, 1,
1134                                                 [Define if you want
1135                                                 TCP Wrappers support])
1136                                         SSHDLIBS="$SSHDLIBS -lwrap"
1137                                         TCPW_MSG="yes"
1138                                 ],
1139                                 [
1140                                         AC_MSG_ERROR([*** libwrap missing])
1141                                 ]
1142                         )
1143                         LIBS="$saved_LIBS"
1144                 fi
1145         ]
1146 )
1147
1148 # Check whether user wants libedit support
1149 LIBEDIT_MSG="no"
1150 AC_ARG_WITH(libedit,
1151         [  --with-libedit[[=PATH]]   Enable libedit support for sftp],
1152         [ if test "x$withval" != "xno" ; then
1153                 if test "x$withval" != "xyes"; then
1154                         CPPFLAGS="$CPPFLAGS -I${withval}/include"
1155                         if test -n "${need_dash_r}"; then
1156                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1157                         else
1158                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1159                         fi
1160                 fi
1161                 AC_CHECK_LIB(edit, el_init,
1162                         [ AC_DEFINE(USE_LIBEDIT, 1, [Use libedit for sftp])
1163                           LIBEDIT="-ledit -lcurses"
1164                           LIBEDIT_MSG="yes"
1165                           AC_SUBST(LIBEDIT)
1166                         ],
1167                         [ AC_MSG_ERROR(libedit not found) ],
1168                         [ -lcurses ]
1169                 )
1170                 AC_MSG_CHECKING(if libedit version is compatible)
1171                 AC_COMPILE_IFELSE(
1172                     [AC_LANG_SOURCE([[
1173 #include <histedit.h>
1174 int main(void)
1175 {
1176         int i = H_SETSIZE;
1177         el_init("", NULL, NULL, NULL);
1178         exit(0);
1179 }
1180                     ]])],
1181                     [ AC_MSG_RESULT(yes) ],
1182                     [ AC_MSG_RESULT(no)
1183                       AC_MSG_ERROR(libedit version is not compatible) ]
1184                 )
1185         fi ]
1186 )
1187
1188 AUDIT_MODULE=none
1189 AC_ARG_WITH(audit,
1190         [  --with-audit=module     Enable EXPERIMENTAL audit support (modules=debug,bsm)],
1191         [
1192           AC_MSG_CHECKING(for supported audit module)
1193           case "$withval" in
1194           bsm)
1195                 AC_MSG_RESULT(bsm)
1196                 AUDIT_MODULE=bsm
1197                 dnl    Checks for headers, libs and functions
1198                 AC_CHECK_HEADERS(bsm/audit.h, [],
1199                     [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)],
1200                     [
1201 #ifdef HAVE_TIME_H
1202 # include <time.h>
1203 #endif
1204                     ]
1205 )
1206                 AC_CHECK_LIB(bsm, getaudit, [],
1207                     [AC_MSG_ERROR(BSM enabled and required library not found)])
1208                 AC_CHECK_FUNCS(getaudit, [],
1209                     [AC_MSG_ERROR(BSM enabled and required function not found)])
1210                 # These are optional
1211                 AC_CHECK_FUNCS(getaudit_addr)
1212                 AC_DEFINE(USE_BSM_AUDIT, 1, [Use BSM audit module])
1213                 ;;
1214           debug)
1215                 AUDIT_MODULE=debug
1216                 AC_MSG_RESULT(debug)
1217                 AC_DEFINE(SSH_AUDIT_EVENTS, 1, Use audit debugging module)
1218                 ;;
1219           no)
1220                 AC_MSG_RESULT(no)
1221                 ;;
1222           *)
1223                 AC_MSG_ERROR([Unknown audit module $withval])
1224                 ;;
1225         esac ]
1226 )
1227
1228 dnl    Checks for library functions. Please keep in alphabetical order
1229 AC_CHECK_FUNCS( \
1230         arc4random \
1231         asprintf \
1232         b64_ntop \
1233         __b64_ntop \
1234         b64_pton \
1235         __b64_pton \
1236         bcopy \
1237         bindresvport_sa \
1238         clock \
1239         closefrom \
1240         dirfd \
1241         fchmod \
1242         fchown \
1243         freeaddrinfo \
1244         futimes \
1245         getaddrinfo \
1246         getcwd \
1247         getgrouplist \
1248         getnameinfo \
1249         getopt \
1250         getpeereid \
1251         getpeerucred \
1252         _getpty \
1253         getrlimit \
1254         getttyent \
1255         glob \
1256         inet_aton \
1257         inet_ntoa \
1258         inet_ntop \
1259         innetgr \
1260         login_getcapbool \
1261         md5_crypt \
1262         memmove \
1263         mkdtemp \
1264         mmap \
1265         ngetaddrinfo \
1266         nsleep \
1267         ogetaddrinfo \
1268         openlog_r \
1269         openpty \
1270         prctl \
1271         pstat \
1272         readpassphrase \
1273         realpath \
1274         recvmsg \
1275         rresvport_af \
1276         sendmsg \
1277         setdtablesize \
1278         setegid \
1279         setenv \
1280         seteuid \
1281         setgroups \
1282         setlogin \
1283         setpcred \
1284         setproctitle \
1285         setregid \
1286         setreuid \
1287         setrlimit \
1288         setsid \
1289         setvbuf \
1290         sigaction \
1291         sigvec \
1292         snprintf \
1293         socketpair \
1294         strdup \
1295         strerror \
1296         strlcat \
1297         strlcpy \
1298         strmode \
1299         strnvis \
1300         strtonum \
1301         strtoll \
1302         strtoul \
1303         swap32 \
1304         sysconf \
1305         tcgetpgrp \
1306         truncate \
1307         unsetenv \
1308         updwtmpx \
1309         vasprintf \
1310         vhangup \
1311         vsnprintf \
1312         waitpid \
1313 )
1314
1315 # IRIX has a const char return value for gai_strerror()
1316 AC_CHECK_FUNCS(gai_strerror,[
1317         AC_DEFINE(HAVE_GAI_STRERROR)
1318         AC_TRY_COMPILE([
1319 #include <sys/types.h>
1320 #include <sys/socket.h>
1321 #include <netdb.h>
1322
1323 const char *gai_strerror(int);],[
1324 char *str;
1325
1326 str = gai_strerror(0);],[
1327                 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
1328                 [Define if gai_strerror() returns const char *])])])
1329
1330 AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP, 1,
1331         [Some systems put nanosleep outside of libc]))
1332
1333 dnl Make sure prototypes are defined for these before using them.
1334 AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
1335 AC_CHECK_DECL(strsep,
1336         [AC_CHECK_FUNCS(strsep)],
1337         [],
1338         [
1339 #ifdef HAVE_STRING_H
1340 # include <string.h>
1341 #endif
1342         ])
1343
1344 dnl tcsendbreak might be a macro
1345 AC_CHECK_DECL(tcsendbreak,
1346         [AC_DEFINE(HAVE_TCSENDBREAK)],
1347         [AC_CHECK_FUNCS(tcsendbreak)],
1348         [#include <termios.h>]
1349 )
1350
1351 AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
1352
1353 AC_CHECK_DECLS(SHUT_RD, , ,
1354         [
1355 #include <sys/types.h>
1356 #include <sys/socket.h>
1357         ])
1358
1359 AC_CHECK_DECLS(O_NONBLOCK, , ,
1360         [
1361 #include <sys/types.h>
1362 #ifdef HAVE_SYS_STAT_H
1363 # include <sys/stat.h>
1364 #endif
1365 #ifdef HAVE_FCNTL_H
1366 # include <fcntl.h>
1367 #endif
1368         ])
1369
1370 AC_CHECK_DECLS(writev, , , [
1371 #include <sys/types.h>
1372 #include <sys/uio.h>
1373 #include <unistd.h>
1374         ])
1375
1376 AC_CHECK_DECLS(MAXSYMLINKS, , , [
1377 #include <sys/param.h>
1378         ])
1379
1380 AC_CHECK_DECLS(offsetof, , , [
1381 #include <stddef.h>
1382         ])
1383
1384 AC_CHECK_FUNCS(setresuid, [
1385         dnl Some platorms have setresuid that isn't implemented, test for this
1386         AC_MSG_CHECKING(if setresuid seems to work)
1387         AC_RUN_IFELSE(
1388                 [AC_LANG_SOURCE([[
1389 #include <stdlib.h>
1390 #include <errno.h>
1391 int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
1392                 ]])],
1393                 [AC_MSG_RESULT(yes)],
1394                 [AC_DEFINE(BROKEN_SETRESUID, 1,
1395                         [Define if your setresuid() is broken])
1396                  AC_MSG_RESULT(not implemented)],
1397                 [AC_MSG_WARN([cross compiling: not checking setresuid])]
1398         )
1399 ])
1400
1401 AC_CHECK_FUNCS(setresgid, [
1402         dnl Some platorms have setresgid that isn't implemented, test for this
1403         AC_MSG_CHECKING(if setresgid seems to work)
1404         AC_RUN_IFELSE(
1405                 [AC_LANG_SOURCE([[
1406 #include <stdlib.h>
1407 #include <errno.h>
1408 int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
1409                 ]])],
1410                 [AC_MSG_RESULT(yes)],
1411                 [AC_DEFINE(BROKEN_SETRESGID, 1,
1412                         [Define if your setresgid() is broken])
1413                  AC_MSG_RESULT(not implemented)],
1414                 [AC_MSG_WARN([cross compiling: not checking setresuid])]
1415         )
1416 ])
1417
1418 dnl    Checks for time functions
1419 AC_CHECK_FUNCS(gettimeofday time)
1420 dnl    Checks for utmp functions
1421 AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1422 AC_CHECK_FUNCS(utmpname)
1423 dnl    Checks for utmpx functions
1424 AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1425 AC_CHECK_FUNCS(setutxent utmpxname)
1426
1427 AC_CHECK_FUNC(daemon,
1428         [AC_DEFINE(HAVE_DAEMON, 1, [Define if your libraries define daemon()])],
1429         [AC_CHECK_LIB(bsd, daemon,
1430                 [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
1431 )
1432
1433 AC_CHECK_FUNC(getpagesize,
1434         [AC_DEFINE(HAVE_GETPAGESIZE, 1,
1435                 [Define if your libraries define getpagesize()])],
1436         [AC_CHECK_LIB(ucb, getpagesize,
1437                 [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
1438 )
1439
1440 # Check for broken snprintf
1441 if test "x$ac_cv_func_snprintf" = "xyes" ; then
1442         AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1443         AC_RUN_IFELSE(
1444                 [AC_LANG_SOURCE([[
1445 #include <stdio.h>
1446 int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
1447                 ]])],
1448                 [AC_MSG_RESULT(yes)],
1449                 [
1450                         AC_MSG_RESULT(no)
1451                         AC_DEFINE(BROKEN_SNPRINTF, 1,
1452                                 [Define if your snprintf is busted])
1453                         AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1454                 ],
1455                 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
1456         )
1457 fi
1458
1459 # If we don't have a working asprintf, then we strongly depend on vsnprintf
1460 # returning the right thing on overflow: the number of characters it tried to
1461 # create (as per SUSv3)
1462 if test "x$ac_cv_func_asprintf" != "xyes" && \
1463    test "x$ac_cv_func_vsnprintf" = "xyes" ; then
1464         AC_MSG_CHECKING([whether vsnprintf returns correct values on overflow])
1465         AC_RUN_IFELSE(
1466                 [AC_LANG_SOURCE([[
1467 #include <sys/types.h>
1468 #include <stdio.h>
1469 #include <stdarg.h>
1470
1471 int x_snprintf(char *str,size_t count,const char *fmt,...)
1472 {
1473         size_t ret; va_list ap;
1474         va_start(ap, fmt); ret = vsnprintf(str, count, fmt, ap); va_end(ap);
1475         return ret;
1476 }
1477 int main(void)
1478 {
1479         char x[1];
1480         exit(x_snprintf(x, 1, "%s %d", "hello", 12345) == 11 ? 0 : 1);
1481 } ]])],
1482                 [AC_MSG_RESULT(yes)],
1483                 [
1484                         AC_MSG_RESULT(no)
1485                         AC_DEFINE(BROKEN_SNPRINTF, 1,
1486                                 [Define if your snprintf is busted])
1487                         AC_MSG_WARN([****** Your vsnprintf() function is broken, complain to your vendor])
1488                 ],
1489                 [ AC_MSG_WARN([cross compiling: Assuming working vsnprintf()]) ]
1490         )
1491 fi
1492
1493 # On systems where [v]snprintf is broken, but is declared in stdio,
1494 # check that the fmt argument is const char * or just char *.
