configure.in

   1 AC_INIT(ssh.c)
   2
   3 AC_CONFIG_HEADER(config.h)
   4 AC_CANONICAL_HOST
   5
   6 # C Compiler features
   7 if test "$GCC" = "yes"; then CFLAGS="$CFLAGS -Wall"; fi
   8 AC_C_INLINE
   9
  10 # Checks for programs.
  11 AC_PROG_CC
  12 AC_PROG_CPP
  13 AC_PROG_RANLIB
  14 AC_PROG_INSTALL
  15 AC_CHECK_PROG(AR, ar, ar)
  16 AC_PATH_PROG(PERL, perl)
  17 AC_SUBST(PERL)
  18
  19 # Check for some target-specific stuff
  20 case "$host" in
  21 *-*-aix*)
  22         AFS_LIBS="-lld"
  23         AC_DEFINE(BROKEN_GETADDRINFO)
  24         ;;
  25 *-*-hpux10*)
  26         if test -z "$GCC"; then
  27                 CFLAGS="$CFLAGS -Aa"
  28         fi
  29         CFLAGS="$CFLAGS -D_HPUX_SOURCE"
  30         AC_DEFINE(IPADDR_IN_DISPLAY)
  31         AC_DEFINE(USE_UTMPX)
  32         AC_MSG_CHECKING(for HPUX trusted system password database)
  33         if test -f /tcb/files/auth/system/default; then
  34                 AC_MSG_RESULT(yes)
  35                 AC_DEFINE(HAVE_HPUX_TRUSTED_SYSTEM_PW)
  36                 LIBS="$LIBS -lsec"
  37                 AC_MSG_WARN([This configuration is untested])
  38         else
  39                 AC_MSG_RESULT(no)
  40                 AC_DEFINE(DISABLE_SHADOW)
  41         fi
  42         MANTYPE='$(CATMAN)'
  43         mansubdir=cat
  44         ;;
  45 *-*-irix5*)
  46         MANTYPE='$(CATMAN)'
  47         no_libsocket=1
  48         no_libnsl=1
  49         ;;
  50 *-*-irix6*)
  51         MANTYPE='$(CATMAN)'
  52         AC_MSG_WARN([*** Irix 6.x is not tested, please report you experiences *** ])
  53         no_libsocket=1
  54         no_libnsl=1
  55         ;;
  56 *-*-linux*)
  57         no_dev_ptmx=1
  58         AC_DEFINE(DONT_TRY_OTHER_AF)
  59         inet6_default_4in6=yes
  60         ;;
  61 *-*-netbsd*)
  62         need_dash_r=1
  63         ;;
  64 *-*-solaris*)
  65         need_dash_r=1
  66         LDFLAGS="-L/usr/ucblib"
  67         AC_DEFINE(USE_UTMPX)
  68         ;;
  69 *-*-sysv*)
  70         AC_DEFINE(USE_UTMPX)
  71         MANTYPE='$(CATMAN)'
  72         mansubdir=cat
  73         LIBS="$LIBS -lgen -lsocket"
  74         ;;
  75 esac
  76
  77 # Checks for libraries.
  78 AC_CHECK_LIB(z, deflate, ,AC_MSG_ERROR([*** zlib missing - please install first ***]))
  79 AC_CHECK_LIB(util, login, AC_DEFINE(HAVE_LIBUTIL_LOGIN) LIBS="$LIBS -lutil")
  80
  81 if test -z "$no_libsocket" ; then
  82         AC_CHECK_LIB(nsl, yp_match, , )
  83 fi
  84 if test -z "$no_libnsl" ; then
  85         AC_CHECK_LIB(socket, main, , )
  86 fi
  87
  88 # Checks for header files.
  89 AC_CHECK_HEADERS(bstring.h endian.h lastlog.h login.h maillock.h netdb.h netgroup.h paths.h poll.h pty.h shadow.h security/pam_appl.h sys/bitypes.h sys/bsdtty.h sys/cdefs.h sys/poll.h sys/select.h sys/stropts.h sys/sysmacros.h sys/time.h sys/ttcompat.h stddef.h util.h utmp.h utmpx.h)
  90
  91 # Checks for library functions.
