| blob | 20c8f15872c0f90d857b072e65b94e8c31ea04c2 |
1 # $Id: configure.ac,v 1.260 2005/04/24 07:52:23 dtucker Exp $
2 #
3 # Copyright (c) 1999-2004 Damien Miller
4 #
5 # Permission to use, copy, modify, and distribute this software for any
6 # purpose with or without fee is hereby granted, provided that the above
7 # copyright notice and this permission notice appear in all copies.
8 #
9 # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10 # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11 # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12 # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13 # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14 # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15 # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 AC_INIT(OpenSSH, Portable)
18 AC_CONFIG_SRCDIR([ssh.c])
20 AC_CONFIG_HEADER(config.h)
21 AC_PROG_CC
22 AC_CANONICAL_HOST
23 AC_C_BIGENDIAN
25 # Checks for programs.
26 AC_PROG_AWK
27 AC_PROG_CPP
28 AC_PROG_RANLIB
29 AC_PROG_INSTALL
30 AC_PATH_PROG(AR, ar)
31 AC_PATH_PROG(CAT, cat)
32 AC_PATH_PROG(KILL, kill)
33 AC_PATH_PROGS(PERL, perl5 perl)
34 AC_PATH_PROG(SED, sed)
35 AC_SUBST(PERL)
36 AC_PATH_PROG(ENT, ent)
37 AC_SUBST(ENT)
38 AC_PATH_PROG(TEST_MINUS_S_SH, bash)
39 AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
40 AC_PATH_PROG(TEST_MINUS_S_SH, sh)
41 AC_PATH_PROG(SH, sh)
42 AC_SUBST(TEST_SHELL,sh)
44 dnl for buildpkg.sh
45 AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
46 [/usr/sbin${PATH_SEPARATOR}/etc])
47 AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
48 [/usr/sbin${PATH_SEPARATOR}/etc])
49 AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
51 # System features
52 AC_SYS_LARGEFILE
54 if test -z "$AR" ; then
55 AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
56 fi
58 # Use LOGIN_PROGRAM from environment if possible
59 if test ! -z "$LOGIN_PROGRAM" ; then
60 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM")
61 else
62 # Search for login
63 AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
64 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
65 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
66 fi
67 fi
69 AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
70 if test ! -z "$PATH_PASSWD_PROG" ; then
71 AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG")
72 fi
74 if test -z "$LD" ; then
75 LD=$CC
76 fi
77 AC_SUBST(LD)
79 AC_C_INLINE
80 if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
81 CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wno-uninitialized"
82 fi
84 AC_ARG_WITH(rpath,
85 [ --without-rpath Disable auto-added -R linker paths],
86 [
87 if test "x$withval" = "xno" ; then
88 need_dash_r=""
89 fi
90 if test "x$withval" = "xyes" ; then
91 need_dash_r=1
92 fi
93 ]
94 )
96 # Check for some target-specific stuff
97 case "$host" in
98 *-*-aix*)
99 AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
100 if (test -z "$blibpath"); then
101 blibpath="/usr/lib:/lib"
102 fi
103 saved_LDFLAGS="$LDFLAGS"
104 for tryflags in -blibpath: -Wl,-blibpath: -Wl,-rpath, ;do
105 if (test -z "$blibflags"); then
106 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
107 AC_TRY_LINK([], [], [blibflags=$tryflags])
108 fi
109 done
110 if (test -z "$blibflags"); then
111 AC_MSG_RESULT(not found)
112 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
113 else
114 AC_MSG_RESULT($blibflags)
115 fi
116 LDFLAGS="$saved_LDFLAGS"
117 dnl Check for authenticate. Might be in libs.a on older AIXes
118 AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE)],
119 [AC_CHECK_LIB(s,authenticate,
120 [ AC_DEFINE(WITH_AIXAUTHENTICATE)
121 LIBS="$LIBS -ls"
122 ])
123 ])
124 dnl Check for various auth function declarations in headers.
125 AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
126 passwdexpired, setauthdb], , , [#include <usersec.h>])
127 dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
128 AC_CHECK_DECLS(loginfailed,
129 [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
130 AC_TRY_COMPILE(
131 [#include <usersec.h>],
132 [(void)loginfailed("user","host","tty",0);],
133 [AC_MSG_RESULT(yes)
134 AC_DEFINE(AIX_LOGINFAILED_4ARG)],
135 [AC_MSG_RESULT(no)]
136 )],
137 [],
138 [#include <usersec.h>]
139 )
140 AC_CHECK_FUNCS(setauthdb)
141 check_for_aix_broken_getaddrinfo=1
142 AC_DEFINE(BROKEN_REALPATH)
143 AC_DEFINE(SETEUID_BREAKS_SETUID)
144 AC_DEFINE(BROKEN_SETREUID)
145 AC_DEFINE(BROKEN_SETREGID)
146 dnl AIX handles lastlog as part of its login message
147 AC_DEFINE(DISABLE_LASTLOG)
148 AC_DEFINE(LOGIN_NEEDS_UTMPX)
149 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
150 ;;
151 *-*-cygwin*)
152 check_for_libcrypt_later=1
153 LIBS="$LIBS /usr/lib/textmode.o"
154 AC_DEFINE(HAVE_CYGWIN)
155 AC_DEFINE(USE_PIPES)
156 AC_DEFINE(DISABLE_SHADOW)
157 AC_DEFINE(IP_TOS_IS_BROKEN)
158 AC_DEFINE(NO_X11_UNIX_SOCKETS)
159 AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT)
160 AC_DEFINE(DISABLE_FD_PASSING)
161 ;;
162 *-*-dgux*)
163 AC_DEFINE(IP_TOS_IS_BROKEN)
164 AC_DEFINE(SETEUID_BREAKS_SETUID)
165 AC_DEFINE(BROKEN_SETREUID)
166 AC_DEFINE(BROKEN_SETREGID)
167 ;;
168 *-*-darwin*)
169 AC_MSG_CHECKING(if we have working getaddrinfo)
170 AC_TRY_RUN([#include <mach-o/dyld.h>
171 main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
172 exit(0);
173 else
174 exit(1);
175 }], [AC_MSG_RESULT(working)],
176 [AC_MSG_RESULT(buggy)
177 AC_DEFINE(BROKEN_GETADDRINFO)],
178 [AC_MSG_RESULT(assume it is working)])
179 AC_DEFINE(SETEUID_BREAKS_SETUID)
180 AC_DEFINE(BROKEN_SETREUID)
181 AC_DEFINE(BROKEN_SETREGID)
182 AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1)
183 ;;
184 *-*-hpux10.26)
185 if test -z "$GCC"; then
186 CFLAGS="$CFLAGS -Ae"
187 fi
188 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
189 IPADDR_IN_DISPLAY=yes
190 AC_DEFINE(HAVE_SECUREWARE)
191 AC_DEFINE(USE_PIPES)
192 AC_DEFINE(LOGIN_NO_ENDOPT)
193 AC_DEFINE(LOGIN_NEEDS_UTMPX)
194 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
195 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
196 LIBS="$LIBS -lsec -lsecpw"
197 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
198 disable_ptmx_check=yes
199 ;;
200 *-*-hpux10*)
201 if test -z "$GCC"; then
202 CFLAGS="$CFLAGS -Ae"
203 fi
204 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
205 IPADDR_IN_DISPLAY=yes
206 AC_DEFINE(USE_PIPES)
207 AC_DEFINE(LOGIN_NO_ENDOPT)
208 AC_DEFINE(LOGIN_NEEDS_UTMPX)
209 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
210 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
211 LIBS="$LIBS -lsec"
212 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
213 ;;
214 *-*-hpux11*)
215 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
216 IPADDR_IN_DISPLAY=yes
217 AC_DEFINE(PAM_SUN_CODEBASE)
218 AC_DEFINE(USE_PIPES)
219 AC_DEFINE(LOGIN_NO_ENDOPT)
220 AC_DEFINE(LOGIN_NEEDS_UTMPX)
221 AC_DEFINE(DISABLE_UTMP)
222 AC_DEFINE(LOCKED_PASSWD_STRING, "*")
223 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
224 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
225 check_for_hpux_broken_getaddrinfo=1
226 check_for_conflicting_getspnam=1
227 LIBS="$LIBS -lsec"
228 AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
229 ;;
230 *-*-irix5*)
231 PATH="$PATH:/usr/etc"
232 AC_DEFINE(BROKEN_INET_NTOA)
233 AC_DEFINE(SETEUID_BREAKS_SETUID)
234 AC_DEFINE(BROKEN_SETREUID)
235 AC_DEFINE(BROKEN_SETREGID)
236 AC_DEFINE(WITH_ABBREV_NO_TTY)
237 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
238 ;;
239 *-*-irix6*)
240 PATH="$PATH:/usr/etc"
241 AC_DEFINE(WITH_IRIX_ARRAY)
242 AC_DEFINE(WITH_IRIX_PROJECT)
243 AC_DEFINE(WITH_IRIX_AUDIT)
244 AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS)])
245 AC_DEFINE(BROKEN_INET_NTOA)
246 AC_DEFINE(SETEUID_BREAKS_SETUID)
247 AC_DEFINE(BROKEN_SETREUID)
248 AC_DEFINE(BROKEN_SETREGID)
249 AC_DEFINE(BROKEN_UPDWTMPX)
250 AC_DEFINE(WITH_ABBREV_NO_TTY)
251 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
252 ;;
253 *-*-linux*)
254 no_dev_ptmx=1
255 check_for_libcrypt_later=1
256 check_for_openpty_ctty_bug=1
257 AC_DEFINE(DONT_TRY_OTHER_AF)
258 AC_DEFINE(PAM_TTY_KLUDGE)
259 AC_DEFINE(LOCKED_PASSWD_PREFIX, "!")
260 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
261 AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM)
262 AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
263 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
264 inet6_default_4in6=yes
265 case `uname -r` in
266 1.*|2.0.*)
267 AC_DEFINE(BROKEN_CMSG_TYPE)
268 ;;
269 esac
270 ;;
271 mips-sony-bsd|mips-sony-newsos4)
272 AC_DEFINE(HAVE_NEWS4)
273 SONY=1
274 ;;
275 *-*-netbsd*)
276 check_for_libcrypt_before=1
277 if test "x$withval" != "xno" ; then
278 need_dash_r=1
279 fi
280 ;;
281 *-*-freebsd*)
282 check_for_libcrypt_later=1
283 ;;
284 *-*-bsdi*)
285 AC_DEFINE(SETEUID_BREAKS_SETUID)
286 AC_DEFINE(BROKEN_SETREUID)
287 AC_DEFINE(BROKEN_SETREGID)
288 ;;
289 *-next-*)
290 conf_lastlog_location="/usr/adm/lastlog"
291 conf_utmp_location=/etc/utmp
292 conf_wtmp_location=/usr/adm/wtmp
293 MAIL=/usr/spool/mail
294 AC_DEFINE(HAVE_NEXT)
295 AC_DEFINE(BROKEN_REALPATH)
296 AC_DEFINE(USE_PIPES)
297 AC_DEFINE(BROKEN_SAVED_UIDS)
298 ;;
299 *-*-solaris*)
300 if test "x$withval" != "xno" ; then
301 need_dash_r=1
302 fi
303 AC_DEFINE(PAM_SUN_CODEBASE)
304 AC_DEFINE(LOGIN_NEEDS_UTMPX)
305 AC_DEFINE(LOGIN_NEEDS_TERM)
306 AC_DEFINE(PAM_TTY_KLUDGE)
307 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID)
308 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
309 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
310 AC_DEFINE(SSHD_ACQUIRES_CTTY)
311 external_path_file=/etc/default/login
312 # hardwire lastlog location (can't detect it on some versions)
313 conf_lastlog_location="/var/adm/lastlog"
314 AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
315 sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
316 if test "$sol2ver" -ge 8; then
317 AC_MSG_RESULT(yes)
318 AC_DEFINE(DISABLE_UTMP)
319 AC_DEFINE(DISABLE_WTMP)
320 else
321 AC_MSG_RESULT(no)
322 fi
323 ;;
324 *-*-sunos4*)
325 CPPFLAGS="$CPPFLAGS -DSUNOS4"
326 AC_CHECK_FUNCS(getpwanam)
327 AC_DEFINE(PAM_SUN_CODEBASE)
328 conf_utmp_location=/etc/utmp
329 conf_wtmp_location=/var/adm/wtmp
330 conf_lastlog_location=/var/adm/lastlog
331 AC_DEFINE(USE_PIPES)
332 ;;
333 *-ncr-sysv*)
334 LIBS="$LIBS -lc89"
335 AC_DEFINE(USE_PIPES)
336 AC_DEFINE(SSHD_ACQUIRES_CTTY)
337 AC_DEFINE(SETEUID_BREAKS_SETUID)
338 AC_DEFINE(BROKEN_SETREUID)
339 AC_DEFINE(BROKEN_SETREGID)
340 ;;
341 *-sni-sysv*)
342 # /usr/ucblib MUST NOT be searched on ReliantUNIX
343 AC_CHECK_LIB(dl, dlsym, ,)
344 # -lresolv needs to be at then end of LIBS or DNS lookups break
345 AC_CHECK_LIB(res_query, resolv, [ LIBS="$LIBS -lresolv" ])
346 IPADDR_IN_DISPLAY=yes
347 AC_DEFINE(USE_PIPES)
348 AC_DEFINE(IP_TOS_IS_BROKEN)
349 AC_DEFINE(SETEUID_BREAKS_SETUID)
350 AC_DEFINE(BROKEN_SETREUID)
351 AC_DEFINE(BROKEN_SETREGID)
352 AC_DEFINE(SSHD_ACQUIRES_CTTY)
353 external_path_file=/etc/default/login
354 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
355 # Attention: always take care to bind libsocket and libnsl before libc,
356 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
357 ;;
358 # UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
359 *-*-sysv4.2*)
360 AC_DEFINE(USE_PIPES)
361 AC_DEFINE(SETEUID_BREAKS_SETUID)
362 AC_DEFINE(BROKEN_SETREUID)
363 AC_DEFINE(BROKEN_SETREGID)
364 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
365 ;;
366 # UnixWare 7.x, OpenUNIX 8
367 *-*-sysv5*)
368 AC_DEFINE(USE_PIPES)
369 AC_DEFINE(SETEUID_BREAKS_SETUID)
370 AC_DEFINE(BROKEN_SETREUID)
371 AC_DEFINE(BROKEN_SETREGID)
372 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
373 ;;
374 *-*-sysv*)
375 ;;
376 # SCO UNIX and OEM versions of SCO UNIX
377 *-*-sco3.2v4*)
