1 dnl Process this file with autoconf to produce a configure script.
2 AC_REVISION($Revision$)
4 test -z "$CFLAGS" && CFLAGS="-g"
5 AC_INIT([Heimdal],[7.99.1],[https://github.com/heimdal/heimdal/issues])
6 AC_CONFIG_SRCDIR([kuser/kinit.c])
7 AC_CONFIG_HEADERS(include/config.h)
8 AC_CONFIG_MACRO_DIR([cf])
10 AM_INIT_AUTOMAKE([foreign 1.11])
14 LT_INIT([shared static win32-dll])
17 dnl Checks for programs.
22 AC_CHECK_PROG(CLANG_FORMAT, clang-format, [clang-format], [no])
23 test "$CLANG_FORMAT" = no && CLANG_FORMAT=true
25 m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
27 AC_PREFIX_DEFAULT(/usr/heimdal)
29 test "$sysconfdir" = '${prefix}/etc' && sysconfdir='/etc'
30 test "$localstatedir" = '${prefix}/var' && localstatedir='/var/heimdal'
34 AC_SUBST(CANONICAL_HOST)
43 dnl this is needed to run the configure tests against glibc
45 AC_DEFINE([_GNU_SOURCE], 1,
46 [Define to enable extensions on glibc-based systems such as Linux.])
52 dnl this is needed when der-protos.h or der-private.h has to be generated
54 if ! test -f "$srcdir/lib/asn1/der-protos.h" ||
55 ! test -f "$srcdir/lib/asn1/der-private.h"; then
57 AC_KRB_PERL_MOD(Getopt::Std)
58 AC_KRB_PERL_MOD(File::Compare)
65 AS_IF([$LEX --nounput -V > /dev/null 2>&1 && test $? -eq 0],
66 [AC_SUBST([FLEXNOUNPUTARGS], ["--nounput"])],
67 [AC_SUBST([FLEXNOUNPUTARGS], [""])])
74 libdir="$libdir$abilibdirext"
78 AM_CONDITIONAL(ENABLE_SHARED, test "$enable_shared" = "yes")
83 AC_HELP_STRING([--enable-gcov], [enable gcov code coverage tool]))
84 AM_CONDITIONAL([ENABLE_GCOV], [test "x$enable_gcov" = xyes])
88 dnl Helper bits for cross compiling
91 AM_CONDITIONAL(CROSS_COMPILE, test "${cross_compiling}" = yes)
93 AC_ARG_WITH(cross-tools,
94 AS_HELP_STRING([--with-cross-tools=dir], [use cross tools in dir]),
95 [if test "$withval" = "yes"; then
96 AC_MSG_ERROR([Need path to cross tools])
98 with_cross_tools="${with_cross_tools}/"
101 if test "${cross_compiling}" != yes ; then
103 ASN1_COMPILE="\$(top_builddir)/lib/asn1/asn1_compile\$(EXEEXT)"
104 SLC="\$(top_builddir)/lib/sl/slc"
106 ASN1_COMPILE_DEP="\$(ASN1_COMPILE)"
109 ASN1_COMPILE="${with_cross_tools}asn1_compile"
110 SLC="${with_cross_tools}slc"
115 ac_cv_prog_COMPILE_ET=${with_cross_tools}compile_et
119 AX_CHECK_COMPILE_FLAG([-Wno-error=enum-conversion],
120 [WFLAGS_ENUM_CONV=-Wno-error=enum-conversion],
121 [WFLAGS_ENUM_CONV=], [-Werror])
122 AX_CHECK_COMPILE_FLAG([-Wno-unused-but-set-variable],
123 [WFLAGS_UNUSED_BUT_SET_VAR=-Wno-unused-but-set-variable],
124 [WFLAGS_UNUSED_BUT_SET_VAR=], [-Werror])
126 AC_SUBST([WFLAGS_ENUM_CONV])
127 AC_SUBST([ASN1_COMPILE])
128 AC_SUBST([ASN1_COMPILE_DEP])
134 AC_DEFINE(HEIM_WEAK_CRYPTO, 1, [Define if you want support for weak crypto])
136 rk_TEST_PACKAGE(openldap,
139 [-lldap -llber],,,OPENLDAP)
140 AM_CONDITIONAL(OPENLDAP, test "$with_openldap" != "no")
142 AC_ARG_ENABLE(hdb-openldap-module,
143 AS_HELP_STRING([--enable-hdb-openldap-module],
144 [if you want support to build openldap hdb as shared object]))
145 if test "$enable_hdb_openldap_module" = yes -a "$with_openldap" = yes; then
146 AC_DEFINE(OPENLDAP_MODULE, 1, [Define if you want support for hdb ldap module])
148 AM_CONDITIONAL(OPENLDAP_MODULE, test "$enable_hdb_openldap_module" = yes -a "$with_openldap" = yes)
150 AC_ARG_ENABLE(asn1-templating,
151 AS_HELP_STRING([--disable-asn1-templating],
152 [if you want disable to use of the ASN.1 templating compiler]))
153 AM_CONDITIONAL(ASN1_TEMPLATING, test "x$enable_asn1_templating" != xno)
156 dnl Optional modules, pk-init, digest, kx509
159 AC_ARG_ENABLE(pk-init,
160 AS_HELP_STRING([--disable-pk-init],
161 [if you want disable to PK-INIT support]))
