configure.ac

   1 # $Id$
   2 #
   3 # Copyright (c) 1999-2004 Damien Miller
   4 #
   5 # Permission to use, copy, modify, and distribute this software for any
   6 # purpose with or without fee is hereby granted, provided that the above
   7 # copyright notice and this permission notice appear in all copies.
   8 #
   9 # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  10 # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  11 # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  12 # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  13 # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  14 # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  15 # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  16
  17 AC_INIT(OpenSSH, Portable, openssh-unix-dev@mindrot.org)
  18 AC_CONFIG_SRCDIR([ssh.c])
  19
  20 AC_CONFIG_HEADER(config.h)
  21 AC_PROG_CC
  22 AC_CANONICAL_HOST
  23 AC_C_BIGENDIAN
  24
  25 # Checks for programs.
  26 AC_PROG_AWK
  27 AC_PROG_CPP
  28 AC_PROG_RANLIB
  29 AC_PROG_INSTALL
  30 AC_PATH_PROG(AR, ar)
  31 AC_PATH_PROG(CAT, cat)
  32 AC_PATH_PROG(KILL, kill)
  33 AC_PATH_PROGS(PERL, perl5 perl)
  34 AC_PATH_PROG(SED, sed)
  35 AC_SUBST(PERL)
  36 AC_PATH_PROG(ENT, ent)
  37 AC_SUBST(ENT)
  38 AC_PATH_PROG(TEST_MINUS_S_SH, bash)
  39 AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
  40 AC_PATH_PROG(TEST_MINUS_S_SH, sh)
  41 AC_PATH_PROG(SH, sh)
  42 AC_SUBST(TEST_SHELL,sh)
  43
  44 dnl for buildpkg.sh
  45 AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
  46         [/usr/sbin${PATH_SEPARATOR}/etc])
  47 AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
  48         [/usr/sbin${PATH_SEPARATOR}/etc])
  49 AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
  50
  51 # System features
  52 AC_SYS_LARGEFILE
  53
  54 if test -z "$AR" ; then
  55         AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
  56 fi
  57
  58 # Use LOGIN_PROGRAM from environment if possible
  59 if test ! -z "$LOGIN_PROGRAM" ; then
  60         AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM")
  61 else
  62         # Search for login
  63         AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
  64         if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
  65                 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
  66         fi
  67 fi
  68
  69 AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
  70 if test ! -z "$PATH_PASSWD_PROG" ; then
  71         AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG")
  72 fi
  73
  74 if test -z "$LD" ; then
  75         LD=$CC
  76 fi
  77 AC_SUBST(LD)
  78
  79 AC_C_INLINE
  80
  81 AC_CHECK_DECL(LLONG_MAX, have_llong_max=1, , [#include <limits.h>])
  82
  83 if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
  84         CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wuninitialized"
  85         CFLAGS="$CFLAGS -Wsign-compare"
  86
  87         if test -z "$have_llong_max"; then
  88                 # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
  89                 unset ac_cv_have_decl_LLONG_MAX
  90                 saved_CFLAGS="$CFLAGS"
  91                 CFLAGS="$CFLAGS -std=gnu99"
  92                 AC_CHECK_DECL(LLONG_MAX,
  93                     [have_llong_max=1],
  94                     [CFLAGS="$saved_CFLAGS"],
  95                     [#include <limits.h>]
  96                 )
  97         fi
  98 fi
  99
 100 if test -z "$have_llong_max"; then
 101         AC_MSG_CHECKING([for max value of long long])
 102         AC_RUN_IFELSE(
 103                 [AC_LANG_SOURCE([[
 104 #include <stdio.h>
 105 /* Why is this so damn hard? */
 106 #ifdef __GNUC__
 107 # undef __GNUC__
 108 #endif
 109 #define __USE_ISOC99
 110 #include <limits.h>
 111 #define DATA "conftest.llminmax"
 112 int main(void) {
 113         FILE *f;
 114         long long i, llmin, llmax = 0;
 115
 116         if((f = fopen(DATA,"w")) == NULL)
 117                 exit(1);
 118
 119 #if defined(LLONG_MIN) && defined(LLONG_MAX)
 120         fprintf(stderr, "Using system header for LLONG_MIN and LLONG_MAX\n");
 121         llmin = LLONG_MIN;
 122         llmax = LLONG_MAX;
 123 #else
 124         fprintf(stderr, "Calculating  LLONG_MIN and LLONG_MAX\n");
 125         /* This will work on one's complement and two's complement */
 126         for (i = 1; i > llmax; i <<= 1, i++)
 127                 llmax = i;
 128         llmin = llmax + 1LL;    /* wrap */
 129 #endif
 130
 131         /* Sanity check */
 132         if (llmin + 1 < llmin || llmin - 1 < llmin || llmax + 1 > llmax
 133             || llmax - 1 > llmax) {
 134                 fprintf(f, "unknown unknown\n");
 135                 exit(2);
 136         }
 137
 138         if (fprintf(f ,"%lld %lld", llmin, llmax) < 0)
 139                 exit(3);
 140
 141         exit(0);
 142 }
 143                 ]])],
 144                 [
 145                         llong_min=`$AWK '{print $1}' conftest.llminmax`
 146                         llong_max=`$AWK '{print $2}' conftest.llminmax`
 147                         AC_MSG_RESULT($llong_max)
 148                         AC_DEFINE_UNQUOTED(LLONG_MAX, [${llong_max}LL],
 149                             [max value of long long calculated by configure])
 150                         AC_MSG_CHECKING([for min value of long long])
 151                         AC_MSG_RESULT($llong_min)
 152                         AC_DEFINE_UNQUOTED(LLONG_MIN, [${llong_min}LL],
 153                             [min value of long long calculated by configure])
 154                 ],
 155                 [
 156                         AC_MSG_RESULT(not found)
 157                 ],
 158                 [
 159                         AC_MSG_WARN([cross compiling: not checking])
 160                 ]
 161         )
 162 fi
 163
 164 AC_ARG_WITH(rpath,
 165         [  --without-rpath         Disable auto-added -R linker paths],
 166         [
 167                 if test "x$withval" = "xno" ; then
 168                         need_dash_r=""
 169                 fi
 170                 if test "x$withval" = "xyes" ; then
 171                         need_dash_r=1
 172                 fi
 173         ]
 174 )
 175
 176 # Check for some target-specific stuff
 177 case "$host" in
 178 *-*-aix*)
 179         AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
 180         if (test -z "$blibpath"); then
 181                 blibpath="/usr/lib:/lib"
 182         fi
 183         saved_LDFLAGS="$LDFLAGS"
 184         for tryflags in -blibpath: -Wl,-blibpath: -Wl,-rpath, ;do
 185                 if (test -z "$blibflags"); then
 186                         LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
 187                         AC_TRY_LINK([], [], [blibflags=$tryflags])
 188                 fi
 189         done
 190         if (test -z "$blibflags"); then
 191                 AC_MSG_RESULT(not found)
 192                 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
 193         else
 194                 AC_MSG_RESULT($blibflags)
 195         fi
 196         LDFLAGS="$saved_LDFLAGS"
 197         dnl Check for authenticate.  Might be in libs.a on older AIXes
 198         AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE)],
 199                 [AC_CHECK_LIB(s,authenticate,
 200                         [ AC_DEFINE(WITH_AIXAUTHENTICATE)
 201                                 LIBS="$LIBS -ls"
 202                         ])
 203                 ])
 204         dnl Check for various auth function declarations in headers.
 205         AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
 206             passwdexpired, setauthdb], , , [#include <usersec.h>])
 207         dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
 208         AC_CHECK_DECLS(loginfailed,
 209                  [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
 210                   AC_TRY_COMPILE(
 211                         [#include <usersec.h>],
 212                         [(void)loginfailed("user","host","tty",0);],
 213                         [AC_MSG_RESULT(yes)
 214                          AC_DEFINE(AIX_LOGINFAILED_4ARG)],
 215                         [AC_MSG_RESULT(no)]
 216                 )],
 217                 [],
 218                 [#include <usersec.h>]
 219         )
 220         AC_CHECK_FUNCS(setauthdb)
 221         check_for_aix_broken_getaddrinfo=1
 222         AC_DEFINE(BROKEN_REALPATH)
 223         AC_DEFINE(SETEUID_BREAKS_SETUID)
 224         AC_DEFINE(BROKEN_SETREUID)
 225         AC_DEFINE(BROKEN_SETREGID)
 226         dnl AIX handles lastlog as part of its login message
 227         AC_DEFINE(DISABLE_LASTLOG)
 228         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 229         AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
 230         ;;
 231 *-*-cygwin*)
 232         check_for_libcrypt_later=1
 233         LIBS="$LIBS /usr/lib/textmode.o"
 234         AC_DEFINE(HAVE_CYGWIN)
 235         AC_DEFINE(USE_PIPES)
 236         AC_DEFINE(DISABLE_SHADOW)
 237         AC_DEFINE(IP_TOS_IS_BROKEN)
 238         AC_DEFINE(NO_X11_UNIX_SOCKETS)
 239         AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT)
 240         AC_DEFINE(DISABLE_FD_PASSING)
 241         ;;
 242 *-*-dgux*)
 243         AC_DEFINE(IP_TOS_IS_BROKEN)
 244         AC_DEFINE(SETEUID_BREAKS_SETUID)
 245         AC_DEFINE(BROKEN_SETREUID)
 246         AC_DEFINE(BROKEN_SETREGID)
 247         ;;
 248 *-*-darwin*)
 249         AC_MSG_CHECKING(if we have working getaddrinfo)
 250         AC_TRY_RUN([#include <mach-o/dyld.h>
 251 main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
 252                 exit(0);
 253         else
 254                 exit(1);
 255 }], [AC_MSG_RESULT(working)],
 256         [AC_MSG_RESULT(buggy)
 257         AC_DEFINE(BROKEN_GETADDRINFO)],
 258         [AC_MSG_RESULT(assume it is working)])
 259         AC_DEFINE(SETEUID_BREAKS_SETUID)
 260         AC_DEFINE(BROKEN_SETREUID)
 261         AC_DEFINE(BROKEN_SETREGID)
 262         AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1)
 263         ;;
 264 *-*-hpux*)
 265         # first we define all of the options common to all HP-UX releases
 266         CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
 267         IPADDR_IN_DISPLAY=yes
 268         AC_DEFINE(USE_PIPES)
 269         AC_DEFINE(LOGIN_NO_ENDOPT)
 270         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 271         AC_DEFINE(LOCKED_PASSWD_STRING, "*")
 272         AC_DEFINE(SPT_TYPE,SPT_PSTAT)
 273         LIBS="$LIBS -lsec"
 274         AC_CHECK_LIB(xnet, t_error, ,
 275             AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
 276
 277         # next, we define all of the options specific to major releases
 278         case "$host" in
 279         *-*-hpux10*)
 280                 if test -z "$GCC"; then
 281                         CFLAGS="$CFLAGS -Ae"
 282                 fi
 283                 ;;
 284         *-*-hpux11*)
 285                 AC_DEFINE(PAM_SUN_CODEBASE)
 286                 AC_DEFINE(DISABLE_UTMP)
 287                 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
 288                 check_for_hpux_broken_getaddrinfo=1
 289                 check_for_conflicting_getspnam=1
 290                 ;;
 291         esac
 292
 293         # lastly, we define options specific to minor releases
 294         case "$host" in
 295         *-*-hpux10.26)
 296                 AC_DEFINE(HAVE_SECUREWARE)
 297                 disable_ptmx_check=yes
 298                 LIBS="$LIBS -lsecpw"
 299                 ;;
 300         esac
 301         ;;
 302 *-*-irix5*)
 303         PATH="$PATH:/usr/etc"
 304         AC_DEFINE(BROKEN_INET_NTOA)
 305         AC_DEFINE(SETEUID_BREAKS_SETUID)
 306         AC_DEFINE(BROKEN_SETREUID)
 307         AC_DEFINE(BROKEN_SETREGID)
 308         AC_DEFINE(WITH_ABBREV_NO_TTY)
 309         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 310         ;;
 311 *-*-irix6*)
 312         PATH="$PATH:/usr/etc"
 313         AC_DEFINE(WITH_IRIX_ARRAY)
 314         AC_DEFINE(WITH_IRIX_PROJECT)
 315         AC_DEFINE(WITH_IRIX_AUDIT)
 316         AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS)])
 317         AC_DEFINE(BROKEN_INET_NTOA)
 318         AC_DEFINE(SETEUID_BREAKS_SETUID)
 319         AC_DEFINE(BROKEN_SETREUID)
 320         AC_DEFINE(BROKEN_SETREGID)
 321         AC_DEFINE(BROKEN_UPDWTMPX)
 322         AC_DEFINE(WITH_ABBREV_NO_TTY)
 323         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 324         ;;
 325 *-*-linux*)