378 AC_MSG_ERROR("This Platform is no longer supported.")
379 ;;
380 # SCO OpenServer 5.x
381 *-*-sco3.2v5*)
382 if test -z "$GCC"; then
383 CFLAGS="$CFLAGS -belf"
384 fi
385 LIBS="$LIBS -lprot -lx -ltinfo -lm"
386 no_dev_ptmx=1
387 AC_DEFINE(USE_PIPES)
388 AC_DEFINE(HAVE_SECUREWARE)
389 AC_DEFINE(DISABLE_SHADOW)
390 AC_DEFINE(DISABLE_FD_PASSING)
391 AC_DEFINE(SETEUID_BREAKS_SETUID)
392 AC_DEFINE(BROKEN_SETREUID)
393 AC_DEFINE(BROKEN_SETREGID)
394 AC_DEFINE(WITH_ABBREV_NO_TTY)
395 AC_DEFINE(BROKEN_UPDWTMPX)
396 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
397 AC_CHECK_FUNCS(getluid setluid)
398 MANTYPE=man
399 TEST_SHELL=ksh
400 ;;
401 *-*-unicosmk*)
402 AC_DEFINE(NO_SSH_LASTLOG)
403 AC_DEFINE(SETEUID_BREAKS_SETUID)
404 AC_DEFINE(BROKEN_SETREUID)
405 AC_DEFINE(BROKEN_SETREGID)
406 AC_DEFINE(USE_PIPES)
407 AC_DEFINE(DISABLE_FD_PASSING)
408 LDFLAGS="$LDFLAGS"
409 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
410 MANTYPE=cat
411 ;;
412 *-*-unicosmp*)
413 AC_DEFINE(SETEUID_BREAKS_SETUID)
414 AC_DEFINE(BROKEN_SETREUID)
415 AC_DEFINE(BROKEN_SETREGID)
416 AC_DEFINE(WITH_ABBREV_NO_TTY)
417 AC_DEFINE(USE_PIPES)
418 AC_DEFINE(DISABLE_FD_PASSING)
419 LDFLAGS="$LDFLAGS"
420 LIBS="$LIBS -lgen -lacid -ldb"
421 MANTYPE=cat
422 ;;
423 *-*-unicos*)
424 AC_DEFINE(SETEUID_BREAKS_SETUID)
425 AC_DEFINE(BROKEN_SETREUID)
426 AC_DEFINE(BROKEN_SETREGID)
427 AC_DEFINE(USE_PIPES)
428 AC_DEFINE(DISABLE_FD_PASSING)
429 AC_DEFINE(NO_SSH_LASTLOG)
430 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
431 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
432 MANTYPE=cat
433 ;;
434 *-dec-osf*)
435 AC_MSG_CHECKING(for Digital Unix SIA)
436 no_osfsia=""
437 AC_ARG_WITH(osfsia,
438 [ --with-osfsia Enable Digital Unix SIA],
439 [
440 if test "x$withval" = "xno" ; then
441 AC_MSG_RESULT(disabled)
442 no_osfsia=1
443 fi
444 ],
445 )
446 if test -z "$no_osfsia" ; then
447 if test -f /etc/sia/matrix.conf; then
448 AC_MSG_RESULT(yes)
449 AC_DEFINE(HAVE_OSF_SIA)
450 AC_DEFINE(DISABLE_LOGIN)
451 AC_DEFINE(DISABLE_FD_PASSING)
452 LIBS="$LIBS -lsecurity -ldb -lm -laud"
453 else
454 AC_MSG_RESULT(no)
455 AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin")
456 fi
457 fi
458 AC_DEFINE(BROKEN_GETADDRINFO)
459 AC_DEFINE(SETEUID_BREAKS_SETUID)
460 AC_DEFINE(BROKEN_SETREUID)
461 AC_DEFINE(BROKEN_SETREGID)
462 ;;
464 *-*-nto-qnx)
465 AC_DEFINE(USE_PIPES)
466 AC_DEFINE(NO_X11_UNIX_SOCKETS)
467 AC_DEFINE(MISSING_NFDBITS)
468 AC_DEFINE(MISSING_HOWMANY)
469 AC_DEFINE(MISSING_FD_MASK)
470 ;;
471 esac
473 # Allow user to specify flags
474 AC_ARG_WITH(cflags,
475 [ --with-cflags Specify additional flags to pass to compiler],
476 [
477 if test -n "$withval" && test "x$withval" != "xno" && \
478 test "x${withval}" != "xyes"; then
479 CFLAGS="$CFLAGS $withval"
480 fi
481 ]
482 )
483 AC_ARG_WITH(cppflags,
484 [ --with-cppflags Specify additional flags to pass to preprocessor] ,
485 [
486 if test -n "$withval" && test "x$withval" != "xno" && \
487 test "x${withval}" != "xyes"; then
488 CPPFLAGS="$CPPFLAGS $withval"
489 fi
490 ]
491 )
492 AC_ARG_WITH(ldflags,
493 [ --with-ldflags Specify additional flags to pass to linker],
494 [
495 if test -n "$withval" && test "x$withval" != "xno" && \
496 test "x${withval}" != "xyes"; then
497 LDFLAGS="$LDFLAGS $withval"
498 fi
499 ]
500 )
501 AC_ARG_WITH(libs,
502 [ --with-libs Specify additional libraries to link with],
503 [
504 if test -n "$withval" && test "x$withval" != "xno" && \
505 test "x${withval}" != "xyes"; then
506 LIBS="$LIBS $withval"
507 fi
508 ]
509 )
511 AC_MSG_CHECKING(compiler and flags for sanity)
512 AC_RUN_IFELSE(
513 [AC_LANG_SOURCE([
514 #include <stdio.h>
515 int main(){exit(0);}
516 ])],
517 [ AC_MSG_RESULT(yes) ],
518 [
519 AC_MSG_RESULT(no)
520 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
521 ],
522 [ AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
523 )
525 # Checks for header files.
526 AC_CHECK_HEADERS(bstring.h crypt.h dirent.h endian.h features.h \
527 floatingpoint.h getopt.h glob.h ia.h lastlog.h limits.h login.h \
528 login_cap.h maillock.h ndir.h netdb.h netgroup.h \
529 netinet/in_systm.h pam/pam_appl.h paths.h pty.h readpassphrase.h \
530 rpc/types.h security/pam_appl.h shadow.h stddef.h stdint.h \
531 strings.h sys/dir.h sys/strtio.h sys/audit.h sys/bitypes.h \
532 sys/bsdtty.h sys/cdefs.h sys/mman.h sys/ndir.h sys/prctl.h \
533 sys/pstat.h sys/select.h sys/stat.h sys/stream.h \
534 sys/stropts.h sys/sysmacros.h sys/time.h sys/timers.h sys/un.h \
535 time.h tmpdir.h ttyent.h usersec.h util.h utime.h utmp.h utmpx.h vis.h)
537 # sys/ptms.h requires sys/stream.h to be included first on Solaris
538 AC_CHECK_HEADERS(sys/ptms.h, [], [], [
539 #ifdef HAVE_SYS_STREAM_H
540 # include <sys/stream.h>
541 #endif
542 ])
544 # Checks for libraries.
545 AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
546 AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
548 dnl IRIX and Solaris 2.5.1 have dirname() in libgen
549 AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
550 AC_CHECK_LIB(gen, dirname,[
551 AC_CACHE_CHECK([for broken dirname],
552 ac_cv_have_broken_dirname, [
553 save_LIBS="$LIBS"
554 LIBS="$LIBS -lgen"
555 AC_TRY_RUN(
556 [
557 #include <libgen.h>
558 #include <string.h>
560 int main(int argc, char **argv) {
561 char *s, buf[32];
563 strncpy(buf,"/etc", 32);
564 s = dirname(buf);
565 if (!s || strncmp(s, "/", 32) != 0) {
566 exit(1);
567 } else {
568 exit(0);
569 }
570 }
571 ],
572 [ ac_cv_have_broken_dirname="no" ],
573 [ ac_cv_have_broken_dirname="yes" ]
574 )
575 LIBS="$save_LIBS"
576 ])
577 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
578 LIBS="$LIBS -lgen"
579 AC_DEFINE(HAVE_DIRNAME)
580 AC_CHECK_HEADERS(libgen.h)
581 fi
582 ])
583 ])
585 AC_CHECK_FUNC(getspnam, ,
586 AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
587 AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME))
589 dnl zlib is required
590 AC_ARG_WITH(zlib,
591 [ --with-zlib=PATH Use zlib in PATH],
592 [ if test "x$withval" = "xno" ; then
593 AC_MSG_ERROR([*** zlib is required ***])
594 elif test "x$withval" != "xyes"; then
595 if test -d "$withval/lib"; then
596 if test -n "${need_dash_r}"; then
597 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
598 else
599 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
600 fi
601 else
602 if test -n "${need_dash_r}"; then
603 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
604 else
605 LDFLAGS="-L${withval} ${LDFLAGS}"
606 fi
607 fi
608 if test -d "$withval/include"; then
609 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
610 else
611 CPPFLAGS="-I${withval} ${CPPFLAGS}"
612 fi
613 fi ]
614 )
616 AC_CHECK_LIB(z, deflate, ,
617 [
618 saved_CPPFLAGS="$CPPFLAGS"
619 saved_LDFLAGS="$LDFLAGS"
620 save_LIBS="$LIBS"
621 dnl Check default zlib install dir
622 if test -n "${need_dash_r}"; then
623 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
624 else
625 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
626 fi
627 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
628 LIBS="$LIBS -lz"
629 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
630 [
631 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
632 ]
633 )
634 ]
635 )
636 AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
638 AC_ARG_WITH(zlib-version-check,
639 [ --without-zlib-version-check Disable zlib version check],
640 [ if test "x$withval" = "xno" ; then
641 zlib_check_nonfatal=1
642 fi
643 ]
644 )
646 AC_MSG_CHECKING(for possibly buggy zlib)
647 AC_RUN_IFELSE([AC_LANG_SOURCE([[
648 #include <stdio.h>
649 #include <zlib.h>
650 int main()
651 {
652 int a=0, b=0, c=0, d=0, n, v;
653 n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
654 if (n != 3 && n != 4)
655 exit(1);
656 v = a*1000000 + b*10000 + c*100 + d;
657 fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
659 /* 1.1.4 is OK */
660 if (a == 1 && b == 1 && c >= 4)
661 exit(0);
663 /* 1.2.1.2 and up are OK */
664 if (v >= 1020102)
665 exit(0);
667 exit(2);
668 }
669 ]])],
670 AC_MSG_RESULT(no),
671 [ AC_MSG_RESULT(yes)
672 if test -z "$zlib_check_nonfatal" ; then
673 AC_MSG_ERROR([*** zlib too old - check config.log ***
674 Your reported zlib version has known security problems. It's possible your
675 vendor has fixed these problems without changing the version number. If you
676 are sure this is the case, you can disable the check by running
677 "./configure --without-zlib-version-check".