162 if test "$enable_pk_init" != no ;then
163 AC_DEFINE([PKINIT], 1, [Define to enable PKINIT.])
165 AM_CONDITIONAL(PKINIT, test "$enable_pk_init" != no)
167 AC_ARG_ENABLE(digest,
168 AS_HELP_STRING([--disable-digest],
169 [if you want disable to DIGEST support]))
170 if test "$enable_digest" != no ;then
171 AC_DEFINE([DIGEST], 1, [Define to enable DIGEST.])
175 AS_HELP_STRING([--disable-kx509],
176 [if you want disable to kx509 support]))
177 if test "$enable_kx509" != no ;then
178 AC_DEFINE([KX509], 1, [Define to enable kx509.])
181 dnl Need to test if pkg-config exists
186 AC_HELP_STRING([--with-capng], [use libcap-ng to drop KDC privileges @<:@default=check@:>@]),
189 if test "$with_capng" != "no"; then
190 PKG_CHECK_MODULES([CAPNG], [libcap-ng >= 0.4.0],
191 [with_capng=yes],[with_capng=no])
193 if test "$with_capng" = "yes"; then
194 AC_DEFINE_UNQUOTED([HAVE_CAPNG], 1, [whether capng is available for privilege reduction])
196 AM_CONDITIONAL([HAVE_CAPNG], [test "$with_capng" != "no"])
197 AC_SUBST([CAPNG_CFLAGS])
198 AC_SUBST([CAPNG_LIBS])
201 AC_ARG_WITH([microhttpd],
202 AC_HELP_STRING([--with-microhttpd], [use microhttpd to serve KDC REST API @<:@default=check@:>@]),
204 [with_microhttpd=check])
205 if test "$with_microhttpd" != "no"; then
206 PKG_CHECK_MODULES([MICROHTTPD], [libmicrohttpd >= 0.9.37],
207 [with_microhttpd=yes],[with_microhttpd=no])
209 if test "$with_microhttpd" = "yes"; then
210 AC_DEFINE_UNQUOTED([HAVE_MICROHTTPD], 1, [whether libmicrohttpd is available for KDC REST API])
212 AM_CONDITIONAL([HAVE_MICROHTTPD], [test "$with_microhttpd" != "no"])
213 AC_SUBST([MICROHTTPD_CFLAGS])
214 AC_SUBST([MICROHTTPD_LIBS])
218 AC_HELP_STRING([--with-cjwt], [(Experimental) use cjwt to validate JWT tokens @<:@default=check@:>@]),
221 if test "$with_cjwt" != "no"; then
222 PKG_CHECK_MODULES([CJWT], [libcjwt >= 1.0.0],
223 [with_cjwt=yes],[with_cjwt=no])
225 if test "$with_cjwt" = "yes"; then
226 AC_DEFINE_UNQUOTED([HAVE_CJWT], 1, [whether libcjwt is available for KDC REST API])
228 AM_CONDITIONAL([HAVE_CJWT], [test "$with_cjwt" != "no"])
229 AC_SUBST([CJWT_CFLAGS])
230 AC_SUBST([CJWT_LIBS])
234 AC_HELP_STRING([--with-cjson], [(Experimental) use cJSON to extract private claims from JWT tokens @<:@default=check@:>@]),
237 if test "$with_cjson" != "no"; then
238 PKG_CHECK_MODULES([CJSON], [libcjson >= 1.0.0],