  92 AC_CHECK_FUNCS(arc4random bindresvport_af freeaddrinfo gai_strerror getaddrinfo getnameinfo innetgr md5_crypt mkdtemp openpty rresvport_af setenv seteuid setlogin setproctitle setreuid snprintf strlcat strlcpy updwtmpx vsnprintf _getpty)
  93
  94 AC_CHECK_FUNC(login,
  95         [AC_DEFINE(HAVE_LOGIN)],
  96         [AC_CHECK_LIB(bsd, login, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_LOGIN)])]
  97 )
  98
  99 AC_CHECK_FUNC(daemon,
 100         [AC_DEFINE(HAVE_DAEMON)],
 101         [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
 102 )
 103
 104 AC_CHECK_FUNC(getpagesize,
 105         [AC_DEFINE(HAVE_GETPAGESIZE)],
 106         [AC_CHECK_LIB(ucb, getpagesize, [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
 107 )
 108
 109 AC_ARG_WITH(pam,
 110         [  --without-pam           Disable PAM support ],
 111         [
 112                 if test "x$withval" = "xno" ; then
 113                         no_pam=1
 114                         AC_DEFINE(DISABLE_PAM)
 115                 fi
 116         ]
 117 )
 118 if test -z "$no_pam" -a "x$ac_cv_header_security_pam_appl_h" = "xyes" ; then
 119         AC_CHECK_LIB(dl, dlopen, , )
 120         LIBS="$LIBS -lpam"
 121
 122         # Check PAM strerror arguments (old PAM)
 123         AC_MSG_CHECKING([whether pam_strerror takes only one argument])
 124         AC_TRY_COMPILE(
 125                 [
 126                         #include <stdlib.h>
 127                         #include <security/pam_appl.h>
 128                 ],
 129                 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
 130                 [AC_MSG_RESULT(no)],
 131                 [
 132                         AC_DEFINE(HAVE_OLD_PAM)
 133                         AC_MSG_RESULT(yes)
 134                 ]
 135         )
 136 fi
 137
 138 # The big search for OpenSSL
 139 AC_ARG_WITH(ssl-dir,
 140         [  --with-ssl-dir=PATH     Specify path to OpenSSL installation ],
 141         [
 142                 if test "x$withval" != "$xno" ; then
 143                         tryssldir=$withval
 144                 fi
 145         ]
 146 )
 147
 148 saved_LIBS="$LIBS"
 149 saved_CFLAGS="$CFLAGS"
 150 if test "x$prefix" != "xNONE" ; then
 151         tryssldir="$tryssldir $prefix"
 152 fi
 153 AC_MSG_CHECKING([for OpenSSL/SSLeay directory])
 154 for ssldir in "" $tryssldir /usr /usr/local/openssl /usr/lib/openssl /usr/local/ssl /usr/lib/ssl /usr/local /usr/pkg /opt /opt/openssl ; do
 155         if test ! -z "$ssldir" ; then
 156                 LIBS="$saved_LIBS -L$ssldir/lib -L$ssldir -lcrypto"
 157                 CFLAGS="$CFLAGS -I$ssldir/include"
 158                 if test "x$need_dash_r" = "x1" ; then
 159                         LIBS="$LIBS -R$ssldir/lib -L$ssldir"
 160                 fi
 161         else
 162                 LIBS="$saved_LIBS -lcrypto"
 163         fi
 164
 165         for WANTS_RSAREF in "" 1 ; do
 166
 167                 if test ! -z "$WANTS_RSAREF" ; then
 168                         LIBS="$LIBS -lRSAglue -lrsaref"
 169                 fi
 170
 171                 AC_TRY_RUN(
 172                         [
 173                                 #include <openssl/rsa.h>
 174                                 #include <openssl/bn.h>
 175                                 #include <openssl/sha.h>
 176                                 int main(void)
 177                                 {RSA *key; char seed[2048];memset(seed, 0, sizeof(seed));
 178                                 RAND_seed(seed, sizeof(seed));key=RSA_generate_key(32,3,NULL,NULL);
 179                                 return(key==NULL);}
 180                         ],
 181                         [
 182                                 AC_DEFINE(HAVE_OPENSSL)
 183                                 found_crypto=1
 184                                 break;
