| blob | c596a7bd9f3874360c73a9e666adcde71c04f979 |
1 # $Id: configure.ac,v 1.370 2006/10/06 23:07:21 dtucker Exp $
2 #
3 # Copyright (c) 1999-2004 Damien Miller
4 #
5 # Permission to use, copy, modify, and distribute this software for any
6 # purpose with or without fee is hereby granted, provided that the above
7 # copyright notice and this permission notice appear in all copies.
8 #
9 # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10 # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11 # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12 # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13 # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14 # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15 # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 AC_INIT(OpenSSH, Portable, openssh-unix-dev@mindrot.org)
18 AC_REVISION($Revision: 1.370 $)
19 AC_CONFIG_SRCDIR([ssh.c])
21 AC_CONFIG_HEADER(config.h)
22 AC_PROG_CC
23 AC_CANONICAL_HOST
24 AC_C_BIGENDIAN
26 # Checks for programs.
27 AC_PROG_AWK
28 AC_PROG_CPP
29 AC_PROG_RANLIB
30 AC_PROG_INSTALL
31 AC_PROG_EGREP
32 AC_PATH_PROG(AR, ar)
33 AC_PATH_PROG(CAT, cat)
34 AC_PATH_PROG(KILL, kill)
35 AC_PATH_PROGS(PERL, perl5 perl)
36 AC_PATH_PROG(SED, sed)
37 AC_SUBST(PERL)
38 AC_PATH_PROG(ENT, ent)
39 AC_SUBST(ENT)
40 AC_PATH_PROG(TEST_MINUS_S_SH, bash)
41 AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
42 AC_PATH_PROG(TEST_MINUS_S_SH, sh)
43 AC_PATH_PROG(SH, sh)
44 AC_SUBST(TEST_SHELL,sh)
46 dnl for buildpkg.sh
47 AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
48 [/usr/sbin${PATH_SEPARATOR}/etc])
49 AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
50 [/usr/sbin${PATH_SEPARATOR}/etc])
51 AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
52 if test -x /sbin/sh; then
53 AC_SUBST(STARTUP_SCRIPT_SHELL,/sbin/sh)
54 else
55 AC_SUBST(STARTUP_SCRIPT_SHELL,/bin/sh)
56 fi
58 # System features
59 AC_SYS_LARGEFILE
61 if test -z "$AR" ; then
62 AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
63 fi
65 # Use LOGIN_PROGRAM from environment if possible
66 if test ! -z "$LOGIN_PROGRAM" ; then
67 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM",
68 [If your header files don't define LOGIN_PROGRAM,
69 then use this (detected) from environment and PATH])
70 else
71 # Search for login
72 AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
73 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
74 AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
75 fi
76 fi
78 AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
79 if test ! -z "$PATH_PASSWD_PROG" ; then
80 AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG",
81 [Full path of your "passwd" program])
82 fi
84 if test -z "$LD" ; then
85 LD=$CC
86 fi
87 AC_SUBST(LD)
89 AC_C_INLINE
91 AC_CHECK_DECL(LLONG_MAX, have_llong_max=1, , [#include <limits.h>])
93 if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
94 CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wuninitialized"
95 GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'`
96 case $GCC_VER in
97 1.*) ;;
98 2.8* | 2.9*) CFLAGS="$CFLAGS -Wsign-compare" ;;
99 2.*) ;;
100 3.*) CFLAGS="$CFLAGS -Wsign-compare" ;;
101 4.*) CFLAGS="$CFLAGS -Wsign-compare -Wno-pointer-sign" ;;
102 *) ;;
103 esac
105 if test -z "$have_llong_max"; then
106 # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
107 unset ac_cv_have_decl_LLONG_MAX
108 saved_CFLAGS="$CFLAGS"
109 CFLAGS="$CFLAGS -std=gnu99"
110 AC_CHECK_DECL(LLONG_MAX,
111 [have_llong_max=1],
112 [CFLAGS="$saved_CFLAGS"],
113 [#include <limits.h>]
114 )
115 fi
116 fi
118 AC_ARG_WITH(rpath,
119 [ --without-rpath Disable auto-added -R linker paths],
120 [
121 if test "x$withval" = "xno" ; then
122 need_dash_r=""
123 fi
124 if test "x$withval" = "xyes" ; then
125 need_dash_r=1
126 fi
127 ]
128 )
130 # Allow user to specify flags
131 AC_ARG_WITH(cflags,
132 [ --with-cflags Specify additional flags to pass to compiler],
133 [
134 if test -n "$withval" && test "x$withval" != "xno" && \
135 test "x${withval}" != "xyes"; then
136 CFLAGS="$CFLAGS $withval"
137 fi
138 ]
139 )
140 AC_ARG_WITH(cppflags,
141 [ --with-cppflags Specify additional flags to pass to preprocessor] ,
142 [
143 if test -n "$withval" && test "x$withval" != "xno" && \
144 test "x${withval}" != "xyes"; then
145 CPPFLAGS="$CPPFLAGS $withval"
146 fi
147 ]
148 )
149 AC_ARG_WITH(ldflags,
150 [ --with-ldflags Specify additional flags to pass to linker],
151 [
152 if test -n "$withval" && test "x$withval" != "xno" && \
153 test "x${withval}" != "xyes"; then
154 LDFLAGS="$LDFLAGS $withval"
155 fi
156 ]
157 )
158 AC_ARG_WITH(libs,
159 [ --with-libs Specify additional libraries to link with],
160 [
161 if test -n "$withval" && test "x$withval" != "xno" && \
162 test "x${withval}" != "xyes"; then
163 LIBS="$LIBS $withval"
164 fi
165 ]
166 )
167 AC_ARG_WITH(Werror,
168 [ --with-Werror Build main code with -Werror],
169 [
170 if test -n "$withval" && test "x$withval" != "xno"; then
171 werror_flags="-Werror"
172 if test "x${withval}" != "xyes"; then
173 werror_flags="$withval"
174 fi
175 fi
176 ]
177 )
179 AC_CHECK_HEADERS( \
180 bstring.h \
181 crypt.h \
182 crypto/sha2.h \
183 dirent.h \
184 endian.h \
185 features.h \
186 fcntl.h \
187 floatingpoint.h \
188 getopt.h \
189 glob.h \
190 ia.h \
191 iaf.h \
192 limits.h \
193 login.h \
194 maillock.h \
195 ndir.h \
196 net/if_tun.h \
197 netdb.h \
198 netgroup.h \
199 pam/pam_appl.h \
200 paths.h \
201 pty.h \
202 readpassphrase.h \
203 rpc/types.h \
204 security/pam_appl.h \
205 sha2.h \
206 shadow.h \
207 stddef.h \
208 stdint.h \
209 string.h \
210 strings.h \
211 sys/audit.h \
212 sys/bitypes.h \
213 sys/bsdtty.h \
214 sys/cdefs.h \
215 sys/dir.h \
216 sys/mman.h \
217 sys/ndir.h \
218 sys/prctl.h \
219 sys/pstat.h \
220 sys/select.h \
221 sys/stat.h \
222 sys/stream.h \
223 sys/stropts.h \
224 sys/strtio.h \
225 sys/sysmacros.h \
226 sys/time.h \
227 sys/timers.h \
228 sys/un.h \
229 time.h \
230 tmpdir.h \
231 ttyent.h \
232 unistd.h \
233 usersec.h \
234 util.h \
235 utime.h \
236 utmp.h \
237 utmpx.h \
238 vis.h \
239 )
241 # lastlog.h requires sys/time.h to be included first on Solaris
242 AC_CHECK_HEADERS(lastlog.h, [], [], [
243 #ifdef HAVE_SYS_TIME_H
244 # include <sys/time.h>
245 #endif
246 ])
248 # sys/ptms.h requires sys/stream.h to be included first on Solaris
249 AC_CHECK_HEADERS(sys/ptms.h, [], [], [
250 #ifdef HAVE_SYS_STREAM_H
251 # include <sys/stream.h>
252 #endif
253 ])
255 # login_cap.h requires sys/types.h on NetBSD
256 AC_CHECK_HEADERS(login_cap.h, [], [], [
257 #include <sys/types.h>
258 ])
260 # Messages for features tested for in target-specific section
261 SIA_MSG="no"
262 SPC_MSG="no"
264 # Check for some target-specific stuff
265 case "$host" in
266 *-*-aix*)
267 # Some versions of VAC won't allow macro redefinitions at
268 # -qlanglevel=ansi, and autoconf 2.60 sometimes insists on using that
269 # particularly with older versions of vac or xlc.
270 # It also throws errors about null macro argments, but these are
271 # not fatal.
272 AC_MSG_CHECKING(if compiler allows macro redefinitions)
273 AC_COMPILE_IFELSE(
274 [AC_LANG_SOURCE([[
275 #define testmacro foo
276 #define testmacro bar
277 int main(void) { exit(0); }
278 ]])],
279 [ AC_MSG_RESULT(yes) ],
280 [ AC_MSG_RESULT(no)
281 CC="`echo $CC | sed 's/-qlanglvl\=ansi//g'`"
282 LD="`echo $LD | sed 's/-qlanglvl\=ansi//g'`"
283 CFLAGS="`echo $CFLAGS | sed 's/-qlanglvl\=ansi//g'`"
284 CPPFLAGS="`echo $CPPFLAGS | sed 's/-qlanglvl\=ansi//g'`"
285 ]
286 )
288 AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
289 if (test -z "$blibpath"); then
290 blibpath="/usr/lib:/lib"
291 fi
292 saved_LDFLAGS="$LDFLAGS"
293 if test "$GCC" = "yes"; then
294 flags="-Wl,-blibpath: -Wl,-rpath, -blibpath:"
295 else
296 flags="-blibpath: -Wl,-blibpath: -Wl,-rpath,"
297 fi
298 for tryflags in $flags ;do
299 if (test -z "$blibflags"); then
300 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
301 AC_TRY_LINK([], [], [blibflags=$tryflags])
302 fi
303 done
304 if (test -z "$blibflags"); then
305 AC_MSG_RESULT(not found)
306 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
307 else
308 AC_MSG_RESULT($blibflags)
309 fi
310 LDFLAGS="$saved_LDFLAGS"
311 dnl Check for authenticate. Might be in libs.a on older AIXes
312 AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE, 1,
313 [Define if you want to enable AIX4's authenticate function])],
314 [AC_CHECK_LIB(s,authenticate,
315 [ AC_DEFINE(WITH_AIXAUTHENTICATE)
316 LIBS="$LIBS -ls"
317 ])
318 ])
319 dnl Check for various auth function declarations in headers.
320 AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
321 passwdexpired, setauthdb], , , [#include <usersec.h>])
322 dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
323 AC_CHECK_DECLS(loginfailed,
324 [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
325 AC_TRY_COMPILE(
326 [#include <usersec.h>],
327 [(void)loginfailed("user","host","tty",0);],
328 [AC_MSG_RESULT(yes)
329 AC_DEFINE(AIX_LOGINFAILED_4ARG, 1,
330 [Define if your AIX loginfailed() function
331 takes 4 arguments (AIX >= 5.2)])],
332 [AC_MSG_RESULT(no)]
333 )],
334 [],
335 [#include <usersec.h>]
336 )
337 AC_CHECK_FUNCS(setauthdb)
338 AC_CHECK_DECL(F_CLOSEM,
339 AC_DEFINE(HAVE_FCNTL_CLOSEM, 1, [Use F_CLOSEM fcntl for closefrom]),
340 [],
341 [ #include <limits.h>
342 #include <fcntl.h> ]
343 )