1495 # This is only useful for when BROKEN_SNPRINTF
1496 AC_MSG_CHECKING([whether snprintf can declare const char *fmt])
1497 AC_COMPILE_IFELSE([AC_LANG_SOURCE([[#include <stdio.h>
1498            int snprintf(char *a, size_t b, const char *c, ...) { return 0; }
1499            int main(void) { snprintf(0, 0, 0); }
1500     ]])],
1501    [AC_MSG_RESULT(yes)
1502     AC_DEFINE(SNPRINTF_CONST, [const],
1503               [Define as const if snprintf() can declare const char *fmt])],
1504    [AC_MSG_RESULT(no)
1505     AC_DEFINE(SNPRINTF_CONST, [/* not const */])])
1506
1507 # Check for missing getpeereid (or equiv) support
1508 NO_PEERCHECK=""
1509 if test "x$ac_cv_func_getpeereid" != "xyes" -a "x$ac_cv_func_getpeerucred" != "xyes"; then
1510         AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1511         AC_TRY_COMPILE(
1512                 [#include <sys/types.h>
1513                  #include <sys/socket.h>],
1514                 [int i = SO_PEERCRED;],
1515                 [ AC_MSG_RESULT(yes)
1516                   AC_DEFINE(HAVE_SO_PEERCRED, 1, [Have PEERCRED socket option])
1517                 ],
1518                 [AC_MSG_RESULT(no)
1519                 NO_PEERCHECK=1]
1520         )
1521 fi
1522
1523 dnl see whether mkstemp() requires XXXXXX
1524 if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1525 AC_MSG_CHECKING([for (overly) strict mkstemp])
1526 AC_RUN_IFELSE(
1527         [AC_LANG_SOURCE([[
1528 #include <stdlib.h>
1529 main() { char template[]="conftest.mkstemp-test";
1530 if (mkstemp(template) == -1)
1531         exit(1);
1532 unlink(template); exit(0);
1533 }
1534         ]])],
1535         [
1536                 AC_MSG_RESULT(no)
1537         ],
1538         [
1539                 AC_MSG_RESULT(yes)
1540                 AC_DEFINE(HAVE_STRICT_MKSTEMP, 1, [Silly mkstemp()])
1541         ],
1542         [
1543                 AC_MSG_RESULT(yes)
1544                 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1545         ]
1546 )
1547 fi
1548
1549 dnl make sure that openpty does not reacquire controlling terminal
1550 if test ! -z "$check_for_openpty_ctty_bug"; then
1551         AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1552         AC_RUN_IFELSE(
1553                 [AC_LANG_SOURCE([[
1554 #include <stdio.h>
1555 #include <sys/fcntl.h>
1556 #include <sys/types.h>
1557 #include <sys/wait.h>
1558
1559 int
1560 main()
1561 {
1562         pid_t pid;
1563         int fd, ptyfd, ttyfd, status;
1564
1565         pid = fork();
1566         if (pid < 0) {          /* failed */
1567                 exit(1);
1568         } else if (pid > 0) {   /* parent */
1569                 waitpid(pid, &status, 0);
1570                 if (WIFEXITED(status))
1571                         exit(WEXITSTATUS(status));
1572                 else
1573                         exit(2);
1574         } else {                /* child */
1575                 close(0); close(1); close(2);
1576                 setsid();
1577                 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1578                 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1579                 if (fd >= 0)
1580                         exit(3);        /* Acquired ctty: broken */
1581                 else
1582                         exit(0);        /* Did not acquire ctty: OK */
1583         }
1584 }
1585                 ]])],
1586                 [
1587                         AC_MSG_RESULT(yes)
1588                 ],
1589                 [
1590                         AC_MSG_RESULT(no)
1591                         AC_DEFINE(SSHD_ACQUIRES_CTTY)
1592                 ],
1593                 [
1594                         AC_MSG_RESULT(cross-compiling, assuming yes)
1595                 ]
1596         )
1597 fi
1598
1599 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1600     test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
1601         AC_MSG_CHECKING(if getaddrinfo seems to work)
1602         AC_RUN_IFELSE(
1603                 [AC_LANG_SOURCE([[
1604 #include <stdio.h>
1605 #include <sys/socket.h>
1606 #include <netdb.h>
1607 #include <errno.h>
1608 #include <netinet/in.h>
1609
1610 #define TEST_PORT "2222"
1611
1612 int
1613 main(void)
1614 {
1615         int err, sock;
1616         struct addrinfo *gai_ai, *ai, hints;
1617         char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1618
1619         memset(&hints, 0, sizeof(hints));
1620         hints.ai_family = PF_UNSPEC;
1621         hints.ai_socktype = SOCK_STREAM;
1622         hints.ai_flags = AI_PASSIVE;
1623
1624         err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1625         if (err != 0) {
1626                 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1627                 exit(1);
1628         }
1629
1630         for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1631                 if (ai->ai_family != AF_INET6)
1632                         continue;
1633
1634                 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1635                     sizeof(ntop), strport, sizeof(strport),
1636                     NI_NUMERICHOST|NI_NUMERICSERV);
1637
1638                 if (err != 0) {
1639                         if (err == EAI_SYSTEM)
1640                                 perror("getnameinfo EAI_SYSTEM");
1641                         else
1642                                 fprintf(stderr, "getnameinfo failed: %s\n",
1643                                     gai_strerror(err));
1644                         exit(2);
1645                 }
1646
1647                 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1648                 if (sock < 0)
1649                         perror("socket");
1650                 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1651                         if (errno == EBADF)
1652                                 exit(3);
1653                 }
1654         }
1655         exit(0);
1656 }
1657                 ]])],
1658                 [
1659                         AC_MSG_RESULT(yes)
1660                 ],
1661                 [
1662                         AC_MSG_RESULT(no)
1663                         AC_DEFINE(BROKEN_GETADDRINFO)
1664                 ],
1665                 [
1666                         AC_MSG_RESULT(cross-compiling, assuming yes)
1667                 ]
1668         )
1669 fi
1670
1671 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1672     test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
1673         AC_MSG_CHECKING(if getaddrinfo seems to work)
1674         AC_RUN_IFELSE(
1675                 [AC_LANG_SOURCE([[
1676 #include <stdio.h>
1677 #include <sys/socket.h>
1678 #include <netdb.h>
1679 #include <errno.h>
1680 #include <netinet/in.h>
1681
1682 #define TEST_PORT "2222"
1683
1684 int
1685 main(void)
1686 {
1687         int err, sock;
1688         struct addrinfo *gai_ai, *ai, hints;
1689         char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1690
1691         memset(&hints, 0, sizeof(hints));
1692         hints.ai_family = PF_UNSPEC;
1693         hints.ai_socktype = SOCK_STREAM;
1694         hints.ai_flags = AI_PASSIVE;
1695
1696         err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1697         if (err != 0) {
1698                 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1699                 exit(1);
1700         }
1701
1702         for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1703                 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1704                         continue;
1705
1706                 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1707                     sizeof(ntop), strport, sizeof(strport),
1708                     NI_NUMERICHOST|NI_NUMERICSERV);
1709
1710                 if (ai->ai_family == AF_INET && err != 0) {
1711                         perror("getnameinfo");
1712                         exit(2);
1713                 }
1714         }
1715         exit(0);
1716 }
1717                 ]])],
1718                 [
1719                         AC_MSG_RESULT(yes)
1720                         AC_DEFINE(AIX_GETNAMEINFO_HACK, 1,
1721                                 [Define if you have a getaddrinfo that fails
1722                                 for the all-zeros IPv6 address])
1723                 ],
1724                 [
1725                         AC_MSG_RESULT(no)
1726                         AC_DEFINE(BROKEN_GETADDRINFO)
1727                 ],
1728                 [
1729                         AC_MSG_RESULT(cross-compiling, assuming no)
1730                 ]
1731         )
1732 fi
1733
1734 if test "x$check_for_conflicting_getspnam" = "x1"; then
1735         AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1736         AC_COMPILE_IFELSE(
1737                 [
1738 #include <shadow.h>
1739 int main(void) {exit(0);}
1740                 ],
1741                 [
1742                         AC_MSG_RESULT(no)
1743                 ],
1744                 [
1745                         AC_MSG_RESULT(yes)
1746                         AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1747                             [Conflicting defs for getspnam])
1748                 ]
1749         )
1750 fi
1751
1752 AC_FUNC_GETPGRP
1753
1754 # Search for OpenSSL
1755 saved_CPPFLAGS="$CPPFLAGS"
1756 saved_LDFLAGS="$LDFLAGS"
1757 AC_ARG_WITH(ssl-dir,
1758         [  --with-ssl-dir=PATH     Specify path to OpenSSL installation ],
1759         [
1760                 if test "x$withval" != "xno" ; then
1761                         case "$withval" in
1762                                 # Relative paths
1763                                 ./*|../*)       withval="`pwd`/$withval"
1764                         esac
1765                         if test -d "$withval/lib"; then
1766                                 if test -n "${need_dash_r}"; then
1767                                         LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1768                                 else
1769                                         LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1770                                 fi
1771                         else
1772                                 if test -n "${need_dash_r}"; then
1773                                         LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1774                                 else
1775                                         LDFLAGS="-L${withval} ${LDFLAGS}"
1776                                 fi
1777                         fi
1778                         if test -d "$withval/include"; then
1779                                 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1780                         else
1781                                 CPPFLAGS="-I${withval} ${CPPFLAGS}"
1782                         fi
1783                 fi
1784         ]
1785 )
1786 LIBS="-lcrypto $LIBS"
1787 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL, 1,
1788         [Define if your ssl headers are included
1789         with #include <openssl/header.h>]),
1790         [
1791                 dnl Check default openssl install dir
1792                 if test -n "${need_dash_r}"; then
1793                         LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
1794                 else
1795                         LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
1796                 fi
1797                 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1798                 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1799                         [
1800                                 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1801                         ]
1802                 )
1803         ]
1804 )
1805
1806 # Determine OpenSSL header version
1807 AC_MSG_CHECKING([OpenSSL header version])
1808 AC_RUN_IFELSE(
1809         [AC_LANG_SOURCE([[
1810 #include <stdio.h>
1811 #include <string.h>
1812 #include <openssl/opensslv.h>
1813 #define DATA "conftest.sslincver"
1814 int main(void) {
1815         FILE *fd;
1816         int rc;
1817
1818         fd = fopen(DATA,"w");
1819         if(fd == NULL)
1820                 exit(1);
1821
1822         if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1823                 exit(1);
1824
1825         exit(0);
1826 }
1827         ]])],
1828         [
1829                 ssl_header_ver=`cat conftest.sslincver`
1830                 AC_MSG_RESULT($ssl_header_ver)
1831         ],
1832         [
1833                 AC_MSG_RESULT(not found)
1834                 AC_MSG_ERROR(OpenSSL version header not found.)
1835         ],
1836         [
1837                 AC_MSG_WARN([cross compiling: not checking])
1838         ]
1839 )
1840
1841 # Determine OpenSSL library version
1842 AC_MSG_CHECKING([OpenSSL library version])
1843 AC_RUN_IFELSE(
1844         [AC_LANG_SOURCE([[
1845 #include <stdio.h>
1846 #include <string.h>
1847 #include <openssl/opensslv.h>
1848 #include <openssl/crypto.h>
1849 #define DATA "conftest.ssllibver"
1850 int main(void) {
1851         FILE *fd;
1852         int rc;
1853
1854         fd = fopen(DATA,"w");
1855         if(fd == NULL)
1856                 exit(1);
1857
1858         if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1859                 exit(1);
1860
1861         exit(0);
1862 }
1863         ]])],
1864         [
1865                 ssl_library_ver=`cat conftest.ssllibver`
1866                 AC_MSG_RESULT($ssl_library_ver)
1867         ],
1868         [
1869                 AC_MSG_RESULT(not found)
1870                 AC_MSG_ERROR(OpenSSL library not found.)
1871         ],
1872         [
1873                 AC_MSG_WARN([cross compiling: not checking])
1874         ]
1875 )
1876
1877 AC_ARG_WITH(openssl-header-check,
1878         [  --without-openssl-header-check Disable OpenSSL version consistency check],
1879         [  if test "x$withval" = "xno" ; then
1880                 openssl_check_nonfatal=1
1881            fi
1882         ]
1883 )
1884
1885 # Sanity check OpenSSL headers
1886 AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1887 AC_RUN_IFELSE(
1888         [AC_LANG_SOURCE([[
1889 #include <string.h>
1890 #include <openssl/opensslv.h>
1891 int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
1892         ]])],
1893         [
1894                 AC_MSG_RESULT(yes)
1895         ],
1896         [
1897                 AC_MSG_RESULT(no)
1898                 if test "x$openssl_check_nonfatal" = "x"; then
1899                         AC_MSG_ERROR([Your OpenSSL headers do not match your
1900 library. Check config.log for details.
1901 If you are sure your installation is consistent, you can disable the check
1902 by running "./configure --without-openssl-header-check".
1903 Also see contrib/findssl.sh for help identifying header/library mismatches.
1904 ])
1905                 else
1906                         AC_MSG_WARN([Your OpenSSL headers do not match your
1907 library. Check config.log for details.