 326         no_dev_ptmx=1
 327         check_for_libcrypt_later=1
 328         check_for_openpty_ctty_bug=1
 329         AC_DEFINE(DONT_TRY_OTHER_AF)
 330         AC_DEFINE(PAM_TTY_KLUDGE)
 331         AC_DEFINE(LOCKED_PASSWD_PREFIX, "!")
 332         AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
 333         AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM)
 334         AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
 335         AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
 336         inet6_default_4in6=yes
 337         case `uname -r` in
 338         1.*|2.0.*)
 339                 AC_DEFINE(BROKEN_CMSG_TYPE)
 340                 ;;
 341         esac
 342         ;;
 343 mips-sony-bsd|mips-sony-newsos4)
 344         AC_DEFINE(NEED_SETPRGP, [], [Need setpgrp to acquire controlling tty])
 345         SONY=1
 346         ;;
 347 *-*-netbsd*)
 348         check_for_libcrypt_before=1
 349         if test "x$withval" != "xno" ; then
 350                 need_dash_r=1
 351         fi
 352         ;;
 353 *-*-freebsd*)
 354         check_for_libcrypt_later=1
 355         ;;
 356 *-*-bsdi*)
 357         AC_DEFINE(SETEUID_BREAKS_SETUID)
 358         AC_DEFINE(BROKEN_SETREUID)
 359         AC_DEFINE(BROKEN_SETREGID)
 360         ;;
 361 *-next-*)
 362         conf_lastlog_location="/usr/adm/lastlog"
 363         conf_utmp_location=/etc/utmp
 364         conf_wtmp_location=/usr/adm/wtmp
 365         MAIL=/usr/spool/mail
 366         AC_DEFINE(HAVE_NEXT)
 367         AC_DEFINE(BROKEN_REALPATH)
 368         AC_DEFINE(USE_PIPES)
 369         AC_DEFINE(BROKEN_SAVED_UIDS)
 370         ;;
 371 *-*-openbsd*)
 372         AC_DEFINE(HAVE_ATTRIBUTE__SENTINEL__, 1, [OpenBSD's gcc has sentinel])
 373         ;;
 374 *-*-solaris*)
 375         if test "x$withval" != "xno" ; then
 376                 need_dash_r=1
 377         fi
 378         AC_DEFINE(PAM_SUN_CODEBASE)
 379         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 380         AC_DEFINE(LOGIN_NEEDS_TERM)
 381         AC_DEFINE(PAM_TTY_KLUDGE)
 382         AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID)
 383         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 384         # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
 385         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 386         external_path_file=/etc/default/login
 387         # hardwire lastlog location (can't detect it on some versions)
 388         conf_lastlog_location="/var/adm/lastlog"
 389         AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
 390         sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
 391         if test "$sol2ver" -ge 8; then
 392                 AC_MSG_RESULT(yes)
 393                 AC_DEFINE(DISABLE_UTMP)
 394                 AC_DEFINE(DISABLE_WTMP)
 395         else
 396                 AC_MSG_RESULT(no)
 397         fi
 398         ;;
 399 *-*-sunos4*)
 400         CPPFLAGS="$CPPFLAGS -DSUNOS4"
 401         AC_CHECK_FUNCS(getpwanam)
 402         AC_DEFINE(PAM_SUN_CODEBASE)
 403         conf_utmp_location=/etc/utmp
 404         conf_wtmp_location=/var/adm/wtmp
 405         conf_lastlog_location=/var/adm/lastlog
 406         AC_DEFINE(USE_PIPES)
 407         ;;
 408 *-ncr-sysv*)
 409         LIBS="$LIBS -lc89"
 410         AC_DEFINE(USE_PIPES)
 411         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 412         AC_DEFINE(SETEUID_BREAKS_SETUID)
 413         AC_DEFINE(BROKEN_SETREUID)
 414         AC_DEFINE(BROKEN_SETREGID)
 415         ;;
 416 *-sni-sysv*)
 417         # /usr/ucblib MUST NOT be searched on ReliantUNIX
 418         AC_CHECK_LIB(dl, dlsym, ,)
 419         # -lresolv needs to be at then end of LIBS or DNS lookups break
 420         AC_CHECK_LIB(res_query, resolv, [ LIBS="$LIBS -lresolv" ])
 421         IPADDR_IN_DISPLAY=yes
 422         AC_DEFINE(USE_PIPES)
 423         AC_DEFINE(IP_TOS_IS_BROKEN)
 424         AC_DEFINE(SETEUID_BREAKS_SETUID)
 425         AC_DEFINE(BROKEN_SETREUID)
 426         AC_DEFINE(BROKEN_SETREGID)
 427         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 428         external_path_file=/etc/default/login
 429         # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
 430         # Attention: always take care to bind libsocket and libnsl before libc,
 431         # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
 432         ;;
 433 # UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
 434 *-*-sysv4.2*)
 435         AC_DEFINE(USE_PIPES)
 436         AC_DEFINE(SETEUID_BREAKS_SETUID)
 437         AC_DEFINE(BROKEN_SETREUID)
 438         AC_DEFINE(BROKEN_SETREGID)
 439         AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
 440         ;;
 441 # UnixWare 7.x, OpenUNIX 8
 442 *-*-sysv5*)
 443         AC_DEFINE(USE_PIPES)
 444         AC_DEFINE(SETEUID_BREAKS_SETUID)
 445         AC_DEFINE(BROKEN_SETREUID)
 446         AC_DEFINE(BROKEN_SETREGID)
 447         AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
 448         case "$host" in
 449         *-*-sysv5SCO_SV*)       # SCO OpenServer 6.x
 450                 TEST_SHELL=/u95/bin/sh
 451                 ;;
 452         esac
 453         ;;
 454 *-*-sysv*)
 455         ;;
 456 # SCO UNIX and OEM versions of SCO UNIX
 457 *-*-sco3.2v4*)
 458         AC_MSG_ERROR("This Platform is no longer supported.")
 459         ;;
 460 # SCO OpenServer 5.x
 461 *-*-sco3.2v5*)
 462         if test -z "$GCC"; then
 463                 CFLAGS="$CFLAGS -belf"
 464         fi
 465         LIBS="$LIBS -lprot -lx -ltinfo -lm"
 466         no_dev_ptmx=1
 467         AC_DEFINE(USE_PIPES)
 468         AC_DEFINE(HAVE_SECUREWARE)
 469         AC_DEFINE(DISABLE_SHADOW)
 470         AC_DEFINE(DISABLE_FD_PASSING)
 471         AC_DEFINE(SETEUID_BREAKS_SETUID)
 472         AC_DEFINE(BROKEN_SETREUID)
 473         AC_DEFINE(BROKEN_SETREGID)
 474         AC_DEFINE(WITH_ABBREV_NO_TTY)
 475         AC_DEFINE(BROKEN_UPDWTMPX)
 476         AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
 477         AC_CHECK_FUNCS(getluid setluid)
 478         MANTYPE=man
 479         TEST_SHELL=ksh
 480         ;;
 481 *-*-unicosmk*)
 482         AC_DEFINE(NO_SSH_LASTLOG)
 483         AC_DEFINE(SETEUID_BREAKS_SETUID)
 484         AC_DEFINE(BROKEN_SETREUID)
 485         AC_DEFINE(BROKEN_SETREGID)
 486         AC_DEFINE(USE_PIPES)
 487         AC_DEFINE(DISABLE_FD_PASSING)
 488         LDFLAGS="$LDFLAGS"
 489         LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
 490         MANTYPE=cat
 491         ;;
 492 *-*-unicosmp*)
 493         AC_DEFINE(SETEUID_BREAKS_SETUID)
 494         AC_DEFINE(BROKEN_SETREUID)
 495         AC_DEFINE(BROKEN_SETREGID)
 496         AC_DEFINE(WITH_ABBREV_NO_TTY)
 497         AC_DEFINE(USE_PIPES)
 498         AC_DEFINE(DISABLE_FD_PASSING)
 499         LDFLAGS="$LDFLAGS"
 500         LIBS="$LIBS -lgen -lacid -ldb"
 501         MANTYPE=cat
 502         ;;
 503 *-*-unicos*)
 504         AC_DEFINE(SETEUID_BREAKS_SETUID)
 505         AC_DEFINE(BROKEN_SETREUID)
 506         AC_DEFINE(BROKEN_SETREGID)
 507         AC_DEFINE(USE_PIPES)
 508         AC_DEFINE(DISABLE_FD_PASSING)
 509         AC_DEFINE(NO_SSH_LASTLOG)
 510         LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
 511         LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
 512         MANTYPE=cat
 513         ;;
 514 *-dec-osf*)
 515         AC_MSG_CHECKING(for Digital Unix SIA)
 516         no_osfsia=""
 517         AC_ARG_WITH(osfsia,
 518                 [  --with-osfsia           Enable Digital Unix SIA],
 519                 [
 520                         if test "x$withval" = "xno" ; then
 521                                 AC_MSG_RESULT(disabled)
 522                                 no_osfsia=1
 523                         fi
 524                 ],
 525         )
 526         if test -z "$no_osfsia" ; then
 527                 if test -f /etc/sia/matrix.conf; then
 528                         AC_MSG_RESULT(yes)
 529                         AC_DEFINE(HAVE_OSF_SIA)
 530                         AC_DEFINE(DISABLE_LOGIN)
 531                         AC_DEFINE(DISABLE_FD_PASSING)
 532                         LIBS="$LIBS -lsecurity -ldb -lm -laud"
 533                 else
 534                         AC_MSG_RESULT(no)
 535                         AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin")
 536                 fi
 537         fi
 538         AC_DEFINE(BROKEN_GETADDRINFO)
 539         AC_DEFINE(SETEUID_BREAKS_SETUID)
 540         AC_DEFINE(BROKEN_SETREUID)
 541         AC_DEFINE(BROKEN_SETREGID)
 542         ;;
 543
 544 *-*-nto-qnx)
 545         AC_DEFINE(USE_PIPES)
 546         AC_DEFINE(NO_X11_UNIX_SOCKETS)
 547         AC_DEFINE(MISSING_NFDBITS)
 548         AC_DEFINE(MISSING_HOWMANY)
 549         AC_DEFINE(MISSING_FD_MASK)
 550         ;;
 551
 552 *-*-ultrix*)
 553         AC_DEFINE(BROKEN_GETGROUPS, [], [getgroups(0,NULL) will return -1])
 554         AC_DEFINE(BROKEN_MMAP, [], [Ultrix mmap can't map files])
 555         AC_DEFINE(NEED_SETPRGP, [], [Need setpgrp to acquire controlling tty])
 556         AC_DEFINE(HAVE_SYS_SYSLOG_H, 1, [Force use of sys/syslog.h on Ultrix])
 557         ;;
 558 esac
 559
 560 # Allow user to specify flags
 561 AC_ARG_WITH(cflags,
 562         [  --with-cflags           Specify additional flags to pass to compiler],
 563         [
 564                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 565                     test "x${withval}" != "xyes"; then
 566                         CFLAGS="$CFLAGS $withval"
 567                 fi
 568         ]
 569 )
 570 AC_ARG_WITH(cppflags,
 571         [  --with-cppflags         Specify additional flags to pass to preprocessor] ,
 572         [
 573                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 574                     test "x${withval}" != "xyes"; then
 575                         CPPFLAGS="$CPPFLAGS $withval"
 576                 fi
 577         ]
 578 )
 579 AC_ARG_WITH(ldflags,
 580         [  --with-ldflags          Specify additional flags to pass to linker],
 581         [
 582                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 583                     test "x${withval}" != "xyes"; then
 584                         LDFLAGS="$LDFLAGS $withval"
 585                 fi
 586         ]
 587 )
 588 AC_ARG_WITH(libs,
 589         [  --with-libs             Specify additional libraries to link with],
 590         [
 591                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 592                     test "x${withval}" != "xyes"; then
 593                         LIBS="$LIBS $withval"
 594                 fi
 595         ]
 596 )
 597 AC_ARG_WITH(Werror,
 598         [  --with-Werror           Build main code with -Werror],
 599         [
 600                 if test -n "$withval"  &&  test "x$withval" != "xno"; then
 601                         werror_flags="-Werror"
 602                         if "x${withval}" != "xyes"; then
 603                                 werror_flags="$withval"
 604                         fi
 605                 fi
 606         ]
 607 )
 608
 609 AC_MSG_CHECKING(compiler and flags for sanity)
 610 AC_RUN_IFELSE(
 611         [AC_LANG_SOURCE([
 612 #include <stdio.h>
 613 int main(){exit(0);}
 614         ])],
 615         [       AC_MSG_RESULT(yes) ],
 616         [
 617                 AC_MSG_RESULT(no)
 618                 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
 619         ],
 620         [       AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
 621 )
 622
 623 dnl Checks for header files.
 624 AC_CHECK_HEADERS( \
 625         bstring.h \
 626         crypt.h \
 627         dirent.h \
 628         endian.h \
 629         features.h \
 630         floatingpoint.h \
 631         getopt.h \
 632         glob.h \
 633         ia.h \
 634         lastlog.h \
 635         limits.h \
 636         login.h \
 637         login_cap.h \
 638         maillock.h \
 639         ndir.h \
 640         netdb.h \
 641         netgroup.h \
 642         netinet/in_systm.h \
 643         pam/pam_appl.h \
 644         paths.h \
 645         pty.h \
 646         readpassphrase.h \
 647         rpc/types.h \
 648         security/pam_appl.h \
 649         shadow.h \
 650         stddef.h \
 651         stdint.h \
 652         string.h \
 653         strings.h \
 654         sys/audit.h \
 655         sys/bitypes.h \
 656         sys/bsdtty.h \
 657         sys/cdefs.h \
 658         sys/dir.h \
 659         sys/mman.h \
 660         sys/ndir.h \
 661         sys/prctl.h \
 662         sys/pstat.h \
 663         sys/select.h \
 664         sys/stat.h \
 665         sys/stream.h \
 666         sys/stropts.h \
 667         sys/strtio.h \
 668         sys/sysmacros.h \
 669         sys/time.h \
 670         sys/timers.h \
 671         sys/un.h \
 672         time.h \
 673         tmpdir.h \
 674         ttyent.h \
 675         unistd.h \
 676         usersec.h \
 677         util.h \
 678         utime.h \
 679         utmp.h \
 680         utmpx.h \
 681         vis.h \
 682 )
 683
 684 # sys/ptms.h requires sys/stream.h to be included first on Solaris
 685 AC_CHECK_HEADERS(sys/ptms.h, [], [], [
 686 #ifdef HAVE_SYS_STREAM_H
 687 # include <sys/stream.h>
 688 #endif
 689 ])
 690
 691 # Checks for libraries.
 692 AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
 693 AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
 694
 695 dnl IRIX and Solaris 2.5.1 have dirname() in libgen
 696 AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
 697         AC_CHECK_LIB(gen, dirname,[
 698                 AC_CACHE_CHECK([for broken dirname],
 699                         ac_cv_have_broken_dirname, [
 700                         save_LIBS="$LIBS"
 701                         LIBS="$LIBS -lgen"
 702                         AC_TRY_RUN(
 703                                 [
 704 #include <libgen.h>
 705 #include <string.h>
 706
 707 int main(int argc, char **argv) {
 708     char *s, buf[32];
 709
 710     strncpy(buf,"/etc", 32);
 711     s = dirname(buf);
 712     if (!s || strncmp(s, "/", 32) != 0) {
 713         exit(1);
 714     } else {
 715         exit(0);
 716     }
 717 }
 718                                 ],
 719                                 [ ac_cv_have_broken_dirname="no" ],
 720                                 [ ac_cv_have_broken_dirname="yes" ]
 721                         )
 722                         LIBS="$save_LIBS"
 723                 ])
 724                 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
 725                         LIBS="$LIBS -lgen"
 726                         AC_DEFINE(HAVE_DIRNAME)
 727                         AC_CHECK_HEADERS(libgen.h)
 728                 fi
 729         ])
 730 ])
 731
 732 AC_CHECK_FUNC(getspnam, ,
 733         AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
 734 AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME))
 735
 736 dnl zlib is required
 737 AC_ARG_WITH(zlib,
 738         [  --with-zlib=PATH        Use zlib in PATH],
 739         [ if test "x$withval" = "xno" ; then
 740                 AC_MSG_ERROR([*** zlib is required ***])
 741           elif test "x$withval" != "xyes"; then
 742                 if test -d "$withval/lib"; then
 743                         if test -n "${need_dash_r}"; then
 744                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
 745                         else
 746                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
 747                         fi
 748                 else
 749                         if test -n "${need_dash_r}"; then
 750                                 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
 751                         else
 752                                 LDFLAGS="-L${withval} ${LDFLAGS}"
 753                         fi
 754                 fi
 755                 if test -d "$withval/include"; then
 756                         CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
 757                 else
 758                         CPPFLAGS="-I${withval} ${CPPFLAGS}"
 759                 fi
 760         fi ]
 761 )
 762
 763 AC_CHECK_LIB(z, deflate, ,
 764         [
 765                 saved_CPPFLAGS="$CPPFLAGS"
 766                 saved_LDFLAGS="$LDFLAGS"
 767                 save_LIBS="$LIBS"
 768                 dnl Check default zlib install dir
 769                 if test -n "${need_dash_r}"; then
 770                         LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
 771                 else
 772                         LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
 773                 fi
 774                 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
 775                 LIBS="$LIBS -lz"
 776                 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
 777                         [
 778                                 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
 779                         ]
 780                 )
 781         ]
 782 )
 783 AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
 784
 785 AC_ARG_WITH(zlib-version-check,
 786         [  --without-zlib-version-check Disable zlib version check],
 787         [  if test "x$withval" = "xno" ; then
 788                 zlib_check_nonfatal=1
 789            fi
 790         ]
 791 )
 792
 793 AC_MSG_CHECKING(for possibly buggy zlib)
 794 AC_RUN_IFELSE([AC_LANG_SOURCE([[
 795 #include <stdio.h>
 796 #include <zlib.h>
 797 int main()
 798 {
 799         int a=0, b=0, c=0, d=0, n, v;
 800         n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
 801         if (n != 3 && n != 4)
 802                 exit(1);
 803         v = a*1000000 + b*10000 + c*100 + d;
 804         fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
 805
 806         /* 1.1.4 is OK */
 807         if (a == 1 && b == 1 && c >= 4)
 808                 exit(0);
 809
 810         /* 1.2.3 and up are OK */
 811         if (v >= 1020300)
 812                 exit(0);
 813
 814         exit(2);
 815 }
 816         ]])],
 817         AC_MSG_RESULT(no),
 818         [ AC_MSG_RESULT(yes)
 819           if test -z "$zlib_check_nonfatal" ; then
 820                 AC_MSG_ERROR([*** zlib too old - check config.log ***
 821 Your reported zlib version has known security problems.  It's possible your
 822 vendor has fixed these problems without changing the version number.  If you
 823 are sure this is the case, you can disable the check by running
 824 "./configure --without-zlib-version-check".