344 check_for_aix_broken_getaddrinfo=1
345 AC_DEFINE(BROKEN_REALPATH, 1, [Define if you have a broken realpath.])
346 AC_DEFINE(SETEUID_BREAKS_SETUID, 1,
347 [Define if your platform breaks doing a seteuid before a setuid])
348 AC_DEFINE(BROKEN_SETREUID, 1, [Define if your setreuid() is broken])
349 AC_DEFINE(BROKEN_SETREGID, 1, [Define if your setregid() is broken])
350 dnl AIX handles lastlog as part of its login message
351 AC_DEFINE(DISABLE_LASTLOG, 1, [Define if you don't want to use lastlog])
352 AC_DEFINE(LOGIN_NEEDS_UTMPX, 1,
353 [Some systems need a utmpx entry for /bin/login to work])
354 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV,
355 [Define to a Set Process Title type if your system is
356 supported by bsd-setproctitle.c])
357 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
358 [AIX 5.2 and 5.3 (and presumably newer) require this])
359 AC_DEFINE(PTY_ZEROREAD, 1, [read(1) can return 0 for a non-closed fd])
360 ;;
361 *-*-cygwin*)
362 check_for_libcrypt_later=1
363 LIBS="$LIBS /usr/lib/textmode.o"
364 AC_DEFINE(HAVE_CYGWIN, 1, [Define if you are on Cygwin])
365 AC_DEFINE(USE_PIPES, 1, [Use PIPES instead of a socketpair()])
366 AC_DEFINE(DISABLE_SHADOW, 1,
367 [Define if you want to disable shadow passwords])
368 AC_DEFINE(IP_TOS_IS_BROKEN, 1,
369 [Define if your system choked on IP TOS setting])
370 AC_DEFINE(NO_X11_UNIX_SOCKETS, 1,
371 [Define if X11 doesn't support AF_UNIX sockets on that system])
372 AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT, 1,
373 [Define if the concept of ports only accessible to
374 superusers isn't known])
375 AC_DEFINE(DISABLE_FD_PASSING, 1,
376 [Define if your platform needs to skip post auth
377 file descriptor passing])
378 ;;
379 *-*-dgux*)
380 AC_DEFINE(IP_TOS_IS_BROKEN)
381 AC_DEFINE(SETEUID_BREAKS_SETUID)
382 AC_DEFINE(BROKEN_SETREUID)
383 AC_DEFINE(BROKEN_SETREGID)
384 ;;
385 *-*-darwin*)
386 AC_MSG_CHECKING(if we have working getaddrinfo)
387 AC_TRY_RUN([#include <mach-o/dyld.h>
388 main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
389 exit(0);
390 else
391 exit(1);
392 }], [AC_MSG_RESULT(working)],
393 [AC_MSG_RESULT(buggy)
394 AC_DEFINE(BROKEN_GETADDRINFO, 1, [getaddrinfo is broken (if present)])],
395 [AC_MSG_RESULT(assume it is working)])
396 AC_DEFINE(SETEUID_BREAKS_SETUID)
397 AC_DEFINE(BROKEN_SETREUID)
398 AC_DEFINE(BROKEN_SETREGID)
399 AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1,
400 [Define if your resolver libs need this for getrrsetbyname])
401 AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
402 AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
403 [Use tunnel device compatibility to OpenBSD])
404 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
405 [Prepend the address family to IP tunnel traffic])
406 ;;
407 *-*-dragonfly*)
408 SSHDLIBS="$SSHDLIBS -lcrypt"
409 ;;
410 *-*-hpux*)
411 # first we define all of the options common to all HP-UX releases
412 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
413 IPADDR_IN_DISPLAY=yes
414 AC_DEFINE(USE_PIPES)
415 AC_DEFINE(LOGIN_NO_ENDOPT, 1,
416 [Define if your login program cannot handle end of options ("--")])
417 AC_DEFINE(LOGIN_NEEDS_UTMPX)
418 AC_DEFINE(LOCKED_PASSWD_STRING, "*",
419 [String used in /etc/passwd to denote locked account])
420 AC_DEFINE(SPT_TYPE,SPT_PSTAT)
421 MAIL="/var/mail/username"
422 LIBS="$LIBS -lsec"
423 AC_CHECK_LIB(xnet, t_error, ,
424 AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
426 # next, we define all of the options specific to major releases
427 case "$host" in
428 *-*-hpux10*)
429 if test -z "$GCC"; then
430 CFLAGS="$CFLAGS -Ae"
431 fi
432 ;;
433 *-*-hpux11*)
434 AC_DEFINE(PAM_SUN_CODEBASE, 1,
435 [Define if you are using Solaris-derived PAM which
436 passes pam_messages to the conversation function
437 with an extra level of indirection])
438 AC_DEFINE(DISABLE_UTMP, 1,
439 [Define if you don't want to use utmp])
440 AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
441 check_for_hpux_broken_getaddrinfo=1
442 check_for_conflicting_getspnam=1
443 ;;
444 esac
446 # lastly, we define options specific to minor releases
447 case "$host" in
448 *-*-hpux10.26)
449 AC_DEFINE(HAVE_SECUREWARE, 1,
450 [Define if you have SecureWare-based
451 protected password database])
452 disable_ptmx_check=yes
453 LIBS="$LIBS -lsecpw"
454 ;;
455 esac
456 ;;
457 *-*-irix5*)
458 PATH="$PATH:/usr/etc"
459 AC_DEFINE(BROKEN_INET_NTOA, 1,
460 [Define if you system's inet_ntoa is busted
461 (e.g. Irix gcc issue)])
462 AC_DEFINE(SETEUID_BREAKS_SETUID)
463 AC_DEFINE(BROKEN_SETREUID)
464 AC_DEFINE(BROKEN_SETREGID)
465 AC_DEFINE(WITH_ABBREV_NO_TTY, 1,
466 [Define if you shouldn't strip 'tty' from your
467 ttyname in [uw]tmp])
468 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
469 ;;
470 *-*-irix6*)
471 PATH="$PATH:/usr/etc"
472 AC_DEFINE(WITH_IRIX_ARRAY, 1,
473 [Define if you have/want arrays
474 (cluster-wide session managment, not C arrays)])
475 AC_DEFINE(WITH_IRIX_PROJECT, 1,
476 [Define if you want IRIX project management])
477 AC_DEFINE(WITH_IRIX_AUDIT, 1,
478 [Define if you want IRIX audit trails])
479 AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS, 1,
480 [Define if you want IRIX kernel jobs])])
481 AC_DEFINE(BROKEN_INET_NTOA)
482 AC_DEFINE(SETEUID_BREAKS_SETUID)
483 AC_DEFINE(BROKEN_SETREUID)
484 AC_DEFINE(BROKEN_SETREGID)
485 AC_DEFINE(BROKEN_UPDWTMPX, 1, [updwtmpx is broken (if present)])
486 AC_DEFINE(WITH_ABBREV_NO_TTY)
487 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
488 ;;
489 *-*-linux*)
490 no_dev_ptmx=1
491 check_for_libcrypt_later=1
492 check_for_openpty_ctty_bug=1
493 AC_DEFINE(DONT_TRY_OTHER_AF, 1, [Workaround more Linux IPv6 quirks])
494 AC_DEFINE(PAM_TTY_KLUDGE, 1,
495 [Work around problematic Linux PAM modules handling of PAM_TTY])
496 AC_DEFINE(LOCKED_PASSWD_PREFIX, "!",
497 [String used in /etc/passwd to denote locked account])
498 AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
499 AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM,
500 [Define to whatever link() returns for "not supported"
501 if it doesn't return EOPNOTSUPP.])
502 AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
503 AC_DEFINE(USE_BTMP)
504 inet6_default_4in6=yes
505 case `uname -r` in
506 1.*|2.0.*)
507 AC_DEFINE(BROKEN_CMSG_TYPE, 1,
508 [Define if cmsg_type is not passed correctly])
509 ;;
510 esac
511 # tun(4) forwarding compat code
512 AC_CHECK_HEADERS(linux/if_tun.h)
513 if test "x$ac_cv_header_linux_if_tun_h" = "xyes" ; then
514 AC_DEFINE(SSH_TUN_LINUX, 1,
515 [Open tunnel devices the Linux tun/tap way])
516 AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
517 [Use tunnel device compatibility to OpenBSD])
518 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
519 [Prepend the address family to IP tunnel traffic])
520 fi
521 ;;
522 mips-sony-bsd|mips-sony-newsos4)
523 AC_DEFINE(NEED_SETPGRP, 1, [Need setpgrp to acquire controlling tty])
524 SONY=1
525 ;;
526 *-*-netbsd*)
527 check_for_libcrypt_before=1
528 if test "x$withval" != "xno" ; then
529 need_dash_r=1
530 fi
531 AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
532 AC_CHECK_HEADER([net/if_tap.h], ,
533 AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
534 AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
535 [Prepend the address family to IP tunnel traffic])
536 ;;
537 *-*-freebsd*)
538 check_for_libcrypt_later=1
539 AC_DEFINE(LOCKED_PASSWD_PREFIX, "*LOCKED*", [Account locked with pw(1)])
540 AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
541 AC_CHECK_HEADER([net/if_tap.h], ,
542 AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
543 ;;
544 *-*-bsdi*)
545 AC_DEFINE(SETEUID_BREAKS_SETUID)
546 AC_DEFINE(BROKEN_SETREUID)
547 AC_DEFINE(BROKEN_SETREGID)
548 ;;
549 *-next-*)
550 conf_lastlog_location="/usr/adm/lastlog"
551 conf_utmp_location=/etc/utmp
552 conf_wtmp_location=/usr/adm/wtmp
553 MAIL=/usr/spool/mail
554 AC_DEFINE(HAVE_NEXT, 1, [Define if you are on NeXT])
555 AC_DEFINE(BROKEN_REALPATH)
556 AC_DEFINE(USE_PIPES)
557 AC_DEFINE(BROKEN_SAVED_UIDS, 1, [Needed for NeXT])
558 ;;
559 *-*-openbsd*)
560 AC_DEFINE(HAVE_ATTRIBUTE__SENTINEL__, 1, [OpenBSD's gcc has sentinel])
561 AC_DEFINE(HAVE_ATTRIBUTE__BOUNDED__, 1, [OpenBSD's gcc has bounded])
562 AC_DEFINE(SSH_TUN_OPENBSD, 1, [Open tunnel devices the OpenBSD way])
563 AC_DEFINE(SYSLOG_R_SAFE_IN_SIGHAND, 1,
564 [syslog_r function is safe to use in in a signal handler])
565 ;;
566 *-*-solaris*)
567 if test "x$withval" != "xno" ; then
568 need_dash_r=1
569 fi
570 AC_DEFINE(PAM_SUN_CODEBASE)
571 AC_DEFINE(LOGIN_NEEDS_UTMPX)
572 AC_DEFINE(LOGIN_NEEDS_TERM, 1,
573 [Some versions of /bin/login need the TERM supplied
574 on the commandline])
575 AC_DEFINE(PAM_TTY_KLUDGE)
576 AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
577 [Define if pam_chauthtok wants real uid set
578 to the unpriv'ed user])
579 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
580 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
581 AC_DEFINE(SSHD_ACQUIRES_CTTY, 1,
582 [Define if sshd somehow reacquires a controlling TTY
583 after setsid()])
584 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd
585 in case the name is longer than 8 chars])
586 external_path_file=/etc/default/login
587 # hardwire lastlog location (can't detect it on some versions)
588 conf_lastlog_location="/var/adm/lastlog"
589 AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
590 sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
591 if test "$sol2ver" -ge 8; then
592 AC_MSG_RESULT(yes)
593 AC_DEFINE(DISABLE_UTMP)
594 AC_DEFINE(DISABLE_WTMP, 1,
595 [Define if you don't want to use wtmp])
596 else
597 AC_MSG_RESULT(no)
598 fi
599 AC_ARG_WITH(solaris-contracts,
600 [ --with-solaris-contracts Enable Solaris process contracts (experimental)],
601 [
602 AC_CHECK_LIB(contract, ct_tmpl_activate,
603 [ AC_DEFINE(USE_SOLARIS_PROCESS_CONTRACTS, 1,
604 [Define if you have Solaris process contracts])
605 SSHDLIBS="$SSHDLIBS -lcontract"
606 AC_SUBST(SSHDLIBS)
607 SPC_MSG="yes" ], )
608 ],
609 )
610 ;;
611 *-*-sunos4*)
612 CPPFLAGS="$CPPFLAGS -DSUNOS4"
613 AC_CHECK_FUNCS(getpwanam)
614 AC_DEFINE(PAM_SUN_CODEBASE)
615 conf_utmp_location=/etc/utmp
616 conf_wtmp_location=/var/adm/wtmp
617 conf_lastlog_location=/var/adm/lastlog
618 AC_DEFINE(USE_PIPES)
619 ;;
620 *-ncr-sysv*)
621 LIBS="$LIBS -lc89"
622 AC_DEFINE(USE_PIPES)
623 AC_DEFINE(SSHD_ACQUIRES_CTTY)
624 AC_DEFINE(SETEUID_BREAKS_SETUID)
625 AC_DEFINE(BROKEN_SETREUID)
626 AC_DEFINE(BROKEN_SETREGID)
627 ;;
628 *-sni-sysv*)
629 # /usr/ucblib MUST NOT be searched on ReliantUNIX
630 AC_CHECK_LIB(dl, dlsym, ,)
631 # -lresolv needs to be at the end of LIBS or DNS lookups break
632 AC_CHECK_LIB(resolv, res_query, [ LIBS="$LIBS -lresolv" ])
633 IPADDR_IN_DISPLAY=yes
634 AC_DEFINE(USE_PIPES)
635 AC_DEFINE(IP_TOS_IS_BROKEN)
636 AC_DEFINE(SETEUID_BREAKS_SETUID)
637 AC_DEFINE(BROKEN_SETREUID)
638 AC_DEFINE(BROKEN_SETREGID)
639 AC_DEFINE(SSHD_ACQUIRES_CTTY)
640 external_path_file=/etc/default/login
641 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
642 # Attention: always take care to bind libsocket and libnsl before libc,
643 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
644 ;;
645 # UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
646 *-*-sysv4.2*)
647 AC_DEFINE(USE_PIPES)
648 AC_DEFINE(SETEUID_BREAKS_SETUID)
649 AC_DEFINE(BROKEN_SETREUID)
650 AC_DEFINE(BROKEN_SETREGID)
651 AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
652 AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
653 ;;
654 # UnixWare 7.x, OpenUNIX 8
655 *-*-sysv5*)
656 check_for_libcrypt_later=1
657 AC_DEFINE(UNIXWARE_LONG_PASSWORDS, 1, [Support passwords > 8 chars])
658 AC_DEFINE(USE_PIPES)
659 AC_DEFINE(SETEUID_BREAKS_SETUID)
660 AC_DEFINE(BROKEN_SETREUID)
661 AC_DEFINE(BROKEN_SETREGID)
662 AC_DEFINE(PASSWD_NEEDS_USERNAME)
663 case "$host" in
664 *-*-sysv5SCO_SV*) # SCO OpenServer 6.x
665 TEST_SHELL=/u95/bin/sh
666 AC_DEFINE(BROKEN_LIBIAF, 1,
667 [ia_uinfo routines not supported by OS yet])
668 AC_DEFINE(BROKEN_UPDWTMPX)
669 ;;
670 *) AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
671 ;;
672 esac
673 ;;
674 *-*-sysv*)
675 ;;
676 # SCO UNIX and OEM versions of SCO UNIX
677 *-*-sco3.2v4*)