 185                         ], []
 186                 )
 187                 AC_TRY_RUN(
 188                         [
 189                                 #include <ssl/rsa.h>
 190                                 #include <ssl/bn.h>
 191                                 #include <ssl/sha.h>
 192                                 int main(void)
 193                                 {RSA *key; char seed[2048];memset(seed, 0, sizeof(seed));
 194                                 RAND_seed(seed, sizeof(seed));key=RSA_generate_key(32,3,NULL,NULL);
 195                                 return(key==NULL);}
 196                         ],
 197                         [
 198                                 AC_DEFINE(HAVE_SSL)
 199                                 found_crypto=1
 200                                 break;
 201                         ], []
 202                 )
 203         done
 204
 205         if test ! -z "$found_crypto" ; then
 206                 break;
 207         fi
 208 done
 209
 210 if test -z "$found_crypto" ; then
 211         AC_MSG_ERROR([Could not find working SSLeay / OpenSSL libraries, please install])
 212 fi
 213 if test -z "$ssldir" ; then
 214         ssldir="(system)"
 215 else
 216         CFLAGS="$CFLAGS -I$ssldir/include"
 217         LDFLAGS="$LDFLAGS -L$ssldir/lib"
 218         if test "x$need_dash_r" = "x1" ; then
 219                 LDFLAGS="$LDFLAGS -R$ssldir"
 220         fi
 221 fi
 222 LIBS="$saved_LIBS -lcrypto"
 223 if test ! -z $WANTS_RSAREF ; then
 224         LIBS="$LIBS -lRSAglue -lrsaref"
 225 fi
 226 AC_MSG_RESULT($ssldir)
 227
 228 # Checks for data types
 229 AC_CHECK_SIZEOF(char, 1)
 230 AC_CHECK_SIZEOF(short int, 2)
 231 AC_CHECK_SIZEOF(int, 4)
 232 AC_CHECK_SIZEOF(long int, 4)
 233 AC_CHECK_SIZEOF(long long int, 8)
 234
 235 # More checks for data types
 236 AC_MSG_CHECKING([for intXX_t types])
 237 AC_TRY_COMPILE(
 238         [#include <sys/types.h>],
 239         [int16_t a; int32_t b; a = 1235; b = 1235;],
 240         [
 241                 AC_DEFINE(HAVE_INTXX_T)
 242                 AC_MSG_RESULT(yes)
 243                 have_intxx_t=1
 244         ],
 245         [AC_MSG_RESULT(no)]
 246 )
 247
 248 AC_MSG_CHECKING([for u_intXX_t types])
 249 AC_TRY_COMPILE(
 250         [#include <sys/types.h>],
 251         [u_int16_t c; u_int32_t d; c = 1235; d = 1235;],
 252         [
 253                 AC_DEFINE(HAVE_U_INTXX_T)
 254                 AC_MSG_RESULT(yes)
 255                 have_u_intxx_t=1
 256         ],
 257         [AC_MSG_RESULT(no)]
 258 )
 259
 260 if test -z "$have_u_intxx_t" -o -z "$have_intxx_t" -a \
 261            "x$ac_cv_header_sys_bitypes_h" = "xyes"
 262 then
 263         AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
 264         AC_TRY_COMPILE(
 265                 [#include <sys/bitypes.h>],
 266                 [
 267                         u_int16_t c; u_int32_t d;
 268                         int16_t e; int32_t f;
 269                         c = 1235; d = 1235;
 270                         e = 1235; f = 1235;
 271                 ],
 272                 [
 273                         AC_DEFINE(HAVE_U_INTXX_T)
 274                         AC_DEFINE(HAVE_INTXX_T)
 275                         AC_MSG_RESULT(yes)
 276                 ],
 277                 [AC_MSG_RESULT(no)]
 278         )
 279 fi
 280
 281 AC_MSG_CHECKING([for uintXX_t types])
 282 AC_TRY_COMPILE(
 283         [#include <sys/types.h>],
 284         [uint16_t c; uint32_t d; c = 1235; d = 1235;],
 285         [
 286                 AC_DEFINE(HAVE_UINTXX_T)
 287                 AC_MSG_RESULT(yes)
 288         ],
 289         [AC_MSG_RESULT(no)]
 290 )
 291
 292 AC_MSG_CHECKING([for socklen_t])
 293 AC_TRY_COMPILE(
 294         [
 295                 #include <sys/types.h>
 296                 #include <sys/socket.h>