 825 If you are in doubt, upgrade zlib to version 1.2.3 or greater.
 826 See http://www.gzip.org/zlib/ for details.])
 827           else
 828                 AC_MSG_WARN([zlib version may have security problems])
 829           fi
 830         ],
 831         [       AC_MSG_WARN([cross compiling: not checking zlib version]) ]
 832 )
 833
 834 dnl UnixWare 2.x
 835 AC_CHECK_FUNC(strcasecmp,
 836         [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
 837 )
 838 AC_CHECK_FUNC(utimes,
 839         [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
 840                                         LIBS="$LIBS -lc89"]) ]
 841 )
 842
 843 dnl    Checks for libutil functions
 844 AC_CHECK_HEADERS(libutil.h)
 845 AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN)])
 846 AC_CHECK_FUNCS(logout updwtmp logwtmp)
 847
 848 AC_FUNC_STRFTIME
 849
 850 # Check for ALTDIRFUNC glob() extension
 851 AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
 852 AC_EGREP_CPP(FOUNDIT,
 853         [
 854                 #include <glob.h>
 855                 #ifdef GLOB_ALTDIRFUNC
 856                 FOUNDIT
 857                 #endif
 858         ],
 859         [
 860                 AC_DEFINE(GLOB_HAS_ALTDIRFUNC)
 861                 AC_MSG_RESULT(yes)
 862         ],
 863         [
 864                 AC_MSG_RESULT(no)
 865         ]
 866 )
 867
 868 # Check for g.gl_matchc glob() extension
 869 AC_MSG_CHECKING(for gl_matchc field in glob_t)
 870 AC_EGREP_CPP(FOUNDIT,
 871         [
 872                 #include <glob.h>
 873                 int main(void){glob_t g; g.gl_matchc = 1;}
 874         ],
 875         [
 876                 AC_DEFINE(GLOB_HAS_GL_MATCHC)
 877                 AC_MSG_RESULT(yes)
 878         ],
 879         [
 880                 AC_MSG_RESULT(no)
 881         ]
 882 )
 883
 884 AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
 885 AC_RUN_IFELSE(
 886         [AC_LANG_SOURCE([[
 887 #include <sys/types.h>
 888 #include <dirent.h>
 889 int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
 890         ]])],
 891         [AC_MSG_RESULT(yes)],
 892         [
 893                 AC_MSG_RESULT(no)
 894                 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
 895         ],
 896         [
 897                 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
 898                 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
 899         ]
 900 )
 901
 902 AC_MSG_CHECKING([for /proc/pid/fd directory])
 903 if test -d "/proc/$$/fd" ; then
 904         AC_DEFINE(HAVE_PROC_PID)
 905         AC_MSG_RESULT(yes)
 906 else
 907         AC_MSG_RESULT(no)
 908 fi
 909
 910 # Check whether user wants S/Key support
 911 SKEY_MSG="no"
 912 AC_ARG_WITH(skey,
 913         [  --with-skey[[=PATH]]      Enable S/Key support (optionally in PATH)],
 914         [
 915                 if test "x$withval" != "xno" ; then
 916
 917                         if test "x$withval" != "xyes" ; then
 918                                 CPPFLAGS="$CPPFLAGS -I${withval}/include"
 919                                 LDFLAGS="$LDFLAGS -L${withval}/lib"
 920                         fi
 921
 922                         AC_DEFINE(SKEY)
 923                         LIBS="-lskey $LIBS"
 924                         SKEY_MSG="yes"
 925
 926                         AC_MSG_CHECKING([for s/key support])
 927                         AC_TRY_RUN(
 928                                 [
 929 #include <stdio.h>
 930 #include <skey.h>
 931 int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
 932                                 ],
 933                                 [AC_MSG_RESULT(yes)],
 934                                 [
 935                                         AC_MSG_RESULT(no)
 936                                         AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
 937                                 ])
 938                         AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
 939                         AC_TRY_COMPILE(
 940                                 [#include <stdio.h>
 941                                  #include <skey.h>],
 942                                 [(void)skeychallenge(NULL,"name","",0);],
 943                                 [AC_MSG_RESULT(yes)
 944                                  AC_DEFINE(SKEYCHALLENGE_4ARG)],
 945                                 [AC_MSG_RESULT(no)]
 946                         )
 947                 fi
 948         ]
 949 )
 950
 951 # Check whether user wants TCP wrappers support
 952 TCPW_MSG="no"
 953 AC_ARG_WITH(tcp-wrappers,
 954         [  --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
 955         [
 956                 if test "x$withval" != "xno" ; then
 957                         saved_LIBS="$LIBS"
 958                         saved_LDFLAGS="$LDFLAGS"
 959                         saved_CPPFLAGS="$CPPFLAGS"
 960                         if test -n "${withval}" && \
 961                             test "x${withval}" != "xyes"; then
 962                                 if test -d "${withval}/lib"; then
 963                                         if test -n "${need_dash_r}"; then
 964                                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
 965                                         else
 966                                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
 967                                         fi
 968                                 else
 969                                         if test -n "${need_dash_r}"; then
 970                                                 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
 971                                         else
 972                                                 LDFLAGS="-L${withval} ${LDFLAGS}"
 973                                         fi
 974                                 fi
 975                                 if test -d "${withval}/include"; then
 976                                         CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
 977                                 else
 978                                         CPPFLAGS="-I${withval} ${CPPFLAGS}"
 979                                 fi
 980                         fi
 981                         LIBWRAP="-lwrap"
 982                         LIBS="$LIBWRAP $LIBS"
 983                         AC_MSG_CHECKING(for libwrap)
 984                         AC_TRY_LINK(
 985                                 [
 986 #include <sys/types.h>
 987 #include <sys/socket.h>
 988 #include <netinet/in.h>
 989 #include <tcpd.h>
 990                                         int deny_severity = 0, allow_severity = 0;
 991                                 ],
 992                                 [hosts_access(0);],
 993                                 [
 994                                         AC_MSG_RESULT(yes)
 995                                         AC_DEFINE(LIBWRAP)
 996                                         AC_SUBST(LIBWRAP)
 997                                         TCPW_MSG="yes"
 998                                 ],
 999                                 [
1000                                         AC_MSG_ERROR([*** libwrap missing])
1001                                 ]
1002                         )
1003                         LIBS="$saved_LIBS"
1004                 fi
1005         ]
1006 )
1007
1008 # Check whether user wants libedit support
1009 LIBEDIT_MSG="no"
1010 AC_ARG_WITH(libedit,
1011         [  --with-libedit[[=PATH]]   Enable libedit support for sftp],
1012         [ if test "x$withval" != "xno" ; then
1013                 if test "x$withval" != "xyes"; then
1014                         CPPFLAGS="$CPPFLAGS -I$withval/include"
1015                         LDFLAGS="$LDFLAGS -L$withval/lib"
1016                 fi
1017                 AC_CHECK_LIB(edit, el_init,
1018                         [ AC_DEFINE(USE_LIBEDIT, [], [Use libedit for sftp])
1019                           LIBEDIT="-ledit -lcurses"
1020                           LIBEDIT_MSG="yes"
1021                           AC_SUBST(LIBEDIT)
1022                         ],
1023                         [ AC_MSG_ERROR(libedit not found) ],
1024                         [ -lcurses ]
1025                 )
1026                 AC_MSG_CHECKING(if libedit version is compatible)
1027                 AC_COMPILE_IFELSE(
1028                     [AC_LANG_SOURCE([[
1029 #include <histedit.h>
1030 int main(void)
1031 {
1032         int i = H_SETSIZE;
1033         el_init("", NULL, NULL, NULL);
1034         exit(0);
1035 }
1036                     ]])],
1037                     [ AC_MSG_RESULT(yes) ],
1038                     [ AC_MSG_RESULT(no)
1039                       AC_MSG_ERROR(libedit version is not compatible) ]
1040                 )
1041         fi ]
1042 )
1043
1044 AUDIT_MODULE=none
1045 AC_ARG_WITH(audit,
1046         [  --with-audit=module     Enable EXPERIMENTAL audit support (modules=debug,bsm)],
1047         [
1048           AC_MSG_CHECKING(for supported audit module)
1049           case "$withval" in
1050           bsm)
1051                 AC_MSG_RESULT(bsm)
1052                 AUDIT_MODULE=bsm
1053                 dnl    Checks for headers, libs and functions
1054                 AC_CHECK_HEADERS(bsm/audit.h, [],
1055                     [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)])
1056                 AC_CHECK_LIB(bsm, getaudit, [],
1057                     [AC_MSG_ERROR(BSM enabled and required library not found)])
1058                 AC_CHECK_FUNCS(getaudit, [],
1059                     [AC_MSG_ERROR(BSM enabled and required function not found)])
1060                 # These are optional
1061                 AC_CHECK_FUNCS(getaudit_addr)
1062                 AC_DEFINE(USE_BSM_AUDIT, [], [Use BSM audit module])
1063                 ;;
1064           debug)
1065                 AUDIT_MODULE=debug
1066                 AC_MSG_RESULT(debug)
1067                 AC_DEFINE(SSH_AUDIT_EVENTS, [], Use audit debugging module)
1068                 ;;
1069           no)
1070                 AC_MSG_RESULT(no)
1071                 ;;
1072           *)
1073                 AC_MSG_ERROR([Unknown audit module $withval])
1074                 ;;
1075         esac ]
1076 )
1077
1078 dnl    Checks for library functions. Please keep in alphabetical order
1079 AC_CHECK_FUNCS( \
1080         arc4random \
1081         b64_ntop \
1082         __b64_ntop \
1083         b64_pton \
1084         __b64_pton \
1085         bcopy \
1086         bindresvport_sa \
1087         clock \
1088         closefrom \
1089         dirfd \
1090         fchmod \
1091         fchown \
1092         freeaddrinfo \
1093         futimes \
1094         getaddrinfo \
1095         getcwd \
1096         getgrouplist \
1097         getnameinfo \
1098         getopt \
1099         getpeereid \
1100         _getpty \
1101         getrlimit \
1102         getttyent \
1103         glob \
1104         inet_aton \
1105         inet_ntoa \
1106         inet_ntop \
1107         innetgr \
1108         login_getcapbool \
1109         md5_crypt \
1110         memmove \
1111         mkdtemp \
1112         mmap \
1113         ngetaddrinfo \
1114         nsleep \
1115         ogetaddrinfo \
1116         openlog_r \
1117         openpty \
1118         prctl \
1119         pstat \
1120         readpassphrase \
1121         realpath \
1122         recvmsg \
1123         rresvport_af \
1124         sendmsg \
1125         setdtablesize \
1126         setegid \
1127         setenv \
1128         seteuid \
1129         setgroups \
1130         setlogin \
1131         setpcred \
1132         setproctitle \
1133         setregid \
1134         setreuid \
1135         setrlimit \
1136         setsid \
1137         setvbuf \
1138         sigaction \
1139         sigvec \
1140         snprintf \
1141         socketpair \
1142         strdup \
1143         strerror \
1144         strlcat \
1145         strlcpy \
1146         strmode \
1147         strnvis \
1148         strtonum \
1149         strtoll \
1150         strtoul \
1151         sysconf \
1152         tcgetpgrp \
1153         truncate \
1154         unsetenv \
1155         updwtmpx \
1156         utimes \
1157         vhangup \
1158         vsnprintf \
1159         waitpid \
1160 )
1161
1162 # IRIX has a const char return value for gai_strerror()
1163 AC_CHECK_FUNCS(gai_strerror,[
1164         AC_DEFINE(HAVE_GAI_STRERROR)
1165         AC_TRY_COMPILE([
1166 #include <sys/types.h>
1167 #include <sys/socket.h>
1168 #include <netdb.h>
1169
1170 const char *gai_strerror(int);],[
1171 char *str;
1172
1173 str = gai_strerror(0);],[
1174                 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
1175                 [Define if gai_strerror() returns const char *])])])
1176
1177 AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP))
1178
1179 dnl Make sure prototypes are defined for these before using them.
