configure.ac

   1 # $Id$
   2 #
   3 # Copyright (c) 1999-2004 Damien Miller
   4 #
   5 # Permission to use, copy, modify, and distribute this software for any
   6 # purpose with or without fee is hereby granted, provided that the above
   7 # copyright notice and this permission notice appear in all copies.
   8 #
   9 # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  10 # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  11 # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  12 # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  13 # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  14 # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  15 # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  16
  17 AC_INIT(OpenSSH, Portable, openssh-unix-dev@mindrot.org)
  18 AC_REVISION($Revision$)
  19 AC_CONFIG_SRCDIR([ssh.c])
  20
  21 AC_CONFIG_HEADER(config.h)
  22 AC_PROG_CC
  23 AC_CANONICAL_HOST
  24 AC_C_BIGENDIAN
  25
  26 # Checks for programs.
  27 AC_PROG_AWK
  28 AC_PROG_CPP
  29 AC_PROG_RANLIB
  30 AC_PROG_INSTALL
  31 AC_PROG_EGREP
  32 AC_PATH_PROG(AR, ar)
  33 AC_PATH_PROG(CAT, cat)
  34 AC_PATH_PROG(KILL, kill)
  35 AC_PATH_PROGS(PERL, perl5 perl)
  36 AC_PATH_PROG(SED, sed)
  37 AC_SUBST(PERL)
  38 AC_PATH_PROG(ENT, ent)
  39 AC_SUBST(ENT)
  40 AC_PATH_PROG(TEST_MINUS_S_SH, bash)
  41 AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
  42 AC_PATH_PROG(TEST_MINUS_S_SH, sh)
  43 AC_PATH_PROG(SH, sh)
  44 AC_SUBST(TEST_SHELL,sh)
  45
  46 dnl for buildpkg.sh
  47 AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
  48         [/usr/sbin${PATH_SEPARATOR}/etc])
  49 AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
  50         [/usr/sbin${PATH_SEPARATOR}/etc])
  51 AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
  52 if test -x /sbin/sh; then
  53         AC_SUBST(STARTUP_SCRIPT_SHELL,/sbin/sh)
  54 else
  55         AC_SUBST(STARTUP_SCRIPT_SHELL,/bin/sh)
  56 fi
  57
  58 # System features
  59 AC_SYS_LARGEFILE
  60
  61 if test -z "$AR" ; then
  62         AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
  63 fi
  64
  65 # Use LOGIN_PROGRAM from environment if possible
  66 if test ! -z "$LOGIN_PROGRAM" ; then
  67         AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM",
  68                 [If your header files don't define LOGIN_PROGRAM,
  69                 then use this (detected) from environment and PATH])
  70 else
  71         # Search for login
  72         AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
  73         if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
  74                 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
  75         fi
  76 fi
  77
  78 AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
  79 if test ! -z "$PATH_PASSWD_PROG" ; then
  80         AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG",
  81                 [Full path of your "passwd" program])
  82 fi
  83
  84 if test -z "$LD" ; then
  85         LD=$CC
  86 fi
  87 AC_SUBST(LD)
  88
  89 AC_C_INLINE
  90
  91 AC_CHECK_DECL(LLONG_MAX, have_llong_max=1, , [#include <limits.h>])
  92
  93 if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
  94         CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wuninitialized"
  95         GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'`
  96         case $GCC_VER in
  97                 1.*) ;;
  98                 2.8* | 2.9*) CFLAGS="$CFLAGS -Wsign-compare" ;;
  99                 2.*) ;;
 100                 3.*) CFLAGS="$CFLAGS -Wsign-compare" ;;
 101                 4.*) CFLAGS="$CFLAGS -Wsign-compare -Wno-pointer-sign" ;;
 102                 *) ;;
 103         esac
 104
 105         if test -z "$have_llong_max"; then
 106                 # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
 107                 unset ac_cv_have_decl_LLONG_MAX
 108                 saved_CFLAGS="$CFLAGS"
 109                 CFLAGS="$CFLAGS -std=gnu99"
 110                 AC_CHECK_DECL(LLONG_MAX,
 111                     [have_llong_max=1],
 112                     [CFLAGS="$saved_CFLAGS"],
 113                     [#include <limits.h>]
 114                 )
 115         fi
 116 fi
 117
 118 AC_ARG_WITH(rpath,
 119         [  --without-rpath         Disable auto-added -R linker paths],
 120         [
 121                 if test "x$withval" = "xno" ; then
 122                         need_dash_r=""
 123                 fi
 124                 if test "x$withval" = "xyes" ; then
 125                         need_dash_r=1
 126                 fi
 127         ]
 128 )
 129
 130 # Check for some target-specific stuff
 131 case "$host" in
 132 *-*-aix*)
 133         AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
 134         if (test -z "$blibpath"); then
 135                 blibpath="/usr/lib:/lib"
 136         fi
 137         saved_LDFLAGS="$LDFLAGS"
 138         if test "$GCC" = "yes"; then
 139                 flags="-Wl,-blibpath: -Wl,-rpath, -blibpath:"
 140         else
 141                 flags="-blibpath: -Wl,-blibpath: -Wl,-rpath,"
 142         fi
 143         for tryflags in $flags ;do
 144                 if (test -z "$blibflags"); then
 145                         LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
 146                         AC_TRY_LINK([], [], [blibflags=$tryflags])
 147                 fi
 148         done
 149         if (test -z "$blibflags"); then
 150                 AC_MSG_RESULT(not found)
 151                 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
 152         else
 153                 AC_MSG_RESULT($blibflags)
 154         fi
 155         LDFLAGS="$saved_LDFLAGS"
 156         dnl Check for authenticate.  Might be in libs.a on older AIXes
 157         AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE, 1,
 158                 [Define if you want to enable AIX4's authenticate function])],
 159                 [AC_CHECK_LIB(s,authenticate,
 160                         [ AC_DEFINE(WITH_AIXAUTHENTICATE)
 161                                 LIBS="$LIBS -ls"
 162                         ])
 163                 ])
 164         dnl Check for various auth function declarations in headers.
 165         AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
 166             passwdexpired, setauthdb], , , [#include <usersec.h>])
 167         dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
 168         AC_CHECK_DECLS(loginfailed,
 169                  [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
 170                   AC_TRY_COMPILE(
 171                         [#include <usersec.h>],
 172                         [(void)loginfailed("user","host","tty",0);],
 173                         [AC_MSG_RESULT(yes)
 174                          AC_DEFINE(AIX_LOGINFAILED_4ARG, 1,
 175                                 [Define if your AIX loginfailed() function
 176                                 takes 4 arguments (AIX >= 5.2)])],
 177                         [AC_MSG_RESULT(no)]
 178                 )],
 179                 [],
 180                 [#include <usersec.h>]
 181         )
 182         AC_CHECK_FUNCS(setauthdb)
 183         check_for_aix_broken_getaddrinfo=1
 184         AC_DEFINE(BROKEN_REALPATH, 1, [Define if you have a broken realpath.])
 185         AC_DEFINE(SETEUID_BREAKS_SETUID, 1,
 186             [Define if your platform breaks doing a seteuid before a setuid])
 187         AC_DEFINE(BROKEN_SETREUID, 1, [Define if your setreuid() is broken])
 188         AC_DEFINE(BROKEN_SETREGID, 1, [Define if your setregid() is broken])
 189         dnl AIX handles lastlog as part of its login message
 190         AC_DEFINE(DISABLE_LASTLOG, 1, [Define if you don't want to use lastlog])
 191         AC_DEFINE(LOGIN_NEEDS_UTMPX, 1,
 192                 [Some systems need a utmpx entry for /bin/login to work])
 193         AC_DEFINE(SPT_TYPE,SPT_REUSEARGV,
 194                 [Define to a Set Process Title type if your system is
 195                 supported by bsd-setproctitle.c])
 196         AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
 197             [AIX 5.2 and 5.3 (and presumably newer) require this])
 198         AC_DEFINE(PTY_ZEROREAD, 1, [read(1) can return 0 for a non-closed fd])
 199         ;;
 200 *-*-cygwin*)
 201         check_for_libcrypt_later=1
 202         LIBS="$LIBS /usr/lib/textmode.o"
 203         AC_DEFINE(HAVE_CYGWIN, 1, [Define if you are on Cygwin])
 204         AC_DEFINE(USE_PIPES, 1, [Use PIPES instead of a socketpair()])
 205         AC_DEFINE(DISABLE_SHADOW, 1,
 206                 [Define if you want to disable shadow passwords])
 207         AC_DEFINE(IP_TOS_IS_BROKEN, 1,
 208                 [Define if your system choked on IP TOS setting])
 209         AC_DEFINE(NO_X11_UNIX_SOCKETS, 1,
 210                 [Define if X11 doesn't support AF_UNIX sockets on that system])
 211         AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT, 1,
 212                 [Define if the concept of ports only accessible to
 213                 superusers isn't known])
 214         AC_DEFINE(DISABLE_FD_PASSING, 1,
 215                 [Define if your platform needs to skip post auth
 216                 file descriptor passing])
 217         ;;
 218 *-*-dgux*)
 219         AC_DEFINE(IP_TOS_IS_BROKEN)
 220         AC_DEFINE(SETEUID_BREAKS_SETUID)
 221         AC_DEFINE(BROKEN_SETREUID)
 222         AC_DEFINE(BROKEN_SETREGID)
 223         ;;
 224 *-*-darwin*)
 225         AC_MSG_CHECKING(if we have working getaddrinfo)
 226         AC_TRY_RUN([#include <mach-o/dyld.h>
 227 main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
 228                 exit(0);
 229         else
 230                 exit(1);
 231 }], [AC_MSG_RESULT(working)],
 232         [AC_MSG_RESULT(buggy)
 233         AC_DEFINE(BROKEN_GETADDRINFO, 1, [getaddrinfo is broken (if present)])],
 234         [AC_MSG_RESULT(assume it is working)])
 235         AC_DEFINE(SETEUID_BREAKS_SETUID)
 236         AC_DEFINE(BROKEN_SETREUID)
 237         AC_DEFINE(BROKEN_SETREGID)
 238         AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1,
 239                 [Define if your resolver libs need this for getrrsetbyname])
 240         AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
 241         AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
 242             [Use tunnel device compatibility to OpenBSD])
 243         AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
 244             [Prepend the address family to IP tunnel traffic])
 245         ;;
 246 *-*-hpux*)
 247         # first we define all of the options common to all HP-UX releases
 248         CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
 249         IPADDR_IN_DISPLAY=yes
 250         AC_DEFINE(USE_PIPES)
 251         AC_DEFINE(LOGIN_NO_ENDOPT, 1,
 252             [Define if your login program cannot handle end of options ("--")])
 253         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 254         AC_DEFINE(LOCKED_PASSWD_STRING, "*",
 255                 [String used in /etc/passwd to denote locked account])
 256         AC_DEFINE(SPT_TYPE,SPT_PSTAT)
 257         MAIL="/var/mail/username"
 258         LIBS="$LIBS -lsec"
 259         AC_CHECK_LIB(xnet, t_error, ,
 260             AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
 261
 262         # next, we define all of the options specific to major releases
 263         case "$host" in
 264         *-*-hpux10*)
 265                 if test -z "$GCC"; then
 266                         CFLAGS="$CFLAGS -Ae"
 267                 fi
 268                 ;;
 269         *-*-hpux11*)
 270                 AC_DEFINE(PAM_SUN_CODEBASE, 1,
 271                         [Define if you are using Solaris-derived PAM which
 272                         passes pam_messages to the conversation function
 273                         with an extra level of indirection])
 274                 AC_DEFINE(DISABLE_UTMP, 1,
 275                         [Define if you don't want to use utmp])
 276                 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
 277                 check_for_hpux_broken_getaddrinfo=1
 278                 check_for_conflicting_getspnam=1
 279                 ;;
 280         esac
 281
 282         # lastly, we define options specific to minor releases
 283         case "$host" in
 284         *-*-hpux10.26)
 285                 AC_DEFINE(HAVE_SECUREWARE, 1,
 286                         [Define if you have SecureWare-based
 287                         protected password database])
 288                 disable_ptmx_check=yes
 289                 LIBS="$LIBS -lsecpw"
 290                 ;;
 291         esac
 292         ;;
 293 *-*-irix5*)
 294         PATH="$PATH:/usr/etc"
 295         AC_DEFINE(BROKEN_INET_NTOA, 1,
 296                 [Define if you system's inet_ntoa is busted
 297                 (e.g. Irix gcc issue)])
 298         AC_DEFINE(SETEUID_BREAKS_SETUID)
 299         AC_DEFINE(BROKEN_SETREUID)
 300         AC_DEFINE(BROKEN_SETREGID)
 301         AC_DEFINE(WITH_ABBREV_NO_TTY, 1,
 302                 [Define if you shouldn't strip 'tty' from your
 303                 ttyname in [uw]tmp])
 304         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 305         ;;
 306 *-*-irix6*)
 307         PATH="$PATH:/usr/etc"
 308         AC_DEFINE(WITH_IRIX_ARRAY, 1,
 309                 [Define if you have/want arrays
 310                 (cluster-wide session managment, not C arrays)])
 311         AC_DEFINE(WITH_IRIX_PROJECT, 1,
 312                 [Define if you want IRIX project management])
 313         AC_DEFINE(WITH_IRIX_AUDIT, 1,
 314                 [Define if you want IRIX audit trails])
 315         AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS, 1,
 316                 [Define if you want IRIX kernel jobs])])
 317         AC_DEFINE(BROKEN_INET_NTOA)
 318         AC_DEFINE(SETEUID_BREAKS_SETUID)
 319         AC_DEFINE(BROKEN_SETREUID)
 320         AC_DEFINE(BROKEN_SETREGID)
 321         AC_DEFINE(BROKEN_UPDWTMPX, 1, [updwtmpx is broken (if present)])
 322         AC_DEFINE(WITH_ABBREV_NO_TTY)
 323         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 324         ;;
 325 *-*-linux*)
 326         no_dev_ptmx=1
 327         check_for_libcrypt_later=1
 328         check_for_openpty_ctty_bug=1
 329         AC_DEFINE(DONT_TRY_OTHER_AF, 1, [Workaround more Linux IPv6 quirks])
 330         AC_DEFINE(PAM_TTY_KLUDGE, 1,
 331                 [Work around problematic Linux PAM modules handling of PAM_TTY])
 332         AC_DEFINE(LOCKED_PASSWD_PREFIX, "!",
 333                 [String used in /etc/passwd to denote locked account])
 334         AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
 335         AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM,
 336                 [Define to whatever link() returns for "not supported"
 337                 if it doesn't return EOPNOTSUPP.])
