configure.ac

   1 # $Id$
   2 #
   3 # Copyright (c) 1999-2004 Damien Miller
   4 #
   5 # Permission to use, copy, modify, and distribute this software for any
   6 # purpose with or without fee is hereby granted, provided that the above
   7 # copyright notice and this permission notice appear in all copies.
   8 #
   9 # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  10 # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  11 # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  12 # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  13 # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  14 # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  15 # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  16
  17 AC_INIT(OpenSSH, Portable)
  18 AC_CONFIG_SRCDIR([ssh.c])
  19
  20 AC_CONFIG_HEADER(config.h)
  21 AC_PROG_CC
  22 AC_CANONICAL_HOST
  23 AC_C_BIGENDIAN
  24
  25 # Checks for programs.
  26 AC_PROG_AWK
  27 AC_PROG_CPP
  28 AC_PROG_RANLIB
  29 AC_PROG_INSTALL
  30 AC_PATH_PROG(AR, ar)
  31 AC_PATH_PROG(CAT, cat)
  32 AC_PATH_PROG(KILL, kill)
  33 AC_PATH_PROGS(PERL, perl5 perl)
  34 AC_PATH_PROG(SED, sed)
  35 AC_SUBST(PERL)
  36 AC_PATH_PROG(ENT, ent)
  37 AC_SUBST(ENT)
  38 AC_PATH_PROG(TEST_MINUS_S_SH, bash)
  39 AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
  40 AC_PATH_PROG(TEST_MINUS_S_SH, sh)
  41 AC_PATH_PROG(SH, sh)
  42 AC_SUBST(TEST_SHELL,sh)
  43
  44 dnl for buildpkg.sh
  45 AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
  46         [/usr/sbin${PATH_SEPARATOR}/etc])
  47 AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
  48         [/usr/sbin${PATH_SEPARATOR}/etc])
  49 AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
  50
  51 # System features
  52 AC_SYS_LARGEFILE
  53
  54 if test -z "$AR" ; then
  55         AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
  56 fi
  57
  58 # Use LOGIN_PROGRAM from environment if possible
  59 if test ! -z "$LOGIN_PROGRAM" ; then
  60         AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM")
  61 else
  62         # Search for login
  63         AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
  64         if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
  65                 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
  66         fi
  67 fi
  68
  69 AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
  70 if test ! -z "$PATH_PASSWD_PROG" ; then
  71         AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG")
  72 fi
  73
  74 if test -z "$LD" ; then
  75         LD=$CC
  76 fi
  77 AC_SUBST(LD)
  78
  79 AC_C_INLINE
  80 if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
  81         CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wno-uninitialized"
  82 fi
  83
  84 AC_ARG_WITH(rpath,
  85         [  --without-rpath         Disable auto-added -R linker paths],
  86         [
  87                 if test "x$withval" = "xno" ; then
  88                         need_dash_r=""
  89                 fi
  90                 if test "x$withval" = "xyes" ; then
  91                         need_dash_r=1
  92                 fi
  93         ]
  94 )
  95
  96 # Check for some target-specific stuff
  97 case "$host" in
  98 *-*-aix*)
  99         AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
 100         if (test -z "$blibpath"); then
 101                 blibpath="/usr/lib:/lib"
 102         fi
 103         saved_LDFLAGS="$LDFLAGS"
 104         for tryflags in -blibpath: -Wl,-blibpath: -Wl,-rpath, ;do
 105                 if (test -z "$blibflags"); then
 106                         LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
 107                         AC_TRY_LINK([], [], [blibflags=$tryflags])
 108                 fi
 109         done
 110         if (test -z "$blibflags"); then
 111                 AC_MSG_RESULT(not found)
 112                 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
 113         else
 114                 AC_MSG_RESULT($blibflags)
 115         fi
 116         LDFLAGS="$saved_LDFLAGS"
 117         dnl Check for authenticate.  Might be in libs.a on older AIXes
 118         AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE)],
 119                 [AC_CHECK_LIB(s,authenticate,
 120                         [ AC_DEFINE(WITH_AIXAUTHENTICATE)
 121                                 LIBS="$LIBS -ls"
 122                         ])
 123                 ])
 124         dnl Check for various auth function declarations in headers.
 125         AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
 126             passwdexpired], , , [#include <usersec.h>])
 127         dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
 128         AC_CHECK_DECLS(loginfailed,
 129                  [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
 130                   AC_TRY_COMPILE(
 131                         [#include <usersec.h>],
 132                         [(void)loginfailed("user","host","tty",0);],
 133                         [AC_MSG_RESULT(yes)
 134                          AC_DEFINE(AIX_LOGINFAILED_4ARG)],
 135                         [AC_MSG_RESULT(no)]
 136                 )],
 137                 [],
 138                 [#include <usersec.h>]
 139         )
 140         AC_CHECK_FUNCS(setauthdb)
 141         check_for_aix_broken_getaddrinfo=1
 142         AC_DEFINE(BROKEN_REALPATH)
 143         AC_DEFINE(SETEUID_BREAKS_SETUID)
 144         AC_DEFINE(BROKEN_SETREUID)
 145         AC_DEFINE(BROKEN_SETREGID)
 146         dnl AIX handles lastlog as part of its login message
 147         AC_DEFINE(DISABLE_LASTLOG)
 148         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 149         AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
 150         ;;
 151 *-*-cygwin*)
 152         check_for_libcrypt_later=1
 153         LIBS="$LIBS /usr/lib/textmode.o"
 154         AC_DEFINE(HAVE_CYGWIN)
 155         AC_DEFINE(USE_PIPES)
 156         AC_DEFINE(DISABLE_SHADOW)
 157         AC_DEFINE(IP_TOS_IS_BROKEN)
 158         AC_DEFINE(NO_X11_UNIX_SOCKETS)
 159         AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT)
 160         AC_DEFINE(DISABLE_FD_PASSING)
 161         ;;
 162 *-*-dgux*)
 163         AC_DEFINE(IP_TOS_IS_BROKEN)
 164         AC_DEFINE(SETEUID_BREAKS_SETUID)
 165         AC_DEFINE(BROKEN_SETREUID)
 166         AC_DEFINE(BROKEN_SETREGID)
 167         ;;
 168 *-*-darwin*)
 169         AC_MSG_CHECKING(if we have working getaddrinfo)
 170         AC_TRY_RUN([#include <mach-o/dyld.h>
 171 main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
 172                 exit(0);
 173         else
 174                 exit(1);
 175 }], [AC_MSG_RESULT(working)],
 176         [AC_MSG_RESULT(buggy)
 177         AC_DEFINE(BROKEN_GETADDRINFO)],
 178         [AC_MSG_RESULT(assume it is working)])
 179         AC_DEFINE(SETEUID_BREAKS_SETUID)
 180         AC_DEFINE(BROKEN_SETREUID)
 181         AC_DEFINE(BROKEN_SETREGID)
 182         AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1)
 183         ;;
 184 *-*-hpux10.26)
 185         if test -z "$GCC"; then
 186                 CFLAGS="$CFLAGS -Ae"
 187         fi
 188         CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
 189         IPADDR_IN_DISPLAY=yes
 190         AC_DEFINE(HAVE_SECUREWARE)
 191         AC_DEFINE(USE_PIPES)
 192         AC_DEFINE(LOGIN_NO_ENDOPT)
 193         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 194         AC_DEFINE(LOCKED_PASSWD_STRING, "*")
 195         AC_DEFINE(SPT_TYPE,SPT_PSTAT)
 196         LIBS="$LIBS -lsec -lsecpw"
 197         AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
 198         disable_ptmx_check=yes
 199         ;;
 200 *-*-hpux10*)
 201         if test -z "$GCC"; then
 202                 CFLAGS="$CFLAGS -Ae"
 203         fi
 204         CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
 205         IPADDR_IN_DISPLAY=yes
 206         AC_DEFINE(USE_PIPES)
 207         AC_DEFINE(LOGIN_NO_ENDOPT)
 208         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 209         AC_DEFINE(LOCKED_PASSWD_STRING, "*")
 210         AC_DEFINE(SPT_TYPE,SPT_PSTAT)
 211         LIBS="$LIBS -lsec"
 212         AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
 213         ;;
 214 *-*-hpux11*)
 215         CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
 216         IPADDR_IN_DISPLAY=yes
 217         AC_DEFINE(PAM_SUN_CODEBASE)
 218         AC_DEFINE(USE_PIPES)
 219         AC_DEFINE(LOGIN_NO_ENDOPT)
 220         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 221         AC_DEFINE(DISABLE_UTMP)
 222         AC_DEFINE(LOCKED_PASSWD_STRING, "*")
 223         AC_DEFINE(SPT_TYPE,SPT_PSTAT)
 224         AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
 225         check_for_hpux_broken_getaddrinfo=1
 226         check_for_conflicting_getspnam=1
 227         LIBS="$LIBS -lsec"
 228         AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
 229         ;;
 230 *-*-irix5*)
 231         PATH="$PATH:/usr/etc"
 232         AC_DEFINE(BROKEN_INET_NTOA)
 233         AC_DEFINE(SETEUID_BREAKS_SETUID)
 234         AC_DEFINE(BROKEN_SETREUID)
 235         AC_DEFINE(BROKEN_SETREGID)
 236         AC_DEFINE(WITH_ABBREV_NO_TTY)
 237         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 238         ;;
 239 *-*-irix6*)
 240         PATH="$PATH:/usr/etc"
 241         AC_DEFINE(WITH_IRIX_ARRAY)
 242         AC_DEFINE(WITH_IRIX_PROJECT)
 243         AC_DEFINE(WITH_IRIX_AUDIT)
 244         AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS)])
 245         AC_DEFINE(BROKEN_INET_NTOA)
 246         AC_DEFINE(SETEUID_BREAKS_SETUID)
 247         AC_DEFINE(BROKEN_SETREUID)
 248         AC_DEFINE(BROKEN_SETREGID)
 249         AC_DEFINE(BROKEN_UPDWTMPX)
 250         AC_DEFINE(WITH_ABBREV_NO_TTY)
 251         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 252         ;;
 253 *-*-linux*)
 254         no_dev_ptmx=1
 255         check_for_libcrypt_later=1
 256         check_for_openpty_ctty_bug=1
 257         AC_DEFINE(DONT_TRY_OTHER_AF)
 258         AC_DEFINE(PAM_TTY_KLUDGE)
 259         AC_DEFINE(LOCKED_PASSWD_PREFIX, "!")
 260         AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
 261         AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM)
 262         AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
 263         AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
 264         inet6_default_4in6=yes
 265         case `uname -r` in
 266         1.*|2.0.*)
 267                 AC_DEFINE(BROKEN_CMSG_TYPE)
 268                 ;;
 269         esac
 270         ;;
 271 mips-sony-bsd|mips-sony-newsos4)
 272         AC_DEFINE(HAVE_NEWS4)
 273         SONY=1
 274         ;;
 275 *-*-netbsd*)
 276         check_for_libcrypt_before=1
 277         if test "x$withval" != "xno" ; then
 278                 need_dash_r=1
 279         fi
 280         ;;
 281 *-*-freebsd*)
 282         check_for_libcrypt_later=1
 283         ;;
 284 *-*-bsdi*)
 285         AC_DEFINE(SETEUID_BREAKS_SETUID)
 286         AC_DEFINE(BROKEN_SETREUID)
 287         AC_DEFINE(BROKEN_SETREGID)
 288         ;;
 289 *-next-*)
 290         conf_lastlog_location="/usr/adm/lastlog"
 291         conf_utmp_location=/etc/utmp
 292         conf_wtmp_location=/usr/adm/wtmp
 293         MAIL=/usr/spool/mail
 294         AC_DEFINE(HAVE_NEXT)
 295         AC_DEFINE(BROKEN_REALPATH)
 296         AC_DEFINE(USE_PIPES)
 297         AC_DEFINE(BROKEN_SAVED_UIDS)
 298         ;;
 299 *-*-solaris*)
 300         if test "x$withval" != "xno" ; then
 301                 need_dash_r=1
 302         fi
 303         AC_DEFINE(PAM_SUN_CODEBASE)
 304         AC_DEFINE(LOGIN_NEEDS_UTMPX)
 305         AC_DEFINE(LOGIN_NEEDS_TERM)
 306         AC_DEFINE(PAM_TTY_KLUDGE)
 307         AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID)
 308         AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
 309         # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
 310         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 311         external_path_file=/etc/default/login
 312         # hardwire lastlog location (can't detect it on some versions)
 313         conf_lastlog_location="/var/adm/lastlog"
 314         AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
 315         sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
 316         if test "$sol2ver" -ge 8; then
 317                 AC_MSG_RESULT(yes)
 318                 AC_DEFINE(DISABLE_UTMP)
 319                 AC_DEFINE(DISABLE_WTMP)
 320         else
 321                 AC_MSG_RESULT(no)
 322         fi
 323         ;;
 324 *-*-sunos4*)
 325         CPPFLAGS="$CPPFLAGS -DSUNOS4"
 326         AC_CHECK_FUNCS(getpwanam)
 327         AC_DEFINE(PAM_SUN_CODEBASE)
 328         conf_utmp_location=/etc/utmp
 329         conf_wtmp_location=/var/adm/wtmp
 330         conf_lastlog_location=/var/adm/lastlog
 331         AC_DEFINE(USE_PIPES)
 332         ;;
 333 *-ncr-sysv*)
 334         LIBS="$LIBS -lc89"
 335         AC_DEFINE(USE_PIPES)
 336         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 337         AC_DEFINE(SETEUID_BREAKS_SETUID)
 338         AC_DEFINE(BROKEN_SETREUID)
 339         AC_DEFINE(BROKEN_SETREGID)
 340         ;;
 341 *-sni-sysv*)
 342         # /usr/ucblib MUST NOT be searched on ReliantUNIX
 343         AC_CHECK_LIB(dl, dlsym, ,)
 344         # -lresolv needs to be at then end of LIBS or DNS lookups break
 345         AC_CHECK_LIB(res_query, resolv, [ LIBS="$LIBS -lresolv" ])
 346         IPADDR_IN_DISPLAY=yes
 347         AC_DEFINE(USE_PIPES)
 348         AC_DEFINE(IP_TOS_IS_BROKEN)
 349         AC_DEFINE(SETEUID_BREAKS_SETUID)
 350         AC_DEFINE(BROKEN_SETREUID)
 351         AC_DEFINE(BROKEN_SETREGID)
 352         AC_DEFINE(SSHD_ACQUIRES_CTTY)
 353         external_path_file=/etc/default/login
 354         # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
 355         # Attention: always take care to bind libsocket and libnsl before libc,
 356         # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
 357         ;;
 358 # UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
 359 *-*-sysv4.2*)
 360         AC_DEFINE(USE_PIPES)
 361         AC_DEFINE(SETEUID_BREAKS_SETUID)
 362         AC_DEFINE(BROKEN_SETREUID)
 363         AC_DEFINE(BROKEN_SETREGID)
 364         ;;
 365 # UnixWare 7.x, OpenUNIX 8
 366 *-*-sysv5*)
 367         AC_DEFINE(USE_PIPES)
 368         AC_DEFINE(SETEUID_BREAKS_SETUID)
 369         AC_DEFINE(BROKEN_SETREUID)
 370         AC_DEFINE(BROKEN_SETREGID)
 371         ;;
 372 *-*-sysv*)
 373         ;;
 374 # SCO UNIX and OEM versions of SCO UNIX
 375 *-*-sco3.2v4*)