1180 AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
1181 AC_CHECK_DECL(strsep,
1182         [AC_CHECK_FUNCS(strsep)],
1183         [],
1184         [
1185 #ifdef HAVE_STRING_H
1186 # include <string.h>
1187 #endif
1188         ])
1189
1190 dnl tcsendbreak might be a macro
1191 AC_CHECK_DECL(tcsendbreak,
1192         [AC_DEFINE(HAVE_TCSENDBREAK)],
1193         [AC_CHECK_FUNCS(tcsendbreak)],
1194         [#include <termios.h>]
1195 )
1196
1197 AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
1198
1199 AC_CHECK_FUNCS(setresuid, [
1200         dnl Some platorms have setresuid that isn't implemented, test for this
1201         AC_MSG_CHECKING(if setresuid seems to work)
1202         AC_RUN_IFELSE(
1203                 [AC_LANG_SOURCE([[
1204 #include <stdlib.h>
1205 #include <errno.h>
1206 int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
1207                 ]])],
1208                 [AC_MSG_RESULT(yes)],
1209                 [AC_DEFINE(BROKEN_SETRESUID)
1210                  AC_MSG_RESULT(not implemented)],
1211                 [AC_MSG_WARN([cross compiling: not checking setresuid])]
1212         )
1213 ])
1214
1215 AC_CHECK_FUNCS(setresgid, [
1216         dnl Some platorms have setresgid that isn't implemented, test for this
1217         AC_MSG_CHECKING(if setresgid seems to work)
1218         AC_RUN_IFELSE(
1219                 [AC_LANG_SOURCE([[
1220 #include <stdlib.h>
1221 #include <errno.h>
1222 int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
1223                 ]])],
1224                 [AC_MSG_RESULT(yes)],
1225                 [AC_DEFINE(BROKEN_SETRESGID)
1226                  AC_MSG_RESULT(not implemented)],
1227                 [AC_MSG_WARN([cross compiling: not checking setresuid])]
1228         )
1229 ])
1230
1231 dnl    Checks for time functions
1232 AC_CHECK_FUNCS(gettimeofday time)
1233 dnl    Checks for utmp functions
1234 AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1235 AC_CHECK_FUNCS(utmpname)
1236 dnl    Checks for utmpx functions
1237 AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1238 AC_CHECK_FUNCS(setutxent utmpxname)
1239
1240 AC_CHECK_FUNC(daemon,
1241         [AC_DEFINE(HAVE_DAEMON)],
1242         [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
1243 )
1244
1245 AC_CHECK_FUNC(getpagesize,
1246         [AC_DEFINE(HAVE_GETPAGESIZE)],
1247         [AC_CHECK_LIB(ucb, getpagesize, [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
1248 )
1249
1250 # Check for broken snprintf
1251 if test "x$ac_cv_func_snprintf" = "xyes" ; then
1252         AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1253         AC_RUN_IFELSE(
1254                 [AC_LANG_SOURCE([[
1255 #include <stdio.h>
1256 int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
1257                 ]])],
1258                 [AC_MSG_RESULT(yes)],
1259                 [
1260                         AC_MSG_RESULT(no)
1261                         AC_DEFINE(BROKEN_SNPRINTF)
1262                         AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1263                 ],
1264                 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
1265         )
1266 fi
1267
1268 # Check for missing getpeereid (or equiv) support
1269 NO_PEERCHECK=""
1270 if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1271         AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1272         AC_TRY_COMPILE(
1273                 [#include <sys/types.h>
1274                  #include <sys/socket.h>],
1275                 [int i = SO_PEERCRED;],
1276                 [ AC_MSG_RESULT(yes)
1277                   AC_DEFINE(HAVE_SO_PEERCRED, [], [Have PEERCRED socket option])
1278                 ],
1279                 [AC_MSG_RESULT(no)
1280                 NO_PEERCHECK=1]
1281         )
1282 fi
1283
1284 dnl see whether mkstemp() requires XXXXXX
1285 if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1286 AC_MSG_CHECKING([for (overly) strict mkstemp])
1287 AC_TRY_RUN(
1288         [
1289 #include <stdlib.h>
1290 main() { char template[]="conftest.mkstemp-test";
1291 if (mkstemp(template) == -1)
1292         exit(1);
1293 unlink(template); exit(0);
1294 }
1295         ],
1296         [
1297                 AC_MSG_RESULT(no)
1298         ],
1299         [
1300                 AC_MSG_RESULT(yes)
1301                 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1302         ],
1303         [
1304                 AC_MSG_RESULT(yes)
1305                 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1306         ]
1307 )
1308 fi
1309
1310 dnl make sure that openpty does not reacquire controlling terminal
1311 if test ! -z "$check_for_openpty_ctty_bug"; then
1312         AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1313         AC_TRY_RUN(
1314                 [
1315 #include <stdio.h>
1316 #include <sys/fcntl.h>
1317 #include <sys/types.h>
1318 #include <sys/wait.h>
1319
1320 int
1321 main()
1322 {
1323         pid_t pid;
1324         int fd, ptyfd, ttyfd, status;
1325
1326         pid = fork();
1327         if (pid < 0) {          /* failed */
1328                 exit(1);
1329         } else if (pid > 0) {   /* parent */
1330                 waitpid(pid, &status, 0);
1331                 if (WIFEXITED(status))
1332                         exit(WEXITSTATUS(status));
1333                 else
1334                         exit(2);
1335         } else {                /* child */
1336                 close(0); close(1); close(2);
1337                 setsid();
1338                 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1339                 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1340                 if (fd >= 0)
1341                         exit(3);        /* Acquired ctty: broken */
1342                 else
1343                         exit(0);        /* Did not acquire ctty: OK */
1344         }
1345 }
1346                 ],
1347                 [
1348                         AC_MSG_RESULT(yes)
1349                 ],
1350                 [
1351                         AC_MSG_RESULT(no)
1352                         AC_DEFINE(SSHD_ACQUIRES_CTTY)
1353                 ]
1354         )
1355 fi
1356
1357 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1358     test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
1359         AC_MSG_CHECKING(if getaddrinfo seems to work)
1360         AC_TRY_RUN(
1361                 [
1362 #include <stdio.h>
1363 #include <sys/socket.h>
1364 #include <netdb.h>
1365 #include <errno.h>
1366 #include <netinet/in.h>
1367
1368 #define TEST_PORT "2222"
1369
1370 int
1371 main(void)
1372 {
1373         int err, sock;
1374         struct addrinfo *gai_ai, *ai, hints;
1375         char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1376
1377         memset(&hints, 0, sizeof(hints));
1378         hints.ai_family = PF_UNSPEC;
1379         hints.ai_socktype = SOCK_STREAM;
1380         hints.ai_flags = AI_PASSIVE;
1381
1382         err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1383         if (err != 0) {
1384                 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1385                 exit(1);
1386         }
1387
1388         for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1389                 if (ai->ai_family != AF_INET6)
1390                         continue;
1391
1392                 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1393                     sizeof(ntop), strport, sizeof(strport),
1394                     NI_NUMERICHOST|NI_NUMERICSERV);
1395
1396                 if (err != 0) {
1397                         if (err == EAI_SYSTEM)
1398                                 perror("getnameinfo EAI_SYSTEM");
1399                         else
1400                                 fprintf(stderr, "getnameinfo failed: %s\n",
1401                                     gai_strerror(err));
1402                         exit(2);
1403                 }
1404
1405                 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1406                 if (sock < 0)
1407                         perror("socket");
1408                 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1409                         if (errno == EBADF)
1410                                 exit(3);
1411                 }
1412         }
1413         exit(0);
1414 }
1415                 ],
1416                 [
1417                         AC_MSG_RESULT(yes)
1418                 ],
1419                 [
1420                         AC_MSG_RESULT(no)
1421                         AC_DEFINE(BROKEN_GETADDRINFO)
1422                 ]
1423         )
1424 fi
1425
1426 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1427     test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
1428         AC_MSG_CHECKING(if getaddrinfo seems to work)
1429         AC_TRY_RUN(
1430                 [
1431 #include <stdio.h>
1432 #include <sys/socket.h>
1433 #include <netdb.h>
1434 #include <errno.h>
1435 #include <netinet/in.h>
1436
1437 #define TEST_PORT "2222"
1438
1439 int
1440 main(void)
1441 {
1442         int err, sock;
1443         struct addrinfo *gai_ai, *ai, hints;
1444         char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1445
1446         memset(&hints, 0, sizeof(hints));
1447         hints.ai_family = PF_UNSPEC;
1448         hints.ai_socktype = SOCK_STREAM;
1449         hints.ai_flags = AI_PASSIVE;
1450
1451         err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1452         if (err != 0) {
1453                 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1454                 exit(1);
1455         }
1456
1457         for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1458                 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1459                         continue;
1460
1461                 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1462                     sizeof(ntop), strport, sizeof(strport),
1463                     NI_NUMERICHOST|NI_NUMERICSERV);
1464
1465                 if (ai->ai_family == AF_INET && err != 0) {
1466                         perror("getnameinfo");
1467                         exit(2);
1468                 }
1469         }
1470         exit(0);
1471 }
1472                 ],
1473                 [
1474                         AC_MSG_RESULT(yes)
1475                         AC_DEFINE(AIX_GETNAMEINFO_HACK, [],
1476 [Define if you have a getaddrinfo that fails for the all-zeros IPv6 address])
1477                 ],
1478                 [
1479                         AC_MSG_RESULT(no)
1480                         AC_DEFINE(BROKEN_GETADDRINFO)
1481                 ]
1482         )
1483 fi
1484
1485 if test "x$check_for_conflicting_getspnam" = "x1"; then
1486         AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1487         AC_COMPILE_IFELSE(
1488                 [
1489 #include <shadow.h>
1490 int main(void) {exit(0);}
1491                 ],
1492                 [
1493                         AC_MSG_RESULT(no)
1494                 ],
1495                 [
1496                         AC_MSG_RESULT(yes)
1497                         AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1498                             [Conflicting defs for getspnam])
1499                 ]
1500         )
1501 fi
1502
1503 AC_FUNC_GETPGRP
1504
1505 # Check for PAM libs
1506 PAM_MSG="no"
1507 AC_ARG_WITH(pam,
1508         [  --with-pam              Enable PAM support ],
1509         [
1510                 if test "x$withval" != "xno" ; then
1511                         if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
1512                            test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
1513                                 AC_MSG_ERROR([PAM headers not found])
1514                         fi
1515
1516                         AC_CHECK_LIB(dl, dlopen, , )
1517                         AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
1518                         AC_CHECK_FUNCS(pam_getenvlist)
1519                         AC_CHECK_FUNCS(pam_putenv)
1520
1521                         PAM_MSG="yes"
1522
1523                         AC_DEFINE(USE_PAM)
1524                         if test $ac_cv_lib_dl_dlopen = yes; then
1525                                 LIBPAM="-lpam -ldl"
1526                         else
1527                                 LIBPAM="-lpam"
1528                         fi
1529                         AC_SUBST(LIBPAM)
1530                 fi
1531         ]
1532 )
1533
1534 # Check for older PAM
1535 if test "x$PAM_MSG" = "xyes" ; then
1536         # Check PAM strerror arguments (old PAM)
1537         AC_MSG_CHECKING([whether pam_strerror takes only one argument])
1538         AC_TRY_COMPILE(
1539                 [
1540 #include <stdlib.h>
1541 #if defined(HAVE_SECURITY_PAM_APPL_H)
1542 #include <security/pam_appl.h>
1543 #elif defined (HAVE_PAM_PAM_APPL_H)
1544 #include <pam/pam_appl.h>
1545 #endif
1546                 ],
1547                 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
1548                 [AC_MSG_RESULT(no)],
1549                 [
1550                         AC_DEFINE(HAVE_OLD_PAM)
1551                         AC_MSG_RESULT(yes)
1552                         PAM_MSG="yes (old library)"
1553                 ]
1554         )
1555 fi
1556
1557 # Search for OpenSSL
1558 saved_CPPFLAGS="$CPPFLAGS"
1559 saved_LDFLAGS="$LDFLAGS"
1560 AC_ARG_WITH(ssl-dir,
1561         [  --with-ssl-dir=PATH     Specify path to OpenSSL installation ],
1562         [
1563                 if test "x$withval" != "xno" ; then
1564                         case "$withval" in
1565                                 # Relative paths
1566                                 ./*|../*)       withval="`pwd`/$withval"
1567                         esac
1568                         if test -d "$withval/lib"; then
1569                                 if test -n "${need_dash_r}"; then
1570                                         LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1571                                 else
1572                                         LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1573                                 fi
1574                         else
1575                                 if test -n "${need_dash_r}"; then
1576                                         LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1577                                 else
1578                                         LDFLAGS="-L${withval} ${LDFLAGS}"
1579                                 fi
1580                         fi
1581                         if test -d "$withval/include"; then
1582                                 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1583                         else
1584                                 CPPFLAGS="-I${withval} ${CPPFLAGS}"
1585                         fi
1586                 fi
1587         ]
1588 )
1589 LIBS="-lcrypto $LIBS"
1590 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1591         [
1592                 dnl Check default openssl install dir
1593                 if test -n "${need_dash_r}"; then
1594                         LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
1595                 else
1596                         LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
1597                 fi
1598                 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1599                 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1600                         [
1601                                 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1602                         ]
1603                 )
1604         ]
1605 )
1606
1607 # Determine OpenSSL header version
1608 AC_MSG_CHECKING([OpenSSL header version])
1609 AC_RUN_IFELSE(
1610         [AC_LANG_SOURCE([[
1611 #include <stdio.h>
1612 #include <string.h>
1613 #include <openssl/opensslv.h>
1614 #define DATA "conftest.sslincver"
1615 int main(void) {
1616         FILE *fd;
1617         int rc;
1618
1619         fd = fopen(DATA,"w");
1620         if(fd == NULL)
1621                 exit(1);
1622
1623         if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1624                 exit(1);
1625
1626         exit(0);
1627 }
1628         ]])],
1629         [
1630                 ssl_header_ver=`cat conftest.sslincver`
1631                 AC_MSG_RESULT($ssl_header_ver)
1632         ],
1633         [
1634                 AC_MSG_RESULT(not found)
1635                 AC_MSG_ERROR(OpenSSL version header not found.)
1636         ],
1637         [
1638                 AC_MSG_WARN([cross compiling: not checking])
1639         ]
1640 )
1641
1642 # Determine OpenSSL library version
1643 AC_MSG_CHECKING([OpenSSL library version])
1644 AC_RUN_IFELSE(
1645         [AC_LANG_SOURCE([[
1646 #include <stdio.h>
1647 #include <string.h>
1648 #include <openssl/opensslv.h>
1649 #include <openssl/crypto.h>
1650 #define DATA "conftest.ssllibver"
1651 int main(void) {
1652         FILE *fd;
1653         int rc;
1654
1655         fd = fopen(DATA,"w");
1656         if(fd == NULL)
1657                 exit(1);
1658
1659         if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1660                 exit(1);
1661
1662         exit(0);
1663 }
1664         ]])],
1665         [
1666                 ssl_library_ver=`cat conftest.ssllibver`
1667                 AC_MSG_RESULT($ssl_library_ver)
1668         ],
1669         [
1670                 AC_MSG_RESULT(not found)
1671                 AC_MSG_ERROR(OpenSSL library not found.)
1672         ],
1673         [
1674                 AC_MSG_WARN([cross compiling: not checking])
1675         ]
1676 )
1677
1678 # Sanity check OpenSSL headers
1679 AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1680 AC_RUN_IFELSE(
1681         [AC_LANG_SOURCE([[
1682 #include <string.h>
1683 #include <openssl/opensslv.h>
1684 int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
1685         ]])],
1686         [
1687                 AC_MSG_RESULT(yes)
1688         ],
1689         [
1690                 AC_MSG_RESULT(no)
1691                 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1692 Check config.log for details.
1693 Also see contrib/findssl.sh for help identifying header/library mismatches.])
1694         ],
1695         [
1696                 AC_MSG_WARN([cross compiling: not checking])
1697         ]
1698 )
1699
1700 # Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1701 # because the system crypt() is more featureful.
1702 if test "x$check_for_libcrypt_before" = "x1"; then
1703         AC_CHECK_LIB(crypt, crypt)
1704 fi
1705
1706 # Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
1707 # version in OpenSSL.
1708 if test "x$check_for_libcrypt_later" = "x1"; then
1709         AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
1710 fi
1711
1712
1713 ### Configure cryptographic random number support
1714
1715 # Check wheter OpenSSL seeds itself
1716 AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1717 AC_RUN_IFELSE(
1718         [AC_LANG_SOURCE([[
1719 #include <string.h>
1720 #include <openssl/rand.h>
1721 int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
1722         ]])],
1723         [
1724                 OPENSSL_SEEDS_ITSELF=yes
1725                 AC_MSG_RESULT(yes)
1726         ],
1727         [
1728                 AC_MSG_RESULT(no)
1729                 # Default to use of the rand helper if OpenSSL doesn't
1730                 # seed itself
1731                 USE_RAND_HELPER=yes
1732         ],
1733         [
1734                 AC_MSG_WARN([cross compiling: assuming yes])
1735                 # This is safe, since all recent OpenSSL versions will
1736                 # complain at runtime if not seeded correctly.