1908 Also see contrib/findssl.sh for help identifying header/library mismatches.])
1909                 fi
1910         ],
1911         [
1912                 AC_MSG_WARN([cross compiling: not checking])
1913         ]
1914 )
1915
1916 AC_MSG_CHECKING([if programs using OpenSSL functions will link])
1917 AC_LINK_IFELSE(
1918         [AC_LANG_SOURCE([[
1919 #include <openssl/evp.h>
1920 int main(void) { SSLeay_add_all_algorithms(); }
1921         ]])],
1922         [
1923                 AC_MSG_RESULT(yes)
1924         ],
1925         [
1926                 AC_MSG_RESULT(no)
1927                 saved_LIBS="$LIBS"
1928                 LIBS="$LIBS -ldl"
1929                 AC_MSG_CHECKING([if programs using OpenSSL need -ldl])
1930                 AC_LINK_IFELSE(
1931                         [AC_LANG_SOURCE([[
1932 #include <openssl/evp.h>
1933 int main(void) { SSLeay_add_all_algorithms(); }
1934                         ]])],
1935                         [
1936                                 AC_MSG_RESULT(yes)
1937                         ],
1938                         [
1939                                 AC_MSG_RESULT(no)
1940                                 LIBS="$saved_LIBS"
1941                         ]
1942                 )
1943         ]
1944 )
1945
1946 AC_ARG_WITH(ssl-engine,
1947         [  --with-ssl-engine       Enable OpenSSL (hardware) ENGINE support ],
1948         [ if test "x$withval" != "xno" ; then
1949                 AC_MSG_CHECKING(for OpenSSL ENGINE support)
1950                 AC_TRY_COMPILE(
1951                         [ #include <openssl/engine.h>],
1952                         [
1953 ENGINE_load_builtin_engines();ENGINE_register_all_complete();
1954                         ],
1955                         [ AC_MSG_RESULT(yes)
1956                           AC_DEFINE(USE_OPENSSL_ENGINE, 1,
1957                              [Enable OpenSSL engine support])
1958                         ],
1959                         [ AC_MSG_ERROR(OpenSSL ENGINE support not found)]
1960                 )
1961           fi ]
1962 )
1963
1964 # Check for OpenSSL without EVP_aes_{192,256}_cbc
1965 AC_MSG_CHECKING([whether OpenSSL has crippled AES support])
1966 AC_LINK_IFELSE(
1967         [AC_LANG_SOURCE([[
1968 #include <string.h>
1969 #include <openssl/evp.h>
1970 int main(void) { exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);}
1971         ]])],
1972         [
1973                 AC_MSG_RESULT(no)
1974         ],
1975         [
1976                 AC_MSG_RESULT(yes)
1977                 AC_DEFINE(OPENSSL_LOBOTOMISED_AES, 1,
1978                     [libcrypto is missing AES 192 and 256 bit functions])
1979         ]
1980 )
1981
1982 # Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1983 # because the system crypt() is more featureful.
1984 if test "x$check_for_libcrypt_before" = "x1"; then
1985         AC_CHECK_LIB(crypt, crypt)
1986 fi
1987
1988 # Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
1989 # version in OpenSSL.
1990 if test "x$check_for_libcrypt_later" = "x1"; then
1991         AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
1992 fi
1993
1994 # Search for SHA256 support in libc and/or OpenSSL
1995 AC_CHECK_FUNCS(SHA256_Update EVP_sha256)
1996
1997 saved_LIBS="$LIBS"
1998 AC_CHECK_LIB(iaf, ia_openinfo, [
1999         LIBS="$LIBS -liaf"
2000         AC_CHECK_FUNCS(set_id, [SSHDLIBS="$SSHDLIBS -liaf"])
2001 ])
2002 LIBS="$saved_LIBS"
2003
2004 ### Configure cryptographic random number support
2005
2006 # Check wheter OpenSSL seeds itself
2007 AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
2008 AC_RUN_IFELSE(
2009         [AC_LANG_SOURCE([[
2010 #include <string.h>
2011 #include <openssl/rand.h>
2012 int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
2013         ]])],
2014         [
2015                 OPENSSL_SEEDS_ITSELF=yes
2016                 AC_MSG_RESULT(yes)
2017         ],
2018         [
2019                 AC_MSG_RESULT(no)
2020                 # Default to use of the rand helper if OpenSSL doesn't
2021                 # seed itself
2022                 USE_RAND_HELPER=yes
2023         ],
2024         [
2025                 AC_MSG_WARN([cross compiling: assuming yes])
2026                 # This is safe, since all recent OpenSSL versions will
2027                 # complain at runtime if not seeded correctly.
2028                 OPENSSL_SEEDS_ITSELF=yes
2029         ]
2030 )
2031
2032 # Check for PAM libs
2033 PAM_MSG="no"
2034 AC_ARG_WITH(pam,
2035         [  --with-pam              Enable PAM support ],
2036         [
2037                 if test "x$withval" != "xno" ; then
2038                         if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
2039                            test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
2040                                 AC_MSG_ERROR([PAM headers not found])
2041                         fi
2042
2043                         saved_LIBS="$LIBS"
2044                         AC_CHECK_LIB(dl, dlopen, , )
2045                         AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
2046                         AC_CHECK_FUNCS(pam_getenvlist)
2047                         AC_CHECK_FUNCS(pam_putenv)
2048                         LIBS="$saved_LIBS"
2049
2050                         PAM_MSG="yes"
2051
2052                         SSHDLIBS="$SSHDLIBS -lpam"
2053                         AC_DEFINE(USE_PAM, 1,
2054                                 [Define if you want to enable PAM support])
2055
2056                         if test $ac_cv_lib_dl_dlopen = yes; then
2057                                 case "$LIBS" in
2058                                 *-ldl*)
2059                                         # libdl already in LIBS
2060                                         ;;
2061                                 *)
2062                                         SSHDLIBS="$SSHDLIBS -ldl"
2063                                         ;;
2064                                 esac
2065                         fi
2066                 fi
2067         ]
2068 )
2069
2070 # Check for older PAM
2071 if test "x$PAM_MSG" = "xyes" ; then
2072         # Check PAM strerror arguments (old PAM)
2073         AC_MSG_CHECKING([whether pam_strerror takes only one argument])
2074         AC_TRY_COMPILE(
2075                 [
2076 #include <stdlib.h>
2077 #if defined(HAVE_SECURITY_PAM_APPL_H)
2078 #include <security/pam_appl.h>
2079 #elif defined (HAVE_PAM_PAM_APPL_H)
2080 #include <pam/pam_appl.h>
2081 #endif
2082                 ],
2083                 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
2084                 [AC_MSG_RESULT(no)],
2085                 [
2086                         AC_DEFINE(HAVE_OLD_PAM, 1,
2087                                 [Define if you have an old version of PAM
2088                                 which takes only one argument to pam_strerror])
2089                         AC_MSG_RESULT(yes)
2090                         PAM_MSG="yes (old library)"
2091                 ]
2092         )
2093 fi
2094
2095 # Do we want to force the use of the rand helper?
2096 AC_ARG_WITH(rand-helper,
2097         [  --with-rand-helper      Use subprocess to gather strong randomness ],
2098         [
2099                 if test "x$withval" = "xno" ; then
2100                         # Force use of OpenSSL's internal RNG, even if
2101                         # the previous test showed it to be unseeded.
2102                         if test -z "$OPENSSL_SEEDS_ITSELF" ; then
2103                                 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
2104                                 OPENSSL_SEEDS_ITSELF=yes
2105                                 USE_RAND_HELPER=""
2106                         fi
2107                 else
2108                         USE_RAND_HELPER=yes
2109                 fi
2110         ],
2111 )
2112
2113 # Which randomness source do we use?
2114 if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
2115         # OpenSSL only
2116         AC_DEFINE(OPENSSL_PRNG_ONLY, 1,
2117                 [Define if you want OpenSSL's internally seeded PRNG only])
2118         RAND_MSG="OpenSSL internal ONLY"
2119         INSTALL_SSH_RAND_HELPER=""
2120 elif test ! -z "$USE_RAND_HELPER" ; then
2121         # install rand helper
2122         RAND_MSG="ssh-rand-helper"
2123         INSTALL_SSH_RAND_HELPER="yes"
2124 fi
2125 AC_SUBST(INSTALL_SSH_RAND_HELPER)
2126
2127 ### Configuration of ssh-rand-helper
2128
2129 # PRNGD TCP socket
2130 AC_ARG_WITH(prngd-port,
2131         [  --with-prngd-port=PORT  read entropy from PRNGD/EGD TCP localhost:PORT],
2132         [
2133                 case "$withval" in
2134                 no)
2135                         withval=""
2136                         ;;
2137                 [[0-9]]*)
2138                         ;;
2139                 *)
2140                         AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
2141                         ;;
2142                 esac
2143                 if test ! -z "$withval" ; then
2144                         PRNGD_PORT="$withval"
2145                         AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT,
2146                                 [Port number of PRNGD/EGD random number socket])
2147                 fi
2148         ]
2149 )
2150
2151 # PRNGD Unix domain socket
2152 AC_ARG_WITH(prngd-socket,
2153         [  --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
2154         [
2155                 case "$withval" in
2156                 yes)
2157                         withval="/var/run/egd-pool"
2158                         ;;
2159                 no)
2160                         withval=""
2161                         ;;
2162                 /*)
2163                         ;;
2164                 *)
2165                         AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
2166                         ;;
2167                 esac
2168
2169                 if test ! -z "$withval" ; then
2170                         if test ! -z "$PRNGD_PORT" ; then
2171                                 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
2172                         fi
2173                         if test ! -r "$withval" ; then
2174                                 AC_MSG_WARN(Entropy socket is not readable)
2175                         fi
2176                         PRNGD_SOCKET="$withval"
2177                         AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET",
2178                                 [Location of PRNGD/EGD random number socket])
2179                 fi
2180         ],
2181         [
2182                 # Check for existing socket only if we don't have a random device already
2183                 if test "$USE_RAND_HELPER" = yes ; then
2184                         AC_MSG_CHECKING(for PRNGD/EGD socket)
2185                         # Insert other locations here
2186                         for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
2187                                 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
2188                                         PRNGD_SOCKET="$sock"
2189                                         AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
2190                                         break;
2191                                 fi
2192                         done
2193                         if test ! -z "$PRNGD_SOCKET" ; then
2194                                 AC_MSG_RESULT($PRNGD_SOCKET)
2195                         else
2196                                 AC_MSG_RESULT(not found)
2197                         fi
2198                 fi
2199         ]
2200 )
2201
2202 # Change default command timeout for hashing entropy source
2203 entropy_timeout=200
2204 AC_ARG_WITH(entropy-timeout,
2205         [  --with-entropy-timeout  Specify entropy gathering command timeout (msec)],
2206         [
2207                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
2208                     test "x${withval}" != "xyes"; then
2209                         entropy_timeout=$withval
2210                 fi
2211         ]
2212 )
2213 AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout,
2214         [Builtin PRNG command timeout])
2215
2216 SSH_PRIVSEP_USER=sshd
2217 AC_ARG_WITH(privsep-user,
2218         [  --with-privsep-user=user Specify non-privileged user for privilege separation],
2219         [
2220                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
2221                     test "x${withval}" != "xyes"; then
2222                         SSH_PRIVSEP_USER=$withval
2223                 fi
2224         ]
2225 )
2226 AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER",
2227         [non-privileged user for privilege separation])
2228 AC_SUBST(SSH_PRIVSEP_USER)
2229
2230 # We do this little dance with the search path to insure
2231 # that programs that we select for use by installed programs
2232 # (which may be run by the super-user) come from trusted
2233 # locations before they come from the user's private area.
2234 # This should help avoid accidentally configuring some
2235 # random version of a program in someone's personal bin.
2236
2237 OPATH=$PATH
2238 PATH=/bin:/usr/bin
2239 test -h /bin 2> /dev/null && PATH=/usr/bin
2240 test -d /sbin && PATH=$PATH:/sbin
2241 test -d /usr/sbin && PATH=$PATH:/usr/sbin
2242 PATH=$PATH:/etc:$OPATH
2243
2244 # These programs are used by the command hashing source to gather entropy
2245 OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
2246 OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
2247 OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
2248 OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
2249 OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
2250 OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
2251 OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
2252 OSSH_PATH_ENTROPY_PROG(PROG_W, w)
2253 OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
2254 OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
2255 OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
2256 OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
2257 OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
2258 OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
2259 OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
2260 OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
2261 # restore PATH
2262 PATH=$OPATH
2263
2264 # Where does ssh-rand-helper get its randomness from?
2265 INSTALL_SSH_PRNG_CMDS=""
2266 if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
2267         if test ! -z "$PRNGD_PORT" ; then
2268                 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
2269         elif test ! -z "$PRNGD_SOCKET" ; then
2270                 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
2271         else
2272                 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
2273                 RAND_HELPER_CMDHASH=yes
2274                 INSTALL_SSH_PRNG_CMDS="yes"
2275         fi
2276 fi
2277 AC_SUBST(INSTALL_SSH_PRNG_CMDS)
2278
2279
2280 # Cheap hack to ensure NEWS-OS libraries are arranged right.