678 If you are in doubt, upgrade zlib to version 1.2.1.2 or greater.
679 See http://www.gzip.org/zlib/ for details.])
680 else
681 AC_MSG_WARN([zlib version may have security problems])
682 fi
683 ],
684 [ AC_MSG_WARN([cross compiling: not checking zlib version]) ]
685 )
687 dnl UnixWare 2.x
688 AC_CHECK_FUNC(strcasecmp,
689 [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
690 )
691 AC_CHECK_FUNC(utimes,
692 [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
693 LIBS="$LIBS -lc89"]) ]
694 )
696 dnl Checks for libutil functions
697 AC_CHECK_HEADERS(libutil.h)
698 AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN)])
699 AC_CHECK_FUNCS(logout updwtmp logwtmp)
701 AC_FUNC_STRFTIME
703 # Check for ALTDIRFUNC glob() extension
704 AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
705 AC_EGREP_CPP(FOUNDIT,
706 [
707 #include <glob.h>
708 #ifdef GLOB_ALTDIRFUNC
709 FOUNDIT
710 #endif
711 ],
712 [
713 AC_DEFINE(GLOB_HAS_ALTDIRFUNC)
714 AC_MSG_RESULT(yes)
715 ],
716 [
717 AC_MSG_RESULT(no)
718 ]
719 )
721 # Check for g.gl_matchc glob() extension
722 AC_MSG_CHECKING(for gl_matchc field in glob_t)
723 AC_EGREP_CPP(FOUNDIT,
724 [
725 #include <glob.h>
726 int main(void){glob_t g; g.gl_matchc = 1;}
727 ],
728 [
729 AC_DEFINE(GLOB_HAS_GL_MATCHC)
730 AC_MSG_RESULT(yes)
731 ],
732 [
733 AC_MSG_RESULT(no)
734 ]
735 )
737 AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
738 AC_RUN_IFELSE(
739 [AC_LANG_SOURCE([[
740 #include <sys/types.h>
741 #include <dirent.h>
742 int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
743 ]])],
744 [AC_MSG_RESULT(yes)],
745 [
746 AC_MSG_RESULT(no)
747 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
748 ],
749 [
750 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
751 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
752 ]
753 )
755 AC_MSG_CHECKING([for /proc/pid/fd directory])
756 if test -d "/proc/$$/fd" ; then
757 AC_DEFINE(HAVE_PROC_PID)
758 AC_MSG_RESULT(yes)
759 else
760 AC_MSG_RESULT(no)
761 fi
763 # Check whether user wants S/Key support
764 SKEY_MSG="no"
765 AC_ARG_WITH(skey,
766 [ --with-skey[[=PATH]] Enable S/Key support (optionally in PATH)],
767 [
768 if test "x$withval" != "xno" ; then
770 if test "x$withval" != "xyes" ; then
771 CPPFLAGS="$CPPFLAGS -I${withval}/include"
772 LDFLAGS="$LDFLAGS -L${withval}/lib"
773 fi
775 AC_DEFINE(SKEY)
776 LIBS="-lskey $LIBS"
777 SKEY_MSG="yes"
779 AC_MSG_CHECKING([for s/key support])
780 AC_TRY_RUN(
781 [
782 #include <stdio.h>
783 #include <skey.h>
784 int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
785 ],
786 [AC_MSG_RESULT(yes)],
787 [
788 AC_MSG_RESULT(no)
789 AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
790 ])
791 AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
792 AC_TRY_COMPILE(
793 [#include <stdio.h>
794 #include <skey.h>],
795 [(void)skeychallenge(NULL,"name","",0);],
796 [AC_MSG_RESULT(yes)
797 AC_DEFINE(SKEYCHALLENGE_4ARG)],
798 [AC_MSG_RESULT(no)]
799 )
800 fi
801 ]
802 )
804 # Check whether user wants TCP wrappers support
805 TCPW_MSG="no"
806 AC_ARG_WITH(tcp-wrappers,
807 [ --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
808 [
809 if test "x$withval" != "xno" ; then
810 saved_LIBS="$LIBS"
811 saved_LDFLAGS="$LDFLAGS"
812 saved_CPPFLAGS="$CPPFLAGS"
813 if test -n "${withval}" && \
814 test "x${withval}" != "xyes"; then
815 if test -d "${withval}/lib"; then
816 if test -n "${need_dash_r}"; then
817 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
818 else
819 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
820 fi
821 else
822 if test -n "${need_dash_r}"; then
823 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
824 else
825 LDFLAGS="-L${withval} ${LDFLAGS}"
826 fi
827 fi
828 if test -d "${withval}/include"; then
829 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
830 else
831 CPPFLAGS="-I${withval} ${CPPFLAGS}"
832 fi
833 fi
834 LIBWRAP="-lwrap"
835 LIBS="$LIBWRAP $LIBS"
836 AC_MSG_CHECKING(for libwrap)
837 AC_TRY_LINK(
838 [
839 #include <sys/types.h>
840 #include <sys/socket.h>
841 #include <netinet/in.h>
842 #include <tcpd.h>
843 int deny_severity = 0, allow_severity = 0;
844 ],
845 [hosts_access(0);],
846 [
847 AC_MSG_RESULT(yes)
848 AC_DEFINE(LIBWRAP)
849 AC_SUBST(LIBWRAP)
850 TCPW_MSG="yes"
851 ],
852 [
853 AC_MSG_ERROR([*** libwrap missing])
854 ]
855 )
856 LIBS="$saved_LIBS"
857 fi
858 ]
859 )
861 # Check whether user wants libedit support
862 LIBEDIT_MSG="no"
863 AC_ARG_WITH(libedit,
864 [ --with-libedit[[=PATH]] Enable libedit support for sftp],
865 [ if test "x$withval" != "xno" ; then
866 if test "x$withval" != "xyes"; then
867 CPPFLAGS="$CPPFLAGS -I$withval/include"
868 LDFLAGS="$LDFLAGS -L$withval/lib"
869 fi
870 AC_CHECK_LIB(edit, el_init,
871 [ AC_DEFINE(USE_LIBEDIT, [], [Use libedit for sftp])
872 LIBEDIT="-ledit -lcurses"
873 LIBEDIT_MSG="yes"
874 AC_SUBST(LIBEDIT)
875 ],
876 [ AC_MSG_ERROR(libedit not found) ],
877 [ -lcurses ]
878 )
879 fi ]
880 )
882 AUDIT_MODULE=none
883 AC_ARG_WITH(audit,
884 [ --with-audit=module Enable EXPERIMENTAL audit support (modules=debug,bsm)],
885 [
886 AC_MSG_CHECKING(for supported audit module)
887 case "$withval" in
888 bsm)
889 AC_MSG_RESULT(bsm)
890 AUDIT_MODULE=bsm
891 dnl Checks for headers, libs and functions
892 AC_CHECK_HEADERS(bsm/audit.h, [],
893 [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)])
894 AC_CHECK_LIB(bsm, getaudit, [],
895 [AC_MSG_ERROR(BSM enabled and required library not found)])
896 AC_CHECK_FUNCS(getaudit, [],
897 [AC_MSG_ERROR(BSM enabled and required function not found)])
898 # These are optional
899 AC_CHECK_FUNCS(getaudit_addr)
900 AC_DEFINE(USE_BSM_AUDIT, [], [Use BSM audit module])
901 ;;
902 debug)
903 AUDIT_MODULE=debug
904 AC_MSG_RESULT(debug)
905 AC_DEFINE(SSH_AUDIT_EVENTS, [], Use audit debugging module)
906 ;;
907 *)
908 AC_MSG_ERROR([Unknown audit module $withval])
909 ;;
910 esac ]
911 )
913 dnl Checks for library functions. Please keep in alphabetical order
914 AC_CHECK_FUNCS(\
915 arc4random __b64_ntop b64_ntop __b64_pton b64_pton bcopy \
916 bindresvport_sa clock closefrom dirfd fchdir fchmod fchown \
917 freeaddrinfo futimes getaddrinfo getcwd getgrouplist getnameinfo \
918 getopt getpeereid _getpty getrlimit getttyent glob inet_aton \
919 inet_ntoa inet_ntop innetgr login_getcapbool md5_crypt memmove \
920 mkdtemp mmap ngetaddrinfo nsleep ogetaddrinfo openlog_r openpty \
921 pstat prctl readpassphrase realpath recvmsg rresvport_af sendmsg \
922 setdtablesize setegid setenv seteuid setgroups setlogin setpcred \
923 setproctitle setregid setreuid setrlimit \
924 setsid setvbuf sigaction sigvec snprintf socketpair strerror \
925 strlcat strlcpy strmode strnvis strtoul sysconf tcgetpgrp \
926 truncate unsetenv updwtmpx utimes vhangup vsnprintf waitpid \
927 )
929 # IRIX has a const char return value for gai_strerror()
930 AC_CHECK_FUNCS(gai_strerror,[
931 AC_DEFINE(HAVE_GAI_STRERROR)
932 AC_TRY_COMPILE([
933 #include <sys/types.h>
934 #include <sys/socket.h>
935 #include <netdb.h>
937 const char *gai_strerror(int);],[
938 char *str;
940 str = gai_strerror(0);],[
941 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
942 [Define if gai_strerror() returns const char *])])])
944 AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP))
946 dnl Make sure prototypes are defined for these before using them.
947 AC_CHECK_DECL(strsep, [AC_CHECK_FUNCS(strsep)])
948 AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
950 dnl tcsendbreak might be a macro
951 AC_CHECK_DECL(tcsendbreak,
952 [AC_DEFINE(HAVE_TCSENDBREAK)],
953 [AC_CHECK_FUNCS(tcsendbreak)],
954 [#include <termios.h>]
955 )
957 AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
959 AC_CHECK_FUNCS(setresuid, [
960 dnl Some platorms have setresuid that isn't implemented, test for this
961 AC_MSG_CHECKING(if setresuid seems to work)
962 AC_RUN_IFELSE(
963 [AC_LANG_SOURCE([[
964 #include <stdlib.h>
965 #include <errno.h>
966 int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
967 ]])],
968 [AC_MSG_RESULT(yes)],
969 [AC_DEFINE(BROKEN_SETRESUID)
970 AC_MSG_RESULT(not implemented)],
971 [AC_MSG_WARN([cross compiling: not checking setresuid])]
972 )
973 ])
975 AC_CHECK_FUNCS(setresgid, [
976 dnl Some platorms have setresgid that isn't implemented, test for this
977 AC_MSG_CHECKING(if setresgid seems to work)
978 AC_RUN_IFELSE(
979 [AC_LANG_SOURCE([[
980 #include <stdlib.h>
981 #include <errno.h>
982 int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
983 ]])],
984 [AC_MSG_RESULT(yes)],
985 [AC_DEFINE(BROKEN_SETRESGID)
986 AC_MSG_RESULT(not implemented)],
987 [AC_MSG_WARN([cross compiling: not checking setresuid])]
988 )
989 ])
991 dnl Checks for time functions
992 AC_CHECK_FUNCS(gettimeofday time)
993 dnl Checks for utmp functions
994 AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
995 AC_CHECK_FUNCS(utmpname)
996 dnl Checks for utmpx functions
997 AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
998 AC_CHECK_FUNCS(setutxent utmpxname)
1000 AC_CHECK_FUNC(daemon,
1001 [AC_DEFINE(HAVE_DAEMON)],
1002 [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
1003 )
1005 AC_CHECK_FUNC(getpagesize,
1006 [AC_DEFINE(HAVE_GETPAGESIZE)],
1007 [AC_CHECK_LIB(ucb, getpagesize, [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
1008 )
1010 # Check for broken snprintf
1011 if test "x$ac_cv_func_snprintf" = "xyes" ; then
1012 AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1013 AC_RUN_IFELSE(
1014 [AC_LANG_SOURCE([[
1015 #include <stdio.h>
1016 int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
1017 ]])],
1018 [AC_MSG_RESULT(yes)],
1019 [
1020 AC_MSG_RESULT(no)
1021 AC_DEFINE(BROKEN_SNPRINTF)
1022 AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1023 ],
1024 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
1025 )
1026 fi
1028 # Check for missing getpeereid (or equiv) support
1029 NO_PEERCHECK=""
1030 if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1031 AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1032 AC_TRY_COMPILE(
1033 [#include <sys/types.h>
1034 #include <sys/socket.h>],
1035 [int i = SO_PEERCRED;],
1036 [ AC_MSG_RESULT(yes)
1037 AC_DEFINE(HAVE_SO_PEERCRED, [], [Have PEERCRED socket option])
1038 ],
1039 [AC_MSG_RESULT(no)
1040 NO_PEERCHECK=1]
1041 )
1042 fi
1044 dnl see whether mkstemp() requires XXXXXX
1045 if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1046 AC_MSG_CHECKING([for (overly) strict mkstemp])
1047 AC_TRY_RUN(
1048 [
1049 #include <stdlib.h>
1050 main() { char template[]="conftest.mkstemp-test";
1051 if (mkstemp(template) == -1)
1052 exit(1);
1053 unlink(template); exit(0);
1054 }
1055 ],
1056 [
1057 AC_MSG_RESULT(no)
1058 ],
1059 [
1060 AC_MSG_RESULT(yes)
1061 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1062 ],
1063 [
1064 AC_MSG_RESULT(yes)
1065 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1066 ]
1067 )
1068 fi
1070 dnl make sure that openpty does not reacquire controlling terminal
1071 if test ! -z "$check_for_openpty_ctty_bug"; then
1072 AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1073 AC_TRY_RUN(
1074 [
1075 #include <stdio.h>
1076 #include <sys/fcntl.h>
1077 #include <sys/types.h>
1078 #include <sys/wait.h>
1080 int
1081 main()
1082 {
1083 pid_t pid;
1084 int fd, ptyfd, ttyfd, status;
1086 pid = fork();
1087 if (pid < 0) { /* failed */
1088 exit(1);
1089 } else if (pid > 0) { /* parent */
1090 waitpid(pid, &status, 0);
1091 if (WIFEXITED(status))
1092 exit(WEXITSTATUS(status));
1093 else
1094 exit(2);
1095 } else { /* child */
1096 close(0); close(1); close(2);
1097 setsid();
1098 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1099 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1100 if (fd >= 0)
1101 exit(3); /* Acquired ctty: broken */
1102 else
1103 exit(0); /* Did not acquire ctty: OK */
1104 }
1105 }
1106 ],
1107 [
1108 AC_MSG_RESULT(yes)
1109 ],
1110 [
1111 AC_MSG_RESULT(no)
1112 AC_DEFINE(SSHD_ACQUIRES_CTTY)
1113 ]
1114 )
1115 fi
1117 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1118 test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
1119 AC_MSG_CHECKING(if getaddrinfo seems to work)
1120 AC_TRY_RUN(
1121 [
1122 #include <stdio.h>
1123 #include <sys/socket.h>
1124 #include <netdb.h>
1125 #include <errno.h>
1126 #include <netinet/in.h>
1128 #define TEST_PORT "2222"
1130 int
1131 main(void)
1132 {
1133 int err, sock;
1134 struct addrinfo *gai_ai, *ai, hints;
1135 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1137 memset(&hints, 0, sizeof(hints));
1138 hints.ai_family = PF_UNSPEC;
1139 hints.ai_socktype = SOCK_STREAM;
1140 hints.ai_flags = AI_PASSIVE;
