| blob | e48028b7b1d6284ffc4fc12877eeedec2aa68c15 |
1 # $Id: configure.ac,v 1.250 2005/03/07 09:21:37 tim Exp $
2 #
3 # Copyright (c) 1999-2004 Damien Miller
4 #
5 # Permission to use, copy, modify, and distribute this software for any
6 # purpose with or without fee is hereby granted, provided that the above
7 # copyright notice and this permission notice appear in all copies.
8 #
9 # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10 # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11 # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12 # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13 # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14 # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15 # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 AC_INIT(OpenSSH, Portable)
18 AC_CONFIG_SRCDIR([ssh.c])
20 AC_CONFIG_HEADER(config.h)
21 AC_PROG_CC
22 AC_CANONICAL_HOST
23 AC_C_BIGENDIAN
25 # Checks for programs.
26 AC_PROG_AWK
27 AC_PROG_CPP
28 AC_PROG_RANLIB
29 AC_PROG_INSTALL
30 AC_PATH_PROG(AR, ar)
31 AC_PATH_PROG(CAT, cat)
32 AC_PATH_PROG(KILL, kill)
33 AC_PATH_PROGS(PERL, perl5 perl)
34 AC_PATH_PROG(SED, sed)
35 AC_SUBST(PERL)
36 AC_PATH_PROG(ENT, ent)
37 AC_SUBST(ENT)
38 AC_PATH_PROG(TEST_MINUS_S_SH, bash)
39 AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
40 AC_PATH_PROG(TEST_MINUS_S_SH, sh)
41 AC_PATH_PROG(SH, sh)
42 AC_SUBST(TEST_SHELL,sh)
44 dnl for buildpkg.sh
45 AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
46 [/usr/sbin${PATH_SEPARATOR}/etc])
47 AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
48 [/usr/sbin${PATH_SEPARATOR}/etc])
49 AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
51 # System features
52 AC_SYS_LARGEFILE
54 if test -z "$AR" ; then
55 AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
56 fi
58 # Use LOGIN_PROGRAM from environment if possible
59 if test ! -z "$LOGIN_PROGRAM" ; then
60 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM")
61 else
62 # Search for login
63 AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
64 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
65 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
66 fi
67 fi
69 AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
70 if test ! -z "$PATH_PASSWD_PROG" ; then
71 AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG")
72 fi
74 if test -z "$LD" ; then
75 LD=$CC
76 fi
77 AC_SUBST(LD)
79 AC_C_INLINE
80 if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
81 CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wno-uninitialized"
82 fi
84 AC_ARG_WITH(rpath,
85 [ --without-rpath Disable auto-added -R linker paths],
86 [
87 if test "x$withval" = "xno" ; then
88 need_dash_r=""
89 fi
90 if test "x$withval" = "xyes" ; then
91 need_dash_r=1
92 fi
93 ]
94 )
96 # Check for some target-specific stuff
97 case "$host" in
98 *-*-aix*)
99 AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
100 if (test -z "$blibpath"); then
101 blibpath="/usr/lib:/lib"
102 fi
103 saved_LDFLAGS="$LDFLAGS"
104 for tryflags in -blibpath: -Wl,-blibpath: -Wl,-rpath, ;do
105 if (test -z "$blibflags"); then
106 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
107 AC_TRY_LINK([], [], [blibflags=$tryflags])
108 fi
109 done
110 if (test -z "$blibflags"); then
111 AC_MSG_RESULT(not found)
112 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
113 else
114 AC_MSG_RESULT($blibflags)
115 fi
116 LDFLAGS="$saved_LDFLAGS"
117 dnl Check for authenticate. Might be in libs.a on older AIXes
118 AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE)],
119 [AC_CHECK_LIB(s,authenticate,
120 [ AC_DEFINE(WITH_AIXAUTHENTICATE)
121 LIBS="$LIBS -ls"
122 ])
123 ])
124 dnl Check for various auth function declarations in headers.
125 AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
126 passwdexpired], , , [#include <usersec.h>])
127 dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
128 AC_CHECK_DECLS(loginfailed,
129 [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
130 AC_TRY_COMPILE(
131 [#include <usersec.h>],
132 [(void)loginfailed("user","host","tty",0);],
133 [AC_MSG_RESULT(yes)
134 AC_DEFINE(AIX_LOGINFAILED_4ARG)],
135 [AC_MSG_RESULT(no)]
136 )],
137 [],
138 [#include <usersec.h>]
139 )
140 AC_CHECK_FUNCS(setauthdb)
141 check_for_aix_broken_getaddrinfo=1
142 AC_DEFINE(BROKEN_REALPATH)
143 AC_DEFINE(SETEUID_BREAKS_SETUID)
144 AC_DEFINE(BROKEN_SETREUID)
145 AC_DEFINE(BROKEN_SETREGID)
146 dnl AIX handles lastlog as part of its login message
147 AC_DEFINE(DISABLE_LASTLOG)
148 AC_DEFINE(LOGIN_NEEDS_UTMPX)
149 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
150 ;;
151 *-*-cygwin*)
152 check_for_libcrypt_later=1
153 LIBS="$LIBS /usr/lib/textmode.o"
154 AC_DEFINE(HAVE_CYGWIN)
155 AC_DEFINE(USE_PIPES)
156 AC_DEFINE(DISABLE_SHADOW)
157 AC_DEFINE(IP_TOS_IS_BROKEN)
158 AC_DEFINE(NO_X11_UNIX_SOCKETS)
159 AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT)
160 AC_DEFINE(DISABLE_FD_PASSING)
161 ;;
162 *-*-dgux*)
163 AC_DEFINE(IP_TOS_IS_BROKEN)
164 AC_DEFINE(SETEUID_BREAKS_SETUID)
165 AC_DEFINE(BROKEN_SETREUID)
166 AC_DEFINE(BROKEN_SETREGID)
167 ;;
168 *-*-darwin*)
169 AC_MSG_CHECKING(if we have working getaddrinfo)
170 AC_TRY_RUN([#include <mach-o/dyld.h>
171 main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
172 exit(0);
173 else
174 exit(1);
175 }], [AC_MSG_RESULT(working)],
176 [AC_MSG_RESULT(buggy)
177 AC_DEFINE(BROKEN_GETADDRINFO)],
178 [AC_MSG_RESULT(assume it is working)])
179 AC_DEFINE(SETEUID_BREAKS_SETUID)
180 AC_DEFINE(BROKEN_SETREUID)
181 AC_DEFINE(BROKEN_SETREGID)
182 AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1)
183 ;;
184 *-*-hpux10.26)
185 if test -z "$GCC"; then
186 CFLAGS="$CFLAGS -Ae"
187 fi
188 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
189 IPADDR_IN_DISPLAY=yes
190 AC_DEFINE(HAVE_SECUREWARE)
191 AC_DEFINE(USE_PIPES)
192 AC_DEFINE(LOGIN_NO_ENDOPT)
193 AC_DEFINE(LOGIN_NEEDS_UTMPX)
194 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
195 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
196 LIBS="$LIBS -lsec -lsecpw"
197 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
198 disable_ptmx_check=yes
199 ;;
200 *-*-hpux10*)
201 if test -z "$GCC"; then
202 CFLAGS="$CFLAGS -Ae"
203 fi
204 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
205 IPADDR_IN_DISPLAY=yes
206 AC_DEFINE(USE_PIPES)
207 AC_DEFINE(LOGIN_NO_ENDOPT)
208 AC_DEFINE(LOGIN_NEEDS_UTMPX)
209 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
210 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
211 LIBS="$LIBS -lsec"
212 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
213 ;;
214 *-*-hpux11*)
215 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
216 IPADDR_IN_DISPLAY=yes
217 AC_DEFINE(PAM_SUN_CODEBASE)
218 AC_DEFINE(USE_PIPES)
219 AC_DEFINE(LOGIN_NO_ENDOPT)
220 AC_DEFINE(LOGIN_NEEDS_UTMPX)
221 AC_DEFINE(DISABLE_UTMP)
222 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
223 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
224 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
225 check_for_hpux_broken_getaddrinfo=1
226 check_for_conflicting_getspnam=1
227 LIBS="$LIBS -lsec"
228 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
229 ;;
230 *-*-irix5*)
231 PATH="$PATH:/usr/etc"
232 AC_DEFINE(BROKEN_INET_NTOA)
233 AC_DEFINE(SETEUID_BREAKS_SETUID)
234 AC_DEFINE(BROKEN_SETREUID)
235 AC_DEFINE(BROKEN_SETREGID)
236 AC_DEFINE(WITH_ABBREV_NO_TTY)
237 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
238 ;;
239 *-*-irix6*)
240 PATH="$PATH:/usr/etc"
241 AC_DEFINE(WITH_IRIX_ARRAY)
242 AC_DEFINE(WITH_IRIX_PROJECT)
243 AC_DEFINE(WITH_IRIX_AUDIT)
244 AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS)])
245 AC_DEFINE(BROKEN_INET_NTOA)
246 AC_DEFINE(SETEUID_BREAKS_SETUID)
247 AC_DEFINE(BROKEN_SETREUID)
248 AC_DEFINE(BROKEN_SETREGID)
249 AC_DEFINE(BROKEN_UPDWTMPX)
250 AC_DEFINE(WITH_ABBREV_NO_TTY)
251 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
252 ;;
253 *-*-linux*)
254 no_dev_ptmx=1
255 check_for_libcrypt_later=1
256 check_for_openpty_ctty_bug=1
257 AC_DEFINE(DONT_TRY_OTHER_AF)
258 AC_DEFINE(PAM_TTY_KLUDGE)
259 AC_DEFINE(LOCKED_PASSWD_PREFIX, "!")
260 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
261 AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM)
262 AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
263 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
264 inet6_default_4in6=yes
265 case `uname -r` in
266 1.*|2.0.*)
267 AC_DEFINE(BROKEN_CMSG_TYPE)
268 ;;
269 esac
270 ;;
271 mips-sony-bsd|mips-sony-newsos4)
272 AC_DEFINE(HAVE_NEWS4)
273 SONY=1
274 ;;
275 *-*-netbsd*)
276 check_for_libcrypt_before=1
277 if test "x$withval" != "xno" ; then
278 need_dash_r=1
279 fi
280 ;;
281 *-*-freebsd*)
282 check_for_libcrypt_later=1
283 ;;
284 *-*-bsdi*)
285 AC_DEFINE(SETEUID_BREAKS_SETUID)
286 AC_DEFINE(BROKEN_SETREUID)
287 AC_DEFINE(BROKEN_SETREGID)
288 ;;
289 *-next-*)
290 conf_lastlog_location="/usr/adm/lastlog"
291 conf_utmp_location=/etc/utmp
292 conf_wtmp_location=/usr/adm/wtmp
293 MAIL=/usr/spool/mail
294 AC_DEFINE(HAVE_NEXT)
295 AC_DEFINE(BROKEN_REALPATH)
296 AC_DEFINE(USE_PIPES)
297 AC_DEFINE(BROKEN_SAVED_UIDS)
298 ;;
299 *-*-solaris*)
300 if test "x$withval" != "xno" ; then
301 need_dash_r=1
302 fi
303 AC_DEFINE(PAM_SUN_CODEBASE)
304 AC_DEFINE(LOGIN_NEEDS_UTMPX)
305 AC_DEFINE(LOGIN_NEEDS_TERM)
306 AC_DEFINE(PAM_TTY_KLUDGE)
307 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID)
308 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
309 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
310 AC_DEFINE(SSHD_ACQUIRES_CTTY)
311 external_path_file=/etc/default/login
312 # hardwire lastlog location (can't detect it on some versions)
313 conf_lastlog_location="/var/adm/lastlog"
314 AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
315 sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
316 if test "$sol2ver" -ge 8; then
317 AC_MSG_RESULT(yes)
318 AC_DEFINE(DISABLE_UTMP)
319 AC_DEFINE(DISABLE_WTMP)
320 else
321 AC_MSG_RESULT(no)
322 fi
323 ;;
324 *-*-sunos4*)
325 CPPFLAGS="$CPPFLAGS -DSUNOS4"
326 AC_CHECK_FUNCS(getpwanam)
327 AC_DEFINE(PAM_SUN_CODEBASE)
328 conf_utmp_location=/etc/utmp
329 conf_wtmp_location=/var/adm/wtmp
330 conf_lastlog_location=/var/adm/lastlog
331 AC_DEFINE(USE_PIPES)
332 ;;
333 *-ncr-sysv*)
334 LIBS="$LIBS -lc89"
335 AC_DEFINE(USE_PIPES)
336 AC_DEFINE(SSHD_ACQUIRES_CTTY)
337 AC_DEFINE(SETEUID_BREAKS_SETUID)
338 AC_DEFINE(BROKEN_SETREUID)
339 AC_DEFINE(BROKEN_SETREGID)
340 ;;
341 *-sni-sysv*)
342 # /usr/ucblib MUST NOT be searched on ReliantUNIX
343 AC_CHECK_LIB(dl, dlsym, ,)
344 # -lresolv needs to be at then end of LIBS or DNS lookups break
345 AC_CHECK_LIB(res_query, resolv, [ LIBS="$LIBS -lresolv" ])
346 IPADDR_IN_DISPLAY=yes
347 AC_DEFINE(USE_PIPES)
348 AC_DEFINE(IP_TOS_IS_BROKEN)
349 AC_DEFINE(SETEUID_BREAKS_SETUID)
350 AC_DEFINE(BROKEN_SETREUID)
351 AC_DEFINE(BROKEN_SETREGID)
352 AC_DEFINE(SSHD_ACQUIRES_CTTY)
353 external_path_file=/etc/default/login
354 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
355 # Attention: always take care to bind libsocket and libnsl before libc,
356 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
357 ;;
358 # UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
359 *-*-sysv4.2*)
360 AC_DEFINE(USE_PIPES)
361 AC_DEFINE(SETEUID_BREAKS_SETUID)
362 AC_DEFINE(BROKEN_SETREUID)
363 AC_DEFINE(BROKEN_SETREGID)
364 ;;
365 # UnixWare 7.x, OpenUNIX 8
366 *-*-sysv5*)
367 AC_DEFINE(USE_PIPES)
368 AC_DEFINE(SETEUID_BREAKS_SETUID)
369 AC_DEFINE(BROKEN_SETREUID)
370 AC_DEFINE(BROKEN_SETREGID)
371 ;;
372 *-*-sysv*)
373 ;;
374 # SCO UNIX and OEM versions of SCO UNIX
375 *-*-sco3.2v4*)