2281 if test ! -z "$SONY" ; then
2282   LIBS="$LIBS -liberty";
2283 fi
2284
2285 # Check for  long long datatypes
2286 AC_CHECK_TYPES([long long, unsigned long long, long double])
2287
2288 # Check datatype sizes
2289 AC_CHECK_SIZEOF(char, 1)
2290 AC_CHECK_SIZEOF(short int, 2)
2291 AC_CHECK_SIZEOF(int, 4)
2292 AC_CHECK_SIZEOF(long int, 4)
2293 AC_CHECK_SIZEOF(long long int, 8)
2294
2295 # Sanity check long long for some platforms (AIX)
2296 if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
2297         ac_cv_sizeof_long_long_int=0
2298 fi
2299
2300 # compute LLONG_MIN and LLONG_MAX if we don't know them.
2301 if test -z "$have_llong_max"; then
2302         AC_MSG_CHECKING([for max value of long long])
2303         AC_RUN_IFELSE(
2304                 [AC_LANG_SOURCE([[
2305 #include <stdio.h>
2306 /* Why is this so damn hard? */
2307 #ifdef __GNUC__
2308 # undef __GNUC__
2309 #endif
2310 #define __USE_ISOC99
2311 #include <limits.h>
2312 #define DATA "conftest.llminmax"
2313 #define my_abs(a) ((a) < 0 ? ((a) * -1) : (a))
2314
2315 /*
2316  * printf in libc on some platforms (eg old Tru64) does not understand %lld so
2317  * we do this the hard way.
2318  */
2319 static int
2320 fprint_ll(FILE *f, long long n)
2321 {
2322         unsigned int i;
2323         int l[sizeof(long long) * 8];
2324
2325         if (n < 0)
2326                 if (fprintf(f, "-") < 0)
2327                         return -1;
2328         for (i = 0; n != 0; i++) {
2329                 l[i] = my_abs(n % 10);
2330                 n /= 10;
2331         }
2332         do {
2333                 if (fprintf(f, "%d", l[--i]) < 0)
2334                         return -1;
2335         } while (i != 0);
2336         if (fprintf(f, " ") < 0)
2337                 return -1;
2338         return 0;
2339 }
2340
2341 int main(void) {
2342         FILE *f;
2343         long long i, llmin, llmax = 0;
2344
2345         if((f = fopen(DATA,"w")) == NULL)
2346                 exit(1);
2347
2348 #if defined(LLONG_MIN) && defined(LLONG_MAX)
2349         fprintf(stderr, "Using system header for LLONG_MIN and LLONG_MAX\n");
2350         llmin = LLONG_MIN;
2351         llmax = LLONG_MAX;
2352 #else
2353         fprintf(stderr, "Calculating  LLONG_MIN and LLONG_MAX\n");
2354         /* This will work on one's complement and two's complement */
2355         for (i = 1; i > llmax; i <<= 1, i++)
2356                 llmax = i;
2357         llmin = llmax + 1LL;    /* wrap */
2358 #endif
2359
2360         /* Sanity check */
2361         if (llmin + 1 < llmin || llmin - 1 < llmin || llmax + 1 > llmax
2362             || llmax - 1 > llmax || llmin == llmax || llmin == 0
2363             || llmax == 0 || llmax < LONG_MAX || llmin > LONG_MIN) {
2364                 fprintf(f, "unknown unknown\n");
2365                 exit(2);
2366         }
2367
2368         if (fprint_ll(f, llmin) < 0)
2369                 exit(3);
2370         if (fprint_ll(f, llmax) < 0)
2371                 exit(4);
2372         if (fclose(f) < 0)
2373                 exit(5);
2374         exit(0);
2375 }
2376                 ]])],
2377                 [
2378                         llong_min=`$AWK '{print $1}' conftest.llminmax`
2379                         llong_max=`$AWK '{print $2}' conftest.llminmax`
2380
2381                         AC_MSG_RESULT($llong_max)
2382                         AC_DEFINE_UNQUOTED(LLONG_MAX, [${llong_max}LL],
2383                             [max value of long long calculated by configure])
2384                         AC_MSG_CHECKING([for min value of long long])
2385                         AC_MSG_RESULT($llong_min)
2386                         AC_DEFINE_UNQUOTED(LLONG_MIN, [${llong_min}LL],
2387                             [min value of long long calculated by configure])
2388                 ],
2389                 [
2390                         AC_MSG_RESULT(not found)
2391                 ],
2392                 [
2393                         AC_MSG_WARN([cross compiling: not checking])
2394                 ]
2395         )
2396 fi
2397
2398
2399 # More checks for data types
2400 AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
2401         AC_TRY_COMPILE(
2402                 [ #include <sys/types.h> ],
2403                 [ u_int a; a = 1;],
2404                 [ ac_cv_have_u_int="yes" ],
2405                 [ ac_cv_have_u_int="no" ]
2406         )
2407 ])
2408 if test "x$ac_cv_have_u_int" = "xyes" ; then
2409         AC_DEFINE(HAVE_U_INT, 1, [define if you have u_int data type])
2410         have_u_int=1
2411 fi
2412
2413 AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
2414         AC_TRY_COMPILE(
2415                 [ #include <sys/types.h> ],
2416                 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
2417                 [ ac_cv_have_intxx_t="yes" ],
2418                 [ ac_cv_have_intxx_t="no" ]
2419         )
2420 ])
2421 if test "x$ac_cv_have_intxx_t" = "xyes" ; then
2422         AC_DEFINE(HAVE_INTXX_T, 1, [define if you have intxx_t data type])
2423         have_intxx_t=1
2424 fi
2425
2426 if (test -z "$have_intxx_t" && \
2427            test "x$ac_cv_header_stdint_h" = "xyes")
2428 then
2429     AC_MSG_CHECKING([for intXX_t types in stdint.h])
2430         AC_TRY_COMPILE(
2431                 [ #include <stdint.h> ],
2432                 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
2433                 [
2434                         AC_DEFINE(HAVE_INTXX_T)
2435                         AC_MSG_RESULT(yes)
2436                 ],
2437                 [ AC_MSG_RESULT(no) ]
2438         )
2439 fi
2440
2441 AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
2442         AC_TRY_COMPILE(
2443                 [
2444 #include <sys/types.h>
2445 #ifdef HAVE_STDINT_H
2446 # include <stdint.h>
2447 #endif
2448 #include <sys/socket.h>
2449 #ifdef HAVE_SYS_BITYPES_H
2450 # include <sys/bitypes.h>
2451 #endif
2452                 ],
2453                 [ int64_t a; a = 1;],
2454                 [ ac_cv_have_int64_t="yes" ],
2455                 [ ac_cv_have_int64_t="no" ]
2456         )
2457 ])
2458 if test "x$ac_cv_have_int64_t" = "xyes" ; then
2459         AC_DEFINE(HAVE_INT64_T, 1, [define if you have int64_t data type])
2460 fi
2461
2462 AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
2463         AC_TRY_COMPILE(
2464                 [ #include <sys/types.h> ],
2465                 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
2466                 [ ac_cv_have_u_intxx_t="yes" ],
2467                 [ ac_cv_have_u_intxx_t="no" ]
2468         )
2469 ])
2470 if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
2471         AC_DEFINE(HAVE_U_INTXX_T, 1, [define if you have u_intxx_t data type])
2472         have_u_intxx_t=1
2473 fi
2474
2475 if test -z "$have_u_intxx_t" ; then
2476     AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
2477         AC_TRY_COMPILE(
2478                 [ #include <sys/socket.h> ],
2479                 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
2480                 [
2481                         AC_DEFINE(HAVE_U_INTXX_T)
2482                         AC_MSG_RESULT(yes)
2483                 ],
2484                 [ AC_MSG_RESULT(no) ]
2485         )
2486 fi
2487
2488 AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
2489         AC_TRY_COMPILE(
2490                 [ #include <sys/types.h> ],
2491                 [ u_int64_t a; a = 1;],
2492                 [ ac_cv_have_u_int64_t="yes" ],
2493                 [ ac_cv_have_u_int64_t="no" ]
2494         )
2495 ])
2496 if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
2497         AC_DEFINE(HAVE_U_INT64_T, 1, [define if you have u_int64_t data type])
2498         have_u_int64_t=1
2499 fi
2500
2501 if test -z "$have_u_int64_t" ; then
2502     AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
2503         AC_TRY_COMPILE(
2504                 [ #include <sys/bitypes.h> ],
2505                 [ u_int64_t a; a = 1],
2506                 [
2507                         AC_DEFINE(HAVE_U_INT64_T)
2508                         AC_MSG_RESULT(yes)
2509                 ],
2510                 [ AC_MSG_RESULT(no) ]
2511         )
2512 fi
2513
2514 if test -z "$have_u_intxx_t" ; then
2515         AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
2516                 AC_TRY_COMPILE(
2517                         [
2518 #include <sys/types.h>
2519                         ],
2520                         [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
2521                         [ ac_cv_have_uintxx_t="yes" ],
2522                         [ ac_cv_have_uintxx_t="no" ]
2523                 )
2524         ])
2525         if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
2526                 AC_DEFINE(HAVE_UINTXX_T, 1,
2527                         [define if you have uintxx_t data type])
2528         fi
2529 fi
2530
2531 if test -z "$have_uintxx_t" ; then
2532     AC_MSG_CHECKING([for uintXX_t types in stdint.h])
2533         AC_TRY_COMPILE(
2534                 [ #include <stdint.h> ],
2535                 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
2536                 [
2537                         AC_DEFINE(HAVE_UINTXX_T)
2538                         AC_MSG_RESULT(yes)
2539                 ],
2540                 [ AC_MSG_RESULT(no) ]
2541         )
2542 fi
2543
2544 if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
2545            test "x$ac_cv_header_sys_bitypes_h" = "xyes")
2546 then
2547         AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
2548         AC_TRY_COMPILE(
2549                 [
2550 #include <sys/bitypes.h>
2551                 ],
2552                 [
2553                         int8_t a; int16_t b; int32_t c;
2554                         u_int8_t e; u_int16_t f; u_int32_t g;
2555                         a = b = c = e = f = g = 1;
2556                 ],
2557                 [
2558                         AC_DEFINE(HAVE_U_INTXX_T)
2559                         AC_DEFINE(HAVE_INTXX_T)
2560                         AC_MSG_RESULT(yes)
2561                 ],
2562                 [AC_MSG_RESULT(no)]
2563         )
2564 fi
2565
2566
2567 AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
2568         AC_TRY_COMPILE(
2569                 [
2570 #include <sys/types.h>
2571                 ],
2572                 [ u_char foo; foo = 125; ],
2573                 [ ac_cv_have_u_char="yes" ],
2574                 [ ac_cv_have_u_char="no" ]
2575         )
2576 ])
2577 if test "x$ac_cv_have_u_char" = "xyes" ; then
2578         AC_DEFINE(HAVE_U_CHAR, 1, [define if you have u_char data type])
2579 fi
2580
2581 TYPE_SOCKLEN_T
2582
2583 AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
2584
2585 AC_CHECK_TYPES(in_addr_t,,,
2586 [#include <sys/types.h>
2587 #include <netinet/in.h>])
2588
2589 AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
2590         AC_TRY_COMPILE(
2591                 [
2592 #include <sys/types.h>
2593                 ],
2594                 [ size_t foo; foo = 1235; ],
2595                 [ ac_cv_have_size_t="yes" ],
2596                 [ ac_cv_have_size_t="no" ]
2597         )
2598 ])
2599 if test "x$ac_cv_have_size_t" = "xyes" ; then
2600         AC_DEFINE(HAVE_SIZE_T, 1, [define if you have size_t data type])
2601 fi
2602
2603 AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
2604         AC_TRY_COMPILE(
2605                 [
2606 #include <sys/types.h>
2607                 ],
2608                 [ ssize_t foo; foo = 1235; ],
2609                 [ ac_cv_have_ssize_t="yes" ],
2610                 [ ac_cv_have_ssize_t="no" ]
2611         )
2612 ])
2613 if test "x$ac_cv_have_ssize_t" = "xyes" ; then
2614         AC_DEFINE(HAVE_SSIZE_T, 1, [define if you have ssize_t data type])
2615 fi
2616
2617 AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
2618         AC_TRY_COMPILE(
2619                 [
2620 #include <time.h>
2621                 ],
2622                 [ clock_t foo; foo = 1235; ],
2623                 [ ac_cv_have_clock_t="yes" ],
2624                 [ ac_cv_have_clock_t="no" ]
2625         )
2626 ])
2627 if test "x$ac_cv_have_clock_t" = "xyes" ; then
2628         AC_DEFINE(HAVE_CLOCK_T, 1, [define if you have clock_t data type])
2629 fi
2630
2631 AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
2632         AC_TRY_COMPILE(
2633                 [
2634 #include <sys/types.h>
2635 #include <sys/socket.h>
2636                 ],
2637                 [ sa_family_t foo; foo = 1235; ],
2638                 [ ac_cv_have_sa_family_t="yes" ],
2639                 [ AC_TRY_COMPILE(
2640                   [
2641 #include <sys/types.h>
2642 #include <sys/socket.h>
2643 #include <netinet/in.h>
2644                 ],
2645                 [ sa_family_t foo; foo = 1235; ],
2646                 [ ac_cv_have_sa_family_t="yes" ],
2647
2648                 [ ac_cv_have_sa_family_t="no" ]
2649         )]
2650         )
2651 ])
2652 if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
2653         AC_DEFINE(HAVE_SA_FAMILY_T, 1,
2654                 [define if you have sa_family_t data type])
2655 fi
2656
2657 AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
2658         AC_TRY_COMPILE(
2659                 [
2660 #include <sys/types.h>
2661                 ],
2662                 [ pid_t foo; foo = 1235; ],
2663                 [ ac_cv_have_pid_t="yes" ],
2664                 [ ac_cv_have_pid_t="no" ]
2665         )
2666 ])
2667 if test "x$ac_cv_have_pid_t" = "xyes" ; then
2668         AC_DEFINE(HAVE_PID_T, 1, [define if you have pid_t data type])
2669 fi
2670
2671 AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
2672         AC_TRY_COMPILE(
2673                 [
2674 #include <sys/types.h>
2675                 ],
2676                 [ mode_t foo; foo = 1235; ],
2677                 [ ac_cv_have_mode_t="yes" ],
2678                 [ ac_cv_have_mode_t="no" ]
2679         )
2680 ])
2681 if test "x$ac_cv_have_mode_t" = "xyes" ; then
2682         AC_DEFINE(HAVE_MODE_T, 1, [define if you have mode_t data type])
2683 fi
2684
2685