1737                 OPENSSL_SEEDS_ITSELF=yes
1738         ]
1739 )
1740
1741
1742 # Do we want to force the use of the rand helper?
1743 AC_ARG_WITH(rand-helper,
1744         [  --with-rand-helper      Use subprocess to gather strong randomness ],
1745         [
1746                 if test "x$withval" = "xno" ; then
1747                         # Force use of OpenSSL's internal RNG, even if
1748                         # the previous test showed it to be unseeded.
1749                         if test -z "$OPENSSL_SEEDS_ITSELF" ; then
1750                                 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
1751                                 OPENSSL_SEEDS_ITSELF=yes
1752                                 USE_RAND_HELPER=""
1753                         fi
1754                 else
1755                         USE_RAND_HELPER=yes
1756                 fi
1757         ],
1758 )
1759
1760 # Which randomness source do we use?
1761 if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
1762         # OpenSSL only
1763         AC_DEFINE(OPENSSL_PRNG_ONLY)
1764         RAND_MSG="OpenSSL internal ONLY"
1765         INSTALL_SSH_RAND_HELPER=""
1766 elif test ! -z "$USE_RAND_HELPER" ; then
1767         # install rand helper
1768         RAND_MSG="ssh-rand-helper"
1769         INSTALL_SSH_RAND_HELPER="yes"
1770 fi
1771 AC_SUBST(INSTALL_SSH_RAND_HELPER)
1772
1773 ### Configuration of ssh-rand-helper
1774
1775 # PRNGD TCP socket
1776 AC_ARG_WITH(prngd-port,
1777         [  --with-prngd-port=PORT  read entropy from PRNGD/EGD TCP localhost:PORT],
1778         [
1779                 case "$withval" in
1780                 no)
1781                         withval=""
1782                         ;;
1783                 [[0-9]]*)
1784                         ;;
1785                 *)
1786                         AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
1787                         ;;
1788                 esac
1789                 if test ! -z "$withval" ; then
1790                         PRNGD_PORT="$withval"
1791                         AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT)
1792                 fi
1793         ]
1794 )
1795
1796 # PRNGD Unix domain socket
1797 AC_ARG_WITH(prngd-socket,
1798         [  --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
1799         [
1800                 case "$withval" in
1801                 yes)
1802                         withval="/var/run/egd-pool"
1803                         ;;
1804                 no)
1805                         withval=""
1806                         ;;
1807                 /*)
1808                         ;;
1809                 *)
1810                         AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
1811                         ;;
1812                 esac
1813
1814                 if test ! -z "$withval" ; then
1815                         if test ! -z "$PRNGD_PORT" ; then
1816                                 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
1817                         fi
1818                         if test ! -r "$withval" ; then
1819                                 AC_MSG_WARN(Entropy socket is not readable)
1820                         fi
1821                         PRNGD_SOCKET="$withval"
1822                         AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1823                 fi
1824         ],
1825         [
1826                 # Check for existing socket only if we don't have a random device already
1827                 if test "$USE_RAND_HELPER" = yes ; then
1828                         AC_MSG_CHECKING(for PRNGD/EGD socket)
1829                         # Insert other locations here
1830                         for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
1831                                 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
1832                                         PRNGD_SOCKET="$sock"
1833                                         AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1834                                         break;
1835                                 fi
1836                         done
1837                         if test ! -z "$PRNGD_SOCKET" ; then
1838                                 AC_MSG_RESULT($PRNGD_SOCKET)
1839                         else
1840                                 AC_MSG_RESULT(not found)
1841                         fi
1842                 fi
1843         ]
1844 )
1845
1846 # Change default command timeout for hashing entropy source
1847 entropy_timeout=200
1848 AC_ARG_WITH(entropy-timeout,
1849         [  --with-entropy-timeout  Specify entropy gathering command timeout (msec)],
1850         [
1851                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
1852                     test "x${withval}" != "xyes"; then
1853                         entropy_timeout=$withval
1854                 fi
1855         ]
1856 )
1857 AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout)
1858
1859 SSH_PRIVSEP_USER=sshd
1860 AC_ARG_WITH(privsep-user,
1861         [  --with-privsep-user=user Specify non-privileged user for privilege separation],
1862         [
1863                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
1864                     test "x${withval}" != "xyes"; then
1865                         SSH_PRIVSEP_USER=$withval
1866                 fi
1867         ]
1868 )
1869 AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER")
1870 AC_SUBST(SSH_PRIVSEP_USER)
1871
1872 # We do this little dance with the search path to insure
1873 # that programs that we select for use by installed programs
1874 # (which may be run by the super-user) come from trusted
1875 # locations before they come from the user's private area.
1876 # This should help avoid accidentally configuring some
1877 # random version of a program in someone's personal bin.
1878
1879 OPATH=$PATH
1880 PATH=/bin:/usr/bin
1881 test -h /bin 2> /dev/null && PATH=/usr/bin
1882 test -d /sbin && PATH=$PATH:/sbin
1883 test -d /usr/sbin && PATH=$PATH:/usr/sbin
1884 PATH=$PATH:/etc:$OPATH
1885
1886 # These programs are used by the command hashing source to gather entropy
1887 OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
1888 OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
1889 OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
1890 OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
1891 OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
1892 OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
1893 OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
1894 OSSH_PATH_ENTROPY_PROG(PROG_W, w)
1895 OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
1896 OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
1897 OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
1898 OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
1899 OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
1900 OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
1901 OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
1902 OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
1903 # restore PATH
1904 PATH=$OPATH
1905
1906 # Where does ssh-rand-helper get its randomness from?
1907 INSTALL_SSH_PRNG_CMDS=""
1908 if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
1909         if test ! -z "$PRNGD_PORT" ; then
1910                 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
1911         elif test ! -z "$PRNGD_SOCKET" ; then
1912                 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
1913         else
1914                 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
1915                 RAND_HELPER_CMDHASH=yes
1916                 INSTALL_SSH_PRNG_CMDS="yes"
1917         fi
1918 fi
1919 AC_SUBST(INSTALL_SSH_PRNG_CMDS)
1920
1921
1922 # Cheap hack to ensure NEWS-OS libraries are arranged right.
1923 if test ! -z "$SONY" ; then
1924   LIBS="$LIBS -liberty";
1925 fi
1926
1927 # Checks for data types
1928 AC_CHECK_SIZEOF(char, 1)
1929 AC_CHECK_SIZEOF(short int, 2)
1930 AC_CHECK_SIZEOF(int, 4)
1931 AC_CHECK_SIZEOF(long int, 4)
1932 AC_CHECK_SIZEOF(long long int, 8)
1933
1934 # Sanity check long long for some platforms (AIX)
1935 if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
1936         ac_cv_sizeof_long_long_int=0
1937 fi
1938
1939 # More checks for data types
1940 AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
1941         AC_TRY_COMPILE(
1942                 [ #include <sys/types.h> ],
1943                 [ u_int a; a = 1;],
1944                 [ ac_cv_have_u_int="yes" ],
1945                 [ ac_cv_have_u_int="no" ]
1946         )
1947 ])
1948 if test "x$ac_cv_have_u_int" = "xyes" ; then
1949         AC_DEFINE(HAVE_U_INT)
1950         have_u_int=1
1951 fi
1952
1953 AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
1954         AC_TRY_COMPILE(
1955                 [ #include <sys/types.h> ],
1956                 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
1957                 [ ac_cv_have_intxx_t="yes" ],
1958                 [ ac_cv_have_intxx_t="no" ]
1959         )
1960 ])
1961 if test "x$ac_cv_have_intxx_t" = "xyes" ; then
1962         AC_DEFINE(HAVE_INTXX_T)
1963         have_intxx_t=1
1964 fi
1965
1966 if (test -z "$have_intxx_t" && \
1967            test "x$ac_cv_header_stdint_h" = "xyes")
1968 then
1969     AC_MSG_CHECKING([for intXX_t types in stdint.h])
1970         AC_TRY_COMPILE(
1971                 [ #include <stdint.h> ],
1972                 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
1973                 [
1974                         AC_DEFINE(HAVE_INTXX_T)
1975                         AC_MSG_RESULT(yes)
1976                 ],
1977                 [ AC_MSG_RESULT(no) ]
1978         )
1979 fi
1980
1981 AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
1982         AC_TRY_COMPILE(
1983                 [
1984 #include <sys/types.h>
1985 #ifdef HAVE_STDINT_H
1986 # include <stdint.h>
1987 #endif
1988 #include <sys/socket.h>
1989 #ifdef HAVE_SYS_BITYPES_H
1990 # include <sys/bitypes.h>
1991 #endif
1992                 ],
1993                 [ int64_t a; a = 1;],
1994                 [ ac_cv_have_int64_t="yes" ],
1995                 [ ac_cv_have_int64_t="no" ]
1996         )
1997 ])
1998 if test "x$ac_cv_have_int64_t" = "xyes" ; then
1999         AC_DEFINE(HAVE_INT64_T)
2000 fi
2001
2002 AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
2003         AC_TRY_COMPILE(
2004                 [ #include <sys/types.h> ],
2005                 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
2006                 [ ac_cv_have_u_intxx_t="yes" ],
2007                 [ ac_cv_have_u_intxx_t="no" ]
2008         )
2009 ])
2010 if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
2011         AC_DEFINE(HAVE_U_INTXX_T)
2012         have_u_intxx_t=1
2013 fi
2014
2015 if test -z "$have_u_intxx_t" ; then
2016     AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
2017         AC_TRY_COMPILE(
2018                 [ #include <sys/socket.h> ],
2019                 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
2020                 [
2021                         AC_DEFINE(HAVE_U_INTXX_T)
2022                         AC_MSG_RESULT(yes)
2023                 ],
2024                 [ AC_MSG_RESULT(no) ]
2025         )
2026 fi
2027
2028 AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
2029         AC_TRY_COMPILE(
2030                 [ #include <sys/types.h> ],
2031                 [ u_int64_t a; a = 1;],
2032                 [ ac_cv_have_u_int64_t="yes" ],
2033                 [ ac_cv_have_u_int64_t="no" ]
2034         )
2035 ])
2036 if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
2037         AC_DEFINE(HAVE_U_INT64_T)
2038         have_u_int64_t=1
2039 fi
2040
2041 if test -z "$have_u_int64_t" ; then
2042     AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
2043         AC_TRY_COMPILE(
2044                 [ #include <sys/bitypes.h> ],
2045                 [ u_int64_t a; a = 1],
2046                 [
2047                         AC_DEFINE(HAVE_U_INT64_T)
2048                         AC_MSG_RESULT(yes)
2049                 ],
2050                 [ AC_MSG_RESULT(no) ]
2051         )
2052 fi
2053
2054 if test -z "$have_u_intxx_t" ; then
2055         AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
2056                 AC_TRY_COMPILE(
2057                         [
2058 #include <sys/types.h>
2059                         ],
2060                         [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
2061                         [ ac_cv_have_uintxx_t="yes" ],
2062                         [ ac_cv_have_uintxx_t="no" ]
2063                 )
2064         ])
2065         if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
2066                 AC_DEFINE(HAVE_UINTXX_T)
2067         fi
2068 fi
2069
2070 if test -z "$have_uintxx_t" ; then
2071     AC_MSG_CHECKING([for uintXX_t types in stdint.h])
2072         AC_TRY_COMPILE(
2073                 [ #include <stdint.h> ],
2074                 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
2075                 [
2076                         AC_DEFINE(HAVE_UINTXX_T)
2077                         AC_MSG_RESULT(yes)
2078                 ],
2079                 [ AC_MSG_RESULT(no) ]
2080         )
2081 fi
2082
2083 if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
2084            test "x$ac_cv_header_sys_bitypes_h" = "xyes")
2085 then
2086         AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
2087         AC_TRY_COMPILE(
2088                 [
2089 #include <sys/bitypes.h>
2090                 ],
2091                 [
2092                         int8_t a; int16_t b; int32_t c;
2093                         u_int8_t e; u_int16_t f; u_int32_t g;
2094                         a = b = c = e = f = g = 1;
2095                 ],
2096                 [
2097                         AC_DEFINE(HAVE_U_INTXX_T)
2098                         AC_DEFINE(HAVE_INTXX_T)
2099                         AC_MSG_RESULT(yes)
2100                 ],
2101                 [AC_MSG_RESULT(no)]
2102         )
2103 fi
2104
2105
2106 AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
2107         AC_TRY_COMPILE(
2108                 [
2109 #include <sys/types.h>
2110                 ],
2111                 [ u_char foo; foo = 125; ],
2112                 [ ac_cv_have_u_char="yes" ],
2113                 [ ac_cv_have_u_char="no" ]
2114         )
2115 ])
2116 if test "x$ac_cv_have_u_char" = "xyes" ; then
2117         AC_DEFINE(HAVE_U_CHAR)
2118 fi
2119
2120 TYPE_SOCKLEN_T
2121
2122 AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
2123
2124 AC_CHECK_TYPES(in_addr_t,,,
2125 [#include <sys/types.h>
2126 #include <netinet/in.h>])
2127
2128 AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
2129         AC_TRY_COMPILE(
2130                 [
2131 #include <sys/types.h>
2132                 ],
2133                 [ size_t foo; foo = 1235; ],
2134                 [ ac_cv_have_size_t="yes" ],
2135                 [ ac_cv_have_size_t="no" ]
2136         )
2137 ])
2138 if test "x$ac_cv_have_size_t" = "xyes" ; then
2139         AC_DEFINE(HAVE_SIZE_T)
2140 fi
2141
2142 AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
2143         AC_TRY_COMPILE(
2144                 [
2145 #include <sys/types.h>
2146                 ],
2147                 [ ssize_t foo; foo = 1235; ],
2148                 [ ac_cv_have_ssize_t="yes" ],
2149                 [ ac_cv_have_ssize_t="no" ]
2150         )
2151 ])
2152 if test "x$ac_cv_have_ssize_t" = "xyes" ; then
2153         AC_DEFINE(HAVE_SSIZE_T)
2154 fi
2155
2156 AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
2157         AC_TRY_COMPILE(
2158                 [
2159 #include <time.h>
2160                 ],
2161                 [ clock_t foo; foo = 1235; ],
2162                 [ ac_cv_have_clock_t="yes" ],
2163                 [ ac_cv_have_clock_t="no" ]
2164         )
2165 ])
2166 if test "x$ac_cv_have_clock_t" = "xyes" ; then
2167         AC_DEFINE(HAVE_CLOCK_T)
2168 fi
2169
2170 AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
2171         AC_TRY_COMPILE(
2172                 [
2173 #include <sys/types.h>
2174 #include <sys/socket.h>
2175                 ],
2176                 [ sa_family_t foo; foo = 1235; ],
2177                 [ ac_cv_have_sa_family_t="yes" ],
2178                 [ AC_TRY_COMPILE(
2179                   [
2180 #include <sys/types.h>
2181 #include <sys/socket.h>
2182 #include <netinet/in.h>
2183                 ],
2184                 [ sa_family_t foo; foo = 1235; ],
2185                 [ ac_cv_have_sa_family_t="yes" ],
2186
2187                 [ ac_cv_have_sa_family_t="no" ]
2188         )]
2189         )
2190 ])
2191 if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
2192         AC_DEFINE(HAVE_SA_FAMILY_T)
2193 fi
2194
2195 AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
2196         AC_TRY_COMPILE(
2197                 [
2198 #include <sys/types.h>
2199                 ],
2200                 [ pid_t foo; foo = 1235; ],
2201                 [ ac_cv_have_pid_t="yes" ],
2202                 [ ac_cv_have_pid_t="no" ]
2203         )
2204 ])
2205 if test "x$ac_cv_have_pid_t" = "xyes" ; then
2206         AC_DEFINE(HAVE_PID_T)
2207 fi
2208
2209 AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
2210         AC_TRY_COMPILE(
2211                 [
2212 #include <sys/types.h>
2213                 ],
2214                 [ mode_t foo; foo = 1235; ],
2215                 [ ac_cv_have_mode_t="yes" ],
2216                 [ ac_cv_have_mode_t="no" ]
2217         )
2218 ])
2219 if test "x$ac_cv_have_mode_t" = "xyes" ; then
2220         AC_DEFINE(HAVE_MODE_T)
2221 fi
2222
2223
2224 AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
2225         AC_TRY_COMPILE(
2226                 [
2227 #include <sys/types.h>
2228 #include <sys/socket.h>
2229                 ],
2230                 [ struct sockaddr_storage s; ],
2231                 [ ac_cv_have_struct_sockaddr_storage="yes" ],
2232                 [ ac_cv_have_struct_sockaddr_storage="no" ]
2233         )
2234 ])
2235 if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
2236         AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE)
2237 fi
2238
2239 AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2240         AC_TRY_COMPILE(
2241                 [
2242 #include <sys/types.h>
2243 #include <netinet/in.h>
2244                 ],
2245                 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2246                 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2247                 [ ac_cv_have_struct_sockaddr_in6="no" ]
2248         )
2249 ])
2250 if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
2251         AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6)
2252 fi
2253
2254 AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2255         AC_TRY_COMPILE(
2256                 [
2257 #include <sys/types.h>
2258 #include <netinet/in.h>
2259                 ],
2260                 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2261                 [ ac_cv_have_struct_in6_addr="yes" ],
2262                 [ ac_cv_have_struct_in6_addr="no" ]
2263         )
2264 ])
2265 if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
2266         AC_DEFINE(HAVE_STRUCT_IN6_ADDR)
2267 fi
2268
2269 AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2270         AC_TRY_COMPILE(
2271                 [
2272 #include <sys/types.h>
2273 #include <sys/socket.h>
2274 #include <netdb.h>
2275                 ],
2276                 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2277                 [ ac_cv_have_struct_addrinfo="yes" ],
2278                 [ ac_cv_have_struct_addrinfo="no" ]
2279         )
2280 ])
2281 if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2282         AC_DEFINE(HAVE_STRUCT_ADDRINFO)
2283 fi
2284
2285 AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2286         AC_TRY_COMPILE(
2287                 [ #include <sys/time.h> ],
2288                 [ struct timeval tv; tv.tv_sec = 1;],
2289                 [ ac_cv_have_struct_timeval="yes" ],
2290                 [ ac_cv_have_struct_timeval="no" ]
2291         )
2292 ])
2293 if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2294         AC_DEFINE(HAVE_STRUCT_TIMEVAL)
2295         have_struct_timeval=1
2296 fi
2297
2298 AC_CHECK_TYPES(struct timespec)
2299
2300 # We need int64_t or else certian parts of the compile will fail.