376 AC_MSG_ERROR("This Platform is no longer supported.")
377 ;;
378 # SCO OpenServer 5.x
379 *-*-sco3.2v5*)
380 if test -z "$GCC"; then
381 CFLAGS="$CFLAGS -belf"
382 fi
383 LIBS="$LIBS -lprot -lx -ltinfo -lm"
384 no_dev_ptmx=1
385 AC_DEFINE(USE_PIPES)
386 AC_DEFINE(HAVE_SECUREWARE)
387 AC_DEFINE(DISABLE_SHADOW)
388 AC_DEFINE(DISABLE_FD_PASSING)
389 AC_DEFINE(SETEUID_BREAKS_SETUID)
390 AC_DEFINE(BROKEN_SETREUID)
391 AC_DEFINE(BROKEN_SETREGID)
392 AC_DEFINE(WITH_ABBREV_NO_TTY)
393 AC_DEFINE(BROKEN_UPDWTMPX)
394 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
395 AC_CHECK_FUNCS(getluid setluid)
396 MANTYPE=man
397 TEST_SHELL=ksh
398 ;;
399 *-*-unicosmk*)
400 AC_DEFINE(NO_SSH_LASTLOG)
401 AC_DEFINE(SETEUID_BREAKS_SETUID)
402 AC_DEFINE(BROKEN_SETREUID)
403 AC_DEFINE(BROKEN_SETREGID)
404 AC_DEFINE(USE_PIPES)
405 AC_DEFINE(DISABLE_FD_PASSING)
406 LDFLAGS="$LDFLAGS"
407 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
408 MANTYPE=cat
409 ;;
410 *-*-unicosmp*)
411 AC_DEFINE(SETEUID_BREAKS_SETUID)
412 AC_DEFINE(BROKEN_SETREUID)
413 AC_DEFINE(BROKEN_SETREGID)
414 AC_DEFINE(WITH_ABBREV_NO_TTY)
415 AC_DEFINE(USE_PIPES)
416 AC_DEFINE(DISABLE_FD_PASSING)
417 LDFLAGS="$LDFLAGS"
418 LIBS="$LIBS -lgen -lacid -ldb"
419 MANTYPE=cat
420 ;;
421 *-*-unicos*)
422 AC_DEFINE(SETEUID_BREAKS_SETUID)
423 AC_DEFINE(BROKEN_SETREUID)
424 AC_DEFINE(BROKEN_SETREGID)
425 AC_DEFINE(USE_PIPES)
426 AC_DEFINE(DISABLE_FD_PASSING)
427 AC_DEFINE(NO_SSH_LASTLOG)
428 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
429 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
430 MANTYPE=cat
431 ;;
432 *-dec-osf*)
433 AC_MSG_CHECKING(for Digital Unix SIA)
434 no_osfsia=""
435 AC_ARG_WITH(osfsia,
436 [ --with-osfsia Enable Digital Unix SIA],
437 [
438 if test "x$withval" = "xno" ; then
439 AC_MSG_RESULT(disabled)
440 no_osfsia=1
441 fi
442 ],
443 )
444 if test -z "$no_osfsia" ; then
445 if test -f /etc/sia/matrix.conf; then
446 AC_MSG_RESULT(yes)
447 AC_DEFINE(HAVE_OSF_SIA)
448 AC_DEFINE(DISABLE_LOGIN)
449 AC_DEFINE(DISABLE_FD_PASSING)
450 LIBS="$LIBS -lsecurity -ldb -lm -laud"
451 else
452 AC_MSG_RESULT(no)
453 AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin")
454 fi
455 fi
456 AC_DEFINE(BROKEN_GETADDRINFO)
457 AC_DEFINE(SETEUID_BREAKS_SETUID)
458 AC_DEFINE(BROKEN_SETREUID)
459 AC_DEFINE(BROKEN_SETREGID)
460 ;;
462 *-*-nto-qnx)
463 AC_DEFINE(USE_PIPES)
464 AC_DEFINE(NO_X11_UNIX_SOCKETS)
465 AC_DEFINE(MISSING_NFDBITS)
466 AC_DEFINE(MISSING_HOWMANY)
467 AC_DEFINE(MISSING_FD_MASK)
468 ;;
469 esac
471 # Allow user to specify flags
472 AC_ARG_WITH(cflags,
473 [ --with-cflags Specify additional flags to pass to compiler],
474 [
475 if test "x$withval" != "xno" ; then
476 CFLAGS="$CFLAGS $withval"
477 fi
478 ]
479 )
480 AC_ARG_WITH(cppflags,
481 [ --with-cppflags Specify additional flags to pass to preprocessor] ,
482 [
483 if test "x$withval" != "xno"; then
484 CPPFLAGS="$CPPFLAGS $withval"
485 fi
486 ]
487 )
488 AC_ARG_WITH(ldflags,
489 [ --with-ldflags Specify additional flags to pass to linker],
490 [
491 if test "x$withval" != "xno" ; then
492 LDFLAGS="$LDFLAGS $withval"
493 fi
494 ]
495 )
496 AC_ARG_WITH(libs,
497 [ --with-libs Specify additional libraries to link with],
498 [
499 if test "x$withval" != "xno" ; then
500 LIBS="$LIBS $withval"
501 fi
502 ]
503 )
505 AC_MSG_CHECKING(compiler and flags for sanity)
506 AC_RUN_IFELSE(
507 [AC_LANG_SOURCE([
508 #include <stdio.h>
509 int main(){exit(0);}
510 ])],
511 [ AC_MSG_RESULT(yes) ],
512 [
513 AC_MSG_RESULT(no)
514 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
515 ],
516 [ AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
517 )
519 # Checks for header files.
520 AC_CHECK_HEADERS(bstring.h crypt.h dirent.h endian.h features.h \
521 floatingpoint.h getopt.h glob.h ia.h lastlog.h limits.h login.h \
522 login_cap.h maillock.h ndir.h netdb.h netgroup.h \
523 netinet/in_systm.h pam/pam_appl.h paths.h pty.h readpassphrase.h \
524 rpc/types.h security/pam_appl.h shadow.h stddef.h stdint.h \
525 strings.h sys/dir.h sys/strtio.h sys/audit.h sys/bitypes.h \
526 sys/bsdtty.h sys/cdefs.h sys/mman.h sys/ndir.h sys/prctl.h \
527 sys/pstat.h sys/select.h sys/stat.h sys/stream.h \
528 sys/stropts.h sys/sysmacros.h sys/time.h sys/timers.h sys/un.h \
529 time.h tmpdir.h ttyent.h usersec.h util.h utime.h utmp.h utmpx.h vis.h)
531 # sys/ptms.h requires sys/stream.h to be included first on Solaris
532 AC_CHECK_HEADERS(sys/ptms.h, [], [], [
533 #ifdef HAVE_SYS_STREAM_H
534 # include <sys/stream.h>
535 #endif
536 ])
538 # Checks for libraries.
539 AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
540 AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
542 dnl IRIX and Solaris 2.5.1 have dirname() in libgen
543 AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
544 AC_CHECK_LIB(gen, dirname,[
545 AC_CACHE_CHECK([for broken dirname],
546 ac_cv_have_broken_dirname, [
547 save_LIBS="$LIBS"
548 LIBS="$LIBS -lgen"
549 AC_TRY_RUN(
550 [
551 #include <libgen.h>
552 #include <string.h>
554 int main(int argc, char **argv) {
555 char *s, buf[32];
557 strncpy(buf,"/etc", 32);
558 s = dirname(buf);
559 if (!s || strncmp(s, "/", 32) != 0) {
560 exit(1);
561 } else {
562 exit(0);
563 }
564 }
565 ],
566 [ ac_cv_have_broken_dirname="no" ],
567 [ ac_cv_have_broken_dirname="yes" ]
568 )
569 LIBS="$save_LIBS"
570 ])
571 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
572 LIBS="$LIBS -lgen"
573 AC_DEFINE(HAVE_DIRNAME)
574 AC_CHECK_HEADERS(libgen.h)
575 fi
576 ])
577 ])
579 AC_CHECK_FUNC(getspnam, ,
580 AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
581 AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME))
583 dnl zlib is required
584 AC_ARG_WITH(zlib,
585 [ --with-zlib=PATH Use zlib in PATH],
586 [
587 if test "x$withval" = "xno" ; then
588 AC_MSG_ERROR([*** zlib is required ***])
589 fi
590 if test -d "$withval/lib"; then
591 if test -n "${need_dash_r}"; then
592 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
593 else
594 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
595 fi
596 else
597 if test -n "${need_dash_r}"; then
598 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
599 else
600 LDFLAGS="-L${withval} ${LDFLAGS}"
601 fi
602 fi
603 if test -d "$withval/include"; then
604 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
605 else
606 CPPFLAGS="-I${withval} ${CPPFLAGS}"
607 fi
608 ]
609 )
611 AC_CHECK_LIB(z, deflate, ,
612 [
613 saved_CPPFLAGS="$CPPFLAGS"
614 saved_LDFLAGS="$LDFLAGS"
615 save_LIBS="$LIBS"
616 dnl Check default zlib install dir
617 if test -n "${need_dash_r}"; then
618 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
619 else
620 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
621 fi
622 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
623 LIBS="$LIBS -lz"
624 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
625 [
626 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
627 ]
628 )
629 ]
630 )
631 AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
633 AC_ARG_WITH(zlib-version-check,
634 [ --without-zlib-version-check Disable zlib version check],
635 [ if test "x$withval" = "xno" ; then
636 zlib_check_nonfatal=1
637 fi
638 ]
639 )
641 AC_MSG_CHECKING(for zlib 1.1.4 or greater)
642 AC_RUN_IFELSE([AC_LANG_SOURCE([[
643 #include <zlib.h>
644 int main()
645 {
646 int a, b, c, v;
647 if (sscanf(ZLIB_VERSION, "%d.%d.%d", &a, &b, &c) != 3)
648 exit(1);
649 v = a*1000000 + b*1000 + c;
650 if (v >= 1001004)
651 exit(0);
652 exit(2);
653 }
654 ]])],
655 AC_MSG_RESULT(yes),
656 [ AC_MSG_RESULT(no)
657 if test -z "$zlib_check_nonfatal" ; then
658 AC_MSG_ERROR([*** zlib too old - check config.log ***
659 Your reported zlib version has known security problems. It's possible your
660 vendor has fixed these problems without changing the version number. If you
661 are sure this is the case, you can disable the check by running
662 "./configure --without-zlib-version-check".