2686 AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
2687         AC_TRY_COMPILE(
2688                 [
2689 #include <sys/types.h>
2690 #include <sys/socket.h>
2691                 ],
2692                 [ struct sockaddr_storage s; ],
2693                 [ ac_cv_have_struct_sockaddr_storage="yes" ],
2694                 [ ac_cv_have_struct_sockaddr_storage="no" ]
2695         )
2696 ])
2697 if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
2698         AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE, 1,
2699                 [define if you have struct sockaddr_storage data type])
2700 fi
2701
2702 AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2703         AC_TRY_COMPILE(
2704                 [
2705 #include <sys/types.h>
2706 #include <netinet/in.h>
2707                 ],
2708                 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2709                 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2710                 [ ac_cv_have_struct_sockaddr_in6="no" ]
2711         )
2712 ])
2713 if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
2714         AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6, 1,
2715                 [define if you have struct sockaddr_in6 data type])
2716 fi
2717
2718 AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2719         AC_TRY_COMPILE(
2720                 [
2721 #include <sys/types.h>
2722 #include <netinet/in.h>
2723                 ],
2724                 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2725                 [ ac_cv_have_struct_in6_addr="yes" ],
2726                 [ ac_cv_have_struct_in6_addr="no" ]
2727         )
2728 ])
2729 if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
2730         AC_DEFINE(HAVE_STRUCT_IN6_ADDR, 1,
2731                 [define if you have struct in6_addr data type])
2732 fi
2733
2734 AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2735         AC_TRY_COMPILE(
2736                 [
2737 #include <sys/types.h>
2738 #include <sys/socket.h>
2739 #include <netdb.h>
2740                 ],
2741                 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2742                 [ ac_cv_have_struct_addrinfo="yes" ],
2743                 [ ac_cv_have_struct_addrinfo="no" ]
2744         )
2745 ])
2746 if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2747         AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1,
2748                 [define if you have struct addrinfo data type])
2749 fi
2750
2751 AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2752         AC_TRY_COMPILE(
2753                 [ #include <sys/time.h> ],
2754                 [ struct timeval tv; tv.tv_sec = 1;],
2755                 [ ac_cv_have_struct_timeval="yes" ],
2756                 [ ac_cv_have_struct_timeval="no" ]
2757         )
2758 ])
2759 if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2760         AC_DEFINE(HAVE_STRUCT_TIMEVAL, 1, [define if you have struct timeval])
2761         have_struct_timeval=1
2762 fi
2763
2764 AC_CHECK_TYPES(struct timespec)
2765
2766 # We need int64_t or else certian parts of the compile will fail.
2767 if test "x$ac_cv_have_int64_t" = "xno" && \
2768         test "x$ac_cv_sizeof_long_int" != "x8" && \
2769         test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
2770         echo "OpenSSH requires int64_t support.  Contact your vendor or install"
2771         echo "an alternative compiler (I.E., GCC) before continuing."
2772         echo ""
2773         exit 1;
2774 else
2775 dnl test snprintf (broken on SCO w/gcc)
2776         AC_RUN_IFELSE(
2777                 [AC_LANG_SOURCE([[
2778 #include <stdio.h>
2779 #include <string.h>
2780 #ifdef HAVE_SNPRINTF
2781 main()
2782 {
2783         char buf[50];
2784         char expected_out[50];
2785         int mazsize = 50 ;
2786 #if (SIZEOF_LONG_INT == 8)
2787         long int num = 0x7fffffffffffffff;
2788 #else
2789         long long num = 0x7fffffffffffffffll;
2790 #endif
2791         strcpy(expected_out, "9223372036854775807");
2792         snprintf(buf, mazsize, "%lld", num);
2793         if(strcmp(buf, expected_out) != 0)
2794                 exit(1);
2795         exit(0);
2796 }
2797 #else
2798 main() { exit(0); }
2799 #endif
2800                 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
2801                 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
2802         )
2803 fi
2804
2805 dnl Checks for structure members
2806 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2807 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2808 OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2809 OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2810 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
2811 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
2812 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2813 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
2814 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
2815 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2816 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2817 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2818 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
2819 OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2820 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2821 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2822 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
2823
2824 AC_CHECK_MEMBERS([struct stat.st_blksize])
2825 AC_CHECK_MEMBER([struct __res_state.retrans], [], [AC_DEFINE(__res_state, state,
2826         [Define if we don't have struct __res_state in resolv.h])],
2827 [
2828 #include <stdio.h>
2829 #if HAVE_SYS_TYPES_H
2830 # include <sys/types.h>
2831 #endif
2832 #include <netinet/in.h>
2833 #include <arpa/nameser.h>
2834 #include <resolv.h>
2835 ])
2836
2837 AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2838                 ac_cv_have_ss_family_in_struct_ss, [
2839         AC_TRY_COMPILE(
2840                 [
2841 #include <sys/types.h>
2842 #include <sys/socket.h>
2843                 ],
2844                 [ struct sockaddr_storage s; s.ss_family = 1; ],
2845                 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2846                 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2847         )
2848 ])
2849 if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2850         AC_DEFINE(HAVE_SS_FAMILY_IN_SS, 1, [Fields in struct sockaddr_storage])
2851 fi
2852
2853 AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2854                 ac_cv_have___ss_family_in_struct_ss, [
2855         AC_TRY_COMPILE(
2856                 [
2857 #include <sys/types.h>
2858 #include <sys/socket.h>
2859                 ],
2860                 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2861                 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2862                 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2863         )
2864 ])
2865 if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2866         AC_DEFINE(HAVE___SS_FAMILY_IN_SS, 1,
2867                 [Fields in struct sockaddr_storage])
2868 fi
2869
2870 AC_CACHE_CHECK([for pw_class field in struct passwd],
2871                 ac_cv_have_pw_class_in_struct_passwd, [
2872         AC_TRY_COMPILE(
2873                 [
2874 #include <pwd.h>
2875                 ],
2876                 [ struct passwd p; p.pw_class = 0; ],
2877                 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2878                 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2879         )
2880 ])
2881 if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2882         AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD, 1,
2883                 [Define if your password has a pw_class field])
2884 fi
2885
2886 AC_CACHE_CHECK([for pw_expire field in struct passwd],
2887                 ac_cv_have_pw_expire_in_struct_passwd, [
2888         AC_TRY_COMPILE(
2889                 [
2890 #include <pwd.h>
2891                 ],
2892                 [ struct passwd p; p.pw_expire = 0; ],
2893                 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2894                 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2895         )
2896 ])
2897 if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2898         AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD, 1,
2899                 [Define if your password has a pw_expire field])
2900 fi
2901
2902 AC_CACHE_CHECK([for pw_change field in struct passwd],
2903                 ac_cv_have_pw_change_in_struct_passwd, [
2904         AC_TRY_COMPILE(
2905                 [
2906 #include <pwd.h>
2907                 ],
2908                 [ struct passwd p; p.pw_change = 0; ],
2909                 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2910                 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2911         )
2912 ])
2913 if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2914         AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD, 1,
2915                 [Define if your password has a pw_change field])
2916 fi
2917
2918 dnl make sure we're using the real structure members and not defines
2919 AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2920                 ac_cv_have_accrights_in_msghdr, [
2921         AC_COMPILE_IFELSE(
2922                 [
2923 #include <sys/types.h>
2924 #include <sys/socket.h>
2925 #include <sys/uio.h>
2926 int main() {
2927 #ifdef msg_accrights
2928 #error "msg_accrights is a macro"
2929 exit(1);
2930 #endif
2931 struct msghdr m;
2932 m.msg_accrights = 0;
2933 exit(0);
2934 }
2935                 ],
2936                 [ ac_cv_have_accrights_in_msghdr="yes" ],
2937                 [ ac_cv_have_accrights_in_msghdr="no" ]
2938         )
2939 ])
2940 if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2941         AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR, 1,
2942                 [Define if your system uses access rights style
2943                 file descriptor passing])
2944 fi
2945
2946 AC_CACHE_CHECK([for msg_control field in struct msghdr],
2947                 ac_cv_have_control_in_msghdr, [
2948         AC_COMPILE_IFELSE(
2949                 [
2950 #include <sys/types.h>
2951 #include <sys/socket.h>
2952 #include <sys/uio.h>
2953 int main() {
2954 #ifdef msg_control
2955 #error "msg_control is a macro"
2956 exit(1);
2957 #endif
2958 struct msghdr m;
2959 m.msg_control = 0;
2960 exit(0);
2961 }
2962                 ],
2963                 [ ac_cv_have_control_in_msghdr="yes" ],
2964                 [ ac_cv_have_control_in_msghdr="no" ]
2965         )
2966 ])
2967 if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2968         AC_DEFINE(HAVE_CONTROL_IN_MSGHDR, 1,
2969                 [Define if your system uses ancillary data style
2970                 file descriptor passing])
2971 fi
2972
2973 AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
2974         AC_TRY_LINK([],
2975                 [ extern char *__progname; printf("%s", __progname); ],
2976                 [ ac_cv_libc_defines___progname="yes" ],
2977                 [ ac_cv_libc_defines___progname="no" ]
2978         )
2979 ])
2980 if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2981         AC_DEFINE(HAVE___PROGNAME, 1, [Define if libc defines __progname])
2982 fi
2983
2984 AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2985         AC_TRY_LINK([
2986 #include <stdio.h>
2987 ],
2988                 [ printf("%s", __FUNCTION__); ],
2989                 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2990                 [ ac_cv_cc_implements___FUNCTION__="no" ]
2991         )
2992 ])
2993 if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2994         AC_DEFINE(HAVE___FUNCTION__, 1,
2995                 [Define if compiler implements __FUNCTION__])
2996 fi
2997
2998 AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2999         AC_TRY_LINK([
3000 #include <stdio.h>
3001 ],
3002                 [ printf("%s", __func__); ],
3003                 [ ac_cv_cc_implements___func__="yes" ],
3004                 [ ac_cv_cc_implements___func__="no" ]
3005         )
3006 ])
3007 if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
3008         AC_DEFINE(HAVE___func__, 1, [Define if compiler implements __func__])
3009 fi
3010
3011 AC_CACHE_CHECK([whether va_copy exists], ac_cv_have_va_copy, [
3012         AC_TRY_LINK(
3013                 [#include <stdarg.h>
3014                  va_list x,y;],
3015                 [va_copy(x,y);],
3016                 [ ac_cv_have_va_copy="yes" ],
3017                 [ ac_cv_have_va_copy="no" ]
3018         )
3019 ])
3020 if test "x$ac_cv_have_va_copy" = "xyes" ; then
3021         AC_DEFINE(HAVE_VA_COPY, 1, [Define if va_copy exists])
3022 fi
3023
3024 AC_CACHE_CHECK([whether __va_copy exists], ac_cv_have___va_copy, [
3025         AC_TRY_LINK(
3026                 [#include <stdarg.h>
3027                  va_list x,y;],
3028                 [__va_copy(x,y);],
3029                 [ ac_cv_have___va_copy="yes" ],
3030                 [ ac_cv_have___va_copy="no" ]
3031         )
3032 ])
3033 if test "x$ac_cv_have___va_copy" = "xyes" ; then
3034         AC_DEFINE(HAVE___VA_COPY, 1, [Define if __va_copy exists])
3035 fi
3036
3037 AC_CACHE_CHECK([whether getopt has optreset support],
3038                 ac_cv_have_getopt_optreset, [
3039         AC_TRY_LINK(
3040                 [
3041 #include <getopt.h>
3042                 ],
3043                 [ extern int optreset; optreset = 0; ],
3044                 [ ac_cv_have_getopt_optreset="yes" ],
3045                 [ ac_cv_have_getopt_optreset="no" ]
3046         )
3047 ])
3048 if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
3049         AC_DEFINE(HAVE_GETOPT_OPTRESET, 1,
3050                 [Define if your getopt(3) defines and uses optreset])
3051 fi
3052
3053 AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
3054         AC_TRY_LINK([],
3055                 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