 297         ],
 298         [socklen_t foo; foo = 1235;],
 299         [
 300                 AC_DEFINE(HAVE_SOCKLEN_T)
 301                 AC_MSG_RESULT(yes)
 302         ],
 303         [AC_MSG_RESULT(no)]
 304 )
 305
 306 AC_MSG_CHECKING([for size_t])
 307 AC_TRY_COMPILE(
 308         [#include <sys/types.h>],
 309         [size_t foo; foo = 1235;],
 310         [
 311                 AC_DEFINE(HAVE_SIZE_T)
 312                 AC_MSG_RESULT(yes)
 313         ],
 314         [AC_MSG_RESULT(no)]
 315 )
 316
 317 AC_MSG_CHECKING([for struct sockaddr_storage])
 318 AC_TRY_COMPILE(
 319         [
 320                 #include <sys/types.h>
 321                 #include <sys/socket.h>
 322         ],
 323         [struct sockaddr_storage s;],
 324         [
 325                 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE)
 326                 AC_MSG_RESULT(yes)
 327         ],
 328         [AC_MSG_RESULT(no)]
 329 )
 330
 331 AC_MSG_CHECKING([for struct sockaddr_in6])
 332 AC_TRY_COMPILE(
 333         [#include <netinet/in.h>],
 334         [struct sockaddr_in6 s; s.sin6_family = 0;],
 335         [
 336                 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6)
 337                 AC_MSG_RESULT(yes)
 338         ],
 339         [AC_MSG_RESULT(no)]
 340 )
 341
 342 AC_MSG_CHECKING([for struct in6_addr])
 343 AC_TRY_COMPILE(
 344         [#include <netinet/in.h>],
 345         [struct in6_addr s; s.s6_addr[0] = 0;],
 346         [
 347                 AC_DEFINE(HAVE_STRUCT_IN6_ADDR)
 348                 AC_MSG_RESULT(yes)
 349         ],
 350         [AC_MSG_RESULT(no)]
 351 )
 352
 353 AC_MSG_CHECKING([for struct addrinfo])
 354 AC_TRY_COMPILE(
 355         [
 356                 #include <sys/types.h>
 357                 #include <sys/socket.h>
 358                 #include <netdb.h>
 359         ],
 360         [struct addrinfo s; s.ai_flags = AI_PASSIVE;],
 361         [
 362                 AC_DEFINE(HAVE_STRUCT_ADDRINFO)
 363                 AC_MSG_RESULT(yes)
 364         ],
 365         [AC_MSG_RESULT(no)]
 366 )
 367
 368 # Checks for structure members
 369 AC_MSG_CHECKING([whether utmp.h has ut_host field])
 370 AC_EGREP_HEADER(ut_host, utmp.h,
 371         [AC_DEFINE(HAVE_HOST_IN_UTMP) AC_MSG_RESULT(yes); ],
 372         [AC_MSG_RESULT(no)]
 373 )
 374 AC_MSG_CHECKING([whether utmpx.h has ut_host field])
 375 AC_EGREP_HEADER(ut_host, utmpx.h,
 376         [AC_DEFINE(HAVE_HOST_IN_UTMPX) AC_MSG_RESULT(yes); ],
 377         [AC_MSG_RESULT(no)]
 378 )
 379 AC_MSG_CHECKING([whether utmpx.h has syslen field])
 380 AC_EGREP_HEADER(syslen, utmpx.h,
 381         [AC_DEFINE(HAVE_SYSLEN_IN_UTMPX) AC_MSG_RESULT(yes); ],
 382         [AC_MSG_RESULT(no)]
 383 )
 384 AC_MSG_CHECKING([whether utmp.h has ut_pid field])
 385 AC_EGREP_HEADER(ut_pid, utmp.h,
 386         [AC_DEFINE(HAVE_PID_IN_UTMP) AC_MSG_RESULT(yes); ],
 387         [AC_MSG_RESULT(no)]
 388 )
 389 AC_MSG_CHECKING([whether utmp.h has ut_type field])
 390 AC_EGREP_HEADER(ut_type, utmp.h,
 391         [AC_DEFINE(HAVE_TYPE_IN_UTMP) AC_MSG_RESULT(yes); ],
 392         [AC_MSG_RESULT(no)]
 393 )
 394 AC_MSG_CHECKING([whether utmp.h has ut_tv field])
 395 AC_EGREP_HEADER(ut_tv, utmp.h,
 396         [AC_DEFINE(HAVE_TV_IN_UTMP) AC_MSG_RESULT(yes); ],
 397         [AC_MSG_RESULT(no)]
 398 )
 399 AC_MSG_CHECKING([whether utmp.h has ut_id field])
 400 AC_EGREP_HEADER(ut_id, utmp.h,
 401         [AC_DEFINE(HAVE_ID_IN_UTMP) AC_MSG_RESULT(yes); ],
 402         [AC_MSG_RESULT(no)]
 403 )
 404 AC_MSG_CHECKING([whether utmp.h has ut_addr field])
 405 AC_EGREP_HEADER(ut_addr, utmp.h,
 406         [AC_DEFINE(HAVE_ADDR_IN_UTMP) AC_MSG_RESULT(yes); ],
 407         [AC_MSG_RESULT(no)]
 408 )
 409 AC_MSG_CHECKING([whether utmpx.h has ut_addr field])
 410 AC_EGREP_HEADER(ut_addr, utmpx.h,
 411         [AC_DEFINE(HAVE_ADDR_IN_UTMPX) AC_MSG_RESULT(yes); ],