663 If you are in doubt, upgrade zlib to version 1.1.4 or greater.])
664 else
665 AC_MSG_WARN([zlib version may have security problems])
666 fi
667 ],
668 [ AC_MSG_WARN([cross compiling: not checking zlib version]) ]
669 )
671 dnl UnixWare 2.x
672 AC_CHECK_FUNC(strcasecmp,
673 [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
674 )
675 AC_CHECK_FUNC(utimes,
676 [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
677 LIBS="$LIBS -lc89"]) ]
678 )
680 dnl Checks for libutil functions
681 AC_CHECK_HEADERS(libutil.h)
682 AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN)])
683 AC_CHECK_FUNCS(logout updwtmp logwtmp)
685 AC_FUNC_STRFTIME
687 # Check for ALTDIRFUNC glob() extension
688 AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
689 AC_EGREP_CPP(FOUNDIT,
690 [
691 #include <glob.h>
692 #ifdef GLOB_ALTDIRFUNC
693 FOUNDIT
694 #endif
695 ],
696 [
697 AC_DEFINE(GLOB_HAS_ALTDIRFUNC)
698 AC_MSG_RESULT(yes)
699 ],
700 [
701 AC_MSG_RESULT(no)
702 ]
703 )
705 # Check for g.gl_matchc glob() extension
706 AC_MSG_CHECKING(for gl_matchc field in glob_t)
707 AC_EGREP_CPP(FOUNDIT,
708 [
709 #include <glob.h>
710 int main(void){glob_t g; g.gl_matchc = 1;}
711 ],
712 [
713 AC_DEFINE(GLOB_HAS_GL_MATCHC)
714 AC_MSG_RESULT(yes)
715 ],
716 [
717 AC_MSG_RESULT(no)
718 ]
719 )
721 AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
722 AC_RUN_IFELSE(
723 [AC_LANG_SOURCE([[
724 #include <sys/types.h>
725 #include <dirent.h>
726 int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
727 ]])],
728 [AC_MSG_RESULT(yes)],
729 [
730 AC_MSG_RESULT(no)
731 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
732 ],
733 [
734 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
735 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
736 ]
737 )
739 AC_MSG_CHECKING([for /proc/pid/fd directory])
740 if test -d "/proc/$$/fd" ; then
741 AC_DEFINE(HAVE_PROC_PID)
742 AC_MSG_RESULT(yes)
743 else
744 AC_MSG_RESULT(no)
745 fi
747 # Check whether user wants S/Key support
748 SKEY_MSG="no"
749 AC_ARG_WITH(skey,
750 [ --with-skey[[=PATH]] Enable S/Key support (optionally in PATH)],
751 [
752 if test "x$withval" != "xno" ; then
754 if test "x$withval" != "xyes" ; then
755 CPPFLAGS="$CPPFLAGS -I${withval}/include"
756 LDFLAGS="$LDFLAGS -L${withval}/lib"
757 fi
759 AC_DEFINE(SKEY)
760 LIBS="-lskey $LIBS"
761 SKEY_MSG="yes"
763 AC_MSG_CHECKING([for s/key support])
764 AC_TRY_RUN(
765 [
766 #include <stdio.h>
767 #include <skey.h>
768 int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
769 ],
770 [AC_MSG_RESULT(yes)],
771 [
772 AC_MSG_RESULT(no)
773 AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
774 ])
775 AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
776 AC_TRY_COMPILE(
777 [#include <stdio.h>
778 #include <skey.h>],
779 [(void)skeychallenge(NULL,"name","",0);],
780 [AC_MSG_RESULT(yes)
781 AC_DEFINE(SKEYCHALLENGE_4ARG)],
782 [AC_MSG_RESULT(no)]
783 )
784 fi
785 ]
786 )
788 # Check whether user wants TCP wrappers support
789 TCPW_MSG="no"
790 AC_ARG_WITH(tcp-wrappers,
791 [ --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
792 [
793 if test "x$withval" != "xno" ; then
794 saved_LIBS="$LIBS"
795 saved_LDFLAGS="$LDFLAGS"
796 saved_CPPFLAGS="$CPPFLAGS"
797 if test -n "${withval}" -a "${withval}" != "yes"; then
798 if test -d "${withval}/lib"; then
799 if test -n "${need_dash_r}"; then
800 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
801 else
802 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
803 fi
804 else
805 if test -n "${need_dash_r}"; then
806 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
807 else
808 LDFLAGS="-L${withval} ${LDFLAGS}"
809 fi
810 fi
811 if test -d "${withval}/include"; then
812 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
813 else
814 CPPFLAGS="-I${withval} ${CPPFLAGS}"
815 fi
816 fi
817 LIBWRAP="-lwrap"
818 LIBS="$LIBWRAP $LIBS"
819 AC_MSG_CHECKING(for libwrap)
820 AC_TRY_LINK(
821 [
822 #include <sys/types.h>
823 #include <sys/socket.h>
824 #include <netinet/in.h>
825 #include <tcpd.h>
826 int deny_severity = 0, allow_severity = 0;
827 ],
828 [hosts_access(0);],
829 [
830 AC_MSG_RESULT(yes)
831 AC_DEFINE(LIBWRAP)
832 AC_SUBST(LIBWRAP)
833 TCPW_MSG="yes"
834 ],
835 [
836 AC_MSG_ERROR([*** libwrap missing])
837 ]
838 )
839 LIBS="$saved_LIBS"
840 fi
841 ]
842 )
844 # Check whether user wants libedit support
845 LIBEDIT_MSG="no"
846 AC_ARG_WITH(libedit,
847 [ --with-libedit[[=PATH]] Enable libedit support for sftp],
848 [ if test "x$withval" != "xno" ; then
849 AC_CHECK_LIB(edit, el_init,
850 [ AC_DEFINE(USE_LIBEDIT, [], [Use libedit for sftp])
851 LIBEDIT="-ledit -lcurses"
852 LIBEDIT_MSG="yes"
853 AC_SUBST(LIBEDIT)
854 ],
855 [], [-lcurses]
856 )
857 fi ]
858 )
860 AUDIT_MODULE=none
861 AC_ARG_WITH(audit,
862 [ --with-audit=module Enable EXPERIMENTAL audit support (modules=debug,bsm)],
863 [
864 AC_MSG_CHECKING(for supported audit module)
865 case "$withval" in
866 bsm)
867 AC_MSG_RESULT(bsm)
868 AUDIT_MODULE=bsm
869 dnl Checks for headers, libs and functions
870 AC_CHECK_HEADERS(bsm/audit.h, [],
871 [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)])
872 AC_CHECK_LIB(bsm, getaudit, [],
873 [AC_MSG_ERROR(BSM enabled and required library not found)])
874 AC_CHECK_FUNCS(getaudit, [],
875 [AC_MSG_ERROR(BSM enabled and required function not found)])
876 # These are optional
877 AC_CHECK_FUNCS(getaudit_addr)
878 AC_DEFINE(USE_BSM_AUDIT, [], [Use BSM audit module])
879 ;;
880 debug)
881 AUDIT_MODULE=debug
882 AC_MSG_RESULT(debug)
883 AC_DEFINE(SSH_AUDIT_EVENTS, [], Use audit debugging module)
884 ;;
885 *)
886 AC_MSG_ERROR([Unknown audit module $withval])
887 ;;
888 esac ]
889 )
891 dnl Checks for library functions. Please keep in alphabetical order
892 AC_CHECK_FUNCS(\
893 arc4random __b64_ntop b64_ntop __b64_pton b64_pton bcopy \
894 bindresvport_sa clock closefrom dirfd fchdir fchmod fchown \
895 freeaddrinfo futimes getaddrinfo getcwd getgrouplist getnameinfo \
896 getopt getpeereid _getpty getrlimit getttyent glob inet_aton \
897 inet_ntoa inet_ntop innetgr login_getcapbool md5_crypt memmove \
898 mkdtemp mmap ngetaddrinfo nsleep ogetaddrinfo openlog_r openpty \
899 pstat prctl readpassphrase realpath recvmsg rresvport_af sendmsg \
900 setdtablesize setegid setenv seteuid setgroups setlogin setpcred \
901 setproctitle setregid setreuid setrlimit \
902 setsid setvbuf sigaction sigvec snprintf socketpair strerror \
903 strlcat strlcpy strmode strnvis strtoul sysconf tcgetpgrp \
904 truncate unsetenv updwtmpx utimes vhangup vsnprintf waitpid \
905 )
907 # IRIX has a const char return value for gai_strerror()
908 AC_CHECK_FUNCS(gai_strerror,[
909 AC_DEFINE(HAVE_GAI_STRERROR)
910 AC_TRY_COMPILE([
911 #include <sys/types.h>
912 #include <sys/socket.h>
913 #include <netdb.h>
915 const char *gai_strerror(int);],[
916 char *str;
918 str = gai_strerror(0);],[
919 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
920 [Define if gai_strerror() returns const char *])])])
922 AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP))
924 dnl Make sure prototypes are defined for these before using them.
925 AC_CHECK_DECL(strsep, [AC_CHECK_FUNCS(strsep)])
926 AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
928 dnl tcsendbreak might be a macro
929 AC_CHECK_DECL(tcsendbreak,
930 [AC_DEFINE(HAVE_TCSENDBREAK)],
931 [AC_CHECK_FUNCS(tcsendbreak)],
932 [#include <termios.h>]
933 )
935 AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
937 AC_CHECK_FUNCS(setresuid, [
938 dnl Some platorms have setresuid that isn't implemented, test for this
939 AC_MSG_CHECKING(if setresuid seems to work)
940 AC_RUN_IFELSE(
941 [AC_LANG_SOURCE([[
942 #include <stdlib.h>
943 #include <errno.h>
944 int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
945 ]])],
946 [AC_MSG_RESULT(yes)],
947 [AC_DEFINE(BROKEN_SETRESUID)
948 AC_MSG_RESULT(not implemented)],
949 [AC_MSG_WARN([cross compiling: not checking setresuid])]
950 )
951 ])
953 AC_CHECK_FUNCS(setresgid, [
954 dnl Some platorms have setresgid that isn't implemented, test for this
955 AC_MSG_CHECKING(if setresgid seems to work)
956 AC_RUN_IFELSE(
957 [AC_LANG_SOURCE([[
958 #include <stdlib.h>
959 #include <errno.h>
960 int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
961 ]])],
962 [AC_MSG_RESULT(yes)],
963 [AC_DEFINE(BROKEN_SETRESGID)
964 AC_MSG_RESULT(not implemented)],
965 [AC_MSG_WARN([cross compiling: not checking setresuid])]
966 )
967 ])
969 dnl Checks for time functions
970 AC_CHECK_FUNCS(gettimeofday time)
971 dnl Checks for utmp functions
972 AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
973 AC_CHECK_FUNCS(utmpname)
974 dnl Checks for utmpx functions
975 AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
976 AC_CHECK_FUNCS(setutxent utmpxname)
978 AC_CHECK_FUNC(daemon,
979 [AC_DEFINE(HAVE_DAEMON)],
980 [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
981 )
983 AC_CHECK_FUNC(getpagesize,
984 [AC_DEFINE(HAVE_GETPAGESIZE)],
985 [AC_CHECK_LIB(ucb, getpagesize, [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
986 )
988 # Check for broken snprintf
989 if test "x$ac_cv_func_snprintf" = "xyes" ; then
990 AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
991 AC_RUN_IFELSE(
992 [AC_LANG_SOURCE([[
993 #include <stdio.h>
994 int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
995 ]])],
996 [AC_MSG_RESULT(yes)],
997 [
998 AC_MSG_RESULT(no)
999 AC_DEFINE(BROKEN_SNPRINTF)
1000 AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1001 ],
1002 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
1003 )
1004 fi
1006 # Check for missing getpeereid (or equiv) support
1007 NO_PEERCHECK=""
1008 if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1009 AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1010 AC_TRY_COMPILE(
1011 [#include <sys/types.h>
1012 #include <sys/socket.h>],
1013 [int i = SO_PEERCRED;],
1014 [AC_MSG_RESULT(yes)],
1015 [AC_MSG_RESULT(no)
1016 NO_PEERCHECK=1]
1017 )
1018 fi
1020 dnl see whether mkstemp() requires XXXXXX
1021 if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1022 AC_MSG_CHECKING([for (overly) strict mkstemp])
1023 AC_TRY_RUN(
1024 [
1025 #include <stdlib.h>
1026 main() { char template[]="conftest.mkstemp-test";
1027 if (mkstemp(template) == -1)
1028 exit(1);
1029 unlink(template); exit(0);
1030 }
1031 ],
1032 [
1033 AC_MSG_RESULT(no)
1034 ],
1035 [
1036 AC_MSG_RESULT(yes)
1037 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1038 ],
1039 [
1040 AC_MSG_RESULT(yes)
1041 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1042 ]
1043 )
1044 fi
1046 dnl make sure that openpty does not reacquire controlling terminal
1047 if test ! -z "$check_for_openpty_ctty_bug"; then
1048 AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1049 AC_TRY_RUN(
1050 [
1051 #include <stdio.h>
1052 #include <sys/fcntl.h>
1053 #include <sys/types.h>
1054 #include <sys/wait.h>
1056 int
1057 main()
1058 {
1059 pid_t pid;
1060 int fd, ptyfd, ttyfd, status;
1062 pid = fork();
1063 if (pid < 0) { /* failed */
1064 exit(1);
1065 } else if (pid > 0) { /* parent */
1066 waitpid(pid, &status, 0);
1067 if (WIFEXITED(status))
1068 exit(WEXITSTATUS(status));
1069 else
1070 exit(2);
1071 } else { /* child */
1072 close(0); close(1); close(2);
1073 setsid();
1074 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1075 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1076 if (fd >= 0)
1077 exit(3); /* Acquired ctty: broken */
1078 else
1079 exit(0); /* Did not acquire ctty: OK */
1080 }
1081 }
1082 ],
1083 [
1084 AC_MSG_RESULT(yes)
1085 ],
1086 [
1087 AC_MSG_RESULT(no)
1088 AC_DEFINE(SSHD_ACQUIRES_CTTY)
1089 ]
1090 )
1091 fi
1093 if test "x$ac_cv_func_getaddrinfo" = "xyes" -a "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
1094 AC_MSG_CHECKING(if getaddrinfo seems to work)
1095 AC_TRY_RUN(
1096 [
1097 #include <stdio.h>
1098 #include <sys/socket.h>
1099 #include <netdb.h>
1100 #include <errno.h>
1101 #include <netinet/in.h>
1103 #define TEST_PORT "2222"
1105 int
1106 main(void)
1107 {
1108 int err, sock;
1109 struct addrinfo *gai_ai, *ai, hints;
1110 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1112 memset(&hints, 0, sizeof(hints));
1113 hints.ai_family = PF_UNSPEC;
1114 hints.ai_socktype = SOCK_STREAM;
1115 hints.ai_flags = AI_PASSIVE;
1117 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1118 if (err != 0) {
1119 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1120 exit(1);