3056                 [ ac_cv_libc_defines_sys_errlist="yes" ],
3057                 [ ac_cv_libc_defines_sys_errlist="no" ]
3058         )
3059 ])
3060 if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
3061         AC_DEFINE(HAVE_SYS_ERRLIST, 1,
3062                 [Define if your system defines sys_errlist[]])
3063 fi
3064
3065
3066 AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
3067         AC_TRY_LINK([],
3068                 [ extern int sys_nerr; printf("%i", sys_nerr);],
3069                 [ ac_cv_libc_defines_sys_nerr="yes" ],
3070                 [ ac_cv_libc_defines_sys_nerr="no" ]
3071         )
3072 ])
3073 if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
3074         AC_DEFINE(HAVE_SYS_NERR, 1, [Define if your system defines sys_nerr])
3075 fi
3076
3077 SCARD_MSG="no"
3078 # Check whether user wants sectok support
3079 AC_ARG_WITH(sectok,
3080         [  --with-sectok           Enable smartcard support using libsectok],
3081         [
3082                 if test "x$withval" != "xno" ; then
3083                         if test "x$withval" != "xyes" ; then
3084                                 CPPFLAGS="$CPPFLAGS -I${withval}"
3085                                 LDFLAGS="$LDFLAGS -L${withval}"
3086                                 if test ! -z "$need_dash_r" ; then
3087                                         LDFLAGS="$LDFLAGS -R${withval}"
3088                                 fi
3089                                 if test ! -z "$blibpath" ; then
3090                                         blibpath="$blibpath:${withval}"
3091                                 fi
3092                         fi
3093                         AC_CHECK_HEADERS(sectok.h)
3094                         if test "$ac_cv_header_sectok_h" != yes; then
3095                                 AC_MSG_ERROR(Can't find sectok.h)
3096                         fi
3097                         AC_CHECK_LIB(sectok, sectok_open)
3098                         if test "$ac_cv_lib_sectok_sectok_open" != yes; then
3099                                 AC_MSG_ERROR(Can't find libsectok)
3100                         fi
3101                         AC_DEFINE(SMARTCARD, 1,
3102                                 [Define if you want smartcard support])
3103                         AC_DEFINE(USE_SECTOK, 1,
3104                                 [Define if you want smartcard support
3105                                 using sectok])
3106                         SCARD_MSG="yes, using sectok"
3107                 fi
3108         ]
3109 )
3110
3111 # Check whether user wants OpenSC support
3112 OPENSC_CONFIG="no"
3113 AC_ARG_WITH(opensc,
3114         [  --with-opensc[[=PFX]]     Enable smartcard support using OpenSC (optionally in PATH)],
3115         [
3116             if test "x$withval" != "xno" ; then
3117                 if test "x$withval" != "xyes" ; then
3118                         OPENSC_CONFIG=$withval/bin/opensc-config
3119                 else
3120                         AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
3121                 fi
3122                 if test "$OPENSC_CONFIG" != "no"; then
3123                         LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
3124                         LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
3125                         CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
3126                         LIBS="$LIBS $LIBOPENSC_LIBS"
3127                         AC_DEFINE(SMARTCARD)
3128                         AC_DEFINE(USE_OPENSC, 1,
3129                                 [Define if you want smartcard support
3130                                 using OpenSC])
3131                         SCARD_MSG="yes, using OpenSC"
3132                 fi
3133             fi
3134         ]
3135 )
3136
3137 # Check libraries needed by DNS fingerprint support
3138 AC_SEARCH_LIBS(getrrsetbyname, resolv,
3139         [AC_DEFINE(HAVE_GETRRSETBYNAME, 1,
3140                 [Define if getrrsetbyname() exists])],
3141         [
3142                 # Needed by our getrrsetbyname()
3143                 AC_SEARCH_LIBS(res_query, resolv)
3144                 AC_SEARCH_LIBS(dn_expand, resolv)
3145                 AC_MSG_CHECKING(if res_query will link)
3146                 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
3147                    [AC_MSG_RESULT(no)
3148                     saved_LIBS="$LIBS"
3149                     LIBS="$LIBS -lresolv"
3150                     AC_MSG_CHECKING(for res_query in -lresolv)
3151                     AC_LINK_IFELSE([
3152 #include <resolv.h>
3153 int main()
3154 {
3155         res_query (0, 0, 0, 0, 0);
3156         return 0;
3157 }
3158                         ],
3159                         [LIBS="$LIBS -lresolv"
3160                          AC_MSG_RESULT(yes)],
3161                         [LIBS="$saved_LIBS"
3162                          AC_MSG_RESULT(no)])
3163                     ])
3164                 AC_CHECK_FUNCS(_getshort _getlong)
3165                 AC_CHECK_DECLS([_getshort, _getlong], , ,
3166                     [#include <sys/types.h>
3167                     #include <arpa/nameser.h>])
3168                 AC_CHECK_MEMBER(HEADER.ad,
3169                         [AC_DEFINE(HAVE_HEADER_AD, 1,
3170                             [Define if HEADER.ad exists in arpa/nameser.h])],,
3171                         [#include <arpa/nameser.h>])
3172         ])
3173
3174 AC_MSG_CHECKING(if struct __res_state _res is an extern)
3175 AC_LINK_IFELSE([
3176 #include <stdio.h>
3177 #if HAVE_SYS_TYPES_H
3178 # include <sys/types.h>
3179 #endif
3180 #include <netinet/in.h>
3181 #include <arpa/nameser.h>
3182 #include <resolv.h>
3183 extern struct __res_state _res;
3184 int main() { return 0; }
3185                 ],
3186                 [AC_MSG_RESULT(yes)
3187                  AC_DEFINE(HAVE__RES_EXTERN, 1,
3188                     [Define if you have struct __res_state _res as an extern])
3189                 ],
3190                 [ AC_MSG_RESULT(no) ]
3191 )
3192
3193 # Check whether user wants SELinux support
3194 SELINUX_MSG="no"
3195 LIBSELINUX=""
3196 AC_ARG_WITH(selinux,
3197         [  --with-selinux   Enable SELinux support],
3198         [ if test "x$withval" != "xno" ; then
3199                 save_LIBS="$LIBS"
3200                 AC_DEFINE(WITH_SELINUX,1,[Define if you want SELinux support.])
3201                 SELINUX_MSG="yes"
3202                 AC_CHECK_HEADER([selinux/selinux.h], ,
3203                     AC_MSG_ERROR(SELinux support requires selinux.h header))
3204                 AC_CHECK_LIB(selinux, setexeccon, [ LIBSELINUX="-lselinux" ],
3205                     AC_MSG_ERROR(SELinux support requires libselinux library))
3206                 SSHDLIBS="$SSHDLIBS $LIBSELINUX"
3207                 AC_CHECK_FUNCS(getseuserbyname get_default_context_with_level)
3208                 LIBS="$save_LIBS"
3209         fi ]
3210 )
3211
3212 # Check whether user wants Kerberos 5 support
3213 KRB5_MSG="no"
3214 AC_ARG_WITH(kerberos5,
3215         [  --with-kerberos5=PATH   Enable Kerberos 5 support],
3216         [ if test "x$withval" != "xno" ; then
3217                 if test "x$withval" = "xyes" ; then
3218                         KRB5ROOT="/usr/local"
3219                 else
3220                         KRB5ROOT=${withval}
3221                 fi
3222
3223                 AC_DEFINE(KRB5, 1, [Define if you want Kerberos 5 support])
3224                 KRB5_MSG="yes"
3225
3226                 AC_MSG_CHECKING(for krb5-config)
3227                 if test -x  $KRB5ROOT/bin/krb5-config ; then
3228                         KRB5CONF=$KRB5ROOT/bin/krb5-config
3229                         AC_MSG_RESULT($KRB5CONF)
3230
3231                         AC_MSG_CHECKING(for gssapi support)
3232                         if $KRB5CONF | grep gssapi >/dev/null ; then
3233                                 AC_MSG_RESULT(yes)
3234                                 AC_DEFINE(GSSAPI, 1,
3235                                         [Define this if you want GSSAPI
3236                                         support in the version 2 protocol])
3237                                 k5confopts=gssapi
3238                         else
3239                                 AC_MSG_RESULT(no)
3240                                 k5confopts=""
3241                         fi
3242                         K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
3243                         K5LIBS="`$KRB5CONF --libs $k5confopts`"
3244                         CPPFLAGS="$CPPFLAGS $K5CFLAGS"
3245                         AC_MSG_CHECKING(whether we are using Heimdal)
3246                         AC_TRY_COMPILE([ #include <krb5.h> ],
3247                                        [ char *tmp = heimdal_version; ],
3248                                        [ AC_MSG_RESULT(yes)
3249                                          AC_DEFINE(HEIMDAL, 1,
3250                                         [Define this if you are using the
3251                                         Heimdal version of Kerberos V5]) ],
3252                                          AC_MSG_RESULT(no)
3253                         )
3254                 else
3255                         AC_MSG_RESULT(no)
3256                         CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
3257                         LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
3258                         AC_MSG_CHECKING(whether we are using Heimdal)
3259                         AC_TRY_COMPILE([ #include <krb5.h> ],
3260                                        [ char *tmp = heimdal_version; ],
3261                                        [ AC_MSG_RESULT(yes)
3262                                          AC_DEFINE(HEIMDAL)
3263                                          K5LIBS="-lkrb5 -ldes"
3264                                          K5LIBS="$K5LIBS -lcom_err -lasn1"
3265                                          AC_CHECK_LIB(roken, net_write,
3266                                            [K5LIBS="$K5LIBS -lroken"])
3267                                        ],
3268                                        [ AC_MSG_RESULT(no)
3269                                          K5LIBS="-lkrb5 -lk5crypto -lcom_err"
3270                                        ]
3271                         )
3272                         AC_SEARCH_LIBS(dn_expand, resolv)
3273
3274                         AC_CHECK_LIB(gssapi,gss_init_sec_context,
3275                                 [ AC_DEFINE(GSSAPI)
3276                                   K5LIBS="-lgssapi $K5LIBS" ],
3277                                 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
3278                                         [ AC_DEFINE(GSSAPI)
3279                                           K5LIBS="-lgssapi_krb5 $K5LIBS" ],
3280                                         AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
3281                                         $K5LIBS)
3282                                 ],
3283                                 $K5LIBS)
3284
3285                         AC_CHECK_HEADER(gssapi.h, ,
3286                                 [ unset ac_cv_header_gssapi_h
3287                                   CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
3288                                   AC_CHECK_HEADERS(gssapi.h, ,
3289                                         AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
3290                                   )
3291                                 ]
3292                         )
3293
3294                         oldCPP="$CPPFLAGS"
3295                         CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
3296                         AC_CHECK_HEADER(gssapi_krb5.h, ,
3297                                         [ CPPFLAGS="$oldCPP" ])
3298
3299                 fi
3300                 if test ! -z "$need_dash_r" ; then
3301                         LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
3302                 fi
3303                 if test ! -z "$blibpath" ; then
3304                         blibpath="$blibpath:${KRB5ROOT}/lib"
3305                 fi
3306
3307                 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
3308                 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
3309                 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
3310
3311                 LIBS="$LIBS $K5LIBS"
3312                 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS, 1,
3313                         [Define this if you want to use libkafs' AFS support]))
3314         fi
3315         ]
3316 )
3317
3318 # Looking for programs, paths and files
3319
3320 PRIVSEP_PATH=/var/empty
3321 AC_ARG_WITH(privsep-path,
3322         [  --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
3323         [
3324                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3325                     test "x${withval}" != "xyes"; then
3326                         PRIVSEP_PATH=$withval
3327                 fi
3328         ]
3329 )
3330 AC_SUBST(PRIVSEP_PATH)
3331
3332 AC_ARG_WITH(xauth,
3333         [  --with-xauth=PATH       Specify path to xauth program ],
3334         [
3335                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3336                     test "x${withval}" != "xyes"; then
3337                         xauth_path=$withval
3338                 fi
3339         ],
3340         [
3341                 TestPath="$PATH"
3342                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
3343                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
3344                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
3345                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
3346                 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
3347                 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
3348                         xauth_path="/usr/openwin/bin/xauth"
3349                 fi
3350         ]
3351 )
3352
3353 STRIP_OPT=-s
3354 AC_ARG_ENABLE(strip,