 376         AC_MSG_ERROR("This Platform is no longer supported.")
 377         ;;
 378 # SCO OpenServer 5.x
 379 *-*-sco3.2v5*)
 380         if test -z "$GCC"; then
 381                 CFLAGS="$CFLAGS -belf"
 382         fi
 383         LIBS="$LIBS -lprot -lx -ltinfo -lm"
 384         no_dev_ptmx=1
 385         AC_DEFINE(USE_PIPES)
 386         AC_DEFINE(HAVE_SECUREWARE)
 387         AC_DEFINE(DISABLE_SHADOW)
 388         AC_DEFINE(DISABLE_FD_PASSING)
 389         AC_DEFINE(SETEUID_BREAKS_SETUID)
 390         AC_DEFINE(BROKEN_SETREUID)
 391         AC_DEFINE(BROKEN_SETREGID)
 392         AC_DEFINE(WITH_ABBREV_NO_TTY)
 393         AC_DEFINE(BROKEN_UPDWTMPX)
 394         AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
 395         AC_CHECK_FUNCS(getluid setluid)
 396         MANTYPE=man
 397         TEST_SHELL=ksh
 398         ;;
 399 *-*-unicosmk*)
 400         AC_DEFINE(NO_SSH_LASTLOG)
 401         AC_DEFINE(SETEUID_BREAKS_SETUID)
 402         AC_DEFINE(BROKEN_SETREUID)
 403         AC_DEFINE(BROKEN_SETREGID)
 404         AC_DEFINE(USE_PIPES)
 405         AC_DEFINE(DISABLE_FD_PASSING)
 406         LDFLAGS="$LDFLAGS"
 407         LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
 408         MANTYPE=cat
 409         ;;
 410 *-*-unicosmp*)
 411         AC_DEFINE(SETEUID_BREAKS_SETUID)
 412         AC_DEFINE(BROKEN_SETREUID)
 413         AC_DEFINE(BROKEN_SETREGID)
 414         AC_DEFINE(WITH_ABBREV_NO_TTY)
 415         AC_DEFINE(USE_PIPES)
 416         AC_DEFINE(DISABLE_FD_PASSING)
 417         LDFLAGS="$LDFLAGS"
 418         LIBS="$LIBS -lgen -lacid -ldb"
 419         MANTYPE=cat
 420         ;;
 421 *-*-unicos*)
 422         AC_DEFINE(SETEUID_BREAKS_SETUID)
 423         AC_DEFINE(BROKEN_SETREUID)
 424         AC_DEFINE(BROKEN_SETREGID)
 425         AC_DEFINE(USE_PIPES)
 426         AC_DEFINE(DISABLE_FD_PASSING)
 427         AC_DEFINE(NO_SSH_LASTLOG)
 428         LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
 429         LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
 430         MANTYPE=cat
 431         ;;
 432 *-dec-osf*)
 433         AC_MSG_CHECKING(for Digital Unix SIA)
 434         no_osfsia=""
 435         AC_ARG_WITH(osfsia,
 436                 [  --with-osfsia           Enable Digital Unix SIA],
 437                 [
 438                         if test "x$withval" = "xno" ; then
 439                                 AC_MSG_RESULT(disabled)
 440                                 no_osfsia=1
 441                         fi
 442                 ],
 443         )
 444         if test -z "$no_osfsia" ; then
 445                 if test -f /etc/sia/matrix.conf; then
 446                         AC_MSG_RESULT(yes)
 447                         AC_DEFINE(HAVE_OSF_SIA)
 448                         AC_DEFINE(DISABLE_LOGIN)
 449                         AC_DEFINE(DISABLE_FD_PASSING)
 450                         LIBS="$LIBS -lsecurity -ldb -lm -laud"
 451                 else
 452                         AC_MSG_RESULT(no)
 453                         AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin")
 454                 fi
 455         fi
 456         AC_DEFINE(BROKEN_GETADDRINFO)
 457         AC_DEFINE(SETEUID_BREAKS_SETUID)
 458         AC_DEFINE(BROKEN_SETREUID)
 459         AC_DEFINE(BROKEN_SETREGID)
 460         ;;
 461
 462 *-*-nto-qnx)
 463         AC_DEFINE(USE_PIPES)
 464         AC_DEFINE(NO_X11_UNIX_SOCKETS)
 465         AC_DEFINE(MISSING_NFDBITS)
 466         AC_DEFINE(MISSING_HOWMANY)
 467         AC_DEFINE(MISSING_FD_MASK)
 468         ;;
 469 esac
 470
 471 # Allow user to specify flags
 472 AC_ARG_WITH(cflags,
 473         [  --with-cflags           Specify additional flags to pass to compiler],
 474         [
 475                 if test "x$withval" != "xno" ; then
 476                         CFLAGS="$CFLAGS $withval"
 477                 fi
 478         ]
 479 )
 480 AC_ARG_WITH(cppflags,
 481         [  --with-cppflags         Specify additional flags to pass to preprocessor] ,
 482         [
 483                 if test "x$withval" != "xno"; then
 484                         CPPFLAGS="$CPPFLAGS $withval"
 485                 fi
 486         ]
 487 )
 488 AC_ARG_WITH(ldflags,
 489         [  --with-ldflags          Specify additional flags to pass to linker],
 490         [
 491                 if test "x$withval" != "xno" ; then
 492                         LDFLAGS="$LDFLAGS $withval"
 493                 fi
 494         ]
 495 )
 496 AC_ARG_WITH(libs,
 497         [  --with-libs             Specify additional libraries to link with],
 498         [
 499                 if test "x$withval" != "xno" ; then
 500                         LIBS="$LIBS $withval"
 501                 fi
 502         ]
 503 )
 504
 505 AC_MSG_CHECKING(compiler and flags for sanity)
 506 AC_RUN_IFELSE(
 507         [AC_LANG_SOURCE([
 508 #include <stdio.h>
 509 int main(){exit(0);}
 510         ])],
 511         [       AC_MSG_RESULT(yes) ],
 512         [
 513                 AC_MSG_RESULT(no)
 514                 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
 515         ],
 516         [       AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
 517 )
 518
 519 # Checks for header files.
 520 AC_CHECK_HEADERS(bstring.h crypt.h dirent.h endian.h features.h \
 521         floatingpoint.h getopt.h glob.h ia.h lastlog.h limits.h login.h \
 522         login_cap.h maillock.h ndir.h netdb.h netgroup.h \
 523         netinet/in_systm.h pam/pam_appl.h paths.h pty.h readpassphrase.h \
 524         rpc/types.h security/pam_appl.h shadow.h stddef.h stdint.h \
 525         strings.h sys/dir.h sys/strtio.h sys/audit.h sys/bitypes.h \
 526         sys/bsdtty.h sys/cdefs.h sys/mman.h sys/ndir.h sys/prctl.h \
 527         sys/pstat.h sys/select.h sys/stat.h sys/stream.h \
 528         sys/stropts.h sys/sysmacros.h sys/time.h sys/timers.h sys/un.h \
 529         time.h tmpdir.h ttyent.h usersec.h util.h utime.h utmp.h utmpx.h vis.h)
 530
 531 # sys/ptms.h requires sys/stream.h to be included first on Solaris
 532 AC_CHECK_HEADERS(sys/ptms.h, [], [], [
 533 #ifdef HAVE_SYS_STREAM_H
 534 # include <sys/stream.h>
 535 #endif
 536 ])
 537
 538 # Checks for libraries.
 539 AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
 540 AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
 541
 542 dnl IRIX and Solaris 2.5.1 have dirname() in libgen
 543 AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
 544         AC_CHECK_LIB(gen, dirname,[
 545                 AC_CACHE_CHECK([for broken dirname],
 546                         ac_cv_have_broken_dirname, [
 547                         save_LIBS="$LIBS"
 548                         LIBS="$LIBS -lgen"
 549                         AC_TRY_RUN(
 550                                 [
 551 #include <libgen.h>
 552 #include <string.h>
 553
 554 int main(int argc, char **argv) {
 555     char *s, buf[32];
 556
 557     strncpy(buf,"/etc", 32);
 558     s = dirname(buf);
 559     if (!s || strncmp(s, "/", 32) != 0) {
 560         exit(1);
 561     } else {
 562         exit(0);
 563     }
 564 }
 565                                 ],
 566                                 [ ac_cv_have_broken_dirname="no" ],
 567                                 [ ac_cv_have_broken_dirname="yes" ]
 568                         )
 569                         LIBS="$save_LIBS"
 570                 ])
 571                 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
 572                         LIBS="$LIBS -lgen"
 573                         AC_DEFINE(HAVE_DIRNAME)
 574                         AC_CHECK_HEADERS(libgen.h)
 575                 fi
 576         ])
 577 ])
 578
 579 AC_CHECK_FUNC(getspnam, ,
 580         AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
 581 AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME))
 582
 583 dnl zlib is required
 584 AC_ARG_WITH(zlib,
 585         [  --with-zlib=PATH        Use zlib in PATH],
 586         [
 587                 if test "x$withval" = "xno" ; then
 588                         AC_MSG_ERROR([*** zlib is required ***])
 589                 fi
 590                 if test -d "$withval/lib"; then
 591                         if test -n "${need_dash_r}"; then
 592                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
 593                         else
 594                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
 595                         fi
 596                 else
 597                         if test -n "${need_dash_r}"; then
 598                                 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
 599                         else
 600                                 LDFLAGS="-L${withval} ${LDFLAGS}"
 601                         fi
 602                 fi
 603                 if test -d "$withval/include"; then
 604                         CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
 605                 else
 606                         CPPFLAGS="-I${withval} ${CPPFLAGS}"
 607                 fi
 608         ]
 609 )
 610
 611 AC_CHECK_LIB(z, deflate, ,
 612         [
 613                 saved_CPPFLAGS="$CPPFLAGS"
 614                 saved_LDFLAGS="$LDFLAGS"
 615                 save_LIBS="$LIBS"
 616                 dnl Check default zlib install dir
 617                 if test -n "${need_dash_r}"; then
 618                         LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
 619                 else
 620                         LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
 621                 fi
 622                 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
 623                 LIBS="$LIBS -lz"
 624                 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
 625                         [
 626                                 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
 627                         ]
 628                 )
 629         ]
 630 )
 631 AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
 632
 633 AC_ARG_WITH(zlib-version-check,
 634         [  --without-zlib-version-check Disable zlib version check],
 635         [  if test "x$withval" = "xno" ; then
 636                 zlib_check_nonfatal=1
 637            fi
 638         ]
 639 )
 640
 641 AC_MSG_CHECKING(for zlib 1.1.4 or greater)
 642 AC_RUN_IFELSE([AC_LANG_SOURCE([[
 643 #include <zlib.h>
 644 int main()
 645 {
 646         int a, b, c, v;
 647         if (sscanf(ZLIB_VERSION, "%d.%d.%d", &a, &b, &c) != 3)
 648                 exit(1);
 649         v = a*1000000 + b*1000 + c;
 650         if (v >= 1001004)
 651                 exit(0);
 652         exit(2);
 653 }
 654         ]])],
 655         AC_MSG_RESULT(yes),
 656         [ AC_MSG_RESULT(no)
 657           if test -z "$zlib_check_nonfatal" ; then
 658                 AC_MSG_ERROR([*** zlib too old - check config.log ***
 659 Your reported zlib version has known security problems.  It's possible your
 660 vendor has fixed these problems without changing the version number.  If you
 661 are sure this is the case, you can disable the check by running
 662 "./configure --without-zlib-version-check".