1121 }
1123 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1124 if (ai->ai_family != AF_INET6)
1125 continue;
1127 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1128 sizeof(ntop), strport, sizeof(strport),
1129 NI_NUMERICHOST|NI_NUMERICSERV);
1131 if (err != 0) {
1132 if (err == EAI_SYSTEM)
1133 perror("getnameinfo EAI_SYSTEM");
1134 else
1135 fprintf(stderr, "getnameinfo failed: %s\n",
1136 gai_strerror(err));
1137 exit(2);
1138 }
1140 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1141 if (sock < 0)
1142 perror("socket");
1143 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1144 if (errno == EBADF)
1145 exit(3);
1146 }
1147 }
1148 exit(0);
1149 }
1150 ],
1151 [
1152 AC_MSG_RESULT(yes)
1153 ],
1154 [
1155 AC_MSG_RESULT(no)
1156 AC_DEFINE(BROKEN_GETADDRINFO)
1157 ]
1158 )
1159 fi
1161 if test "x$ac_cv_func_getaddrinfo" = "xyes" -a "x$check_for_aix_broken_getaddrinfo" = "x1"; then
1162 AC_MSG_CHECKING(if getaddrinfo seems to work)
1163 AC_TRY_RUN(
1164 [
1165 #include <stdio.h>
1166 #include <sys/socket.h>
1167 #include <netdb.h>
1168 #include <errno.h>
1169 #include <netinet/in.h>
1171 #define TEST_PORT "2222"
1173 int
1174 main(void)
1175 {
1176 int err, sock;
1177 struct addrinfo *gai_ai, *ai, hints;
1178 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1180 memset(&hints, 0, sizeof(hints));
1181 hints.ai_family = PF_UNSPEC;
1182 hints.ai_socktype = SOCK_STREAM;
1183 hints.ai_flags = AI_PASSIVE;
1185 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1186 if (err != 0) {
1187 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1188 exit(1);
1189 }
1191 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1192 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1193 continue;
1195 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1196 sizeof(ntop), strport, sizeof(strport),
1197 NI_NUMERICHOST|NI_NUMERICSERV);
1199 if (ai->ai_family == AF_INET && err != 0) {
1200 perror("getnameinfo");
1201 exit(2);
1202 }
1203 }
1204 exit(0);
1205 }
1206 ],
1207 [
1208 AC_MSG_RESULT(yes)
1209 AC_DEFINE(AIX_GETNAMEINFO_HACK, [],
1210 [Define if you have a getaddrinfo that fails for the all-zeros IPv6 address])
1211 ],
1212 [
1213 AC_MSG_RESULT(no)
1214 AC_DEFINE(BROKEN_GETADDRINFO)
1215 ]
1216 )
1217 fi
1219 if test "x$check_for_conflicting_getspnam" = "x1"; then
1220 AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1221 AC_COMPILE_IFELSE(
1222 [
1223 #include <shadow.h>
1224 int main(void) {exit(0);}
1225 ],
1226 [
1227 AC_MSG_RESULT(no)
1228 ],
1229 [
1230 AC_MSG_RESULT(yes)
1231 AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1232 [Conflicting defs for getspnam])
1233 ]
1234 )
1235 fi
1237 AC_FUNC_GETPGRP
1239 # Check for PAM libs
1240 PAM_MSG="no"
1241 AC_ARG_WITH(pam,
1242 [ --with-pam Enable PAM support ],
1243 [
1244 if test "x$withval" != "xno" ; then
1245 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
1246 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
1247 AC_MSG_ERROR([PAM headers not found])
1248 fi
1250 AC_CHECK_LIB(dl, dlopen, , )
1251 AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
1252 AC_CHECK_FUNCS(pam_getenvlist)
1253 AC_CHECK_FUNCS(pam_putenv)
1255 PAM_MSG="yes"
1257 AC_DEFINE(USE_PAM)
1258 if test $ac_cv_lib_dl_dlopen = yes; then
1259 LIBPAM="-lpam -ldl"
1260 else
1261 LIBPAM="-lpam"
1262 fi
1263 AC_SUBST(LIBPAM)
1264 fi
1265 ]
1266 )
1268 # Check for older PAM
1269 if test "x$PAM_MSG" = "xyes" ; then
1270 # Check PAM strerror arguments (old PAM)
1271 AC_MSG_CHECKING([whether pam_strerror takes only one argument])
1272 AC_TRY_COMPILE(
1273 [
1274 #include <stdlib.h>
1275 #if defined(HAVE_SECURITY_PAM_APPL_H)
1276 #include <security/pam_appl.h>
1277 #elif defined (HAVE_PAM_PAM_APPL_H)
1278 #include <pam/pam_appl.h>
1279 #endif
1280 ],
1281 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
1282 [AC_MSG_RESULT(no)],
1283 [
1284 AC_DEFINE(HAVE_OLD_PAM)
1285 AC_MSG_RESULT(yes)
1286 PAM_MSG="yes (old library)"
1287 ]
1288 )
1289 fi
1291 # Search for OpenSSL
1292 saved_CPPFLAGS="$CPPFLAGS"
1293 saved_LDFLAGS="$LDFLAGS"
1294 AC_ARG_WITH(ssl-dir,
1295 [ --with-ssl-dir=PATH Specify path to OpenSSL installation ],
1296 [
1297 if test "x$withval" != "xno" ; then
1298 case "$withval" in
1299 # Relative paths
1300 ./*|../*) withval="`pwd`/$withval"
1301 esac
1302 if test -d "$withval/lib"; then
1303 if test -n "${need_dash_r}"; then
1304 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1305 else
1306 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1307 fi
1308 else
1309 if test -n "${need_dash_r}"; then
1310 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1311 else
1312 LDFLAGS="-L${withval} ${LDFLAGS}"
1313 fi
1314 fi
1315 if test -d "$withval/include"; then
1316 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1317 else
1318 CPPFLAGS="-I${withval} ${CPPFLAGS}"
1319 fi
1320 fi
1321 ]
1322 )
1323 LIBS="-lcrypto $LIBS"
1324 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1325 [
1326 dnl Check default openssl install dir
1327 if test -n "${need_dash_r}"; then
1328 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
1329 else
1330 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
1331 fi
1332 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1333 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1334 [
1335 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1336 ]
1337 )
1338 ]
1339 )
1341 # Determine OpenSSL header version
1342 AC_MSG_CHECKING([OpenSSL header version])
1343 AC_RUN_IFELSE(
1344 [AC_LANG_SOURCE([[
1345 #include <stdio.h>
1346 #include <string.h>
1347 #include <openssl/opensslv.h>
1348 #define DATA "conftest.sslincver"
1349 int main(void) {
1350 FILE *fd;
1351 int rc;
1353 fd = fopen(DATA,"w");
1354 if(fd == NULL)
1355 exit(1);
1357 if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1358 exit(1);
1360 exit(0);
1361 }
1362 ]])],
1363 [
1364 ssl_header_ver=`cat conftest.sslincver`
1365 AC_MSG_RESULT($ssl_header_ver)
1366 ],
1367 [
1368 AC_MSG_RESULT(not found)
1369 AC_MSG_ERROR(OpenSSL version header not found.)
1370 ],
1371 [
1372 AC_MSG_WARN([cross compiling: not checking])
1373 ]
1374 )
1376 # Determine OpenSSL library version
1377 AC_MSG_CHECKING([OpenSSL library version])
1378 AC_RUN_IFELSE(
1379 [AC_LANG_SOURCE([[
1380 #include <stdio.h>
1381 #include <string.h>
1382 #include <openssl/opensslv.h>
1383 #include <openssl/crypto.h>
1384 #define DATA "conftest.ssllibver"
1385 int main(void) {
1386 FILE *fd;
1387 int rc;
1389 fd = fopen(DATA,"w");
1390 if(fd == NULL)
1391 exit(1);
1393 if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1394 exit(1);
1396 exit(0);
1397 }
1398 ]])],
1399 [
1400 ssl_library_ver=`cat conftest.ssllibver`
1401 AC_MSG_RESULT($ssl_library_ver)
1402 ],
1403 [
1404 AC_MSG_RESULT(not found)
1405 AC_MSG_ERROR(OpenSSL library not found.)
1406 ],
1407 [
1408 AC_MSG_WARN([cross compiling: not checking])
1409 ]
1410 )
1412 # Sanity check OpenSSL headers
1413 AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1414 AC_RUN_IFELSE(
1415 [AC_LANG_SOURCE([[
1416 #include <string.h>
1417 #include <openssl/opensslv.h>
1418 int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
1419 ]])],
1420 [
1421 AC_MSG_RESULT(yes)
1422 ],
1423 [
1424 AC_MSG_RESULT(no)
1425 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1426 Check config.log for details.
1427 Also see contrib/findssl.sh for help identifying header/library mismatches.])
1428 ],
1429 [
1430 AC_MSG_WARN([cross compiling: not checking])
1431 ]
1432 )
1434 # Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1435 # because the system crypt() is more featureful.
1436 if test "x$check_for_libcrypt_before" = "x1"; then
1437 AC_CHECK_LIB(crypt, crypt)
1438 fi
1440 # Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
1441 # version in OpenSSL.
1442 if test "x$check_for_libcrypt_later" = "x1"; then
1443 AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
1444 fi
1447 ### Configure cryptographic random number support
1449 # Check wheter OpenSSL seeds itself
1450 AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1451 AC_RUN_IFELSE(
1452 [AC_LANG_SOURCE([[
1453 #include <string.h>
1454 #include <openssl/rand.h>
1455 int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
1456 ]])],
1457 [
1458 OPENSSL_SEEDS_ITSELF=yes
1459 AC_MSG_RESULT(yes)
1460 ],
1461 [
1462 AC_MSG_RESULT(no)
1463 # Default to use of the rand helper if OpenSSL doesn't
1464 # seed itself
1465 USE_RAND_HELPER=yes
1466 ],
1467 [
1468 AC_MSG_WARN([cross compiling: assuming yes])
1469 # This is safe, since all recent OpenSSL versions will
1470 # complain at runtime if not seeded correctly.
1471 OPENSSL_SEEDS_ITSELF=yes
1472 ]
1473 )
1476 # Do we want to force the use of the rand helper?
1477 AC_ARG_WITH(rand-helper,
1478 [ --with-rand-helper Use subprocess to gather strong randomness ],
1479 [
1480 if test "x$withval" = "xno" ; then
1481 # Force use of OpenSSL's internal RNG, even if
1482 # the previous test showed it to be unseeded.
1483 if test -z "$OPENSSL_SEEDS_ITSELF" ; then
1484 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
1485 OPENSSL_SEEDS_ITSELF=yes
1486 USE_RAND_HELPER=""
1487 fi
1488 else
1489 USE_RAND_HELPER=yes
1490 fi
1491 ],
1492 )
1494 # Which randomness source do we use?
1495 if test ! -z "$OPENSSL_SEEDS_ITSELF" -a -z "$USE_RAND_HELPER" ; then
1496 # OpenSSL only
1497 AC_DEFINE(OPENSSL_PRNG_ONLY)
1498 RAND_MSG="OpenSSL internal ONLY"
1499 INSTALL_SSH_RAND_HELPER=""
1500 elif test ! -z "$USE_RAND_HELPER" ; then
1501 # install rand helper
1502 RAND_MSG="ssh-rand-helper"
1503 INSTALL_SSH_RAND_HELPER="yes"
1504 fi
1505 AC_SUBST(INSTALL_SSH_RAND_HELPER)
1507 ### Configuration of ssh-rand-helper
1509 # PRNGD TCP socket
1510 AC_ARG_WITH(prngd-port,
1511 [ --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT],
1512 [
1513 case "$withval" in
1514 no)
1515 withval=""
1516 ;;
1517 [[0-9]]*)
1518 ;;
1519 *)
1520 AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
1521 ;;
1522 esac
1523 if test ! -z "$withval" ; then
1524 PRNGD_PORT="$withval"
1525 AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT)
1526 fi
1527 ]
1528 )
1530 # PRNGD Unix domain socket
1531 AC_ARG_WITH(prngd-socket,
1532 [ --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
1533 [
1534 case "$withval" in
1535 yes)
1536 withval="/var/run/egd-pool"
1537 ;;
1538 no)
1539 withval=""
1540 ;;
1541 /*)
1542 ;;
1543 *)
1544 AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
1545 ;;
1546 esac
1548 if test ! -z "$withval" ; then
1549 if test ! -z "$PRNGD_PORT" ; then
1550 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
1551 fi
1552 if test ! -r "$withval" ; then
1553 AC_MSG_WARN(Entropy socket is not readable)
1554 fi
1555 PRNGD_SOCKET="$withval"
1556 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1557 fi
1558 ],
1559 [
1560 # Check for existing socket only if we don't have a random device already
1561 if test "$USE_RAND_HELPER" = yes ; then
1562 AC_MSG_CHECKING(for PRNGD/EGD socket)
1563 # Insert other locations here
1564 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
1565 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
1566 PRNGD_SOCKET="$sock"
1567 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1568 break;
1569 fi
1570 done
1571 if test ! -z "$PRNGD_SOCKET" ; then
1572 AC_MSG_RESULT($PRNGD_SOCKET)
1573 else
1574 AC_MSG_RESULT(not found)
1575 fi
1576 fi
1577 ]
1578 )
1580 # Change default command timeout for hashing entropy source
1581 entropy_timeout=200
1582 AC_ARG_WITH(entropy-timeout,
1583 [ --with-entropy-timeout Specify entropy gathering command timeout (msec)],
1584 [
1585 if test "x$withval" != "xno" ; then
1586 entropy_timeout=$withval
1587 fi
1588 ]
1589 )
1590 AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout)
1592 SSH_PRIVSEP_USER=sshd
1593 AC_ARG_WITH(privsep-user,
1594 [ --with-privsep-user=user Specify non-privileged user for privilege separation],
1595 [
1596 if test -n "$withval"; then
1597 SSH_PRIVSEP_USER=$withval
1598 fi
1599 ]
1600 )
1601 AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER")
1602 AC_SUBST(SSH_PRIVSEP_USER)
1604 # We do this little dance with the search path to insure
1605 # that programs that we select for use by installed programs
1606 # (which may be run by the super-user) come from trusted
1607 # locations before they come from the user's private area.