678 AC_MSG_ERROR("This Platform is no longer supported.")
679 ;;
680 # SCO OpenServer 5.x
681 *-*-sco3.2v5*)
682 if test -z "$GCC"; then
683 CFLAGS="$CFLAGS -belf"
684 fi
685 LIBS="$LIBS -lprot -lx -ltinfo -lm"
686 no_dev_ptmx=1
687 AC_DEFINE(USE_PIPES)
688 AC_DEFINE(HAVE_SECUREWARE)
689 AC_DEFINE(DISABLE_SHADOW)
690 AC_DEFINE(DISABLE_FD_PASSING)
691 AC_DEFINE(SETEUID_BREAKS_SETUID)
692 AC_DEFINE(BROKEN_SETREUID)
693 AC_DEFINE(BROKEN_SETREGID)
694 AC_DEFINE(WITH_ABBREV_NO_TTY)
695 AC_DEFINE(BROKEN_UPDWTMPX)
696 AC_DEFINE(PASSWD_NEEDS_USERNAME)
697 AC_CHECK_FUNCS(getluid setluid)
698 MANTYPE=man
699 TEST_SHELL=ksh
700 ;;
701 *-*-unicosmk*)
702 AC_DEFINE(NO_SSH_LASTLOG, 1,
703 [Define if you don't want to use lastlog in session.c])
704 AC_DEFINE(SETEUID_BREAKS_SETUID)
705 AC_DEFINE(BROKEN_SETREUID)
706 AC_DEFINE(BROKEN_SETREGID)
707 AC_DEFINE(USE_PIPES)
708 AC_DEFINE(DISABLE_FD_PASSING)
709 LDFLAGS="$LDFLAGS"
710 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
711 MANTYPE=cat
712 ;;
713 *-*-unicosmp*)
714 AC_DEFINE(SETEUID_BREAKS_SETUID)
715 AC_DEFINE(BROKEN_SETREUID)
716 AC_DEFINE(BROKEN_SETREGID)
717 AC_DEFINE(WITH_ABBREV_NO_TTY)
718 AC_DEFINE(USE_PIPES)
719 AC_DEFINE(DISABLE_FD_PASSING)
720 LDFLAGS="$LDFLAGS"
721 LIBS="$LIBS -lgen -lacid -ldb"
722 MANTYPE=cat
723 ;;
724 *-*-unicos*)
725 AC_DEFINE(SETEUID_BREAKS_SETUID)
726 AC_DEFINE(BROKEN_SETREUID)
727 AC_DEFINE(BROKEN_SETREGID)
728 AC_DEFINE(USE_PIPES)
729 AC_DEFINE(DISABLE_FD_PASSING)
730 AC_DEFINE(NO_SSH_LASTLOG)
731 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
732 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
733 MANTYPE=cat
734 ;;
735 *-dec-osf*)
736 AC_MSG_CHECKING(for Digital Unix SIA)
737 no_osfsia=""
738 AC_ARG_WITH(osfsia,
739 [ --with-osfsia Enable Digital Unix SIA],
740 [
741 if test "x$withval" = "xno" ; then
742 AC_MSG_RESULT(disabled)
743 no_osfsia=1
744 fi
745 ],
746 )
747 if test -z "$no_osfsia" ; then
748 if test -f /etc/sia/matrix.conf; then
749 AC_MSG_RESULT(yes)
750 AC_DEFINE(HAVE_OSF_SIA, 1,
751 [Define if you have Digital Unix Security
752 Integration Architecture])
753 AC_DEFINE(DISABLE_LOGIN, 1,
754 [Define if you don't want to use your
755 system's login() call])
756 AC_DEFINE(DISABLE_FD_PASSING)
757 LIBS="$LIBS -lsecurity -ldb -lm -laud"
758 SIA_MSG="yes"
759 else
760 AC_MSG_RESULT(no)
761 AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin",
762 [String used in /etc/passwd to denote locked account])
763 fi
764 fi
765 AC_DEFINE(BROKEN_GETADDRINFO)
766 AC_DEFINE(SETEUID_BREAKS_SETUID)
767 AC_DEFINE(BROKEN_SETREUID)
768 AC_DEFINE(BROKEN_SETREGID)
769 ;;
771 *-*-nto-qnx*)
772 AC_DEFINE(USE_PIPES)
773 AC_DEFINE(NO_X11_UNIX_SOCKETS)
774 AC_DEFINE(MISSING_NFDBITS, 1, [Define on *nto-qnx systems])
775 AC_DEFINE(MISSING_HOWMANY, 1, [Define on *nto-qnx systems])
776 AC_DEFINE(MISSING_FD_MASK, 1, [Define on *nto-qnx systems])
777 AC_DEFINE(DISABLE_LASTLOG)
778 AC_DEFINE(SSHD_ACQUIRES_CTTY)
779 enable_etc_default_login=no # has incompatible /etc/default/login
780 ;;
782 *-*-ultrix*)
783 AC_DEFINE(BROKEN_GETGROUPS, 1, [getgroups(0,NULL) will return -1])
784 AC_DEFINE(BROKEN_MMAP, 1, [Ultrix mmap can't map files])
785 AC_DEFINE(NEED_SETPGRP)
786 AC_DEFINE(HAVE_SYS_SYSLOG_H, 1, [Force use of sys/syslog.h on Ultrix])
787 ;;
789 *-*-lynxos)
790 CFLAGS="$CFLAGS -D__NO_INCLUDE_WARN__"
791 AC_DEFINE(MISSING_HOWMANY)
792 AC_DEFINE(BROKEN_SETVBUF, 1, [LynxOS has broken setvbuf() implementation])
793 ;;
794 esac
796 AC_MSG_CHECKING(compiler and flags for sanity)
797 AC_RUN_IFELSE(
798 [AC_LANG_SOURCE([
799 #include <stdio.h>
800 int main(){exit(0);}
801 ])],
802 [ AC_MSG_RESULT(yes) ],
803 [
804 AC_MSG_RESULT(no)
805 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
806 ],
807 [ AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
808 )
810 dnl Checks for header files.
811 # Checks for libraries.
812 AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
813 AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
815 dnl IRIX and Solaris 2.5.1 have dirname() in libgen
816 AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
817 AC_CHECK_LIB(gen, dirname,[
818 AC_CACHE_CHECK([for broken dirname],
819 ac_cv_have_broken_dirname, [
820 save_LIBS="$LIBS"
821 LIBS="$LIBS -lgen"
822 AC_RUN_IFELSE(
823 [AC_LANG_SOURCE([[
824 #include <libgen.h>
825 #include <string.h>
827 int main(int argc, char **argv) {
828 char *s, buf[32];
830 strncpy(buf,"/etc", 32);
831 s = dirname(buf);
832 if (!s || strncmp(s, "/", 32) != 0) {
833 exit(1);
834 } else {
835 exit(0);
836 }
837 }
838 ]])],
839 [ ac_cv_have_broken_dirname="no" ],
840 [ ac_cv_have_broken_dirname="yes" ],
841 [ ac_cv_have_broken_dirname="no" ],
842 )
843 LIBS="$save_LIBS"
844 ])
845 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
846 LIBS="$LIBS -lgen"
847 AC_DEFINE(HAVE_DIRNAME)
848 AC_CHECK_HEADERS(libgen.h)
849 fi
850 ])
851 ])
853 AC_CHECK_FUNC(getspnam, ,
854 AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
855 AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME, 1,
856 [Define if you have the basename function.]))
858 dnl zlib is required
859 AC_ARG_WITH(zlib,
860 [ --with-zlib=PATH Use zlib in PATH],
861 [ if test "x$withval" = "xno" ; then
862 AC_MSG_ERROR([*** zlib is required ***])
863 elif test "x$withval" != "xyes"; then
864 if test -d "$withval/lib"; then
865 if test -n "${need_dash_r}"; then
866 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
867 else
868 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
869 fi
870 else
871 if test -n "${need_dash_r}"; then
872 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
873 else
874 LDFLAGS="-L${withval} ${LDFLAGS}"
875 fi
876 fi
877 if test -d "$withval/include"; then
878 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
879 else
880 CPPFLAGS="-I${withval} ${CPPFLAGS}"
881 fi
882 fi ]
883 )
885 AC_CHECK_LIB(z, deflate, ,
886 [
887 saved_CPPFLAGS="$CPPFLAGS"
888 saved_LDFLAGS="$LDFLAGS"
889 save_LIBS="$LIBS"
890 dnl Check default zlib install dir
891 if test -n "${need_dash_r}"; then
892 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
893 else
894 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
895 fi
896 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
897 LIBS="$LIBS -lz"
898 AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
899 [
900 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
901 ]
902 )
903 ]
904 )
905 AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
907 AC_ARG_WITH(zlib-version-check,
908 [ --without-zlib-version-check Disable zlib version check],
909 [ if test "x$withval" = "xno" ; then
910 zlib_check_nonfatal=1
911 fi
912 ]
913 )
915 AC_MSG_CHECKING(for possibly buggy zlib)
916 AC_RUN_IFELSE([AC_LANG_SOURCE([[
917 #include <stdio.h>
918 #include <zlib.h>
919 int main()
920 {
921 int a=0, b=0, c=0, d=0, n, v;
922 n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
923 if (n != 3 && n != 4)
924 exit(1);
925 v = a*1000000 + b*10000 + c*100 + d;
926 fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
928 /* 1.1.4 is OK */
929 if (a == 1 && b == 1 && c >= 4)
930 exit(0);
932 /* 1.2.3 and up are OK */
933 if (v >= 1020300)
934 exit(0);
936 exit(2);
937 }
938 ]])],
939 AC_MSG_RESULT(no),
940 [ AC_MSG_RESULT(yes)
941 if test -z "$zlib_check_nonfatal" ; then
942 AC_MSG_ERROR([*** zlib too old - check config.log ***
943 Your reported zlib version has known security problems. It's possible your
944 vendor has fixed these problems without changing the version number. If you
945 are sure this is the case, you can disable the check by running
946 "./configure --without-zlib-version-check".