3355         [  --disable-strip         Disable calling strip(1) on install],
3356         [
3357                 if test "x$enableval" = "xno" ; then
3358                         STRIP_OPT=
3359                 fi
3360         ]
3361 )
3362 AC_SUBST(STRIP_OPT)
3363
3364 if test -z "$xauth_path" ; then
3365         XAUTH_PATH="undefined"
3366         AC_SUBST(XAUTH_PATH)
3367 else
3368         AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path",
3369                 [Define if xauth is found in your path])
3370         XAUTH_PATH=$xauth_path
3371         AC_SUBST(XAUTH_PATH)
3372 fi
3373
3374 # Check for mail directory (last resort if we cannot get it from headers)
3375 if test ! -z "$MAIL" ; then
3376         maildir=`dirname $MAIL`
3377         AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir",
3378                 [Set this to your mail directory if you don't have maillock.h])
3379 fi
3380
3381 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
3382         AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
3383         disable_ptmx_check=yes
3384 fi
3385 if test -z "$no_dev_ptmx" ; then
3386         if test "x$disable_ptmx_check" != "xyes" ; then
3387                 AC_CHECK_FILE("/dev/ptmx",
3388                         [
3389                                 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX, 1,
3390                                         [Define if you have /dev/ptmx])
3391                                 have_dev_ptmx=1
3392                         ]
3393                 )
3394         fi
3395 fi
3396
3397 if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
3398         AC_CHECK_FILE("/dev/ptc",
3399                 [
3400                         AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC, 1,
3401                                 [Define if you have /dev/ptc])
3402                         have_dev_ptc=1
3403                 ]
3404         )
3405 else
3406         AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
3407 fi
3408
3409 # Options from here on. Some of these are preset by platform above
3410 AC_ARG_WITH(mantype,
3411         [  --with-mantype=man|cat|doc  Set man page type],
3412         [
3413                 case "$withval" in
3414                 man|cat|doc)
3415                         MANTYPE=$withval
3416                         ;;
3417                 *)
3418                         AC_MSG_ERROR(invalid man type: $withval)
3419                         ;;
3420                 esac
3421         ]
3422 )
3423 if test -z "$MANTYPE"; then
3424         TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
3425         AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
3426         if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
3427                 MANTYPE=doc
3428         elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
3429                 MANTYPE=man
3430         else
3431                 MANTYPE=cat
3432         fi
3433 fi
3434 AC_SUBST(MANTYPE)
3435 if test "$MANTYPE" = "doc"; then
3436         mansubdir=man;
3437 else
3438         mansubdir=$MANTYPE;
3439 fi
3440 AC_SUBST(mansubdir)
3441
3442 # Check whether to enable MD5 passwords
3443 MD5_MSG="no"
3444 AC_ARG_WITH(md5-passwords,
3445         [  --with-md5-passwords    Enable use of MD5 passwords],
3446         [
3447                 if test "x$withval" != "xno" ; then
3448                         AC_DEFINE(HAVE_MD5_PASSWORDS, 1,
3449                                 [Define if you want to allow MD5 passwords])
3450                         MD5_MSG="yes"
3451                 fi
3452         ]
3453 )
3454
3455 # Whether to disable shadow password support
3456 AC_ARG_WITH(shadow,
3457         [  --without-shadow        Disable shadow password support],
3458         [
3459                 if test "x$withval" = "xno" ; then
3460                         AC_DEFINE(DISABLE_SHADOW)
3461                         disable_shadow=yes
3462                 fi
3463         ]
3464 )
3465
3466 if test -z "$disable_shadow" ; then
3467         AC_MSG_CHECKING([if the systems has expire shadow information])
3468         AC_TRY_COMPILE(
3469         [
3470 #include <sys/types.h>
3471 #include <shadow.h>
3472         struct spwd sp;
3473         ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
3474         [ sp_expire_available=yes ], []
3475         )
3476
3477         if test "x$sp_expire_available" = "xyes" ; then
3478                 AC_MSG_RESULT(yes)
3479                 AC_DEFINE(HAS_SHADOW_EXPIRE, 1,
3480                     [Define if you want to use shadow password expire field])
3481         else
3482                 AC_MSG_RESULT(no)
3483         fi
3484 fi
3485
3486 # Use ip address instead of hostname in $DISPLAY
3487 if test ! -z "$IPADDR_IN_DISPLAY" ; then
3488         DISPLAY_HACK_MSG="yes"
3489         AC_DEFINE(IPADDR_IN_DISPLAY, 1,
3490                 [Define if you need to use IP address
3491                 instead of hostname in $DISPLAY])
3492 else
3493         DISPLAY_HACK_MSG="no"
3494         AC_ARG_WITH(ipaddr-display,
3495                 [  --with-ipaddr-display   Use ip address instead of hostname in \$DISPLAY],
3496                 [
3497                         if test "x$withval" != "xno" ; then
3498                                 AC_DEFINE(IPADDR_IN_DISPLAY)
3499                                 DISPLAY_HACK_MSG="yes"
3500                         fi
3501                 ]
3502         )
3503 fi
3504
3505 # check for /etc/default/login and use it if present.
3506 AC_ARG_ENABLE(etc-default-login,
3507         [  --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
3508         [ if test "x$enableval" = "xno"; then
3509                 AC_MSG_NOTICE([/etc/default/login handling disabled])
3510                 etc_default_login=no
3511           else
3512                 etc_default_login=yes
3513           fi ],
3514         [ if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
3515           then
3516                 AC_MSG_WARN([cross compiling: not checking /etc/default/login])
3517                 etc_default_login=no
3518           else
3519                 etc_default_login=yes
3520           fi ]
3521 )
3522
3523 if test "x$etc_default_login" != "xno"; then
3524         AC_CHECK_FILE("/etc/default/login",
3525             [ external_path_file=/etc/default/login ])
3526         if test "x$external_path_file" = "x/etc/default/login"; then
3527                 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN, 1,
3528                         [Define if your system has /etc/default/login])
3529         fi
3530 fi
3531
3532 dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
3533 if test $ac_cv_func_login_getcapbool = "yes" && \
3534         test $ac_cv_header_login_cap_h = "yes" ; then
3535         external_path_file=/etc/login.conf
3536 fi
3537
3538 # Whether to mess with the default path
3539 SERVER_PATH_MSG="(default)"
3540 AC_ARG_WITH(default-path,
3541         [  --with-default-path=    Specify default \$PATH environment for server],
3542         [
3543                 if test "x$external_path_file" = "x/etc/login.conf" ; then
3544                         AC_MSG_WARN([
3545 --with-default-path=PATH has no effect on this system.
3546 Edit /etc/login.conf instead.])
3547                 elif test "x$withval" != "xno" ; then
3548                         if test ! -z "$external_path_file" ; then
3549                                 AC_MSG_WARN([
3550 --with-default-path=PATH will only be used if PATH is not defined in
3551 $external_path_file .])
3552                         fi
3553                         user_path="$withval"
3554                         SERVER_PATH_MSG="$withval"
3555                 fi
3556         ],
3557         [ if test "x$external_path_file" = "x/etc/login.conf" ; then
3558                 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
3559         else
3560                 if test ! -z "$external_path_file" ; then
3561                         AC_MSG_WARN([
3562 If PATH is defined in $external_path_file, ensure the path to scp is included,
3563 otherwise scp will not work.])
3564                 fi
3565                 AC_RUN_IFELSE(
3566                         [AC_LANG_SOURCE([[
3567 /* find out what STDPATH is */
3568 #include <stdio.h>
3569 #ifdef HAVE_PATHS_H
3570 # include <paths.h>
3571 #endif
3572 #ifndef _PATH_STDPATH
3573 # ifdef _PATH_USERPATH  /* Irix */
3574 #  define _PATH_STDPATH _PATH_USERPATH
3575 # else
3576 #  define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
3577 # endif
3578 #endif
3579 #include <sys/types.h>
3580 #include <sys/stat.h>
3581 #include <fcntl.h>
3582 #define DATA "conftest.stdpath"
3583
3584 main()
3585 {
3586         FILE *fd;
3587         int rc;
3588
3589         fd = fopen(DATA,"w");
3590         if(fd == NULL)
3591                 exit(1);
3592
3593         if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
3594                 exit(1);
3595
3596         exit(0);
3597 }
3598                 ]])],
3599                 [ user_path=`cat conftest.stdpath` ],
3600                 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
3601                 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
3602         )
3603 # make sure $bindir is in USER_PATH so scp will work
3604                 t_bindir=`eval echo ${bindir}`
3605                 case $t_bindir in
3606                         NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
3607                 esac
3608                 case $t_bindir in
3609                         NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
3610                 esac
3611                 echo $user_path | grep ":$t_bindir"  > /dev/null 2>&1
3612                 if test $? -ne 0  ; then
3613                         echo $user_path | grep "^$t_bindir"  > /dev/null 2>&1
3614                         if test $? -ne 0  ; then
3615                                 user_path=$user_path:$t_bindir
3616                                 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
3617                         fi
3618                 fi
3619         fi ]
3620 )
3621 if test "x$external_path_file" != "x/etc/login.conf" ; then
3622         AC_DEFINE_UNQUOTED(USER_PATH, "$user_path", [Specify default $PATH])
3623         AC_SUBST(user_path)
3624 fi
3625
3626 # Set superuser path separately to user path
3627 AC_ARG_WITH(superuser-path,
3628         [  --with-superuser-path=  Specify different path for super-user],
3629         [
3630                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3631                     test "x${withval}" != "xyes"; then
3632                         AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval",
3633                                 [Define if you want a different $PATH
3634                                 for the superuser])
3635                         superuser_path=$withval
3636                 fi
3637         ]
3638 )
3639
3640
3641 AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
3642 IPV4_IN6_HACK_MSG="no"
3643 AC_ARG_WITH(4in6,
3644         [  --with-4in6             Check for and convert IPv4 in IPv6 mapped addresses],
3645         [
3646                 if test "x$withval" != "xno" ; then
3647                         AC_MSG_RESULT(yes)
3648                         AC_DEFINE(IPV4_IN_IPV6, 1,
3649                                 [Detect IPv4 in IPv6 mapped addresses
3650                                 and treat as IPv4])
3651                         IPV4_IN6_HACK_MSG="yes"
3652                 else
3653                         AC_MSG_RESULT(no)
3654                 fi
3655         ],[
3656                 if test "x$inet6_default_4in6" = "xyes"; then
3657                         AC_MSG_RESULT([yes (default)])
3658                         AC_DEFINE(IPV4_IN_IPV6)
3659                         IPV4_IN6_HACK_MSG="yes"
3660                 else
3661                         AC_MSG_RESULT([no (default)])
3662                 fi
3663         ]
3664 )
3665
3666 # Whether to enable BSD auth support
3667 BSD_AUTH_MSG=no
3668 AC_ARG_WITH(bsd-auth,
3669         [  --with-bsd-auth         Enable BSD auth support],
3670         [
3671                 if test "x$withval" != "xno" ; then
3672                         AC_DEFINE(BSD_AUTH, 1,
3673                                 [Define if you have BSD auth support])
3674                         BSD_AUTH_MSG=yes
3675                 fi
3676         ]
3677 )
3678
3679 # Where to place sshd.pid
3680 piddir=/var/run
3681 # make sure the directory exists
3682 if test ! -d $piddir ; then
3683         piddir=`eval echo ${sysconfdir}`
3684         case $piddir in
3685                 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
3686         esac
3687 fi
3688
3689 AC_ARG_WITH(pid-dir,
3690         [  --with-pid-dir=PATH     Specify location of ssh.pid file],
3691         [
3692                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3693                     test "x${withval}" != "xyes"; then
3694                         piddir=$withval
3695                         if test ! -d $piddir ; then
3696                         AC_MSG_WARN([** no $piddir directory on this system **])
3697                         fi
3698                 fi
3699         ]
3700 )
3701
3702 AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir", [Specify location of ssh.pid])
3703 AC_SUBST(piddir)
3704
3705 dnl allow user to disable some login recording features
3706 AC_ARG_ENABLE(lastlog,
3707         [  --disable-lastlog       disable use of lastlog even if detected [no]],
3708         [
3709                 if test "x$enableval" = "xno" ; then
3710                         AC_DEFINE(DISABLE_LASTLOG)
3711                 fi
3712         ]
3713 )
3714 AC_ARG_ENABLE(utmp,
3715         [  --disable-utmp          disable use of utmp even if detected [no]],
3716         [
3717                 if test "x$enableval" = "xno" ; then
3718                         AC_DEFINE(DISABLE_UTMP)
3719                 fi
3720         ]
3721 )
3722 AC_ARG_ENABLE(utmpx,