239 [with_cjson=yes],[with_cjson=no])
241 if test "$with_cjson" = "yes"; then
242 AC_DEFINE_UNQUOTED([HAVE_CJSON], 1, [whether libcjson is available for KDC REST API])
244 AM_CONDITIONAL([HAVE_CJSON], [test "$with_cjson" != "no"])
245 AC_SUBST([CJSON_CFLAGS])
246 AC_SUBST([CJSON_LIBS])
249 rk_TEST_PACKAGE(sqlite3,
250 [#include <sqlite3.h>
251 #ifndef SQLITE_OPEN_CREATE
254 [-lsqlite3],,,SQLITE3)
256 if test "X$with_sqlite3" != Xyes ; then
257 INCLUDE_sqlite3="-I\$(top_srcdir)/lib/sqlite"
258 LIB_sqlite3="\$(top_builddir)/lib/sqlite/libheimsqlite.la"
260 AM_CONDITIONAL(SQLITE3, test "X$with_sqlite3" = Xyes)
262 AC_DEFINE(HAVE_SQLITE3, 1, [Define if you want support for sqlite in Heimdal.])
264 AC_ARG_ENABLE(sqlite-cache,
265 AS_HELP_STRING([--disable-sqlite-cache],[if you want support for cache in sqlite]))
266 if test "$enable_sqlite_cache" != no; then
267 AC_DEFINE(HAVE_SCC, 1, [Define if you want support for cache in sqlite.])
269 AM_CONDITIONAL(have_scc, test "$enable_sqlite_cache" != no)
272 dnl check for libintl
273 rk_TEST_PACKAGE(libintl,
274 [#include <libintl.h>],
277 dnl path where the hdb directory is stored
278 AC_ARG_WITH([hdbdir],
279 [AS_HELP_STRING([--with-hdbdir],[Default location for KDC database @<:@default=/var/heimdal@:>@])],
281 [with_hdbdir=/var/heimdal])
282 DIR_hdbdir="$with_hdbdir"
283 AC_SUBST([DIR_hdbdir])
286 AM_CONDITIONAL(KRB5, true)
287 AM_CONDITIONAL(do_roken_rename, true)
289 AC_DEFINE(SUPPORT_INETD, 1, [Enable use of inetd style startup.])dnl
292 AC_DEFINE(KRB5, 1, [Enable Kerberos 5 support in applications.])dnl
300 AS_HELP_STRING([--enable-dce],[if you want support for DCE/DFS PAG's]))
301 if test "$enable_dce" = yes; then
302 AC_DEFINE(DCE, 1, [Define if you want support for DCE/DFS PAG's.])
304 AM_CONDITIONAL(DCE, test "$enable_dce" = yes)
306 ## XXX quite horrible:
307 if test -f /etc/ibmcxx.cfg; then
308 dpagaix_ldadd=`sed -n '/^xlc_r4/,/^$/p' /etc/ibmcxx.cfg | sed -n -e '/libraries/{;s/^[[^=]]*=\(.*\)/\1/;s/,/ /gp;}'`
309 dpagaix_cflags=`sed -n '/^xlc_r4/,/^$/p' /etc/ibmcxx.cfg | sed -n -e '/options/{;s/^[[^=]]*=\(.*\)/\1/;s/-q[^,]*//;s/,/ /gp;}'`
312 dpagaix_cflags="-D_THREAD_SAFE -D_AIX_PTHREADS_D7 -D_AIX32_THREADS=1 -D_AES_SOURCE -D_AIX41 -I/usr/include/dce"
313 dpagaix_ldadd="-L/usr/lib/threads -ldcelibc_r -ldcepthreads -lpthreads_compat lpthreads -lc_r"
314 dpagaix_ldflags="-Wl,-bI:dfspag.exp"