947 If you are in doubt, upgrade zlib to version 1.2.3 or greater.
948 See http://www.gzip.org/zlib/ for details.])
949 else
950 AC_MSG_WARN([zlib version may have security problems])
951 fi
952 ],
953 [ AC_MSG_WARN([cross compiling: not checking zlib version]) ]
954 )
956 dnl UnixWare 2.x
957 AC_CHECK_FUNC(strcasecmp,
958 [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
959 )
960 AC_CHECK_FUNCS(utimes,
961 [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
962 LIBS="$LIBS -lc89"]) ]
963 )
965 dnl Checks for libutil functions
966 AC_CHECK_HEADERS(libutil.h)
967 AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN, 1,
968 [Define if your libraries define login()])])
969 AC_CHECK_FUNCS(logout updwtmp logwtmp)
971 AC_FUNC_STRFTIME
973 # Check for ALTDIRFUNC glob() extension
974 AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
975 AC_EGREP_CPP(FOUNDIT,
976 [
977 #include <glob.h>
978 #ifdef GLOB_ALTDIRFUNC
979 FOUNDIT
980 #endif
981 ],
982 [
983 AC_DEFINE(GLOB_HAS_ALTDIRFUNC, 1,
984 [Define if your system glob() function has
985 the GLOB_ALTDIRFUNC extension])
986 AC_MSG_RESULT(yes)
987 ],
988 [
989 AC_MSG_RESULT(no)
990 ]
991 )
993 # Check for g.gl_matchc glob() extension
994 AC_MSG_CHECKING(for gl_matchc field in glob_t)
995 AC_TRY_COMPILE(
996 [ #include <glob.h> ],
997 [glob_t g; g.gl_matchc = 1;],
998 [
999 AC_DEFINE(GLOB_HAS_GL_MATCHC, 1,
1000 [Define if your system glob() function has
1001 gl_matchc options in glob_t])
1002 AC_MSG_RESULT(yes)
1003 ],
1004 [
1005 AC_MSG_RESULT(no)
1006 ]
1007 )
1009 AC_CHECK_DECLS(GLOB_NOMATCH, , , [#include <glob.h>])
1011 AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
1012 AC_RUN_IFELSE(
1013 [AC_LANG_SOURCE([[
1014 #include <sys/types.h>
1015 #include <dirent.h>
1016 int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
1017 ]])],
1018 [AC_MSG_RESULT(yes)],
1019 [
1020 AC_MSG_RESULT(no)
1021 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME, 1,
1022 [Define if your struct dirent expects you to
1023 allocate extra space for d_name])
1024 ],
1025 [
1026 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
1027 AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
1028 ]
1029 )
1031 AC_MSG_CHECKING([for /proc/pid/fd directory])
1032 if test -d "/proc/$$/fd" ; then
1033 AC_DEFINE(HAVE_PROC_PID, 1, [Define if you have /proc/$pid/fd])
1034 AC_MSG_RESULT(yes)
1035 else
1036 AC_MSG_RESULT(no)
1037 fi
1039 # Check whether user wants S/Key support
1040 SKEY_MSG="no"
1041 AC_ARG_WITH(skey,
1042 [ --with-skey[[=PATH]] Enable S/Key support (optionally in PATH)],
1043 [
1044 if test "x$withval" != "xno" ; then
1046 if test "x$withval" != "xyes" ; then
1047 CPPFLAGS="$CPPFLAGS -I${withval}/include"
1048 LDFLAGS="$LDFLAGS -L${withval}/lib"
1049 fi
1051 AC_DEFINE(SKEY, 1, [Define if you want S/Key support])
1052 LIBS="-lskey $LIBS"
1053 SKEY_MSG="yes"
1055 AC_MSG_CHECKING([for s/key support])
1056 AC_LINK_IFELSE(
1057 [AC_LANG_SOURCE([[
1058 #include <stdio.h>
1059 #include <skey.h>
1060 int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
1061 ]])],
1062 [AC_MSG_RESULT(yes)],
1063 [
1064 AC_MSG_RESULT(no)
1065 AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
1066 ])
1067 AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
1068 AC_TRY_COMPILE(
1069 [#include <stdio.h>
1070 #include <skey.h>],
1071 [(void)skeychallenge(NULL,"name","",0);],
1072 [AC_MSG_RESULT(yes)
1073 AC_DEFINE(SKEYCHALLENGE_4ARG, 1,
1074 [Define if your skeychallenge()
1075 function takes 4 arguments (NetBSD)])],
1076 [AC_MSG_RESULT(no)]
1077 )
1078 fi
1079 ]
1080 )
1082 # Check whether user wants TCP wrappers support
1083 TCPW_MSG="no"
1084 AC_ARG_WITH(tcp-wrappers,
1085 [ --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
1086 [
1087 if test "x$withval" != "xno" ; then
1088 saved_LIBS="$LIBS"
1089 saved_LDFLAGS="$LDFLAGS"
1090 saved_CPPFLAGS="$CPPFLAGS"
1091 if test -n "${withval}" && \
1092 test "x${withval}" != "xyes"; then
1093 if test -d "${withval}/lib"; then
1094 if test -n "${need_dash_r}"; then
1095 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1096 else
1097 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1098 fi
1099 else
1100 if test -n "${need_dash_r}"; then
1101 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1102 else
1103 LDFLAGS="-L${withval} ${LDFLAGS}"
1104 fi
1105 fi
1106 if test -d "${withval}/include"; then
1107 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1108 else
1109 CPPFLAGS="-I${withval} ${CPPFLAGS}"
1110 fi
1111 fi
1112 LIBWRAP="-lwrap"
1113 LIBS="$LIBWRAP $LIBS"
1114 AC_MSG_CHECKING(for libwrap)
1115 AC_TRY_LINK(
1116 [
1117 #include <sys/types.h>
1118 #include <sys/socket.h>
1119 #include <netinet/in.h>
1120 #include <tcpd.h>
1121 int deny_severity = 0, allow_severity = 0;
1122 ],
1123 [hosts_access(0);],
1124 [
1125 AC_MSG_RESULT(yes)
1126 AC_DEFINE(LIBWRAP, 1,
1127 [Define if you want
1128 TCP Wrappers support])
1129 AC_SUBST(LIBWRAP)
1130 TCPW_MSG="yes"
1131 ],
1132 [
1133 AC_MSG_ERROR([*** libwrap missing])
1134 ]
1135 )
1136 LIBS="$saved_LIBS"
1137 fi
1138 ]
1139 )
1141 # Check whether user wants libedit support
1142 LIBEDIT_MSG="no"
1143 AC_ARG_WITH(libedit,
1144 [ --with-libedit[[=PATH]] Enable libedit support for sftp],
1145 [ if test "x$withval" != "xno" ; then
1146 if test "x$withval" != "xyes"; then
1147 CPPFLAGS="$CPPFLAGS -I${withval}/include"
1148 if test -n "${need_dash_r}"; then
1149 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1150 else
1151 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1152 fi
1153 fi
1154 AC_CHECK_LIB(edit, el_init,
1155 [ AC_DEFINE(USE_LIBEDIT, 1, [Use libedit for sftp])
1156 LIBEDIT="-ledit -lcurses"
1157 LIBEDIT_MSG="yes"
1158 AC_SUBST(LIBEDIT)
1159 ],
1160 [ AC_MSG_ERROR(libedit not found) ],
1161 [ -lcurses ]
1162 )
1163 AC_MSG_CHECKING(if libedit version is compatible)
1164 AC_COMPILE_IFELSE(
1165 [AC_LANG_SOURCE([[
1166 #include <histedit.h>
1167 int main(void)
1168 {
1169 int i = H_SETSIZE;
1170 el_init("", NULL, NULL, NULL);
1171 exit(0);
1172 }
1173 ]])],
1174 [ AC_MSG_RESULT(yes) ],
1175 [ AC_MSG_RESULT(no)
1176 AC_MSG_ERROR(libedit version is not compatible) ]
1177 )
1178 fi ]
1179 )
1181 AUDIT_MODULE=none
1182 AC_ARG_WITH(audit,
1183 [ --with-audit=module Enable EXPERIMENTAL audit support (modules=debug,bsm)],
1184 [
1185 AC_MSG_CHECKING(for supported audit module)
1186 case "$withval" in
1187 bsm)
1188 AC_MSG_RESULT(bsm)
1189 AUDIT_MODULE=bsm
1190 dnl Checks for headers, libs and functions
1191 AC_CHECK_HEADERS(bsm/audit.h, [],
1192 [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)],
1193 [
1194 #ifdef HAVE_TIME_H
1195 # include <time.h>
1196 #endif
1197 ]
1198 )
1199 AC_CHECK_LIB(bsm, getaudit, [],
1200 [AC_MSG_ERROR(BSM enabled and required library not found)])
1201 AC_CHECK_FUNCS(getaudit, [],
1202 [AC_MSG_ERROR(BSM enabled and required function not found)])
1203 # These are optional
1204 AC_CHECK_FUNCS(getaudit_addr)
1205 AC_DEFINE(USE_BSM_AUDIT, 1, [Use BSM audit module])
1206 ;;
1207 debug)
1208 AUDIT_MODULE=debug
1209 AC_MSG_RESULT(debug)
1210 AC_DEFINE(SSH_AUDIT_EVENTS, 1, Use audit debugging module)
1211 ;;
1212 no)
1213 AC_MSG_RESULT(no)
1214 ;;
1215 *)
1216 AC_MSG_ERROR([Unknown audit module $withval])
1217 ;;
1218 esac ]
1219 )
1221 dnl Checks for library functions. Please keep in alphabetical order
1222 AC_CHECK_FUNCS( \
1223 arc4random \
1224 asprintf \
1225 b64_ntop \
1226 __b64_ntop \
1227 b64_pton \
1228 __b64_pton \
1229 bcopy \
1230 bindresvport_sa \
1231 clock \
1232 closefrom \
1233 dirfd \
1234 fchmod \
1235 fchown \
1236 freeaddrinfo \
1237 futimes \
1238 getaddrinfo \
1239 getcwd \
1240 getgrouplist \
1241 getnameinfo \
1242 getopt \
1243 getpeereid \
1244 _getpty \
1245 getrlimit \
1246 getttyent \
1247 glob \
1248 inet_aton \
1249 inet_ntoa \
1250 inet_ntop \
1251 innetgr \
1252 login_getcapbool \
1253 md5_crypt \
1254 memmove \
1255 mkdtemp \
1256 mmap \
1257 ngetaddrinfo \
1258 nsleep \
1259 ogetaddrinfo \
1260 openlog_r \
1261 openpty \
1262 prctl \
1263 pstat \
1264 readpassphrase \
1265 realpath \
1266 recvmsg \
1267 rresvport_af \
1268 sendmsg \
1269 setdtablesize \
1270 setegid \
1271 setenv \
1272 seteuid \
1273 setgroups \
1274 setlogin \
1275 setpcred \
1276 setproctitle \
1277 setregid \
1278 setreuid \
1279 setrlimit \
1280 setsid \
1281 setvbuf \
1282 sigaction \
1283 sigvec \
1284 snprintf \
1285 socketpair \
1286 strdup \
1287 strerror \
1288 strlcat \
1289 strlcpy \
1290 strmode \
1291 strnvis \
1292 strtonum \
1293 strtoll \
1294 strtoul \
1295 sysconf \
1296 tcgetpgrp \
1297 truncate \
1298 unsetenv \
1299 updwtmpx \
1300 vasprintf \
1301 vhangup \
1302 vsnprintf \
1303 waitpid \
1304 )
1306 # IRIX has a const char return value for gai_strerror()
1307 AC_CHECK_FUNCS(gai_strerror,[
1308 AC_DEFINE(HAVE_GAI_STRERROR)
1309 AC_TRY_COMPILE([
1310 #include <sys/types.h>
1311 #include <sys/socket.h>
1312 #include <netdb.h>
1314 const char *gai_strerror(int);],[
1315 char *str;
1317 str = gai_strerror(0);],[
1318 AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
1319 [Define if gai_strerror() returns const char *])])])
1321 AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP, 1,
1322 [Some systems put nanosleep outside of libc]))
1324 dnl Make sure prototypes are defined for these before using them.
1325 AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
1326 AC_CHECK_DECL(strsep,
1327 [AC_CHECK_FUNCS(strsep)],
1328 [],
1329 [
1330 #ifdef HAVE_STRING_H
1331 # include <string.h>
1332 #endif
1333 ])
1335 dnl tcsendbreak might be a macro
1336 AC_CHECK_DECL(tcsendbreak,
1337 [AC_DEFINE(HAVE_TCSENDBREAK)],
1338 [AC_CHECK_FUNCS(tcsendbreak)],
1339 [#include <termios.h>]
1340 )
1342 AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
1344 AC_CHECK_DECLS(SHUT_RD, , ,
1345 [
1346 #include <sys/types.h>
1347 #include <sys/socket.h>
1348 ])
1350 AC_CHECK_DECLS(O_NONBLOCK, , ,
1351 [
1352 #include <sys/types.h>
1353 #ifdef HAVE_SYS_STAT_H
1354 # include <sys/stat.h>
1355 #endif
1356 #ifdef HAVE_FCNTL_H
1357 # include <fcntl.h>
1358 #endif
1359 ])
1361 AC_CHECK_DECLS(writev, , , [
1362 #include <sys/types.h>
1363 #include <sys/uio.h>
1364 #include <unistd.h>
1365 ])
1367 AC_CHECK_FUNCS(setresuid, [
1368 dnl Some platorms have setresuid that isn't implemented, test for this
1369 AC_MSG_CHECKING(if setresuid seems to work)
1370 AC_RUN_IFELSE(
1371 [AC_LANG_SOURCE([[
1372 #include <stdlib.h>
1373 #include <errno.h>
1374 int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
1375 ]])],
1376 [AC_MSG_RESULT(yes)],
1377 [AC_DEFINE(BROKEN_SETRESUID, 1,
1378 [Define if your setresuid() is broken])
1379 AC_MSG_RESULT(not implemented)],
1380 [AC_MSG_WARN([cross compiling: not checking setresuid])]
1381 )
1382 ])
1384 AC_CHECK_FUNCS(setresgid, [
1385 dnl Some platorms have setresgid that isn't implemented, test for this
1386 AC_MSG_CHECKING(if setresgid seems to work)
1387 AC_RUN_IFELSE(
1388 [AC_LANG_SOURCE([[
1389 #include <stdlib.h>
1390 #include <errno.h>
1391 int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
1392 ]])],
1393 [AC_MSG_RESULT(yes)],
1394 [AC_DEFINE(BROKEN_SETRESGID, 1,
1395 [Define if your setresgid() is broken])
1396 AC_MSG_RESULT(not implemented)],
1397 [AC_MSG_WARN([cross compiling: not checking setresuid])]
1398 )
1399 ])
1401 dnl Checks for time functions
1402 AC_CHECK_FUNCS(gettimeofday time)
1403 dnl Checks for utmp functions
1404 AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
1405 AC_CHECK_FUNCS(utmpname)
1406 dnl Checks for utmpx functions
1407 AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline )
1408 AC_CHECK_FUNCS(setutxent utmpxname)
1410 AC_CHECK_FUNC(daemon,
1411 [AC_DEFINE(HAVE_DAEMON, 1, [Define if your libraries define daemon()])],
1412 [AC_CHECK_LIB(bsd, daemon,
1413 [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
1414 )
1416 AC_CHECK_FUNC(getpagesize,
1417 [AC_DEFINE(HAVE_GETPAGESIZE, 1,
1418 [Define if your libraries define getpagesize()])],
1419 [AC_CHECK_LIB(ucb, getpagesize,
1420 [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
1421 )
1423 # Check for broken snprintf
1424 if test "x$ac_cv_func_snprintf" = "xyes" ; then
1425 AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1426 AC_RUN_IFELSE(
1427 [AC_LANG_SOURCE([[
1428 #include <stdio.h>
1429 int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
1430 ]])],
1431 [AC_MSG_RESULT(yes)],
1432 [
1433 AC_MSG_RESULT(no)
1434 AC_DEFINE(BROKEN_SNPRINTF, 1,
1435 [Define if your snprintf is busted])
1436 AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1437 ],
1438 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
1439 )
1440 fi
1442 # If we don't have a working asprintf, then we strongly depend on vsnprintf
1443 # returning the right thing on overflow: the number of characters it tried to
1444 # create (as per SUSv3)
1445 if test "x$ac_cv_func_asprintf" != "xyes" && \
1446 test "x$ac_cv_func_vsnprintf" = "xyes" ; then
1447 AC_MSG_CHECKING([whether vsnprintf returns correct values on overflow])
1448 AC_RUN_IFELSE(
1449 [AC_LANG_SOURCE([[
1450 #include <sys/types.h>
1451 #include <stdio.h>
1452 #include <stdarg.h>
1454 int x_snprintf(char *str,size_t count,const char *fmt,...)
1455 {
1456 size_t ret; va_list ap;
1457 va_start(ap, fmt); ret = vsnprintf(str, count, fmt, ap); va_end(ap);
1458 return ret;
1459 }
1460 int main(void)
1461 {
1462 char x[1];
1463 exit(x_snprintf(x, 1, "%s %d", "hello", 12345) == 11 ? 0 : 1);
1464 } ]])],
1465 [AC_MSG_RESULT(yes)],
1466 [
1467 AC_MSG_RESULT(no)
1468 AC_DEFINE(BROKEN_SNPRINTF, 1,
1469 [Define if your snprintf is busted])
1470 AC_MSG_WARN([****** Your vsnprintf() function is broken, complain to your vendor])
1471 ],
1472 [ AC_MSG_WARN([cross compiling: Assuming working vsnprintf()]) ]
1473 )
1474 fi
1476 # On systems where [v]snprintf is broken, but is declared in stdio,
1477 # check that the fmt argument is const char * or just char *.