 338         AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
 339         AC_DEFINE(USE_BTMP)
 340         inet6_default_4in6=yes
 341         case `uname -r` in
 342         1.*|2.0.*)
 343                 AC_DEFINE(BROKEN_CMSG_TYPE, 1,
 344                         [Define if cmsg_type is not passed correctly])
 345                 ;;
 346         esac
 347         # tun(4) forwarding compat code
 348         AC_CHECK_HEADERS(linux/if_tun.h)
 349         if test "x$ac_cv_header_linux_if_tun_h" = "xyes" ; then
 350                 AC_DEFINE(SSH_TUN_LINUX, 1,
 351                     [Open tunnel devices the Linux tun/tap way])
 352                 AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
 353                     [Use tunnel device compatibility to OpenBSD])
 354                 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
 355                     [Prepend the address family to IP tunnel traffic])
 356         fi
 357         ;;
 358 mips-sony-bsd|mips-sony-newsos4)
 359         AC_DEFINE(NEED_SETPGRP, 1, [Need setpgrp to acquire controlling tty])
 360         SONY=1
 361         ;;
 362 *-*-netbsd*)
 363         check_for_libcrypt_before=1
 364         if test "x$withval" != "xno" ; then
 365                 need_dash_r=1
 366         fi
 367         AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
 368         AC_CHECK_HEADER([net/if_tap.h], ,
 369             AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
 370         AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
 371             [Prepend the address family to IP tunnel traffic])
 372         ;;
 373 *-*-freebsd*)
 374         check_for_libcrypt_later=1
 375         AC_DEFINE(LOCKED_PASSWD_PREFIX, "*LOCKED*", [Account locked with pw(1)])
 376         AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
 377         AC_CHECK_HEADER([net/if_tap.h], ,
 378             AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
 379         ;;
 380 *-*-bsdi*)
 381         AC_DEFINE(SETEUID_BREAKS_SETUID)
 382         AC_DEFINE(BROKEN_SETREUID)
 383         AC_DEFINE(BROKEN_SETREGID)
 384         ;;
 385 *-next-*)
 386         conf_lastlog_location="/usr/adm/lastlog"
 387         conf_utmp_location=/etc/utmp
 388         conf_wtmp_location=/usr/adm/wtmp
 389         MAIL=/usr/spool/mail
 390         AC_DEFINE(HAVE_NEXT, 1, [Define if you are on NeXT])
 391         AC_DEFINE(BROKEN_REALPATH)
 392         AC_DEFINE(USE_PIPES)
 393         AC_DEFINE(BROKEN_SAVED_UIDS, 1, [Needed for NeXT])
 394         ;;
 395 *-*-openbsd*)
 396         AC_DEFINE(HAVE_ATTRIBUTE__SENTINEL__, 1, [OpenBSD's gcc has sentinel])
 397         AC_DEFINE(HAVE_ATTRIBUTE__BOUNDED__, 1, [OpenBSD's gcc has bounded])
 398         AC_DEFINE(SSH_TUN_OPENBSD, 1, [Open tunnel devices the OpenBSD way])
 399         ;;
 400 *-*-solaris*)
 401         if test "x$withval" != "xno" ; then
 402                 need_dash_r=1
 403         fi
 404         AC_DEFINE(PAM_SUN_CODEBASE)
 405         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 406         AC_DEFINE(LOGIN_NEEDS_TERM, 1,
 407                 [Some versions of /bin/login need the TERM supplied
 408                 on the commandline])
 409         AC_DEFINE(PAM_TTY_KLUDGE)
 410         AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
 411                 [Define if pam_chauthtok wants real uid set
 412                 to the unpriv'ed user])
 413         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 414         # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
 415         AC_DEFINE(SSHD_ACQUIRES_CTTY, 1,
 416                 [Define if sshd somehow reacquires a controlling TTY
 417                 after setsid()])
 418         AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd
 419                 in case the name is longer than 8 chars])
 420         external_path_file=/etc/default/login
 421         # hardwire lastlog location (can't detect it on some versions)
 422         conf_lastlog_location="/var/adm/lastlog"
 423         AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
 424         sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
 425         if test "$sol2ver" -ge 8; then
 426                 AC_MSG_RESULT(yes)
 427                 AC_DEFINE(DISABLE_UTMP)
 428                 AC_DEFINE(DISABLE_WTMP, 1,
 429                         [Define if you don't want to use wtmp])
 430         else
 431                 AC_MSG_RESULT(no)
 432         fi
 433         ;;
 434 *-*-sunos4*)
 435         CPPFLAGS="$CPPFLAGS -DSUNOS4"
 436         AC_CHECK_FUNCS(getpwanam)
 437         AC_DEFINE(PAM_SUN_CODEBASE)
 438         conf_utmp_location=/etc/utmp
 439         conf_wtmp_location=/var/adm/wtmp
 440         conf_lastlog_location=/var/adm/lastlog
 441         AC_DEFINE(USE_PIPES)
 442         ;;
 443 *-ncr-sysv*)
 444         LIBS="$LIBS -lc89"
 445         AC_DEFINE(USE_PIPES)
 446         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 447         AC_DEFINE(SETEUID_BREAKS_SETUID)
 448         AC_DEFINE(BROKEN_SETREUID)
 449         AC_DEFINE(BROKEN_SETREGID)
 450         ;;
 451 *-sni-sysv*)
 452         # /usr/ucblib MUST NOT be searched on ReliantUNIX
 453         AC_CHECK_LIB(dl, dlsym, ,)
 454         # -lresolv needs to be at the end of LIBS or DNS lookups break
 455         AC_CHECK_LIB(resolv, res_query, [ LIBS="$LIBS -lresolv" ])
 456         IPADDR_IN_DISPLAY=yes
 457         AC_DEFINE(USE_PIPES)
 458         AC_DEFINE(IP_TOS_IS_BROKEN)
 459         AC_DEFINE(SETEUID_BREAKS_SETUID)
 460         AC_DEFINE(BROKEN_SETREUID)
 461         AC_DEFINE(BROKEN_SETREGID)
 462         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 463         external_path_file=/etc/default/login
 464         # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
 465         # Attention: always take care to bind libsocket and libnsl before libc,
 466         # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
 467         ;;
 468 # UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
 469 *-*-sysv4.2*)
 470         CFLAGS="$CFLAGS -Dva_list=_VA_LIST"
 471         AC_DEFINE(USE_PIPES)
 472         AC_DEFINE(SETEUID_BREAKS_SETUID)
 473         AC_DEFINE(BROKEN_SETREUID)
 474         AC_DEFINE(BROKEN_SETREGID)
 475         AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
 476         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 477         ;;
 478 # UnixWare 7.x, OpenUNIX 8
 479 *-*-sysv5*)
 480         check_for_libcrypt_later=1
 481         AC_DEFINE(UNIXWARE_LONG_PASSWORDS, 1, [Support passwords > 8 chars])
 482         AC_DEFINE(USE_PIPES)
 483         AC_DEFINE(SETEUID_BREAKS_SETUID)
 484         AC_DEFINE(BROKEN_SETREUID)
 485         AC_DEFINE(BROKEN_SETREGID)
 486         AC_DEFINE(PASSWD_NEEDS_USERNAME)
 487         case "$host" in
 488         *-*-sysv5SCO_SV*)       # SCO OpenServer 6.x
 489                 TEST_SHELL=/u95/bin/sh
 490                 AC_DEFINE(BROKEN_LIBIAF, 1,
 491                         [ia_uinfo routines not supported by OS yet])
 492                 ;;
 493         *)      AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 494                 ;;
 495         esac
 496         ;;
 497 *-*-sysv*)
 498         ;;
 499 # SCO UNIX and OEM versions of SCO UNIX
 500 *-*-sco3.2v4*)
 501         AC_MSG_ERROR("This Platform is no longer supported.")
 502         ;;
 503 # SCO OpenServer 5.x
 504 *-*-sco3.2v5*)
 505         if test -z "$GCC"; then
 506                 CFLAGS="$CFLAGS -belf"
 507         fi
 508         LIBS="$LIBS -lprot -lx -ltinfo -lm"
 509         no_dev_ptmx=1
 510         AC_DEFINE(USE_PIPES)
 511         AC_DEFINE(HAVE_SECUREWARE)
 512         AC_DEFINE(DISABLE_SHADOW)
 513         AC_DEFINE(DISABLE_FD_PASSING)
 514         AC_DEFINE(SETEUID_BREAKS_SETUID)
 515         AC_DEFINE(BROKEN_SETREUID)
 516         AC_DEFINE(BROKEN_SETREGID)
 517         AC_DEFINE(WITH_ABBREV_NO_TTY)
 518         AC_DEFINE(BROKEN_UPDWTMPX)
 519         AC_DEFINE(PASSWD_NEEDS_USERNAME)
 520         AC_CHECK_FUNCS(getluid setluid)
 521         MANTYPE=man
 522         TEST_SHELL=ksh
 523         ;;
 524 *-*-unicosmk*)
 525         AC_DEFINE(NO_SSH_LASTLOG, 1,
 526                 [Define if you don't want to use lastlog in session.c])
 527         AC_DEFINE(SETEUID_BREAKS_SETUID)
 528         AC_DEFINE(BROKEN_SETREUID)
 529         AC_DEFINE(BROKEN_SETREGID)
 530         AC_DEFINE(USE_PIPES)
 531         AC_DEFINE(DISABLE_FD_PASSING)
 532         LDFLAGS="$LDFLAGS"
 533         LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
 534         MANTYPE=cat
 535         ;;
 536 *-*-unicosmp*)
 537         AC_DEFINE(SETEUID_BREAKS_SETUID)
 538         AC_DEFINE(BROKEN_SETREUID)
 539         AC_DEFINE(BROKEN_SETREGID)
 540         AC_DEFINE(WITH_ABBREV_NO_TTY)
 541         AC_DEFINE(USE_PIPES)
 542         AC_DEFINE(DISABLE_FD_PASSING)
 543         LDFLAGS="$LDFLAGS"
 544         LIBS="$LIBS -lgen -lacid -ldb"
 545         MANTYPE=cat
 546         ;;
 547 *-*-unicos*)
 548         AC_DEFINE(SETEUID_BREAKS_SETUID)
 549         AC_DEFINE(BROKEN_SETREUID)
 550         AC_DEFINE(BROKEN_SETREGID)
 551         AC_DEFINE(USE_PIPES)
 552         AC_DEFINE(DISABLE_FD_PASSING)
 553         AC_DEFINE(NO_SSH_LASTLOG)
 554         LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
 555         LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
 556         MANTYPE=cat
 557         ;;
 558 *-dec-osf*)
 559         AC_MSG_CHECKING(for Digital Unix SIA)
 560         no_osfsia=""
 561         AC_ARG_WITH(osfsia,
 562                 [  --with-osfsia           Enable Digital Unix SIA],
 563                 [
 564                         if test "x$withval" = "xno" ; then
 565                                 AC_MSG_RESULT(disabled)
 566                                 no_osfsia=1
 567                         fi
 568                 ],
 569         )
 570         if test -z "$no_osfsia" ; then
 571                 if test -f /etc/sia/matrix.conf; then
 572                         AC_MSG_RESULT(yes)
 573                         AC_DEFINE(HAVE_OSF_SIA, 1,
 574                                 [Define if you have Digital Unix Security
 575                                 Integration Architecture])
 576                         AC_DEFINE(DISABLE_LOGIN, 1,
 577                                 [Define if you don't want to use your
 578                                 system's login() call])
 579                         AC_DEFINE(DISABLE_FD_PASSING)
 580                         LIBS="$LIBS -lsecurity -ldb -lm -laud"
 581                 else
 582                         AC_MSG_RESULT(no)
 583                         AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin",
 584                           [String used in /etc/passwd to denote locked account])
 585                 fi
 586         fi
 587         AC_DEFINE(BROKEN_GETADDRINFO)
 588         AC_DEFINE(SETEUID_BREAKS_SETUID)
 589         AC_DEFINE(BROKEN_SETREUID)
 590         AC_DEFINE(BROKEN_SETREGID)
 591         ;;
 592
 593 *-*-nto-qnx*)
 594         AC_DEFINE(USE_PIPES)
 595         AC_DEFINE(NO_X11_UNIX_SOCKETS)
 596         AC_DEFINE(MISSING_NFDBITS, 1, [Define on *nto-qnx systems])
 597         AC_DEFINE(MISSING_HOWMANY, 1, [Define on *nto-qnx systems])
 598         AC_DEFINE(MISSING_FD_MASK, 1, [Define on *nto-qnx systems])
 599         AC_DEFINE(DISABLE_LASTLOG)
 600         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 601         enable_etc_default_login=no     # has incompatible /etc/default/login
 602         ;;
 603
 604 *-*-ultrix*)
 605         AC_DEFINE(BROKEN_GETGROUPS, 1, [getgroups(0,NULL) will return -1])
 606         AC_DEFINE(BROKEN_MMAP, 1, [Ultrix mmap can't map files])
 607         AC_DEFINE(NEED_SETPGRP)
 608         AC_DEFINE(HAVE_SYS_SYSLOG_H, 1, [Force use of sys/syslog.h on Ultrix])
 609         ;;
 610
 611 *-*-lynxos)
 612         CFLAGS="$CFLAGS -D__NO_INCLUDE_WARN__"
 613         AC_DEFINE(MISSING_HOWMANY)
 614         AC_DEFINE(BROKEN_SETVBUF, 1, [LynxOS has broken setvbuf() implementation])
 615         ;;
 616 esac
 617
 618 # Allow user to specify flags
 619 AC_ARG_WITH(cflags,
 620         [  --with-cflags           Specify additional flags to pass to compiler],
 621         [
 622                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 623                     test "x${withval}" != "xyes"; then
 624                         CFLAGS="$CFLAGS $withval"
 625                 fi
 626         ]
 627 )
 628 AC_ARG_WITH(cppflags,
 629         [  --with-cppflags         Specify additional flags to pass to preprocessor] ,
 630         [
 631                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 632                     test "x${withval}" != "xyes"; then
 633                         CPPFLAGS="$CPPFLAGS $withval"
 634                 fi
 635         ]
 636 )
 637 AC_ARG_WITH(ldflags,
 638         [  --with-ldflags          Specify additional flags to pass to linker],
 639         [
 640                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 641                     test "x${withval}" != "xyes"; then
 642                         LDFLAGS="$LDFLAGS $withval"
 643                 fi
 644         ]
 645 )
 646 AC_ARG_WITH(libs,
 647         [  --with-libs             Specify additional libraries to link with],
 648         [
 649                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 650                     test "x${withval}" != "xyes"; then
 651                         LIBS="$LIBS $withval"
 652                 fi
 653         ]
 654 )
 655 AC_ARG_WITH(Werror,
 656         [  --with-Werror           Build main code with -Werror],
 657         [
 658                 if test -n "$withval"  &&  test "x$withval" != "xno"; then
 659                         werror_flags="-Werror"
 660                         if test "x${withval}" != "xyes"; then
 661                                 werror_flags="$withval"
 662                         fi
 663                 fi
 664         ]
 665 )
 666
 667 AC_MSG_CHECKING(compiler and flags for sanity)
 668 AC_RUN_IFELSE(
 669         [AC_LANG_SOURCE([
 670 #include <stdio.h>
 671 int main(){exit(0);}
 672         ])],
 673         [       AC_MSG_RESULT(yes) ],
 674         [
 675                 AC_MSG_RESULT(no)
 676                 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
 677         ],
 678         [       AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
 679 )
 680
 681 dnl Checks for header files.
 682 AC_CHECK_HEADERS( \
 683         bstring.h \
 684         crypt.h \
 685         crypto/sha2.h \
 686         dirent.h \
 687         endian.h \
 688         features.h \
 689         fcntl.h \
 690         floatingpoint.h \
 691         getopt.h \
 692         glob.h \
 693         ia.h \
 694         iaf.h \
 695         limits.h \
 696         login.h \
 697         maillock.h \
 698         ndir.h \
 699         net/if_tun.h \
 700         netdb.h \
 701         netgroup.h \
 702         pam/pam_appl.h \
 703         paths.h \
 704         pty.h \
 705         readpassphrase.h \
 706         rpc/types.h \
 707         security/pam_appl.h \
 708         sha2.h \
 709         shadow.h \
 710         stddef.h \
 711         stdint.h \
 712         string.h \
 713         strings.h \
 714         sys/audit.h \
 715         sys/bitypes.h \
 716         sys/bsdtty.h \
 717         sys/cdefs.h \
 718         sys/dir.h \
 719         sys/mman.h \
 720         sys/ndir.h \
 721         sys/prctl.h \
 722         sys/pstat.h \
 723         sys/select.h \
 724         sys/stat.h \
 725         sys/stream.h \
 726         sys/stropts.h \
 727         sys/strtio.h \
 728         sys/sysmacros.h \
 729         sys/time.h \
 730         sys/timers.h \
 731         sys/un.h \
 732         time.h \
 733         tmpdir.h \
 734         ttyent.h \
 735         unistd.h \
 736         usersec.h \
 737         util.h \
 738         utime.h \
 739         utmp.h \
 740         utmpx.h \
 741         vis.h \
 742 )
 743
 744 # lastlog.h requires sys/time.h to be included first on Solaris
 745 AC_CHECK_HEADERS(lastlog.h, [], [], [
 746 #ifdef HAVE_SYS_TIME_H
 747 # include <sys/time.h>
 748 #endif
 749 ])
 750
 751 # sys/ptms.h requires sys/stream.h to be included first on Solaris
 752 AC_CHECK_HEADERS(sys/ptms.h, [], [], [
 753 #ifdef HAVE_SYS_STREAM_H
 754 # include <sys/stream.h>
 755 #endif
 756 ])
 757
 758 # login_cap.h requires sys/types.h on NetBSD
 759 AC_CHECK_HEADERS(login_cap.h, [], [], [
 760 #include <sys/types.h>
 761 ])
 762
 763 # Checks for libraries.
 764 AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
 765 AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
 766
 767 dnl IRIX and Solaris 2.5.1 have dirname() in libgen
 768 AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
 769         AC_CHECK_LIB(gen, dirname,[
 770                 AC_CACHE_CHECK([for broken dirname],
 771                         ac_cv_have_broken_dirname, [
 772                         save_LIBS="$LIBS"
 773                         LIBS="$LIBS -lgen"
 774                         AC_RUN_IFELSE(
 775                                 [AC_LANG_SOURCE([[
 776 #include <libgen.h>
 777 #include <string.h>
 778
 779 int main(int argc, char **argv) {
 780     char *s, buf[32];
 781
 782     strncpy(buf,"/etc", 32);
 783     s = dirname(buf);
 784     if (!s || strncmp(s, "/", 32) != 0) {
 785         exit(1);
 786     } else {
 787         exit(0);
 788     }
 789 }
 790                                 ]])],
 791                                 [ ac_cv_have_broken_dirname="no" ],
 792                                 [ ac_cv_have_broken_dirname="yes" ],
 793                                 [ ac_cv_have_broken_dirname="no" ],
 794                         )
 795                         LIBS="$save_LIBS"
 796                 ])
 797                 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
 798                         LIBS="$LIBS -lgen"
 799                         AC_DEFINE(HAVE_DIRNAME)
 800                         AC_CHECK_HEADERS(libgen.h)
 801                 fi
 802         ])
 803 ])
 804
 805 AC_CHECK_FUNC(getspnam, ,
 806         AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
 807 AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME, 1,
 808         [Define if you have the basename function.]))
 809
 810 dnl zlib is required
 811 AC_ARG_WITH(zlib,
 812         [  --with-zlib=PATH        Use zlib in PATH],
 813         [ if test "x$withval" = "xno" ; then
 814                 AC_MSG_ERROR([*** zlib is required ***])
 815           elif test "x$withval" != "xyes"; then
 816                 if test -d "$withval/lib"; then
 817                         if test -n "${need_dash_r}"; then
 818                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
 819                         else
 820                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
 821                         fi
 822                 else
 823                         if test -n "${need_dash_r}"; then
 824                                 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
 825                         else
 826                                 LDFLAGS="-L${withval} ${LDFLAGS}"
 827                         fi
 828                 fi
 829                 if test -d "$withval/include"; then
 830                         CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
 831                 else
 832                         CPPFLAGS="-I${withval} ${CPPFLAGS}"
 833                 fi
 834         fi ]
 835 )
 836
 837 AC_CHECK_LIB(z, deflate, ,
 838         [
 839                 saved_CPPFLAGS="$CPPFLAGS"
 840                 saved_LDFLAGS="$LDFLAGS"
 841                 save_LIBS="$LIBS"
 842                 dnl Check default zlib install dir
 843                 if test -n "${need_dash_r}"; then
 844                         LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
 845                 else
 846                         LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
 847                 fi
 848                 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
 849                 LIBS="$LIBS -lz"
 850                 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
 851                         [
 852                                 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
 853                         ]
 854                 )
 855         ]
 856 )
 857 AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
 858
 859 AC_ARG_WITH(zlib-version-check,
 860         [  --without-zlib-version-check Disable zlib version check],
 861         [  if test "x$withval" = "xno" ; then
 862                 zlib_check_nonfatal=1
 863            fi
 864         ]
 865 )
 866
 867 AC_MSG_CHECKING(for possibly buggy zlib)
 868 AC_RUN_IFELSE([AC_LANG_SOURCE([[
 869 #include <stdio.h>
 870 #include <zlib.h>
 871 int main()
 872 {
 873         int a=0, b=0, c=0, d=0, n, v;
 874         n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
 875         if (n != 3 && n != 4)
 876                 exit(1);
 877         v = a*1000000 + b*10000 + c*100 + d;
 878         fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
 879
 880         /* 1.1.4 is OK */
 881         if (a == 1 && b == 1 && c >= 4)
 882                 exit(0);
 883
 884         /* 1.2.3 and up are OK */
 885         if (v >= 1020300)
 886                 exit(0);
 887
 888         exit(2);
 889 }
 890         ]])],
 891         AC_MSG_RESULT(no),
 892         [ AC_MSG_RESULT(yes)
 893           if test -z "$zlib_check_nonfatal" ; then
 894                 AC_MSG_ERROR([*** zlib too old - check config.log ***
 895 Your reported zlib version has known security problems.  It's possible your
 896 vendor has fixed these problems without changing the version number.  If you
 897 are sure this is the case, you can disable the check by running
 898 "./configure --without-zlib-version-check".