 663 If you are in doubt, upgrade zlib to version 1.1.4 or greater.])
 664           else
 665                 AC_MSG_WARN([zlib version may have security problems])
 666           fi
 667         ],
 668         [       AC_MSG_WARN([cross compiling: not checking zlib version]) ]
 669 )
 670
 671 dnl UnixWare 2.x
 672 AC_CHECK_FUNC(strcasecmp,
 673         [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
 674 )
 675 AC_CHECK_FUNC(utimes,
 676         [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
 677                                         LIBS="$LIBS -lc89"]) ]
 678 )
 679
 680 dnl    Checks for libutil functions
 681 AC_CHECK_HEADERS(libutil.h)
 682 AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN)])
 683 AC_CHECK_FUNCS(logout updwtmp logwtmp)
 684
 685 AC_FUNC_STRFTIME
 686
 687 # Check for ALTDIRFUNC glob() extension
 688 AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
 689 AC_EGREP_CPP(FOUNDIT,
 690         [
 691                 #include <glob.h>
 692                 #ifdef GLOB_ALTDIRFUNC
 693                 FOUNDIT
 694                 #endif
 695         ],
 696         [
 697                 AC_DEFINE(GLOB_HAS_ALTDIRFUNC)
 698                 AC_MSG_RESULT(yes)
 699         ],
 700         [
 701                 AC_MSG_RESULT(no)
 702         ]
 703 )
 704
 705 # Check for g.gl_matchc glob() extension
 706 AC_MSG_CHECKING(for gl_matchc field in glob_t)
 707 AC_EGREP_CPP(FOUNDIT,
 708         [
 709                 #include <glob.h>
 710                 int main(void){glob_t g; g.gl_matchc = 1;}
 711         ],
 712         [
 713                 AC_DEFINE(GLOB_HAS_GL_MATCHC)
 714                 AC_MSG_RESULT(yes)
 715         ],
 716         [
 717                 AC_MSG_RESULT(no)
 718         ]
 719 )
 720
 721 AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
 722 AC_RUN_IFELSE(
 723         [AC_LANG_SOURCE([[
 724 #include <sys/types.h>
 725 #include <dirent.h>
 726 int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
 727         ]])],
 728         [AC_MSG_RESULT(yes)],
 729         [
 730                 AC_MSG_RESULT(no)
 731                 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
 732         ],
 733         [
 734                 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
 735                 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
 736         ]
 737 )
 738
 739 AC_MSG_CHECKING([for /proc/pid/fd directory])
 740 if test -d "/proc/$$/fd" ; then
 741         AC_DEFINE(HAVE_PROC_PID)
 742         AC_MSG_RESULT(yes)
 743 else
 744         AC_MSG_RESULT(no)
 745 fi
 746
 747 # Check whether user wants S/Key support
 748 SKEY_MSG="no"
 749 AC_ARG_WITH(skey,
 750         [  --with-skey[[=PATH]]      Enable S/Key support (optionally in PATH)],
 751         [
 752                 if test "x$withval" != "xno" ; then
 753
 754                         if test "x$withval" != "xyes" ; then
 755                                 CPPFLAGS="$CPPFLAGS -I${withval}/include"
 756                                 LDFLAGS="$LDFLAGS -L${withval}/lib"
 757                         fi
 758
 759                         AC_DEFINE(SKEY)
 760                         LIBS="-lskey $LIBS"
 761                         SKEY_MSG="yes"
 762
 763                         AC_MSG_CHECKING([for s/key support])
 764                         AC_TRY_RUN(
 765                                 [
 766 #include <stdio.h>
 767 #include <skey.h>
 768 int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
 769                                 ],
 770                                 [AC_MSG_RESULT(yes)],
 771                                 [
 772                                         AC_MSG_RESULT(no)
 773                                         AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
 774                                 ])
 775                         AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
 776                         AC_TRY_COMPILE(
 777                                 [#include <stdio.h>
 778                                  #include <skey.h>],
 779                                 [(void)skeychallenge(NULL,"name","",0);],
 780                                 [AC_MSG_RESULT(yes)
 781                                  AC_DEFINE(SKEYCHALLENGE_4ARG)],
 782                                 [AC_MSG_RESULT(no)]
 783                         )
 784                 fi
 785         ]
 786 )
 787
 788 # Check whether user wants TCP wrappers support
 789 TCPW_MSG="no"
 790 AC_ARG_WITH(tcp-wrappers,
 791         [  --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
 792         [
 793                 if test "x$withval" != "xno" ; then
 794                         saved_LIBS="$LIBS"
 795                         saved_LDFLAGS="$LDFLAGS"
 796                         saved_CPPFLAGS="$CPPFLAGS"
 797                         if test -n "${withval}" -a "${withval}" != "yes"; then
 798                                 if test -d "${withval}/lib"; then
 799                                         if test -n "${need_dash_r}"; then
 800                                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
 801                                         else
 802                                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
 803                                         fi
 804                                 else
 805                                         if test -n "${need_dash_r}"; then
 806                                                 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
 807                                         else
 808                                                 LDFLAGS="-L${withval} ${LDFLAGS}"
 809                                         fi
 810                                 fi
 811                                 if test -d "${withval}/include"; then
 812                                         CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
 813                                 else
 814                                         CPPFLAGS="-I${withval} ${CPPFLAGS}"
 815                                 fi
 816                         fi
 817                         LIBWRAP="-lwrap"
 818                         LIBS="$LIBWRAP $LIBS"
 819                         AC_MSG_CHECKING(for libwrap)
 820                         AC_TRY_LINK(
 821                                 [
 822 #include <sys/types.h>
 823 #include <sys/socket.h>
 824 #include <netinet/in.h>
 825 #include <tcpd.h>
 826                                         int deny_severity = 0, allow_severity = 0;
 827                                 ],
 828                                 [hosts_access(0);],
 829                                 [
 830                                         AC_MSG_RESULT(yes)
 831                                         AC_DEFINE(LIBWRAP)
 832                                         AC_SUBST(LIBWRAP)
 833                                         TCPW_MSG="yes"
 834                                 ],
 835                                 [
 836                                         AC_MSG_ERROR([*** libwrap missing])
 837                                 ]
 838                         )
 839                         LIBS="$saved_LIBS"
 840                 fi
 841         ]
 842 )
 843
 844 # Check whether user wants libedit support
 845 LIBEDIT_MSG="no"
 846 AC_ARG_WITH(libedit,
 847         [  --with-libedit[[=PATH]]   Enable libedit support for sftp],
 848         [ if test "x$withval" != "xno" ; then
 849                 AC_CHECK_LIB(edit, el_init,
 850                         [ AC_DEFINE(USE_LIBEDIT, [], [Use libedit for sftp])
 851                           LIBEDIT="-ledit -lcurses"
 852                           LIBEDIT_MSG="yes"
 853                           AC_SUBST(LIBEDIT)
 854                         ],
 855                         [], [-lcurses]
 856                 )
 857         fi ]
 858 )
 859
 860 AUDIT_MODULE=none
 861 AC_ARG_WITH(audit,
 862         [  --with-audit=module     Enable EXPERIMENTAL audit support (modules=debug,bsm)],
 863         [
 864           AC_MSG_CHECKING(for supported audit module)
 865           case "$withval" in
 866           bsm)
 867                 AC_MSG_RESULT(bsm)
 868                 AUDIT_MODULE=bsm
 869                 dnl    Checks for headers, libs and functions
 870                 AC_CHECK_HEADERS(bsm/audit.h, [],
 871                     [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)])
 872                 AC_CHECK_LIB(bsm, getaudit, [],
 873                     [AC_MSG_ERROR(BSM enabled and required library not found)])
 874                 AC_CHECK_FUNCS(getaudit, [],
 875                     [AC_MSG_ERROR(BSM enabled and required function not found)])
 876                 # These are optional
 877                 AC_CHECK_FUNCS(getaudit_addr)
 878                 AC_DEFINE(USE_BSM_AUDIT, [], [Use BSM audit module])
 879                 ;;
 880           debug)
 881                 AUDIT_MODULE=debug
 882                 AC_MSG_RESULT(debug)
 883                 AC_DEFINE(SSH_AUDIT_EVENTS, [], Use audit debugging module)
 884                 ;;
 885           *)
 886                 AC_MSG_ERROR([Unknown audit module $withval])
 887                 ;;
 888         esac ]
 889 )
 890
 891 dnl    Checks for library functions. Please keep in alphabetical order
 892 AC_CHECK_FUNCS(\
 893         arc4random __b64_ntop b64_ntop __b64_pton b64_pton bcopy \
 894         bindresvport_sa clock closefrom dirfd fchdir fchmod fchown \
 895         freeaddrinfo futimes getaddrinfo getcwd getgrouplist getnameinfo \
 896         getopt getpeereid _getpty getrlimit getttyent glob inet_aton \
 897         inet_ntoa inet_ntop innetgr login_getcapbool md5_crypt memmove \
 898         mkdtemp mmap ngetaddrinfo nsleep ogetaddrinfo openlog_r openpty \
 899         pstat prctl readpassphrase realpath recvmsg rresvport_af sendmsg \
 900         setdtablesize setegid setenv seteuid setgroups setlogin setpcred \
 901         setproctitle setregid setreuid setrlimit \
 902         setsid setvbuf sigaction sigvec snprintf socketpair strerror \
 903         strlcat strlcpy strmode strnvis strtoul sysconf tcgetpgrp \
 904         truncate unsetenv updwtmpx utimes vhangup vsnprintf waitpid \
 905 )
 906
 907 # IRIX has a const char return value for gai_strerror()
 908 AC_CHECK_FUNCS(gai_strerror,[
 909         AC_DEFINE(HAVE_GAI_STRERROR)
 910         AC_TRY_COMPILE([
 911 #include <sys/types.h>
 912 #include <sys/socket.h>
 913 #include <netdb.h>
 914
 915 const char *gai_strerror(int);],[
 916 char *str;
 917
 918 str = gai_strerror(0);],[
 919                 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
 920                 [Define if gai_strerror() returns const char *])])])
 921
 922 AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP))
 923
 924 dnl Make sure prototypes are defined for these before using them.
 925 AC_CHECK_DECL(strsep, [AC_CHECK_FUNCS(strsep)])
 926 AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
 927
 928 dnl tcsendbreak might be a macro
 929 AC_CHECK_DECL(tcsendbreak,
 930         [AC_DEFINE(HAVE_TCSENDBREAK)],
 931         [AC_CHECK_FUNCS(tcsendbreak)],
 932         [#include <termios.h>]
 933 )
 934
 935 AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
 936
 937 AC_CHECK_FUNCS(setresuid, [
 938         dnl Some platorms have setresuid that isn't implemented, test for this
 939         AC_MSG_CHECKING(if setresuid seems to work)
 940         AC_RUN_IFELSE(
 941                 [AC_LANG_SOURCE([[
 942 #include <stdlib.h>
 943 #include <errno.h>
 944 int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
 945                 ]])],
 946                 [AC_MSG_RESULT(yes)],
 947                 [AC_DEFINE(BROKEN_SETRESUID)
 948                  AC_MSG_RESULT(not implemented)],
 949                 [AC_MSG_WARN([cross compiling: not checking setresuid])]
 950         )
 951 ])
 952
 953 AC_CHECK_FUNCS(setresgid, [
 954         dnl Some platorms have setresgid that isn't implemented, test for this
 955         AC_MSG_CHECKING(if setresgid seems to work)
 956         AC_RUN_IFELSE(
 957                 [AC_LANG_SOURCE([[
 958 #include <stdlib.h>
 959 #include <errno.h>
 960 int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
 961                 ]])],
 962                 [AC_MSG_RESULT(yes)],
 963                 [AC_DEFINE(BROKEN_SETRESGID)
 964                  AC_MSG_RESULT(not implemented)],
 965                 [AC_MSG_WARN([cross compiling: not checking setresuid])]
 966         )
 967 ])
 968
 969 dnl    Checks for time functions
 970 AC_CHECK_FUNCS(gettimeofday time)
 971 dnl    Checks for utmp functions
 972 AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
 973 AC_CHECK_FUNCS(utmpname)
 974 dnl    Checks for utmpx functions
 975 AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
 976 AC_CHECK_FUNCS(setutxent utmpxname)
 977
 978 AC_CHECK_FUNC(daemon,
 979         [AC_DEFINE(HAVE_DAEMON)],
 980         [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
 981 )
 982
 983 AC_CHECK_FUNC(getpagesize,
 984         [AC_DEFINE(HAVE_GETPAGESIZE)],
 985         [AC_CHECK_LIB(ucb, getpagesize, [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
 986 )
 987
 988 # Check for broken snprintf
 989 if test "x$ac_cv_func_snprintf" = "xyes" ; then
 990         AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
 991         AC_RUN_IFELSE(
 992                 [AC_LANG_SOURCE([[
 993 #include <stdio.h>
 994 int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
 995                 ]])],
 996                 [AC_MSG_RESULT(yes)],
 997                 [
 998                         AC_MSG_RESULT(no)
 999                         AC_DEFINE(BROKEN_SNPRINTF)
1000                         AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1001                 ],
1002                 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
1003         )
1004 fi
1005
1006 # Check for missing getpeereid (or equiv) support
1007 NO_PEERCHECK=""
1008 if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1009         AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1010         AC_TRY_COMPILE(
1011                 [#include <sys/types.h>
1012                  #include <sys/socket.h>],
1013                 [int i = SO_PEERCRED;],
1014                 [AC_MSG_RESULT(yes)],
1015                 [AC_MSG_RESULT(no)
1016                 NO_PEERCHECK=1]
1017         )
1018 fi
1019
1020 dnl see whether mkstemp() requires XXXXXX
1021 if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1022 AC_MSG_CHECKING([for (overly) strict mkstemp])
1023 AC_TRY_RUN(
1024         [
1025 #include <stdlib.h>
1026 main() { char template[]="conftest.mkstemp-test";
1027 if (mkstemp(template) == -1)
1028         exit(1);
1029 unlink(template); exit(0);
1030 }
1031         ],
1032         [
1033                 AC_MSG_RESULT(no)
1034         ],
1035         [
1036                 AC_MSG_RESULT(yes)
1037                 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1038         ],
1039         [
1040                 AC_MSG_RESULT(yes)
1041                 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1042         ]
1043 )
1044 fi
1045
1046 dnl make sure that openpty does not reacquire controlling terminal
1047 if test ! -z "$check_for_openpty_ctty_bug"; then
1048         AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1049         AC_TRY_RUN(
1050                 [
1051 #include <stdio.h>
1052 #include <sys/fcntl.h>
1053 #include <sys/types.h>
1054 #include <sys/wait.h>
1055
1056 int
1057 main()
1058 {
1059         pid_t pid;
1060         int fd, ptyfd, ttyfd, status;
1061
1062         pid = fork();
1063         if (pid < 0) {          /* failed */
1064                 exit(1);
1065         } else if (pid > 0) {   /* parent */
1066                 waitpid(pid, &status, 0);
1067                 if (WIFEXITED(status))
1068                         exit(WEXITSTATUS(status));
1069                 else
1070                         exit(2);
1071         } else {                /* child */
1072                 close(0); close(1); close(2);
1073                 setsid();
1074                 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1075                 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1076                 if (fd >= 0)
1077                         exit(3);        /* Acquired ctty: broken */
1078                 else
1079                         exit(0);        /* Did not acquire ctty: OK */
1080         }
1081 }
1082                 ],
1083                 [
1084                         AC_MSG_RESULT(yes)
1085                 ],
1086                 [
1087                         AC_MSG_RESULT(no)
1088                         AC_DEFINE(SSHD_ACQUIRES_CTTY)
1089                 ]
1090         )
1091 fi
1092
1093 if test "x$ac_cv_func_getaddrinfo" = "xyes" -a "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
1094         AC_MSG_CHECKING(if getaddrinfo seems to work)
1095         AC_TRY_RUN(
1096                 [
1097 #include <stdio.h>
1098 #include <sys/socket.h>
1099 #include <netdb.h>
1100 #include <errno.h>
1101 #include <netinet/in.h>
1102
1103 #define TEST_PORT "2222"
1104
1105 int
1106 main(void)
1107 {
1108         int err, sock;
1109         struct addrinfo *gai_ai, *ai, hints;
1110         char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1111
1112         memset(&hints, 0, sizeof(hints));
1113         hints.ai_family = PF_UNSPEC;
1114         hints.ai_socktype = SOCK_STREAM;
1115         hints.ai_flags = AI_PASSIVE;
1116
1117         err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1118         if (err != 0) {
1119                 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1120                 exit(1);
1121         }
1122
1123         for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1124                 if (ai->ai_family != AF_INET6)
1125                         continue;
1126