1478 # This is only useful for when BROKEN_SNPRINTF
1479 AC_MSG_CHECKING([whether snprintf can declare const char *fmt])
1480 AC_COMPILE_IFELSE([AC_LANG_SOURCE([[#include <stdio.h>
1481 int snprintf(char *a, size_t b, const char *c, ...) { return 0; }
1482 int main(void) { snprintf(0, 0, 0); }
1483 ]])],
1484 [AC_MSG_RESULT(yes)
1485 AC_DEFINE(SNPRINTF_CONST, [const],
1486 [Define as const if snprintf() can declare const char *fmt])],
1487 [AC_MSG_RESULT(no)
1488 AC_DEFINE(SNPRINTF_CONST, [/* not const */])])
1490 # Check for missing getpeereid (or equiv) support
1491 NO_PEERCHECK=""
1492 if test "x$ac_cv_func_getpeereid" != "xyes" ; then
1493 AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1494 AC_TRY_COMPILE(
1495 [#include <sys/types.h>
1496 #include <sys/socket.h>],
1497 [int i = SO_PEERCRED;],
1498 [ AC_MSG_RESULT(yes)
1499 AC_DEFINE(HAVE_SO_PEERCRED, 1, [Have PEERCRED socket option])
1500 ],
1501 [AC_MSG_RESULT(no)
1502 NO_PEERCHECK=1]
1503 )
1504 fi
1506 dnl see whether mkstemp() requires XXXXXX
1507 if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1508 AC_MSG_CHECKING([for (overly) strict mkstemp])
1509 AC_RUN_IFELSE(
1510 [AC_LANG_SOURCE([[
1511 #include <stdlib.h>
1512 main() { char template[]="conftest.mkstemp-test";
1513 if (mkstemp(template) == -1)
1514 exit(1);
1515 unlink(template); exit(0);
1516 }
1517 ]])],
1518 [
1519 AC_MSG_RESULT(no)
1520 ],
1521 [
1522 AC_MSG_RESULT(yes)
1523 AC_DEFINE(HAVE_STRICT_MKSTEMP, 1, [Silly mkstemp()])
1524 ],
1525 [
1526 AC_MSG_RESULT(yes)
1527 AC_DEFINE(HAVE_STRICT_MKSTEMP)
1528 ]
1529 )
1530 fi
1532 dnl make sure that openpty does not reacquire controlling terminal
1533 if test ! -z "$check_for_openpty_ctty_bug"; then
1534 AC_MSG_CHECKING(if openpty correctly handles controlling tty)
1535 AC_RUN_IFELSE(
1536 [AC_LANG_SOURCE([[
1537 #include <stdio.h>
1538 #include <sys/fcntl.h>
1539 #include <sys/types.h>
1540 #include <sys/wait.h>
1542 int
1543 main()
1544 {
1545 pid_t pid;
1546 int fd, ptyfd, ttyfd, status;
1548 pid = fork();
1549 if (pid < 0) { /* failed */
1550 exit(1);
1551 } else if (pid > 0) { /* parent */
1552 waitpid(pid, &status, 0);
1553 if (WIFEXITED(status))
1554 exit(WEXITSTATUS(status));
1555 else
1556 exit(2);
1557 } else { /* child */
1558 close(0); close(1); close(2);
1559 setsid();
1560 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1561 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1562 if (fd >= 0)
1563 exit(3); /* Acquired ctty: broken */
1564 else
1565 exit(0); /* Did not acquire ctty: OK */
1566 }
1567 }
1568 ]])],
1569 [
1570 AC_MSG_RESULT(yes)
1571 ],
1572 [
1573 AC_MSG_RESULT(no)
1574 AC_DEFINE(SSHD_ACQUIRES_CTTY)
1575 ],
1576 [
1577 AC_MSG_RESULT(cross-compiling, assuming yes)
1578 ]
1579 )
1580 fi
1582 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1583 test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
1584 AC_MSG_CHECKING(if getaddrinfo seems to work)
1585 AC_RUN_IFELSE(
1586 [AC_LANG_SOURCE([[
1587 #include <stdio.h>
1588 #include <sys/socket.h>
1589 #include <netdb.h>
1590 #include <errno.h>
1591 #include <netinet/in.h>
1593 #define TEST_PORT "2222"
1595 int
1596 main(void)
1597 {
1598 int err, sock;
1599 struct addrinfo *gai_ai, *ai, hints;
1600 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1602 memset(&hints, 0, sizeof(hints));
1603 hints.ai_family = PF_UNSPEC;
1604 hints.ai_socktype = SOCK_STREAM;
1605 hints.ai_flags = AI_PASSIVE;
1607 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1608 if (err != 0) {
1609 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1610 exit(1);
1611 }
1613 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1614 if (ai->ai_family != AF_INET6)
1615 continue;
1617 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1618 sizeof(ntop), strport, sizeof(strport),
1619 NI_NUMERICHOST|NI_NUMERICSERV);
1621 if (err != 0) {
1622 if (err == EAI_SYSTEM)
1623 perror("getnameinfo EAI_SYSTEM");
1624 else
1625 fprintf(stderr, "getnameinfo failed: %s\n",
1626 gai_strerror(err));
1627 exit(2);
1628 }
1630 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1631 if (sock < 0)
1632 perror("socket");
1633 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1634 if (errno == EBADF)
1635 exit(3);
1636 }
1637 }
1638 exit(0);
1639 }
1640 ]])],
1641 [
1642 AC_MSG_RESULT(yes)
1643 ],
1644 [
1645 AC_MSG_RESULT(no)
1646 AC_DEFINE(BROKEN_GETADDRINFO)
1647 ],
1648 [
1649 AC_MSG_RESULT(cross-compiling, assuming yes)
1650 ]
1651 )
1652 fi
1654 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1655 test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
1656 AC_MSG_CHECKING(if getaddrinfo seems to work)
1657 AC_RUN_IFELSE(
1658 [AC_LANG_SOURCE([[
1659 #include <stdio.h>
1660 #include <sys/socket.h>
1661 #include <netdb.h>
1662 #include <errno.h>
1663 #include <netinet/in.h>
1665 #define TEST_PORT "2222"
1667 int
1668 main(void)
1669 {
1670 int err, sock;
1671 struct addrinfo *gai_ai, *ai, hints;
1672 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1674 memset(&hints, 0, sizeof(hints));
1675 hints.ai_family = PF_UNSPEC;
1676 hints.ai_socktype = SOCK_STREAM;
1677 hints.ai_flags = AI_PASSIVE;
1679 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1680 if (err != 0) {
1681 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1682 exit(1);
1683 }
1685 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1686 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1687 continue;
1689 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1690 sizeof(ntop), strport, sizeof(strport),
1691 NI_NUMERICHOST|NI_NUMERICSERV);
1693 if (ai->ai_family == AF_INET && err != 0) {
1694 perror("getnameinfo");
1695 exit(2);
1696 }
1697 }
1698 exit(0);
1699 }
1700 ]])],
1701 [
1702 AC_MSG_RESULT(yes)
1703 AC_DEFINE(AIX_GETNAMEINFO_HACK, 1,
1704 [Define if you have a getaddrinfo that fails
1705 for the all-zeros IPv6 address])
1706 ],
1707 [
1708 AC_MSG_RESULT(no)
1709 AC_DEFINE(BROKEN_GETADDRINFO)
1710 ],
1711 [
1712 AC_MSG_RESULT(cross-compiling, assuming no)
1713 ]
1714 )
1715 fi
1717 if test "x$check_for_conflicting_getspnam" = "x1"; then
1718 AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
1719 AC_COMPILE_IFELSE(
1720 [
1721 #include <shadow.h>
1722 int main(void) {exit(0);}
1723 ],
1724 [
1725 AC_MSG_RESULT(no)
1726 ],
1727 [
1728 AC_MSG_RESULT(yes)
1729 AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
1730 [Conflicting defs for getspnam])
1731 ]
1732 )
1733 fi
1735 AC_FUNC_GETPGRP
1737 # Search for OpenSSL
1738 saved_CPPFLAGS="$CPPFLAGS"
1739 saved_LDFLAGS="$LDFLAGS"
1740 AC_ARG_WITH(ssl-dir,
1741 [ --with-ssl-dir=PATH Specify path to OpenSSL installation ],
1742 [
1743 if test "x$withval" != "xno" ; then
1744 case "$withval" in
1745 # Relative paths
1746 ./*|../*) withval="`pwd`/$withval"
1747 esac
1748 if test -d "$withval/lib"; then
1749 if test -n "${need_dash_r}"; then
1750 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1751 else
1752 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1753 fi
1754 else
1755 if test -n "${need_dash_r}"; then
1756 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1757 else
1758 LDFLAGS="-L${withval} ${LDFLAGS}"
1759 fi
1760 fi
1761 if test -d "$withval/include"; then
1762 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1763 else
1764 CPPFLAGS="-I${withval} ${CPPFLAGS}"
1765 fi
1766 fi
1767 ]
1768 )
1769 LIBS="-lcrypto $LIBS"
1770 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL, 1,
1771 [Define if your ssl headers are included
1772 with #include <openssl/header.h>]),
1773 [
1774 dnl Check default openssl install dir
1775 if test -n "${need_dash_r}"; then
1776 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
1777 else
1778 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
1779 fi
1780 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
1781 AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
1782 [
1783 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
1784 ]
1785 )
1786 ]
1787 )
1789 # Determine OpenSSL header version
1790 AC_MSG_CHECKING([OpenSSL header version])
1791 AC_RUN_IFELSE(
1792 [AC_LANG_SOURCE([[
1793 #include <stdio.h>
1794 #include <string.h>
1795 #include <openssl/opensslv.h>
1796 #define DATA "conftest.sslincver"
1797 int main(void) {
1798 FILE *fd;
1799 int rc;
1801 fd = fopen(DATA,"w");
1802 if(fd == NULL)
1803 exit(1);
1805 if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
1806 exit(1);
1808 exit(0);
1809 }
1810 ]])],
1811 [
1812 ssl_header_ver=`cat conftest.sslincver`
1813 AC_MSG_RESULT($ssl_header_ver)
1814 ],
1815 [
1816 AC_MSG_RESULT(not found)
1817 AC_MSG_ERROR(OpenSSL version header not found.)
1818 ],
1819 [
1820 AC_MSG_WARN([cross compiling: not checking])
1821 ]
1822 )
1824 # Determine OpenSSL library version
1825 AC_MSG_CHECKING([OpenSSL library version])
1826 AC_RUN_IFELSE(
1827 [AC_LANG_SOURCE([[
1828 #include <stdio.h>
1829 #include <string.h>
1830 #include <openssl/opensslv.h>
1831 #include <openssl/crypto.h>
1832 #define DATA "conftest.ssllibver"
1833 int main(void) {
1834 FILE *fd;
1835 int rc;
1837 fd = fopen(DATA,"w");
1838 if(fd == NULL)
1839 exit(1);
1841 if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
1842 exit(1);
1844 exit(0);
1845 }
1846 ]])],
1847 [
1848 ssl_library_ver=`cat conftest.ssllibver`
1849 AC_MSG_RESULT($ssl_library_ver)
1850 ],
1851 [
1852 AC_MSG_RESULT(not found)
1853 AC_MSG_ERROR(OpenSSL library not found.)
1854 ],
1855 [
1856 AC_MSG_WARN([cross compiling: not checking])
1857 ]
1858 )
1860 # Sanity check OpenSSL headers
1861 AC_MSG_CHECKING([whether OpenSSL's headers match the library])
1862 AC_RUN_IFELSE(
1863 [AC_LANG_SOURCE([[
1864 #include <string.h>
1865 #include <openssl/opensslv.h>
1866 int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
1867 ]])],
1868 [
1869 AC_MSG_RESULT(yes)
1870 ],
1871 [
1872 AC_MSG_RESULT(no)
1873 AC_MSG_ERROR([Your OpenSSL headers do not match your library.
1874 Check config.log for details.
1875 Also see contrib/findssl.sh for help identifying header/library mismatches.])
1876 ],
1877 [
1878 AC_MSG_WARN([cross compiling: not checking])
1879 ]
1880 )
1882 AC_MSG_CHECKING([if programs using OpenSSL functions will link])
1883 AC_LINK_IFELSE(
1884 [AC_LANG_SOURCE([[
1885 #include <openssl/evp.h>
1886 int main(void) { SSLeay_add_all_algorithms(); }
1887 ]])],
1888 [
1889 AC_MSG_RESULT(yes)
1890 ],
1891 [
1892 AC_MSG_RESULT(no)
1893 saved_LIBS="$LIBS"
1894 LIBS="$LIBS -ldl"
1895 AC_MSG_CHECKING([if programs using OpenSSL need -ldl])
1896 AC_LINK_IFELSE(
1897 [AC_LANG_SOURCE([[
1898 #include <openssl/evp.h>
1899 int main(void) { SSLeay_add_all_algorithms(); }
1900 ]])],
1901 [
1902 AC_MSG_RESULT(yes)
1903 ],
1904 [
1905 AC_MSG_RESULT(no)
1906 LIBS="$saved_LIBS"
1907 ]
1908 )
1909 ]
1910 )
1912 AC_ARG_WITH(ssl-engine,
1913 [ --with-ssl-engine Enable OpenSSL (hardware) ENGINE support ],
1914 [ if test "x$withval" != "xno" ; then
1915 AC_MSG_CHECKING(for OpenSSL ENGINE support)
1916 AC_TRY_COMPILE(
1917 [ #include <openssl/engine.h>],
1918 [
1919 ENGINE_load_builtin_engines();ENGINE_register_all_complete();
1920 ],
1921 [ AC_MSG_RESULT(yes)
1922 AC_DEFINE(USE_OPENSSL_ENGINE, 1,
1923 [Enable OpenSSL engine support])
1924 ],
1925 [ AC_MSG_ERROR(OpenSSL ENGINE support not found)]
1926 )
1927 fi ]
1928 )
1930 # Check for OpenSSL without EVP_aes_{192,256}_cbc
1931 AC_MSG_CHECKING([whether OpenSSL has crippled AES support])
1932 AC_LINK_IFELSE(
1933 [AC_LANG_SOURCE([[
1934 #include <string.h>
1935 #include <openssl/evp.h>
1936 int main(void) { exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);}
1937 ]])],
1938 [
1939 AC_MSG_RESULT(no)
1940 ],
1941 [
1942 AC_MSG_RESULT(yes)
1943 AC_DEFINE(OPENSSL_LOBOTOMISED_AES, 1,
1944 [libcrypto is missing AES 192 and 256 bit functions])
1945 ]
1946 )
1948 # Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
1949 # because the system crypt() is more featureful.