 899 If you are in doubt, upgrade zlib to version 1.2.3 or greater.
 900 See http://www.gzip.org/zlib/ for details.])
 901           else
 902                 AC_MSG_WARN([zlib version may have security problems])
 903           fi
 904         ],
 905         [       AC_MSG_WARN([cross compiling: not checking zlib version]) ]
 906 )
 907
 908 dnl UnixWare 2.x
 909 AC_CHECK_FUNC(strcasecmp,
 910         [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
 911 )
 912 AC_CHECK_FUNCS(utimes,
 913         [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
 914                                         LIBS="$LIBS -lc89"]) ]
 915 )
 916
 917 dnl    Checks for libutil functions
 918 AC_CHECK_HEADERS(libutil.h)
 919 AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN, 1,
 920         [Define if your libraries define login()])])
 921 AC_CHECK_FUNCS(logout updwtmp logwtmp)
 922
 923 AC_FUNC_STRFTIME
 924
 925 # Check for ALTDIRFUNC glob() extension
 926 AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
 927 AC_EGREP_CPP(FOUNDIT,
 928         [
 929                 #include <glob.h>
 930                 #ifdef GLOB_ALTDIRFUNC
 931                 FOUNDIT
 932                 #endif
 933         ],
 934         [
 935                 AC_DEFINE(GLOB_HAS_ALTDIRFUNC, 1,
 936                         [Define if your system glob() function has
 937                         the GLOB_ALTDIRFUNC extension])
 938                 AC_MSG_RESULT(yes)
 939         ],
 940         [
 941                 AC_MSG_RESULT(no)
 942         ]
 943 )
 944
 945 # Check for g.gl_matchc glob() extension
 946 AC_MSG_CHECKING(for gl_matchc field in glob_t)
 947 AC_TRY_COMPILE(
 948         [ #include <glob.h> ],
 949         [glob_t g; g.gl_matchc = 1;],
 950         [
 951                 AC_DEFINE(GLOB_HAS_GL_MATCHC, 1,
 952                         [Define if your system glob() function has
 953                         gl_matchc options in glob_t])
 954                 AC_MSG_RESULT(yes)
 955         ],
 956         [
 957                 AC_MSG_RESULT(no)
 958         ]
 959 )
 960
 961 AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
 962 AC_RUN_IFELSE(
 963         [AC_LANG_SOURCE([[
 964 #include <sys/types.h>
 965 #include <dirent.h>
 966 int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
 967         ]])],
 968         [AC_MSG_RESULT(yes)],
 969         [
 970                 AC_MSG_RESULT(no)
 971                 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME, 1,
 972                         [Define if your struct dirent expects you to
 973                         allocate extra space for d_name])
 974         ],
 975         [
 976                 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
 977                 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
 978         ]
 979 )
 980
 981 AC_MSG_CHECKING([for /proc/pid/fd directory])
 982 if test -d "/proc/$$/fd" ; then
 983         AC_DEFINE(HAVE_PROC_PID, 1, [Define if you have /proc/$pid/fd])
 984         AC_MSG_RESULT(yes)
 985 else
 986         AC_MSG_RESULT(no)
 987 fi
 988
 989 # Check whether user wants S/Key support
 990 SKEY_MSG="no"
 991 AC_ARG_WITH(skey,
 992         [  --with-skey[[=PATH]]      Enable S/Key support (optionally in PATH)],
 993         [
 994                 if test "x$withval" != "xno" ; then
 995
 996                         if test "x$withval" != "xyes" ; then
 997                                 CPPFLAGS="$CPPFLAGS -I${withval}/include"
 998                                 LDFLAGS="$LDFLAGS -L${withval}/lib"
 999                         fi
1000
1001                         AC_DEFINE(SKEY, 1, [Define if you want S/Key support])
1002                         LIBS="-lskey $LIBS"
1003                         SKEY_MSG="yes"
1004
1005                         AC_MSG_CHECKING([for s/key support])
1006                         AC_LINK_IFELSE(
1007                                 [AC_LANG_SOURCE([[
1008 #include <stdio.h>
1009 #include <skey.h>
1010 int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
1011                                 ]])],
1012                                 [AC_MSG_RESULT(yes)],
1013                                 [
1014                                         AC_MSG_RESULT(no)
1015                                         AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
1016                                 ])
1017                         AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
1018                         AC_TRY_COMPILE(
1019                                 [#include <stdio.h>
1020                                  #include <skey.h>],
1021                                 [(void)skeychallenge(NULL,"name","",0);],
1022                                 [AC_MSG_RESULT(yes)
1023                                  AC_DEFINE(SKEYCHALLENGE_4ARG, 1,
1024                                         [Define if your skeychallenge()
1025                                         function takes 4 arguments (NetBSD)])],
1026                                 [AC_MSG_RESULT(no)]
1027                         )
1028                 fi
1029         ]
1030 )
1031
1032 # Check whether user wants TCP wrappers support
1033 TCPW_MSG="no"
1034 AC_ARG_WITH(tcp-wrappers,
1035         [  --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
1036         [
1037                 if test "x$withval" != "xno" ; then
1038                         saved_LIBS="$LIBS"
1039                         saved_LDFLAGS="$LDFLAGS"
1040                         saved_CPPFLAGS="$CPPFLAGS"
1041                         if test -n "${withval}" && \
1042                             test "x${withval}" != "xyes"; then
1043                                 if test -d "${withval}/lib"; then
1044                                         if test -n "${need_dash_r}"; then
1045                                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1046                                         else
1047                                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1048                                         fi
1049                                 else
1050                                         if test -n "${need_dash_r}"; then
1051                                                 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1052                                         else
1053                                                 LDFLAGS="-L${withval} ${LDFLAGS}"
1054                                         fi
1055                                 fi
1056                                 if test -d "${withval}/include"; then
1057                                         CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1058                                 else
1059                                         CPPFLAGS="-I${withval} ${CPPFLAGS}"
1060                                 fi
1061                         fi
1062                         LIBWRAP="-lwrap"
1063                         LIBS="$LIBWRAP $LIBS"
1064                         AC_MSG_CHECKING(for libwrap)
1065                         AC_TRY_LINK(
1066                                 [
1067 #include <sys/types.h>
1068 #include <sys/socket.h>
1069 #include <netinet/in.h>
1070 #include <tcpd.h>
1071                                         int deny_severity = 0, allow_severity = 0;
1072                                 ],
1073                                 [hosts_access(0);],
1074                                 [
1075                                         AC_MSG_RESULT(yes)
1076                                         AC_DEFINE(LIBWRAP, 1,
1077                                                 [Define if you want
1078                                                 TCP Wrappers support])
1079                                         AC_SUBST(LIBWRAP)
1080                                         TCPW_MSG="yes"
1081                                 ],
1082                                 [
1083                                         AC_MSG_ERROR([*** libwrap missing])
1084                                 ]
1085                         )
1086                         LIBS="$saved_LIBS"
1087                 fi
1088         ]
1089 )
1090
1091 # Check whether user wants libedit support
1092 LIBEDIT_MSG="no"
1093 AC_ARG_WITH(libedit,
1094         [  --with-libedit[[=PATH]]   Enable libedit support for sftp],
1095         [ if test "x$withval" != "xno" ; then
1096                 if test "x$withval" != "xyes"; then
1097                         CPPFLAGS="$CPPFLAGS -I${withval}/include"
1098                         if test -n "${need_dash_r}"; then
1099                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1100                         else
1101                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1102                         fi
1103                 fi
1104                 AC_CHECK_LIB(edit, el_init,
1105                         [ AC_DEFINE(USE_LIBEDIT, 1, [Use libedit for sftp])
1106                           LIBEDIT="-ledit -lcurses"
1107                           LIBEDIT_MSG="yes"
1108                           AC_SUBST(LIBEDIT)
1109                         ],
1110                         [ AC_MSG_ERROR(libedit not found) ],
1111                         [ -lcurses ]
1112                 )
1113                 AC_MSG_CHECKING(if libedit version is compatible)
1114                 AC_COMPILE_IFELSE(
1115                     [AC_LANG_SOURCE([[
1116 #include <histedit.h>
1117 int main(void)
1118 {
1119         int i = H_SETSIZE;
1120         el_init("", NULL, NULL, NULL);
1121         exit(0);
1122 }
1123                     ]])],
1124                     [ AC_MSG_RESULT(yes) ],
1125                     [ AC_MSG_RESULT(no)
1126                       AC_MSG_ERROR(libedit version is not compatible) ]
1127                 )
1128         fi ]
1129 )
1130
1131 AUDIT_MODULE=none
1132 AC_ARG_WITH(audit,
1133         [  --with-audit=module     Enable EXPERIMENTAL audit support (modules=debug,bsm)],
1134         [
1135           AC_MSG_CHECKING(for supported audit module)
1136           case "$withval" in
1137           bsm)
1138                 AC_MSG_RESULT(bsm)
1139                 AUDIT_MODULE=bsm
1140                 dnl    Checks for headers, libs and functions
1141                 AC_CHECK_HEADERS(bsm/audit.h, [],
1142                     [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)])
1143                 AC_CHECK_LIB(bsm, getaudit, [],
1144                     [AC_MSG_ERROR(BSM enabled and required library not found)])
1145                 AC_CHECK_FUNCS(getaudit, [],
1146                     [AC_MSG_ERROR(BSM enabled and required function not found)])
1147                 # These are optional
1148                 AC_CHECK_FUNCS(getaudit_addr)
1149                 AC_DEFINE(USE_BSM_AUDIT, 1, [Use BSM audit module])
1150                 ;;
1151           debug)
1152                 AUDIT_MODULE=debug
1153                 AC_MSG_RESULT(debug)
1154                 AC_DEFINE(SSH_AUDIT_EVENTS, 1, Use audit debugging module)
1155                 ;;
1156           no)
1157                 AC_MSG_RESULT(no)
1158                 ;;
1159           *)
1160                 AC_MSG_ERROR([Unknown audit module $withval])
1161                 ;;
1162         esac ]
1163 )
1164
1165 dnl    Checks for library functions. Please keep in alphabetical order
1166 AC_CHECK_FUNCS( \
1167         arc4random \
1168         asprintf \
1169         b64_ntop \
1170         __b64_ntop \
1171         b64_pton \
1172         __b64_pton \
1173         bcopy \
1174         bindresvport_sa \
1175         clock \
1176         closefrom \
1177         dirfd \
1178         fchmod \
1179         fchown \
1180         freeaddrinfo \
1181         futimes \
1182         getaddrinfo \
1183         getcwd \
1184         getgrouplist \
1185         getnameinfo \
1186         getopt \
1187         getpeereid \
1188         _getpty \
1189         getrlimit \
1190         getttyent \
1191         glob \
1192         inet_aton \
1193         inet_ntoa \
1194         inet_ntop \
1195         innetgr \
1196         login_getcapbool \
1197         md5_crypt \
1198         memmove \
1199         mkdtemp \
1200         mmap \
1201         ngetaddrinfo \
1202         nsleep \
1203         ogetaddrinfo \
1204         openlog_r \
1205         openpty \
1206         prctl \
1207         pstat \
1208         readpassphrase \
1209         realpath \
1210         recvmsg \
1211         rresvport_af \
1212         sendmsg \
1213         setdtablesize \
1214         setegid \
1215         setenv \
1216         seteuid \
1217         setgroups \
1218         setlogin \
1219         setpcred \
1220         setproctitle \
1221         setregid \
1222         setreuid \
1223         setrlimit \
1224         setsid \
1225         setvbuf \
1226         sigaction \
1227         sigvec \
1228         snprintf \
1229         socketpair \
1230         strdup \
1231         strerror \
1232         strlcat \
1233         strlcpy \
1234         strmode \
1235         strnvis \
1236         strtonum \
1237         strtoll \
1238         strtoul \
1239         sysconf \
1240         tcgetpgrp \
1241         truncate \
1242         unsetenv \
1243         updwtmpx \
1244         vasprintf \
1245         vhangup \
1246         vsnprintf \
1247         waitpid \
1248 )
1249
1250 # IRIX has a const char return value for gai_strerror()
1251 AC_CHECK_FUNCS(gai_strerror,[
1252         AC_DEFINE(HAVE_GAI_STRERROR)
1253         AC_TRY_COMPILE([
1254 #include <sys/types.h>
1255 #include <sys/socket.h>
1256 #include <netdb.h>
1257
1258 const char *gai_strerror(int);],[
1259 char *str;
1260
1261 str = gai_strerror(0);],[
1262                 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
1263                 [Define if gai_strerror() returns const char *])])])
1264
1265 AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP, 1,
1266         [Some systems put nanosleep outside of libc]))
1267
1268 dnl Make sure prototypes are defined for these before using them.
1269 AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
1270 AC_CHECK_DECL(strsep,
1271         [AC_CHECK_FUNCS(strsep)],
1272         [],
1273         [
1274 #ifdef HAVE_STRING_H
1275 # include <string.h>
1276 #endif
1277         ])
1278
1279 dnl tcsendbreak might be a macro
1280 AC_CHECK_DECL(tcsendbreak,
1281         [AC_DEFINE(HAVE_TCSENDBREAK)],
1282         [AC_CHECK_FUNCS(tcsendbreak)],
1283         [#include <termios.h>]
1284 )
1285
1286 AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
1287
1288 AC_CHECK_DECLS(SHUT_RD, , ,[#include <sys/socket.h>])
1289
1290 AC_CHECK_DECLS(O_NONBLOCK, , ,
1291         [
1292 #include <sys/types.h>
1293 #ifdef HAVE_SYS_STAT_H
1294 # include <sys/stat.h>
1295 #endif
1296 #ifdef HAVE_FCNTL_H
1297 # include <fcntl.h>
1298 #endif
1299         ])
1300
1301 AC_CHECK_FUNCS(setresuid, [
1302         dnl Some platorms have setresuid that isn't implemented, test for this
1303         AC_MSG_CHECKING(if setresuid seems to work)
1304         AC_RUN_IFELSE(
1305                 [AC_LANG_SOURCE([[
1306 #include <stdlib.h>
1307 #include <errno.h>
1308 int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
1309                 ]])],
1310                 [AC_MSG_RESULT(yes)],
1311                 [AC_DEFINE(BROKEN_SETRESUID, 1,
1312                         [Define if your setresuid() is broken])
1313                  AC_MSG_RESULT(not implemented)],
1314                 [AC_MSG_WARN([cross compiling: not checking setresuid])]
1315         )
1316 ])
1317
1318 AC_CHECK_FUNCS(setresgid, [
1319         dnl Some platorms have setresgid that isn't implemented, test for this
1320         AC_MSG_CHECKING(if setresgid seems to work)
1321         AC_RUN_IFELSE(
1322                 [AC_LANG_SOURCE([[
1323 #include <stdlib.h>
1324 #include <errno.h>
1325 int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
1326                 ]])],
1327                 [AC_MSG_RESULT(yes)],
1328                 [AC_DEFINE(BROKEN_SETRESGID, 1,
1329                         [Define if your setresgid() is broken])
1330                  AC_MSG_RESULT(not implemented)],
1331                 [AC_MSG_WARN([cross compiling: not checking setresuid])]
1332         )
1333 ])
1334
1335 dnl    Checks for time functions
1336 AC_CHECK_FUNCS(gettimeofday time)
1337 dnl    Checks for utmp functions
1338 AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1339 AC_CHECK_FUNCS(utmpname)
1340 dnl    Checks for utmpx functions
1341 AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1342 AC_CHECK_FUNCS(setutxent utmpxname)
1343
1344 AC_CHECK_FUNC(daemon,
1345         [AC_DEFINE(HAVE_DAEMON, 1, [Define if your libraries define daemon()])],
1346         [AC_CHECK_LIB(bsd, daemon,
1347                 [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
1348 )
1349
1350 AC_CHECK_FUNC(getpagesize,
1351         [AC_DEFINE(HAVE_GETPAGESIZE, 1,
1352                 [Define if your libraries define getpagesize()])],
1353         [AC_CHECK_LIB(ucb, getpagesize,
1354                 [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
1355 )
1356
1357 # Check for broken snprintf
1358 if test "x$ac_cv_func_snprintf" = "xyes" ; then
1359         AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1360         AC_RUN_IFELSE(
1361                 [AC_LANG_SOURCE([[
1362 #include <stdio.h>
1363 int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
1364                 ]])],
1365                 [AC_MSG_RESULT(yes)],
1366                 [
1367                         AC_MSG_RESULT(no)
1368                         AC_DEFINE(BROKEN_SNPRINTF, 1,
1369                                 [Define if your snprintf is busted])
1370                         AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1371                 ],
1372                 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
1373         )
1374 fi
1375
1376 # If we don't have a working asprintf, then we strongly depend on vsnprintf
1377 # returning the right thing on overflow: the number of characters it tried to
1378 # create (as per SUSv3)
1379 if test "x$ac_cv_func_asprintf" != "xyes" && \
1380    test "x$ac_cv_func_vsnprintf" = "xyes" ; then
1381         AC_MSG_CHECKING([whether vsnprintf returns correct values on overflow])
1382         AC_RUN_IFELSE(
1383                 [AC_LANG_SOURCE([[
1384 #include <sys/types.h>
1385 #include <stdio.h>
1386 #include <stdarg.h>
1387
1388 int x_snprintf(char *str,size_t count,const char *fmt,...)