316 AC_SUBST(dpagaix_cflags)
317 AC_SUBST(dpagaix_ldadd)
318 AC_SUBST(dpagaix_ldflags)
320 AC_ARG_ENABLE([afs-support],
321 AS_HELP_STRING([--disable-afs-support],[if you don't want support for AFS]))
322 if test "$enable_afs_support" = no; then
323 AC_DEFINE(NO_AFS, 1, [Define if you don't wan't support for AFS.])
327 AM_CONDITIONAL(NO_AFS, test "$enable_afs_support" = no)
331 dnl AC_ROKEN(10,[/usr/heimdal /usr/athena],[lib/roken],[$(top_builddir)/lib/roken/libroken.la],[-I$(top_builddir)/lib/roken -I$(top_srcdir)/lib/roken])
334 LIBADD_roken="$LIB_roken"
335 AC_SUBST(LIBADD_roken)dnl
336 LIB_roken="\$(top_builddir)/lib/vers/libvers.la $LIB_roken"
345 AS_HELP_STRING([--disable-mmap],[disable use of mmap]))
346 if test "$enable_mmap" = "no"; then
347 AC_DEFINE(NO_MMAP, 1, [Define if you don't want to use mmap.])
350 AC_ARG_ENABLE(afs-string-to-key,
351 AS_HELP_STRING([--disable-afs-string-to-key],
352 [disable use of weak AFS string-to-key functions]),
353 [], [enable_afs_string_to_key=yes])
355 if test "$enable_afs_string_to_key" = "yes"; then
356 AC_DEFINE(ENABLE_AFS_STRING_TO_KEY, 1, [Define if want to use the weak AFS string to key functions.])
357 ENABLE_AFS_STRING_TO_KEY=1
359 AC_SUBST(ENABLE_AFS_STRING_TO_KEY)dnl
364 rk_TEST_PACKAGE(readline,
366 #if defined(HAVE_READLINE_READLINE_H)
367 #include <readline/readline.h>
368 #elif defined(HAVE_READLINE_H)
369 #include <readline.h>
371 ],-lreadline,,, READLINE,, [readline.h readline/readline.h])
373 rk_TEST_PACKAGE(libedit,
375 #if defined(HAVE_READLINE_READLINE_H)
376 #include <readline/readline.h>
377 #elif defined(HAVE_READLINE_H)
378 #include <readline.h>
379 #elif defined(HAVE_EDITLINE_READLINE_H)
380 #include <editline/readline.h>
382 ],-ledit,,, READLINE,, [readline.h readline/readline.h editline/readline.h])
384 AC_CONFIG_SUBDIRS([lib/libedit])
391 dnl Checks for typedefs, structures, and compiler characteristics.
394 AC_CHECK_TYPE_EXTRA(mode_t, unsigned short, [])
395 AC_CHECK_TYPE_EXTRA(sig_atomic_t, int, [#include <signal.h>])
396 AC_HAVE_TYPE([long long])
400 dnl Checks for header files.
404 CommonCrypto/CommonDigest.h \
405 CommonCrypto/CommonCryptor.h \
420 netinet/in6_machtypes.h \
461 dnl On Solaris 8 there's a compilation warning for term.h because
462 dnl it doesn't define `bool'.
463 AC_CHECK_HEADERS(term.h, , , -)
465 dnl aix have asl.h (A/IX screen library) that we don't want
466 AC_CHECK_HEADERS(asl.h, , , [
468 #ifndef ASL_STRING_EMERG
469 #error ASL_STRING_EMERG missing
472 AC_CHECK_HEADERS(net/if.h, , , [AC_INCLUDES_DEFAULT
473 #if HAVE_SYS_SOCKET_H
474 #include <sys/socket.h>
477 AC_CHECK_HEADERS(sys/ptyvar.h, , , [AC_INCLUDES_DEFAULT
482 AC_CHECK_HEADERS(sys/strtty.h, , , [AC_INCLUDES_DEFAULT
486 #if HAVE_SYS_STREAM_H
487 #include <sys/stream.h>
490 AC_CHECK_HEADERS(sys/ucred.h, , , [AC_INCLUDES_DEFAULT
492 #include <sys/types.h>
495 #include <sys/param.h>
498 AC_CHECK_HEADERS(security/pam_modules.h, , , [AC_INCLUDES_DEFAULT
499 #include <security/pam_appl.h>
503 rk_WIN32_EXPORT(BUILD_KRB5_LIB, KRB5_LIB)
504 rk_WIN32_EXPORT(BUILD_ROKEN_LIB, ROKEN_LIB)
505 rk_WIN32_EXPORT(BUILD_GSSAPI_LIB, GSSAPI_LIB)
506 rk_WIN32_EXPORT(BUILD_KDC_LIB, KDC_LIB)
508 dnl Deal with switch FALLTHROUGH
510 #if defined(__GNUC__)
512 # define fallthrough __attribute__((fallthrough))
514 # define fallthrough do {} while (0) /* fallthrough */
517 # define fallthrough do {} while (0) /* fallthrough */
521 dnl Checks for libraries.