1142 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1143 if (err != 0) {
1144 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1145 exit(1);
1146 }
1148 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1149 if (ai->ai_family != AF_INET6)
1150 continue;
1152 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1153 sizeof(ntop), strport, sizeof(strport),
1154 NI_NUMERICHOST|NI_NUMERICSERV);
1156 if (err != 0) {
1157 if (err == EAI_SYSTEM)
1158 perror("getnameinfo EAI_SYSTEM");
1159 else
1160 fprintf(stderr, "getnameinfo failed: %s\n",
1161 gai_strerror(err));
1162 exit(2);
1163 }
1165 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1166 if (sock < 0)
1167 perror("socket");
1168 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1169 if (errno == EBADF)
1170 exit(3);
1171 }
1172 }
1173 exit(0);
1174 }
1175 ],
1176 [
1177 AC_MSG_RESULT(yes)
1178 ],
1179 [
1180 AC_MSG_RESULT(no)
1181 AC_DEFINE(BROKEN_GETADDRINFO)
1182 ]
1183 )
1184 fi
1186 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1187 test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
1188 AC_MSG_CHECKING(if getaddrinfo seems to work)
1189 AC_TRY_RUN(
1190 [
1191 #include <stdio.h>
1192 #include <sys/socket.h>
1193 #include <netdb.h>
1194 #include <errno.h>
1195 #include <netinet/in.h>
1197 #define TEST_PORT "2222"
1199 int
1200 main(void)
1201 {
1202 int err, sock;
1203 struct addrinfo *gai_ai, *ai, hints;
1204 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1206 memset(&hints, 0, sizeof(hints));
1207 hints.ai_family = PF_UNSPEC;
1208 hints.ai_socktype = SOCK_STREAM;
1209 hints.ai_flags = AI_PASSIVE;
1211 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1212 if (err != 0) {
1213 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1214 exit(1);
1215 }
1217 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1218 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1219 continue;
1221 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1222 sizeof(ntop), strport, sizeof(strport),
1223 NI_NUMERICHOST|NI_NUMERICSERV);
1225 if (ai->ai_family == AF_INET && err != 0) {
1226 perror("getnameinfo");
1227 exit(2);
1228 }
1229 }
1230 exit(0);
1231 }
1232 ],
1233 [
1234 AC_MSG_RESULT(yes)
1235 AC_DEFINE(AIX_GETNAMEINFO_HACK, [],
1236 [Define if you have a getaddrinfo that fails for the all-zeros IPv6 address])
1237 ],
1238 [
1239 AC_MSG_RESULT(no)
1240 AC_DEFINE(BROKEN_GETADDRINFO)
1241 ]
1242 )
1243 fi
1245 if test "x$check_for_conflicting_getspnam" = "x1"; then
1246 AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1247 AC_COMPILE_IFELSE(
1248 [
1249 #include <shadow.h>
1250 int main(void) {exit(0);}
1251 ],
1252 [
1253 AC_MSG_RESULT(no)
1254 ],
1255 [
1256 AC_MSG_RESULT(yes)
1257 AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1258 [Conflicting defs for getspnam])
1259 ]
1260 )
1261 fi
1263 AC_FUNC_GETPGRP
1265 # Check for PAM libs
1266 PAM_MSG="no"
1267 AC_ARG_WITH(pam,
1268 [ --with-pam Enable PAM support ],
1269 [
1270 if test "x$withval" != "xno" ; then
1271 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
1272 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
1273 AC_MSG_ERROR([PAM headers not found])
1274 fi
1276 AC_CHECK_LIB(dl, dlopen, , )
1277 AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
1278 AC_CHECK_FUNCS(pam_getenvlist)
1279 AC_CHECK_FUNCS(pam_putenv)
1281 PAM_MSG="yes"
1283 AC_DEFINE(USE_PAM)
1284 if test $ac_cv_lib_dl_dlopen = yes; then
1285 LIBPAM="-lpam -ldl"
1286 else
1287 LIBPAM="-lpam"
1288 fi
1289 AC_SUBST(LIBPAM)
1290 fi
1291 ]
1292 )
1294 # Check for older PAM
1295 if test "x$PAM_MSG" = "xyes" ; then
1296 # Check PAM strerror arguments (old PAM)
1297 AC_MSG_CHECKING([whether pam_strerror takes only one argument])
1298 AC_TRY_COMPILE(
1299 [
1300 #include <stdlib.h>
1301 #if defined(HAVE_SECURITY_PAM_APPL_H)
1302 #include <security/pam_appl.h>
1303 #elif defined (HAVE_PAM_PAM_APPL_H)
1304 #include <pam/pam_appl.h>
1305 #endif
1306 ],
1307 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
1308 [AC_MSG_RESULT(no)],
1309 [
1310 AC_DEFINE(HAVE_OLD_PAM)
1311 AC_MSG_RESULT(yes)
1312 PAM_MSG="yes (old library)"
1313 ]
1314 )
1315 fi
1317 # Search for OpenSSL
1318 saved_CPPFLAGS="$CPPFLAGS"
1319 saved_LDFLAGS="$LDFLAGS"
1320 AC_ARG_WITH(ssl-dir,
1321 [ --with-ssl-dir=PATH Specify path to OpenSSL installation ],
1322 [
1323 if test "x$withval" != "xno" ; then
1324 case "$withval" in
1325 # Relative paths
1326 ./*|../*) withval="`pwd`/$withval"
1327 esac
1328 if test -d "$withval/lib"; then
1329 if test -n "${need_dash_r}"; then
1330 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1331 else
1332 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1333 fi
1334 else
1335 if test -n "${need_dash_r}"; then
1336 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1337 else
1338 LDFLAGS="-L${withval} ${LDFLAGS}"
1339 fi
1340 fi
1341 if test -d "$withval/include"; then
1342 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1343 else
1344 CPPFLAGS="-I${withval} ${CPPFLAGS}"
1345 fi
1346 fi
1347 ]
1348 )
1349 LIBS="-lcrypto $LIBS"
1350 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1351 [
1352 dnl Check default openssl install dir
1353 if test -n "${need_dash_r}"; then
1354 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
1355 else
1356 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
1357 fi
1358 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1359 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1360 [
1361 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1362 ]
1363 )
1364 ]
1365 )
1367 # Determine OpenSSL header version
1368 AC_MSG_CHECKING([OpenSSL header version])
1369 AC_RUN_IFELSE(
1370 [AC_LANG_SOURCE([[
1371 #include <stdio.h>
1372 #include <string.h>
1373 #include <openssl/opensslv.h>
1374 #define DATA "conftest.sslincver"
1375 int main(void) {
1376 FILE *fd;
1377 int rc;
1379 fd = fopen(DATA,"w");
1380 if(fd == NULL)
1381 exit(1);
1383 if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1384 exit(1);
1386 exit(0);
1387 }
1388 ]])],
1389 [
1390 ssl_header_ver=`cat conftest.sslincver`
1391 AC_MSG_RESULT($ssl_header_ver)
1392 ],
1393 [
1394 AC_MSG_RESULT(not found)
1395 AC_MSG_ERROR(OpenSSL version header not found.)
1396 ],
1397 [
1398 AC_MSG_WARN([cross compiling: not checking])
1399 ]
1400 )
1402 # Determine OpenSSL library version
1403 AC_MSG_CHECKING([OpenSSL library version])
1404 AC_RUN_IFELSE(
1405 [AC_LANG_SOURCE([[
1406 #include <stdio.h>
1407 #include <string.h>
1408 #include <openssl/opensslv.h>
1409 #include <openssl/crypto.h>
1410 #define DATA "conftest.ssllibver"
1411 int main(void) {
1412 FILE *fd;
1413 int rc;
1415 fd = fopen(DATA,"w");
1416 if(fd == NULL)
1417 exit(1);
1419 if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1420 exit(1);
1422 exit(0);
1423 }
1424 ]])],
1425 [
1426 ssl_library_ver=`cat conftest.ssllibver`
1427 AC_MSG_RESULT($ssl_library_ver)
1428 ],
1429 [
1430 AC_MSG_RESULT(not found)
1431 AC_MSG_ERROR(OpenSSL library not found.)
1432 ],
1433 [
1434 AC_MSG_WARN([cross compiling: not checking])
1435 ]
1436 )
1438 # Sanity check OpenSSL headers
1439 AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1440 AC_RUN_IFELSE(
1441 [AC_LANG_SOURCE([[
1442 #include <string.h>
1443 #include <openssl/opensslv.h>
1444 int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
1445 ]])],
1446 [
1447 AC_MSG_RESULT(yes)
1448 ],
1449 [
1450 AC_MSG_RESULT(no)
1451 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1452 Check config.log for details.
1453 Also see contrib/findssl.sh for help identifying header/library mismatches.])
1454 ],
1455 [
1456 AC_MSG_WARN([cross compiling: not checking])
1457 ]
1458 )
1460 # Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1461 # because the system crypt() is more featureful.
1462 if test "x$check_for_libcrypt_before" = "x1"; then
1463 AC_CHECK_LIB(crypt, crypt)
1464 fi
1466 # Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
1467 # version in OpenSSL.
1468 if test "x$check_for_libcrypt_later" = "x1"; then
1469 AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
1470 fi
1473 ### Configure cryptographic random number support
1475 # Check wheter OpenSSL seeds itself
1476 AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1477 AC_RUN_IFELSE(
1478 [AC_LANG_SOURCE([[
1479 #include <string.h>
1480 #include <openssl/rand.h>
1481 int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
1482 ]])],
1483 [
1484 OPENSSL_SEEDS_ITSELF=yes
1485 AC_MSG_RESULT(yes)
1486 ],
1487 [
1488 AC_MSG_RESULT(no)
1489 # Default to use of the rand helper if OpenSSL doesn't
1490 # seed itself
1491 USE_RAND_HELPER=yes
1492 ],
1493 [
1494 AC_MSG_WARN([cross compiling: assuming yes])
1495 # This is safe, since all recent OpenSSL versions will
1496 # complain at runtime if not seeded correctly.
1497 OPENSSL_SEEDS_ITSELF=yes
1498 ]
1499 )
1502 # Do we want to force the use of the rand helper?
1503 AC_ARG_WITH(rand-helper,
1504 [ --with-rand-helper Use subprocess to gather strong randomness ],
1505 [
1506 if test "x$withval" = "xno" ; then
1507 # Force use of OpenSSL's internal RNG, even if
1508 # the previous test showed it to be unseeded.
1509 if test -z "$OPENSSL_SEEDS_ITSELF" ; then
1510 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
1511 OPENSSL_SEEDS_ITSELF=yes
1512 USE_RAND_HELPER=""
1513 fi
1514 else
1515 USE_RAND_HELPER=yes
1516 fi
1517 ],
1518 )
1520 # Which randomness source do we use?
1521 if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
1522 # OpenSSL only
1523 AC_DEFINE(OPENSSL_PRNG_ONLY)
1524 RAND_MSG="OpenSSL internal ONLY"
1525 INSTALL_SSH_RAND_HELPER=""
1526 elif test ! -z "$USE_RAND_HELPER" ; then
1527 # install rand helper
1528 RAND_MSG="ssh-rand-helper"
1529 INSTALL_SSH_RAND_HELPER="yes"
1530 fi
1531 AC_SUBST(INSTALL_SSH_RAND_HELPER)
1533 ### Configuration of ssh-rand-helper
1535 # PRNGD TCP socket
1536 AC_ARG_WITH(prngd-port,
1537 [ --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT],
1538 [
1539 case "$withval" in
1540 no)
1541 withval=""
1542 ;;
1543 [[0-9]]*)
1544 ;;
1545 *)
1546 AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
1547 ;;
1548 esac
1549 if test ! -z "$withval" ; then
1550 PRNGD_PORT="$withval"
1551 AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT)
1552 fi
1553 ]
1554 )
1556 # PRNGD Unix domain socket
1557 AC_ARG_WITH(prngd-socket,
1558 [ --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
1559 [
1560 case "$withval" in
1561 yes)
1562 withval="/var/run/egd-pool"
1563 ;;
1564 no)
1565 withval=""
1566 ;;
1567 /*)
1568 ;;
1569 *)
1570 AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
1571 ;;
1572 esac
1574 if test ! -z "$withval" ; then
1575 if test ! -z "$PRNGD_PORT" ; then
1576 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
1577 fi
1578 if test ! -r "$withval" ; then
1579 AC_MSG_WARN(Entropy socket is not readable)
1580 fi
1581 PRNGD_SOCKET="$withval"
1582 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1583 fi
1584 ],
1585 [
1586 # Check for existing socket only if we don't have a random device already
1587 if test "$USE_RAND_HELPER" = yes ; then
1588 AC_MSG_CHECKING(for PRNGD/EGD socket)
1589 # Insert other locations here
1590 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
1591 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
1592 PRNGD_SOCKET="$sock"
1593 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
1594 break;
1595 fi
1596 done
1597 if test ! -z "$PRNGD_SOCKET" ; then
1598 AC_MSG_RESULT($PRNGD_SOCKET)
1599 else
1600 AC_MSG_RESULT(not found)
1601 fi
1602 fi
1603 ]
1604 )
1606 # Change default command timeout for hashing entropy source
1607 entropy_timeout=200
1608 AC_ARG_WITH(entropy-timeout,
1609 [ --with-entropy-timeout Specify entropy gathering command timeout (msec)],
1610 [
1611 if test -n "$withval" && test "x$withval" != "xno" && \
1612 test "x${withval}" != "xyes"; then
1613 entropy_timeout=$withval
1614 fi
1615 ]
1616 )
1617 AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout)
1619 SSH_PRIVSEP_USER=sshd
1620 AC_ARG_WITH(privsep-user,
1621 [ --with-privsep-user=user Specify non-privileged user for privilege separation],
1622 [
1623 if test -n "$withval" && test "x$withval" != "xno" && \
1624 test "x${withval}" != "xyes"; then
1625 SSH_PRIVSEP_USER=$withval
1626 fi
1627 ]
1628 )
1629 AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER")
1630 AC_SUBST(SSH_PRIVSEP_USER)
1632 # We do this little dance with the search path to insure
1633 # that programs that we select for use by installed programs
1634 # (which may be run by the super-user) come from trusted
1635 # locations before they come from the user's private area.