1389 {
1390         size_t ret; va_list ap;
1391         va_start(ap, fmt); ret = vsnprintf(str, count, fmt, ap); va_end(ap);
1392         return ret;
1393 }
1394 int main(void)
1395 {
1396         char x[1];
1397         exit(x_snprintf(x, 1, "%s %d", "hello", 12345) == 11 ? 0 : 1);
1398 } ]])],
1399                 [AC_MSG_RESULT(yes)],
1400                 [
1401                         AC_MSG_RESULT(no)
1402                         AC_DEFINE(BROKEN_SNPRINTF, 1,
1403                                 [Define if your snprintf is busted])
1404                         AC_MSG_WARN([****** Your vsnprintf() function is broken, complain to your vendor])
1405                 ],
1406                 [ AC_MSG_WARN([cross compiling: Assuming working vsnprintf()]) ]
1407         )
1408 fi
1409
1410 # On systems where [v]snprintf is broken, but is declared in stdio,
1411 # check that the fmt argument is const char * or just char *.
1412 # This is only useful for when BROKEN_SNPRINTF
1413 AC_MSG_CHECKING([whether snprintf can declare const char *fmt])
1414 AC_COMPILE_IFELSE([AC_LANG_SOURCE([[#include <stdio.h>
1415            int snprintf(char *a, size_t b, const char *c, ...) { return 0; }
1416            int main(void) { snprintf(0, 0, 0); }
1417     ]])],
1418    [AC_MSG_RESULT(yes)
1419     AC_DEFINE(SNPRINTF_CONST, [const],
1420               [Define as const if snprintf() can declare const char *fmt])],
1421    [AC_MSG_RESULT(no)
1422     AC_DEFINE(SNPRINTF_CONST, [/* not const */])])
1423
1424 # Check for missing getpeereid (or equiv) support
1425 NO_PEERCHECK=""
1426 if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1427         AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1428         AC_TRY_COMPILE(
1429                 [#include <sys/types.h>
1430                  #include <sys/socket.h>],
1431                 [int i = SO_PEERCRED;],
1432                 [ AC_MSG_RESULT(yes)
1433                   AC_DEFINE(HAVE_SO_PEERCRED, 1, [Have PEERCRED socket option])
1434                 ],
1435                 [AC_MSG_RESULT(no)
1436                 NO_PEERCHECK=1]
1437         )
1438 fi
1439
1440 dnl see whether mkstemp() requires XXXXXX
1441 if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1442 AC_MSG_CHECKING([for (overly) strict mkstemp])
1443 AC_RUN_IFELSE(
1444         [AC_LANG_SOURCE([[
1445 #include <stdlib.h>
1446 main() { char template[]="conftest.mkstemp-test";
1447 if (mkstemp(template) == -1)
1448         exit(1);
1449 unlink(template); exit(0);
1450 }
1451         ]])],
1452         [
1453                 AC_MSG_RESULT(no)
1454         ],
1455         [
1456                 AC_MSG_RESULT(yes)
1457                 AC_DEFINE(HAVE_STRICT_MKSTEMP, 1, [Silly mkstemp()])
1458         ],
1459         [
1460                 AC_MSG_RESULT(yes)
1461                 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1462         ]
1463 )
1464 fi
1465
1466 dnl make sure that openpty does not reacquire controlling terminal
1467 if test ! -z "$check_for_openpty_ctty_bug"; then
1468         AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1469         AC_RUN_IFELSE(
1470                 [AC_LANG_SOURCE([[
1471 #include <stdio.h>
1472 #include <sys/fcntl.h>
1473 #include <sys/types.h>
1474 #include <sys/wait.h>
1475
1476 int
1477 main()
1478 {
1479         pid_t pid;
1480         int fd, ptyfd, ttyfd, status;
1481
1482         pid = fork();
1483         if (pid < 0) {          /* failed */
1484                 exit(1);
1485         } else if (pid > 0) {   /* parent */
1486                 waitpid(pid, &status, 0);
1487                 if (WIFEXITED(status))
1488                         exit(WEXITSTATUS(status));
1489                 else
1490                         exit(2);
1491         } else {                /* child */
1492                 close(0); close(1); close(2);
1493                 setsid();
1494                 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1495                 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1496                 if (fd >= 0)
1497                         exit(3);        /* Acquired ctty: broken */
1498                 else
1499                         exit(0);        /* Did not acquire ctty: OK */
1500         }
1501 }
1502                 ]])],
1503                 [
1504                         AC_MSG_RESULT(yes)
1505                 ],
1506                 [
1507                         AC_MSG_RESULT(no)
1508                         AC_DEFINE(SSHD_ACQUIRES_CTTY)
1509                 ],
1510                 [
1511                         AC_MSG_RESULT(cross-compiling, assuming yes)
1512                 ]
1513         )
1514 fi
1515
1516 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1517     test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
1518         AC_MSG_CHECKING(if getaddrinfo seems to work)
1519         AC_RUN_IFELSE(
1520                 [AC_LANG_SOURCE([[
1521 #include <stdio.h>
1522 #include <sys/socket.h>
1523 #include <netdb.h>
1524 #include <errno.h>
1525 #include <netinet/in.h>
1526
1527 #define TEST_PORT "2222"
1528
1529 int
1530 main(void)
1531 {
1532         int err, sock;
1533         struct addrinfo *gai_ai, *ai, hints;
1534         char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1535
1536         memset(&hints, 0, sizeof(hints));
1537         hints.ai_family = PF_UNSPEC;
1538         hints.ai_socktype = SOCK_STREAM;
1539         hints.ai_flags = AI_PASSIVE;
1540
1541         err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1542         if (err != 0) {
1543                 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1544                 exit(1);
1545         }
1546
1547         for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1548                 if (ai->ai_family != AF_INET6)
1549                         continue;
1550
1551                 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1552                     sizeof(ntop), strport, sizeof(strport),
1553                     NI_NUMERICHOST|NI_NUMERICSERV);
1554
1555                 if (err != 0) {
1556                         if (err == EAI_SYSTEM)
1557                                 perror("getnameinfo EAI_SYSTEM");
1558                         else
1559                                 fprintf(stderr, "getnameinfo failed: %s\n",
1560                                     gai_strerror(err));
1561                         exit(2);
1562                 }
1563
1564                 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1565                 if (sock < 0)
1566                         perror("socket");
1567                 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1568                         if (errno == EBADF)
1569                                 exit(3);
1570                 }
1571         }
1572         exit(0);
1573 }
1574                 ]])],
1575                 [
1576                         AC_MSG_RESULT(yes)
1577                 ],
1578                 [
1579                         AC_MSG_RESULT(no)
1580                         AC_DEFINE(BROKEN_GETADDRINFO)
1581                 ],
1582                 [
1583                         AC_MSG_RESULT(cross-compiling, assuming yes)
1584                 ]
1585         )
1586 fi
1587
1588 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1589     test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
1590         AC_MSG_CHECKING(if getaddrinfo seems to work)
1591         AC_RUN_IFELSE(
1592                 [AC_LANG_SOURCE([[
1593 #include <stdio.h>
1594 #include <sys/socket.h>
1595 #include <netdb.h>
1596 #include <errno.h>
1597 #include <netinet/in.h>
1598
1599 #define TEST_PORT "2222"
1600
1601 int
1602 main(void)
1603 {
1604         int err, sock;
1605         struct addrinfo *gai_ai, *ai, hints;
1606         char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1607
1608         memset(&hints, 0, sizeof(hints));
1609         hints.ai_family = PF_UNSPEC;
1610         hints.ai_socktype = SOCK_STREAM;
1611         hints.ai_flags = AI_PASSIVE;
1612
1613         err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1614         if (err != 0) {
1615                 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1616                 exit(1);
1617         }
1618
1619         for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1620                 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1621                         continue;
1622
1623                 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1624                     sizeof(ntop), strport, sizeof(strport),
1625                     NI_NUMERICHOST|NI_NUMERICSERV);
1626
1627                 if (ai->ai_family == AF_INET && err != 0) {
1628                         perror("getnameinfo");
1629                         exit(2);
1630                 }
1631         }
1632         exit(0);
1633 }
1634                 ]])],
1635                 [
1636                         AC_MSG_RESULT(yes)
1637                         AC_DEFINE(AIX_GETNAMEINFO_HACK, 1,
1638                                 [Define if you have a getaddrinfo that fails
1639                                 for the all-zeros IPv6 address])
1640                 ],
1641                 [
1642                         AC_MSG_RESULT(no)
1643                         AC_DEFINE(BROKEN_GETADDRINFO)
1644                 ],
1645                 [
1646                         AC_MSG_RESULT(cross-compiling, assuming no)
1647                 ]
1648         )
1649 fi
1650
1651 if test "x$check_for_conflicting_getspnam" = "x1"; then
1652         AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1653         AC_COMPILE_IFELSE(
1654                 [
1655 #include <shadow.h>
1656 int main(void) {exit(0);}
1657                 ],
1658                 [
1659                         AC_MSG_RESULT(no)
1660                 ],
1661                 [
1662                         AC_MSG_RESULT(yes)
1663                         AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1664                             [Conflicting defs for getspnam])
1665                 ]
1666         )
1667 fi
1668
1669 AC_FUNC_GETPGRP
1670
1671 # Check for PAM libs
1672 PAM_MSG="no"
1673 AC_ARG_WITH(pam,
1674         [  --with-pam              Enable PAM support ],
1675         [
1676                 if test "x$withval" != "xno" ; then
1677                         if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
1678                            test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
1679                                 AC_MSG_ERROR([PAM headers not found])
1680                         fi
1681
1682                         AC_CHECK_LIB(dl, dlopen, , )
1683                         AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
1684                         AC_CHECK_FUNCS(pam_getenvlist)
1685                         AC_CHECK_FUNCS(pam_putenv)
1686
1687                         PAM_MSG="yes"
1688
1689                         AC_DEFINE(USE_PAM, 1,
1690                                 [Define if you want to enable PAM support])
1691                         if test $ac_cv_lib_dl_dlopen = yes; then
1692                                 LIBPAM="-lpam -ldl"
1693                         else
1694                                 LIBPAM="-lpam"
1695                         fi
1696                         AC_SUBST(LIBPAM)
1697                 fi
1698         ]
1699 )
1700
1701 # Check for older PAM
1702 if test "x$PAM_MSG" = "xyes" ; then
1703         # Check PAM strerror arguments (old PAM)
1704         AC_MSG_CHECKING([whether pam_strerror takes only one argument])
1705         AC_TRY_COMPILE(
1706                 [
1707 #include <stdlib.h>
1708 #if defined(HAVE_SECURITY_PAM_APPL_H)
1709 #include <security/pam_appl.h>
1710 #elif defined (HAVE_PAM_PAM_APPL_H)
1711 #include <pam/pam_appl.h>
1712 #endif
1713                 ],
1714                 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
1715                 [AC_MSG_RESULT(no)],
1716                 [
1717                         AC_DEFINE(HAVE_OLD_PAM, 1,
1718                                 [Define if you have an old version of PAM
1719                                 which takes only one argument to pam_strerror])
1720                         AC_MSG_RESULT(yes)
1721                         PAM_MSG="yes (old library)"
1722                 ]
1723         )
1724 fi
1725
1726 # Search for OpenSSL
1727 saved_CPPFLAGS="$CPPFLAGS"
1728 saved_LDFLAGS="$LDFLAGS"
1729 AC_ARG_WITH(ssl-dir,
1730         [  --with-ssl-dir=PATH     Specify path to OpenSSL installation ],
1731         [
1732                 if test "x$withval" != "xno" ; then
1733                         case "$withval" in
1734                                 # Relative paths
1735                                 ./*|../*)       withval="`pwd`/$withval"
1736                         esac
1737                         if test -d "$withval/lib"; then
1738                                 if test -n "${need_dash_r}"; then
1739                                         LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1740                                 else
1741                                         LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1742                                 fi
1743                         else
1744                                 if test -n "${need_dash_r}"; then
1745                                         LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1746                                 else
1747                                         LDFLAGS="-L${withval} ${LDFLAGS}"
1748                                 fi
1749                         fi
1750                         if test -d "$withval/include"; then
1751                                 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1752                         else
1753                                 CPPFLAGS="-I${withval} ${CPPFLAGS}"
1754                         fi
1755                 fi
1756         ]
1757 )
1758 LIBS="-lcrypto $LIBS"
1759 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL, 1,
1760         [Define if your ssl headers are included
1761         with #include <openssl/header.h>]),
1762         [
1763                 dnl Check default openssl install dir
1764                 if test -n "${need_dash_r}"; then
1765                         LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
1766                 else
1767                         LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
1768                 fi
1769                 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1770                 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1771                         [
1772                                 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1773                         ]
1774                 )
1775         ]
1776 )
1777
1778 # Determine OpenSSL header version
1779 AC_MSG_CHECKING([OpenSSL header version])
1780 AC_RUN_IFELSE(
1781         [AC_LANG_SOURCE([[
1782 #include <stdio.h>
1783 #include <string.h>
1784 #include <openssl/opensslv.h>
1785 #define DATA "conftest.sslincver"
1786 int main(void) {
1787         FILE *fd;
1788         int rc;
1789
1790         fd = fopen(DATA,"w");
1791         if(fd == NULL)
1792                 exit(1);
1793
1794         if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1795                 exit(1);
1796
1797         exit(0);
1798 }
1799         ]])],
1800         [
1801                 ssl_header_ver=`cat conftest.sslincver`
1802                 AC_MSG_RESULT($ssl_header_ver)
1803         ],
1804         [
1805                 AC_MSG_RESULT(not found)
1806                 AC_MSG_ERROR(OpenSSL version header not found.)
1807         ],
1808         [
1809                 AC_MSG_WARN([cross compiling: not checking])
1810         ]
1811 )
1812
1813 # Determine OpenSSL library version
1814 AC_MSG_CHECKING([OpenSSL library version])
1815 AC_RUN_IFELSE(
1816         [AC_LANG_SOURCE([[
1817 #include <stdio.h>
1818 #include <string.h>
1819 #include <openssl/opensslv.h>
1820 #include <openssl/crypto.h>
1821 #define DATA "conftest.ssllibver"
1822 int main(void) {
1823         FILE *fd;
1824         int rc;
1825
1826         fd = fopen(DATA,"w");
1827         if(fd == NULL)
1828                 exit(1);
1829
1830         if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1831                 exit(1);
1832
1833         exit(0);
1834 }
1835         ]])],
1836         [
1837                 ssl_library_ver=`cat conftest.ssllibver`
1838                 AC_MSG_RESULT($ssl_library_ver)
1839         ],
1840         [
1841                 AC_MSG_RESULT(not found)
1842                 AC_MSG_ERROR(OpenSSL library not found.)
1843         ],
1844         [
1845                 AC_MSG_WARN([cross compiling: not checking])
1846         ]
1847 )
1848
1849 # Sanity check OpenSSL headers
1850 AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1851 AC_RUN_IFELSE(
1852         [AC_LANG_SOURCE([[
1853 #include <string.h>
1854 #include <openssl/opensslv.h>
1855 int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
1856         ]])],
1857         [
1858                 AC_MSG_RESULT(yes)
1859         ],
1860         [
1861                 AC_MSG_RESULT(no)
1862                 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1863 Check config.log for details.
1864 Also see contrib/findssl.sh for help identifying header/library mismatches.])
1865         ],
1866         [
1867                 AC_MSG_WARN([cross compiling: not checking])
1868         ]
1869 )
1870
1871 AC_ARG_WITH(ssl-engine,
1872         [  --with-ssl-engine       Enable OpenSSL (hardware) ENGINE support ],
1873         [ if test "x$withval" != "xno" ; then
1874                 AC_MSG_CHECKING(for OpenSSL ENGINE support)
1875                 AC_TRY_COMPILE(
1876                         [ #include <openssl/engine.h>],
1877                         [
1878 int main(void){ENGINE_load_builtin_engines();ENGINE_register_all_complete();}
1879                         ],
1880                         [ AC_MSG_RESULT(yes)
1881                           AC_DEFINE(USE_OPENSSL_ENGINE, 1,
1882                              [Enable OpenSSL engine support])
1883                         ],
1884                         [ AC_MSG_ERROR(OpenSSL ENGINE support not found)]
1885                 )
1886           fi ]
1887 )
1888
1889 # Check for OpenSSL without EVP_aes_{192,256}_cbc
1890 AC_MSG_CHECKING([whether OpenSSL has crippled AES support])
1891 AC_COMPILE_IFELSE(
1892         [AC_LANG_SOURCE([[
1893 #include <string.h>
1894 #include <openssl/evp.h>
1895 int main(void) { exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);}
1896         ]])],
1897         [
1898                 AC_MSG_RESULT(no)
1899         ],
1900         [
1901                 AC_MSG_RESULT(yes)
1902                 AC_DEFINE(OPENSSL_LOBOTOMISED_AES, 1,
1903                     [libcrypto is missing AES 192 and 256 bit functions])
1904         ]
1905 )
1906
1907 # Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1908 # because the system crypt() is more featureful.
1909 if test "x$check_for_libcrypt_before" = "x1"; then
1910         AC_CHECK_LIB(crypt, crypt)
1911 fi
1912
1913 # Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
1914 # version in OpenSSL.