1608 # This should help avoid accidentally configuring some
1609 # random version of a program in someone's personal bin.
1611 OPATH=$PATH
1612 PATH=/bin:/usr/bin
1613 test -h /bin 2> /dev/null && PATH=/usr/bin
1614 test -d /sbin && PATH=$PATH:/sbin
1615 test -d /usr/sbin && PATH=$PATH:/usr/sbin
1616 PATH=$PATH:/etc:$OPATH
1618 # These programs are used by the command hashing source to gather entropy
1619 OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
1620 OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
1621 OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
1622 OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
1623 OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
1624 OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
1625 OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
1626 OSSH_PATH_ENTROPY_PROG(PROG_W, w)
1627 OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
1628 OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
1629 OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
1630 OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
1631 OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
1632 OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
1633 OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
1634 OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
1635 # restore PATH
1636 PATH=$OPATH
1638 # Where does ssh-rand-helper get its randomness from?
1639 INSTALL_SSH_PRNG_CMDS=""
1640 if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
1641 if test ! -z "$PRNGD_PORT" ; then
1642 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
1643 elif test ! -z "$PRNGD_SOCKET" ; then
1644 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
1645 else
1646 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
1647 RAND_HELPER_CMDHASH=yes
1648 INSTALL_SSH_PRNG_CMDS="yes"
1649 fi
1650 fi
1651 AC_SUBST(INSTALL_SSH_PRNG_CMDS)
1654 # Cheap hack to ensure NEWS-OS libraries are arranged right.
1655 if test ! -z "$SONY" ; then
1656 LIBS="$LIBS -liberty";
1657 fi
1659 # Checks for data types
1660 AC_CHECK_SIZEOF(char, 1)
1661 AC_CHECK_SIZEOF(short int, 2)
1662 AC_CHECK_SIZEOF(int, 4)
1663 AC_CHECK_SIZEOF(long int, 4)
1664 AC_CHECK_SIZEOF(long long int, 8)
1666 # Sanity check long long for some platforms (AIX)
1667 if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
1668 ac_cv_sizeof_long_long_int=0
1669 fi
1671 # More checks for data types
1672 AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
1673 AC_TRY_COMPILE(
1674 [ #include <sys/types.h> ],
1675 [ u_int a; a = 1;],
1676 [ ac_cv_have_u_int="yes" ],
1677 [ ac_cv_have_u_int="no" ]
1678 )
1679 ])
1680 if test "x$ac_cv_have_u_int" = "xyes" ; then
1681 AC_DEFINE(HAVE_U_INT)
1682 have_u_int=1
1683 fi
1685 AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
1686 AC_TRY_COMPILE(
1687 [ #include <sys/types.h> ],
1688 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
1689 [ ac_cv_have_intxx_t="yes" ],
1690 [ ac_cv_have_intxx_t="no" ]
1691 )
1692 ])
1693 if test "x$ac_cv_have_intxx_t" = "xyes" ; then
1694 AC_DEFINE(HAVE_INTXX_T)
1695 have_intxx_t=1
1696 fi
1698 if (test -z "$have_intxx_t" && \
1699 test "x$ac_cv_header_stdint_h" = "xyes")
1700 then
1701 AC_MSG_CHECKING([for intXX_t types in stdint.h])
1702 AC_TRY_COMPILE(
1703 [ #include <stdint.h> ],
1704 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
1705 [
1706 AC_DEFINE(HAVE_INTXX_T)
1707 AC_MSG_RESULT(yes)
1708 ],
1709 [ AC_MSG_RESULT(no) ]
1710 )
1711 fi
1713 AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
1714 AC_TRY_COMPILE(
1715 [
1716 #include <sys/types.h>
1717 #ifdef HAVE_STDINT_H
1718 # include <stdint.h>
1719 #endif
1720 #include <sys/socket.h>
1721 #ifdef HAVE_SYS_BITYPES_H
1722 # include <sys/bitypes.h>
1723 #endif
1724 ],
1725 [ int64_t a; a = 1;],
1726 [ ac_cv_have_int64_t="yes" ],
1727 [ ac_cv_have_int64_t="no" ]
1728 )
1729 ])
1730 if test "x$ac_cv_have_int64_t" = "xyes" ; then
1731 AC_DEFINE(HAVE_INT64_T)
1732 fi
1734 AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
1735 AC_TRY_COMPILE(
1736 [ #include <sys/types.h> ],
1737 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
1738 [ ac_cv_have_u_intxx_t="yes" ],
1739 [ ac_cv_have_u_intxx_t="no" ]
1740 )
1741 ])
1742 if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
1743 AC_DEFINE(HAVE_U_INTXX_T)
1744 have_u_intxx_t=1
1745 fi
1747 if test -z "$have_u_intxx_t" ; then
1748 AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
1749 AC_TRY_COMPILE(
1750 [ #include <sys/socket.h> ],
1751 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
1752 [
1753 AC_DEFINE(HAVE_U_INTXX_T)
1754 AC_MSG_RESULT(yes)
1755 ],
1756 [ AC_MSG_RESULT(no) ]
1757 )
1758 fi
1760 AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
1761 AC_TRY_COMPILE(
1762 [ #include <sys/types.h> ],
1763 [ u_int64_t a; a = 1;],
1764 [ ac_cv_have_u_int64_t="yes" ],
1765 [ ac_cv_have_u_int64_t="no" ]
1766 )
1767 ])
1768 if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
1769 AC_DEFINE(HAVE_U_INT64_T)
1770 have_u_int64_t=1
1771 fi
1773 if test -z "$have_u_int64_t" ; then
1774 AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
1775 AC_TRY_COMPILE(
1776 [ #include <sys/bitypes.h> ],
1777 [ u_int64_t a; a = 1],
1778 [
1779 AC_DEFINE(HAVE_U_INT64_T)
1780 AC_MSG_RESULT(yes)
1781 ],
1782 [ AC_MSG_RESULT(no) ]
1783 )
1784 fi
1786 if test -z "$have_u_intxx_t" ; then
1787 AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
1788 AC_TRY_COMPILE(
1789 [
1790 #include <sys/types.h>
1791 ],
1792 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
1793 [ ac_cv_have_uintxx_t="yes" ],
1794 [ ac_cv_have_uintxx_t="no" ]
1795 )
1796 ])
1797 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
1798 AC_DEFINE(HAVE_UINTXX_T)
1799 fi
1800 fi
1802 if test -z "$have_uintxx_t" ; then
1803 AC_MSG_CHECKING([for uintXX_t types in stdint.h])
1804 AC_TRY_COMPILE(
1805 [ #include <stdint.h> ],
1806 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
1807 [
1808 AC_DEFINE(HAVE_UINTXX_T)
1809 AC_MSG_RESULT(yes)
1810 ],
1811 [ AC_MSG_RESULT(no) ]
1812 )
1813 fi
1815 if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
1816 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
1817 then
1818 AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
1819 AC_TRY_COMPILE(
1820 [
1821 #include <sys/bitypes.h>
1822 ],
1823 [
1824 int8_t a; int16_t b; int32_t c;
1825 u_int8_t e; u_int16_t f; u_int32_t g;
1826 a = b = c = e = f = g = 1;
1827 ],
1828 [
1829 AC_DEFINE(HAVE_U_INTXX_T)
1830 AC_DEFINE(HAVE_INTXX_T)
1831 AC_MSG_RESULT(yes)
1832 ],
1833 [AC_MSG_RESULT(no)]
1834 )
1835 fi
1838 AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
1839 AC_TRY_COMPILE(
1840 [
1841 #include <sys/types.h>
1842 ],
1843 [ u_char foo; foo = 125; ],
1844 [ ac_cv_have_u_char="yes" ],
1845 [ ac_cv_have_u_char="no" ]
1846 )
1847 ])
1848 if test "x$ac_cv_have_u_char" = "xyes" ; then
1849 AC_DEFINE(HAVE_U_CHAR)
1850 fi
1852 TYPE_SOCKLEN_T
1854 AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
1856 AC_CHECK_TYPES(in_addr_t,,,
1857 [#include <sys/types.h>
1858 #include <netinet/in.h>])
1860 AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
1861 AC_TRY_COMPILE(
1862 [
1863 #include <sys/types.h>
1864 ],
1865 [ size_t foo; foo = 1235; ],
1866 [ ac_cv_have_size_t="yes" ],
1867 [ ac_cv_have_size_t="no" ]
1868 )
1869 ])
1870 if test "x$ac_cv_have_size_t" = "xyes" ; then
1871 AC_DEFINE(HAVE_SIZE_T)
1872 fi
1874 AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
1875 AC_TRY_COMPILE(
1876 [
1877 #include <sys/types.h>
1878 ],
1879 [ ssize_t foo; foo = 1235; ],
1880 [ ac_cv_have_ssize_t="yes" ],
1881 [ ac_cv_have_ssize_t="no" ]
1882 )
1883 ])
1884 if test "x$ac_cv_have_ssize_t" = "xyes" ; then
1885 AC_DEFINE(HAVE_SSIZE_T)
1886 fi
1888 AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
1889 AC_TRY_COMPILE(
1890 [
1891 #include <time.h>
1892 ],
1893 [ clock_t foo; foo = 1235; ],
1894 [ ac_cv_have_clock_t="yes" ],
1895 [ ac_cv_have_clock_t="no" ]
1896 )
1897 ])
1898 if test "x$ac_cv_have_clock_t" = "xyes" ; then
1899 AC_DEFINE(HAVE_CLOCK_T)
1900 fi
1902 AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
1903 AC_TRY_COMPILE(
1904 [
1905 #include <sys/types.h>
1906 #include <sys/socket.h>
1907 ],
1908 [ sa_family_t foo; foo = 1235; ],
1909 [ ac_cv_have_sa_family_t="yes" ],
1910 [ AC_TRY_COMPILE(
1911 [
1912 #include <sys/types.h>
1913 #include <sys/socket.h>
1914 #include <netinet/in.h>
1915 ],
1916 [ sa_family_t foo; foo = 1235; ],
1917 [ ac_cv_have_sa_family_t="yes" ],
1919 [ ac_cv_have_sa_family_t="no" ]
1920 )]
1921 )
1922 ])
1923 if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
1924 AC_DEFINE(HAVE_SA_FAMILY_T)
1925 fi
1927 AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
1928 AC_TRY_COMPILE(
1929 [
1930 #include <sys/types.h>
1931 ],
1932 [ pid_t foo; foo = 1235; ],
1933 [ ac_cv_have_pid_t="yes" ],
1934 [ ac_cv_have_pid_t="no" ]
1935 )
1936 ])
1937 if test "x$ac_cv_have_pid_t" = "xyes" ; then
1938 AC_DEFINE(HAVE_PID_T)
1939 fi
1941 AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
1942 AC_TRY_COMPILE(
1943 [
1944 #include <sys/types.h>
1945 ],
1946 [ mode_t foo; foo = 1235; ],
1947 [ ac_cv_have_mode_t="yes" ],
1948 [ ac_cv_have_mode_t="no" ]
1949 )
1950 ])
1951 if test "x$ac_cv_have_mode_t" = "xyes" ; then
1952 AC_DEFINE(HAVE_MODE_T)
1953 fi
1956 AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
1957 AC_TRY_COMPILE(
1958 [
1959 #include <sys/types.h>
1960 #include <sys/socket.h>
1961 ],
1962 [ struct sockaddr_storage s; ],
1963 [ ac_cv_have_struct_sockaddr_storage="yes" ],
1964 [ ac_cv_have_struct_sockaddr_storage="no" ]
1965 )
1966 ])
1967 if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
1968 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE)
1969 fi
1971 AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
1972 AC_TRY_COMPILE(
1973 [
1974 #include <sys/types.h>
1975 #include <netinet/in.h>
1976 ],
1977 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
1978 [ ac_cv_have_struct_sockaddr_in6="yes" ],
1979 [ ac_cv_have_struct_sockaddr_in6="no" ]
1980 )
1981 ])
1982 if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
1983 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6)
1984 fi
1986 AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
1987 AC_TRY_COMPILE(
1988 [
1989 #include <sys/types.h>
1990 #include <netinet/in.h>
1991 ],
1992 [ struct in6_addr s; s.s6_addr[0] = 0; ],
1993 [ ac_cv_have_struct_in6_addr="yes" ],
1994 [ ac_cv_have_struct_in6_addr="no" ]
1995 )
1996 ])
1997 if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
1998 AC_DEFINE(HAVE_STRUCT_IN6_ADDR)
1999 fi
2001 AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2002 AC_TRY_COMPILE(
2003 [
2004 #include <sys/types.h>
2005 #include <sys/socket.h>
2006 #include <netdb.h>
2007 ],
2008 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2009 [ ac_cv_have_struct_addrinfo="yes" ],
2010 [ ac_cv_have_struct_addrinfo="no" ]
2011 )
2012 ])
2013 if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2014 AC_DEFINE(HAVE_STRUCT_ADDRINFO)
2015 fi
2017 AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2018 AC_TRY_COMPILE(
2019 [ #include <sys/time.h> ],
2020 [ struct timeval tv; tv.tv_sec = 1;],
2021 [ ac_cv_have_struct_timeval="yes" ],
2022 [ ac_cv_have_struct_timeval="no" ]
2023 )
2024 ])
2025 if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2026 AC_DEFINE(HAVE_STRUCT_TIMEVAL)
2027 have_struct_timeval=1
2028 fi
2030 AC_CHECK_TYPES(struct timespec)
2032 # We need int64_t or else certian parts of the compile will fail.