1950 if test "x$check_for_libcrypt_before" = "x1"; then
1951 AC_CHECK_LIB(crypt, crypt)
1952 fi
1954 # Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
1955 # version in OpenSSL.
1956 if test "x$check_for_libcrypt_later" = "x1"; then
1957 AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
1958 fi
1960 # Search for SHA256 support in libc and/or OpenSSL
1961 AC_CHECK_FUNCS(SHA256_Update EVP_sha256)
1963 AC_CHECK_LIB(iaf, ia_openinfo)
1965 ### Configure cryptographic random number support
1967 # Check wheter OpenSSL seeds itself
1968 AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
1969 AC_RUN_IFELSE(
1970 [AC_LANG_SOURCE([[
1971 #include <string.h>
1972 #include <openssl/rand.h>
1973 int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
1974 ]])],
1975 [
1976 OPENSSL_SEEDS_ITSELF=yes
1977 AC_MSG_RESULT(yes)
1978 ],
1979 [
1980 AC_MSG_RESULT(no)
1981 # Default to use of the rand helper if OpenSSL doesn't
1982 # seed itself
1983 USE_RAND_HELPER=yes
1984 ],
1985 [
1986 AC_MSG_WARN([cross compiling: assuming yes])
1987 # This is safe, since all recent OpenSSL versions will
1988 # complain at runtime if not seeded correctly.
1989 OPENSSL_SEEDS_ITSELF=yes
1990 ]
1991 )
1993 # Check for PAM libs
1994 PAM_MSG="no"
1995 AC_ARG_WITH(pam,
1996 [ --with-pam Enable PAM support ],
1997 [
1998 if test "x$withval" != "xno" ; then
1999 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
2000 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
2001 AC_MSG_ERROR([PAM headers not found])
2002 fi
2004 saved_LIBS="$LIBS"
2005 AC_CHECK_LIB(dl, dlopen, , )
2006 AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
2007 AC_CHECK_FUNCS(pam_getenvlist)
2008 AC_CHECK_FUNCS(pam_putenv)
2009 LIBS="$saved_LIBS"
2011 PAM_MSG="yes"
2013 LIBPAM="-lpam"
2014 AC_DEFINE(USE_PAM, 1,
2015 [Define if you want to enable PAM support])
2017 if test $ac_cv_lib_dl_dlopen = yes; then
2018 case "$LIBS" in
2019 *-ldl*)
2020 # libdl already in LIBS
2021 ;;
2022 *)
2023 LIBPAM="$LIBPAM -ldl"
2024 ;;
2025 esac
2026 fi
2027 AC_SUBST(LIBPAM)
2028 fi
2029 ]
2030 )
2032 # Check for older PAM
2033 if test "x$PAM_MSG" = "xyes" ; then
2034 # Check PAM strerror arguments (old PAM)
2035 AC_MSG_CHECKING([whether pam_strerror takes only one argument])
2036 AC_TRY_COMPILE(
2037 [
2038 #include <stdlib.h>
2039 #if defined(HAVE_SECURITY_PAM_APPL_H)
2040 #include <security/pam_appl.h>
2041 #elif defined (HAVE_PAM_PAM_APPL_H)
2042 #include <pam/pam_appl.h>
2043 #endif
2044 ],
2045 [(void)pam_strerror((pam_handle_t *)NULL, -1);],
2046 [AC_MSG_RESULT(no)],
2047 [
2048 AC_DEFINE(HAVE_OLD_PAM, 1,
2049 [Define if you have an old version of PAM
2050 which takes only one argument to pam_strerror])
2051 AC_MSG_RESULT(yes)
2052 PAM_MSG="yes (old library)"
2053 ]
2054 )
2055 fi
2057 # Do we want to force the use of the rand helper?
2058 AC_ARG_WITH(rand-helper,
2059 [ --with-rand-helper Use subprocess to gather strong randomness ],
2060 [
2061 if test "x$withval" = "xno" ; then
2062 # Force use of OpenSSL's internal RNG, even if
2063 # the previous test showed it to be unseeded.
2064 if test -z "$OPENSSL_SEEDS_ITSELF" ; then
2065 AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
2066 OPENSSL_SEEDS_ITSELF=yes
2067 USE_RAND_HELPER=""
2068 fi
2069 else
2070 USE_RAND_HELPER=yes
2071 fi
2072 ],
2073 )
2075 # Which randomness source do we use?
2076 if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
2077 # OpenSSL only
2078 AC_DEFINE(OPENSSL_PRNG_ONLY, 1,
2079 [Define if you want OpenSSL's internally seeded PRNG only])
2080 RAND_MSG="OpenSSL internal ONLY"
2081 INSTALL_SSH_RAND_HELPER=""
2082 elif test ! -z "$USE_RAND_HELPER" ; then
2083 # install rand helper
2084 RAND_MSG="ssh-rand-helper"
2085 INSTALL_SSH_RAND_HELPER="yes"
2086 fi
2087 AC_SUBST(INSTALL_SSH_RAND_HELPER)
2089 ### Configuration of ssh-rand-helper
2091 # PRNGD TCP socket
2092 AC_ARG_WITH(prngd-port,
2093 [ --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT],
2094 [
2095 case "$withval" in
2096 no)
2097 withval=""
2098 ;;
2099 [[0-9]]*)
2100 ;;
2101 *)
2102 AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
2103 ;;
2104 esac
2105 if test ! -z "$withval" ; then
2106 PRNGD_PORT="$withval"
2107 AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT,
2108 [Port number of PRNGD/EGD random number socket])
2109 fi
2110 ]
2111 )
2113 # PRNGD Unix domain socket
2114 AC_ARG_WITH(prngd-socket,
2115 [ --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
2116 [
2117 case "$withval" in
2118 yes)
2119 withval="/var/run/egd-pool"
2120 ;;
2121 no)
2122 withval=""
2123 ;;
2124 /*)
2125 ;;
2126 *)
2127 AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
2128 ;;
2129 esac
2131 if test ! -z "$withval" ; then
2132 if test ! -z "$PRNGD_PORT" ; then
2133 AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
2134 fi
2135 if test ! -r "$withval" ; then
2136 AC_MSG_WARN(Entropy socket is not readable)
2137 fi
2138 PRNGD_SOCKET="$withval"
2139 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET",
2140 [Location of PRNGD/EGD random number socket])
2141 fi
2142 ],
2143 [
2144 # Check for existing socket only if we don't have a random device already
2145 if test "$USE_RAND_HELPER" = yes ; then
2146 AC_MSG_CHECKING(for PRNGD/EGD socket)
2147 # Insert other locations here
2148 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
2149 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
2150 PRNGD_SOCKET="$sock"
2151 AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
2152 break;
2153 fi
2154 done
2155 if test ! -z "$PRNGD_SOCKET" ; then
2156 AC_MSG_RESULT($PRNGD_SOCKET)
2157 else
2158 AC_MSG_RESULT(not found)
2159 fi
2160 fi
2161 ]
2162 )
2164 # Change default command timeout for hashing entropy source
2165 entropy_timeout=200
2166 AC_ARG_WITH(entropy-timeout,
2167 [ --with-entropy-timeout Specify entropy gathering command timeout (msec)],
2168 [
2169 if test -n "$withval" && test "x$withval" != "xno" && \
2170 test "x${withval}" != "xyes"; then
2171 entropy_timeout=$withval
2172 fi
2173 ]
2174 )
2175 AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout,
2176 [Builtin PRNG command timeout])
2178 SSH_PRIVSEP_USER=sshd
2179 AC_ARG_WITH(privsep-user,
2180 [ --with-privsep-user=user Specify non-privileged user for privilege separation],
2181 [
2182 if test -n "$withval" && test "x$withval" != "xno" && \
2183 test "x${withval}" != "xyes"; then
2184 SSH_PRIVSEP_USER=$withval
2185 fi
2186 ]
2187 )
2188 AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER",
2189 [non-privileged user for privilege separation])
2190 AC_SUBST(SSH_PRIVSEP_USER)
2192 # We do this little dance with the search path to insure
2193 # that programs that we select for use by installed programs
2194 # (which may be run by the super-user) come from trusted
2195 # locations before they come from the user's private area.
2196 # This should help avoid accidentally configuring some
2197 # random version of a program in someone's personal bin.
2199 OPATH=$PATH
2200 PATH=/bin:/usr/bin
2201 test -h /bin 2> /dev/null && PATH=/usr/bin
2202 test -d /sbin && PATH=$PATH:/sbin
2203 test -d /usr/sbin && PATH=$PATH:/usr/sbin
2204 PATH=$PATH:/etc:$OPATH
2206 # These programs are used by the command hashing source to gather entropy
2207 OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
2208 OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
2209 OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
2210 OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
2211 OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
2212 OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
2213 OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
2214 OSSH_PATH_ENTROPY_PROG(PROG_W, w)
2215 OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
2216 OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
2217 OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
2218 OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
2219 OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
2220 OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
2221 OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
2222 OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
2223 # restore PATH
2224 PATH=$OPATH
2226 # Where does ssh-rand-helper get its randomness from?
2227 INSTALL_SSH_PRNG_CMDS=""
2228 if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
2229 if test ! -z "$PRNGD_PORT" ; then
2230 RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
2231 elif test ! -z "$PRNGD_SOCKET" ; then
2232 RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
2233 else
2234 RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
2235 RAND_HELPER_CMDHASH=yes
2236 INSTALL_SSH_PRNG_CMDS="yes"
2237 fi
2238 fi
2239 AC_SUBST(INSTALL_SSH_PRNG_CMDS)
2242 # Cheap hack to ensure NEWS-OS libraries are arranged right.
2243 if test ! -z "$SONY" ; then
2244 LIBS="$LIBS -liberty";
2245 fi
2247 # Check for long long datatypes
2248 AC_CHECK_TYPES([long long, unsigned long long, long double])
2250 # Check datatype sizes
2251 AC_CHECK_SIZEOF(char, 1)
2252 AC_CHECK_SIZEOF(short int, 2)
2253 AC_CHECK_SIZEOF(int, 4)
2254 AC_CHECK_SIZEOF(long int, 4)
2255 AC_CHECK_SIZEOF(long long int, 8)
2257 # Sanity check long long for some platforms (AIX)
2258 if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
2259 ac_cv_sizeof_long_long_int=0
2260 fi
2262 # compute LLONG_MIN and LLONG_MAX if we don't know them.
2263 if test -z "$have_llong_max"; then
2264 AC_MSG_CHECKING([for max value of long long])
2265 AC_RUN_IFELSE(
2266 [AC_LANG_SOURCE([[
2267 #include <stdio.h>
2268 /* Why is this so damn hard? */
2269 #ifdef __GNUC__
2270 # undef __GNUC__
2271 #endif
2272 #define __USE_ISOC99
2273 #include <limits.h>
2274 #define DATA "conftest.llminmax"
2275 #define my_abs(a) ((a) < 0 ? ((a) * -1) : (a))
2277 /*
2278 * printf in libc on some platforms (eg old Tru64) does not understand %lld so
2279 * we do this the hard way.