1915 if test "x$check_for_libcrypt_later" = "x1"; then
1916         AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
1917 fi
1918
1919 # Search for SHA256 support in libc and/or OpenSSL
1920 AC_CHECK_FUNCS(SHA256_Update EVP_sha256)
1921
1922 AC_CHECK_LIB(iaf, ia_openinfo)
1923
1924 ### Configure cryptographic random number support
1925
1926 # Check wheter OpenSSL seeds itself
1927 AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1928 AC_RUN_IFELSE(
1929         [AC_LANG_SOURCE([[
1930 #include <string.h>
1931 #include <openssl/rand.h>
1932 int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
1933         ]])],
1934         [
1935                 OPENSSL_SEEDS_ITSELF=yes
1936                 AC_MSG_RESULT(yes)
1937         ],
1938         [
1939                 AC_MSG_RESULT(no)
1940                 # Default to use of the rand helper if OpenSSL doesn't
1941                 # seed itself
1942                 USE_RAND_HELPER=yes
1943         ],
1944         [
1945                 AC_MSG_WARN([cross compiling: assuming yes])
1946                 # This is safe, since all recent OpenSSL versions will
1947                 # complain at runtime if not seeded correctly.
1948                 OPENSSL_SEEDS_ITSELF=yes
1949         ]
1950 )
1951
1952
1953 # Do we want to force the use of the rand helper?
1954 AC_ARG_WITH(rand-helper,
1955         [  --with-rand-helper      Use subprocess to gather strong randomness ],
1956         [
1957                 if test "x$withval" = "xno" ; then
1958                         # Force use of OpenSSL's internal RNG, even if
1959                         # the previous test showed it to be unseeded.
1960                         if test -z "$OPENSSL_SEEDS_ITSELF" ; then
1961                                 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
1962                                 OPENSSL_SEEDS_ITSELF=yes
1963                                 USE_RAND_HELPER=""
1964                         fi
1965                 else
1966                         USE_RAND_HELPER=yes
1967                 fi
1968         ],
1969 )
1970
1971 # Which randomness source do we use?
1972 if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
1973         # OpenSSL only
1974         AC_DEFINE(OPENSSL_PRNG_ONLY, 1,
1975                 [Define if you want OpenSSL's internally seeded PRNG only])
1976         RAND_MSG="OpenSSL internal ONLY"
1977         INSTALL_SSH_RAND_HELPER=""
1978 elif test ! -z "$USE_RAND_HELPER" ; then
1979         # install rand helper
1980         RAND_MSG="ssh-rand-helper"
1981         INSTALL_SSH_RAND_HELPER="yes"
1982 fi
1983 AC_SUBST(INSTALL_SSH_RAND_HELPER)
1984
1985 ### Configuration of ssh-rand-helper
1986
1987 # PRNGD TCP socket
1988 AC_ARG_WITH(prngd-port,
1989         [  --with-prngd-port=PORT  read entropy from PRNGD/EGD TCP localhost:PORT],
1990         [
1991                 case "$withval" in
1992                 no)
1993                         withval=""
1994                         ;;
1995                 [[0-9]]*)
1996                         ;;
1997                 *)
1998                         AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
1999                         ;;
2000                 esac
2001                 if test ! -z "$withval" ; then
2002                         PRNGD_PORT="$withval"
2003                         AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT,
2004                                 [Port number of PRNGD/EGD random number socket])
2005                 fi
2006         ]
2007 )
2008
2009 # PRNGD Unix domain socket
2010 AC_ARG_WITH(prngd-socket,
2011         [  --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
2012         [
2013                 case "$withval" in
2014                 yes)
2015                         withval="/var/run/egd-pool"
2016                         ;;
2017                 no)
2018                         withval=""
2019                         ;;
2020                 /*)
2021                         ;;
2022                 *)
2023                         AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
2024                         ;;
2025                 esac
2026
2027                 if test ! -z "$withval" ; then
2028                         if test ! -z "$PRNGD_PORT" ; then
2029                                 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
2030                         fi
2031                         if test ! -r "$withval" ; then
2032                                 AC_MSG_WARN(Entropy socket is not readable)
2033                         fi
2034                         PRNGD_SOCKET="$withval"
2035                         AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET",
2036                                 [Location of PRNGD/EGD random number socket])
2037                 fi
2038         ],
2039         [
2040                 # Check for existing socket only if we don't have a random device already
2041                 if test "$USE_RAND_HELPER" = yes ; then
2042                         AC_MSG_CHECKING(for PRNGD/EGD socket)
2043                         # Insert other locations here
2044                         for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
2045                                 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
2046                                         PRNGD_SOCKET="$sock"
2047                                         AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
2048                                         break;
2049                                 fi
2050                         done
2051                         if test ! -z "$PRNGD_SOCKET" ; then
2052                                 AC_MSG_RESULT($PRNGD_SOCKET)
2053                         else
2054                                 AC_MSG_RESULT(not found)
2055                         fi
2056                 fi
2057         ]
2058 )
2059
2060 # Change default command timeout for hashing entropy source
2061 entropy_timeout=200
2062 AC_ARG_WITH(entropy-timeout,
2063         [  --with-entropy-timeout  Specify entropy gathering command timeout (msec)],
2064         [
2065                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
2066                     test "x${withval}" != "xyes"; then
2067                         entropy_timeout=$withval
2068                 fi
2069         ]
2070 )
2071 AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout,
2072         [Builtin PRNG command timeout])
2073
2074 SSH_PRIVSEP_USER=sshd
2075 AC_ARG_WITH(privsep-user,
2076         [  --with-privsep-user=user Specify non-privileged user for privilege separation],
2077         [
2078                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
2079                     test "x${withval}" != "xyes"; then
2080                         SSH_PRIVSEP_USER=$withval
2081                 fi
2082         ]
2083 )
2084 AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER",
2085         [non-privileged user for privilege separation])
2086 AC_SUBST(SSH_PRIVSEP_USER)
2087
2088 # We do this little dance with the search path to insure
2089 # that programs that we select for use by installed programs
2090 # (which may be run by the super-user) come from trusted
2091 # locations before they come from the user's private area.
2092 # This should help avoid accidentally configuring some
2093 # random version of a program in someone's personal bin.
2094
2095 OPATH=$PATH
2096 PATH=/bin:/usr/bin
2097 test -h /bin 2> /dev/null && PATH=/usr/bin
2098 test -d /sbin && PATH=$PATH:/sbin
2099 test -d /usr/sbin && PATH=$PATH:/usr/sbin
2100 PATH=$PATH:/etc:$OPATH
2101
2102 # These programs are used by the command hashing source to gather entropy
2103 OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
2104 OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
2105 OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
2106 OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
2107 OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
2108 OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
2109 OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
2110 OSSH_PATH_ENTROPY_PROG(PROG_W, w)
2111 OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
2112 OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
2113 OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
2114 OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
2115 OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
2116 OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
2117 OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
2118 OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
2119 # restore PATH
2120 PATH=$OPATH
2121
2122 # Where does ssh-rand-helper get its randomness from?
2123 INSTALL_SSH_PRNG_CMDS=""
2124 if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
2125         if test ! -z "$PRNGD_PORT" ; then
2126                 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
2127         elif test ! -z "$PRNGD_SOCKET" ; then
2128                 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
2129         else
2130                 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
2131                 RAND_HELPER_CMDHASH=yes
2132                 INSTALL_SSH_PRNG_CMDS="yes"
2133         fi
2134 fi
2135 AC_SUBST(INSTALL_SSH_PRNG_CMDS)
2136
2137
2138 # Cheap hack to ensure NEWS-OS libraries are arranged right.
2139 if test ! -z "$SONY" ; then
2140   LIBS="$LIBS -liberty";
2141 fi
2142
2143 # Check for  long long datatypes
2144 AC_CHECK_TYPES([long long, unsigned long long, long double])
2145
2146 # Check datatype sizes
2147 AC_CHECK_SIZEOF(char, 1)
2148 AC_CHECK_SIZEOF(short int, 2)
2149 AC_CHECK_SIZEOF(int, 4)
2150 AC_CHECK_SIZEOF(long int, 4)
2151 AC_CHECK_SIZEOF(long long int, 8)
2152
2153 # Sanity check long long for some platforms (AIX)
2154 if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
2155         ac_cv_sizeof_long_long_int=0
2156 fi
2157
2158 # compute LLONG_MIN and LLONG_MAX if we don't know them.
2159 if test -z "$have_llong_max"; then
2160         AC_MSG_CHECKING([for max value of long long])
2161         AC_RUN_IFELSE(
2162                 [AC_LANG_SOURCE([[
2163 #include <stdio.h>
2164 /* Why is this so damn hard? */
2165 #ifdef __GNUC__
2166 # undef __GNUC__
2167 #endif
2168 #define __USE_ISOC99
2169 #include <limits.h>
2170 #define DATA "conftest.llminmax"
2171 #define my_abs(a) ((a) < 0 ? ((a) * -1) : (a))
2172
2173 /*
2174  * printf in libc on some platforms (eg old Tru64) does not understand %lld so
2175  * we do this the hard way.
2176  */
2177 static int
2178 fprint_ll(FILE *f, long long n)
2179 {
2180         unsigned int i;
2181         int l[sizeof(long long) * 8];
2182
2183         if (n < 0)
2184                 if (fprintf(f, "-") < 0)
2185                         return -1;
2186         for (i = 0; n != 0; i++) {
2187                 l[i] = my_abs(n % 10);
2188                 n /= 10;
2189         }
2190         do {
2191                 if (fprintf(f, "%d", l[--i]) < 0)
2192                         return -1;
2193         } while (i != 0);
2194         if (fprintf(f, " ") < 0)
2195                 return -1;
2196         return 0;
2197 }
2198
2199 int main(void) {
2200         FILE *f;
2201         long long i, llmin, llmax = 0;
2202
2203         if((f = fopen(DATA,"w")) == NULL)
2204                 exit(1);
2205
2206 #if defined(LLONG_MIN) && defined(LLONG_MAX)
2207         fprintf(stderr, "Using system header for LLONG_MIN and LLONG_MAX\n");
2208         llmin = LLONG_MIN;
2209         llmax = LLONG_MAX;
2210 #else
2211         fprintf(stderr, "Calculating  LLONG_MIN and LLONG_MAX\n");
2212         /* This will work on one's complement and two's complement */
2213         for (i = 1; i > llmax; i <<= 1, i++)
2214                 llmax = i;
2215         llmin = llmax + 1LL;    /* wrap */
2216 #endif
2217
2218         /* Sanity check */
2219         if (llmin + 1 < llmin || llmin - 1 < llmin || llmax + 1 > llmax
2220             || llmax - 1 > llmax || llmin == llmax || llmin == 0
2221             || llmax == 0 || llmax < LONG_MAX || llmin > LONG_MIN) {
2222                 fprintf(f, "unknown unknown\n");
2223                 exit(2);
2224         }
2225
2226         if (fprint_ll(f, llmin) < 0)
2227                 exit(3);
2228         if (fprint_ll(f, llmax) < 0)
2229                 exit(4);
2230         if (fclose(f) < 0)
2231                 exit(5);
2232         exit(0);
2233 }
2234                 ]])],
2235                 [
2236                         llong_min=`$AWK '{print $1}' conftest.llminmax`
2237                         llong_max=`$AWK '{print $2}' conftest.llminmax`
2238
2239                         AC_MSG_RESULT($llong_max)
2240                         AC_DEFINE_UNQUOTED(LLONG_MAX, [${llong_max}LL],
2241                             [max value of long long calculated by configure])
2242                         AC_MSG_CHECKING([for min value of long long])
2243                         AC_MSG_RESULT($llong_min)
2244                         AC_DEFINE_UNQUOTED(LLONG_MIN, [${llong_min}LL],
2245                             [min value of long long calculated by configure])
2246                 ],
2247                 [
2248                         AC_MSG_RESULT(not found)
2249                 ],
2250                 [
2251                         AC_MSG_WARN([cross compiling: not checking])
2252                 ]
2253         )
2254 fi
2255
2256
2257 # More checks for data types
2258 AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
2259         AC_TRY_COMPILE(
2260                 [ #include <sys/types.h> ],
2261                 [ u_int a; a = 1;],
2262                 [ ac_cv_have_u_int="yes" ],
2263                 [ ac_cv_have_u_int="no" ]
2264         )
2265 ])
2266 if test "x$ac_cv_have_u_int" = "xyes" ; then
2267         AC_DEFINE(HAVE_U_INT, 1, [define if you have u_int data type])
2268         have_u_int=1
2269 fi
2270
2271 AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
2272         AC_TRY_COMPILE(
2273                 [ #include <sys/types.h> ],
2274                 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
2275                 [ ac_cv_have_intxx_t="yes" ],
2276                 [ ac_cv_have_intxx_t="no" ]
2277         )
2278 ])
2279 if test "x$ac_cv_have_intxx_t" = "xyes" ; then
2280         AC_DEFINE(HAVE_INTXX_T, 1, [define if you have intxx_t data type])
2281         have_intxx_t=1
2282 fi
2283
2284 if (test -z "$have_intxx_t" && \
2285            test "x$ac_cv_header_stdint_h" = "xyes")
2286 then
2287     AC_MSG_CHECKING([for intXX_t types in stdint.h])
2288         AC_TRY_COMPILE(
2289                 [ #include <stdint.h> ],
2290                 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
2291                 [
2292                         AC_DEFINE(HAVE_INTXX_T)
2293                         AC_MSG_RESULT(yes)
2294                 ],
2295                 [ AC_MSG_RESULT(no) ]
2296         )
2297 fi
2298
2299 AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
2300         AC_TRY_COMPILE(
2301                 [
2302 #include <sys/types.h>
2303 #ifdef HAVE_STDINT_H
2304 # include <stdint.h>
2305 #endif
2306 #include <sys/socket.h>
2307 #ifdef HAVE_SYS_BITYPES_H
2308 # include <sys/bitypes.h>
2309 #endif
2310                 ],
2311                 [ int64_t a; a = 1;],
2312                 [ ac_cv_have_int64_t="yes" ],
2313                 [ ac_cv_have_int64_t="no" ]
2314         )
2315 ])
2316 if test "x$ac_cv_have_int64_t" = "xyes" ; then
2317         AC_DEFINE(HAVE_INT64_T, 1, [define if you have int64_t data type])
2318 fi
2319
2320 AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
2321         AC_TRY_COMPILE(
2322                 [ #include <sys/types.h> ],
2323                 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
2324                 [ ac_cv_have_u_intxx_t="yes" ],
2325                 [ ac_cv_have_u_intxx_t="no" ]
2326         )
2327 ])
2328 if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
2329         AC_DEFINE(HAVE_U_INTXX_T, 1, [define if you have u_intxx_t data type])
2330         have_u_intxx_t=1
2331 fi
2332
2333 if test -z "$have_u_intxx_t" ; then
2334     AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
2335         AC_TRY_COMPILE(
2336                 [ #include <sys/socket.h> ],
2337                 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
2338                 [
2339                         AC_DEFINE(HAVE_U_INTXX_T)
2340                         AC_MSG_RESULT(yes)
2341                 ],
2342                 [ AC_MSG_RESULT(no) ]
2343         )
2344 fi
2345
2346 AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
2347         AC_TRY_COMPILE(
2348                 [ #include <sys/types.h> ],
2349                 [ u_int64_t a; a = 1;],
2350                 [ ac_cv_have_u_int64_t="yes" ],
2351                 [ ac_cv_have_u_int64_t="no" ]
2352         )
2353 ])
2354 if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
2355         AC_DEFINE(HAVE_U_INT64_T, 1, [define if you have u_int64_t data type])
2356         have_u_int64_t=1
2357 fi
2358
2359 if test -z "$have_u_int64_t" ; then
2360     AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
2361         AC_TRY_COMPILE(
2362                 [ #include <sys/bitypes.h> ],
2363                 [ u_int64_t a; a = 1],
2364                 [
2365                         AC_DEFINE(HAVE_U_INT64_T)
2366                         AC_MSG_RESULT(yes)
2367                 ],
2368                 [ AC_MSG_RESULT(no) ]
2369         )
2370 fi
2371
2372 if test -z "$have_u_intxx_t" ; then
2373         AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
2374                 AC_TRY_COMPILE(
2375                         [
2376 #include <sys/types.h>
2377                         ],
2378                         [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
2379                         [ ac_cv_have_uintxx_t="yes" ],
2380                         [ ac_cv_have_uintxx_t="no" ]
2381                 )
2382         ])
2383         if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
2384                 AC_DEFINE(HAVE_UINTXX_T, 1,
2385                         [define if you have uintxx_t data type])
2386         fi
2387 fi
2388
2389 if test -z "$have_uintxx_t" ; then
2390     AC_MSG_CHECKING([for uintXX_t types in stdint.h])
2391         AC_TRY_COMPILE(
2392                 [ #include <stdint.h> ],
2393                 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
2394                 [
2395                         AC_DEFINE(HAVE_UINTXX_T)
2396                         AC_MSG_RESULT(yes)
2397                 ],
2398                 [ AC_MSG_RESULT(no) ]
2399         )
2400 fi
2401
2402 if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
2403            test "x$ac_cv_header_sys_bitypes_h" = "xyes")
2404 then
2405         AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
2406         AC_TRY_COMPILE(
2407                 [
2408 #include <sys/bitypes.h>
2409                 ],
2410                 [
2411                         int8_t a; int16_t b; int32_t c;
2412                         u_int8_t e; u_int16_t f; u_int32_t g;
2413                         a = b = c = e = f = g = 1;
2414                 ],
2415                 [
2416                         AC_DEFINE(HAVE_U_INTXX_T)
2417                         AC_DEFINE(HAVE_INTXX_T)
2418                         AC_MSG_RESULT(yes)
2419                 ],
2420                 [AC_MSG_RESULT(no)]
2421         )
2422 fi
2423
2424
2425 AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
2426         AC_TRY_COMPILE(
2427                 [
2428 #include <sys/types.h>
2429                 ],
2430                 [ u_char foo; foo = 125; ],
2431                 [ ac_cv_have_u_char="yes" ],
2432                 [ ac_cv_have_u_char="no" ]
2433         )
2434 ])
2435 if test "x$ac_cv_have_u_char" = "xyes" ; then
2436         AC_DEFINE(HAVE_U_CHAR, 1, [define if you have u_char data type])
2437 fi
2438
2439 TYPE_SOCKLEN_T
2440
2441 AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
2442
2443 AC_CHECK_TYPES(in_addr_t,,,
2444 [#include <sys/types.h>
2445 #include <netinet/in.h>])
2446
2447 AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
2448         AC_TRY_COMPILE(
2449                 [
2450 #include <sys/types.h>
2451                 ],
2452                 [ size_t foo; foo = 1235; ],
2453                 [ ac_cv_have_size_t="yes" ],
2454                 [ ac_cv_have_size_t="no" ]
2455         )
2456 ])
2457 if test "x$ac_cv_have_size_t" = "xyes" ; then
2458         AC_DEFINE(HAVE_SIZE_T, 1, [define if you have size_t data type])
2459 fi
2460
2461 AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
2462         AC_TRY_COMPILE(
2463                 [
2464 #include <sys/types.h>
2465                 ],
2466                 [ ssize_t foo; foo = 1235; ],
2467                 [ ac_cv_have_ssize_t="yes" ],
2468                 [ ac_cv_have_ssize_t="no" ]
2469         )
2470 ])
2471 if test "x$ac_cv_have_ssize_t" = "xyes" ; then
2472         AC_DEFINE(HAVE_SSIZE_T, 1, [define if you have ssize_t data type])
2473 fi
2474
2475 AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
2476         AC_TRY_COMPILE(
2477                 [
2478 #include <time.h>
2479                 ],
2480                 [ clock_t foo; foo = 1235; ],
2481                 [ ac_cv_have_clock_t="yes" ],
2482                 [ ac_cv_have_clock_t="no" ]