1636 # This should help avoid accidentally configuring some
1637 # random version of a program in someone's personal bin.
1639 OPATH=$PATH
1640 PATH=/bin:/usr/bin
1641 test -h /bin 2> /dev/null && PATH=/usr/bin
1642 test -d /sbin && PATH=$PATH:/sbin
1643 test -d /usr/sbin && PATH=$PATH:/usr/sbin
1644 PATH=$PATH:/etc:$OPATH
1646 # These programs are used by the command hashing source to gather entropy
1647 OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
1648 OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
1649 OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
1650 OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
1651 OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
1652 OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
1653 OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
1654 OSSH_PATH_ENTROPY_PROG(PROG_W, w)
1655 OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
1656 OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
1657 OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
1658 OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
1659 OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
1660 OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
1661 OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
1662 OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
1663 # restore PATH
1664 PATH=$OPATH
1666 # Where does ssh-rand-helper get its randomness from?
1667 INSTALL_SSH_PRNG_CMDS=""
1668 if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
1669 if test ! -z "$PRNGD_PORT" ; then
1670 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
1671 elif test ! -z "$PRNGD_SOCKET" ; then
1672 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
1673 else
1674 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
1675 RAND_HELPER_CMDHASH=yes
1676 INSTALL_SSH_PRNG_CMDS="yes"
1677 fi
1678 fi
1679 AC_SUBST(INSTALL_SSH_PRNG_CMDS)
1682 # Cheap hack to ensure NEWS-OS libraries are arranged right.
1683 if test ! -z "$SONY" ; then
1684 LIBS="$LIBS -liberty";
1685 fi
1687 # Checks for data types
1688 AC_CHECK_SIZEOF(char, 1)
1689 AC_CHECK_SIZEOF(short int, 2)
1690 AC_CHECK_SIZEOF(int, 4)
1691 AC_CHECK_SIZEOF(long int, 4)
1692 AC_CHECK_SIZEOF(long long int, 8)
1694 # Sanity check long long for some platforms (AIX)
1695 if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
1696 ac_cv_sizeof_long_long_int=0
1697 fi
1699 # More checks for data types
1700 AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
1701 AC_TRY_COMPILE(
1702 [ #include <sys/types.h> ],
1703 [ u_int a; a = 1;],
1704 [ ac_cv_have_u_int="yes" ],
1705 [ ac_cv_have_u_int="no" ]
1706 )
1707 ])
1708 if test "x$ac_cv_have_u_int" = "xyes" ; then
1709 AC_DEFINE(HAVE_U_INT)
1710 have_u_int=1
1711 fi
1713 AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
1714 AC_TRY_COMPILE(
1715 [ #include <sys/types.h> ],
1716 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
1717 [ ac_cv_have_intxx_t="yes" ],
1718 [ ac_cv_have_intxx_t="no" ]
1719 )
1720 ])
1721 if test "x$ac_cv_have_intxx_t" = "xyes" ; then
1722 AC_DEFINE(HAVE_INTXX_T)
1723 have_intxx_t=1
1724 fi
1726 if (test -z "$have_intxx_t" && \
1727 test "x$ac_cv_header_stdint_h" = "xyes")
1728 then
1729 AC_MSG_CHECKING([for intXX_t types in stdint.h])
1730 AC_TRY_COMPILE(
1731 [ #include <stdint.h> ],
1732 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
1733 [
1734 AC_DEFINE(HAVE_INTXX_T)
1735 AC_MSG_RESULT(yes)
1736 ],
1737 [ AC_MSG_RESULT(no) ]
1738 )
1739 fi
1741 AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
1742 AC_TRY_COMPILE(
1743 [
1744 #include <sys/types.h>
1745 #ifdef HAVE_STDINT_H
1746 # include <stdint.h>
1747 #endif
1748 #include <sys/socket.h>
1749 #ifdef HAVE_SYS_BITYPES_H
1750 # include <sys/bitypes.h>
1751 #endif
1752 ],
1753 [ int64_t a; a = 1;],
1754 [ ac_cv_have_int64_t="yes" ],
1755 [ ac_cv_have_int64_t="no" ]
1756 )
1757 ])
1758 if test "x$ac_cv_have_int64_t" = "xyes" ; then
1759 AC_DEFINE(HAVE_INT64_T)
1760 fi
1762 AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
1763 AC_TRY_COMPILE(
1764 [ #include <sys/types.h> ],
1765 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
1766 [ ac_cv_have_u_intxx_t="yes" ],
1767 [ ac_cv_have_u_intxx_t="no" ]
1768 )
1769 ])
1770 if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
1771 AC_DEFINE(HAVE_U_INTXX_T)
1772 have_u_intxx_t=1
1773 fi
1775 if test -z "$have_u_intxx_t" ; then
1776 AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
1777 AC_TRY_COMPILE(
1778 [ #include <sys/socket.h> ],
1779 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
1780 [
1781 AC_DEFINE(HAVE_U_INTXX_T)
1782 AC_MSG_RESULT(yes)
1783 ],
1784 [ AC_MSG_RESULT(no) ]
1785 )
1786 fi
1788 AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
1789 AC_TRY_COMPILE(
1790 [ #include <sys/types.h> ],
1791 [ u_int64_t a; a = 1;],
1792 [ ac_cv_have_u_int64_t="yes" ],
1793 [ ac_cv_have_u_int64_t="no" ]
1794 )
1795 ])
1796 if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
1797 AC_DEFINE(HAVE_U_INT64_T)
1798 have_u_int64_t=1
1799 fi
1801 if test -z "$have_u_int64_t" ; then
1802 AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
1803 AC_TRY_COMPILE(
1804 [ #include <sys/bitypes.h> ],
1805 [ u_int64_t a; a = 1],
1806 [
1807 AC_DEFINE(HAVE_U_INT64_T)
1808 AC_MSG_RESULT(yes)
1809 ],
1810 [ AC_MSG_RESULT(no) ]
1811 )
1812 fi
1814 if test -z "$have_u_intxx_t" ; then
1815 AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
1816 AC_TRY_COMPILE(
1817 [
1818 #include <sys/types.h>
1819 ],
1820 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
1821 [ ac_cv_have_uintxx_t="yes" ],
1822 [ ac_cv_have_uintxx_t="no" ]
1823 )
1824 ])
1825 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
1826 AC_DEFINE(HAVE_UINTXX_T)
1827 fi
1828 fi
1830 if test -z "$have_uintxx_t" ; then
1831 AC_MSG_CHECKING([for uintXX_t types in stdint.h])
1832 AC_TRY_COMPILE(
1833 [ #include <stdint.h> ],
1834 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
1835 [
1836 AC_DEFINE(HAVE_UINTXX_T)
1837 AC_MSG_RESULT(yes)
1838 ],
1839 [ AC_MSG_RESULT(no) ]
1840 )
1841 fi
1843 if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
1844 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
1845 then
1846 AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
1847 AC_TRY_COMPILE(
1848 [
1849 #include <sys/bitypes.h>
1850 ],
1851 [
1852 int8_t a; int16_t b; int32_t c;
1853 u_int8_t e; u_int16_t f; u_int32_t g;
1854 a = b = c = e = f = g = 1;
1855 ],
1856 [
1857 AC_DEFINE(HAVE_U_INTXX_T)
1858 AC_DEFINE(HAVE_INTXX_T)
1859 AC_MSG_RESULT(yes)
1860 ],
1861 [AC_MSG_RESULT(no)]
1862 )
1863 fi
1866 AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
1867 AC_TRY_COMPILE(
1868 [
1869 #include <sys/types.h>
1870 ],
1871 [ u_char foo; foo = 125; ],
1872 [ ac_cv_have_u_char="yes" ],
1873 [ ac_cv_have_u_char="no" ]
1874 )
1875 ])
1876 if test "x$ac_cv_have_u_char" = "xyes" ; then
1877 AC_DEFINE(HAVE_U_CHAR)
1878 fi
1880 TYPE_SOCKLEN_T
1882 AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
1884 AC_CHECK_TYPES(in_addr_t,,,
1885 [#include <sys/types.h>
1886 #include <netinet/in.h>])
1888 AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
1889 AC_TRY_COMPILE(
1890 [
1891 #include <sys/types.h>
1892 ],
1893 [ size_t foo; foo = 1235; ],
1894 [ ac_cv_have_size_t="yes" ],
1895 [ ac_cv_have_size_t="no" ]
1896 )
1897 ])
1898 if test "x$ac_cv_have_size_t" = "xyes" ; then
1899 AC_DEFINE(HAVE_SIZE_T)
1900 fi
1902 AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
1903 AC_TRY_COMPILE(
1904 [
1905 #include <sys/types.h>
1906 ],
1907 [ ssize_t foo; foo = 1235; ],
1908 [ ac_cv_have_ssize_t="yes" ],
1909 [ ac_cv_have_ssize_t="no" ]
1910 )
1911 ])
1912 if test "x$ac_cv_have_ssize_t" = "xyes" ; then
1913 AC_DEFINE(HAVE_SSIZE_T)
1914 fi
1916 AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
1917 AC_TRY_COMPILE(
1918 [
1919 #include <time.h>
1920 ],
1921 [ clock_t foo; foo = 1235; ],
1922 [ ac_cv_have_clock_t="yes" ],
1923 [ ac_cv_have_clock_t="no" ]
1924 )
1925 ])
1926 if test "x$ac_cv_have_clock_t" = "xyes" ; then
1927 AC_DEFINE(HAVE_CLOCK_T)
1928 fi
1930 AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
1931 AC_TRY_COMPILE(
1932 [
1933 #include <sys/types.h>
1934 #include <sys/socket.h>
1935 ],
1936 [ sa_family_t foo; foo = 1235; ],
1937 [ ac_cv_have_sa_family_t="yes" ],
1938 [ AC_TRY_COMPILE(
1939 [
1940 #include <sys/types.h>
1941 #include <sys/socket.h>
1942 #include <netinet/in.h>
1943 ],
1944 [ sa_family_t foo; foo = 1235; ],
1945 [ ac_cv_have_sa_family_t="yes" ],
1947 [ ac_cv_have_sa_family_t="no" ]
1948 )]
1949 )
1950 ])
1951 if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
1952 AC_DEFINE(HAVE_SA_FAMILY_T)
1953 fi
1955 AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
1956 AC_TRY_COMPILE(
1957 [
1958 #include <sys/types.h>
1959 ],
1960 [ pid_t foo; foo = 1235; ],
1961 [ ac_cv_have_pid_t="yes" ],
1962 [ ac_cv_have_pid_t="no" ]
1963 )
1964 ])
1965 if test "x$ac_cv_have_pid_t" = "xyes" ; then
1966 AC_DEFINE(HAVE_PID_T)
1967 fi
1969 AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
1970 AC_TRY_COMPILE(
1971 [
1972 #include <sys/types.h>
1973 ],
1974 [ mode_t foo; foo = 1235; ],
1975 [ ac_cv_have_mode_t="yes" ],
1976 [ ac_cv_have_mode_t="no" ]
1977 )
1978 ])
1979 if test "x$ac_cv_have_mode_t" = "xyes" ; then
1980 AC_DEFINE(HAVE_MODE_T)
1981 fi
1984 AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
1985 AC_TRY_COMPILE(
1986 [
1987 #include <sys/types.h>
1988 #include <sys/socket.h>
1989 ],
1990 [ struct sockaddr_storage s; ],
1991 [ ac_cv_have_struct_sockaddr_storage="yes" ],
1992 [ ac_cv_have_struct_sockaddr_storage="no" ]
1993 )
1994 ])
1995 if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
1996 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE)
1997 fi
1999 AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2000 AC_TRY_COMPILE(
2001 [
2002 #include <sys/types.h>
2003 #include <netinet/in.h>
2004 ],
2005 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2006 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2007 [ ac_cv_have_struct_sockaddr_in6="no" ]
2008 )
2009 ])
2010 if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
2011 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6)
2012 fi
2014 AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2015 AC_TRY_COMPILE(
2016 [
2017 #include <sys/types.h>
2018 #include <netinet/in.h>
2019 ],
2020 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2021 [ ac_cv_have_struct_in6_addr="yes" ],
2022 [ ac_cv_have_struct_in6_addr="no" ]
2023 )
2024 ])
2025 if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
2026 AC_DEFINE(HAVE_STRUCT_IN6_ADDR)
2027 fi
2029 AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2030 AC_TRY_COMPILE(
2031 [
2032 #include <sys/types.h>
2033 #include <sys/socket.h>
2034 #include <netdb.h>
2035 ],
2036 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2037 [ ac_cv_have_struct_addrinfo="yes" ],
2038 [ ac_cv_have_struct_addrinfo="no" ]
2039 )
2040 ])
2041 if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2042 AC_DEFINE(HAVE_STRUCT_ADDRINFO)
2043 fi
2045 AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2046 AC_TRY_COMPILE(
2047 [ #include <sys/time.h> ],
2048 [ struct timeval tv; tv.tv_sec = 1;],
2049 [ ac_cv_have_struct_timeval="yes" ],
2050 [ ac_cv_have_struct_timeval="no" ]
2051 )
2052 ])
2053 if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2054 AC_DEFINE(HAVE_STRUCT_TIMEVAL)
2055 have_struct_timeval=1
2056 fi
2058 AC_CHECK_TYPES(struct timespec)
2060 # We need int64_t or else certian parts of the compile will fail.