 412         [AC_MSG_RESULT(no)]
 413 )
 414 AC_MSG_CHECKING([whether utmp.h has ut_addr_v6 field])
 415 AC_EGREP_HEADER(ut_addr_v6, utmp.h,
 416         [AC_DEFINE(HAVE_ADDR_V6_IN_UTMP) AC_MSG_RESULT(yes); ],
 417         [AC_MSG_RESULT(no)]
 418 )
 419 AC_MSG_CHECKING([whether utmpx.h has ut_addr_v6 field])
 420 AC_EGREP_HEADER(ut_addr_v6, utmpx.h,
 421         [AC_DEFINE(HAVE_ADDR_V6_IN_UTMPX) AC_MSG_RESULT(yes); ],
 422         [AC_MSG_RESULT(no)]
 423 )
 424
 425 AC_MSG_CHECKING([whether struct sockaddr_storage has ss_family field])
 426 AC_TRY_COMPILE(
 427         [
 428                 #include <sys/types.h>
 429                 #include <sys/socket.h>
 430         ],
 431         [struct sockaddr_storage s; s.ss_family = 1;],
 432         [
 433                 AC_DEFINE(HAVE_SS_FAMILY_IN_SS)
 434                 AC_MSG_RESULT(yes)
 435         ],
 436         [AC_MSG_RESULT(no)]
 437 )
 438 AC_MSG_CHECKING([whether struct sockaddr_storage has __ss_family field])
 439 AC_TRY_COMPILE(
 440         [
 441                 #include <sys/types.h>
 442                 #include <sys/socket.h>
 443         ],
 444         [struct sockaddr_storage s; s.__ss_family = 1;],
 445         [
 446                 AC_DEFINE(HAVE___SS_FAMILY_IN_SS)
 447                 AC_MSG_RESULT(yes)
 448         ],
 449         [AC_MSG_RESULT(no)]
 450 )
 451
 452 AC_MSG_CHECKING([whether libc defines __progname])
 453 AC_TRY_LINK([],
 454         [extern char *__progname; printf("%s", __progname);],
 455         [
 456                 AC_DEFINE(HAVE___PROGNAME)
 457                 AC_MSG_RESULT(yes)
 458         ],
 459         [
 460                 AC_MSG_RESULT(no)
 461         ]
 462 )
 463
 464 # Looking for programs, paths and files
 465 AC_ARG_WITH(rsh,
 466         [  --with-rsh=PATH         Specify path to remote shell program ],
 467         [
 468                 if test "x$withval" != "$no" ; then
 469                         AC_DEFINE_UNQUOTED(RSH_PATH, "$withval")
 470                 fi
 471         ],
 472         [
 473                 AC_PATH_PROG(rsh_path, rsh)
 474         ]
 475 )
 476
 477 AC_ARG_WITH(xauth,
 478         [  --with-xauth=PATH       Specify path to xauth program ],
 479         [
 480                 if test "x$withval" != "$xno" ; then
 481                         AC_DEFINE_UNQUOTED(XAUTH_PATH, "$withval")
 482                 fi
 483         ],
 484         [
 485                 AC_PATH_PROG(xauth_path, xauth)
 486                 if test ! -z "$xauth_path" -a -x "/usr/openwin/bin/xauth" ; then
 487                         xauth_path="/usr/openwin/bin/xauth"
 488                 fi
 489         ]
 490 )
 491
 492 if test ! -z "$xauth_path" ; then
 493         AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path")
 494 fi
 495 if test ! -z "$rsh_path" ; then
 496         AC_DEFINE_UNQUOTED(RSH_PATH, "$rsh_path")
 497 fi
 498
 499 # Check for mail directory (last resort if we cannot get it from headers)
 500 if test ! -z "$MAIL" ; then
 501         maildir=`dirname $MAIL`
 502         AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir")
 503 fi
 504
 505 # Look for lastlog location
 506 AC_ARG_WITH(lastlog,
 507         [  --with-lastlog=FILE     Location of lastlog file],
 508         [
 509                 if test "x$withval" = "xno" ; then
 510                         AC_DEFINE(DISABLE_LASTLOG)
 511                 else
 512                         AC_DEFINE_UNQUOTED(LASTLOG_LOCATION, "$withval")
 513                 fi
 514         ],
 515         [
 516                 AC_MSG_CHECKING([location of lastlog file])
 517                 for lastlog in /var/log/lastlog /var/adm/lastlog /usr/adm/lastlog  /etc/security/lastlog ; do
 518                         if test -f $lastlog ; then
 519                                 gotlastlog="file"