1127                 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1128                     sizeof(ntop), strport, sizeof(strport),
1129                     NI_NUMERICHOST|NI_NUMERICSERV);
1130
1131                 if (err != 0) {
1132                         if (err == EAI_SYSTEM)
1133                                 perror("getnameinfo EAI_SYSTEM");
1134                         else
1135                                 fprintf(stderr, "getnameinfo failed: %s\n",
1136                                     gai_strerror(err));
1137                         exit(2);
1138                 }
1139
1140                 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1141                 if (sock < 0)
1142                         perror("socket");
1143                 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1144                         if (errno == EBADF)
1145                                 exit(3);
1146                 }
1147         }
1148         exit(0);
1149 }
1150                 ],
1151                 [
1152                         AC_MSG_RESULT(yes)
1153                 ],
1154                 [
1155                         AC_MSG_RESULT(no)
1156                         AC_DEFINE(BROKEN_GETADDRINFO)
1157                 ]
1158         )
1159 fi
1160
1161 if test "x$ac_cv_func_getaddrinfo" = "xyes" -a "x$check_for_aix_broken_getaddrinfo" = "x1"; then
1162         AC_MSG_CHECKING(if getaddrinfo seems to work)
1163         AC_TRY_RUN(
1164                 [
1165 #include <stdio.h>
1166 #include <sys/socket.h>
1167 #include <netdb.h>
1168 #include <errno.h>
1169 #include <netinet/in.h>
1170
1171 #define TEST_PORT "2222"
1172
1173 int
1174 main(void)
1175 {
1176         int err, sock;
1177         struct addrinfo *gai_ai, *ai, hints;
1178         char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1179
1180         memset(&hints, 0, sizeof(hints));
1181         hints.ai_family = PF_UNSPEC;
1182         hints.ai_socktype = SOCK_STREAM;
1183         hints.ai_flags = AI_PASSIVE;
1184
1185         err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1186         if (err != 0) {
1187                 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1188                 exit(1);
1189         }
1190
1191         for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1192                 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1193                         continue;
1194
1195                 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1196                     sizeof(ntop), strport, sizeof(strport),
1197                     NI_NUMERICHOST|NI_NUMERICSERV);
1198
1199                 if (ai->ai_family == AF_INET && err != 0) {
1200                         perror("getnameinfo");
1201                         exit(2);
1202                 }
1203         }
1204         exit(0);
1205 }
1206                 ],
1207                 [
1208                         AC_MSG_RESULT(yes)
1209                         AC_DEFINE(AIX_GETNAMEINFO_HACK, [],
1210 [Define if you have a getaddrinfo that fails for the all-zeros IPv6 address])
1211                 ],
1212                 [
1213                         AC_MSG_RESULT(no)
1214                         AC_DEFINE(BROKEN_GETADDRINFO)
1215                 ]
1216         )
1217 fi
1218
1219 if test "x$check_for_conflicting_getspnam" = "x1"; then
1220         AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1221         AC_COMPILE_IFELSE(
1222                 [
1223 #include <shadow.h>
1224 int main(void) {exit(0);}
1225                 ],
1226                 [
1227                         AC_MSG_RESULT(no)
1228                 ],
1229                 [
1230                         AC_MSG_RESULT(yes)
1231                         AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1232                             [Conflicting defs for getspnam])
1233                 ]
1234         )
1235 fi
1236
1237 AC_FUNC_GETPGRP
1238
1239 # Check for PAM libs
1240 PAM_MSG="no"
1241 AC_ARG_WITH(pam,
1242         [  --with-pam              Enable PAM support ],
1243         [
1244                 if test "x$withval" != "xno" ; then
1245                         if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
1246                            test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
1247                                 AC_MSG_ERROR([PAM headers not found])
1248                         fi
1249
1250                         AC_CHECK_LIB(dl, dlopen, , )
1251                         AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
1252                         AC_CHECK_FUNCS(pam_getenvlist)
1253                         AC_CHECK_FUNCS(pam_putenv)
1254
1255                         PAM_MSG="yes"
1256
1257                         AC_DEFINE(USE_PAM)
1258                         if test $ac_cv_lib_dl_dlopen = yes; then
1259                                 LIBPAM="-lpam -ldl"
1260                         else
1261                                 LIBPAM="-lpam"
1262                         fi
1263                         AC_SUBST(LIBPAM)
1264                 fi
1265         ]
1266 )
1267
1268 # Check for older PAM
1269 if test "x$PAM_MSG" = "xyes" ; then
1270         # Check PAM strerror arguments (old PAM)
1271         AC_MSG_CHECKING([whether pam_strerror takes only one argument])
1272         AC_TRY_COMPILE(
1273                 [
1274 #include <stdlib.h>
1275 #if defined(HAVE_SECURITY_PAM_APPL_H)
1276 #include <security/pam_appl.h>
1277 #elif defined (HAVE_PAM_PAM_APPL_H)
1278 #include <pam/pam_appl.h>
1279 #endif
1280                 ],
1281                 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
1282                 [AC_MSG_RESULT(no)],
1283                 [
1284                         AC_DEFINE(HAVE_OLD_PAM)
1285                         AC_MSG_RESULT(yes)
1286                         PAM_MSG="yes (old library)"
1287                 ]
1288         )
1289 fi
1290
1291 # Search for OpenSSL
1292 saved_CPPFLAGS="$CPPFLAGS"
1293 saved_LDFLAGS="$LDFLAGS"
1294 AC_ARG_WITH(ssl-dir,
1295         [  --with-ssl-dir=PATH     Specify path to OpenSSL installation ],
1296         [
1297                 if test "x$withval" != "xno" ; then
1298                         case "$withval" in
1299                                 # Relative paths
1300                                 ./*|../*)       withval="`pwd`/$withval"
1301                         esac
1302                         if test -d "$withval/lib"; then
1303                                 if test -n "${need_dash_r}"; then
1304                                         LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1305                                 else
1306                                         LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1307                                 fi
1308                         else
1309                                 if test -n "${need_dash_r}"; then
1310                                         LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1311                                 else
1312                                         LDFLAGS="-L${withval} ${LDFLAGS}"
1313                                 fi
1314                         fi
1315                         if test -d "$withval/include"; then
1316                                 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1317                         else
1318                                 CPPFLAGS="-I${withval} ${CPPFLAGS}"
1319                         fi
1320                 fi
1321         ]
1322 )
1323 LIBS="-lcrypto $LIBS"
1324 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1325         [
1326                 dnl Check default openssl install dir
1327                 if test -n "${need_dash_r}"; then
1328                         LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
1329                 else
1330                         LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
1331                 fi
1332                 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1333                 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1334                         [
1335                                 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1336                         ]
1337                 )
1338         ]
1339 )
1340
1341 # Determine OpenSSL header version
1342 AC_MSG_CHECKING([OpenSSL header version])
1343 AC_RUN_IFELSE(
1344         [AC_LANG_SOURCE([[
1345 #include <stdio.h>
1346 #include <string.h>
1347 #include <openssl/opensslv.h>
1348 #define DATA "conftest.sslincver"
1349 int main(void) {
1350         FILE *fd;
1351         int rc;
1352
1353         fd = fopen(DATA,"w");
1354         if(fd == NULL)
1355                 exit(1);
1356
1357         if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1358                 exit(1);
1359
1360         exit(0);
1361 }
1362         ]])],
1363         [
1364                 ssl_header_ver=`cat conftest.sslincver`
1365                 AC_MSG_RESULT($ssl_header_ver)
1366         ],
1367         [
1368                 AC_MSG_RESULT(not found)
1369                 AC_MSG_ERROR(OpenSSL version header not found.)
1370         ],
1371         [
1372                 AC_MSG_WARN([cross compiling: not checking])
1373         ]
1374 )
1375
1376 # Determine OpenSSL library version
1377 AC_MSG_CHECKING([OpenSSL library version])
1378 AC_RUN_IFELSE(
1379         [AC_LANG_SOURCE([[
1380 #include <stdio.h>
1381 #include <string.h>
1382 #include <openssl/opensslv.h>
1383 #include <openssl/crypto.h>
1384 #define DATA "conftest.ssllibver"
1385 int main(void) {
1386         FILE *fd;
1387         int rc;
1388
1389         fd = fopen(DATA,"w");
1390         if(fd == NULL)
1391                 exit(1);
1392
1393         if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1394                 exit(1);
1395
1396         exit(0);
1397 }
1398         ]])],
1399         [
1400                 ssl_library_ver=`cat conftest.ssllibver`
1401                 AC_MSG_RESULT($ssl_library_ver)
1402         ],
1403         [
1404                 AC_MSG_RESULT(not found)
1405                 AC_MSG_ERROR(OpenSSL library not found.)
1406         ],
1407         [
1408                 AC_MSG_WARN([cross compiling: not checking])
1409         ]
1410 )
1411
1412 # Sanity check OpenSSL headers
1413 AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1414 AC_RUN_IFELSE(
1415         [AC_LANG_SOURCE([[
1416 #include <string.h>
1417 #include <openssl/opensslv.h>
1418 int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
1419         ]])],
1420         [
1421                 AC_MSG_RESULT(yes)
1422         ],
1423         [
1424                 AC_MSG_RESULT(no)
1425                 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1426 Check config.log for details.
1427 Also see contrib/findssl.sh for help identifying header/library mismatches.])
1428         ],
1429         [
1430                 AC_MSG_WARN([cross compiling: not checking])
1431         ]
1432 )
1433
1434 # Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1435 # because the system crypt() is more featureful.
1436 if test "x$check_for_libcrypt_before" = "x1"; then
1437         AC_CHECK_LIB(crypt, crypt)
1438 fi
1439
1440 # Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
1441 # version in OpenSSL.
1442 if test "x$check_for_libcrypt_later" = "x1"; then
1443         AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
1444 fi
1445
1446
1447 ### Configure cryptographic random number support
1448
1449 # Check wheter OpenSSL seeds itself
1450 AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1451 AC_RUN_IFELSE(
1452         [AC_LANG_SOURCE([[
1453 #include <string.h>
1454 #include <openssl/rand.h>
1455 int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
1456         ]])],
1457         [
1458                 OPENSSL_SEEDS_ITSELF=yes
1459                 AC_MSG_RESULT(yes)
1460         ],
1461         [
1462                 AC_MSG_RESULT(no)
1463                 # Default to use of the rand helper if OpenSSL doesn't
1464                 # seed itself
1465                 USE_RAND_HELPER=yes
1466         ],
1467         [
1468                 AC_MSG_WARN([cross compiling: assuming yes])
1469                 # This is safe, since all recent OpenSSL versions will
1470                 # complain at runtime if not seeded correctly.
1471                 OPENSSL_SEEDS_ITSELF=yes
1472         ]
1473 )
1474
1475
1476 # Do we want to force the use of the rand helper?
1477 AC_ARG_WITH(rand-helper,
1478         [  --with-rand-helper      Use subprocess to gather strong randomness ],
1479         [
1480                 if test "x$withval" = "xno" ; then
1481                         # Force use of OpenSSL's internal RNG, even if
1482                         # the previous test showed it to be unseeded.
1483                         if test -z "$OPENSSL_SEEDS_ITSELF" ; then
1484                                 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
1485                                 OPENSSL_SEEDS_ITSELF=yes
1486                                 USE_RAND_HELPER=""
1487                         fi
1488                 else
1489                         USE_RAND_HELPER=yes
1490                 fi
1491         ],
1492 )
1493
1494 # Which randomness source do we use?
1495 if test ! -z "$OPENSSL_SEEDS_ITSELF" -a -z "$USE_RAND_HELPER" ; then
1496         # OpenSSL only
1497         AC_DEFINE(OPENSSL_PRNG_ONLY)
1498         RAND_MSG="OpenSSL internal ONLY"
1499         INSTALL_SSH_RAND_HELPER=""
1500 elif test ! -z "$USE_RAND_HELPER" ; then
1501         # install rand helper
1502         RAND_MSG="ssh-rand-helper"
1503         INSTALL_SSH_RAND_HELPER="yes"
1504 fi
1505 AC_SUBST(INSTALL_SSH_RAND_HELPER)
1506
1507 ### Configuration of ssh-rand-helper
1508
1509 # PRNGD TCP socket
1510 AC_ARG_WITH(prngd-port,
1511         [  --with-prngd-port=PORT  read entropy from PRNGD/EGD TCP localhost:PORT],
1512         [
1513                 case "$withval" in
1514                 no)
1515                         withval=""
1516                         ;;
1517                 [[0-9]]*)
1518                         ;;
1519                 *)
1520                         AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
1521                         ;;
1522                 esac
1523                 if test ! -z "$withval" ; then
1524                         PRNGD_PORT="$withval"
1525                         AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT)
1526                 fi
1527         ]
1528 )
1529
1530 # PRNGD Unix domain socket
1531 AC_ARG_WITH(prngd-socket,
1532         [  --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
1533         [
1534                 case "$withval" in
1535                 yes)
1536                         withval="/var/run/egd-pool"
1537                         ;;
1538                 no)
1539                         withval=""
1540                         ;;
1541                 /*)
1542                         ;;
1543                 *)
1544                         AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
1545                         ;;
1546                 esac
1547
1548                 if test ! -z "$withval" ; then
1549                         if test ! -z "$PRNGD_PORT" ; then
1550                                 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
1551                         fi
1552                         if test ! -r "$withval" ; then
1553                                 AC_MSG_WARN(Entropy socket is not readable)
1554                         fi
1555                         PRNGD_SOCKET="$withval"
1556                         AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1557                 fi
1558         ],
1559         [
1560                 # Check for existing socket only if we don't have a random device already
1561                 if test "$USE_RAND_HELPER" = yes ; then
1562                         AC_MSG_CHECKING(for PRNGD/EGD socket)
1563                         # Insert other locations here
1564                         for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
1565                                 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
1566                                         PRNGD_SOCKET="$sock"
1567                                         AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1568                                         break;
1569                                 fi
1570                         done
1571                         if test ! -z "$PRNGD_SOCKET" ; then
1572                                 AC_MSG_RESULT($PRNGD_SOCKET)
1573                         else
1574                                 AC_MSG_RESULT(not found)
1575                         fi
1576                 fi
1577         ]
1578 )
1579
1580 # Change default command timeout for hashing entropy source
1581 entropy_timeout=200
1582 AC_ARG_WITH(entropy-timeout,
1583         [  --with-entropy-timeout  Specify entropy gathering command timeout (msec)],
1584         [
1585                 if test "x$withval" != "xno" ; then
1586                         entropy_timeout=$withval
1587                 fi
1588         ]
1589 )
1590 AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout)
1591
1592 SSH_PRIVSEP_USER=sshd
1593 AC_ARG_WITH(privsep-user,
1594         [  --with-privsep-user=user Specify non-privileged user for privilege separation],
1595         [
1596                 if test -n "$withval"; then
1597                         SSH_PRIVSEP_USER=$withval
1598                 fi
1599         ]
1600 )
1601 AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER")
1602 AC_SUBST(SSH_PRIVSEP_USER)
1603
1604 # We do this little dance with the search path to insure
1605 # that programs that we select for use by installed programs
1606 # (which may be run by the super-user) come from trusted
1607 # locations before they come from the user's private area.