523 AC_FIND_FUNC_NO_LIBS(openpty, util,[
529 AC_FIND_FUNC_NO_LIBS(tgetent, termcap ncurses curses tinfo,[
530 #ifdef HAVE_TERMCAP_H
538 dnl Checks for library functions.
566 AC_MSG_CHECKING([checking for __sync_add_and_fetch])
567 AC_LINK_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h>]],
568 [[unsigned int foo, bar; bar = __sync_add_and_fetch(&foo, 1);]])],
569 [ac_rk_have___sync_add_and_fetch=yes], [ac_rk_have___sync_add_and_fetch=no])
570 if test "$ac_rk_have___sync_add_and_fetch" = "yes" ; then
571 AC_DEFINE_UNQUOTED(HAVE___SYNC_ADD_AND_FETCH, 1, [have __sync_add_and_fetch])
573 AC_MSG_RESULT($ac_rk_have___sync_add_and_fetch)
579 AC_CHECK_GETPWNAM_R_POSIX
580 AC_CHECK_GETPWUID_R_POSIX
582 dnl detect doors on solaris
583 if test "$enable_pthread_support" != no; then
585 LIBS="$LIBS $PTHREADS_LIBS"
586 AC_FIND_FUNC_NO_LIBS(door_create, door)
591 AS_HELP_STRING([--enable-kcm],[enable Kerberos Credentials Manager]),
594 if test "$enable_kcm" = yes ; then
595 if test "$ac_cv_header_sys_un_h" != yes -a "$ac_cv_funclib_door_create" != yes ; then
599 if test "$enable_kcm" = yes; then
600 AC_DEFINE(HAVE_KCM, 1,
601 [Define if you want to use the Kerberos Credentials Manager.])
603 AM_CONDITIONAL(KCM, test "$enable_kcm" = yes)
605 dnl detect keyring on Linux
606 if test "$ac_cv_header_keyutils_h" = yes; then
607 AC_CHECK_SIZEOF([key_serial_t],,[
608 #ifdef HAVE_INTTYPES_H
609 #include <inttypes.h>
611 #ifdef HAVE_SYS_TYPES_H
612 #include <sys/types.h>
614 #include <keyutils.h>
618 AC_FIND_FUNC_NO_LIBS(add_key, keyutils)
619 if test -n "$LIB_add_key"; then
621 LIBS="$LIBS $LIB_add_key"
622 AC_CHECK_FUNCS(keyctl_get_persistent)
625 AM_CONDITIONAL(HAVE_KEYUTILS, test "$ac_cv_func_keyctl_get_persistent" = yes)
627 AC_CHECK_SIZEOF([time_t])
629 AC_CHECK_TYPES([int8_t, int16_t, int32_t, int64_t,
630 u_int8_t, u_int16_t, u_int32_t, u_int64_t,
631 uint8_t, uint16_t, uint32_t, uint64_t],,,[
632 #ifdef HAVE_INTTYPES_H
633 #include <inttypes.h>
635 #ifdef HAVE_SYS_TYPES_H
636 #include <sys/types.h>
638 #ifdef HAVE_SYS_BITYPES_H
639 #include <sys/bitypes.h>
641 #ifdef HAVE_BIND_BITYPES_H
642 #include <bind/bitypes.h>
644 #ifdef HAVE_NETINET_IN6_MACHTYPES_H
645 #include <netinet/in6_machtypes.h>
649 rk_FRAMEWORK_SECURITY
650 rk_FRAMEWORK_COREFOUNDATION
656 dnl Some operating systems already have com_err and compile_et
659 rk_AUTH_MODULES([sia afskauthlib])
663 rk_WFLAGS([-Wall -Wmissing-prototypes -Wpointer-arith -Wbad-function-cast -Wmissing-declarations -Wnested-externs])
666 AH_BOTTOM([#ifdef __APPLE__
667 #include <AvailabilityMacros.h>
670 AH_BOTTOM([#ifdef ROKEN_RENAME
671 #include "roken_rename.h"