2061 if test "x$ac_cv_have_int64_t" = "xno" && \
2062 test "x$ac_cv_sizeof_long_int" != "x8" && \
2063 test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
2064 echo "OpenSSH requires int64_t support. Contact your vendor or install"
2065 echo "an alternative compiler (I.E., GCC) before continuing."
2066 echo ""
2067 exit 1;
2068 else
2069 dnl test snprintf (broken on SCO w/gcc)
2070 AC_RUN_IFELSE(
2071 [AC_LANG_SOURCE([[
2072 #include <stdio.h>
2073 #include <string.h>
2074 #ifdef HAVE_SNPRINTF
2075 main()
2076 {
2077 char buf[50];
2078 char expected_out[50];
2079 int mazsize = 50 ;
2080 #if (SIZEOF_LONG_INT == 8)
2081 long int num = 0x7fffffffffffffff;
2082 #else
2083 long long num = 0x7fffffffffffffffll;
2084 #endif
2085 strcpy(expected_out, "9223372036854775807");
2086 snprintf(buf, mazsize, "%lld", num);
2087 if(strcmp(buf, expected_out) != 0)
2088 exit(1);
2089 exit(0);
2090 }
2091 #else
2092 main() { exit(0); }
2093 #endif
2094 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
2095 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
2096 )
2097 fi
2099 dnl Checks for structure members
2100 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2101 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2102 OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2103 OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2104 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
2105 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
2106 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2107 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
2108 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
2109 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2110 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2111 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2112 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
2113 OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2114 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2115 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2116 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
2118 AC_CHECK_MEMBERS([struct stat.st_blksize])
2120 AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2121 ac_cv_have_ss_family_in_struct_ss, [
2122 AC_TRY_COMPILE(
2123 [
2124 #include <sys/types.h>
2125 #include <sys/socket.h>
2126 ],
2127 [ struct sockaddr_storage s; s.ss_family = 1; ],
2128 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2129 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2130 )
2131 ])
2132 if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2133 AC_DEFINE(HAVE_SS_FAMILY_IN_SS)
2134 fi
2136 AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2137 ac_cv_have___ss_family_in_struct_ss, [
2138 AC_TRY_COMPILE(
2139 [
2140 #include <sys/types.h>
2141 #include <sys/socket.h>
2142 ],
2143 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2144 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2145 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2146 )
2147 ])
2148 if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2149 AC_DEFINE(HAVE___SS_FAMILY_IN_SS)
2150 fi
2152 AC_CACHE_CHECK([for pw_class field in struct passwd],
2153 ac_cv_have_pw_class_in_struct_passwd, [
2154 AC_TRY_COMPILE(
2155 [
2156 #include <pwd.h>
2157 ],
2158 [ struct passwd p; p.pw_class = 0; ],
2159 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2160 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2161 )
2162 ])
2163 if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2164 AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD)
2165 fi
2167 AC_CACHE_CHECK([for pw_expire field in struct passwd],
2168 ac_cv_have_pw_expire_in_struct_passwd, [
2169 AC_TRY_COMPILE(
2170 [
2171 #include <pwd.h>
2172 ],
2173 [ struct passwd p; p.pw_expire = 0; ],
2174 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2175 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2176 )
2177 ])
2178 if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2179 AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD)
2180 fi
2182 AC_CACHE_CHECK([for pw_change field in struct passwd],
2183 ac_cv_have_pw_change_in_struct_passwd, [
2184 AC_TRY_COMPILE(
2185 [
2186 #include <pwd.h>
2187 ],
2188 [ struct passwd p; p.pw_change = 0; ],
2189 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2190 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2191 )
2192 ])
2193 if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2194 AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD)
2195 fi
2197 dnl make sure we're using the real structure members and not defines
2198 AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2199 ac_cv_have_accrights_in_msghdr, [
2200 AC_COMPILE_IFELSE(
2201 [
2202 #include <sys/types.h>
2203 #include <sys/socket.h>
2204 #include <sys/uio.h>
2205 int main() {
2206 #ifdef msg_accrights
2207 #error "msg_accrights is a macro"
2208 exit(1);
2209 #endif
2210 struct msghdr m;
2211 m.msg_accrights = 0;
2212 exit(0);
2213 }
2214 ],
2215 [ ac_cv_have_accrights_in_msghdr="yes" ],
2216 [ ac_cv_have_accrights_in_msghdr="no" ]
2217 )
2218 ])
2219 if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2220 AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR)
2221 fi
2223 AC_CACHE_CHECK([for msg_control field in struct msghdr],
2224 ac_cv_have_control_in_msghdr, [
2225 AC_COMPILE_IFELSE(
2226 [
2227 #include <sys/types.h>
2228 #include <sys/socket.h>
2229 #include <sys/uio.h>
2230 int main() {
2231 #ifdef msg_control
2232 #error "msg_control is a macro"
2233 exit(1);
2234 #endif
2235 struct msghdr m;
2236 m.msg_control = 0;
2237 exit(0);
2238 }
2239 ],
2240 [ ac_cv_have_control_in_msghdr="yes" ],
2241 [ ac_cv_have_control_in_msghdr="no" ]
2242 )
2243 ])
2244 if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2245 AC_DEFINE(HAVE_CONTROL_IN_MSGHDR)
2246 fi
2248 AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
2249 AC_TRY_LINK([],
2250 [ extern char *__progname; printf("%s", __progname); ],
2251 [ ac_cv_libc_defines___progname="yes" ],
2252 [ ac_cv_libc_defines___progname="no" ]
2253 )
2254 ])
2255 if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2256 AC_DEFINE(HAVE___PROGNAME)
2257 fi
2259 AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2260 AC_TRY_LINK([
2261 #include <stdio.h>
2262 ],
2263 [ printf("%s", __FUNCTION__); ],
2264 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2265 [ ac_cv_cc_implements___FUNCTION__="no" ]
2266 )
2267 ])
2268 if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2269 AC_DEFINE(HAVE___FUNCTION__)
2270 fi
2272 AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2273 AC_TRY_LINK([
2274 #include <stdio.h>
2275 ],
2276 [ printf("%s", __func__); ],
2277 [ ac_cv_cc_implements___func__="yes" ],
2278 [ ac_cv_cc_implements___func__="no" ]
2279 )
2280 ])
2281 if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
2282 AC_DEFINE(HAVE___func__)
2283 fi
2285 AC_CACHE_CHECK([whether getopt has optreset support],
2286 ac_cv_have_getopt_optreset, [
2287 AC_TRY_LINK(
2288 [
2289 #include <getopt.h>
2290 ],
2291 [ extern int optreset; optreset = 0; ],
2292 [ ac_cv_have_getopt_optreset="yes" ],
2293 [ ac_cv_have_getopt_optreset="no" ]
2294 )
2295 ])
2296 if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
2297 AC_DEFINE(HAVE_GETOPT_OPTRESET)
2298 fi
2300 AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
2301 AC_TRY_LINK([],
2302 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
2303 [ ac_cv_libc_defines_sys_errlist="yes" ],
2304 [ ac_cv_libc_defines_sys_errlist="no" ]
2305 )
2306 ])
2307 if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
2308 AC_DEFINE(HAVE_SYS_ERRLIST)
2309 fi
2312 AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
2313 AC_TRY_LINK([],
2314 [ extern int sys_nerr; printf("%i", sys_nerr);],
2315 [ ac_cv_libc_defines_sys_nerr="yes" ],
2316 [ ac_cv_libc_defines_sys_nerr="no" ]
2317 )
2318 ])
2319 if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
2320 AC_DEFINE(HAVE_SYS_NERR)
2321 fi
2323 SCARD_MSG="no"
2324 # Check whether user wants sectok support
2325 AC_ARG_WITH(sectok,
2326 [ --with-sectok Enable smartcard support using libsectok],
2327 [
2328 if test "x$withval" != "xno" ; then
2329 if test "x$withval" != "xyes" ; then
2330 CPPFLAGS="$CPPFLAGS -I${withval}"
2331 LDFLAGS="$LDFLAGS -L${withval}"
2332 if test ! -z "$need_dash_r" ; then
2333 LDFLAGS="$LDFLAGS -R${withval}"
2334 fi
2335 if test ! -z "$blibpath" ; then
2336 blibpath="$blibpath:${withval}"
2337 fi
2338 fi
2339 AC_CHECK_HEADERS(sectok.h)
2340 if test "$ac_cv_header_sectok_h" != yes; then
2341 AC_MSG_ERROR(Can't find sectok.h)
2342 fi
2343 AC_CHECK_LIB(sectok, sectok_open)
2344 if test "$ac_cv_lib_sectok_sectok_open" != yes; then
2345 AC_MSG_ERROR(Can't find libsectok)
2346 fi
2347 AC_DEFINE(SMARTCARD)
2348 AC_DEFINE(USE_SECTOK)
2349 SCARD_MSG="yes, using sectok"
2350 fi
2351 ]
2352 )
2354 # Check whether user wants OpenSC support
2355 OPENSC_CONFIG="no"
2356 AC_ARG_WITH(opensc,
2357 [--with-opensc[[=PFX]] Enable smartcard support using OpenSC (optionally in PATH)],
2358 [
2359 if test "x$withval" != "xno" ; then
2360 if test "x$withval" != "xyes" ; then
2361 OPENSC_CONFIG=$withval/bin/opensc-config
2362 else
2363 AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
2364 fi
2365 if test "$OPENSC_CONFIG" != "no"; then
2366 LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
2367 LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
2368 CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
2369 LDFLAGS="$LDFLAGS $LIBOPENSC_LIBS"
2370 AC_DEFINE(SMARTCARD)
2371 AC_DEFINE(USE_OPENSC)
2372 SCARD_MSG="yes, using OpenSC"
2373 fi
2374 fi
2375 ]
2376 )
2378 # Check libraries needed by DNS fingerprint support
2379 AC_SEARCH_LIBS(getrrsetbyname, resolv,
2380 [AC_DEFINE(HAVE_GETRRSETBYNAME)],
2381 [
2382 # Needed by our getrrsetbyname()
2383 AC_SEARCH_LIBS(res_query, resolv)
2384 AC_SEARCH_LIBS(dn_expand, resolv)
2385 AC_MSG_CHECKING(if res_query will link)
2386 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
2387 [AC_MSG_RESULT(no)
2388 saved_LIBS="$LIBS"