2301 if test "x$ac_cv_have_int64_t" = "xno" && \
2302         test "x$ac_cv_sizeof_long_int" != "x8" && \
2303         test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
2304         echo "OpenSSH requires int64_t support.  Contact your vendor or install"
2305         echo "an alternative compiler (I.E., GCC) before continuing."
2306         echo ""
2307         exit 1;
2308 else
2309 dnl test snprintf (broken on SCO w/gcc)
2310         AC_RUN_IFELSE(
2311                 [AC_LANG_SOURCE([[
2312 #include <stdio.h>
2313 #include <string.h>
2314 #ifdef HAVE_SNPRINTF
2315 main()
2316 {
2317         char buf[50];
2318         char expected_out[50];
2319         int mazsize = 50 ;
2320 #if (SIZEOF_LONG_INT == 8)
2321         long int num = 0x7fffffffffffffff;
2322 #else
2323         long long num = 0x7fffffffffffffffll;
2324 #endif
2325         strcpy(expected_out, "9223372036854775807");
2326         snprintf(buf, mazsize, "%lld", num);
2327         if(strcmp(buf, expected_out) != 0)
2328                 exit(1);
2329         exit(0);
2330 }
2331 #else
2332 main() { exit(0); }
2333 #endif
2334                 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
2335                 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
2336         )
2337 fi
2338
2339 dnl Checks for structure members
2340 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2341 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2342 OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2343 OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2344 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
2345 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
2346 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2347 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
2348 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
2349 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2350 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2351 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2352 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
2353 OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2354 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2355 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2356 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
2357
2358 AC_CHECK_MEMBERS([struct stat.st_blksize])
2359
2360 AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2361                 ac_cv_have_ss_family_in_struct_ss, [
2362         AC_TRY_COMPILE(
2363                 [
2364 #include <sys/types.h>
2365 #include <sys/socket.h>
2366                 ],
2367                 [ struct sockaddr_storage s; s.ss_family = 1; ],
2368                 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2369                 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2370         )
2371 ])
2372 if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2373         AC_DEFINE(HAVE_SS_FAMILY_IN_SS)
2374 fi
2375
2376 AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2377                 ac_cv_have___ss_family_in_struct_ss, [
2378         AC_TRY_COMPILE(
2379                 [
2380 #include <sys/types.h>
2381 #include <sys/socket.h>
2382                 ],
2383                 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2384                 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2385                 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2386         )
2387 ])
2388 if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2389         AC_DEFINE(HAVE___SS_FAMILY_IN_SS)
2390 fi
2391
2392 AC_CACHE_CHECK([for pw_class field in struct passwd],
2393                 ac_cv_have_pw_class_in_struct_passwd, [
2394         AC_TRY_COMPILE(
2395                 [
2396 #include <pwd.h>
2397                 ],
2398                 [ struct passwd p; p.pw_class = 0; ],
2399                 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2400                 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2401         )
2402 ])
2403 if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2404         AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD)
2405 fi
2406
2407 AC_CACHE_CHECK([for pw_expire field in struct passwd],
2408                 ac_cv_have_pw_expire_in_struct_passwd, [
2409         AC_TRY_COMPILE(
2410                 [
2411 #include <pwd.h>
2412                 ],
2413                 [ struct passwd p; p.pw_expire = 0; ],
2414                 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2415                 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2416         )
2417 ])
2418 if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2419         AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD)
2420 fi
2421
2422 AC_CACHE_CHECK([for pw_change field in struct passwd],
2423                 ac_cv_have_pw_change_in_struct_passwd, [
2424         AC_TRY_COMPILE(
2425                 [
2426 #include <pwd.h>
2427                 ],
2428                 [ struct passwd p; p.pw_change = 0; ],
2429                 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2430                 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2431         )
2432 ])
2433 if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2434         AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD)
2435 fi
2436
2437 dnl make sure we're using the real structure members and not defines
2438 AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2439                 ac_cv_have_accrights_in_msghdr, [
2440         AC_COMPILE_IFELSE(
2441                 [
2442 #include <sys/types.h>
2443 #include <sys/socket.h>
2444 #include <sys/uio.h>
2445 int main() {
2446 #ifdef msg_accrights
2447 #error "msg_accrights is a macro"
2448 exit(1);
2449 #endif
2450 struct msghdr m;
2451 m.msg_accrights = 0;
2452 exit(0);
2453 }
2454                 ],
2455                 [ ac_cv_have_accrights_in_msghdr="yes" ],
2456                 [ ac_cv_have_accrights_in_msghdr="no" ]
2457         )
2458 ])
2459 if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2460         AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR)
2461 fi
2462
2463 AC_CACHE_CHECK([for msg_control field in struct msghdr],
2464                 ac_cv_have_control_in_msghdr, [
2465         AC_COMPILE_IFELSE(
2466                 [
2467 #include <sys/types.h>
2468 #include <sys/socket.h>
2469 #include <sys/uio.h>
2470 int main() {
2471 #ifdef msg_control
2472 #error "msg_control is a macro"
2473 exit(1);
2474 #endif
2475 struct msghdr m;
2476 m.msg_control = 0;
2477 exit(0);
2478 }
2479                 ],
2480                 [ ac_cv_have_control_in_msghdr="yes" ],
2481                 [ ac_cv_have_control_in_msghdr="no" ]
2482         )
2483 ])
2484 if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2485         AC_DEFINE(HAVE_CONTROL_IN_MSGHDR)
2486 fi
2487
2488 AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
2489         AC_TRY_LINK([],
2490                 [ extern char *__progname; printf("%s", __progname); ],
2491                 [ ac_cv_libc_defines___progname="yes" ],
2492                 [ ac_cv_libc_defines___progname="no" ]
2493         )
2494 ])
2495 if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2496         AC_DEFINE(HAVE___PROGNAME)
2497 fi
2498
2499 AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2500         AC_TRY_LINK([
2501 #include <stdio.h>
2502 ],
2503                 [ printf("%s", __FUNCTION__); ],
2504                 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2505                 [ ac_cv_cc_implements___FUNCTION__="no" ]
2506         )
2507 ])
2508 if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2509         AC_DEFINE(HAVE___FUNCTION__)
2510 fi
2511
2512 AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2513         AC_TRY_LINK([
2514 #include <stdio.h>
2515 ],
2516                 [ printf("%s", __func__); ],
2517                 [ ac_cv_cc_implements___func__="yes" ],
2518                 [ ac_cv_cc_implements___func__="no" ]
2519         )
2520 ])
2521 if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
2522         AC_DEFINE(HAVE___func__)
2523 fi
2524
2525 AC_CACHE_CHECK([whether getopt has optreset support],
2526                 ac_cv_have_getopt_optreset, [
2527         AC_TRY_LINK(
2528                 [
2529 #include <getopt.h>
2530                 ],
2531                 [ extern int optreset; optreset = 0; ],
2532                 [ ac_cv_have_getopt_optreset="yes" ],
2533                 [ ac_cv_have_getopt_optreset="no" ]
2534         )
2535 ])
2536 if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
2537         AC_DEFINE(HAVE_GETOPT_OPTRESET)
2538 fi
2539
2540 AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
2541         AC_TRY_LINK([],
2542                 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
2543                 [ ac_cv_libc_defines_sys_errlist="yes" ],
2544                 [ ac_cv_libc_defines_sys_errlist="no" ]
2545         )
2546 ])
2547 if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
2548         AC_DEFINE(HAVE_SYS_ERRLIST)
2549 fi
2550
2551
2552 AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
2553         AC_TRY_LINK([],
2554                 [ extern int sys_nerr; printf("%i", sys_nerr);],
2555                 [ ac_cv_libc_defines_sys_nerr="yes" ],
2556                 [ ac_cv_libc_defines_sys_nerr="no" ]
2557         )
2558 ])
2559 if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
2560         AC_DEFINE(HAVE_SYS_NERR)
2561 fi
2562
2563 SCARD_MSG="no"
2564 # Check whether user wants sectok support
2565 AC_ARG_WITH(sectok,
2566         [  --with-sectok           Enable smartcard support using libsectok],
2567         [
2568                 if test "x$withval" != "xno" ; then
2569                         if test "x$withval" != "xyes" ; then
2570                                 CPPFLAGS="$CPPFLAGS -I${withval}"
2571                                 LDFLAGS="$LDFLAGS -L${withval}"
2572                                 if test ! -z "$need_dash_r" ; then
2573                                         LDFLAGS="$LDFLAGS -R${withval}"
2574                                 fi
2575                                 if test ! -z "$blibpath" ; then
2576                                         blibpath="$blibpath:${withval}"
2577                                 fi
2578                         fi
2579                         AC_CHECK_HEADERS(sectok.h)
2580                         if test "$ac_cv_header_sectok_h" != yes; then
2581                                 AC_MSG_ERROR(Can't find sectok.h)
2582                         fi
2583                         AC_CHECK_LIB(sectok, sectok_open)
2584                         if test "$ac_cv_lib_sectok_sectok_open" != yes; then
2585                                 AC_MSG_ERROR(Can't find libsectok)
2586                         fi
2587                         AC_DEFINE(SMARTCARD)
2588                         AC_DEFINE(USE_SECTOK)
2589                         SCARD_MSG="yes, using sectok"
2590                 fi
2591         ]
2592 )
2593
2594 # Check whether user wants OpenSC support
2595 OPENSC_CONFIG="no"
2596 AC_ARG_WITH(opensc,
2597         [--with-opensc[[=PFX]]       Enable smartcard support using OpenSC (optionally in PATH)],
2598         [
2599             if test "x$withval" != "xno" ; then
2600                 if test "x$withval" != "xyes" ; then
2601                         OPENSC_CONFIG=$withval/bin/opensc-config
2602                 else
2603                         AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
2604                 fi
2605                 if test "$OPENSC_CONFIG" != "no"; then
2606                         LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
2607                         LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
2608                         CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
2609                         LDFLAGS="$LDFLAGS $LIBOPENSC_LIBS"
2610                         AC_DEFINE(SMARTCARD)
2611                         AC_DEFINE(USE_OPENSC)
2612                         SCARD_MSG="yes, using OpenSC"
2613                 fi
2614             fi
2615         ]
2616 )
2617
2618 # Check libraries needed by DNS fingerprint support
2619 AC_SEARCH_LIBS(getrrsetbyname, resolv,
2620         [AC_DEFINE(HAVE_GETRRSETBYNAME)],
2621         [
2622                 # Needed by our getrrsetbyname()
2623                 AC_SEARCH_LIBS(res_query, resolv)
2624                 AC_SEARCH_LIBS(dn_expand, resolv)
2625                 AC_MSG_CHECKING(if res_query will link)
2626                 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
2627                    [AC_MSG_RESULT(no)
2628                     saved_LIBS="$LIBS"
2629                     LIBS="$LIBS -lresolv"
2630                     AC_MSG_CHECKING(for res_query in -lresolv)
2631                     AC_LINK_IFELSE([
2632 #include <resolv.h>
2633 int main()
2634 {
2635         res_query (0, 0, 0, 0, 0);
2636         return 0;
2637 }
2638                         ],
2639                         [LIBS="$LIBS -lresolv"
2640                          AC_MSG_RESULT(yes)],
2641                         [LIBS="$saved_LIBS"
2642                          AC_MSG_RESULT(no)])
2643                     ])
2644                 AC_CHECK_FUNCS(_getshort _getlong)
2645                 AC_CHECK_DECLS([_getshort, _getlong], , ,
2646                     [#include <sys/types.h>
2647                     #include <arpa/nameser.h>])
2648                 AC_CHECK_MEMBER(HEADER.ad,
2649                         [AC_DEFINE(HAVE_HEADER_AD)],,
2650                         [#include <arpa/nameser.h>])
2651         ])
2652
2653 # Check whether user wants Kerberos 5 support
2654 KRB5_MSG="no"
2655 AC_ARG_WITH(kerberos5,
2656         [  --with-kerberos5=PATH   Enable Kerberos 5 support],