2280 */
2281 static int
2282 fprint_ll(FILE *f, long long n)
2283 {
2284 unsigned int i;
2285 int l[sizeof(long long) * 8];
2287 if (n < 0)
2288 if (fprintf(f, "-") < 0)
2289 return -1;
2290 for (i = 0; n != 0; i++) {
2291 l[i] = my_abs(n % 10);
2292 n /= 10;
2293 }
2294 do {
2295 if (fprintf(f, "%d", l[--i]) < 0)
2296 return -1;
2297 } while (i != 0);
2298 if (fprintf(f, " ") < 0)
2299 return -1;
2300 return 0;
2301 }
2303 int main(void) {
2304 FILE *f;
2305 long long i, llmin, llmax = 0;
2307 if((f = fopen(DATA,"w")) == NULL)
2308 exit(1);
2310 #if defined(LLONG_MIN) && defined(LLONG_MAX)
2311 fprintf(stderr, "Using system header for LLONG_MIN and LLONG_MAX\n");
2312 llmin = LLONG_MIN;
2313 llmax = LLONG_MAX;
2314 #else
2315 fprintf(stderr, "Calculating LLONG_MIN and LLONG_MAX\n");
2316 /* This will work on one's complement and two's complement */
2317 for (i = 1; i > llmax; i <<= 1, i++)
2318 llmax = i;
2319 llmin = llmax + 1LL; /* wrap */
2320 #endif
2322 /* Sanity check */
2323 if (llmin + 1 < llmin || llmin - 1 < llmin || llmax + 1 > llmax
2324 || llmax - 1 > llmax || llmin == llmax || llmin == 0
2325 || llmax == 0 || llmax < LONG_MAX || llmin > LONG_MIN) {
2326 fprintf(f, "unknown unknown\n");
2327 exit(2);
2328 }
2330 if (fprint_ll(f, llmin) < 0)
2331 exit(3);
2332 if (fprint_ll(f, llmax) < 0)
2333 exit(4);
2334 if (fclose(f) < 0)
2335 exit(5);
2336 exit(0);
2337 }
2338 ]])],
2339 [
2340 llong_min=`$AWK '{print $1}' conftest.llminmax`
2341 llong_max=`$AWK '{print $2}' conftest.llminmax`
2343 AC_MSG_RESULT($llong_max)
2344 AC_DEFINE_UNQUOTED(LLONG_MAX, [${llong_max}LL],
2345 [max value of long long calculated by configure])
2346 AC_MSG_CHECKING([for min value of long long])
2347 AC_MSG_RESULT($llong_min)
2348 AC_DEFINE_UNQUOTED(LLONG_MIN, [${llong_min}LL],
2349 [min value of long long calculated by configure])
2350 ],
2351 [
2352 AC_MSG_RESULT(not found)
2353 ],
2354 [
2355 AC_MSG_WARN([cross compiling: not checking])
2356 ]
2357 )
2358 fi
2361 # More checks for data types
2362 AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
2363 AC_TRY_COMPILE(
2364 [ #include <sys/types.h> ],
2365 [ u_int a; a = 1;],
2366 [ ac_cv_have_u_int="yes" ],
2367 [ ac_cv_have_u_int="no" ]
2368 )
2369 ])
2370 if test "x$ac_cv_have_u_int" = "xyes" ; then
2371 AC_DEFINE(HAVE_U_INT, 1, [define if you have u_int data type])
2372 have_u_int=1
2373 fi
2375 AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
2376 AC_TRY_COMPILE(
2377 [ #include <sys/types.h> ],
2378 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
2379 [ ac_cv_have_intxx_t="yes" ],
2380 [ ac_cv_have_intxx_t="no" ]
2381 )
2382 ])
2383 if test "x$ac_cv_have_intxx_t" = "xyes" ; then
2384 AC_DEFINE(HAVE_INTXX_T, 1, [define if you have intxx_t data type])
2385 have_intxx_t=1
2386 fi
2388 if (test -z "$have_intxx_t" && \
2389 test "x$ac_cv_header_stdint_h" = "xyes")
2390 then
2391 AC_MSG_CHECKING([for intXX_t types in stdint.h])
2392 AC_TRY_COMPILE(
2393 [ #include <stdint.h> ],
2394 [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
2395 [
2396 AC_DEFINE(HAVE_INTXX_T)
2397 AC_MSG_RESULT(yes)
2398 ],
2399 [ AC_MSG_RESULT(no) ]
2400 )
2401 fi
2403 AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
2404 AC_TRY_COMPILE(
2405 [
2406 #include <sys/types.h>
2407 #ifdef HAVE_STDINT_H
2408 # include <stdint.h>
2409 #endif
2410 #include <sys/socket.h>
2411 #ifdef HAVE_SYS_BITYPES_H
2412 # include <sys/bitypes.h>
2413 #endif
2414 ],
2415 [ int64_t a; a = 1;],
2416 [ ac_cv_have_int64_t="yes" ],
2417 [ ac_cv_have_int64_t="no" ]
2418 )
2419 ])
2420 if test "x$ac_cv_have_int64_t" = "xyes" ; then
2421 AC_DEFINE(HAVE_INT64_T, 1, [define if you have int64_t data type])
2422 fi
2424 AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
2425 AC_TRY_COMPILE(
2426 [ #include <sys/types.h> ],
2427 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
2428 [ ac_cv_have_u_intxx_t="yes" ],
2429 [ ac_cv_have_u_intxx_t="no" ]
2430 )
2431 ])
2432 if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
2433 AC_DEFINE(HAVE_U_INTXX_T, 1, [define if you have u_intxx_t data type])
2434 have_u_intxx_t=1
2435 fi
2437 if test -z "$have_u_intxx_t" ; then
2438 AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
2439 AC_TRY_COMPILE(
2440 [ #include <sys/socket.h> ],
2441 [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
2442 [
2443 AC_DEFINE(HAVE_U_INTXX_T)
2444 AC_MSG_RESULT(yes)
2445 ],
2446 [ AC_MSG_RESULT(no) ]
2447 )
2448 fi
2450 AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
2451 AC_TRY_COMPILE(
2452 [ #include <sys/types.h> ],
2453 [ u_int64_t a; a = 1;],
2454 [ ac_cv_have_u_int64_t="yes" ],
2455 [ ac_cv_have_u_int64_t="no" ]
2456 )
2457 ])
2458 if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
2459 AC_DEFINE(HAVE_U_INT64_T, 1, [define if you have u_int64_t data type])
2460 have_u_int64_t=1
2461 fi
2463 if test -z "$have_u_int64_t" ; then
2464 AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
2465 AC_TRY_COMPILE(
2466 [ #include <sys/bitypes.h> ],
2467 [ u_int64_t a; a = 1],
2468 [
2469 AC_DEFINE(HAVE_U_INT64_T)
2470 AC_MSG_RESULT(yes)
2471 ],
2472 [ AC_MSG_RESULT(no) ]
2473 )
2474 fi
2476 if test -z "$have_u_intxx_t" ; then
2477 AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
2478 AC_TRY_COMPILE(
2479 [
2480 #include <sys/types.h>
2481 ],
2482 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
2483 [ ac_cv_have_uintxx_t="yes" ],
2484 [ ac_cv_have_uintxx_t="no" ]
2485 )
2486 ])
2487 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
2488 AC_DEFINE(HAVE_UINTXX_T, 1,
2489 [define if you have uintxx_t data type])
2490 fi
2491 fi
2493 if test -z "$have_uintxx_t" ; then
2494 AC_MSG_CHECKING([for uintXX_t types in stdint.h])
2495 AC_TRY_COMPILE(
2496 [ #include <stdint.h> ],
2497 [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
2498 [
2499 AC_DEFINE(HAVE_UINTXX_T)
2500 AC_MSG_RESULT(yes)
2501 ],
2502 [ AC_MSG_RESULT(no) ]
2503 )
2504 fi
2506 if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
2507 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
2508 then
2509 AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
2510 AC_TRY_COMPILE(
2511 [
2512 #include <sys/bitypes.h>
2513 ],
2514 [
2515 int8_t a; int16_t b; int32_t c;
2516 u_int8_t e; u_int16_t f; u_int32_t g;
2517 a = b = c = e = f = g = 1;
2518 ],
2519 [
2520 AC_DEFINE(HAVE_U_INTXX_T)
2521 AC_DEFINE(HAVE_INTXX_T)
2522 AC_MSG_RESULT(yes)
2523 ],
2524 [AC_MSG_RESULT(no)]
2525 )
2526 fi
2529 AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
2530 AC_TRY_COMPILE(
2531 [
2532 #include <sys/types.h>
2533 ],
2534 [ u_char foo; foo = 125; ],
2535 [ ac_cv_have_u_char="yes" ],
2536 [ ac_cv_have_u_char="no" ]
2537 )
2538 ])
2539 if test "x$ac_cv_have_u_char" = "xyes" ; then
2540 AC_DEFINE(HAVE_U_CHAR, 1, [define if you have u_char data type])
2541 fi
2543 TYPE_SOCKLEN_T
2545 AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
2547 AC_CHECK_TYPES(in_addr_t,,,
2548 [#include <sys/types.h>
2549 #include <netinet/in.h>])
2551 AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
2552 AC_TRY_COMPILE(
2553 [
2554 #include <sys/types.h>
2555 ],
2556 [ size_t foo; foo = 1235; ],
2557 [ ac_cv_have_size_t="yes" ],
2558 [ ac_cv_have_size_t="no" ]
2559 )
2560 ])
2561 if test "x$ac_cv_have_size_t" = "xyes" ; then
2562 AC_DEFINE(HAVE_SIZE_T, 1, [define if you have size_t data type])
2563 fi
2565 AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
2566 AC_TRY_COMPILE(
2567 [
2568 #include <sys/types.h>
2569 ],
2570 [ ssize_t foo; foo = 1235; ],
2571 [ ac_cv_have_ssize_t="yes" ],
2572 [ ac_cv_have_ssize_t="no" ]
2573 )
2574 ])
2575 if test "x$ac_cv_have_ssize_t" = "xyes" ; then
2576 AC_DEFINE(HAVE_SSIZE_T, 1, [define if you have ssize_t data type])
2577 fi
2579 AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
2580 AC_TRY_COMPILE(
2581 [
2582 #include <time.h>
2583 ],
2584 [ clock_t foo; foo = 1235; ],
2585 [ ac_cv_have_clock_t="yes" ],
2586 [ ac_cv_have_clock_t="no" ]
2587 )
2588 ])
2589 if test "x$ac_cv_have_clock_t" = "xyes" ; then
2590 AC_DEFINE(HAVE_CLOCK_T, 1, [define if you have clock_t data type])
2591 fi
2593 AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
2594 AC_TRY_COMPILE(
2595 [
2596 #include <sys/types.h>
2597 #include <sys/socket.h>
2598 ],
2599 [ sa_family_t foo; foo = 1235; ],
2600 [ ac_cv_have_sa_family_t="yes" ],
2601 [ AC_TRY_COMPILE(
2602 [
2603 #include <sys/types.h>
2604 #include <sys/socket.h>
2605 #include <netinet/in.h>
2606 ],
2607 [ sa_family_t foo; foo = 1235; ],
2608 [ ac_cv_have_sa_family_t="yes" ],
2610 [ ac_cv_have_sa_family_t="no" ]
2611 )]
2612 )
2613 ])
2614 if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
2615 AC_DEFINE(HAVE_SA_FAMILY_T, 1,
2616 [define if you have sa_family_t data type])
2617 fi
2619 AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
2620 AC_TRY_COMPILE(
2621 [
2622 #include <sys/types.h>
2623 ],
2624 [ pid_t foo; foo = 1235; ],
2625 [ ac_cv_have_pid_t="yes" ],
2626 [ ac_cv_have_pid_t="no" ]
2627 )
2628 ])
2629 if test "x$ac_cv_have_pid_t" = "xyes" ; then
2630 AC_DEFINE(HAVE_PID_T, 1, [define if you have pid_t data type])
2631 fi
2633 AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
2634 AC_TRY_COMPILE(
2635 [
2636 #include <sys/types.h>
2637 ],
2638 [ mode_t foo; foo = 1235; ],
2639 [ ac_cv_have_mode_t="yes" ],
2640 [ ac_cv_have_mode_t="no" ]
2641 )
2642 ])
2643 if test "x$ac_cv_have_mode_t" = "xyes" ; then
2644 AC_DEFINE(HAVE_MODE_T, 1, [define if you have mode_t data type])
2645 fi
2648 AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
2649 AC_TRY_COMPILE(
2650 [
2651 #include <sys/types.h>
2652 #include <sys/socket.h>
2653 ],
2654 [ struct sockaddr_storage s; ],
2655 [ ac_cv_have_struct_sockaddr_storage="yes" ],
2656 [ ac_cv_have_struct_sockaddr_storage="no" ]
2657 )
2658 ])
2659 if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
2660 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE, 1,
2661 [define if you have struct sockaddr_storage data type])
2662 fi
2664 AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2665 AC_TRY_COMPILE(
2666 [
2667 #include <sys/types.h>
2668 #include <netinet/in.h>
2669 ],
2670 [ struct sockaddr_in6 s; s.sin6_family = 0; ],
2671 [ ac_cv_have_struct_sockaddr_in6="yes" ],
2672 [ ac_cv_have_struct_sockaddr_in6="no" ]
2673 )
2674 ])
2675 if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
2676 AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6, 1,
2677 [define if you have struct sockaddr_in6 data type])
2678 fi
2680 AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2681 AC_TRY_COMPILE(
2682 [
2683 #include <sys/types.h>
2684 #include <netinet/in.h>
2685 ],
2686 [ struct in6_addr s; s.s6_addr[0] = 0; ],
2687 [ ac_cv_have_struct_in6_addr="yes" ],
2688 [ ac_cv_have_struct_in6_addr="no" ]
2689 )
2690 ])
2691 if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
2692 AC_DEFINE(HAVE_STRUCT_IN6_ADDR, 1,
2693 [define if you have struct in6_addr data type])
2694 fi
2696 AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2697 AC_TRY_COMPILE(
2698 [
2699 #include <sys/types.h>
2700 #include <sys/socket.h>
2701 #include <netdb.h>
2702 ],
2703 [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
2704 [ ac_cv_have_struct_addrinfo="yes" ],
2705 [ ac_cv_have_struct_addrinfo="no" ]
2706 )
2707 ])
2708 if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2709 AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1,
2710 [define if you have struct addrinfo data type])
2711 fi
2713 AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2714 AC_TRY_COMPILE(
2715 [ #include <sys/time.h> ],
2716 [ struct timeval tv; tv.tv_sec = 1;],
2717 [ ac_cv_have_struct_timeval="yes" ],
2718 [ ac_cv_have_struct_timeval="no" ]
2719 )
2720 ])
2721 if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2722 AC_DEFINE(HAVE_STRUCT_TIMEVAL, 1, [define if you have struct timeval])
2723 have_struct_timeval=1
2724 fi
2726 AC_CHECK_TYPES(struct timespec)
2728 # We need int64_t or else certian parts of the compile will fail.