2483         )
2484 ])
2485 if test "x$ac_cv_have_clock_t" = "xyes" ; then
2486         AC_DEFINE(HAVE_CLOCK_T, 1, [define if you have clock_t data type])
2487 fi
2488
2489 AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
2490         AC_TRY_COMPILE(
2491                 [
2492 #include <sys/types.h>
2493 #include <sys/socket.h>
2494                 ],
2495                 [ sa_family_t foo; foo = 1235; ],
2496                 [ ac_cv_have_sa_family_t="yes" ],
2497                 [ AC_TRY_COMPILE(
2498                   [
2499 #include <sys/types.h>
2500 #include <sys/socket.h>
2501 #include <netinet/in.h>
2502                 ],
2503                 [ sa_family_t foo; foo = 1235; ],
2504                 [ ac_cv_have_sa_family_t="yes" ],
2505
2506                 [ ac_cv_have_sa_family_t="no" ]
2507         )]
2508         )
2509 ])
2510 if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
2511         AC_DEFINE(HAVE_SA_FAMILY_T, 1,
2512                 [define if you have sa_family_t data type])
2513 fi
2514
2515 AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
2516         AC_TRY_COMPILE(
2517                 [
2518 #include <sys/types.h>
2519                 ],
2520                 [ pid_t foo; foo = 1235; ],
2521                 [ ac_cv_have_pid_t="yes" ],
2522                 [ ac_cv_have_pid_t="no" ]
2523         )
2524 ])
2525 if test "x$ac_cv_have_pid_t" = "xyes" ; then
2526         AC_DEFINE(HAVE_PID_T, 1, [define if you have pid_t data type])
2527 fi
2528
2529 AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
2530         AC_TRY_COMPILE(
2531                 [
2532 #include <sys/types.h>
2533                 ],
2534                 [ mode_t foo; foo = 1235; ],
2535                 [ ac_cv_have_mode_t="yes" ],
2536                 [ ac_cv_have_mode_t="no" ]
2537         )
2538 ])
2539 if test "x$ac_cv_have_mode_t" = "xyes" ; then
2540         AC_DEFINE(HAVE_MODE_T, 1, [define if you have mode_t data type])
2541 fi
2542
2543
2544 AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
2545         AC_TRY_COMPILE(
2546                 [
2547 #include <sys/types.h>
2548 #include <sys/socket.h>
2549                 ],
2550                 [ struct sockaddr_storage s; ],
2551                 [ ac_cv_have_struct_sockaddr_storage="yes" ],
2552                 [ ac_cv_have_struct_sockaddr_storage="no" ]
2553         )
2554 ])
2555 if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
2556         AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE, 1,
2557                 [define if you have struct sockaddr_storage data type])
2558 fi
2559
2560 AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2561         AC_TRY_COMPILE(
2562                 [
2563 #include <sys/types.h>
2564 #include <netinet/in.h>
2565                 ],
2566                 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2567                 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2568                 [ ac_cv_have_struct_sockaddr_in6="no" ]
2569         )
2570 ])
2571 if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
2572         AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6, 1,
2573                 [define if you have struct sockaddr_in6 data type])
2574 fi
2575
2576 AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2577         AC_TRY_COMPILE(
2578                 [
2579 #include <sys/types.h>
2580 #include <netinet/in.h>
2581                 ],
2582                 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2583                 [ ac_cv_have_struct_in6_addr="yes" ],
2584                 [ ac_cv_have_struct_in6_addr="no" ]
2585         )
2586 ])
2587 if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
2588         AC_DEFINE(HAVE_STRUCT_IN6_ADDR, 1,
2589                 [define if you have struct in6_addr data type])
2590 fi
2591
2592 AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2593         AC_TRY_COMPILE(
2594                 [
2595 #include <sys/types.h>
2596 #include <sys/socket.h>
2597 #include <netdb.h>
2598                 ],
2599                 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2600                 [ ac_cv_have_struct_addrinfo="yes" ],
2601                 [ ac_cv_have_struct_addrinfo="no" ]
2602         )
2603 ])
2604 if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2605         AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1,
2606                 [define if you have struct addrinfo data type])
2607 fi
2608
2609 AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2610         AC_TRY_COMPILE(
2611                 [ #include <sys/time.h> ],
2612                 [ struct timeval tv; tv.tv_sec = 1;],
2613                 [ ac_cv_have_struct_timeval="yes" ],
2614                 [ ac_cv_have_struct_timeval="no" ]
2615         )
2616 ])
2617 if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2618         AC_DEFINE(HAVE_STRUCT_TIMEVAL, 1, [define if you have struct timeval])
2619         have_struct_timeval=1
2620 fi
2621
2622 AC_CHECK_TYPES(struct timespec)
2623
2624 # We need int64_t or else certian parts of the compile will fail.
2625 if test "x$ac_cv_have_int64_t" = "xno" && \
2626         test "x$ac_cv_sizeof_long_int" != "x8" && \
2627         test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
2628         echo "OpenSSH requires int64_t support.  Contact your vendor or install"
2629         echo "an alternative compiler (I.E., GCC) before continuing."
2630         echo ""
2631         exit 1;
2632 else
2633 dnl test snprintf (broken on SCO w/gcc)
2634         AC_RUN_IFELSE(
2635                 [AC_LANG_SOURCE([[
2636 #include <stdio.h>
2637 #include <string.h>
2638 #ifdef HAVE_SNPRINTF
2639 main()
2640 {
2641         char buf[50];
2642         char expected_out[50];
2643         int mazsize = 50 ;
2644 #if (SIZEOF_LONG_INT == 8)
2645         long int num = 0x7fffffffffffffff;
2646 #else
2647         long long num = 0x7fffffffffffffffll;
2648 #endif
2649         strcpy(expected_out, "9223372036854775807");
2650         snprintf(buf, mazsize, "%lld", num);
2651         if(strcmp(buf, expected_out) != 0)
2652                 exit(1);
2653         exit(0);
2654 }
2655 #else
2656 main() { exit(0); }
2657 #endif
2658                 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
2659                 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
2660         )
2661 fi
2662
2663 dnl Checks for structure members
2664 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2665 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2666 OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2667 OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2668 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
2669 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
2670 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2671 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
2672 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
2673 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2674 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2675 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2676 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
2677 OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2678 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2679 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2680 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
2681
2682 AC_CHECK_MEMBERS([struct stat.st_blksize])
2683 AC_CHECK_MEMBER([struct __res_state.retrans], [], [AC_DEFINE(__res_state, state,
2684         [Define if we don't have struct __res_state in resolv.h])],
2685 [
2686 #include <stdio.h>
2687 #if HAVE_SYS_TYPES_H
2688 # include <sys/types.h>
2689 #endif
2690 #include <netinet/in.h>
2691 #include <arpa/nameser.h>
2692 #include <resolv.h>
2693 ])
2694
2695 AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2696                 ac_cv_have_ss_family_in_struct_ss, [
2697         AC_TRY_COMPILE(
2698                 [
2699 #include <sys/types.h>
2700 #include <sys/socket.h>
2701                 ],
2702                 [ struct sockaddr_storage s; s.ss_family = 1; ],
2703                 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2704                 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2705         )
2706 ])
2707 if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2708         AC_DEFINE(HAVE_SS_FAMILY_IN_SS, 1, [Fields in struct sockaddr_storage])
2709 fi
2710
2711 AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2712                 ac_cv_have___ss_family_in_struct_ss, [
2713         AC_TRY_COMPILE(
2714                 [
2715 #include <sys/types.h>
2716 #include <sys/socket.h>
2717                 ],
2718                 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2719                 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2720                 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2721         )
2722 ])
2723 if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2724         AC_DEFINE(HAVE___SS_FAMILY_IN_SS, 1,
2725                 [Fields in struct sockaddr_storage])
2726 fi
2727
2728 AC_CACHE_CHECK([for pw_class field in struct passwd],
2729                 ac_cv_have_pw_class_in_struct_passwd, [
2730         AC_TRY_COMPILE(
2731                 [
2732 #include <pwd.h>
2733                 ],
2734                 [ struct passwd p; p.pw_class = 0; ],
2735                 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2736                 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2737         )
2738 ])
2739 if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2740         AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD, 1,
2741                 [Define if your password has a pw_class field])
2742 fi
2743
2744 AC_CACHE_CHECK([for pw_expire field in struct passwd],
2745                 ac_cv_have_pw_expire_in_struct_passwd, [
2746         AC_TRY_COMPILE(
2747                 [
2748 #include <pwd.h>
2749                 ],
2750                 [ struct passwd p; p.pw_expire = 0; ],
2751                 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2752                 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2753         )
2754 ])
2755 if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2756         AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD, 1,
2757                 [Define if your password has a pw_expire field])
2758 fi
2759
2760 AC_CACHE_CHECK([for pw_change field in struct passwd],
2761                 ac_cv_have_pw_change_in_struct_passwd, [
2762         AC_TRY_COMPILE(
2763                 [
2764 #include <pwd.h>
2765                 ],
2766                 [ struct passwd p; p.pw_change = 0; ],
2767                 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2768                 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2769         )
2770 ])
2771 if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2772         AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD, 1,
2773                 [Define if your password has a pw_change field])
2774 fi
2775
2776 dnl make sure we're using the real structure members and not defines
2777 AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2778                 ac_cv_have_accrights_in_msghdr, [
2779         AC_COMPILE_IFELSE(
2780                 [
2781 #include <sys/types.h>
2782 #include <sys/socket.h>
2783 #include <sys/uio.h>
2784 int main() {
2785 #ifdef msg_accrights
2786 #error "msg_accrights is a macro"
2787 exit(1);
2788 #endif
2789 struct msghdr m;
2790 m.msg_accrights = 0;
2791 exit(0);
2792 }
2793                 ],
2794                 [ ac_cv_have_accrights_in_msghdr="yes" ],
2795                 [ ac_cv_have_accrights_in_msghdr="no" ]
2796         )
2797 ])
2798 if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2799         AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR, 1,
2800                 [Define if your system uses access rights style
2801                 file descriptor passing])
2802 fi
2803
2804 AC_CACHE_CHECK([for msg_control field in struct msghdr],
2805                 ac_cv_have_control_in_msghdr, [
2806         AC_COMPILE_IFELSE(
2807                 [
2808 #include <sys/types.h>
2809 #include <sys/socket.h>
2810 #include <sys/uio.h>
2811 int main() {
2812 #ifdef msg_control
2813 #error "msg_control is a macro"
2814 exit(1);
2815 #endif
2816 struct msghdr m;
2817 m.msg_control = 0;
2818 exit(0);
2819 }
2820                 ],
2821                 [ ac_cv_have_control_in_msghdr="yes" ],
2822                 [ ac_cv_have_control_in_msghdr="no" ]
2823         )
2824 ])
2825 if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2826         AC_DEFINE(HAVE_CONTROL_IN_MSGHDR, 1,
2827                 [Define if your system uses ancillary data style
2828                 file descriptor passing])
2829 fi
2830
2831 AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
2832         AC_TRY_LINK([],
2833                 [ extern char *__progname; printf("%s", __progname); ],
2834                 [ ac_cv_libc_defines___progname="yes" ],
2835                 [ ac_cv_libc_defines___progname="no" ]
2836         )
2837 ])
2838 if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2839         AC_DEFINE(HAVE___PROGNAME, 1, [Define if libc defines __progname])
2840 fi
2841
2842 AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2843         AC_TRY_LINK([
2844 #include <stdio.h>
2845 ],
2846                 [ printf("%s", __FUNCTION__); ],
2847                 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2848                 [ ac_cv_cc_implements___FUNCTION__="no" ]
2849         )
2850 ])
2851 if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2852         AC_DEFINE(HAVE___FUNCTION__, 1,
2853                 [Define if compiler implements __FUNCTION__])
2854 fi
2855
2856 AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2857         AC_TRY_LINK([
2858 #include <stdio.h>
2859 ],
2860                 [ printf("%s", __func__); ],
2861                 [ ac_cv_cc_implements___func__="yes" ],
2862                 [ ac_cv_cc_implements___func__="no" ]
2863         )
2864 ])
2865 if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
2866         AC_DEFINE(HAVE___func__, 1, [Define if compiler implements __func__])
2867 fi
2868
2869 AC_CACHE_CHECK([whether va_copy exists], ac_cv_have_va_copy, [
2870         AC_TRY_LINK(
2871                 [#include <stdarg.h>
2872                  va_list x,y;],
2873                 [va_copy(x,y);],
2874                 [ ac_cv_have_va_copy="yes" ],
2875                 [ ac_cv_have_va_copy="no" ]
2876         )
2877 ])
2878 if test "x$ac_cv_have_va_copy" = "xyes" ; then
2879         AC_DEFINE(HAVE_VA_COPY, 1, [Define if va_copy exists])
2880 fi
2881
2882 AC_CACHE_CHECK([whether __va_copy exists], ac_cv_have___va_copy, [
2883         AC_TRY_LINK(
2884                 [#include <stdarg.h>
2885                  va_list x,y;],
2886                 [__va_copy(x,y);],
2887                 [ ac_cv_have___va_copy="yes" ],
2888                 [ ac_cv_have___va_copy="no" ]
2889         )
2890 ])
2891 if test "x$ac_cv_have___va_copy" = "xyes" ; then
2892         AC_DEFINE(HAVE___VA_COPY, 1, [Define if __va_copy exists])
2893 fi
2894
2895 AC_CACHE_CHECK([whether getopt has optreset support],
2896                 ac_cv_have_getopt_optreset, [
2897         AC_TRY_LINK(
2898                 [
2899 #include <getopt.h>
2900                 ],
2901                 [ extern int optreset; optreset = 0; ],
2902                 [ ac_cv_have_getopt_optreset="yes" ],
2903                 [ ac_cv_have_getopt_optreset="no" ]
2904         )
2905 ])
2906 if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
2907         AC_DEFINE(HAVE_GETOPT_OPTRESET, 1,
2908                 [Define if your getopt(3) defines and uses optreset])
2909 fi
2910
2911 AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
2912         AC_TRY_LINK([],
2913                 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
2914                 [ ac_cv_libc_defines_sys_errlist="yes" ],
2915                 [ ac_cv_libc_defines_sys_errlist="no" ]
2916         )
2917 ])
2918 if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
2919         AC_DEFINE(HAVE_SYS_ERRLIST, 1,
2920                 [Define if your system defines sys_errlist[]])
2921 fi
2922
2923
2924 AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
2925         AC_TRY_LINK([],
2926                 [ extern int sys_nerr; printf("%i", sys_nerr);],
2927                 [ ac_cv_libc_defines_sys_nerr="yes" ],
2928                 [ ac_cv_libc_defines_sys_nerr="no" ]
2929         )
2930 ])
2931 if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
2932         AC_DEFINE(HAVE_SYS_NERR, 1, [Define if your system defines sys_nerr])
2933 fi
2934
2935 SCARD_MSG="no"
2936 # Check whether user wants sectok support
2937 AC_ARG_WITH(sectok,
2938         [  --with-sectok           Enable smartcard support using libsectok],
2939         [
2940                 if test "x$withval" != "xno" ; then
2941                         if test "x$withval" != "xyes" ; then
2942                                 CPPFLAGS="$CPPFLAGS -I${withval}"
2943                                 LDFLAGS="$LDFLAGS -L${withval}"
2944                                 if test ! -z "$need_dash_r" ; then
2945                                         LDFLAGS="$LDFLAGS -R${withval}"
2946                                 fi
2947                                 if test ! -z "$blibpath" ; then
2948                                         blibpath="$blibpath:${withval}"
2949                                 fi
2950                         fi
2951                         AC_CHECK_HEADERS(sectok.h)
2952                         if test "$ac_cv_header_sectok_h" != yes; then
2953                                 AC_MSG_ERROR(Can't find sectok.h)
2954                         fi
2955                         AC_CHECK_LIB(sectok, sectok_open)
2956                         if test "$ac_cv_lib_sectok_sectok_open" != yes; then
2957                                 AC_MSG_ERROR(Can't find libsectok)
2958                         fi
2959                         AC_DEFINE(SMARTCARD, 1,
2960                                 [Define if you want smartcard support])
2961                         AC_DEFINE(USE_SECTOK, 1,
2962                                 [Define if you want smartcard support
2963                                 using sectok])
2964                         SCARD_MSG="yes, using sectok"
2965                 fi
2966         ]
2967 )
2968
2969 # Check whether user wants OpenSC support
2970 OPENSC_CONFIG="no"
2971 AC_ARG_WITH(opensc,
2972         [  --with-opensc[[=PFX]]     Enable smartcard support using OpenSC (optionally in PATH)],
2973         [
2974             if test "x$withval" != "xno" ; then
2975                 if test "x$withval" != "xyes" ; then
2976                         OPENSC_CONFIG=$withval/bin/opensc-config
2977                 else
2978                         AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
2979                 fi
2980                 if test "$OPENSC_CONFIG" != "no"; then
2981                         LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
2982                         LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
2983                         CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
2984                         LDFLAGS="$LDFLAGS $LIBOPENSC_LIBS"
2985                         AC_DEFINE(SMARTCARD)
2986                         AC_DEFINE(USE_OPENSC, 1,
2987                                 [Define if you want smartcard support
2988                                 using OpenSC])
2989                         SCARD_MSG="yes, using OpenSC"
2990                 fi
2991             fi
2992         ]
2993 )
2994
2995 # Check libraries needed by DNS fingerprint support
2996 AC_SEARCH_LIBS(getrrsetbyname, resolv,
2997         [AC_DEFINE(HAVE_GETRRSETBYNAME, 1,
2998                 [Define if getrrsetbyname() exists])],
2999         [
3000                 # Needed by our getrrsetbyname()
3001                 AC_SEARCH_LIBS(res_query, resolv)
3002                 AC_SEARCH_LIBS(dn_expand, resolv)
3003                 AC_MSG_CHECKING(if res_query will link)
3004                 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
3005                    [AC_MSG_RESULT(no)
3006                     saved_LIBS="$LIBS"
3007                     LIBS="$LIBS -lresolv"
3008                     AC_MSG_CHECKING(for res_query in -lresolv)
3009                     AC_LINK_IFELSE([
3010 #include <resolv.h>
3011 int main()
3012 {
3013         res_query (0, 0, 0, 0, 0);
3014         return 0;
3015 }
3016                         ],
3017                         [LIBS="$LIBS -lresolv"
3018                          AC_MSG_RESULT(yes)],
3019                         [LIBS="$saved_LIBS"
3020                          AC_MSG_RESULT(no)])
3021                     ])
3022                 AC_CHECK_FUNCS(_getshort _getlong)
3023                 AC_CHECK_DECLS([_getshort, _getlong], , ,
3024                     [#include <sys/types.h>
3025                     #include <arpa/nameser.h>])
3026                 AC_CHECK_MEMBER(HEADER.ad,
3027                         [AC_DEFINE(HAVE_HEADER_AD, 1,
3028                             [Define if HEADER.ad exists in arpa/nameser.h])],,
3029                         [#include <arpa/nameser.h>])
3030         ])