2389 LIBS="$LIBS -lresolv"
2390 AC_MSG_CHECKING(for res_query in -lresolv)
2391 AC_LINK_IFELSE([
2392 #include <resolv.h>
2393 int main()
2394 {
2395 res_query (0, 0, 0, 0, 0);
2396 return 0;
2397 }
2398 ],
2399 [LIBS="$LIBS -lresolv"
2400 AC_MSG_RESULT(yes)],
2401 [LIBS="$saved_LIBS"
2402 AC_MSG_RESULT(no)])
2403 ])
2404 AC_CHECK_FUNCS(_getshort _getlong)
2405 AC_CHECK_MEMBER(HEADER.ad,
2406 [AC_DEFINE(HAVE_HEADER_AD)],,
2407 [#include <arpa/nameser.h>])
2408 ])
2410 # Check whether user wants Kerberos 5 support
2411 KRB5_MSG="no"
2412 AC_ARG_WITH(kerberos5,
2413 [ --with-kerberos5=PATH Enable Kerberos 5 support],
2414 [ if test "x$withval" != "xno" ; then
2415 if test "x$withval" = "xyes" ; then
2416 KRB5ROOT="/usr/local"
2417 else
2418 KRB5ROOT=${withval}
2419 fi
2421 AC_DEFINE(KRB5)
2422 KRB5_MSG="yes"
2424 AC_MSG_CHECKING(for krb5-config)
2425 if test -x $KRB5ROOT/bin/krb5-config ; then
2426 KRB5CONF=$KRB5ROOT/bin/krb5-config
2427 AC_MSG_RESULT($KRB5CONF)
2429 AC_MSG_CHECKING(for gssapi support)
2430 if $KRB5CONF | grep gssapi >/dev/null ; then
2431 AC_MSG_RESULT(yes)
2432 AC_DEFINE(GSSAPI)
2433 k5confopts=gssapi
2434 else
2435 AC_MSG_RESULT(no)
2436 k5confopts=""
2437 fi
2438 K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
2439 K5LIBS="`$KRB5CONF --libs $k5confopts`"
2440 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
2441 AC_MSG_CHECKING(whether we are using Heimdal)
2442 AC_TRY_COMPILE([ #include <krb5.h> ],
2443 [ char *tmp = heimdal_version; ],
2444 [ AC_MSG_RESULT(yes)
2445 AC_DEFINE(HEIMDAL) ],
2446 AC_MSG_RESULT(no)
2447 )
2448 else
2449 AC_MSG_RESULT(no)
2450 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
2451 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
2452 AC_MSG_CHECKING(whether we are using Heimdal)
2453 AC_TRY_COMPILE([ #include <krb5.h> ],
2454 [ char *tmp = heimdal_version; ],
2455 [ AC_MSG_RESULT(yes)
2456 AC_DEFINE(HEIMDAL)
2457 K5LIBS="-lkrb5 -ldes"
2458 K5LIBS="$K5LIBS -lcom_err -lasn1"
2459 AC_CHECK_LIB(roken, net_write,
2460 [K5LIBS="$K5LIBS -lroken"])
2461 ],
2462 [ AC_MSG_RESULT(no)
2463 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
2464 ]
2465 )
2466 AC_SEARCH_LIBS(dn_expand, resolv)
2468 AC_CHECK_LIB(gssapi,gss_init_sec_context,
2469 [ AC_DEFINE(GSSAPI)
2470 K5LIBS="-lgssapi $K5LIBS" ],
2471 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
2472 [ AC_DEFINE(GSSAPI)
2473 K5LIBS="-lgssapi_krb5 $K5LIBS" ],
2474 AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
2475 $K5LIBS)
2476 ],
2477 $K5LIBS)
2479 AC_CHECK_HEADER(gssapi.h, ,
2480 [ unset ac_cv_header_gssapi_h
2481 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2482 AC_CHECK_HEADERS(gssapi.h, ,
2483 AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
2484 )
2485 ]
2486 )
2488 oldCPP="$CPPFLAGS"
2489 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
2490 AC_CHECK_HEADER(gssapi_krb5.h, ,
2491 [ CPPFLAGS="$oldCPP" ])
2493 fi
2494 if test ! -z "$need_dash_r" ; then
2495 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
2496 fi
2497 if test ! -z "$blibpath" ; then
2498 blibpath="$blibpath:${KRB5ROOT}/lib"
2499 fi
2500 fi
2502 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
2503 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
2504 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
2506 LIBS="$LIBS $K5LIBS"
2507 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS))
2508 AC_SEARCH_LIBS(krb5_init_ets, $K5LIBS, AC_DEFINE(KRB5_INIT_ETS))
2509 ]
2510 )
2512 # Looking for programs, paths and files
2514 PRIVSEP_PATH=/var/empty
2515 AC_ARG_WITH(privsep-path,
2516 [ --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
2517 [
2518 if test -n "$withval" && test "x$withval" != "xno" && \
2519 test "x${withval}" != "xyes"; then
2520 PRIVSEP_PATH=$withval
2521 fi
2522 ]
2523 )
2524 AC_SUBST(PRIVSEP_PATH)
2526 AC_ARG_WITH(xauth,
2527 [ --with-xauth=PATH Specify path to xauth program ],
2528 [
2529 if test -n "$withval" && test "x$withval" != "xno" && \
2530 test "x${withval}" != "xyes"; then
2531 xauth_path=$withval
2532 fi
2533 ],
2534 [
2535 TestPath="$PATH"
2536 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
2537 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
2538 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
2539 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
2540 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
2541 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
2542 xauth_path="/usr/openwin/bin/xauth"
2543 fi
2544 ]
2545 )
2547 STRIP_OPT=-s
2548 AC_ARG_ENABLE(strip,
2549 [ --disable-strip Disable calling strip(1) on install],
2550 [
2551 if test "x$enableval" = "xno" ; then
2552 STRIP_OPT=
2553 fi
2554 ]
2555 )
2556 AC_SUBST(STRIP_OPT)
2558 if test -z "$xauth_path" ; then
2559 XAUTH_PATH="undefined"
2560 AC_SUBST(XAUTH_PATH)
2561 else
2562 AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path")
2563 XAUTH_PATH=$xauth_path
2564 AC_SUBST(XAUTH_PATH)
2565 fi
2567 # Check for mail directory (last resort if we cannot get it from headers)
2568 if test ! -z "$MAIL" ; then
2569 maildir=`dirname $MAIL`
2570 AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir")
2571 fi
2573 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
2574 AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
2575 disable_ptmx_check=yes
2576 fi
2577 if test -z "$no_dev_ptmx" ; then
2578 if test "x$disable_ptmx_check" != "xyes" ; then
2579 AC_CHECK_FILE("/dev/ptmx",
2580 [
2581 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX)
2582 have_dev_ptmx=1
2583 ]
2584 )
2585 fi
2586 fi
2588 if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
2589 AC_CHECK_FILE("/dev/ptc",
2590 [
2591 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC)
2592 have_dev_ptc=1
2593 ]
2594 )
2595 else
2596 AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
2597 fi
2599 # Options from here on. Some of these are preset by platform above
2600 AC_ARG_WITH(mantype,
2601 [ --with-mantype=man|cat|doc Set man page type],
2602 [
2603 case "$withval" in
2604 man|cat|doc)
2605 MANTYPE=$withval
2606 ;;
2607 *)
2608 AC_MSG_ERROR(invalid man type: $withval)
2609 ;;
2610 esac
2611 ]
2612 )
2613 if test -z "$MANTYPE"; then
2614 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
2615 AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
2616 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
2617 MANTYPE=doc
2618 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
2619 MANTYPE=man
2620 else
2621 MANTYPE=cat
2622 fi
2623 fi
2624 AC_SUBST(MANTYPE)
2625 if test "$MANTYPE" = "doc"; then
2626 mansubdir=man;
2627 else
2628 mansubdir=$MANTYPE;
2629 fi
2630 AC_SUBST(mansubdir)
2632 # Check whether to enable MD5 passwords
2633 MD5_MSG="no"
2634 AC_ARG_WITH(md5-passwords,
2635 [ --with-md5-passwords Enable use of MD5 passwords],
2636 [
2637 if test "x$withval" != "xno" ; then
2638 AC_DEFINE(HAVE_MD5_PASSWORDS)
2639 MD5_MSG="yes"
2640 fi
2641 ]
2642 )
2644 # Whether to disable shadow password support
2645 AC_ARG_WITH(shadow,
2646 [ --without-shadow Disable shadow password support],
2647 [
2648 if test "x$withval" = "xno" ; then
2649 AC_DEFINE(DISABLE_SHADOW)
2650 disable_shadow=yes
2651 fi
2652 ]
2653 )
2655 if test -z "$disable_shadow" ; then
2656 AC_MSG_CHECKING([if the systems has expire shadow information])
2657 AC_TRY_COMPILE(
2658 [
2659 #include <sys/types.h>
2660 #include <shadow.h>
2661 struct spwd sp;
2662 ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
2663 [ sp_expire_available=yes ], []
2664 )
2666 if test "x$sp_expire_available" = "xyes" ; then
2667 AC_MSG_RESULT(yes)
2668 AC_DEFINE(HAS_SHADOW_EXPIRE)
2669 else
2670 AC_MSG_RESULT(no)
2671 fi
2672 fi
2674 # Use ip address instead of hostname in $DISPLAY
2675 if test ! -z "$IPADDR_IN_DISPLAY" ; then
2676 DISPLAY_HACK_MSG="yes"
2677 AC_DEFINE(IPADDR_IN_DISPLAY)
2678 else
2679 DISPLAY_HACK_MSG="no"
2680 AC_ARG_WITH(ipaddr-display,
2681 [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY],
2682 [
2683 if test "x$withval" != "xno" ; then
2684 AC_DEFINE(IPADDR_IN_DISPLAY)
2685 DISPLAY_HACK_MSG="yes"
2686 fi
2687 ]
2688 )
2689 fi
2691 # check for /etc/default/login and use it if present.
2692 AC_ARG_ENABLE(etc-default-login,
2693 [ --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
2694 [ if test "x$enableval" = "xno"; then
2695 AC_MSG_NOTICE([/etc/default/login handling disabled])
2696 etc_default_login=no
2697 else
2698 etc_default_login=yes
2699 fi ],
2700 [ etc_default_login=yes ]
2701 )
2703 if test "x$etc_default_login" != "xno"; then
2704 AC_CHECK_FILE("/etc/default/login",
2705 [ external_path_file=/etc/default/login ])
2706 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
2707 then
2708 AC_MSG_WARN([cross compiling: Disabling /etc/default/login test])
2709 elif test "x$external_path_file" = "x/etc/default/login"; then
2710 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN)
2711 fi
2712 fi
2714 dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
2715 if test $ac_cv_func_login_getcapbool = "yes" && \
2716 test $ac_cv_header_login_cap_h = "yes" ; then
2717 external_path_file=/etc/login.conf
2718 fi
2720 # Whether to mess with the default path
2721 SERVER_PATH_MSG="(default)"
2722 AC_ARG_WITH(default-path,
2723 [ --with-default-path= Specify default \$PATH environment for server],
2724 [
2725 if test "x$external_path_file" = "x/etc/login.conf" ; then
2726 AC_MSG_WARN([
2727 --with-default-path=PATH has no effect on this system.
2728 Edit /etc/login.conf instead.])
2729 elif test "x$withval" != "xno" ; then
2730 if test ! -z "$external_path_file" ; then
2731 AC_MSG_WARN([
2732 --with-default-path=PATH will only be used if PATH is not defined in
2733 $external_path_file .])
2734 fi
2735 user_path="$withval"
2736 SERVER_PATH_MSG="$withval"
2737 fi
2738 ],
2739 [ if test "x$external_path_file" = "x/etc/login.conf" ; then
2740 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
2741 else
2742 if test ! -z "$external_path_file" ; then
2743 AC_MSG_WARN([
2744 If PATH is defined in $external_path_file, ensure the path to scp is included,
2745 otherwise scp will not work.])