2657         [ if test "x$withval" != "xno" ; then
2658                 if test "x$withval" = "xyes" ; then
2659                         KRB5ROOT="/usr/local"
2660                 else
2661                         KRB5ROOT=${withval}
2662                 fi
2663
2664                 AC_DEFINE(KRB5)
2665                 KRB5_MSG="yes"
2666
2667                 AC_MSG_CHECKING(for krb5-config)
2668                 if test -x  $KRB5ROOT/bin/krb5-config ; then
2669                         KRB5CONF=$KRB5ROOT/bin/krb5-config
2670                         AC_MSG_RESULT($KRB5CONF)
2671
2672                         AC_MSG_CHECKING(for gssapi support)
2673                         if $KRB5CONF | grep gssapi >/dev/null ; then
2674                                 AC_MSG_RESULT(yes)
2675                                 AC_DEFINE(GSSAPI)
2676                                 k5confopts=gssapi
2677                         else
2678                                 AC_MSG_RESULT(no)
2679                                 k5confopts=""
2680                         fi
2681                         K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
2682                         K5LIBS="`$KRB5CONF --libs $k5confopts`"
2683                         CPPFLAGS="$CPPFLAGS $K5CFLAGS"
2684                         AC_MSG_CHECKING(whether we are using Heimdal)
2685                         AC_TRY_COMPILE([ #include <krb5.h> ],
2686                                        [ char *tmp = heimdal_version; ],
2687                                        [ AC_MSG_RESULT(yes)
2688                                          AC_DEFINE(HEIMDAL) ],
2689                                          AC_MSG_RESULT(no)
2690                         )
2691                 else
2692                         AC_MSG_RESULT(no)
2693                         CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
2694                         LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
2695                         AC_MSG_CHECKING(whether we are using Heimdal)
2696                         AC_TRY_COMPILE([ #include <krb5.h> ],
2697                                        [ char *tmp = heimdal_version; ],
2698                                        [ AC_MSG_RESULT(yes)
2699                                          AC_DEFINE(HEIMDAL)
2700                                          K5LIBS="-lkrb5 -ldes"
2701                                          K5LIBS="$K5LIBS -lcom_err -lasn1"
2702                                          AC_CHECK_LIB(roken, net_write,
2703                                            [K5LIBS="$K5LIBS -lroken"])
2704                                        ],
2705                                        [ AC_MSG_RESULT(no)
2706                                          K5LIBS="-lkrb5 -lk5crypto -lcom_err"
2707                                        ]
2708                         )
2709                         AC_SEARCH_LIBS(dn_expand, resolv)
2710
2711                         AC_CHECK_LIB(gssapi,gss_init_sec_context,
2712                                 [ AC_DEFINE(GSSAPI)
2713                                   K5LIBS="-lgssapi $K5LIBS" ],
2714                                 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
2715                                         [ AC_DEFINE(GSSAPI)
2716                                           K5LIBS="-lgssapi_krb5 $K5LIBS" ],
2717                                         AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
2718                                         $K5LIBS)
2719                                 ],
2720                                 $K5LIBS)
2721
2722                         AC_CHECK_HEADER(gssapi.h, ,
2723                                 [ unset ac_cv_header_gssapi_h
2724                                   CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2725                                   AC_CHECK_HEADERS(gssapi.h, ,
2726                                         AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
2727                                   )
2728                                 ]
2729                         )
2730
2731                         oldCPP="$CPPFLAGS"
2732                         CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2733                         AC_CHECK_HEADER(gssapi_krb5.h, ,
2734                                         [ CPPFLAGS="$oldCPP" ])
2735
2736                 fi
2737                 if test ! -z "$need_dash_r" ; then
2738                         LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
2739                 fi
2740                 if test ! -z "$blibpath" ; then
2741                         blibpath="$blibpath:${KRB5ROOT}/lib"
2742                 fi
2743         fi
2744
2745         AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
2746         AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
2747         AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
2748
2749         LIBS="$LIBS $K5LIBS"
2750         AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS))
2751         ]
2752 )
2753
2754 # Looking for programs, paths and files
2755
2756 PRIVSEP_PATH=/var/empty
2757 AC_ARG_WITH(privsep-path,
2758         [  --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
2759         [
2760                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
2761                     test "x${withval}" != "xyes"; then
2762                         PRIVSEP_PATH=$withval
2763                 fi
2764         ]
2765 )
2766 AC_SUBST(PRIVSEP_PATH)
2767
2768 AC_ARG_WITH(xauth,
2769         [  --with-xauth=PATH       Specify path to xauth program ],
2770         [
2771                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
2772                     test "x${withval}" != "xyes"; then
2773                         xauth_path=$withval
2774                 fi
2775         ],
2776         [
2777                 TestPath="$PATH"
2778                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
2779                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
2780                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
2781                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
2782                 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
2783                 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
2784                         xauth_path="/usr/openwin/bin/xauth"
2785                 fi
2786         ]
2787 )
2788
2789 STRIP_OPT=-s
2790 AC_ARG_ENABLE(strip,
2791         [  --disable-strip         Disable calling strip(1) on install],
2792         [
2793                 if test "x$enableval" = "xno" ; then
2794                         STRIP_OPT=
2795                 fi
2796         ]
2797 )
2798 AC_SUBST(STRIP_OPT)
2799
2800 if test -z "$xauth_path" ; then
2801         XAUTH_PATH="undefined"
2802         AC_SUBST(XAUTH_PATH)
2803 else
2804         AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path")
2805         XAUTH_PATH=$xauth_path
2806         AC_SUBST(XAUTH_PATH)
2807 fi
2808
2809 # Check for mail directory (last resort if we cannot get it from headers)
2810 if test ! -z "$MAIL" ; then
2811         maildir=`dirname $MAIL`
2812         AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir")
2813 fi
2814
2815 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
2816         AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
2817         disable_ptmx_check=yes
2818 fi
2819 if test -z "$no_dev_ptmx" ; then
2820         if test "x$disable_ptmx_check" != "xyes" ; then
2821                 AC_CHECK_FILE("/dev/ptmx",
2822                         [
2823                                 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX)
2824                                 have_dev_ptmx=1
2825                         ]
2826                 )
2827         fi
2828 fi
2829
2830 if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
2831         AC_CHECK_FILE("/dev/ptc",
2832                 [
2833                         AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC)
2834                         have_dev_ptc=1
2835                 ]
2836         )
2837 else
2838         AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
2839 fi
2840
2841 # Options from here on. Some of these are preset by platform above
2842 AC_ARG_WITH(mantype,
2843         [  --with-mantype=man|cat|doc  Set man page type],
2844         [
2845                 case "$withval" in
2846                 man|cat|doc)
2847                         MANTYPE=$withval
2848                         ;;
2849                 *)
2850                         AC_MSG_ERROR(invalid man type: $withval)
2851                         ;;
2852                 esac
2853         ]
2854 )
2855 if test -z "$MANTYPE"; then
2856         TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
2857         AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
2858         if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
2859                 MANTYPE=doc
2860         elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
2861                 MANTYPE=man
2862         else
2863                 MANTYPE=cat
2864         fi
2865 fi
2866 AC_SUBST(MANTYPE)
2867 if test "$MANTYPE" = "doc"; then
2868         mansubdir=man;
2869 else
2870         mansubdir=$MANTYPE;
2871 fi
2872 AC_SUBST(mansubdir)
2873
2874 # Check whether to enable MD5 passwords
2875 MD5_MSG="no"
2876 AC_ARG_WITH(md5-passwords,
2877         [  --with-md5-passwords    Enable use of MD5 passwords],
2878         [
2879                 if test "x$withval" != "xno" ; then
2880                         AC_DEFINE(HAVE_MD5_PASSWORDS)
2881                         MD5_MSG="yes"
2882                 fi
2883         ]
2884 )
2885
2886 # Whether to disable shadow password support
2887 AC_ARG_WITH(shadow,
2888         [  --without-shadow        Disable shadow password support],
2889         [
2890                 if test "x$withval" = "xno" ; then
2891                         AC_DEFINE(DISABLE_SHADOW)
2892                         disable_shadow=yes
2893                 fi
2894         ]
2895 )
2896
2897 if test -z "$disable_shadow" ; then
2898         AC_MSG_CHECKING([if the systems has expire shadow information])
2899         AC_TRY_COMPILE(
2900         [
2901 #include <sys/types.h>
2902 #include <shadow.h>
2903         struct spwd sp;
2904         ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
2905         [ sp_expire_available=yes ], []
2906         )
2907
2908         if test "x$sp_expire_available" = "xyes" ; then
2909                 AC_MSG_RESULT(yes)
2910                 AC_DEFINE(HAS_SHADOW_EXPIRE)
2911         else
2912                 AC_MSG_RESULT(no)
2913         fi
2914 fi
2915
2916 # Use ip address instead of hostname in $DISPLAY
2917 if test ! -z "$IPADDR_IN_DISPLAY" ; then
2918         DISPLAY_HACK_MSG="yes"
2919         AC_DEFINE(IPADDR_IN_DISPLAY)
2920 else
2921         DISPLAY_HACK_MSG="no"
2922         AC_ARG_WITH(ipaddr-display,
2923                 [  --with-ipaddr-display   Use ip address instead of hostname in \$DISPLAY],
2924                 [
2925                         if test "x$withval" != "xno" ; then
2926                                 AC_DEFINE(IPADDR_IN_DISPLAY)
2927                                 DISPLAY_HACK_MSG="yes"
2928                         fi
2929                 ]
2930         )
2931 fi
2932
2933 # check for /etc/default/login and use it if present.
2934 AC_ARG_ENABLE(etc-default-login,
2935         [  --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
2936         [ if test "x$enableval" = "xno"; then
2937                 AC_MSG_NOTICE([/etc/default/login handling disabled])
2938                 etc_default_login=no
2939           else
2940                 etc_default_login=yes
2941           fi ],
2942         [ etc_default_login=yes ]
2943 )
2944
2945 if test "x$etc_default_login" != "xno"; then
2946         AC_CHECK_FILE("/etc/default/login",
2947             [ external_path_file=/etc/default/login ])
2948         if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
2949         then
2950                 AC_MSG_WARN([cross compiling: Disabling /etc/default/login test])
2951         elif test "x$external_path_file" = "x/etc/default/login"; then
2952                 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN)
2953         fi
2954 fi
2955
2956 dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
2957 if test $ac_cv_func_login_getcapbool = "yes" && \
2958         test $ac_cv_header_login_cap_h = "yes" ; then
2959         external_path_file=/etc/login.conf
2960 fi
2961
2962 # Whether to mess with the default path
2963 SERVER_PATH_MSG="(default)"
2964 AC_ARG_WITH(default-path,
2965         [  --with-default-path=    Specify default \$PATH environment for server],
2966         [
2967                 if test "x$external_path_file" = "x/etc/login.conf" ; then
2968                         AC_MSG_WARN([
2969 --with-default-path=PATH has no effect on this system.
2970 Edit /etc/login.conf instead.])
2971                 elif test "x$withval" != "xno" ; then
2972                         if test ! -z "$external_path_file" ; then
2973                                 AC_MSG_WARN([
2974 --with-default-path=PATH will only be used if PATH is not defined in
2975 $external_path_file .])
2976                         fi
2977                         user_path="$withval"
2978                         SERVER_PATH_MSG="$withval"
2979                 fi
2980         ],
2981         [ if test "x$external_path_file" = "x/etc/login.conf" ; then
2982                 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
2983         else
2984                 if test ! -z "$external_path_file" ; then
2985                         AC_MSG_WARN([
2986 If PATH is defined in $external_path_file, ensure the path to scp is included,
2987 otherwise scp will not work.])