1608 # This should help avoid accidentally configuring some
1609 # random version of a program in someone's personal bin.
1610
1611 OPATH=$PATH
1612 PATH=/bin:/usr/bin
1613 test -h /bin 2> /dev/null && PATH=/usr/bin
1614 test -d /sbin && PATH=$PATH:/sbin
1615 test -d /usr/sbin && PATH=$PATH:/usr/sbin
1616 PATH=$PATH:/etc:$OPATH
1617
1618 # These programs are used by the command hashing source to gather entropy
1619 OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
1620 OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
1621 OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
1622 OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
1623 OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
1624 OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
1625 OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
1626 OSSH_PATH_ENTROPY_PROG(PROG_W, w)
1627 OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
1628 OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
1629 OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
1630 OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
1631 OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
1632 OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
1633 OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
1634 OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
1635 # restore PATH
1636 PATH=$OPATH
1637
1638 # Where does ssh-rand-helper get its randomness from?
1639 INSTALL_SSH_PRNG_CMDS=""
1640 if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
1641         if test ! -z "$PRNGD_PORT" ; then
1642                 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
1643         elif test ! -z "$PRNGD_SOCKET" ; then
1644                 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
1645         else
1646                 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
1647                 RAND_HELPER_CMDHASH=yes
1648                 INSTALL_SSH_PRNG_CMDS="yes"
1649         fi
1650 fi
1651 AC_SUBST(INSTALL_SSH_PRNG_CMDS)
1652
1653
1654 # Cheap hack to ensure NEWS-OS libraries are arranged right.
1655 if test ! -z "$SONY" ; then
1656   LIBS="$LIBS -liberty";
1657 fi
1658
1659 # Checks for data types
1660 AC_CHECK_SIZEOF(char, 1)
1661 AC_CHECK_SIZEOF(short int, 2)
1662 AC_CHECK_SIZEOF(int, 4)
1663 AC_CHECK_SIZEOF(long int, 4)
1664 AC_CHECK_SIZEOF(long long int, 8)
1665
1666 # Sanity check long long for some platforms (AIX)
1667 if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
1668         ac_cv_sizeof_long_long_int=0
1669 fi
1670
1671 # More checks for data types
1672 AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
1673         AC_TRY_COMPILE(
1674                 [ #include <sys/types.h> ],
1675                 [ u_int a; a = 1;],
1676                 [ ac_cv_have_u_int="yes" ],
1677                 [ ac_cv_have_u_int="no" ]
1678         )
1679 ])
1680 if test "x$ac_cv_have_u_int" = "xyes" ; then
1681         AC_DEFINE(HAVE_U_INT)
1682         have_u_int=1
1683 fi
1684
1685 AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
1686         AC_TRY_COMPILE(
1687                 [ #include <sys/types.h> ],
1688                 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
1689                 [ ac_cv_have_intxx_t="yes" ],
1690                 [ ac_cv_have_intxx_t="no" ]
1691         )
1692 ])
1693 if test "x$ac_cv_have_intxx_t" = "xyes" ; then
1694         AC_DEFINE(HAVE_INTXX_T)
1695         have_intxx_t=1
1696 fi
1697
1698 if (test -z "$have_intxx_t" && \
1699            test "x$ac_cv_header_stdint_h" = "xyes")
1700 then
1701     AC_MSG_CHECKING([for intXX_t types in stdint.h])
1702         AC_TRY_COMPILE(
1703                 [ #include <stdint.h> ],
1704                 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
1705                 [
1706                         AC_DEFINE(HAVE_INTXX_T)
1707                         AC_MSG_RESULT(yes)
1708                 ],
1709                 [ AC_MSG_RESULT(no) ]
1710         )
1711 fi
1712
1713 AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
1714         AC_TRY_COMPILE(
1715                 [
1716 #include <sys/types.h>
1717 #ifdef HAVE_STDINT_H
1718 # include <stdint.h>
1719 #endif
1720 #include <sys/socket.h>
1721 #ifdef HAVE_SYS_BITYPES_H
1722 # include <sys/bitypes.h>
1723 #endif
1724                 ],
1725                 [ int64_t a; a = 1;],
1726                 [ ac_cv_have_int64_t="yes" ],
1727                 [ ac_cv_have_int64_t="no" ]
1728         )
1729 ])
1730 if test "x$ac_cv_have_int64_t" = "xyes" ; then
1731         AC_DEFINE(HAVE_INT64_T)
1732 fi
1733
1734 AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
1735         AC_TRY_COMPILE(
1736                 [ #include <sys/types.h> ],
1737                 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
1738                 [ ac_cv_have_u_intxx_t="yes" ],
1739                 [ ac_cv_have_u_intxx_t="no" ]
1740         )
1741 ])
1742 if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
1743         AC_DEFINE(HAVE_U_INTXX_T)
1744         have_u_intxx_t=1
1745 fi
1746
1747 if test -z "$have_u_intxx_t" ; then
1748     AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
1749         AC_TRY_COMPILE(
1750                 [ #include <sys/socket.h> ],
1751                 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
1752                 [
1753                         AC_DEFINE(HAVE_U_INTXX_T)
1754                         AC_MSG_RESULT(yes)
1755                 ],
1756                 [ AC_MSG_RESULT(no) ]
1757         )
1758 fi
1759
1760 AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
1761         AC_TRY_COMPILE(
1762                 [ #include <sys/types.h> ],
1763                 [ u_int64_t a; a = 1;],
1764                 [ ac_cv_have_u_int64_t="yes" ],
1765                 [ ac_cv_have_u_int64_t="no" ]
1766         )
1767 ])
1768 if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
1769         AC_DEFINE(HAVE_U_INT64_T)
1770         have_u_int64_t=1
1771 fi
1772
1773 if test -z "$have_u_int64_t" ; then
1774     AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
1775         AC_TRY_COMPILE(
1776                 [ #include <sys/bitypes.h> ],
1777                 [ u_int64_t a; a = 1],
1778                 [
1779                         AC_DEFINE(HAVE_U_INT64_T)
1780                         AC_MSG_RESULT(yes)
1781                 ],
1782                 [ AC_MSG_RESULT(no) ]
1783         )
1784 fi
1785
1786 if test -z "$have_u_intxx_t" ; then
1787         AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
1788                 AC_TRY_COMPILE(
1789                         [
1790 #include <sys/types.h>
1791                         ],
1792                         [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
1793                         [ ac_cv_have_uintxx_t="yes" ],
1794                         [ ac_cv_have_uintxx_t="no" ]
1795                 )
1796         ])
1797         if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
1798                 AC_DEFINE(HAVE_UINTXX_T)
1799         fi
1800 fi
1801
1802 if test -z "$have_uintxx_t" ; then
1803     AC_MSG_CHECKING([for uintXX_t types in stdint.h])
1804         AC_TRY_COMPILE(
1805                 [ #include <stdint.h> ],
1806                 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
1807                 [
1808                         AC_DEFINE(HAVE_UINTXX_T)
1809                         AC_MSG_RESULT(yes)
1810                 ],
1811                 [ AC_MSG_RESULT(no) ]
1812         )
1813 fi
1814
1815 if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
1816            test "x$ac_cv_header_sys_bitypes_h" = "xyes")
1817 then
1818         AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
1819         AC_TRY_COMPILE(
1820                 [
1821 #include <sys/bitypes.h>
1822                 ],
1823                 [
1824                         int8_t a; int16_t b; int32_t c;
1825                         u_int8_t e; u_int16_t f; u_int32_t g;
1826                         a = b = c = e = f = g = 1;
1827                 ],
1828                 [
1829                         AC_DEFINE(HAVE_U_INTXX_T)
1830                         AC_DEFINE(HAVE_INTXX_T)
1831                         AC_MSG_RESULT(yes)
1832                 ],
1833                 [AC_MSG_RESULT(no)]
1834         )
1835 fi
1836
1837
1838 AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
1839         AC_TRY_COMPILE(
1840                 [
1841 #include <sys/types.h>
1842                 ],
1843                 [ u_char foo; foo = 125; ],
1844                 [ ac_cv_have_u_char="yes" ],
1845                 [ ac_cv_have_u_char="no" ]
1846         )
1847 ])
1848 if test "x$ac_cv_have_u_char" = "xyes" ; then
1849         AC_DEFINE(HAVE_U_CHAR)
1850 fi
1851
1852 TYPE_SOCKLEN_T
1853
1854 AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
1855
1856 AC_CHECK_TYPES(in_addr_t,,,
1857 [#include <sys/types.h>
1858 #include <netinet/in.h>])
1859
1860 AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
1861         AC_TRY_COMPILE(
1862                 [
1863 #include <sys/types.h>
1864                 ],
1865                 [ size_t foo; foo = 1235; ],
1866                 [ ac_cv_have_size_t="yes" ],
1867                 [ ac_cv_have_size_t="no" ]
1868         )
1869 ])
1870 if test "x$ac_cv_have_size_t" = "xyes" ; then
1871         AC_DEFINE(HAVE_SIZE_T)
1872 fi
1873
1874 AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
1875         AC_TRY_COMPILE(
1876                 [
1877 #include <sys/types.h>
1878                 ],
1879                 [ ssize_t foo; foo = 1235; ],
1880                 [ ac_cv_have_ssize_t="yes" ],
1881                 [ ac_cv_have_ssize_t="no" ]
1882         )
1883 ])
1884 if test "x$ac_cv_have_ssize_t" = "xyes" ; then
1885         AC_DEFINE(HAVE_SSIZE_T)
1886 fi
1887
1888 AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
1889         AC_TRY_COMPILE(
1890                 [
1891 #include <time.h>
1892                 ],
1893                 [ clock_t foo; foo = 1235; ],
1894                 [ ac_cv_have_clock_t="yes" ],
1895                 [ ac_cv_have_clock_t="no" ]
1896         )
1897 ])
1898 if test "x$ac_cv_have_clock_t" = "xyes" ; then
1899         AC_DEFINE(HAVE_CLOCK_T)
1900 fi
1901
1902 AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
1903         AC_TRY_COMPILE(
1904                 [
1905 #include <sys/types.h>
1906 #include <sys/socket.h>
1907                 ],
1908                 [ sa_family_t foo; foo = 1235; ],
1909                 [ ac_cv_have_sa_family_t="yes" ],
1910                 [ AC_TRY_COMPILE(
1911                   [
1912 #include <sys/types.h>
1913 #include <sys/socket.h>
1914 #include <netinet/in.h>
1915                 ],
1916                 [ sa_family_t foo; foo = 1235; ],
1917                 [ ac_cv_have_sa_family_t="yes" ],
1918
1919                 [ ac_cv_have_sa_family_t="no" ]
1920         )]
1921         )
1922 ])
1923 if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
1924         AC_DEFINE(HAVE_SA_FAMILY_T)
1925 fi
1926
1927 AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
1928         AC_TRY_COMPILE(
1929                 [
1930 #include <sys/types.h>
1931                 ],
1932                 [ pid_t foo; foo = 1235; ],
1933                 [ ac_cv_have_pid_t="yes" ],
1934                 [ ac_cv_have_pid_t="no" ]
1935         )
1936 ])
1937 if test "x$ac_cv_have_pid_t" = "xyes" ; then
1938         AC_DEFINE(HAVE_PID_T)
1939 fi
1940
1941 AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
1942         AC_TRY_COMPILE(
1943                 [
1944 #include <sys/types.h>
1945                 ],
1946                 [ mode_t foo; foo = 1235; ],
1947                 [ ac_cv_have_mode_t="yes" ],
1948                 [ ac_cv_have_mode_t="no" ]
1949         )
1950 ])
1951 if test "x$ac_cv_have_mode_t" = "xyes" ; then
1952         AC_DEFINE(HAVE_MODE_T)
1953 fi
1954
1955
1956 AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
1957         AC_TRY_COMPILE(
1958                 [
1959 #include <sys/types.h>
1960 #include <sys/socket.h>
1961                 ],
1962                 [ struct sockaddr_storage s; ],
1963                 [ ac_cv_have_struct_sockaddr_storage="yes" ],
1964                 [ ac_cv_have_struct_sockaddr_storage="no" ]
1965         )
1966 ])
1967 if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
1968         AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE)
1969 fi
1970
1971 AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
1972         AC_TRY_COMPILE(
1973                 [
1974 #include <sys/types.h>
1975 #include <netinet/in.h>
1976                 ],
1977                 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
1978                 [ ac_cv_have_struct_sockaddr_in6="yes" ],
1979                 [ ac_cv_have_struct_sockaddr_in6="no" ]
1980         )
1981 ])
1982 if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
1983         AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6)
1984 fi
1985
1986 AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
1987         AC_TRY_COMPILE(
1988                 [
1989 #include <sys/types.h>
1990 #include <netinet/in.h>
1991                 ],
1992                 [ struct in6_addr s; s.s6_addr[0] = 0; ],
1993                 [ ac_cv_have_struct_in6_addr="yes" ],
1994                 [ ac_cv_have_struct_in6_addr="no" ]
1995         )
1996 ])
1997 if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
1998         AC_DEFINE(HAVE_STRUCT_IN6_ADDR)
1999 fi
2000
2001 AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2002         AC_TRY_COMPILE(
2003                 [
2004 #include <sys/types.h>
2005 #include <sys/socket.h>
2006 #include <netdb.h>
2007                 ],
2008                 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2009                 [ ac_cv_have_struct_addrinfo="yes" ],
2010                 [ ac_cv_have_struct_addrinfo="no" ]
2011         )
2012 ])
2013 if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2014         AC_DEFINE(HAVE_STRUCT_ADDRINFO)
2015 fi
2016
2017 AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2018         AC_TRY_COMPILE(
2019                 [ #include <sys/time.h> ],
2020                 [ struct timeval tv; tv.tv_sec = 1;],
2021                 [ ac_cv_have_struct_timeval="yes" ],
2022                 [ ac_cv_have_struct_timeval="no" ]
2023         )
2024 ])
2025 if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2026         AC_DEFINE(HAVE_STRUCT_TIMEVAL)
2027         have_struct_timeval=1
2028 fi
2029
2030 AC_CHECK_TYPES(struct timespec)
2031
2032 # We need int64_t or else certian parts of the compile will fail.