3723         [  --disable-utmpx         disable use of utmpx even if detected [no]],
3724         [
3725                 if test "x$enableval" = "xno" ; then
3726                         AC_DEFINE(DISABLE_UTMPX, 1,
3727                                 [Define if you don't want to use utmpx])
3728                 fi
3729         ]
3730 )
3731 AC_ARG_ENABLE(wtmp,
3732         [  --disable-wtmp          disable use of wtmp even if detected [no]],
3733         [
3734                 if test "x$enableval" = "xno" ; then
3735                         AC_DEFINE(DISABLE_WTMP)
3736                 fi
3737         ]
3738 )
3739 AC_ARG_ENABLE(wtmpx,
3740         [  --disable-wtmpx         disable use of wtmpx even if detected [no]],
3741         [
3742                 if test "x$enableval" = "xno" ; then
3743                         AC_DEFINE(DISABLE_WTMPX, 1,
3744                                 [Define if you don't want to use wtmpx])
3745                 fi
3746         ]
3747 )
3748 AC_ARG_ENABLE(libutil,
3749         [  --disable-libutil       disable use of libutil (login() etc.) [no]],
3750         [
3751                 if test "x$enableval" = "xno" ; then
3752                         AC_DEFINE(DISABLE_LOGIN)
3753                 fi
3754         ]
3755 )
3756 AC_ARG_ENABLE(pututline,
3757         [  --disable-pututline     disable use of pututline() etc. ([uw]tmp) [no]],
3758         [
3759                 if test "x$enableval" = "xno" ; then
3760                         AC_DEFINE(DISABLE_PUTUTLINE, 1,
3761                                 [Define if you don't want to use pututline()
3762                                 etc. to write [uw]tmp])
3763                 fi
3764         ]
3765 )
3766 AC_ARG_ENABLE(pututxline,
3767         [  --disable-pututxline    disable use of pututxline() etc. ([uw]tmpx) [no]],
3768         [
3769                 if test "x$enableval" = "xno" ; then
3770                         AC_DEFINE(DISABLE_PUTUTXLINE, 1,
3771                                 [Define if you don't want to use pututxline()
3772                                 etc. to write [uw]tmpx])
3773                 fi
3774         ]
3775 )
3776 AC_ARG_WITH(lastlog,
3777   [  --with-lastlog=FILE|DIR specify lastlog location [common locations]],
3778         [
3779                 if test "x$withval" = "xno" ; then
3780                         AC_DEFINE(DISABLE_LASTLOG)
3781                 elif test -n "$withval"  &&  test "x${withval}" != "xyes"; then
3782                         conf_lastlog_location=$withval
3783                 fi
3784         ]
3785 )
3786
3787 dnl lastlog, [uw]tmpx? detection
3788 dnl  NOTE: set the paths in the platform section to avoid the
3789 dnl   need for command-line parameters
3790 dnl lastlog and [uw]tmp are subject to a file search if all else fails
3791
3792 dnl lastlog detection
3793 dnl  NOTE: the code itself will detect if lastlog is a directory
3794 AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
3795 AC_TRY_COMPILE([
3796 #include <sys/types.h>
3797 #include <utmp.h>
3798 #ifdef HAVE_LASTLOG_H
3799 #  include <lastlog.h>
3800 #endif
3801 #ifdef HAVE_PATHS_H
3802 #  include <paths.h>
3803 #endif
3804 #ifdef HAVE_LOGIN_H
3805 # include <login.h>
3806 #endif
3807         ],
3808         [ char *lastlog = LASTLOG_FILE; ],
3809         [ AC_MSG_RESULT(yes) ],
3810         [
3811                 AC_MSG_RESULT(no)
3812                 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
3813                 AC_TRY_COMPILE([
3814 #include <sys/types.h>
3815 #include <utmp.h>
3816 #ifdef HAVE_LASTLOG_H
3817 #  include <lastlog.h>
3818 #endif
3819 #ifdef HAVE_PATHS_H
3820 #  include <paths.h>
3821 #endif
3822                 ],
3823                 [ char *lastlog = _PATH_LASTLOG; ],
3824                 [ AC_MSG_RESULT(yes) ],
3825                 [
3826                         AC_MSG_RESULT(no)
3827                         system_lastlog_path=no
3828                 ])
3829         ]
3830 )
3831
3832 if test -z "$conf_lastlog_location"; then
3833         if test x"$system_lastlog_path" = x"no" ; then
3834                 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
3835                                 if (test -d "$f" || test -f "$f") ; then
3836                                         conf_lastlog_location=$f
3837                                 fi
3838                 done
3839                 if test -z "$conf_lastlog_location"; then
3840                         AC_MSG_WARN([** Cannot find lastlog **])
3841                         dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
3842                 fi
3843         fi
3844 fi
3845
3846 if test -n "$conf_lastlog_location"; then
3847         AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location",
3848                 [Define if you want to specify the path to your lastlog file])
3849 fi
3850
3851 dnl utmp detection
3852 AC_MSG_CHECKING([if your system defines UTMP_FILE])
3853 AC_TRY_COMPILE([
3854 #include <sys/types.h>
3855 #include <utmp.h>
3856 #ifdef HAVE_PATHS_H
3857 #  include <paths.h>
3858 #endif
3859         ],
3860         [ char *utmp = UTMP_FILE; ],
3861         [ AC_MSG_RESULT(yes) ],
3862         [ AC_MSG_RESULT(no)
3863           system_utmp_path=no ]
3864 )
3865 if test -z "$conf_utmp_location"; then
3866         if test x"$system_utmp_path" = x"no" ; then
3867                 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3868                         if test -f $f ; then
3869                                 conf_utmp_location=$f
3870                         fi
3871                 done
3872                 if test -z "$conf_utmp_location"; then
3873                         AC_DEFINE(DISABLE_UTMP)
3874                 fi
3875         fi
3876 fi
3877 if test -n "$conf_utmp_location"; then
3878         AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location",
3879                 [Define if you want to specify the path to your utmp file])
3880 fi
3881
3882 dnl wtmp detection
3883 AC_MSG_CHECKING([if your system defines WTMP_FILE])
3884 AC_TRY_COMPILE([
3885 #include <sys/types.h>
3886 #include <utmp.h>
3887 #ifdef HAVE_PATHS_H
3888 #  include <paths.h>
3889 #endif
3890         ],
3891         [ char *wtmp = WTMP_FILE; ],
3892         [ AC_MSG_RESULT(yes) ],
3893         [ AC_MSG_RESULT(no)
3894           system_wtmp_path=no ]
3895 )
3896 if test -z "$conf_wtmp_location"; then
3897         if test x"$system_wtmp_path" = x"no" ; then
3898                 for f in /usr/adm/wtmp /var/log/wtmp; do
3899                         if test -f $f ; then
3900                                 conf_wtmp_location=$f
3901                         fi
3902                 done
3903                 if test -z "$conf_wtmp_location"; then
3904                         AC_DEFINE(DISABLE_WTMP)
3905                 fi
3906         fi
3907 fi
3908 if test -n "$conf_wtmp_location"; then
3909         AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location",
3910                 [Define if you want to specify the path to your wtmp file])
3911 fi
3912
3913
3914 dnl utmpx detection - I don't know any system so perverse as to require
3915 dnl  utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3916 dnl  there, though.
3917 AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3918 AC_TRY_COMPILE([
3919 #include <sys/types.h>
3920 #include <utmp.h>
3921 #ifdef HAVE_UTMPX_H
3922 #include <utmpx.h>
3923 #endif
3924 #ifdef HAVE_PATHS_H
3925 #  include <paths.h>
3926 #endif
3927         ],
3928         [ char *utmpx = UTMPX_FILE; ],
3929         [ AC_MSG_RESULT(yes) ],
3930         [ AC_MSG_RESULT(no)
3931           system_utmpx_path=no ]
3932 )
3933 if test -z "$conf_utmpx_location"; then
3934         if test x"$system_utmpx_path" = x"no" ; then
3935                 AC_DEFINE(DISABLE_UTMPX)
3936         fi
3937 else
3938         AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location",
3939                 [Define if you want to specify the path to your utmpx file])
3940 fi
3941
3942 dnl wtmpx detection
3943 AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3944 AC_TRY_COMPILE([
3945 #include <sys/types.h>
3946 #include <utmp.h>
3947 #ifdef HAVE_UTMPX_H
3948 #include <utmpx.h>
3949 #endif
3950 #ifdef HAVE_PATHS_H
3951 #  include <paths.h>
3952 #endif
3953         ],
3954         [ char *wtmpx = WTMPX_FILE; ],
3955         [ AC_MSG_RESULT(yes) ],
3956         [ AC_MSG_RESULT(no)
3957           system_wtmpx_path=no ]
3958 )
3959 if test -z "$conf_wtmpx_location"; then
3960         if test x"$system_wtmpx_path" = x"no" ; then
3961                 AC_DEFINE(DISABLE_WTMPX)
3962         fi
3963 else
3964         AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location",
3965                 [Define if you want to specify the path to your wtmpx file])
3966 fi
3967
3968
3969 if test ! -z "$blibpath" ; then
3970         LDFLAGS="$LDFLAGS $blibflags$blibpath"
3971         AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
3972 fi
3973
3974 dnl Adding -Werror to CFLAGS early prevents configure tests from running.
3975 dnl Add now.
3976 CFLAGS="$CFLAGS $werror_flags"
3977
3978 AC_EXEEXT
3979 AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openssh.xml \
3980         openbsd-compat/Makefile openbsd-compat/regress/Makefile \
3981         scard/Makefile ssh_prng_cmds survey.sh])
3982 AC_OUTPUT
3983
3984 # Print summary of options
3985
3986 # Someone please show me a better way :)
3987 A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3988 B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3989 C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3990 D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
3991 E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
3992 F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
3993 G=`eval echo ${piddir}` ; G=`eval echo ${G}`
3994 H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3995 I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3996 J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
3997
3998 echo ""
3999 echo "OpenSSH has been configured with the following options:"
4000 echo "                     User binaries: $B"
4001 echo "                   System binaries: $C"
4002 echo "               Configuration files: $D"
4003 echo "                   Askpass program: $E"
4004 echo "                      Manual pages: $F"
4005 echo "                          PID file: $G"
4006 echo "  Privilege separation chroot path: $H"
4007 if test "x$external_path_file" = "x/etc/login.conf" ; then
4008 echo "   At runtime, sshd will use the path defined in $external_path_file"
4009 echo "   Make sure the path to scp is present, otherwise scp will not work"
4010 else
4011 echo "            sshd default user PATH: $I"
4012         if test ! -z "$external_path_file"; then
4013 echo "   (If PATH is set in $external_path_file it will be used instead. If"
4014 echo "   used, ensure the path to scp is present, otherwise scp will not work.)"
4015         fi
4016 fi
4017 if test ! -z "$superuser_path" ; then
4018 echo "          sshd superuser user PATH: $J"
4019 fi
4020 echo "                    Manpage format: $MANTYPE"
4021 echo "                       PAM support: $PAM_MSG"
4022 echo "                   OSF SIA support: $SIA_MSG"
4023 echo "                 KerberosV support: $KRB5_MSG"
4024 echo "                   SELinux support: $SELINUX_MSG"
4025 echo "                 Smartcard support: $SCARD_MSG"
4026 echo "                     S/KEY support: $SKEY_MSG"
4027 echo "              TCP Wrappers support: $TCPW_MSG"
4028 echo "              MD5 password support: $MD5_MSG"
4029 echo "                   libedit support: $LIBEDIT_MSG"
4030 echo "  Solaris process contract support: $SPC_MSG"
4031 echo "       IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
4032 echo "           Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
4033 echo "                  BSD Auth support: $BSD_AUTH_MSG"
4034 echo "              Random number source: $RAND_MSG"
4035 if test ! -z "$USE_RAND_HELPER" ; then
4036 echo "     ssh-rand-helper collects from: $RAND_HELPER_MSG"
4037 fi
4038
4039 echo ""
4040
4041 echo "              Host: ${host}"
4042 echo "          Compiler: ${CC}"
4043 echo "    Compiler flags: ${CFLAGS}"
4044 echo "Preprocessor flags: ${CPPFLAGS}"
4045 echo "      Linker flags: ${LDFLAGS}"
4046 echo "         Libraries: ${LIBS}"
4047 if test ! -z "${SSHDLIBS}"; then
4048 echo "         +for sshd: ${SSHDLIBS}"
4049 fi
4050
4051 echo ""
4052
4053 if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
4054         echo "SVR4 style packages are supported with \"make package\""
4055         echo ""
4056 fi
4057
4058 if test "x$PAM_MSG" = "xyes" ; then
4059         echo "PAM is enabled. You may need to install a PAM control file "
4060         echo "for sshd, otherwise password authentication may fail. "
4061         echo "Example PAM control files can be found in the contrib/ "
4062         echo "subdirectory"
4063         echo ""
4064 fi
4065
4066 if test ! -z "$RAND_HELPER_CMDHASH" ; then
4067         echo "WARNING: you are using the builtin random number collection "
4068         echo "service. Please read WARNING.RNG and request that your OS "
4069         echo "vendor includes kernel-based random number collection in "
4070         echo "future versions of your OS."
4071         echo ""
4072 fi
4073
4074 if test ! -z "$NO_PEERCHECK" ; then
4075         echo "WARNING: the operating system that you are using does not"
4076         echo "appear to support getpeereid(), getpeerucred() or the"
4077         echo "SO_PEERCRED getsockopt() option. These facilities are used to"
4078         echo "enforce security checks to prevent unauthorised connections to"
4079         echo "ssh-agent. Their absence increases the risk that a malicious"
4080         echo "user can connect to your agent."
4081         echo ""
4082 fi
4083
4084 if test "$AUDIT_MODULE" = "bsm" ; then
4085         echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
4086         echo "See the Solaris section in README.platform for details."
4087 fi