2033 if test "x$ac_cv_have_int64_t" = "xno" -a \
2034 "x$ac_cv_sizeof_long_int" != "x8" -a \
2035 "x$ac_cv_sizeof_long_long_int" = "x0" ; then
2036 echo "OpenSSH requires int64_t support. Contact your vendor or install"
2037 echo "an alternative compiler (I.E., GCC) before continuing."
2038 echo ""
2039 exit 1;
2040 else
2041 dnl test snprintf (broken on SCO w/gcc)
2042 AC_RUN_IFELSE(
2043 [AC_LANG_SOURCE([[
2044 #include <stdio.h>
2045 #include <string.h>
2046 #ifdef HAVE_SNPRINTF
2047 main()
2048 {
2049 char buf[50];
2050 char expected_out[50];
2051 int mazsize = 50 ;
2052 #if (SIZEOF_LONG_INT == 8)
2053 long int num = 0x7fffffffffffffff;
2054 #else
2055 long long num = 0x7fffffffffffffffll;
2056 #endif
2057 strcpy(expected_out, "9223372036854775807");
2058 snprintf(buf, mazsize, "%lld", num);
2059 if(strcmp(buf, expected_out) != 0)
2060 exit(1);
2061 exit(0);
2062 }
2063 #else
2064 main() { exit(0); }
2065 #endif
2066 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
2067 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
2068 )
2069 fi
2071 dnl Checks for structure members
2072 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2073 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2074 OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2075 OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2076 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
2077 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
2078 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2079 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
2080 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
2081 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2082 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2083 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2084 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
2085 OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2086 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2087 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2088 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
2090 AC_CHECK_MEMBERS([struct stat.st_blksize])
2092 AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2093 ac_cv_have_ss_family_in_struct_ss, [
2094 AC_TRY_COMPILE(
2095 [
2096 #include <sys/types.h>
2097 #include <sys/socket.h>
2098 ],
2099 [ struct sockaddr_storage s; s.ss_family = 1; ],
2100 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2101 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2102 )
2103 ])
2104 if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2105 AC_DEFINE(HAVE_SS_FAMILY_IN_SS)
2106 fi
2108 AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2109 ac_cv_have___ss_family_in_struct_ss, [
2110 AC_TRY_COMPILE(
2111 [
2112 #include <sys/types.h>
2113 #include <sys/socket.h>
2114 ],
2115 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2116 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2117 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2118 )
2119 ])
2120 if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2121 AC_DEFINE(HAVE___SS_FAMILY_IN_SS)
2122 fi
2124 AC_CACHE_CHECK([for pw_class field in struct passwd],
2125 ac_cv_have_pw_class_in_struct_passwd, [
2126 AC_TRY_COMPILE(
2127 [
2128 #include <pwd.h>
2129 ],
2130 [ struct passwd p; p.pw_class = 0; ],
2131 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2132 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2133 )
2134 ])
2135 if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2136 AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD)
2137 fi
2139 AC_CACHE_CHECK([for pw_expire field in struct passwd],
2140 ac_cv_have_pw_expire_in_struct_passwd, [
2141 AC_TRY_COMPILE(
2142 [
2143 #include <pwd.h>
2144 ],
2145 [ struct passwd p; p.pw_expire = 0; ],
2146 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2147 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2148 )
2149 ])
2150 if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2151 AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD)
2152 fi
2154 AC_CACHE_CHECK([for pw_change field in struct passwd],
2155 ac_cv_have_pw_change_in_struct_passwd, [
2156 AC_TRY_COMPILE(
2157 [
2158 #include <pwd.h>
2159 ],
2160 [ struct passwd p; p.pw_change = 0; ],
2161 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2162 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2163 )
2164 ])
2165 if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2166 AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD)
2167 fi
2169 dnl make sure we're using the real structure members and not defines
2170 AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2171 ac_cv_have_accrights_in_msghdr, [
2172 AC_COMPILE_IFELSE(
2173 [
2174 #include <sys/types.h>
2175 #include <sys/socket.h>
2176 #include <sys/uio.h>
2177 int main() {
2178 #ifdef msg_accrights
2179 #error "msg_accrights is a macro"
2180 exit(1);
2181 #endif
2182 struct msghdr m;
2183 m.msg_accrights = 0;
2184 exit(0);
2185 }
2186 ],
2187 [ ac_cv_have_accrights_in_msghdr="yes" ],
2188 [ ac_cv_have_accrights_in_msghdr="no" ]
2189 )
2190 ])
2191 if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2192 AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR)
2193 fi
2195 AC_CACHE_CHECK([for msg_control field in struct msghdr],
2196 ac_cv_have_control_in_msghdr, [
2197 AC_COMPILE_IFELSE(
2198 [
2199 #include <sys/types.h>
2200 #include <sys/socket.h>
2201 #include <sys/uio.h>
2202 int main() {
2203 #ifdef msg_control
2204 #error "msg_control is a macro"
2205 exit(1);
2206 #endif
2207 struct msghdr m;
2208 m.msg_control = 0;
2209 exit(0);
2210 }
2211 ],
2212 [ ac_cv_have_control_in_msghdr="yes" ],
2213 [ ac_cv_have_control_in_msghdr="no" ]
2214 )
2215 ])
2216 if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2217 AC_DEFINE(HAVE_CONTROL_IN_MSGHDR)
2218 fi
2220 AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
2221 AC_TRY_LINK([],
2222 [ extern char *__progname; printf("%s", __progname); ],
2223 [ ac_cv_libc_defines___progname="yes" ],
2224 [ ac_cv_libc_defines___progname="no" ]
2225 )
2226 ])
2227 if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2228 AC_DEFINE(HAVE___PROGNAME)
2229 fi
2231 AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2232 AC_TRY_LINK([
2233 #include <stdio.h>
2234 ],
2235 [ printf("%s", __FUNCTION__); ],
2236 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2237 [ ac_cv_cc_implements___FUNCTION__="no" ]
2238 )
2239 ])
2240 if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2241 AC_DEFINE(HAVE___FUNCTION__)
2242 fi
2244 AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2245 AC_TRY_LINK([
2246 #include <stdio.h>
2247 ],
2248 [ printf("%s", __func__); ],
2249 [ ac_cv_cc_implements___func__="yes" ],
2250 [ ac_cv_cc_implements___func__="no" ]
2251 )
2252 ])
2253 if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
2254 AC_DEFINE(HAVE___func__)
2255 fi
2257 AC_CACHE_CHECK([whether getopt has optreset support],
2258 ac_cv_have_getopt_optreset, [
2259 AC_TRY_LINK(
2260 [
2261 #include <getopt.h>
2262 ],
2263 [ extern int optreset; optreset = 0; ],
2264 [ ac_cv_have_getopt_optreset="yes" ],
2265 [ ac_cv_have_getopt_optreset="no" ]
2266 )
2267 ])
2268 if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
2269 AC_DEFINE(HAVE_GETOPT_OPTRESET)
2270 fi
2272 AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
2273 AC_TRY_LINK([],
2274 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
2275 [ ac_cv_libc_defines_sys_errlist="yes" ],
2276 [ ac_cv_libc_defines_sys_errlist="no" ]
2277 )
2278 ])
2279 if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
2280 AC_DEFINE(HAVE_SYS_ERRLIST)
2281 fi
2284 AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
2285 AC_TRY_LINK([],
2286 [ extern int sys_nerr; printf("%i", sys_nerr);],
2287 [ ac_cv_libc_defines_sys_nerr="yes" ],
2288 [ ac_cv_libc_defines_sys_nerr="no" ]
2289 )
2290 ])
2291 if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
2292 AC_DEFINE(HAVE_SYS_NERR)
2293 fi
2295 SCARD_MSG="no"
2296 # Check whether user wants sectok support
2297 AC_ARG_WITH(sectok,
2298 [ --with-sectok Enable smartcard support using libsectok],
2299 [
2300 if test "x$withval" != "xno" ; then
2301 if test "x$withval" != "xyes" ; then
2302 CPPFLAGS="$CPPFLAGS -I${withval}"
2303 LDFLAGS="$LDFLAGS -L${withval}"
2304 if test ! -z "$need_dash_r" ; then
2305 LDFLAGS="$LDFLAGS -R${withval}"
2306 fi
2307 if test ! -z "$blibpath" ; then
2308 blibpath="$blibpath:${withval}"
2309 fi
2310 fi
2311 AC_CHECK_HEADERS(sectok.h)
2312 if test "$ac_cv_header_sectok_h" != yes; then
2313 AC_MSG_ERROR(Can't find sectok.h)
2314 fi
2315 AC_CHECK_LIB(sectok, sectok_open)
2316 if test "$ac_cv_lib_sectok_sectok_open" != yes; then
2317 AC_MSG_ERROR(Can't find libsectok)
2318 fi
2319 AC_DEFINE(SMARTCARD)
2320 AC_DEFINE(USE_SECTOK)
2321 SCARD_MSG="yes, using sectok"
2322 fi
2323 ]
2324 )
2326 # Check whether user wants OpenSC support
2327 AC_ARG_WITH(opensc,
2328 AC_HELP_STRING([--with-opensc=PFX],
2329 [Enable smartcard support using OpenSC]),
2330 opensc_config_prefix="$withval", opensc_config_prefix="")
2331 if test x$opensc_config_prefix != x ; then
2332 OPENSC_CONFIG=$opensc_config_prefix/bin/opensc-config
2333 AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
2334 if test "$OPENSC_CONFIG" != "no"; then
2335 LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
2336 LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
2337 CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
2338 LDFLAGS="$LDFLAGS $LIBOPENSC_LIBS"
2339 AC_DEFINE(SMARTCARD)
2340 AC_DEFINE(USE_OPENSC)
2341 SCARD_MSG="yes, using OpenSC"
2342 fi
2343 fi
2345 # Check libraries needed by DNS fingerprint support
2346 AC_SEARCH_LIBS(getrrsetbyname, resolv,
2347 [AC_DEFINE(HAVE_GETRRSETBYNAME)],
2348 [
2349 # Needed by our getrrsetbyname()
2350 AC_SEARCH_LIBS(res_query, resolv)
2351 AC_SEARCH_LIBS(dn_expand, resolv)
2352 AC_MSG_CHECKING(if res_query will link)
2353 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