2033 if test "x$ac_cv_have_int64_t" = "xno" -a \
2034         "x$ac_cv_sizeof_long_int" != "x8" -a \
2035         "x$ac_cv_sizeof_long_long_int" = "x0" ; then
2036         echo "OpenSSH requires int64_t support.  Contact your vendor or install"
2037         echo "an alternative compiler (I.E., GCC) before continuing."
2038         echo ""
2039         exit 1;
2040 else
2041 dnl test snprintf (broken on SCO w/gcc)
2042         AC_RUN_IFELSE(
2043                 [AC_LANG_SOURCE([[
2044 #include <stdio.h>
2045 #include <string.h>
2046 #ifdef HAVE_SNPRINTF
2047 main()
2048 {
2049         char buf[50];
2050         char expected_out[50];
2051         int mazsize = 50 ;
2052 #if (SIZEOF_LONG_INT == 8)
2053         long int num = 0x7fffffffffffffff;
2054 #else
2055         long long num = 0x7fffffffffffffffll;
2056 #endif
2057         strcpy(expected_out, "9223372036854775807");
2058         snprintf(buf, mazsize, "%lld", num);
2059         if(strcmp(buf, expected_out) != 0)
2060                 exit(1);
2061         exit(0);
2062 }
2063 #else
2064 main() { exit(0); }
2065 #endif
2066                 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
2067                 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
2068         )
2069 fi
2070
2071 dnl Checks for structure members
2072 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2073 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2074 OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2075 OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2076 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
2077 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
2078 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2079 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
2080 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
2081 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2082 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2083 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2084 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
2085 OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2086 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2087 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2088 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
2089
2090 AC_CHECK_MEMBERS([struct stat.st_blksize])
2091
2092 AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2093                 ac_cv_have_ss_family_in_struct_ss, [
2094         AC_TRY_COMPILE(
2095                 [
2096 #include <sys/types.h>
2097 #include <sys/socket.h>
2098                 ],
2099                 [ struct sockaddr_storage s; s.ss_family = 1; ],
2100                 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2101                 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2102         )
2103 ])
2104 if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2105         AC_DEFINE(HAVE_SS_FAMILY_IN_SS)
2106 fi
2107
2108 AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2109                 ac_cv_have___ss_family_in_struct_ss, [
2110         AC_TRY_COMPILE(
2111                 [
2112 #include <sys/types.h>
2113 #include <sys/socket.h>
2114                 ],
2115                 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2116                 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2117                 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2118         )
2119 ])
2120 if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2121         AC_DEFINE(HAVE___SS_FAMILY_IN_SS)
2122 fi
2123
2124 AC_CACHE_CHECK([for pw_class field in struct passwd],
2125                 ac_cv_have_pw_class_in_struct_passwd, [
2126         AC_TRY_COMPILE(
2127                 [
2128 #include <pwd.h>
2129                 ],
2130                 [ struct passwd p; p.pw_class = 0; ],
2131                 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2132                 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2133         )
2134 ])
2135 if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2136         AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD)
2137 fi
2138
2139 AC_CACHE_CHECK([for pw_expire field in struct passwd],
2140                 ac_cv_have_pw_expire_in_struct_passwd, [
2141         AC_TRY_COMPILE(
2142                 [
2143 #include <pwd.h>
2144                 ],
2145                 [ struct passwd p; p.pw_expire = 0; ],
2146                 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2147                 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2148         )
2149 ])
2150 if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2151         AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD)
2152 fi
2153
2154 AC_CACHE_CHECK([for pw_change field in struct passwd],
2155                 ac_cv_have_pw_change_in_struct_passwd, [
2156         AC_TRY_COMPILE(
2157                 [
2158 #include <pwd.h>
2159                 ],
2160                 [ struct passwd p; p.pw_change = 0; ],
2161                 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2162                 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2163         )
2164 ])
2165 if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2166         AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD)
2167 fi
2168
2169 dnl make sure we're using the real structure members and not defines
2170 AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2171                 ac_cv_have_accrights_in_msghdr, [
2172         AC_COMPILE_IFELSE(
2173                 [
2174 #include <sys/types.h>
2175 #include <sys/socket.h>
2176 #include <sys/uio.h>
2177 int main() {
2178 #ifdef msg_accrights
2179 #error "msg_accrights is a macro"
2180 exit(1);
2181 #endif
2182 struct msghdr m;
2183 m.msg_accrights = 0;
2184 exit(0);
2185 }
2186                 ],
2187                 [ ac_cv_have_accrights_in_msghdr="yes" ],
2188                 [ ac_cv_have_accrights_in_msghdr="no" ]
2189         )
2190 ])
2191 if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2192         AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR)
2193 fi
2194
2195 AC_CACHE_CHECK([for msg_control field in struct msghdr],
2196                 ac_cv_have_control_in_msghdr, [
2197         AC_COMPILE_IFELSE(
2198                 [
2199 #include <sys/types.h>
2200 #include <sys/socket.h>
2201 #include <sys/uio.h>
2202 int main() {
2203 #ifdef msg_control
2204 #error "msg_control is a macro"
2205 exit(1);
2206 #endif
2207 struct msghdr m;
2208 m.msg_control = 0;
2209 exit(0);
2210 }
2211                 ],
2212                 [ ac_cv_have_control_in_msghdr="yes" ],
2213                 [ ac_cv_have_control_in_msghdr="no" ]
2214         )
2215 ])
2216 if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2217         AC_DEFINE(HAVE_CONTROL_IN_MSGHDR)
2218 fi
2219
2220 AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
2221         AC_TRY_LINK([],
2222                 [ extern char *__progname; printf("%s", __progname); ],
2223                 [ ac_cv_libc_defines___progname="yes" ],
2224                 [ ac_cv_libc_defines___progname="no" ]
2225         )
2226 ])
2227 if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2228         AC_DEFINE(HAVE___PROGNAME)
2229 fi
2230
2231 AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2232         AC_TRY_LINK([
2233 #include <stdio.h>
2234 ],
2235                 [ printf("%s", __FUNCTION__); ],
2236                 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2237                 [ ac_cv_cc_implements___FUNCTION__="no" ]
2238         )
2239 ])
2240 if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2241         AC_DEFINE(HAVE___FUNCTION__)
2242 fi
2243
2244 AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2245         AC_TRY_LINK([
2246 #include <stdio.h>
2247 ],
2248                 [ printf("%s", __func__); ],
2249                 [ ac_cv_cc_implements___func__="yes" ],
2250                 [ ac_cv_cc_implements___func__="no" ]
2251         )
2252 ])
2253 if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
2254         AC_DEFINE(HAVE___func__)
2255 fi
2256
2257 AC_CACHE_CHECK([whether getopt has optreset support],
2258                 ac_cv_have_getopt_optreset, [
2259         AC_TRY_LINK(
2260                 [
2261 #include <getopt.h>
2262                 ],
2263                 [ extern int optreset; optreset = 0; ],
2264                 [ ac_cv_have_getopt_optreset="yes" ],
2265                 [ ac_cv_have_getopt_optreset="no" ]
2266         )
2267 ])
2268 if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
2269         AC_DEFINE(HAVE_GETOPT_OPTRESET)
2270 fi
2271
2272 AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
2273         AC_TRY_LINK([],
2274                 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
2275                 [ ac_cv_libc_defines_sys_errlist="yes" ],
2276                 [ ac_cv_libc_defines_sys_errlist="no" ]
2277         )
2278 ])
2279 if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
2280         AC_DEFINE(HAVE_SYS_ERRLIST)
2281 fi
2282
2283
2284 AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
2285         AC_TRY_LINK([],
2286                 [ extern int sys_nerr; printf("%i", sys_nerr);],
2287                 [ ac_cv_libc_defines_sys_nerr="yes" ],
2288                 [ ac_cv_libc_defines_sys_nerr="no" ]
2289         )
2290 ])
2291 if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
2292         AC_DEFINE(HAVE_SYS_NERR)
2293 fi
2294
2295 SCARD_MSG="no"
2296 # Check whether user wants sectok support
2297 AC_ARG_WITH(sectok,
2298         [  --with-sectok           Enable smartcard support using libsectok],
2299         [
2300                 if test "x$withval" != "xno" ; then
2301                         if test "x$withval" != "xyes" ; then
2302                                 CPPFLAGS="$CPPFLAGS -I${withval}"
2303                                 LDFLAGS="$LDFLAGS -L${withval}"
2304                                 if test ! -z "$need_dash_r" ; then
2305                                         LDFLAGS="$LDFLAGS -R${withval}"
2306                                 fi
2307                                 if test ! -z "$blibpath" ; then
2308                                         blibpath="$blibpath:${withval}"
2309                                 fi
2310                         fi
2311                         AC_CHECK_HEADERS(sectok.h)
2312                         if test "$ac_cv_header_sectok_h" != yes; then
2313                                 AC_MSG_ERROR(Can't find sectok.h)
2314                         fi
2315                         AC_CHECK_LIB(sectok, sectok_open)
2316                         if test "$ac_cv_lib_sectok_sectok_open" != yes; then
2317                                 AC_MSG_ERROR(Can't find libsectok)
2318                         fi
2319                         AC_DEFINE(SMARTCARD)
2320                         AC_DEFINE(USE_SECTOK)
2321                         SCARD_MSG="yes, using sectok"
2322                 fi
2323         ]
2324 )
2325
2326 # Check whether user wants OpenSC support
2327 AC_ARG_WITH(opensc,
2328         AC_HELP_STRING([--with-opensc=PFX],
2329                        [Enable smartcard support using OpenSC]),
2330         opensc_config_prefix="$withval", opensc_config_prefix="")
2331 if test x$opensc_config_prefix != x ; then
2332   OPENSC_CONFIG=$opensc_config_prefix/bin/opensc-config
2333   AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
2334   if test "$OPENSC_CONFIG" != "no"; then
2335     LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
2336     LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
2337     CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
2338     LDFLAGS="$LDFLAGS $LIBOPENSC_LIBS"
2339     AC_DEFINE(SMARTCARD)
2340     AC_DEFINE(USE_OPENSC)
2341     SCARD_MSG="yes, using OpenSC"
2342   fi
2343 fi
2344
2345 # Check libraries needed by DNS fingerprint support
2346 AC_SEARCH_LIBS(getrrsetbyname, resolv,
2347         [AC_DEFINE(HAVE_GETRRSETBYNAME)],
2348         [
2349                 # Needed by our getrrsetbyname()
2350                 AC_SEARCH_LIBS(res_query, resolv)
2351                 AC_SEARCH_LIBS(dn_expand, resolv)
2352                 AC_MSG_CHECKING(if res_query will link)
2353                 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
2354                    [AC_MSG_RESULT(no)
2355                     saved_LIBS="$LIBS"
2356                     LIBS="$LIBS -lresolv"
2357                     AC_MSG_CHECKING(for res_query in -lresolv)
2358                     AC_LINK_IFELSE([
2359 #include <resolv.h>
2360 int main()
2361 {
2362         res_query (0, 0, 0, 0, 0);
2363         return 0;
2364 }
2365                         ],
2366                         [LIBS="$LIBS -lresolv"
2367                          AC_MSG_RESULT(yes)],
2368                         [LIBS="$saved_LIBS"
2369                          AC_MSG_RESULT(no)])
2370                     ])
2371                 AC_CHECK_FUNCS(_getshort _getlong)
2372                 AC_CHECK_MEMBER(HEADER.ad,
2373                         [AC_DEFINE(HAVE_HEADER_AD)],,
2374                         [#include <arpa/nameser.h>])
2375         ])
2376
2377 # Check whether user wants Kerberos 5 support
2378 KRB5_MSG="no"
2379 AC_ARG_WITH(kerberos5,
2380         [  --with-kerberos5=PATH   Enable Kerberos 5 support],
2381         [ if test "x$withval" != "xno" ; then
2382                 if test "x$withval" = "xyes" ; then
2383                         KRB5ROOT="/usr/local"
2384                 else
2385                         KRB5ROOT=${withval}