 520                                 break
 521                         fi
 522                         if test -d $lastlog ; then
 523                                 gotlastlog="dir"
 524                                 break
 525                         fi
 526                 done
 527                 if test -z "$gotlastlog" ; then
 528                         AC_MSG_RESULT(not found)
 529                         nolastlog=1
 530                 else
 531                         if test "x$gotlastlog" = "xdir" ; then
 532                                 AC_MSG_RESULT(${lastlog}/)
 533                                 AC_DEFINE(LASTLOG_IS_DIR)
 534                         else
 535                                 AC_MSG_RESULT($lastlog)
 536                                 AC_DEFINE_UNQUOTED(LASTLOG_LOCATION, "$lastlog")
 537                         fi
 538                 fi
 539         ]
 540 )
 541
 542 if test ! -z "$nolastlog" ; then
 543         AC_MSG_WARN([*** Disabling lastlog support *** ])
 544         AC_DEFINE(DISABLE_LASTLOG)
 545 fi
 546
 547 if test -z "$no_dev_ptmx" ; then
 548         AC_CHECK_FILE("/dev/ptmx",
 549                 [
 550                         AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX)
 551                         have_dev_ptmx=1
 552                 ]
 553         )
 554 fi
 555 AC_CHECK_FILE("/dev/ptc",
 556         [
 557                 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC)
 558                 have_dev_ptc=1
 559         ]
 560 )
 561
 562 # Options from here on. Some of these are preset by platform above
 563
 564 # Check whether user wants GNOME ssh-askpass
 565 AC_MSG_CHECKING([whether to build GNOME ssh-askpass])
 566 AC_ARG_WITH(gnome-askpass,
 567         [  --with-gnome-askpass    Build the GNOME passphrase requester (default=no)],
 568         [
 569                 if test "x$withval" = "xno" ; then
 570                         GNOME_ASKPASS="";
 571                 else
 572                         GNOME_ASKPASS="gnome-ssh-askpass";
 573                 fi
 574         ])
 575 AC_SUBST(GNOME_ASKPASS)
 576
 577 if test -z "$GNOME_ASKPASS" ; then
 578         AC_MSG_RESULT(no)
 579 else
 580         AC_MSG_RESULT(yes)
 581 fi
 582
 583 # Check for user-specified random device, otherwise check /dev/urandom
 584 AC_ARG_WITH(random,
 585         [  --with-random=FILE      read randomness from FILE (default=/dev/urandom)],
 586         [
 587                 RANDOM_POOL="$withval";
 588                 AC_DEFINE_UNQUOTED(RANDOM_POOL, "$RANDOM_POOL")
 589         ],
 590         [
 591                 # Check for random device
 592                 AC_CHECK_FILE("/dev/urandom",
 593                         [
 594                                 RANDOM_POOL="/dev/urandom";
 595                                 AC_SUBST(RANDOM_POOL)
 596                                 AC_DEFINE_UNQUOTED(RANDOM_POOL, "$RANDOM_POOL")
 597                         ]
 598                 )
 599         ]
 600 )
 601
 602 # Check for EGD pool file
 603 AC_ARG_WITH(egd-pool,
 604         [  --with-egd-pool=FILE    read randomness from EGD pool FILE (default none)],
 605         [
 606                 RANDOM_POOL="$withval";
 607                 AC_DEFINE(HAVE_EGD)
 608                 AC_SUBST(RANDOM_POOL)
 609                 AC_DEFINE_UNQUOTED(RANDOM_POOL, "$RANDOM_POOL")
 610         ]
 611 )
 612
 613 # Make sure we have some random number support
 614 if test -z "$RANDOM_POOL" -a -z "$EGD_POOL"; then
 615         AC_MSG_ERROR([No random device found, and no EGD random pool specified])
 616 fi
 617
 618 AC_ARG_WITH(catman,
 619         [  --with-catman=man|cat   Install preformatted manpages[no]],
 620         [
 621                 MANTYPE='$(CATMAN)'
 622                 if test x"$withval" != x"yes" ; then