3031
3032 # Check whether user wants SELinux support
3033 SELINUX_MSG="no"
3034 LIBSELINUX=""
3035 AC_ARG_WITH(selinux,
3036         [  --with-selinux   Enable SELinux support],
3037         [ if test "x$withval" != "xno" ; then
3038                 AC_DEFINE(WITH_SELINUX,1,[Define if you want SELinux support.])
3039                 SELINUX_MSG="yes"
3040                 AC_CHECK_HEADER([selinux/selinux.h], ,
3041                     AC_MSG_ERROR(SELinux support requires selinux.h header))
3042                 AC_CHECK_LIB(selinux, setexeccon, [ LIBSELINUX="-lselinux" ],
3043                     AC_MSG_ERROR(SELinux support requires libselinux library))
3044                 AC_CHECK_FUNCS(getseuserbyname get_default_context_with_level)
3045         fi ]
3046 )
3047 AC_SUBST(LIBSELINUX)
3048
3049 # Check whether user wants Kerberos 5 support
3050 KRB5_MSG="no"
3051 AC_ARG_WITH(kerberos5,
3052         [  --with-kerberos5=PATH   Enable Kerberos 5 support],
3053         [ if test "x$withval" != "xno" ; then
3054                 if test "x$withval" = "xyes" ; then
3055                         KRB5ROOT="/usr/local"
3056                 else
3057                         KRB5ROOT=${withval}
3058                 fi
3059
3060                 AC_DEFINE(KRB5, 1, [Define if you want Kerberos 5 support])
3061                 KRB5_MSG="yes"
3062
3063                 AC_MSG_CHECKING(for krb5-config)
3064                 if test -x  $KRB5ROOT/bin/krb5-config ; then
3065                         KRB5CONF=$KRB5ROOT/bin/krb5-config
3066                         AC_MSG_RESULT($KRB5CONF)
3067
3068                         AC_MSG_CHECKING(for gssapi support)
3069                         if $KRB5CONF | grep gssapi >/dev/null ; then
3070                                 AC_MSG_RESULT(yes)
3071                                 AC_DEFINE(GSSAPI, 1,
3072                                         [Define this if you want GSSAPI
3073                                         support in the version 2 protocol])
3074                                 k5confopts=gssapi
3075                         else
3076                                 AC_MSG_RESULT(no)
3077                                 k5confopts=""
3078                         fi
3079                         K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
3080                         K5LIBS="`$KRB5CONF --libs $k5confopts`"
3081                         CPPFLAGS="$CPPFLAGS $K5CFLAGS"
3082                         AC_MSG_CHECKING(whether we are using Heimdal)
3083                         AC_TRY_COMPILE([ #include <krb5.h> ],
3084                                        [ char *tmp = heimdal_version; ],
3085                                        [ AC_MSG_RESULT(yes)
3086                                          AC_DEFINE(HEIMDAL, 1,
3087                                         [Define this if you are using the
3088                                         Heimdal version of Kerberos V5]) ],
3089                                          AC_MSG_RESULT(no)
3090                         )
3091                 else
3092                         AC_MSG_RESULT(no)
3093                         CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
3094                         LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
3095                         AC_MSG_CHECKING(whether we are using Heimdal)
3096                         AC_TRY_COMPILE([ #include <krb5.h> ],
3097                                        [ char *tmp = heimdal_version; ],
3098                                        [ AC_MSG_RESULT(yes)
3099                                          AC_DEFINE(HEIMDAL)
3100                                          K5LIBS="-lkrb5 -ldes"
3101                                          K5LIBS="$K5LIBS -lcom_err -lasn1"
3102                                          AC_CHECK_LIB(roken, net_write,
3103                                            [K5LIBS="$K5LIBS -lroken"])
3104                                        ],
3105                                        [ AC_MSG_RESULT(no)
3106                                          K5LIBS="-lkrb5 -lk5crypto -lcom_err"
3107                                        ]
3108                         )
3109                         AC_SEARCH_LIBS(dn_expand, resolv)
3110
3111                         AC_CHECK_LIB(gssapi,gss_init_sec_context,
3112                                 [ AC_DEFINE(GSSAPI)
3113                                   K5LIBS="-lgssapi $K5LIBS" ],
3114                                 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
3115                                         [ AC_DEFINE(GSSAPI)
3116                                           K5LIBS="-lgssapi_krb5 $K5LIBS" ],
3117                                         AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
3118                                         $K5LIBS)
3119                                 ],
3120                                 $K5LIBS)
3121
3122                         AC_CHECK_HEADER(gssapi.h, ,
3123                                 [ unset ac_cv_header_gssapi_h
3124                                   CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
3125                                   AC_CHECK_HEADERS(gssapi.h, ,
3126                                         AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
3127                                   )
3128                                 ]
3129                         )
3130
3131                         oldCPP="$CPPFLAGS"
3132                         CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
3133                         AC_CHECK_HEADER(gssapi_krb5.h, ,
3134                                         [ CPPFLAGS="$oldCPP" ])
3135
3136                 fi
3137                 if test ! -z "$need_dash_r" ; then
3138                         LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
3139                 fi
3140                 if test ! -z "$blibpath" ; then
3141                         blibpath="$blibpath:${KRB5ROOT}/lib"
3142                 fi
3143
3144                 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
3145                 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
3146                 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
3147
3148                 LIBS="$LIBS $K5LIBS"
3149                 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS, 1,
3150                         [Define this if you want to use libkafs' AFS support]))
3151         fi
3152         ]
3153 )
3154
3155 # Looking for programs, paths and files
3156
3157 PRIVSEP_PATH=/var/empty
3158 AC_ARG_WITH(privsep-path,
3159         [  --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
3160         [
3161                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3162                     test "x${withval}" != "xyes"; then
3163                         PRIVSEP_PATH=$withval
3164                 fi
3165         ]
3166 )
3167 AC_SUBST(PRIVSEP_PATH)
3168
3169 AC_ARG_WITH(xauth,
3170         [  --with-xauth=PATH       Specify path to xauth program ],
3171         [
3172                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3173                     test "x${withval}" != "xyes"; then
3174                         xauth_path=$withval
3175                 fi
3176         ],
3177         [
3178                 TestPath="$PATH"
3179                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
3180                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
3181                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
3182                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
3183                 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
3184                 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
3185                         xauth_path="/usr/openwin/bin/xauth"
3186                 fi
3187         ]
3188 )
3189
3190 STRIP_OPT=-s
3191 AC_ARG_ENABLE(strip,
3192         [  --disable-strip         Disable calling strip(1) on install],
3193         [
3194                 if test "x$enableval" = "xno" ; then
3195                         STRIP_OPT=
3196                 fi
3197         ]
3198 )
3199 AC_SUBST(STRIP_OPT)
3200
3201 if test -z "$xauth_path" ; then
3202         XAUTH_PATH="undefined"
3203         AC_SUBST(XAUTH_PATH)
3204 else
3205         AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path",
3206                 [Define if xauth is found in your path])
3207         XAUTH_PATH=$xauth_path
3208         AC_SUBST(XAUTH_PATH)
3209 fi
3210
3211 # Check for mail directory (last resort if we cannot get it from headers)
3212 if test ! -z "$MAIL" ; then
3213         maildir=`dirname $MAIL`
3214         AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir",
3215                 [Set this to your mail directory if you don't have maillock.h])
3216 fi
3217
3218 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
3219         AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
3220         disable_ptmx_check=yes
3221 fi
3222 if test -z "$no_dev_ptmx" ; then
3223         if test "x$disable_ptmx_check" != "xyes" ; then
3224                 AC_CHECK_FILE("/dev/ptmx",
3225                         [
3226                                 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX, 1,
3227                                         [Define if you have /dev/ptmx])
3228                                 have_dev_ptmx=1
3229                         ]
3230                 )
3231         fi
3232 fi
3233
3234 if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
3235         AC_CHECK_FILE("/dev/ptc",
3236                 [
3237                         AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC, 1,
3238                                 [Define if you have /dev/ptc])
3239                         have_dev_ptc=1
3240                 ]
3241         )
3242 else
3243         AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
3244 fi
3245
3246 # Options from here on. Some of these are preset by platform above
3247 AC_ARG_WITH(mantype,
3248         [  --with-mantype=man|cat|doc  Set man page type],
3249         [
3250                 case "$withval" in
3251                 man|cat|doc)
3252                         MANTYPE=$withval
3253                         ;;
3254                 *)
3255                         AC_MSG_ERROR(invalid man type: $withval)
3256                         ;;
3257                 esac
3258         ]
3259 )
3260 if test -z "$MANTYPE"; then
3261         TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
3262         AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
3263         if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
3264                 MANTYPE=doc
3265         elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
3266                 MANTYPE=man
3267         else
3268                 MANTYPE=cat
3269         fi
3270 fi
3271 AC_SUBST(MANTYPE)
3272 if test "$MANTYPE" = "doc"; then
3273         mansubdir=man;
3274 else
3275         mansubdir=$MANTYPE;
3276 fi
3277 AC_SUBST(mansubdir)
3278
3279 # Check whether to enable MD5 passwords
3280 MD5_MSG="no"
3281 AC_ARG_WITH(md5-passwords,
3282         [  --with-md5-passwords    Enable use of MD5 passwords],
3283         [
3284                 if test "x$withval" != "xno" ; then
3285                         AC_DEFINE(HAVE_MD5_PASSWORDS, 1,
3286                                 [Define if you want to allow MD5 passwords])
3287                         MD5_MSG="yes"
3288                 fi
3289         ]
3290 )
3291
3292 # Whether to disable shadow password support
3293 AC_ARG_WITH(shadow,
3294         [  --without-shadow        Disable shadow password support],
3295         [
3296                 if test "x$withval" = "xno" ; then
3297                         AC_DEFINE(DISABLE_SHADOW)
3298                         disable_shadow=yes
3299                 fi
3300         ]
3301 )
3302
3303 if test -z "$disable_shadow" ; then
3304         AC_MSG_CHECKING([if the systems has expire shadow information])
3305         AC_TRY_COMPILE(
3306         [
3307 #include <sys/types.h>
3308 #include <shadow.h>
3309         struct spwd sp;
3310         ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
3311         [ sp_expire_available=yes ], []
3312         )
3313
3314         if test "x$sp_expire_available" = "xyes" ; then
3315                 AC_MSG_RESULT(yes)
3316                 AC_DEFINE(HAS_SHADOW_EXPIRE, 1,
3317                     [Define if you want to use shadow password expire field])
3318         else
3319                 AC_MSG_RESULT(no)
3320         fi
3321 fi
3322
3323 # Use ip address instead of hostname in $DISPLAY
3324 if test ! -z "$IPADDR_IN_DISPLAY" ; then
3325         DISPLAY_HACK_MSG="yes"
3326         AC_DEFINE(IPADDR_IN_DISPLAY, 1,
3327                 [Define if you need to use IP address
3328                 instead of hostname in $DISPLAY])
3329 else
3330         DISPLAY_HACK_MSG="no"
3331         AC_ARG_WITH(ipaddr-display,
3332                 [  --with-ipaddr-display   Use ip address instead of hostname in \$DISPLAY],
3333                 [
3334                         if test "x$withval" != "xno" ; then
3335                                 AC_DEFINE(IPADDR_IN_DISPLAY)
3336                                 DISPLAY_HACK_MSG="yes"
3337                         fi
3338                 ]
3339         )
3340 fi
3341
3342 # check for /etc/default/login and use it if present.
3343 AC_ARG_ENABLE(etc-default-login,
3344         [  --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
3345         [ if test "x$enableval" = "xno"; then
3346                 AC_MSG_NOTICE([/etc/default/login handling disabled])
3347                 etc_default_login=no
3348           else
3349                 etc_default_login=yes
3350           fi ],
3351         [ if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
3352           then
3353                 AC_MSG_WARN([cross compiling: not checking /etc/default/login])
3354                 etc_default_login=no
3355           else
3356                 etc_default_login=yes
3357           fi ]
3358 )
3359
3360 if test "x$etc_default_login" != "xno"; then
3361         AC_CHECK_FILE("/etc/default/login",
3362             [ external_path_file=/etc/default/login ])
3363         if test "x$external_path_file" = "x/etc/default/login"; then
3364                 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN, 1,
3365                         [Define if your system has /etc/default/login])
3366         fi
3367 fi
3368
3369 dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
3370 if test $ac_cv_func_login_getcapbool = "yes" && \
3371         test $ac_cv_header_login_cap_h = "yes" ; then
3372         external_path_file=/etc/login.conf
3373 fi
3374
3375 # Whether to mess with the default path
3376 SERVER_PATH_MSG="(default)"
3377 AC_ARG_WITH(default-path,
3378         [  --with-default-path=    Specify default \$PATH environment for server],
3379         [
3380                 if test "x$external_path_file" = "x/etc/login.conf" ; then
3381                         AC_MSG_WARN([
3382 --with-default-path=PATH has no effect on this system.
3383 Edit /etc/login.conf instead.])
3384                 elif test "x$withval" != "xno" ; then
3385                         if test ! -z "$external_path_file" ; then
3386                                 AC_MSG_WARN([
3387 --with-default-path=PATH will only be used if PATH is not defined in
3388 $external_path_file .])
3389                         fi
3390                         user_path="$withval"
3391                         SERVER_PATH_MSG="$withval"
3392                 fi
3393         ],
3394         [ if test "x$external_path_file" = "x/etc/login.conf" ; then
3395                 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
3396         else
3397                 if test ! -z "$external_path_file" ; then
3398                         AC_MSG_WARN([
3399 If PATH is defined in $external_path_file, ensure the path to scp is included,
3400 otherwise scp will not work.])