2386                 fi
2387
2388                 AC_DEFINE(KRB5)
2389                 KRB5_MSG="yes"
2390
2391                 AC_MSG_CHECKING(for krb5-config)
2392                 if test -x  $KRB5ROOT/bin/krb5-config ; then
2393                         KRB5CONF=$KRB5ROOT/bin/krb5-config
2394                         AC_MSG_RESULT($KRB5CONF)
2395
2396                         AC_MSG_CHECKING(for gssapi support)
2397                         if $KRB5CONF | grep gssapi >/dev/null ; then
2398                                 AC_MSG_RESULT(yes)
2399                                 AC_DEFINE(GSSAPI)
2400                                 k5confopts=gssapi
2401                         else
2402                                 AC_MSG_RESULT(no)
2403                                 k5confopts=""
2404                         fi
2405                         K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
2406                         K5LIBS="`$KRB5CONF --libs $k5confopts`"
2407                         CPPFLAGS="$CPPFLAGS $K5CFLAGS"
2408                         AC_MSG_CHECKING(whether we are using Heimdal)
2409                         AC_TRY_COMPILE([ #include <krb5.h> ],
2410                                        [ char *tmp = heimdal_version; ],
2411                                        [ AC_MSG_RESULT(yes)
2412                                          AC_DEFINE(HEIMDAL) ],
2413                                          AC_MSG_RESULT(no)
2414                         )
2415                 else
2416                         AC_MSG_RESULT(no)
2417                         CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
2418                         LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
2419                         AC_MSG_CHECKING(whether we are using Heimdal)
2420                         AC_TRY_COMPILE([ #include <krb5.h> ],
2421                                        [ char *tmp = heimdal_version; ],
2422                                        [ AC_MSG_RESULT(yes)
2423                                          AC_DEFINE(HEIMDAL)
2424                                          K5LIBS="-lkrb5 -ldes"
2425                                          K5LIBS="$K5LIBS -lcom_err -lasn1"
2426                                          AC_CHECK_LIB(roken, net_write,
2427                                            [K5LIBS="$K5LIBS -lroken"])
2428                                        ],
2429                                        [ AC_MSG_RESULT(no)
2430                                          K5LIBS="-lkrb5 -lk5crypto -lcom_err"
2431                                        ]
2432                         )
2433                         AC_SEARCH_LIBS(dn_expand, resolv)
2434
2435                         AC_CHECK_LIB(gssapi,gss_init_sec_context,
2436                                 [ AC_DEFINE(GSSAPI)
2437                                   K5LIBS="-lgssapi $K5LIBS" ],
2438                                 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
2439                                         [ AC_DEFINE(GSSAPI)
2440                                           K5LIBS="-lgssapi_krb5 $K5LIBS" ],
2441                                         AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
2442                                         $K5LIBS)
2443                                 ],
2444                                 $K5LIBS)
2445
2446                         AC_CHECK_HEADER(gssapi.h, ,
2447                                 [ unset ac_cv_header_gssapi_h
2448                                   CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2449                                   AC_CHECK_HEADERS(gssapi.h, ,
2450                                         AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
2451                                   )
2452                                 ]
2453                         )
2454
2455                         oldCPP="$CPPFLAGS"
2456                         CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2457                         AC_CHECK_HEADER(gssapi_krb5.h, ,
2458                                         [ CPPFLAGS="$oldCPP" ])
2459
2460                 fi
2461                 if test ! -z "$need_dash_r" ; then
2462                         LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
2463                 fi
2464                 if test ! -z "$blibpath" ; then
2465                         blibpath="$blibpath:${KRB5ROOT}/lib"
2466                 fi
2467         fi
2468
2469         AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
2470         AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
2471         AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
2472
2473         LIBS="$LIBS $K5LIBS"
2474         AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS))
2475         AC_SEARCH_LIBS(krb5_init_ets, $K5LIBS, AC_DEFINE(KRB5_INIT_ETS))
2476         ]
2477 )
2478
2479 # Looking for programs, paths and files
2480
2481 PRIVSEP_PATH=/var/empty
2482 AC_ARG_WITH(privsep-path,
2483         [  --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
2484         [
2485                 if test "x$withval" != "$no" ; then
2486                         PRIVSEP_PATH=$withval
2487                 fi
2488         ]
2489 )
2490 AC_SUBST(PRIVSEP_PATH)
2491
2492 AC_ARG_WITH(xauth,
2493         [  --with-xauth=PATH       Specify path to xauth program ],
2494         [
2495                 if test "x$withval" != "xno" ; then
2496                         xauth_path=$withval
2497                 fi
2498         ],
2499         [
2500                 TestPath="$PATH"
2501                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
2502                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
2503                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
2504                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
2505                 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
2506                 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
2507                         xauth_path="/usr/openwin/bin/xauth"
2508                 fi
2509         ]
2510 )
2511
2512 STRIP_OPT=-s
2513 AC_ARG_ENABLE(strip,
2514         [  --disable-strip         Disable calling strip(1) on install],
2515         [
2516                 if test "x$enableval" = "xno" ; then
2517                         STRIP_OPT=
2518                 fi
2519         ]
2520 )
2521 AC_SUBST(STRIP_OPT)
2522
2523 if test -z "$xauth_path" ; then
2524         XAUTH_PATH="undefined"
2525         AC_SUBST(XAUTH_PATH)
2526 else
2527         AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path")
2528         XAUTH_PATH=$xauth_path
2529         AC_SUBST(XAUTH_PATH)
2530 fi
2531
2532 # Check for mail directory (last resort if we cannot get it from headers)
2533 if test ! -z "$MAIL" ; then
2534         maildir=`dirname $MAIL`
2535         AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir")
2536 fi
2537
2538 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
2539         AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
2540         disable_ptmx_check=yes
2541 fi
2542 if test -z "$no_dev_ptmx" ; then
2543         if test "x$disable_ptmx_check" != "xyes" ; then
2544                 AC_CHECK_FILE("/dev/ptmx",
2545                         [
2546                                 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX)
2547                                 have_dev_ptmx=1
2548                         ]
2549                 )
2550         fi
2551 fi
2552
2553 if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
2554         AC_CHECK_FILE("/dev/ptc",
2555                 [
2556                         AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC)
2557                         have_dev_ptc=1
2558                 ]
2559         )
2560 else
2561         AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
2562 fi
2563
2564 # Options from here on. Some of these are preset by platform above
2565 AC_ARG_WITH(mantype,
2566         [  --with-mantype=man|cat|doc  Set man page type],
2567         [
2568                 case "$withval" in
2569                 man|cat|doc)
2570                         MANTYPE=$withval
2571                         ;;
2572                 *)
2573                         AC_MSG_ERROR(invalid man type: $withval)
2574                         ;;
2575                 esac
2576         ]
2577 )
2578 if test -z "$MANTYPE"; then
2579         TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
2580         AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
2581         if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
2582                 MANTYPE=doc
2583         elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
2584                 MANTYPE=man
2585         else
2586                 MANTYPE=cat
2587         fi
2588 fi
2589 AC_SUBST(MANTYPE)
2590 if test "$MANTYPE" = "doc"; then
2591         mansubdir=man;
2592 else
2593         mansubdir=$MANTYPE;
2594 fi
2595 AC_SUBST(mansubdir)
2596
2597 # Check whether to enable MD5 passwords
2598 MD5_MSG="no"
2599 AC_ARG_WITH(md5-passwords,
2600         [  --with-md5-passwords    Enable use of MD5 passwords],
2601         [
2602                 if test "x$withval" != "xno" ; then
2603                         AC_DEFINE(HAVE_MD5_PASSWORDS)
2604                         MD5_MSG="yes"
2605                 fi
2606         ]
2607 )
2608
2609 # Whether to disable shadow password support
2610 AC_ARG_WITH(shadow,
2611         [  --without-shadow        Disable shadow password support],
2612         [
2613                 if test "x$withval" = "xno" ; then
2614                         AC_DEFINE(DISABLE_SHADOW)
2615                         disable_shadow=yes
2616                 fi
2617         ]
2618 )
2619
2620 if test -z "$disable_shadow" ; then
2621         AC_MSG_CHECKING([if the systems has expire shadow information])
2622         AC_TRY_COMPILE(
2623         [
2624 #include <sys/types.h>
2625 #include <shadow.h>
2626         struct spwd sp;
2627         ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
2628         [ sp_expire_available=yes ], []
2629         )
2630
2631         if test "x$sp_expire_available" = "xyes" ; then
2632                 AC_MSG_RESULT(yes)
2633                 AC_DEFINE(HAS_SHADOW_EXPIRE)
2634         else
2635                 AC_MSG_RESULT(no)
2636         fi
2637 fi
2638
2639 # Use ip address instead of hostname in $DISPLAY
2640 if test ! -z "$IPADDR_IN_DISPLAY" ; then
2641         DISPLAY_HACK_MSG="yes"
2642         AC_DEFINE(IPADDR_IN_DISPLAY)
2643 else
2644         DISPLAY_HACK_MSG="no"
2645         AC_ARG_WITH(ipaddr-display,
2646                 [  --with-ipaddr-display   Use ip address instead of hostname in \$DISPLAY],
2647                 [
2648                         if test "x$withval" != "xno" ; then
2649                                 AC_DEFINE(IPADDR_IN_DISPLAY)
2650                                 DISPLAY_HACK_MSG="yes"
2651                         fi
2652                 ]
2653         )
2654 fi
2655
2656 # check for /etc/default/login and use it if present.
2657 AC_ARG_ENABLE(etc-default-login,
2658         [  --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
2659         [ if test "x$enableval" = "xno"; then
2660                 AC_MSG_NOTICE([/etc/default/login handling disabled])
2661                 etc_default_login=no
2662           else
2663                 etc_default_login=yes
2664           fi ],
2665         [ etc_default_login=yes ]
2666 )
2667
2668 if test "x$etc_default_login" != "xno"; then
2669         AC_CHECK_FILE("/etc/default/login",
2670             [ external_path_file=/etc/default/login ])
2671         if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
2672         then
2673                 AC_MSG_WARN([cross compiling: Disabling /etc/default/login test])
2674         elif test "x$external_path_file" = "x/etc/default/login"; then
2675                 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN)
2676         fi
2677 fi
2678
2679 dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
2680 if test $ac_cv_func_login_getcapbool = "yes" -a \
2681         $ac_cv_header_login_cap_h = "yes" ; then
2682         external_path_file=/etc/login.conf
2683 fi
2684
2685 # Whether to mess with the default path
2686 SERVER_PATH_MSG="(default)"
2687 AC_ARG_WITH(default-path,
2688         [  --with-default-path=    Specify default \$PATH environment for server],
2689         [
2690                 if test "x$external_path_file" = "x/etc/login.conf" ; then
2691                         AC_MSG_WARN([
2692 --with-default-path=PATH has no effect on this system.
2693 Edit /etc/login.conf instead.])
2694                 elif test "x$withval" != "xno" ; then
2695                         if test ! -z "$external_path_file" ; then
2696                                 AC_MSG_WARN([
2697 --with-default-path=PATH will only be used if PATH is not defined in
2698 $external_path_file .])
2699                         fi
2700                         user_path="$withval"
2701                         SERVER_PATH_MSG="$withval"
2702                 fi
2703         ],
2704         [ if test "x$external_path_file" = "x/etc/login.conf" ; then
2705                 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
2706         else
2707                 if test ! -z "$external_path_file" ; then
2708                         AC_MSG_WARN([
2709 If PATH is defined in $external_path_file, ensure the path to scp is included,
2710 otherwise scp will not work.])