2354 [AC_MSG_RESULT(no)
2355 saved_LIBS="$LIBS"
2356 LIBS="$LIBS -lresolv"
2357 AC_MSG_CHECKING(for res_query in -lresolv)
2358 AC_LINK_IFELSE([
2359 #include <resolv.h>
2360 int main()
2361 {
2362 res_query (0, 0, 0, 0, 0);
2363 return 0;
2364 }
2365 ],
2366 [LIBS="$LIBS -lresolv"
2367 AC_MSG_RESULT(yes)],
2368 [LIBS="$saved_LIBS"
2369 AC_MSG_RESULT(no)])
2370 ])
2371 AC_CHECK_FUNCS(_getshort _getlong)
2372 AC_CHECK_MEMBER(HEADER.ad,
2373 [AC_DEFINE(HAVE_HEADER_AD)],,
2374 [#include <arpa/nameser.h>])
2375 ])
2377 # Check whether user wants Kerberos 5 support
2378 KRB5_MSG="no"
2379 AC_ARG_WITH(kerberos5,
2380 [ --with-kerberos5=PATH Enable Kerberos 5 support],
2381 [ if test "x$withval" != "xno" ; then
2382 if test "x$withval" = "xyes" ; then
2383 KRB5ROOT="/usr/local"
2384 else
2385 KRB5ROOT=${withval}
2386 fi
2388 AC_DEFINE(KRB5)
2389 KRB5_MSG="yes"
2391 AC_MSG_CHECKING(for krb5-config)
2392 if test -x $KRB5ROOT/bin/krb5-config ; then
2393 KRB5CONF=$KRB5ROOT/bin/krb5-config
2394 AC_MSG_RESULT($KRB5CONF)
2396 AC_MSG_CHECKING(for gssapi support)
2397 if $KRB5CONF | grep gssapi >/dev/null ; then
2398 AC_MSG_RESULT(yes)
2399 AC_DEFINE(GSSAPI)
2400 k5confopts=gssapi
2401 else
2402 AC_MSG_RESULT(no)
2403 k5confopts=""
2404 fi
2405 K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
2406 K5LIBS="`$KRB5CONF --libs $k5confopts`"
2407 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
2408 AC_MSG_CHECKING(whether we are using Heimdal)
2409 AC_TRY_COMPILE([ #include <krb5.h> ],
2410 [ char *tmp = heimdal_version; ],
2411 [ AC_MSG_RESULT(yes)
2412 AC_DEFINE(HEIMDAL) ],
2413 AC_MSG_RESULT(no)
2414 )
2415 else
2416 AC_MSG_RESULT(no)
2417 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
2418 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
2419 AC_MSG_CHECKING(whether we are using Heimdal)
2420 AC_TRY_COMPILE([ #include <krb5.h> ],
2421 [ char *tmp = heimdal_version; ],
2422 [ AC_MSG_RESULT(yes)
2423 AC_DEFINE(HEIMDAL)
2424 K5LIBS="-lkrb5 -ldes"
2425 K5LIBS="$K5LIBS -lcom_err -lasn1"
2426 AC_CHECK_LIB(roken, net_write,
2427 [K5LIBS="$K5LIBS -lroken"])
2428 ],
2429 [ AC_MSG_RESULT(no)
2430 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
2431 ]
2432 )
2433 AC_SEARCH_LIBS(dn_expand, resolv)
2435 AC_CHECK_LIB(gssapi,gss_init_sec_context,
2436 [ AC_DEFINE(GSSAPI)
2437 K5LIBS="-lgssapi $K5LIBS" ],
2438 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
2439 [ AC_DEFINE(GSSAPI)
2440 K5LIBS="-lgssapi_krb5 $K5LIBS" ],
2441 AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
2442 $K5LIBS)
2443 ],
2444 $K5LIBS)
2446 AC_CHECK_HEADER(gssapi.h, ,
2447 [ unset ac_cv_header_gssapi_h
2448 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2449 AC_CHECK_HEADERS(gssapi.h, ,
2450 AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
2451 )
2452 ]
2453 )
2455 oldCPP="$CPPFLAGS"
2456 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2457 AC_CHECK_HEADER(gssapi_krb5.h, ,
2458 [ CPPFLAGS="$oldCPP" ])
2460 fi
2461 if test ! -z "$need_dash_r" ; then
2462 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
2463 fi
2464 if test ! -z "$blibpath" ; then
2465 blibpath="$blibpath:${KRB5ROOT}/lib"
2466 fi
2467 fi
2469 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
2470 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
2471 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
2473 LIBS="$LIBS $K5LIBS"
2474 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS))
2475 AC_SEARCH_LIBS(krb5_init_ets, $K5LIBS, AC_DEFINE(KRB5_INIT_ETS))
2476 ]
2477 )
2479 # Looking for programs, paths and files
2481 PRIVSEP_PATH=/var/empty
2482 AC_ARG_WITH(privsep-path,
2483 [ --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
2484 [
2485 if test "x$withval" != "$no" ; then
2486 PRIVSEP_PATH=$withval
2487 fi
2488 ]
2489 )
2490 AC_SUBST(PRIVSEP_PATH)
2492 AC_ARG_WITH(xauth,
2493 [ --with-xauth=PATH Specify path to xauth program ],
2494 [
2495 if test "x$withval" != "xno" ; then
2496 xauth_path=$withval
2497 fi
2498 ],
2499 [
2500 TestPath="$PATH"
2501 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
2502 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
2503 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
2504 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
2505 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
2506 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
2507 xauth_path="/usr/openwin/bin/xauth"
2508 fi
2509 ]
2510 )
2512 STRIP_OPT=-s
2513 AC_ARG_ENABLE(strip,
2514 [ --disable-strip Disable calling strip(1) on install],
2515 [
2516 if test "x$enableval" = "xno" ; then
2517 STRIP_OPT=
2518 fi
2519 ]
2520 )
2521 AC_SUBST(STRIP_OPT)
2523 if test -z "$xauth_path" ; then
2524 XAUTH_PATH="undefined"
2525 AC_SUBST(XAUTH_PATH)
2526 else
2527 AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path")
2528 XAUTH_PATH=$xauth_path
2529 AC_SUBST(XAUTH_PATH)
2530 fi
2532 # Check for mail directory (last resort if we cannot get it from headers)
2533 if test ! -z "$MAIL" ; then
2534 maildir=`dirname $MAIL`
2535 AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir")
2536 fi
2538 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
2539 AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
2540 disable_ptmx_check=yes
2541 fi
2542 if test -z "$no_dev_ptmx" ; then
2543 if test "x$disable_ptmx_check" != "xyes" ; then
2544 AC_CHECK_FILE("/dev/ptmx",
2545 [
2546 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX)
2547 have_dev_ptmx=1
2548 ]
2549 )
2550 fi
2551 fi
2553 if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
2554 AC_CHECK_FILE("/dev/ptc",
2555 [
2556 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC)
2557 have_dev_ptc=1
2558 ]
2559 )
2560 else
2561 AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
2562 fi
2564 # Options from here on. Some of these are preset by platform above
2565 AC_ARG_WITH(mantype,
2566 [ --with-mantype=man|cat|doc Set man page type],
2567 [
2568 case "$withval" in
2569 man|cat|doc)
2570 MANTYPE=$withval
2571 ;;
2572 *)
2573 AC_MSG_ERROR(invalid man type: $withval)
2574 ;;
2575 esac
2576 ]
2577 )
2578 if test -z "$MANTYPE"; then
2579 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
2580 AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
2581 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
2582 MANTYPE=doc
2583 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
2584 MANTYPE=man
2585 else
2586 MANTYPE=cat
2587 fi
2588 fi
2589 AC_SUBST(MANTYPE)
2590 if test "$MANTYPE" = "doc"; then
2591 mansubdir=man;
2592 else
2593 mansubdir=$MANTYPE;
2594 fi
2595 AC_SUBST(mansubdir)
2597 # Check whether to enable MD5 passwords
2598 MD5_MSG="no"
2599 AC_ARG_WITH(md5-passwords,
2600 [ --with-md5-passwords Enable use of MD5 passwords],
2601 [
2602 if test "x$withval" != "xno" ; then
2603 AC_DEFINE(HAVE_MD5_PASSWORDS)
2604 MD5_MSG="yes"
2605 fi
2606 ]
2607 )
2609 # Whether to disable shadow password support
2610 AC_ARG_WITH(shadow,
2611 [ --without-shadow Disable shadow password support],
2612 [
2613 if test "x$withval" = "xno" ; then
2614 AC_DEFINE(DISABLE_SHADOW)
2615 disable_shadow=yes
2616 fi
2617 ]
2618 )
2620 if test -z "$disable_shadow" ; then
2621 AC_MSG_CHECKING([if the systems has expire shadow information])
2622 AC_TRY_COMPILE(
2623 [
2624 #include <sys/types.h>
2625 #include <shadow.h>
2626 struct spwd sp;
2627 ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
2628 [ sp_expire_available=yes ], []
2629 )
2631 if test "x$sp_expire_available" = "xyes" ; then
2632 AC_MSG_RESULT(yes)
2633 AC_DEFINE(HAS_SHADOW_EXPIRE)
2634 else
2635 AC_MSG_RESULT(no)
2636 fi
2637 fi
2639 # Use ip address instead of hostname in $DISPLAY
2640 if test ! -z "$IPADDR_IN_DISPLAY" ; then
2641 DISPLAY_HACK_MSG="yes"
2642 AC_DEFINE(IPADDR_IN_DISPLAY)
2643 else
2644 DISPLAY_HACK_MSG="no"
2645 AC_ARG_WITH(ipaddr-display,
2646 [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY],
2647 [
2648 if test "x$withval" != "xno" ; then
2649 AC_DEFINE(IPADDR_IN_DISPLAY)
2650 DISPLAY_HACK_MSG="yes"
2651 fi
2652 ]
2653 )
2654 fi
2656 # check for /etc/default/login and use it if present.
2657 AC_ARG_ENABLE(etc-default-login,
2658 [ --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
2659 [ if test "x$enableval" = "xno"; then
2660 AC_MSG_NOTICE([/etc/default/login handling disabled])
2661 etc_default_login=no
2662 else
2663 etc_default_login=yes
2664 fi ],
2665 [ etc_default_login=yes ]
2666 )
2668 if test "x$etc_default_login" != "xno"; then
2669 AC_CHECK_FILE("/etc/default/login",
2670 [ external_path_file=/etc/default/login ])
2671 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
2672 then
2673 AC_MSG_WARN([cross compiling: Disabling /etc/default/login test])
2674 elif test "x$external_path_file" = "x/etc/default/login"; then
2675 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN)
2676 fi
2677 fi
2679 dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
2680 if test $ac_cv_func_login_getcapbool = "yes" -a \
2681 $ac_cv_header_login_cap_h = "yes" ; then
2682 external_path_file=/etc/login.conf
2683 fi
2685 # Whether to mess with the default path
2686 SERVER_PATH_MSG="(default)"
2687 AC_ARG_WITH(default-path,
2688 [ --with-default-path= Specify default \$PATH environment for server],
2689 [
2690 if test "x$external_path_file" = "x/etc/login.conf" ; then
2691 AC_MSG_WARN([
2692 --with-default-path=PATH has no effect on this system.
2693 Edit /etc/login.conf instead.])
2694 elif test "x$withval" != "xno" ; then
2695 if test ! -z "$external_path_file" ; then
2696 AC_MSG_WARN([
2697 --with-default-path=PATH will only be used if PATH is not defined in
2698 $external_path_file .])
2699 fi
2700 user_path="$withval"
2701 SERVER_PATH_MSG="$withval"
2702 fi
2703 ],
2704 [ if test "x$external_path_file" = "x/etc/login.conf" ; then
2705 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
2706 else
2707 if test ! -z "$external_path_file" ; then
2708 AC_MSG_WARN([
2709 If PATH is defined in $external_path_file, ensure the path to scp is included,
2710 otherwise scp will not work.])