 623                    mansubdir=$withval
 624                 else
 625                    mansubdir=cat
 626                 fi
 627         ], [
 628                 if test -z "$MANTYPE" ; then
 629                         MANTYPE='$(TROFFMAN)'
 630                         mansubdir=man
 631                 fi
 632         ]
 633 )
 634 AC_SUBST(MANTYPE)
 635 AC_SUBST(mansubdir)
 636
 637 # Check whether user wants Kerberos support
 638 AC_ARG_WITH(kerberos4,
 639         [  --with-kerberos4=PATH   Enable Kerberos 4 support],
 640         [
 641                 if test "x$withval" != "xno" ; then
 642
 643                         if test "x$withval" != "$xyes" ; then
 644                                 CFLAGS="$CFLAGS -I${withval}/include"
 645                                 LDFLAGS="$LDFLAGS -L${withval}/lib"
 646                         else
 647                                 if test -d /usr/include/kerberosIV ; then
 648                                         CFLAGS="$CFLAGS -I/usr/include/kerberosIV"
 649                                 fi
 650                         fi
 651
 652                         AC_CHECK_HEADERS(krb.h)
 653                         AC_CHECK_LIB(krb, main)
 654                         if test "$ac_cv_header_krb_h" != yes; then
 655                                 AC_MSG_WARN([Cannot find krb.h, build may fail])
 656                         fi
 657                         if test "$ac_cv_lib_krb_main" != yes; then
 658                                 AC_MSG_WARN([Cannot find libkrb, build may fail])
 659                         fi
 660
 661                         KLIBS="-lkrb -ldes"
 662                         AC_CHECK_LIB(resolv, dn_expand, , )
 663                         KRB4=yes
 664                         AC_DEFINE(KRB4)
 665                 fi
 666         ]
 667 )
 668
 669 # Check whether user wants AFS support
 670 AC_ARG_WITH(afs,
 671         [  --with-afs=PATH         Enable AFS support],
 672         [
 673                 if test "x$withval" != "xno" ; then
 674
 675                         if test "x$withval" != "$xyes" ; then
 676                                 CFLAGS="$CFLAGS -I${withval}/include"
 677                                 LFLAGS="$LFLAGS -L${withval}/lib"
 678                         fi
 679
 680                         if test -z "$KRB4" ; then
 681                                 AC_MSG_WARN([AFS requires Kerberos IV support, build may fail])
 682                         fi
 683
 684                         LIBS="$LIBS -lkafs"
 685                         if test ! -z "$AFS_LIBS" ; then
 686                                 LIBS="$LIBS $AFS_LIBS"
 687                         fi
 688                         AC_DEFINE(AFS)
 689                 fi
 690         ]
 691 )
 692 LIBS="$LIBS $KLIBS"
 693
 694 # Check whether user wants S/Key support
 695 AC_ARG_WITH(skey,
 696         [  --with-skey             Enable S/Key support],
 697         [
 698                 if test "x$withval" != "xno" ; then
 699                         AC_DEFINE(SKEY)
 700                         LIBS="$LIBS -lskey"
 701                 fi
 702         ]
 703 )
 704
 705 # Check whether user wants TCP wrappers support
 706 AC_ARG_WITH(tcp-wrappers,
 707         [  --with-tcp-wrappers     Enable tcpwrappers support],
 708         [
 709                 if test "x$withval" != "xno" ; then
 710                         saved_LIBS="$LIBS"
 711                         LIBS="$LIBS -lwrap"
 712                         AC_MSG_CHECKING(for libwrap)
 713                         AC_TRY_LINK(
 714                                 [
 715                                         #include <tcpd.h>
 716                                         int deny_severity = 0, allow_severity = 0;
 717                                 ],
 718                                 [hosts_access(0);],