674 AC_ARG_ENABLE(heimdal-documentation,
675 AS_HELP_STRING([--disable-heimdal-documentation],
676 [if you want disable to heimdal documentation]))
677 AM_CONDITIONAL(HEIMDAL_DOCUMENTATION, test "$enable_heimdal_documentation" != no)
679 AC_CONFIG_FILES(Makefile \
682 include/gssapi/Makefile \
683 include/hcrypto/Makefile \
684 include/kadm5/Makefile \
688 lib/com_err/Makefile \
689 lib/hcrypto/Makefile \
691 lib/gssapi/Makefile \
702 lib/sqlite/Makefile \
705 lib/gss_preauth/Makefile \
714 appl/afsutil/Makefile \
715 appl/dbutils/Makefile \
716 appl/gssmask/Makefile \
720 appl/dceutils/Makefile \
726 tests/ldap/Makefile \
728 tests/java/Makefile \
729 tests/plugin/Makefile \
731 packages/mac/Makefile \
739 dnl This is the release version name-number[beta]
742 if test -d "$srcdir/.git"; then
743 cat > include/newversion.h.in <<EOF
744 #ifndef VERSION_HIDDEN
745 #define VERSION_HIDDEN
747 VERSION_HIDDEN const char *heimdal_long_version = "@([#])\$Version: $PACKAGE_STRING by @USER@ on @HOST@ @BRANCH@ @TAG@ ($host) @COMMIT@ @DATE@ \$";
748 VERSION_HIDDEN const char *heimdal_version = "AC_PACKAGE_STRING";
751 cat > include/newversion.h.in <<EOF
752 #ifndef VERSION_HIDDEN
753 #define VERSION_HIDDEN
755 VERSION_HIDDEN const char *heimdal_long_version = "@([#])\$Version: $PACKAGE_STRING by @USER@ on @HOST@ ($host) @DATE@ \$";
756 VERSION_HIDDEN const char *heimdal_version = "AC_PACKAGE_STRING";
760 if test -f include/version.h && cmp -s include/newversion.h.in include/version.h.in; then
761 echo "include/version.h is unchanged"
762 rm -f include/newversion.h.in
764 echo "creating include/version.h"
765 if test -n "$SOURCE_DATE_EPOCH"; then
768 date -u -r "$SOURCE_DATE_EPOCH" "+%Y-%m-%dT%H:%M:%SZ" 2>/dev/null ||
770 date -u -d "@${SOURCE_DATE_EPOCH}" 2>/dev/null ||
771 # Illumos -- sorry, no -r/-d here
775 Date=`date -u "+%Y-%m-%dT%H:%M:%SZ"`
777 if test -n "$SOURCE_HOST"; then
782 if test -n "$SOURCE_USER"; then
785 User=${USER:-${LOGNAME:-`id -nu`}}
787 if test -d "$srcdir/.git"; then
788 GitCommit=`cd $srcdir && git rev-parse HEAD`
789 GitBranch=`cd $srcdir && git rev-parse --abbrev-ref HEAD`
790 if test "x$GitBranch" = master; then
791 GitDesc=`cd $srcdir && git describe --all --dirty`
793 GitDesc=`cd $srcdir && \
794 git describe --tags --match 'heimdal-*' --dirty`
797 GitCommit='<commit-unknown>'
798 GitBranch='<branch-unknown>'
799 GitDesc='<tag-unknown>'
801 mv -f include/newversion.h.in include/version.h.in
802 sed -e "s/@HOST@/$Host/" \
803 -e "s;@USER@;$User;" \
804 -e "s;@DATE@;$Date;" \
805 -e "s;@BRANCH@;$GitBranch;" \
806 -e "s;@TAG@;$GitDesc;" \
807 -e "s;@COMMIT@;$GitCommit;" \
808 include/version.h.in > include/version.h