2746 fi
2747 AC_TRY_RUN(
2748 [
2749 /* find out what STDPATH is */
2750 #include <stdio.h>
2751 #ifdef HAVE_PATHS_H
2752 # include <paths.h>
2753 #endif
2754 #ifndef _PATH_STDPATH
2755 # ifdef _PATH_USERPATH /* Irix */
2756 # define _PATH_STDPATH _PATH_USERPATH
2757 # else
2758 # define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
2759 # endif
2760 #endif
2761 #include <sys/types.h>
2762 #include <sys/stat.h>
2763 #include <fcntl.h>
2764 #define DATA "conftest.stdpath"
2766 main()
2767 {
2768 FILE *fd;
2769 int rc;
2771 fd = fopen(DATA,"w");
2772 if(fd == NULL)
2773 exit(1);
2775 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
2776 exit(1);
2778 exit(0);
2779 }
2780 ], [ user_path=`cat conftest.stdpath` ],
2781 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
2782 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
2783 )
2784 # make sure $bindir is in USER_PATH so scp will work
2785 t_bindir=`eval echo ${bindir}`
2786 case $t_bindir in
2787 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
2788 esac
2789 case $t_bindir in
2790 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
2791 esac
2792 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
2793 if test $? -ne 0 ; then
2794 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
2795 if test $? -ne 0 ; then
2796 user_path=$user_path:$t_bindir
2797 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
2798 fi
2799 fi
2800 fi ]
2801 )
2802 if test "x$external_path_file" != "x/etc/login.conf" ; then
2803 AC_DEFINE_UNQUOTED(USER_PATH, "$user_path")
2804 AC_SUBST(user_path)
2805 fi
2807 # Set superuser path separately to user path
2808 AC_ARG_WITH(superuser-path,
2809 [ --with-superuser-path= Specify different path for super-user],
2810 [
2811 if test -n "$withval" && test "x$withval" != "xno" && \
2812 test "x${withval}" != "xyes"; then
2813 AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval")
2814 superuser_path=$withval
2815 fi
2816 ]
2817 )
2820 AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
2821 IPV4_IN6_HACK_MSG="no"
2822 AC_ARG_WITH(4in6,
2823 [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses],
2824 [
2825 if test "x$withval" != "xno" ; then
2826 AC_MSG_RESULT(yes)
2827 AC_DEFINE(IPV4_IN_IPV6)
2828 IPV4_IN6_HACK_MSG="yes"
2829 else
2830 AC_MSG_RESULT(no)
2831 fi
2832 ],[
2833 if test "x$inet6_default_4in6" = "xyes"; then
2834 AC_MSG_RESULT([yes (default)])
2835 AC_DEFINE(IPV4_IN_IPV6)
2836 IPV4_IN6_HACK_MSG="yes"
2837 else
2838 AC_MSG_RESULT([no (default)])
2839 fi
2840 ]
2841 )
2843 # Whether to enable BSD auth support
2844 BSD_AUTH_MSG=no
2845 AC_ARG_WITH(bsd-auth,
2846 [ --with-bsd-auth Enable BSD auth support],
2847 [
2848 if test "x$withval" != "xno" ; then
2849 AC_DEFINE(BSD_AUTH)
2850 BSD_AUTH_MSG=yes
2851 fi
2852 ]
2853 )
2855 # Where to place sshd.pid
2856 piddir=/var/run
2857 # make sure the directory exists
2858 if test ! -d $piddir ; then
2859 piddir=`eval echo ${sysconfdir}`
2860 case $piddir in
2861 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
2862 esac
2863 fi
2865 AC_ARG_WITH(pid-dir,
2866 [ --with-pid-dir=PATH Specify location of ssh.pid file],
2867 [
2868 if test -n "$withval" && test "x$withval" != "xno" && \
2869 test "x${withval}" != "xyes"; then
2870 piddir=$withval
2871 if test ! -d $piddir ; then
2872 AC_MSG_WARN([** no $piddir directory on this system **])
2873 fi
2874 fi
2875 ]
2876 )
2878 AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir")
2879 AC_SUBST(piddir)
2881 dnl allow user to disable some login recording features
2882 AC_ARG_ENABLE(lastlog,
2883 [ --disable-lastlog disable use of lastlog even if detected [no]],
2884 [
2885 if test "x$enableval" = "xno" ; then
2886 AC_DEFINE(DISABLE_LASTLOG)
2887 fi
2888 ]
2889 )
2890 AC_ARG_ENABLE(utmp,
2891 [ --disable-utmp disable use of utmp even if detected [no]],
2892 [
2893 if test "x$enableval" = "xno" ; then
2894 AC_DEFINE(DISABLE_UTMP)
2895 fi
2896 ]
2897 )
2898 AC_ARG_ENABLE(utmpx,
2899 [ --disable-utmpx disable use of utmpx even if detected [no]],
2900 [
2901 if test "x$enableval" = "xno" ; then
2902 AC_DEFINE(DISABLE_UTMPX)
2903 fi
2904 ]
2905 )
2906 AC_ARG_ENABLE(wtmp,
2907 [ --disable-wtmp disable use of wtmp even if detected [no]],
2908 [
2909 if test "x$enableval" = "xno" ; then
2910 AC_DEFINE(DISABLE_WTMP)
2911 fi
2912 ]
2913 )
2914 AC_ARG_ENABLE(wtmpx,
2915 [ --disable-wtmpx disable use of wtmpx even if detected [no]],
2916 [
2917 if test "x$enableval" = "xno" ; then
2918 AC_DEFINE(DISABLE_WTMPX)
2919 fi
2920 ]
2921 )
2922 AC_ARG_ENABLE(libutil,
2923 [ --disable-libutil disable use of libutil (login() etc.) [no]],
2924 [
2925 if test "x$enableval" = "xno" ; then
2926 AC_DEFINE(DISABLE_LOGIN)
2927 fi
2928 ]
2929 )
2930 AC_ARG_ENABLE(pututline,
2931 [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]],
2932 [
2933 if test "x$enableval" = "xno" ; then
2934 AC_DEFINE(DISABLE_PUTUTLINE)
2935 fi
2936 ]
2937 )
2938 AC_ARG_ENABLE(pututxline,
2939 [ --disable-pututxline disable use of pututxline() etc. ([uw]tmpx) [no]],
2940 [
2941 if test "x$enableval" = "xno" ; then
2942 AC_DEFINE(DISABLE_PUTUTXLINE)
2943 fi
2944 ]
2945 )
2946 AC_ARG_WITH(lastlog,
2947 [ --with-lastlog=FILE|DIR specify lastlog location [common locations]],
2948 [
2949 if test "x$withval" = "xno" ; then
2950 AC_DEFINE(DISABLE_LASTLOG)
2951 elif test -n "$withval" && test "x${withval}" != "xyes"; then
2952 conf_lastlog_location=$withval
2953 fi
2954 ]
2955 )
2957 dnl lastlog, [uw]tmpx? detection
2958 dnl NOTE: set the paths in the platform section to avoid the
2959 dnl need for command-line parameters
2960 dnl lastlog and [uw]tmp are subject to a file search if all else fails
2962 dnl lastlog detection
2963 dnl NOTE: the code itself will detect if lastlog is a directory
2964 AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
2965 AC_TRY_COMPILE([
2966 #include <sys/types.h>
2967 #include <utmp.h>
2968 #ifdef HAVE_LASTLOG_H
2969 # include <lastlog.h>
2970 #endif
2971 #ifdef HAVE_PATHS_H
2972 # include <paths.h>
2973 #endif
2974 #ifdef HAVE_LOGIN_H
2975 # include <login.h>
2976 #endif
2977 ],
2978 [ char *lastlog = LASTLOG_FILE; ],
2979 [ AC_MSG_RESULT(yes) ],
2980 [
2981 AC_MSG_RESULT(no)
2982 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
2983 AC_TRY_COMPILE([
2984 #include <sys/types.h>
2985 #include <utmp.h>
2986 #ifdef HAVE_LASTLOG_H
2987 # include <lastlog.h>
2988 #endif
2989 #ifdef HAVE_PATHS_H
2990 # include <paths.h>
2991 #endif
2992 ],
2993 [ char *lastlog = _PATH_LASTLOG; ],
2994 [ AC_MSG_RESULT(yes) ],
2995 [
2996 AC_MSG_RESULT(no)
2997 system_lastlog_path=no
2998 ])
2999 ]
3000 )
3002 if test -z "$conf_lastlog_location"; then
3003 if test x"$system_lastlog_path" = x"no" ; then
3004 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
3005 if (test -d "$f" || test -f "$f") ; then
3006 conf_lastlog_location=$f
3007 fi
3008 done
3009 if test -z "$conf_lastlog_location"; then
3010 AC_MSG_WARN([** Cannot find lastlog **])
3011 dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
3012 fi
3013 fi
3014 fi
3016 if test -n "$conf_lastlog_location"; then
3017 AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location")
3018 fi
3020 dnl utmp detection
3021 AC_MSG_CHECKING([if your system defines UTMP_FILE])
3022 AC_TRY_COMPILE([
3023 #include <sys/types.h>
3024 #include <utmp.h>
3025 #ifdef HAVE_PATHS_H
3026 # include <paths.h>
3027 #endif
3028 ],
3029 [ char *utmp = UTMP_FILE; ],
3030 [ AC_MSG_RESULT(yes) ],
3031 [ AC_MSG_RESULT(no)
3032 system_utmp_path=no ]
3033 )
3034 if test -z "$conf_utmp_location"; then
3035 if test x"$system_utmp_path" = x"no" ; then
3036 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3037 if test -f $f ; then
3038 conf_utmp_location=$f
3039 fi
3040 done
3041 if test -z "$conf_utmp_location"; then
3042 AC_DEFINE(DISABLE_UTMP)
3043 fi
3044 fi
3045 fi
3046 if test -n "$conf_utmp_location"; then
3047 AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location")
3048 fi
3050 dnl wtmp detection
3051 AC_MSG_CHECKING([if your system defines WTMP_FILE])
3052 AC_TRY_COMPILE([
3053 #include <sys/types.h>
3054 #include <utmp.h>
3055 #ifdef HAVE_PATHS_H
3056 # include <paths.h>
3057 #endif
3058 ],
3059 [ char *wtmp = WTMP_FILE; ],
3060 [ AC_MSG_RESULT(yes) ],
3061 [ AC_MSG_RESULT(no)
3062 system_wtmp_path=no ]
3063 )
3064 if test -z "$conf_wtmp_location"; then
3065 if test x"$system_wtmp_path" = x"no" ; then
3066 for f in /usr/adm/wtmp /var/log/wtmp; do
3067 if test -f $f ; then
3068 conf_wtmp_location=$f
3069 fi
3070 done
3071 if test -z "$conf_wtmp_location"; then
3072 AC_DEFINE(DISABLE_WTMP)
3073 fi
3074 fi
3075 fi
3076 if test -n "$conf_wtmp_location"; then
3077 AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location")
3078 fi
3081 dnl utmpx detection - I don't know any system so perverse as to require
3082 dnl utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3083 dnl there, though.
3084 AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3085 AC_TRY_COMPILE([
3086 #include <sys/types.h>
3087 #include <utmp.h>
3088 #ifdef HAVE_UTMPX_H
3089 #include <utmpx.h>
3090 #endif
3091 #ifdef HAVE_PATHS_H
3092 # include <paths.h>
3093 #endif
3094 ],
3095 [ char *utmpx = UTMPX_FILE; ],
3096 [ AC_MSG_RESULT(yes) ],
3097 [ AC_MSG_RESULT(no)
3098 system_utmpx_path=no ]
3099 )
3100 if test -z "$conf_utmpx_location"; then
3101 if test x"$system_utmpx_path" = x"no" ; then
3102 AC_DEFINE(DISABLE_UTMPX)
3103 fi
3104 else
3105 AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location")
3106 fi
3108 dnl wtmpx detection
3109 AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3110 AC_TRY_COMPILE([
3111 #include <sys/types.h>
3112 #include <utmp.h>
3113 #ifdef HAVE_UTMPX_H
3114 #include <utmpx.h>
3115 #endif
3116 #ifdef HAVE_PATHS_H
3117 # include <paths.h>
3118 #endif
3119 ],
3120 [ char *wtmpx = WTMPX_FILE; ],
3121 [ AC_MSG_RESULT(yes) ],
3122 [ AC_MSG_RESULT(no)
3123 system_wtmpx_path=no ]
3124 )
3125 if test -z "$conf_wtmpx_location"; then
3126 if test x"$system_wtmpx_path" = x"no" ; then
3127 AC_DEFINE(DISABLE_WTMPX)
3128 fi
3129 else
3130 AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location")
3131 fi
3134 if test ! -z "$blibpath" ; then
3135 LDFLAGS="$LDFLAGS $blibflags$blibpath"
3136 AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
3137 fi
3139 dnl remove pam and dl because they are in $LIBPAM
3140 if test "$PAM_MSG" = yes ; then
3141 LIBS=`echo $LIBS | sed 's/-lpam //'`
3142 fi
3143 if test "$ac_cv_lib_pam_pam_set_item" = yes ; then
3144 LIBS=`echo $LIBS | sed 's/-ldl //'`
3145 fi
3147 AC_EXEEXT
3148 AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openbsd-compat/Makefile \
3149 scard/Makefile ssh_prng_cmds survey.sh])
3150 AC_OUTPUT
3152 # Print summary of options
3154 # Someone please show me a better way :)
3155 A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3156 B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3157 C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3158 D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
3159 E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
3160 F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
3161 G=`eval echo ${piddir}` ; G=`eval echo ${G}`
3162 H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3163 I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3164 J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
3166 echo ""
3167 echo "OpenSSH has been configured with the following options:"
3168 echo " User binaries: $B"
3169 echo " System binaries: $C"
3170 echo " Configuration files: $D"
3171 echo " Askpass program: $E"
3172 echo " Manual pages: $F"
3173 echo " PID file: $G"
3174 echo " Privilege separation chroot path: $H"
3175 if test "x$external_path_file" = "x/etc/login.conf" ; then
3176 echo " At runtime, sshd will use the path defined in $external_path_file"
3177 echo " Make sure the path to scp is present, otherwise scp will not work"
3178 else
3179 echo " sshd default user PATH: $I"
3180 if test ! -z "$external_path_file"; then
3181 echo " (If PATH is set in $external_path_file it will be used instead. If"
3182 echo " used, ensure the path to scp is present, otherwise scp will not work.)"
3183 fi
3184 fi
3185 if test ! -z "$superuser_path" ; then
3186 echo " sshd superuser user PATH: $J"
3187 fi
3188 echo " Manpage format: $MANTYPE"
3189 echo " PAM support: $PAM_MSG"
3190 echo " KerberosV support: $KRB5_MSG"
3191 echo " Smartcard support: $SCARD_MSG"
3192 echo " S/KEY support: $SKEY_MSG"
3193 echo " TCP Wrappers support: $TCPW_MSG"
3194 echo " MD5 password support: $MD5_MSG"
3195 echo " libedit support: $LIBEDIT_MSG"
3196 echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
3197 echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3198 echo " BSD Auth support: $BSD_AUTH_MSG"
3199 echo " Random number source: $RAND_MSG"
3200 if test ! -z "$USE_RAND_HELPER" ; then
3201 echo " ssh-rand-helper collects from: $RAND_HELPER_MSG"
3202 fi
3204 echo ""
3206 echo " Host: ${host}"
3207 echo " Compiler: ${CC}"
3208 echo " Compiler flags: ${CFLAGS}"
3209 echo "Preprocessor flags: ${CPPFLAGS}"
3210 echo " Linker flags: ${LDFLAGS}"
3211 echo " Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
3213 echo ""
3215 if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
3216 echo "SVR4 style packages are supported with \"make package\""
3217 echo ""
3218 fi
3220 if test "x$PAM_MSG" = "xyes" ; then
3221 echo "PAM is enabled. You may need to install a PAM control file "
3222 echo "for sshd, otherwise password authentication may fail. "
3223 echo "Example PAM control files can be found in the contrib/ "
3224 echo "subdirectory"
3225 echo ""
3226 fi
3228 if test ! -z "$RAND_HELPER_CMDHASH" ; then
3229 echo "WARNING: you are using the builtin random number collection "
3230 echo "service. Please read WARNING.RNG and request that your OS "
3231 echo "vendor includes kernel-based random number collection in "
3232 echo "future versions of your OS."
3233 echo ""
3234 fi
3236 if test ! -z "$NO_PEERCHECK" ; then
3237 echo "WARNING: the operating system that you are using does not "
3238 echo "appear to support either the getpeereid() API nor the "
3239 echo "SO_PEERCRED getsockopt() option. These facilities are used to "
3240 echo "enforce security checks to prevent unauthorised connections to "
3241 echo "ssh-agent. Their absence increases the risk that a malicious "
3242 echo "user can connect to your agent. "
3243 echo ""
3244 fi
3246 if test "$AUDIT_MODULE" = "bsm" ; then
3247 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
3248 echo "See the Solaris section in README.platform for details."
3249 fi