2988                 fi
2989                 AC_TRY_RUN(
2990                         [
2991 /* find out what STDPATH is */
2992 #include <stdio.h>
2993 #ifdef HAVE_PATHS_H
2994 # include <paths.h>
2995 #endif
2996 #ifndef _PATH_STDPATH
2997 # ifdef _PATH_USERPATH  /* Irix */
2998 #  define _PATH_STDPATH _PATH_USERPATH
2999 # else
3000 #  define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
3001 # endif
3002 #endif
3003 #include <sys/types.h>
3004 #include <sys/stat.h>
3005 #include <fcntl.h>
3006 #define DATA "conftest.stdpath"
3007
3008 main()
3009 {
3010         FILE *fd;
3011         int rc;
3012
3013         fd = fopen(DATA,"w");
3014         if(fd == NULL)
3015                 exit(1);
3016
3017         if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
3018                 exit(1);
3019
3020         exit(0);
3021 }
3022                 ], [ user_path=`cat conftest.stdpath` ],
3023                 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
3024                 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
3025         )
3026 # make sure $bindir is in USER_PATH so scp will work
3027                 t_bindir=`eval echo ${bindir}`
3028                 case $t_bindir in
3029                         NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
3030                 esac
3031                 case $t_bindir in
3032                         NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
3033                 esac
3034                 echo $user_path | grep ":$t_bindir"  > /dev/null 2>&1
3035                 if test $? -ne 0  ; then
3036                         echo $user_path | grep "^$t_bindir"  > /dev/null 2>&1
3037                         if test $? -ne 0  ; then
3038                                 user_path=$user_path:$t_bindir
3039                                 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
3040                         fi
3041                 fi
3042         fi ]
3043 )
3044 if test "x$external_path_file" != "x/etc/login.conf" ; then
3045         AC_DEFINE_UNQUOTED(USER_PATH, "$user_path")
3046         AC_SUBST(user_path)
3047 fi
3048
3049 # Set superuser path separately to user path
3050 AC_ARG_WITH(superuser-path,
3051         [  --with-superuser-path=  Specify different path for super-user],
3052         [
3053                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3054                     test "x${withval}" != "xyes"; then
3055                         AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval")
3056                         superuser_path=$withval
3057                 fi
3058         ]
3059 )
3060
3061
3062 AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
3063 IPV4_IN6_HACK_MSG="no"
3064 AC_ARG_WITH(4in6,
3065         [  --with-4in6             Check for and convert IPv4 in IPv6 mapped addresses],
3066         [
3067                 if test "x$withval" != "xno" ; then
3068                         AC_MSG_RESULT(yes)
3069                         AC_DEFINE(IPV4_IN_IPV6)
3070                         IPV4_IN6_HACK_MSG="yes"
3071                 else
3072                         AC_MSG_RESULT(no)
3073                 fi
3074         ],[
3075                 if test "x$inet6_default_4in6" = "xyes"; then
3076                         AC_MSG_RESULT([yes (default)])
3077                         AC_DEFINE(IPV4_IN_IPV6)
3078                         IPV4_IN6_HACK_MSG="yes"
3079                 else
3080                         AC_MSG_RESULT([no (default)])
3081                 fi
3082         ]
3083 )
3084
3085 # Whether to enable BSD auth support
3086 BSD_AUTH_MSG=no
3087 AC_ARG_WITH(bsd-auth,
3088         [  --with-bsd-auth         Enable BSD auth support],
3089         [
3090                 if test "x$withval" != "xno" ; then
3091                         AC_DEFINE(BSD_AUTH)
3092                         BSD_AUTH_MSG=yes
3093                 fi
3094         ]
3095 )
3096
3097 # Where to place sshd.pid
3098 piddir=/var/run
3099 # make sure the directory exists
3100 if test ! -d $piddir ; then
3101         piddir=`eval echo ${sysconfdir}`
3102         case $piddir in
3103                 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
3104         esac
3105 fi
3106
3107 AC_ARG_WITH(pid-dir,
3108         [  --with-pid-dir=PATH     Specify location of ssh.pid file],
3109         [
3110                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3111                     test "x${withval}" != "xyes"; then
3112                         piddir=$withval
3113                         if test ! -d $piddir ; then
3114                         AC_MSG_WARN([** no $piddir directory on this system **])
3115                         fi
3116                 fi
3117         ]
3118 )
3119
3120 AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir")
3121 AC_SUBST(piddir)
3122
3123 dnl allow user to disable some login recording features
3124 AC_ARG_ENABLE(lastlog,
3125         [  --disable-lastlog       disable use of lastlog even if detected [no]],
3126         [
3127                 if test "x$enableval" = "xno" ; then
3128                         AC_DEFINE(DISABLE_LASTLOG)
3129                 fi
3130         ]
3131 )
3132 AC_ARG_ENABLE(utmp,
3133         [  --disable-utmp          disable use of utmp even if detected [no]],
3134         [
3135                 if test "x$enableval" = "xno" ; then
3136                         AC_DEFINE(DISABLE_UTMP)
3137                 fi
3138         ]
3139 )
3140 AC_ARG_ENABLE(utmpx,
3141         [  --disable-utmpx         disable use of utmpx even if detected [no]],
3142         [
3143                 if test "x$enableval" = "xno" ; then
3144                         AC_DEFINE(DISABLE_UTMPX)
3145                 fi
3146         ]
3147 )
3148 AC_ARG_ENABLE(wtmp,
3149         [  --disable-wtmp          disable use of wtmp even if detected [no]],
3150         [
3151                 if test "x$enableval" = "xno" ; then
3152                         AC_DEFINE(DISABLE_WTMP)
3153                 fi
3154         ]
3155 )
3156 AC_ARG_ENABLE(wtmpx,
3157         [  --disable-wtmpx         disable use of wtmpx even if detected [no]],
3158         [
3159                 if test "x$enableval" = "xno" ; then
3160                         AC_DEFINE(DISABLE_WTMPX)
3161                 fi
3162         ]
3163 )
3164 AC_ARG_ENABLE(libutil,
3165         [  --disable-libutil       disable use of libutil (login() etc.) [no]],
3166         [
3167                 if test "x$enableval" = "xno" ; then
3168                         AC_DEFINE(DISABLE_LOGIN)
3169                 fi
3170         ]
3171 )
3172 AC_ARG_ENABLE(pututline,
3173         [  --disable-pututline     disable use of pututline() etc. ([uw]tmp) [no]],
3174         [
3175                 if test "x$enableval" = "xno" ; then
3176                         AC_DEFINE(DISABLE_PUTUTLINE)
3177                 fi
3178         ]
3179 )
3180 AC_ARG_ENABLE(pututxline,
3181         [  --disable-pututxline    disable use of pututxline() etc. ([uw]tmpx) [no]],
3182         [
3183                 if test "x$enableval" = "xno" ; then
3184                         AC_DEFINE(DISABLE_PUTUTXLINE)
3185                 fi
3186         ]
3187 )
3188 AC_ARG_WITH(lastlog,
3189   [  --with-lastlog=FILE|DIR specify lastlog location [common locations]],
3190         [
3191                 if test "x$withval" = "xno" ; then
3192                         AC_DEFINE(DISABLE_LASTLOG)
3193                 elif test -n "$withval"  &&  test "x${withval}" != "xyes"; then
3194                         conf_lastlog_location=$withval
3195                 fi
3196         ]
3197 )
3198
3199 dnl lastlog, [uw]tmpx? detection
3200 dnl  NOTE: set the paths in the platform section to avoid the
3201 dnl   need for command-line parameters
3202 dnl lastlog and [uw]tmp are subject to a file search if all else fails
3203
3204 dnl lastlog detection
3205 dnl  NOTE: the code itself will detect if lastlog is a directory
3206 AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
3207 AC_TRY_COMPILE([
3208 #include <sys/types.h>
3209 #include <utmp.h>
3210 #ifdef HAVE_LASTLOG_H
3211 #  include <lastlog.h>
3212 #endif
3213 #ifdef HAVE_PATHS_H
3214 #  include <paths.h>
3215 #endif
3216 #ifdef HAVE_LOGIN_H
3217 # include <login.h>
3218 #endif
3219         ],
3220         [ char *lastlog = LASTLOG_FILE; ],
3221         [ AC_MSG_RESULT(yes) ],
3222         [
3223                 AC_MSG_RESULT(no)
3224                 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
3225                 AC_TRY_COMPILE([
3226 #include <sys/types.h>
3227 #include <utmp.h>
3228 #ifdef HAVE_LASTLOG_H
3229 #  include <lastlog.h>
3230 #endif
3231 #ifdef HAVE_PATHS_H
3232 #  include <paths.h>
3233 #endif
3234                 ],
3235                 [ char *lastlog = _PATH_LASTLOG; ],
3236                 [ AC_MSG_RESULT(yes) ],
3237                 [
3238                         AC_MSG_RESULT(no)
3239                         system_lastlog_path=no
3240                 ])
3241         ]
3242 )
3243
3244 if test -z "$conf_lastlog_location"; then
3245         if test x"$system_lastlog_path" = x"no" ; then
3246                 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
3247                                 if (test -d "$f" || test -f "$f") ; then
3248                                         conf_lastlog_location=$f
3249                                 fi
3250                 done
3251                 if test -z "$conf_lastlog_location"; then
3252                         AC_MSG_WARN([** Cannot find lastlog **])
3253                         dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
3254                 fi
3255         fi
3256 fi
3257
3258 if test -n "$conf_lastlog_location"; then
3259         AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location")
3260 fi
3261
3262 dnl utmp detection
3263 AC_MSG_CHECKING([if your system defines UTMP_FILE])
3264 AC_TRY_COMPILE([
3265 #include <sys/types.h>
3266 #include <utmp.h>
3267 #ifdef HAVE_PATHS_H
3268 #  include <paths.h>
3269 #endif
3270         ],
3271         [ char *utmp = UTMP_FILE; ],
3272         [ AC_MSG_RESULT(yes) ],
3273         [ AC_MSG_RESULT(no)
3274           system_utmp_path=no ]
3275 )
3276 if test -z "$conf_utmp_location"; then
3277         if test x"$system_utmp_path" = x"no" ; then
3278                 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3279                         if test -f $f ; then
3280                                 conf_utmp_location=$f
3281                         fi
3282                 done
3283                 if test -z "$conf_utmp_location"; then
3284                         AC_DEFINE(DISABLE_UTMP)
3285                 fi
3286         fi
3287 fi
3288 if test -n "$conf_utmp_location"; then
3289         AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location")
3290 fi
3291
3292 dnl wtmp detection
3293 AC_MSG_CHECKING([if your system defines WTMP_FILE])
3294 AC_TRY_COMPILE([
3295 #include <sys/types.h>
3296 #include <utmp.h>
3297 #ifdef HAVE_PATHS_H
3298 #  include <paths.h>
3299 #endif
3300         ],
3301         [ char *wtmp = WTMP_FILE; ],
3302         [ AC_MSG_RESULT(yes) ],
3303         [ AC_MSG_RESULT(no)
3304           system_wtmp_path=no ]
3305 )
3306 if test -z "$conf_wtmp_location"; then
3307         if test x"$system_wtmp_path" = x"no" ; then
3308                 for f in /usr/adm/wtmp /var/log/wtmp; do
3309                         if test -f $f ; then
3310                                 conf_wtmp_location=$f
3311                         fi
3312                 done
3313                 if test -z "$conf_wtmp_location"; then
3314                         AC_DEFINE(DISABLE_WTMP)
3315                 fi
3316         fi
3317 fi
3318 if test -n "$conf_wtmp_location"; then
3319         AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location")
3320 fi
3321
3322
3323 dnl utmpx detection - I don't know any system so perverse as to require
3324 dnl  utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3325 dnl  there, though.
3326 AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3327 AC_TRY_COMPILE([
3328 #include <sys/types.h>
3329 #include <utmp.h>
3330 #ifdef HAVE_UTMPX_H
3331 #include <utmpx.h>
3332 #endif
3333 #ifdef HAVE_PATHS_H
3334 #  include <paths.h>
3335 #endif
3336         ],
3337         [ char *utmpx = UTMPX_FILE; ],
3338         [ AC_MSG_RESULT(yes) ],
3339         [ AC_MSG_RESULT(no)
3340           system_utmpx_path=no ]
3341 )
3342 if test -z "$conf_utmpx_location"; then
3343         if test x"$system_utmpx_path" = x"no" ; then
3344                 AC_DEFINE(DISABLE_UTMPX)
3345         fi
3346 else
3347         AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location")
3348 fi
3349
3350 dnl wtmpx detection
3351 AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3352 AC_TRY_COMPILE([
3353 #include <sys/types.h>
3354 #include <utmp.h>
3355 #ifdef HAVE_UTMPX_H
3356 #include <utmpx.h>
3357 #endif
3358 #ifdef HAVE_PATHS_H
3359 #  include <paths.h>
3360 #endif
3361         ],
3362         [ char *wtmpx = WTMPX_FILE; ],
3363         [ AC_MSG_RESULT(yes) ],
3364         [ AC_MSG_RESULT(no)
3365           system_wtmpx_path=no ]
3366 )
3367 if test -z "$conf_wtmpx_location"; then
3368         if test x"$system_wtmpx_path" = x"no" ; then
3369                 AC_DEFINE(DISABLE_WTMPX)
3370         fi
3371 else
3372         AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location")
3373 fi
3374
3375
3376 if test ! -z "$blibpath" ; then
3377         LDFLAGS="$LDFLAGS $blibflags$blibpath"
3378         AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
3379 fi
3380
3381 dnl remove pam and dl because they are in $LIBPAM
3382 if test "$PAM_MSG" = yes ; then
3383         LIBS=`echo $LIBS | sed 's/-lpam //'`
3384 fi
3385 if test "$ac_cv_lib_pam_pam_set_item" = yes ; then
3386         LIBS=`echo $LIBS | sed 's/-ldl //'`
3387 fi
3388
3389 dnl Adding -Werror to CFLAGS early prevents configure tests from running.
3390 dnl Add now.
3391 CFLAGS="$CFLAGS $werror_flags"
3392
3393 AC_EXEEXT
3394 AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openbsd-compat/Makefile \
3395         scard/Makefile ssh_prng_cmds survey.sh])
3396 AC_OUTPUT
3397
3398 # Print summary of options
3399
3400 # Someone please show me a better way :)
3401 A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3402 B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3403 C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3404 D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
3405 E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
3406 F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
3407 G=`eval echo ${piddir}` ; G=`eval echo ${G}`
3408 H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3409 I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3410 J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
3411
3412 echo ""
3413 echo "OpenSSH has been configured with the following options:"
3414 echo "                     User binaries: $B"
3415 echo "                   System binaries: $C"
3416 echo "               Configuration files: $D"
3417 echo "                   Askpass program: $E"
3418 echo "                      Manual pages: $F"
3419 echo "                          PID file: $G"
3420 echo "  Privilege separation chroot path: $H"
3421 if test "x$external_path_file" = "x/etc/login.conf" ; then
3422 echo "   At runtime, sshd will use the path defined in $external_path_file"
3423 echo "   Make sure the path to scp is present, otherwise scp will not work"
3424 else
3425 echo "            sshd default user PATH: $I"
3426         if test ! -z "$external_path_file"; then
3427 echo "   (If PATH is set in $external_path_file it will be used instead. If"
3428 echo "   used, ensure the path to scp is present, otherwise scp will not work.)"
3429         fi
3430 fi
3431 if test ! -z "$superuser_path" ; then
3432 echo "          sshd superuser user PATH: $J"
3433 fi
3434 echo "                    Manpage format: $MANTYPE"
3435 echo "                       PAM support: $PAM_MSG"
3436 echo "                 KerberosV support: $KRB5_MSG"
3437 echo "                 Smartcard support: $SCARD_MSG"
3438 echo "                     S/KEY support: $SKEY_MSG"
3439 echo "              TCP Wrappers support: $TCPW_MSG"
3440 echo "              MD5 password support: $MD5_MSG"
3441 echo "                   libedit support: $LIBEDIT_MSG"
3442 echo "       IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
3443 echo "           Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3444 echo "                  BSD Auth support: $BSD_AUTH_MSG"
3445 echo "              Random number source: $RAND_MSG"
3446 if test ! -z "$USE_RAND_HELPER" ; then
3447 echo "     ssh-rand-helper collects from: $RAND_HELPER_MSG"
3448 fi
3449
3450 echo ""
3451
3452 echo "              Host: ${host}"
3453 echo "          Compiler: ${CC}"
3454 echo "    Compiler flags: ${CFLAGS}"
3455 echo "Preprocessor flags: ${CPPFLAGS}"
3456 echo "      Linker flags: ${LDFLAGS}"
3457 echo "         Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
3458
3459 echo ""
3460
3461 if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
3462         echo "SVR4 style packages are supported with \"make package\""
3463         echo ""
3464 fi
3465
3466 if test "x$PAM_MSG" = "xyes" ; then
3467         echo "PAM is enabled. You may need to install a PAM control file "
3468         echo "for sshd, otherwise password authentication may fail. "
3469         echo "Example PAM control files can be found in the contrib/ "
3470         echo "subdirectory"
3471         echo ""
3472 fi
3473
3474 if test ! -z "$RAND_HELPER_CMDHASH" ; then
3475         echo "WARNING: you are using the builtin random number collection "
3476         echo "service. Please read WARNING.RNG and request that your OS "
3477         echo "vendor includes kernel-based random number collection in "
3478         echo "future versions of your OS."
3479         echo ""
3480 fi
3481
3482 if test ! -z "$NO_PEERCHECK" ; then
3483         echo "WARNING: the operating system that you are using does not "
3484         echo "appear to support either the getpeereid() API nor the "
3485         echo "SO_PEERCRED getsockopt() option. These facilities are used to "
3486         echo "enforce security checks to prevent unauthorised connections to "
3487         echo "ssh-agent. Their absence increases the risk that a malicious "
3488         echo "user can connect to your agent. "
3489         echo ""
3490 fi
3491
3492 if test "$AUDIT_MODULE" = "bsm" ; then
3493         echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
3494         echo "See the Solaris section in README.platform for details."
3495 fi