2711 fi
2712 AC_TRY_RUN(
2713 [
2714 /* find out what STDPATH is */
2715 #include <stdio.h>
2716 #ifdef HAVE_PATHS_H
2717 # include <paths.h>
2718 #endif
2719 #ifndef _PATH_STDPATH
2720 # ifdef _PATH_USERPATH /* Irix */
2721 # define _PATH_STDPATH _PATH_USERPATH
2722 # else
2723 # define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
2724 # endif
2725 #endif
2726 #include <sys/types.h>
2727 #include <sys/stat.h>
2728 #include <fcntl.h>
2729 #define DATA "conftest.stdpath"
2731 main()
2732 {
2733 FILE *fd;
2734 int rc;
2736 fd = fopen(DATA,"w");
2737 if(fd == NULL)
2738 exit(1);
2740 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
2741 exit(1);
2743 exit(0);
2744 }
2745 ], [ user_path=`cat conftest.stdpath` ],
2746 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
2747 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
2748 )
2749 # make sure $bindir is in USER_PATH so scp will work
2750 t_bindir=`eval echo ${bindir}`
2751 case $t_bindir in
2752 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
2753 esac
2754 case $t_bindir in
2755 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
2756 esac
2757 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
2758 if test $? -ne 0 ; then
2759 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
2760 if test $? -ne 0 ; then
2761 user_path=$user_path:$t_bindir
2762 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
2763 fi
2764 fi
2765 fi ]
2766 )
2767 if test "x$external_path_file" != "x/etc/login.conf" ; then
2768 AC_DEFINE_UNQUOTED(USER_PATH, "$user_path")
2769 AC_SUBST(user_path)
2770 fi
2772 # Set superuser path separately to user path
2773 AC_ARG_WITH(superuser-path,
2774 [ --with-superuser-path= Specify different path for super-user],
2775 [
2776 if test "x$withval" != "xno" ; then
2777 AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval")
2778 superuser_path=$withval
2779 fi
2780 ]
2781 )
2784 AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
2785 IPV4_IN6_HACK_MSG="no"
2786 AC_ARG_WITH(4in6,
2787 [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses],
2788 [
2789 if test "x$withval" != "xno" ; then
2790 AC_MSG_RESULT(yes)
2791 AC_DEFINE(IPV4_IN_IPV6)
2792 IPV4_IN6_HACK_MSG="yes"
2793 else
2794 AC_MSG_RESULT(no)
2795 fi
2796 ],[
2797 if test "x$inet6_default_4in6" = "xyes"; then
2798 AC_MSG_RESULT([yes (default)])
2799 AC_DEFINE(IPV4_IN_IPV6)
2800 IPV4_IN6_HACK_MSG="yes"
2801 else
2802 AC_MSG_RESULT([no (default)])
2803 fi
2804 ]
2805 )
2807 # Whether to enable BSD auth support
2808 BSD_AUTH_MSG=no
2809 AC_ARG_WITH(bsd-auth,
2810 [ --with-bsd-auth Enable BSD auth support],
2811 [
2812 if test "x$withval" != "xno" ; then
2813 AC_DEFINE(BSD_AUTH)
2814 BSD_AUTH_MSG=yes
2815 fi
2816 ]
2817 )
2819 # Where to place sshd.pid
2820 piddir=/var/run
2821 # make sure the directory exists
2822 if test ! -d $piddir ; then
2823 piddir=`eval echo ${sysconfdir}`
2824 case $piddir in
2825 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
2826 esac
2827 fi
2829 AC_ARG_WITH(pid-dir,
2830 [ --with-pid-dir=PATH Specify location of ssh.pid file],
2831 [
2832 if test "x$withval" != "xno" ; then
2833 piddir=$withval
2834 if test ! -d $piddir ; then
2835 AC_MSG_WARN([** no $piddir directory on this system **])
2836 fi
2837 fi
2838 ]
2839 )
2841 AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir")
2842 AC_SUBST(piddir)
2844 dnl allow user to disable some login recording features
2845 AC_ARG_ENABLE(lastlog,
2846 [ --disable-lastlog disable use of lastlog even if detected [no]],
2847 [
2848 if test "x$enableval" = "xno" ; then
2849 AC_DEFINE(DISABLE_LASTLOG)
2850 fi
2851 ]
2852 )
2853 AC_ARG_ENABLE(utmp,
2854 [ --disable-utmp disable use of utmp even if detected [no]],
2855 [
2856 if test "x$enableval" = "xno" ; then
2857 AC_DEFINE(DISABLE_UTMP)
2858 fi
2859 ]
2860 )
2861 AC_ARG_ENABLE(utmpx,
2862 [ --disable-utmpx disable use of utmpx even if detected [no]],
2863 [
2864 if test "x$enableval" = "xno" ; then
2865 AC_DEFINE(DISABLE_UTMPX)
2866 fi
2867 ]
2868 )
2869 AC_ARG_ENABLE(wtmp,
2870 [ --disable-wtmp disable use of wtmp even if detected [no]],
2871 [
2872 if test "x$enableval" = "xno" ; then
2873 AC_DEFINE(DISABLE_WTMP)
2874 fi
2875 ]
2876 )
2877 AC_ARG_ENABLE(wtmpx,
2878 [ --disable-wtmpx disable use of wtmpx even if detected [no]],
2879 [
2880 if test "x$enableval" = "xno" ; then
2881 AC_DEFINE(DISABLE_WTMPX)
2882 fi
2883 ]
2884 )
2885 AC_ARG_ENABLE(libutil,
2886 [ --disable-libutil disable use of libutil (login() etc.) [no]],
2887 [
2888 if test "x$enableval" = "xno" ; then
2889 AC_DEFINE(DISABLE_LOGIN)
2890 fi
2891 ]
2892 )
2893 AC_ARG_ENABLE(pututline,
2894 [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]],
2895 [
2896 if test "x$enableval" = "xno" ; then
2897 AC_DEFINE(DISABLE_PUTUTLINE)
2898 fi
2899 ]
2900 )
2901 AC_ARG_ENABLE(pututxline,
2902 [ --disable-pututxline disable use of pututxline() etc. ([uw]tmpx) [no]],
2903 [
2904 if test "x$enableval" = "xno" ; then
2905 AC_DEFINE(DISABLE_PUTUTXLINE)
2906 fi
2907 ]
2908 )
2909 AC_ARG_WITH(lastlog,
2910 [ --with-lastlog=FILE|DIR specify lastlog location [common locations]],
2911 [
2912 if test "x$withval" = "xno" ; then
2913 AC_DEFINE(DISABLE_LASTLOG)
2914 else
2915 conf_lastlog_location=$withval
2916 fi
2917 ]
2918 )
2920 dnl lastlog, [uw]tmpx? detection
2921 dnl NOTE: set the paths in the platform section to avoid the
2922 dnl need for command-line parameters
2923 dnl lastlog and [uw]tmp are subject to a file search if all else fails
2925 dnl lastlog detection
2926 dnl NOTE: the code itself will detect if lastlog is a directory
2927 AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
2928 AC_TRY_COMPILE([
2929 #include <sys/types.h>
2930 #include <utmp.h>
2931 #ifdef HAVE_LASTLOG_H
2932 # include <lastlog.h>
2933 #endif
2934 #ifdef HAVE_PATHS_H
2935 # include <paths.h>
2936 #endif
2937 #ifdef HAVE_LOGIN_H
2938 # include <login.h>
2939 #endif
2940 ],
2941 [ char *lastlog = LASTLOG_FILE; ],
2942 [ AC_MSG_RESULT(yes) ],
2943 [
2944 AC_MSG_RESULT(no)
2945 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
2946 AC_TRY_COMPILE([
2947 #include <sys/types.h>
2948 #include <utmp.h>
2949 #ifdef HAVE_LASTLOG_H
2950 # include <lastlog.h>
2951 #endif
2952 #ifdef HAVE_PATHS_H
2953 # include <paths.h>
2954 #endif
2955 ],
2956 [ char *lastlog = _PATH_LASTLOG; ],
2957 [ AC_MSG_RESULT(yes) ],
2958 [
2959 AC_MSG_RESULT(no)
2960 system_lastlog_path=no
2961 ])
2962 ]
2963 )
2965 if test -z "$conf_lastlog_location"; then
2966 if test x"$system_lastlog_path" = x"no" ; then
2967 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
2968 if (test -d "$f" || test -f "$f") ; then
2969 conf_lastlog_location=$f
2970 fi
2971 done
2972 if test -z "$conf_lastlog_location"; then
2973 AC_MSG_WARN([** Cannot find lastlog **])
2974 dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
2975 fi
2976 fi
2977 fi
2979 if test -n "$conf_lastlog_location"; then
2980 AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location")
2981 fi
2983 dnl utmp detection
2984 AC_MSG_CHECKING([if your system defines UTMP_FILE])
2985 AC_TRY_COMPILE([
2986 #include <sys/types.h>
2987 #include <utmp.h>
2988 #ifdef HAVE_PATHS_H
2989 # include <paths.h>
2990 #endif
2991 ],
2992 [ char *utmp = UTMP_FILE; ],
2993 [ AC_MSG_RESULT(yes) ],
2994 [ AC_MSG_RESULT(no)
2995 system_utmp_path=no ]
2996 )
2997 if test -z "$conf_utmp_location"; then
2998 if test x"$system_utmp_path" = x"no" ; then
2999 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3000 if test -f $f ; then
3001 conf_utmp_location=$f
3002 fi
3003 done
3004 if test -z "$conf_utmp_location"; then
3005 AC_DEFINE(DISABLE_UTMP)
3006 fi
3007 fi
3008 fi
3009 if test -n "$conf_utmp_location"; then
3010 AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location")
3011 fi
3013 dnl wtmp detection
3014 AC_MSG_CHECKING([if your system defines WTMP_FILE])
3015 AC_TRY_COMPILE([
3016 #include <sys/types.h>
3017 #include <utmp.h>
3018 #ifdef HAVE_PATHS_H
3019 # include <paths.h>
3020 #endif
3021 ],
3022 [ char *wtmp = WTMP_FILE; ],
3023 [ AC_MSG_RESULT(yes) ],
3024 [ AC_MSG_RESULT(no)
3025 system_wtmp_path=no ]
3026 )
3027 if test -z "$conf_wtmp_location"; then
3028 if test x"$system_wtmp_path" = x"no" ; then
3029 for f in /usr/adm/wtmp /var/log/wtmp; do
3030 if test -f $f ; then
3031 conf_wtmp_location=$f
3032 fi
3033 done
3034 if test -z "$conf_wtmp_location"; then
3035 AC_DEFINE(DISABLE_WTMP)
3036 fi
3037 fi
3038 fi
3039 if test -n "$conf_wtmp_location"; then
3040 AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location")
3041 fi
3044 dnl utmpx detection - I don't know any system so perverse as to require
3045 dnl utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3046 dnl there, though.
3047 AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3048 AC_TRY_COMPILE([
3049 #include <sys/types.h>
3050 #include <utmp.h>
3051 #ifdef HAVE_UTMPX_H
3052 #include <utmpx.h>
3053 #endif
3054 #ifdef HAVE_PATHS_H
3055 # include <paths.h>
3056 #endif
3057 ],
3058 [ char *utmpx = UTMPX_FILE; ],
3059 [ AC_MSG_RESULT(yes) ],
3060 [ AC_MSG_RESULT(no)
3061 system_utmpx_path=no ]
3062 )
3063 if test -z "$conf_utmpx_location"; then
3064 if test x"$system_utmpx_path" = x"no" ; then
3065 AC_DEFINE(DISABLE_UTMPX)
3066 fi
3067 else
3068 AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location")
3069 fi
3071 dnl wtmpx detection
3072 AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3073 AC_TRY_COMPILE([
3074 #include <sys/types.h>
3075 #include <utmp.h>
3076 #ifdef HAVE_UTMPX_H
3077 #include <utmpx.h>
3078 #endif
3079 #ifdef HAVE_PATHS_H
3080 # include <paths.h>
3081 #endif
3082 ],
3083 [ char *wtmpx = WTMPX_FILE; ],
3084 [ AC_MSG_RESULT(yes) ],
3085 [ AC_MSG_RESULT(no)
3086 system_wtmpx_path=no ]
3087 )
3088 if test -z "$conf_wtmpx_location"; then
3089 if test x"$system_wtmpx_path" = x"no" ; then
3090 AC_DEFINE(DISABLE_WTMPX)
3091 fi
3092 else
3093 AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location")
3094 fi
3097 if test ! -z "$blibpath" ; then
3098 LDFLAGS="$LDFLAGS $blibflags$blibpath"
3099 AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
3100 fi
3102 dnl remove pam and dl because they are in $LIBPAM
3103 if test "$PAM_MSG" = yes ; then
3104 LIBS=`echo $LIBS | sed 's/-lpam //'`
3105 fi
3106 if test "$ac_cv_lib_pam_pam_set_item" = yes ; then
3107 LIBS=`echo $LIBS | sed 's/-ldl //'`
3108 fi
3110 AC_EXEEXT
3111 AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openbsd-compat/Makefile \
3112 scard/Makefile ssh_prng_cmds survey.sh])
3113 AC_OUTPUT
3115 # Print summary of options
3117 # Someone please show me a better way :)
3118 A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3119 B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3120 C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3121 D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
3122 E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
3123 F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
3124 G=`eval echo ${piddir}` ; G=`eval echo ${G}`
3125 H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3126 I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3127 J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
3129 echo ""
3130 echo "OpenSSH has been configured with the following options:"
3131 echo " User binaries: $B"
3132 echo " System binaries: $C"
3133 echo " Configuration files: $D"
3134 echo " Askpass program: $E"
3135 echo " Manual pages: $F"
3136 echo " PID file: $G"
3137 echo " Privilege separation chroot path: $H"
3138 if test "x$external_path_file" = "x/etc/login.conf" ; then
3139 echo " At runtime, sshd will use the path defined in $external_path_file"
3140 echo " Make sure the path to scp is present, otherwise scp will not work"
3141 else
3142 echo " sshd default user PATH: $I"
3143 if test ! -z "$external_path_file"; then
3144 echo " (If PATH is set in $external_path_file it will be used instead. If"
3145 echo " used, ensure the path to scp is present, otherwise scp will not work.)"
3146 fi
3147 fi
3148 if test ! -z "$superuser_path" ; then
3149 echo " sshd superuser user PATH: $J"
3150 fi
3151 echo " Manpage format: $MANTYPE"
3152 echo " PAM support: $PAM_MSG"
3153 echo " KerberosV support: $KRB5_MSG"
3154 echo " Smartcard support: $SCARD_MSG"
3155 echo " S/KEY support: $SKEY_MSG"
3156 echo " TCP Wrappers support: $TCPW_MSG"
3157 echo " MD5 password support: $MD5_MSG"
3158 echo " libedit support: $LIBEDIT_MSG"
3159 echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
3160 echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3161 echo " BSD Auth support: $BSD_AUTH_MSG"
3162 echo " Random number source: $RAND_MSG"
3163 if test ! -z "$USE_RAND_HELPER" ; then
3164 echo " ssh-rand-helper collects from: $RAND_HELPER_MSG"
3165 fi
3167 echo ""
3169 echo " Host: ${host}"
3170 echo " Compiler: ${CC}"
3171 echo " Compiler flags: ${CFLAGS}"
3172 echo "Preprocessor flags: ${CPPFLAGS}"
3173 echo " Linker flags: ${LDFLAGS}"
3174 echo " Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
3176 echo ""
3178 if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
3179 echo "SVR4 style packages are supported with \"make package\""
3180 echo ""
3181 fi
3183 if test "x$PAM_MSG" = "xyes" ; then
3184 echo "PAM is enabled. You may need to install a PAM control file "
3185 echo "for sshd, otherwise password authentication may fail. "
3186 echo "Example PAM control files can be found in the contrib/ "
3187 echo "subdirectory"
3188 echo ""
3189 fi
3191 if test ! -z "$RAND_HELPER_CMDHASH" ; then
3192 echo "WARNING: you are using the builtin random number collection "
3193 echo "service. Please read WARNING.RNG and request that your OS "
3194 echo "vendor includes kernel-based random number collection in "
3195 echo "future versions of your OS."
3196 echo ""
3197 fi
3199 if test ! -z "$NO_PEERCHECK" ; then
3200 echo "WARNING: the operating system that you are using does not "
3201 echo "appear to support either the getpeereid() API nor the "
3202 echo "SO_PEERCRED getsockopt() option. These facilities are used to "
3203 echo "enforce security checks to prevent unauthorised connections to "
3204 echo "ssh-agent. Their absence increases the risk that a malicious "
3205 echo "user can connect to your agent. "
3206 echo ""
3207 fi
3209 if test "$AUDIT_MODULE" = "bsm" ; then
3210 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
3211 echo "See the Solaris section in README.platform for details."
3212 fi