2711                 fi
2712                 AC_TRY_RUN(
2713                         [
2714 /* find out what STDPATH is */
2715 #include <stdio.h>
2716 #ifdef HAVE_PATHS_H
2717 # include <paths.h>
2718 #endif
2719 #ifndef _PATH_STDPATH
2720 # ifdef _PATH_USERPATH  /* Irix */
2721 #  define _PATH_STDPATH _PATH_USERPATH
2722 # else
2723 #  define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
2724 # endif
2725 #endif
2726 #include <sys/types.h>
2727 #include <sys/stat.h>
2728 #include <fcntl.h>
2729 #define DATA "conftest.stdpath"
2730
2731 main()
2732 {
2733         FILE *fd;
2734         int rc;
2735
2736         fd = fopen(DATA,"w");
2737         if(fd == NULL)
2738                 exit(1);
2739
2740         if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
2741                 exit(1);
2742
2743         exit(0);
2744 }
2745                 ], [ user_path=`cat conftest.stdpath` ],
2746                 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
2747                 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
2748         )
2749 # make sure $bindir is in USER_PATH so scp will work
2750                 t_bindir=`eval echo ${bindir}`
2751                 case $t_bindir in
2752                         NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
2753                 esac
2754                 case $t_bindir in
2755                         NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
2756                 esac
2757                 echo $user_path | grep ":$t_bindir"  > /dev/null 2>&1
2758                 if test $? -ne 0  ; then
2759                         echo $user_path | grep "^$t_bindir"  > /dev/null 2>&1
2760                         if test $? -ne 0  ; then
2761                                 user_path=$user_path:$t_bindir
2762                                 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
2763                         fi
2764                 fi
2765         fi ]
2766 )
2767 if test "x$external_path_file" != "x/etc/login.conf" ; then
2768         AC_DEFINE_UNQUOTED(USER_PATH, "$user_path")
2769         AC_SUBST(user_path)
2770 fi
2771
2772 # Set superuser path separately to user path
2773 AC_ARG_WITH(superuser-path,
2774         [  --with-superuser-path=  Specify different path for super-user],
2775         [
2776                 if test "x$withval" != "xno" ; then
2777                         AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval")
2778                         superuser_path=$withval
2779                 fi
2780         ]
2781 )
2782
2783
2784 AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
2785 IPV4_IN6_HACK_MSG="no"
2786 AC_ARG_WITH(4in6,
2787         [  --with-4in6             Check for and convert IPv4 in IPv6 mapped addresses],
2788         [
2789                 if test "x$withval" != "xno" ; then
2790                         AC_MSG_RESULT(yes)
2791                         AC_DEFINE(IPV4_IN_IPV6)
2792                         IPV4_IN6_HACK_MSG="yes"
2793                 else
2794                         AC_MSG_RESULT(no)
2795                 fi
2796         ],[
2797                 if test "x$inet6_default_4in6" = "xyes"; then
2798                         AC_MSG_RESULT([yes (default)])
2799                         AC_DEFINE(IPV4_IN_IPV6)
2800                         IPV4_IN6_HACK_MSG="yes"
2801                 else
2802                         AC_MSG_RESULT([no (default)])
2803                 fi
2804         ]
2805 )
2806
2807 # Whether to enable BSD auth support
2808 BSD_AUTH_MSG=no
2809 AC_ARG_WITH(bsd-auth,
2810         [  --with-bsd-auth         Enable BSD auth support],
2811         [
2812                 if test "x$withval" != "xno" ; then
2813                         AC_DEFINE(BSD_AUTH)
2814                         BSD_AUTH_MSG=yes
2815                 fi
2816         ]
2817 )
2818
2819 # Where to place sshd.pid
2820 piddir=/var/run
2821 # make sure the directory exists
2822 if test ! -d $piddir ; then
2823         piddir=`eval echo ${sysconfdir}`
2824         case $piddir in
2825                 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
2826         esac
2827 fi
2828
2829 AC_ARG_WITH(pid-dir,
2830         [  --with-pid-dir=PATH     Specify location of ssh.pid file],
2831         [
2832                 if test "x$withval" != "xno" ; then
2833                         piddir=$withval
2834                         if test ! -d $piddir ; then
2835                         AC_MSG_WARN([** no $piddir directory on this system **])
2836                         fi
2837                 fi
2838         ]
2839 )
2840
2841 AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir")
2842 AC_SUBST(piddir)
2843
2844 dnl allow user to disable some login recording features
2845 AC_ARG_ENABLE(lastlog,
2846         [  --disable-lastlog       disable use of lastlog even if detected [no]],
2847         [
2848                 if test "x$enableval" = "xno" ; then
2849                         AC_DEFINE(DISABLE_LASTLOG)
2850                 fi
2851         ]
2852 )
2853 AC_ARG_ENABLE(utmp,
2854         [  --disable-utmp          disable use of utmp even if detected [no]],
2855         [
2856                 if test "x$enableval" = "xno" ; then
2857                         AC_DEFINE(DISABLE_UTMP)
2858                 fi
2859         ]
2860 )
2861 AC_ARG_ENABLE(utmpx,
2862         [  --disable-utmpx         disable use of utmpx even if detected [no]],
2863         [
2864                 if test "x$enableval" = "xno" ; then
2865                         AC_DEFINE(DISABLE_UTMPX)
2866                 fi
2867         ]
2868 )
2869 AC_ARG_ENABLE(wtmp,
2870         [  --disable-wtmp          disable use of wtmp even if detected [no]],
2871         [
2872                 if test "x$enableval" = "xno" ; then
2873                         AC_DEFINE(DISABLE_WTMP)
2874                 fi
2875         ]
2876 )
2877 AC_ARG_ENABLE(wtmpx,
2878         [  --disable-wtmpx         disable use of wtmpx even if detected [no]],
2879         [
2880                 if test "x$enableval" = "xno" ; then
2881                         AC_DEFINE(DISABLE_WTMPX)
2882                 fi
2883         ]
2884 )
2885 AC_ARG_ENABLE(libutil,
2886         [  --disable-libutil       disable use of libutil (login() etc.) [no]],
2887         [
2888                 if test "x$enableval" = "xno" ; then
2889                         AC_DEFINE(DISABLE_LOGIN)
2890                 fi
2891         ]
2892 )
2893 AC_ARG_ENABLE(pututline,
2894         [  --disable-pututline     disable use of pututline() etc. ([uw]tmp) [no]],
2895         [
2896                 if test "x$enableval" = "xno" ; then
2897                         AC_DEFINE(DISABLE_PUTUTLINE)
2898                 fi
2899         ]
2900 )
2901 AC_ARG_ENABLE(pututxline,
2902         [  --disable-pututxline    disable use of pututxline() etc. ([uw]tmpx) [no]],
2903         [
2904                 if test "x$enableval" = "xno" ; then
2905                         AC_DEFINE(DISABLE_PUTUTXLINE)
2906                 fi
2907         ]
2908 )
2909 AC_ARG_WITH(lastlog,
2910   [  --with-lastlog=FILE|DIR specify lastlog location [common locations]],
2911         [
2912                 if test "x$withval" = "xno" ; then
2913                         AC_DEFINE(DISABLE_LASTLOG)
2914                 else
2915                         conf_lastlog_location=$withval
2916                 fi
2917         ]
2918 )
2919
2920 dnl lastlog, [uw]tmpx? detection
2921 dnl  NOTE: set the paths in the platform section to avoid the
2922 dnl   need for command-line parameters
2923 dnl lastlog and [uw]tmp are subject to a file search if all else fails
2924
2925 dnl lastlog detection
2926 dnl  NOTE: the code itself will detect if lastlog is a directory
2927 AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
2928 AC_TRY_COMPILE([
2929 #include <sys/types.h>
2930 #include <utmp.h>
2931 #ifdef HAVE_LASTLOG_H
2932 #  include <lastlog.h>
2933 #endif
2934 #ifdef HAVE_PATHS_H
2935 #  include <paths.h>
2936 #endif
2937 #ifdef HAVE_LOGIN_H
2938 # include <login.h>
2939 #endif
2940         ],
2941         [ char *lastlog = LASTLOG_FILE; ],
2942         [ AC_MSG_RESULT(yes) ],
2943         [
2944                 AC_MSG_RESULT(no)
2945                 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
2946                 AC_TRY_COMPILE([
2947 #include <sys/types.h>
2948 #include <utmp.h>
2949 #ifdef HAVE_LASTLOG_H
2950 #  include <lastlog.h>
2951 #endif
2952 #ifdef HAVE_PATHS_H
2953 #  include <paths.h>
2954 #endif
2955                 ],
2956                 [ char *lastlog = _PATH_LASTLOG; ],
2957                 [ AC_MSG_RESULT(yes) ],
2958                 [
2959                         AC_MSG_RESULT(no)
2960                         system_lastlog_path=no
2961                 ])
2962         ]
2963 )
2964
2965 if test -z "$conf_lastlog_location"; then
2966         if test x"$system_lastlog_path" = x"no" ; then
2967                 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
2968                                 if (test -d "$f" || test -f "$f") ; then
2969                                         conf_lastlog_location=$f
2970                                 fi
2971                 done
2972                 if test -z "$conf_lastlog_location"; then
2973                         AC_MSG_WARN([** Cannot find lastlog **])
2974                         dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
2975                 fi
2976         fi
2977 fi
2978
2979 if test -n "$conf_lastlog_location"; then
2980         AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location")
2981 fi
2982
2983 dnl utmp detection
2984 AC_MSG_CHECKING([if your system defines UTMP_FILE])
2985 AC_TRY_COMPILE([
2986 #include <sys/types.h>
2987 #include <utmp.h>
2988 #ifdef HAVE_PATHS_H
2989 #  include <paths.h>
2990 #endif
2991         ],
2992         [ char *utmp = UTMP_FILE; ],
2993         [ AC_MSG_RESULT(yes) ],
2994         [ AC_MSG_RESULT(no)
2995           system_utmp_path=no ]
2996 )
2997 if test -z "$conf_utmp_location"; then
2998         if test x"$system_utmp_path" = x"no" ; then
2999                 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3000                         if test -f $f ; then
3001                                 conf_utmp_location=$f
3002                         fi
3003                 done
3004                 if test -z "$conf_utmp_location"; then
3005                         AC_DEFINE(DISABLE_UTMP)
3006                 fi
3007         fi
3008 fi
3009 if test -n "$conf_utmp_location"; then
3010         AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location")
3011 fi
3012
3013 dnl wtmp detection
3014 AC_MSG_CHECKING([if your system defines WTMP_FILE])
3015 AC_TRY_COMPILE([
3016 #include <sys/types.h>
3017 #include <utmp.h>
3018 #ifdef HAVE_PATHS_H
3019 #  include <paths.h>
3020 #endif
3021         ],
3022         [ char *wtmp = WTMP_FILE; ],
3023         [ AC_MSG_RESULT(yes) ],
3024         [ AC_MSG_RESULT(no)
3025           system_wtmp_path=no ]
3026 )
3027 if test -z "$conf_wtmp_location"; then
3028         if test x"$system_wtmp_path" = x"no" ; then
3029                 for f in /usr/adm/wtmp /var/log/wtmp; do
3030                         if test -f $f ; then
3031                                 conf_wtmp_location=$f
3032                         fi
3033                 done
3034                 if test -z "$conf_wtmp_location"; then
3035                         AC_DEFINE(DISABLE_WTMP)
3036                 fi
3037         fi
3038 fi
3039 if test -n "$conf_wtmp_location"; then
3040         AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location")
3041 fi
3042
3043
3044 dnl utmpx detection - I don't know any system so perverse as to require
3045 dnl  utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3046 dnl  there, though.
3047 AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3048 AC_TRY_COMPILE([
3049 #include <sys/types.h>
3050 #include <utmp.h>
3051 #ifdef HAVE_UTMPX_H
3052 #include <utmpx.h>
3053 #endif
3054 #ifdef HAVE_PATHS_H
3055 #  include <paths.h>
3056 #endif
3057         ],
3058         [ char *utmpx = UTMPX_FILE; ],
3059         [ AC_MSG_RESULT(yes) ],
3060         [ AC_MSG_RESULT(no)
3061           system_utmpx_path=no ]
3062 )
3063 if test -z "$conf_utmpx_location"; then
3064         if test x"$system_utmpx_path" = x"no" ; then
3065                 AC_DEFINE(DISABLE_UTMPX)
3066         fi
3067 else
3068         AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location")
3069 fi
3070
3071 dnl wtmpx detection
3072 AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3073 AC_TRY_COMPILE([
3074 #include <sys/types.h>
3075 #include <utmp.h>
3076 #ifdef HAVE_UTMPX_H
3077 #include <utmpx.h>
3078 #endif
3079 #ifdef HAVE_PATHS_H
3080 #  include <paths.h>
3081 #endif
3082         ],
3083         [ char *wtmpx = WTMPX_FILE; ],
3084         [ AC_MSG_RESULT(yes) ],
3085         [ AC_MSG_RESULT(no)
3086           system_wtmpx_path=no ]
3087 )
3088 if test -z "$conf_wtmpx_location"; then
3089         if test x"$system_wtmpx_path" = x"no" ; then
3090                 AC_DEFINE(DISABLE_WTMPX)
3091         fi
3092 else
3093         AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location")
3094 fi
3095
3096
3097 if test ! -z "$blibpath" ; then
3098         LDFLAGS="$LDFLAGS $blibflags$blibpath"
3099         AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
3100 fi
3101
3102 dnl remove pam and dl because they are in $LIBPAM
3103 if test "$PAM_MSG" = yes ; then
3104         LIBS=`echo $LIBS | sed 's/-lpam //'`
3105 fi
3106 if test "$ac_cv_lib_pam_pam_set_item" = yes ; then
3107         LIBS=`echo $LIBS | sed 's/-ldl //'`
3108 fi
3109
3110 AC_EXEEXT
3111 AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openbsd-compat/Makefile \
3112         scard/Makefile ssh_prng_cmds survey.sh])
3113 AC_OUTPUT
3114
3115 # Print summary of options
3116
3117 # Someone please show me a better way :)
3118 A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3119 B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3120 C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3121 D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
3122 E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
3123 F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
3124 G=`eval echo ${piddir}` ; G=`eval echo ${G}`
3125 H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3126 I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3127 J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
3128
3129 echo ""
3130 echo "OpenSSH has been configured with the following options:"
3131 echo "                     User binaries: $B"
3132 echo "                   System binaries: $C"
3133 echo "               Configuration files: $D"
3134 echo "                   Askpass program: $E"
3135 echo "                      Manual pages: $F"
3136 echo "                          PID file: $G"
3137 echo "  Privilege separation chroot path: $H"
3138 if test "x$external_path_file" = "x/etc/login.conf" ; then
3139 echo "   At runtime, sshd will use the path defined in $external_path_file"
3140 echo "   Make sure the path to scp is present, otherwise scp will not work"
3141 else
3142 echo "            sshd default user PATH: $I"
3143         if test ! -z "$external_path_file"; then
3144 echo "   (If PATH is set in $external_path_file it will be used instead. If"
3145 echo "   used, ensure the path to scp is present, otherwise scp will not work.)"
3146         fi
3147 fi
3148 if test ! -z "$superuser_path" ; then
3149 echo "          sshd superuser user PATH: $J"
3150 fi
3151 echo "                    Manpage format: $MANTYPE"
3152 echo "                       PAM support: $PAM_MSG"
3153 echo "                 KerberosV support: $KRB5_MSG"
3154 echo "                 Smartcard support: $SCARD_MSG"
3155 echo "                     S/KEY support: $SKEY_MSG"
3156 echo "              TCP Wrappers support: $TCPW_MSG"
3157 echo "              MD5 password support: $MD5_MSG"
3158 echo "                   libedit support: $LIBEDIT_MSG"
3159 echo "       IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
3160 echo "           Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3161 echo "                  BSD Auth support: $BSD_AUTH_MSG"
3162 echo "              Random number source: $RAND_MSG"
3163 if test ! -z "$USE_RAND_HELPER" ; then
3164 echo "     ssh-rand-helper collects from: $RAND_HELPER_MSG"
3165 fi
3166
3167 echo ""
3168
3169 echo "              Host: ${host}"
3170 echo "          Compiler: ${CC}"
3171 echo "    Compiler flags: ${CFLAGS}"
3172 echo "Preprocessor flags: ${CPPFLAGS}"
3173 echo "      Linker flags: ${LDFLAGS}"
3174 echo "         Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
3175
3176 echo ""
3177
3178 if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
3179         echo "SVR4 style packages are supported with \"make package\""
3180         echo ""
3181 fi
3182
3183 if test "x$PAM_MSG" = "xyes" ; then
3184         echo "PAM is enabled. You may need to install a PAM control file "
3185         echo "for sshd, otherwise password authentication may fail. "
3186         echo "Example PAM control files can be found in the contrib/ "
3187         echo "subdirectory"
3188         echo ""
3189 fi
3190
3191 if test ! -z "$RAND_HELPER_CMDHASH" ; then
3192         echo "WARNING: you are using the builtin random number collection "
3193         echo "service. Please read WARNING.RNG and request that your OS "
3194         echo "vendor includes kernel-based random number collection in "
3195         echo "future versions of your OS."
3196         echo ""
3197 fi
3198
3199 if test ! -z "$NO_PEERCHECK" ; then
3200         echo "WARNING: the operating system that you are using does not "
3201         echo "appear to support either the getpeereid() API nor the "
3202         echo "SO_PEERCRED getsockopt() option. These facilities are used to "
3203         echo "enforce security checks to prevent unauthorised connections to "
3204         echo "ssh-agent. Their absence increases the risk that a malicious "
3205         echo "user can connect to your agent. "
3206         echo ""
3207 fi
3208
3209 if test "$AUDIT_MODULE" = "bsm" ; then
3210         echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
3211         echo "See the Solaris section in README.platform for details."
3212 fi