3401                 fi
3402                 AC_RUN_IFELSE(
3403                         [AC_LANG_SOURCE([[
3404 /* find out what STDPATH is */
3405 #include <stdio.h>
3406 #ifdef HAVE_PATHS_H
3407 # include <paths.h>
3408 #endif
3409 #ifndef _PATH_STDPATH
3410 # ifdef _PATH_USERPATH  /* Irix */
3411 #  define _PATH_STDPATH _PATH_USERPATH
3412 # else
3413 #  define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
3414 # endif
3415 #endif
3416 #include <sys/types.h>
3417 #include <sys/stat.h>
3418 #include <fcntl.h>
3419 #define DATA "conftest.stdpath"
3420
3421 main()
3422 {
3423         FILE *fd;
3424         int rc;
3425
3426         fd = fopen(DATA,"w");
3427         if(fd == NULL)
3428                 exit(1);
3429
3430         if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
3431                 exit(1);
3432
3433         exit(0);
3434 }
3435                 ]])],
3436                 [ user_path=`cat conftest.stdpath` ],
3437                 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
3438                 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
3439         )
3440 # make sure $bindir is in USER_PATH so scp will work
3441                 t_bindir=`eval echo ${bindir}`
3442                 case $t_bindir in
3443                         NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
3444                 esac
3445                 case $t_bindir in
3446                         NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
3447                 esac
3448                 echo $user_path | grep ":$t_bindir"  > /dev/null 2>&1
3449                 if test $? -ne 0  ; then
3450                         echo $user_path | grep "^$t_bindir"  > /dev/null 2>&1
3451                         if test $? -ne 0  ; then
3452                                 user_path=$user_path:$t_bindir
3453                                 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
3454                         fi
3455                 fi
3456         fi ]
3457 )
3458 if test "x$external_path_file" != "x/etc/login.conf" ; then
3459         AC_DEFINE_UNQUOTED(USER_PATH, "$user_path", [Specify default $PATH])
3460         AC_SUBST(user_path)
3461 fi
3462
3463 # Set superuser path separately to user path
3464 AC_ARG_WITH(superuser-path,
3465         [  --with-superuser-path=  Specify different path for super-user],
3466         [
3467                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3468                     test "x${withval}" != "xyes"; then
3469                         AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval",
3470                                 [Define if you want a different $PATH
3471                                 for the superuser])
3472                         superuser_path=$withval
3473                 fi
3474         ]
3475 )
3476
3477
3478 AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
3479 IPV4_IN6_HACK_MSG="no"
3480 AC_ARG_WITH(4in6,
3481         [  --with-4in6             Check for and convert IPv4 in IPv6 mapped addresses],
3482         [
3483                 if test "x$withval" != "xno" ; then
3484                         AC_MSG_RESULT(yes)
3485                         AC_DEFINE(IPV4_IN_IPV6, 1,
3486                                 [Detect IPv4 in IPv6 mapped addresses
3487                                 and treat as IPv4])
3488                         IPV4_IN6_HACK_MSG="yes"
3489                 else
3490                         AC_MSG_RESULT(no)
3491                 fi
3492         ],[
3493                 if test "x$inet6_default_4in6" = "xyes"; then
3494                         AC_MSG_RESULT([yes (default)])
3495                         AC_DEFINE(IPV4_IN_IPV6)
3496                         IPV4_IN6_HACK_MSG="yes"
3497                 else
3498                         AC_MSG_RESULT([no (default)])
3499                 fi
3500         ]
3501 )
3502
3503 # Whether to enable BSD auth support
3504 BSD_AUTH_MSG=no
3505 AC_ARG_WITH(bsd-auth,
3506         [  --with-bsd-auth         Enable BSD auth support],
3507         [
3508                 if test "x$withval" != "xno" ; then
3509                         AC_DEFINE(BSD_AUTH, 1,
3510                                 [Define if you have BSD auth support])
3511                         BSD_AUTH_MSG=yes
3512                 fi
3513         ]
3514 )
3515
3516 # Where to place sshd.pid
3517 piddir=/var/run
3518 # make sure the directory exists
3519 if test ! -d $piddir ; then
3520         piddir=`eval echo ${sysconfdir}`
3521         case $piddir in
3522                 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
3523         esac
3524 fi
3525
3526 AC_ARG_WITH(pid-dir,
3527         [  --with-pid-dir=PATH     Specify location of ssh.pid file],
3528         [
3529                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3530                     test "x${withval}" != "xyes"; then
3531                         piddir=$withval
3532                         if test ! -d $piddir ; then
3533                         AC_MSG_WARN([** no $piddir directory on this system **])
3534                         fi
3535                 fi
3536         ]
3537 )
3538
3539 AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir", [Specify location of ssh.pid])
3540 AC_SUBST(piddir)
3541
3542 dnl allow user to disable some login recording features
3543 AC_ARG_ENABLE(lastlog,
3544         [  --disable-lastlog       disable use of lastlog even if detected [no]],
3545         [
3546                 if test "x$enableval" = "xno" ; then
3547                         AC_DEFINE(DISABLE_LASTLOG)
3548                 fi
3549         ]
3550 )
3551 AC_ARG_ENABLE(utmp,
3552         [  --disable-utmp          disable use of utmp even if detected [no]],
3553         [
3554                 if test "x$enableval" = "xno" ; then
3555                         AC_DEFINE(DISABLE_UTMP)
3556                 fi
3557         ]
3558 )
3559 AC_ARG_ENABLE(utmpx,
3560         [  --disable-utmpx         disable use of utmpx even if detected [no]],
3561         [
3562                 if test "x$enableval" = "xno" ; then
3563                         AC_DEFINE(DISABLE_UTMPX, 1,
3564                                 [Define if you don't want to use utmpx])
3565                 fi
3566         ]
3567 )
3568 AC_ARG_ENABLE(wtmp,
3569         [  --disable-wtmp          disable use of wtmp even if detected [no]],
3570         [
3571                 if test "x$enableval" = "xno" ; then
3572                         AC_DEFINE(DISABLE_WTMP)
3573                 fi
3574         ]
3575 )
3576 AC_ARG_ENABLE(wtmpx,
3577         [  --disable-wtmpx         disable use of wtmpx even if detected [no]],
3578         [
3579                 if test "x$enableval" = "xno" ; then
3580                         AC_DEFINE(DISABLE_WTMPX, 1,
3581                                 [Define if you don't want to use wtmpx])
3582                 fi
3583         ]
3584 )
3585 AC_ARG_ENABLE(libutil,
3586         [  --disable-libutil       disable use of libutil (login() etc.) [no]],
3587         [
3588                 if test "x$enableval" = "xno" ; then
3589                         AC_DEFINE(DISABLE_LOGIN)
3590                 fi
3591         ]
3592 )
3593 AC_ARG_ENABLE(pututline,
3594         [  --disable-pututline     disable use of pututline() etc. ([uw]tmp) [no]],
3595         [
3596                 if test "x$enableval" = "xno" ; then
3597                         AC_DEFINE(DISABLE_PUTUTLINE, 1,
3598                                 [Define if you don't want to use pututline()
3599                                 etc. to write [uw]tmp])
3600                 fi
3601         ]
3602 )
3603 AC_ARG_ENABLE(pututxline,
3604         [  --disable-pututxline    disable use of pututxline() etc. ([uw]tmpx) [no]],
3605         [
3606                 if test "x$enableval" = "xno" ; then
3607                         AC_DEFINE(DISABLE_PUTUTXLINE, 1,
3608                                 [Define if you don't want to use pututxline()
3609                                 etc. to write [uw]tmpx])
3610                 fi
3611         ]
3612 )
3613 AC_ARG_WITH(lastlog,
3614   [  --with-lastlog=FILE|DIR specify lastlog location [common locations]],
3615         [
3616                 if test "x$withval" = "xno" ; then
3617                         AC_DEFINE(DISABLE_LASTLOG)
3618                 elif test -n "$withval"  &&  test "x${withval}" != "xyes"; then
3619                         conf_lastlog_location=$withval
3620                 fi
3621         ]
3622 )
3623
3624 dnl lastlog, [uw]tmpx? detection
3625 dnl  NOTE: set the paths in the platform section to avoid the
3626 dnl   need for command-line parameters
3627 dnl lastlog and [uw]tmp are subject to a file search if all else fails
3628
3629 dnl lastlog detection
3630 dnl  NOTE: the code itself will detect if lastlog is a directory
3631 AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
3632 AC_TRY_COMPILE([
3633 #include <sys/types.h>
3634 #include <utmp.h>
3635 #ifdef HAVE_LASTLOG_H
3636 #  include <lastlog.h>
3637 #endif
3638 #ifdef HAVE_PATHS_H
3639 #  include <paths.h>
3640 #endif
3641 #ifdef HAVE_LOGIN_H
3642 # include <login.h>
3643 #endif
3644         ],
3645         [ char *lastlog = LASTLOG_FILE; ],
3646         [ AC_MSG_RESULT(yes) ],
3647         [
3648                 AC_MSG_RESULT(no)
3649                 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
3650                 AC_TRY_COMPILE([
3651 #include <sys/types.h>
3652 #include <utmp.h>
3653 #ifdef HAVE_LASTLOG_H
3654 #  include <lastlog.h>
3655 #endif
3656 #ifdef HAVE_PATHS_H
3657 #  include <paths.h>
3658 #endif
3659                 ],
3660                 [ char *lastlog = _PATH_LASTLOG; ],
3661                 [ AC_MSG_RESULT(yes) ],
3662                 [
3663                         AC_MSG_RESULT(no)
3664                         system_lastlog_path=no
3665                 ])
3666         ]
3667 )
3668
3669 if test -z "$conf_lastlog_location"; then
3670         if test x"$system_lastlog_path" = x"no" ; then
3671                 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
3672                                 if (test -d "$f" || test -f "$f") ; then
3673                                         conf_lastlog_location=$f
3674                                 fi
3675                 done
3676                 if test -z "$conf_lastlog_location"; then
3677                         AC_MSG_WARN([** Cannot find lastlog **])
3678                         dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
3679                 fi
3680         fi
3681 fi
3682
3683 if test -n "$conf_lastlog_location"; then
3684         AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location",
3685                 [Define if you want to specify the path to your lastlog file])
3686 fi
3687
3688 dnl utmp detection
3689 AC_MSG_CHECKING([if your system defines UTMP_FILE])
3690 AC_TRY_COMPILE([
3691 #include <sys/types.h>
3692 #include <utmp.h>
3693 #ifdef HAVE_PATHS_H
3694 #  include <paths.h>
3695 #endif
3696         ],
3697         [ char *utmp = UTMP_FILE; ],
3698         [ AC_MSG_RESULT(yes) ],
3699         [ AC_MSG_RESULT(no)
3700           system_utmp_path=no ]
3701 )
3702 if test -z "$conf_utmp_location"; then
3703         if test x"$system_utmp_path" = x"no" ; then
3704                 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3705                         if test -f $f ; then
3706                                 conf_utmp_location=$f
3707                         fi
3708                 done
3709                 if test -z "$conf_utmp_location"; then
3710                         AC_DEFINE(DISABLE_UTMP)
3711                 fi
3712         fi
3713 fi
3714 if test -n "$conf_utmp_location"; then
3715         AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location",
3716                 [Define if you want to specify the path to your utmp file])
3717 fi
3718
3719 dnl wtmp detection
3720 AC_MSG_CHECKING([if your system defines WTMP_FILE])
3721 AC_TRY_COMPILE([
3722 #include <sys/types.h>
3723 #include <utmp.h>
3724 #ifdef HAVE_PATHS_H
3725 #  include <paths.h>
3726 #endif
3727         ],
3728         [ char *wtmp = WTMP_FILE; ],
3729         [ AC_MSG_RESULT(yes) ],
3730         [ AC_MSG_RESULT(no)
3731           system_wtmp_path=no ]
3732 )
3733 if test -z "$conf_wtmp_location"; then
3734         if test x"$system_wtmp_path" = x"no" ; then
3735                 for f in /usr/adm/wtmp /var/log/wtmp; do
3736                         if test -f $f ; then
3737                                 conf_wtmp_location=$f
3738                         fi
3739                 done
3740                 if test -z "$conf_wtmp_location"; then
3741                         AC_DEFINE(DISABLE_WTMP)
3742                 fi
3743         fi
3744 fi
3745 if test -n "$conf_wtmp_location"; then
3746         AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location",
3747                 [Define if you want to specify the path to your wtmp file])
3748 fi
3749
3750
3751 dnl utmpx detection - I don't know any system so perverse as to require
3752 dnl  utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3753 dnl  there, though.
3754 AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3755 AC_TRY_COMPILE([
3756 #include <sys/types.h>
3757 #include <utmp.h>
3758 #ifdef HAVE_UTMPX_H
3759 #include <utmpx.h>
3760 #endif
3761 #ifdef HAVE_PATHS_H
3762 #  include <paths.h>
3763 #endif
3764         ],
3765         [ char *utmpx = UTMPX_FILE; ],
3766         [ AC_MSG_RESULT(yes) ],
3767         [ AC_MSG_RESULT(no)
3768           system_utmpx_path=no ]
3769 )
3770 if test -z "$conf_utmpx_location"; then
3771         if test x"$system_utmpx_path" = x"no" ; then
3772                 AC_DEFINE(DISABLE_UTMPX)
3773         fi
3774 else
3775         AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location",
3776                 [Define if you want to specify the path to your utmpx file])
3777 fi
3778
3779 dnl wtmpx detection
3780 AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3781 AC_TRY_COMPILE([
3782 #include <sys/types.h>
3783 #include <utmp.h>
3784 #ifdef HAVE_UTMPX_H
3785 #include <utmpx.h>
3786 #endif
3787 #ifdef HAVE_PATHS_H
3788 #  include <paths.h>
3789 #endif
3790         ],
3791         [ char *wtmpx = WTMPX_FILE; ],
3792         [ AC_MSG_RESULT(yes) ],
3793         [ AC_MSG_RESULT(no)
3794           system_wtmpx_path=no ]
3795 )
3796 if test -z "$conf_wtmpx_location"; then
3797         if test x"$system_wtmpx_path" = x"no" ; then
3798                 AC_DEFINE(DISABLE_WTMPX)
3799         fi
3800 else
3801         AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location",
3802                 [Define if you want to specify the path to your wtmpx file])
3803 fi
3804
3805
3806 if test ! -z "$blibpath" ; then
3807         LDFLAGS="$LDFLAGS $blibflags$blibpath"
3808         AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
3809 fi
3810
3811 dnl remove pam and dl because they are in $LIBPAM
3812 if test "$PAM_MSG" = yes ; then
3813         LIBS=`echo $LIBS | sed 's/-lpam //'`
3814 fi
3815 if test "$ac_cv_lib_pam_pam_set_item" = yes ; then
3816         LIBS=`echo $LIBS | sed 's/-ldl //'`
3817 fi
3818
3819 dnl Adding -Werror to CFLAGS early prevents configure tests from running.
3820 dnl Add now.
3821 CFLAGS="$CFLAGS $werror_flags"
3822
3823 AC_EXEEXT
3824 AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openbsd-compat/Makefile \
3825         openbsd-compat/regress/Makefile scard/Makefile ssh_prng_cmds survey.sh])
3826 AC_OUTPUT
3827
3828 # Print summary of options
3829
3830 # Someone please show me a better way :)
3831 A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3832 B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3833 C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3834 D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
3835 E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
3836 F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
3837 G=`eval echo ${piddir}` ; G=`eval echo ${G}`
3838 H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3839 I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3840 J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
3841
3842 echo ""
3843 echo "OpenSSH has been configured with the following options:"
3844 echo "                     User binaries: $B"
3845 echo "                   System binaries: $C"
3846 echo "               Configuration files: $D"
3847 echo "                   Askpass program: $E"
3848 echo "                      Manual pages: $F"
3849 echo "                          PID file: $G"
3850 echo "  Privilege separation chroot path: $H"
3851 if test "x$external_path_file" = "x/etc/login.conf" ; then
3852 echo "   At runtime, sshd will use the path defined in $external_path_file"
3853 echo "   Make sure the path to scp is present, otherwise scp will not work"
3854 else
3855 echo "            sshd default user PATH: $I"
3856         if test ! -z "$external_path_file"; then
3857 echo "   (If PATH is set in $external_path_file it will be used instead. If"
3858 echo "   used, ensure the path to scp is present, otherwise scp will not work.)"
3859         fi
3860 fi
3861 if test ! -z "$superuser_path" ; then
3862 echo "          sshd superuser user PATH: $J"
3863 fi
3864 echo "                    Manpage format: $MANTYPE"
3865 echo "                       PAM support: $PAM_MSG"
3866 echo "                 KerberosV support: $KRB5_MSG"
3867 echo "                   SELinux support: $SELINUX_MSG"
3868 echo "                 Smartcard support: $SCARD_MSG"
3869 echo "                     S/KEY support: $SKEY_MSG"
3870 echo "              TCP Wrappers support: $TCPW_MSG"
3871 echo "              MD5 password support: $MD5_MSG"
3872 echo "                   libedit support: $LIBEDIT_MSG"
3873 echo "       IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
3874 echo "           Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3875 echo "                  BSD Auth support: $BSD_AUTH_MSG"
3876 echo "              Random number source: $RAND_MSG"
3877 if test ! -z "$USE_RAND_HELPER" ; then
3878 echo "     ssh-rand-helper collects from: $RAND_HELPER_MSG"
3879 fi
3880
3881 echo ""
3882
3883 echo "              Host: ${host}"
3884 echo "          Compiler: ${CC}"
3885 echo "    Compiler flags: ${CFLAGS}"
3886 echo "Preprocessor flags: ${CPPFLAGS}"
3887 echo "      Linker flags: ${LDFLAGS}"
3888 echo "         Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
3889
3890 echo ""
3891
3892 if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
3893         echo "SVR4 style packages are supported with \"make package\""
3894         echo ""
3895 fi
3896
3897 if test "x$PAM_MSG" = "xyes" ; then
3898         echo "PAM is enabled. You may need to install a PAM control file "
3899         echo "for sshd, otherwise password authentication may fail. "
3900         echo "Example PAM control files can be found in the contrib/ "
3901         echo "subdirectory"
3902         echo ""
3903 fi
3904
3905 if test ! -z "$RAND_HELPER_CMDHASH" ; then
3906         echo "WARNING: you are using the builtin random number collection "
3907         echo "service. Please read WARNING.RNG and request that your OS "
3908         echo "vendor includes kernel-based random number collection in "
3909         echo "future versions of your OS."
3910         echo ""
3911 fi
3912
3913 if test ! -z "$NO_PEERCHECK" ; then
3914         echo "WARNING: the operating system that you are using does not "
3915         echo "appear to support either the getpeereid() API nor the "
3916         echo "SO_PEERCRED getsockopt() option. These facilities are used to "
3917         echo "enforce security checks to prevent unauthorised connections to "
3918         echo "ssh-agent. Their absence increases the risk that a malicious "
3919         echo "user can connect to your agent. "
3920         echo ""
3921 fi
3922
3923 if test "$AUDIT_MODULE" = "bsm" ; then
3924         echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
3925         echo "See the Solaris section in README.platform for details."
3926 fi