 719                                 [
 720                                         AC_MSG_RESULT(yes)
 721                                         AC_DEFINE(LIBWRAP)
 722                                 ],
 723                                 [
 724                                         AC_MSG_RESULT(no)
 725                                         AC_MSG_WARN([*** libwrap missing - tcpwrapper support disabled ***])
 726                                         LIBS="$saved_LIBS"
 727                                 ]
 728                         )
 729                 fi
 730         ]
 731 )
 732
 733 # Check whether to enable MD5 passwords
 734 AC_ARG_WITH(md5-passwords,
 735         [  --with-md5-passwords    Enable use of MD5 passwords],
 736         [
 737                 if test "x$withval" != "xno" ; then
 738                         AC_DEFINE(HAVE_MD5_PASSWORDS)
 739                 fi
 740         ]
 741 )
 742
 743 # Check whether to enable utmpx support
 744 AC_ARG_WITH(utmpx,
 745         [  --with-utmpx            Enable utmpx support],
 746         [
 747                 if test "x$withval" != "xno" ; then
 748                         AC_DEFINE(USE_UTMPX)
 749                 fi
 750         ]
 751 )
 752
 753 # Whether to disable shadow password support
 754 AC_ARG_WITH(shadow,
 755         [  --without-shadow        Disable shadow password support],
 756         [
 757                 if test "x$withval" = "xno" ; then
 758                         AC_DEFINE(DISABLE_SHADOW)
 759                 fi
 760         ]
 761 )
 762
 763 # Use ip address instead of hostname in $DISPLAY
 764 AC_ARG_WITH(ipaddr-display,
 765         [  --with-ipaddr-display   Use ip address instead of hostname in \$DISPLAY],
 766         [
 767                 if test "x$withval" = "xno" ; then
 768                         AC_DEFINE(IPADDR_IN_DISPLAY)
 769                 fi
 770         ]
 771 )
 772
 773 # Whether to mess with the default path
 774 AC_ARG_WITH(default-path,
 775         [  --with-default-path=PATH Specify default \$PATH environment for server],
 776         [
 777                 if test "x$withval" != "xno" ; then
 778                         AC_DEFINE_UNQUOTED(USER_PATH, "$withval")
 779                 fi
 780         ]
 781 )
 782
 783 # Whether to force IPv4 by default (needed on broken glibc Linux)
 784 AC_ARG_WITH(ipv4-default,
 785         [  --with-ipv4-default     Use IPv4 by connections unless '-6' specified],
 786         [
 787                 if test "x$withval" != "xno" ; then
 788                         AC_DEFINE(IPV4_DEFAULT)
 789                 fi
 790         ]
 791 )
 792
 793 AC_MSG_CHECKING([to convert IPv4 in IPv6-mapped addresses])
 794 AC_ARG_WITH(4in6,
 795         [  --with-4in6             Check for and convert IPv4 in IPv6 mapped addresses],
 796         [
 797                 if test "x$withval" != "xno" ; then
 798                         AC_MSG_RESULT(yes)
 799                         AC_DEFINE(IPV4_IN_IPV6)
 800                 else
 801                         AC_MSG_RESULT(no)
 802                 fi
 803         ],[
 804                 if test "x$inet6_default_4in6" = "xyes"; then
 805                         AC_MSG_RESULT([yes (default)])
 806                         AC_DEFINE(IPV4_IN_IPV6)
 807                 else
 808                         AC_MSG_RESULT([no (default)])
 809                 fi
 810         ]
 811 )
 812
 813 # Where to place sshd.pid
 814 piddir=/var/run
 815 AC_ARG_WITH(pid-dir,
 816         [  --with-pid-dir=PATH     Specify location of ssh.pid file],
 817         [
 818                 if test "x$withval" != "xno" ; then
 819                         piddir=$withval
 820                 fi
 821         ]
 822 )
 823 AC_DEFINE_UNQUOTED(PIDDIR, "$piddir")
 824 AC_SUBST(piddir)
 825
 826 AC_OUTPUT(Makefile)