2729 if test "x$ac_cv_have_int64_t" = "xno" && \
2730 test "x$ac_cv_sizeof_long_int" != "x8" && \
2731 test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
2732 echo "OpenSSH requires int64_t support. Contact your vendor or install"
2733 echo "an alternative compiler (I.E., GCC) before continuing."
2734 echo ""
2735 exit 1;
2736 else
2737 dnl test snprintf (broken on SCO w/gcc)
2738 AC_RUN_IFELSE(
2739 [AC_LANG_SOURCE([[
2740 #include <stdio.h>
2741 #include <string.h>
2742 #ifdef HAVE_SNPRINTF
2743 main()
2744 {
2745 char buf[50];
2746 char expected_out[50];
2747 int mazsize = 50 ;
2748 #if (SIZEOF_LONG_INT == 8)
2749 long int num = 0x7fffffffffffffff;
2750 #else
2751 long long num = 0x7fffffffffffffffll;
2752 #endif
2753 strcpy(expected_out, "9223372036854775807");
2754 snprintf(buf, mazsize, "%lld", num);
2755 if(strcmp(buf, expected_out) != 0)
2756 exit(1);
2757 exit(0);
2758 }
2759 #else
2760 main() { exit(0); }
2761 #endif
2762 ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
2763 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
2764 )
2765 fi
2767 dnl Checks for structure members
2768 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
2769 OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
2770 OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
2771 OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
2772 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
2773 OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
2774 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
2775 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
2776 OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
2777 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
2778 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
2779 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
2780 OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
2781 OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
2782 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
2783 OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
2784 OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
2786 AC_CHECK_MEMBERS([struct stat.st_blksize])
2787 AC_CHECK_MEMBER([struct __res_state.retrans], [], [AC_DEFINE(__res_state, state,
2788 [Define if we don't have struct __res_state in resolv.h])],
2789 [
2790 #include <stdio.h>
2791 #if HAVE_SYS_TYPES_H
2792 # include <sys/types.h>
2793 #endif
2794 #include <netinet/in.h>
2795 #include <arpa/nameser.h>
2796 #include <resolv.h>
2797 ])
2799 AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
2800 ac_cv_have_ss_family_in_struct_ss, [
2801 AC_TRY_COMPILE(
2802 [
2803 #include <sys/types.h>
2804 #include <sys/socket.h>
2805 ],
2806 [ struct sockaddr_storage s; s.ss_family = 1; ],
2807 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
2808 [ ac_cv_have_ss_family_in_struct_ss="no" ],
2809 )
2810 ])
2811 if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
2812 AC_DEFINE(HAVE_SS_FAMILY_IN_SS, 1, [Fields in struct sockaddr_storage])
2813 fi
2815 AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
2816 ac_cv_have___ss_family_in_struct_ss, [
2817 AC_TRY_COMPILE(
2818 [
2819 #include <sys/types.h>
2820 #include <sys/socket.h>
2821 ],
2822 [ struct sockaddr_storage s; s.__ss_family = 1; ],
2823 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
2824 [ ac_cv_have___ss_family_in_struct_ss="no" ]
2825 )
2826 ])
2827 if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
2828 AC_DEFINE(HAVE___SS_FAMILY_IN_SS, 1,
2829 [Fields in struct sockaddr_storage])
2830 fi
2832 AC_CACHE_CHECK([for pw_class field in struct passwd],
2833 ac_cv_have_pw_class_in_struct_passwd, [
2834 AC_TRY_COMPILE(
2835 [
2836 #include <pwd.h>
2837 ],
2838 [ struct passwd p; p.pw_class = 0; ],
2839 [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
2840 [ ac_cv_have_pw_class_in_struct_passwd="no" ]
2841 )
2842 ])
2843 if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
2844 AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD, 1,
2845 [Define if your password has a pw_class field])
2846 fi
2848 AC_CACHE_CHECK([for pw_expire field in struct passwd],
2849 ac_cv_have_pw_expire_in_struct_passwd, [
2850 AC_TRY_COMPILE(
2851 [
2852 #include <pwd.h>
2853 ],
2854 [ struct passwd p; p.pw_expire = 0; ],
2855 [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
2856 [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
2857 )
2858 ])
2859 if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
2860 AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD, 1,
2861 [Define if your password has a pw_expire field])
2862 fi
2864 AC_CACHE_CHECK([for pw_change field in struct passwd],
2865 ac_cv_have_pw_change_in_struct_passwd, [
2866 AC_TRY_COMPILE(
2867 [
2868 #include <pwd.h>
2869 ],
2870 [ struct passwd p; p.pw_change = 0; ],
2871 [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
2872 [ ac_cv_have_pw_change_in_struct_passwd="no" ]
2873 )
2874 ])
2875 if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
2876 AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD, 1,
2877 [Define if your password has a pw_change field])
2878 fi
2880 dnl make sure we're using the real structure members and not defines
2881 AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
2882 ac_cv_have_accrights_in_msghdr, [
2883 AC_COMPILE_IFELSE(
2884 [
2885 #include <sys/types.h>
2886 #include <sys/socket.h>
2887 #include <sys/uio.h>
2888 int main() {
2889 #ifdef msg_accrights
2890 #error "msg_accrights is a macro"
2891 exit(1);
2892 #endif
2893 struct msghdr m;
2894 m.msg_accrights = 0;
2895 exit(0);
2896 }
2897 ],
2898 [ ac_cv_have_accrights_in_msghdr="yes" ],
2899 [ ac_cv_have_accrights_in_msghdr="no" ]
2900 )
2901 ])
2902 if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
2903 AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR, 1,
2904 [Define if your system uses access rights style
2905 file descriptor passing])
2906 fi
2908 AC_CACHE_CHECK([for msg_control field in struct msghdr],
2909 ac_cv_have_control_in_msghdr, [
2910 AC_COMPILE_IFELSE(
2911 [
2912 #include <sys/types.h>
2913 #include <sys/socket.h>
2914 #include <sys/uio.h>
2915 int main() {
2916 #ifdef msg_control
2917 #error "msg_control is a macro"
2918 exit(1);
2919 #endif
2920 struct msghdr m;
2921 m.msg_control = 0;
2922 exit(0);
2923 }
2924 ],
2925 [ ac_cv_have_control_in_msghdr="yes" ],
2926 [ ac_cv_have_control_in_msghdr="no" ]
2927 )
2928 ])
2929 if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
2930 AC_DEFINE(HAVE_CONTROL_IN_MSGHDR, 1,
2931 [Define if your system uses ancillary data style
2932 file descriptor passing])
2933 fi
2935 AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
2936 AC_TRY_LINK([],
2937 [ extern char *__progname; printf("%s", __progname); ],
2938 [ ac_cv_libc_defines___progname="yes" ],
2939 [ ac_cv_libc_defines___progname="no" ]
2940 )
2941 ])
2942 if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
2943 AC_DEFINE(HAVE___PROGNAME, 1, [Define if libc defines __progname])
2944 fi
2946 AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
2947 AC_TRY_LINK([
2948 #include <stdio.h>
2949 ],
2950 [ printf("%s", __FUNCTION__); ],
2951 [ ac_cv_cc_implements___FUNCTION__="yes" ],
2952 [ ac_cv_cc_implements___FUNCTION__="no" ]
2953 )
2954 ])
2955 if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
2956 AC_DEFINE(HAVE___FUNCTION__, 1,
2957 [Define if compiler implements __FUNCTION__])
2958 fi
2960 AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
2961 AC_TRY_LINK([
2962 #include <stdio.h>
2963 ],
2964 [ printf("%s", __func__); ],
2965 [ ac_cv_cc_implements___func__="yes" ],
2966 [ ac_cv_cc_implements___func__="no" ]
2967 )
2968 ])
2969 if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
2970 AC_DEFINE(HAVE___func__, 1, [Define if compiler implements __func__])
2971 fi
2973 AC_CACHE_CHECK([whether va_copy exists], ac_cv_have_va_copy, [
2974 AC_TRY_LINK(
2975 [#include <stdarg.h>
2976 va_list x,y;],
2977 [va_copy(x,y);],
2978 [ ac_cv_have_va_copy="yes" ],
2979 [ ac_cv_have_va_copy="no" ]
2980 )
2981 ])
2982 if test "x$ac_cv_have_va_copy" = "xyes" ; then
2983 AC_DEFINE(HAVE_VA_COPY, 1, [Define if va_copy exists])
2984 fi
2986 AC_CACHE_CHECK([whether __va_copy exists], ac_cv_have___va_copy, [
2987 AC_TRY_LINK(
2988 [#include <stdarg.h>
2989 va_list x,y;],
2990 [__va_copy(x,y);],
2991 [ ac_cv_have___va_copy="yes" ],
2992 [ ac_cv_have___va_copy="no" ]
2993 )
2994 ])
2995 if test "x$ac_cv_have___va_copy" = "xyes" ; then
2996 AC_DEFINE(HAVE___VA_COPY, 1, [Define if __va_copy exists])
2997 fi
2999 AC_CACHE_CHECK([whether getopt has optreset support],
3000 ac_cv_have_getopt_optreset, [
3001 AC_TRY_LINK(
3002 [
3003 #include <getopt.h>
3004 ],
3005 [ extern int optreset; optreset = 0; ],
3006 [ ac_cv_have_getopt_optreset="yes" ],
3007 [ ac_cv_have_getopt_optreset="no" ]
3008 )
3009 ])
3010 if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
3011 AC_DEFINE(HAVE_GETOPT_OPTRESET, 1,
3012 [Define if your getopt(3) defines and uses optreset])
3013 fi
3015 AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
3016 AC_TRY_LINK([],
3017 [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
3018 [ ac_cv_libc_defines_sys_errlist="yes" ],
3019 [ ac_cv_libc_defines_sys_errlist="no" ]
3020 )
3021 ])
3022 if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
3023 AC_DEFINE(HAVE_SYS_ERRLIST, 1,
3024 [Define if your system defines sys_errlist[]])
3025 fi
3028 AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
3029 AC_TRY_LINK([],
3030 [ extern int sys_nerr; printf("%i", sys_nerr);],
3031 [ ac_cv_libc_defines_sys_nerr="yes" ],
3032 [ ac_cv_libc_defines_sys_nerr="no" ]
3033 )
3034 ])
3035 if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
3036 AC_DEFINE(HAVE_SYS_NERR, 1, [Define if your system defines sys_nerr])
3037 fi
3039 SCARD_MSG="no"
3040 # Check whether user wants sectok support
3041 AC_ARG_WITH(sectok,
3042 [ --with-sectok Enable smartcard support using libsectok],
3043 [
3044 if test "x$withval" != "xno" ; then
3045 if test "x$withval" != "xyes" ; then
3046 CPPFLAGS="$CPPFLAGS -I${withval}"
3047 LDFLAGS="$LDFLAGS -L${withval}"
3048 if test ! -z "$need_dash_r" ; then
3049 LDFLAGS="$LDFLAGS -R${withval}"
3050 fi
3051 if test ! -z "$blibpath" ; then
3052 blibpath="$blibpath:${withval}"
3053 fi
3054 fi
3055 AC_CHECK_HEADERS(sectok.h)
3056 if test "$ac_cv_header_sectok_h" != yes; then
3057 AC_MSG_ERROR(Can't find sectok.h)
3058 fi
3059 AC_CHECK_LIB(sectok, sectok_open)
3060 if test "$ac_cv_lib_sectok_sectok_open" != yes; then
3061 AC_MSG_ERROR(Can't find libsectok)
3062 fi
3063 AC_DEFINE(SMARTCARD, 1,
3064 [Define if you want smartcard support])
3065 AC_DEFINE(USE_SECTOK, 1,
3066 [Define if you want smartcard support
3067 using sectok])
3068 SCARD_MSG="yes, using sectok"
3069 fi
3070 ]
3071 )
3073 # Check whether user wants OpenSC support
3074 OPENSC_CONFIG="no"
3075 AC_ARG_WITH(opensc,
3076 [ --with-opensc[[=PFX]] Enable smartcard support using OpenSC (optionally in PATH)],
3077 [
3078 if test "x$withval" != "xno" ; then
3079 if test "x$withval" != "xyes" ; then
3080 OPENSC_CONFIG=$withval/bin/opensc-config
3081 else
3082 AC_PATH_PROG(OPENSC_CONFIG, opensc-config, no)
3083 fi
3084 if test "$OPENSC_CONFIG" != "no"; then
3085 LIBOPENSC_CFLAGS=`$OPENSC_CONFIG --cflags`
3086 LIBOPENSC_LIBS=`$OPENSC_CONFIG --libs`
3087 CPPFLAGS="$CPPFLAGS $LIBOPENSC_CFLAGS"
3088 LIBS="$LIBS $LIBOPENSC_LIBS"
3089 AC_DEFINE(SMARTCARD)
3090 AC_DEFINE(USE_OPENSC, 1,
3091 [Define if you want smartcard support
3092 using OpenSC])
3093 SCARD_MSG="yes, using OpenSC"
3094 fi
3095 fi
3096 ]
3097 )
3099 # Check libraries needed by DNS fingerprint support
3100 AC_SEARCH_LIBS(getrrsetbyname, resolv,
3101 [AC_DEFINE(HAVE_GETRRSETBYNAME, 1,
3102 [Define if getrrsetbyname() exists])],
3103 [
3104 # Needed by our getrrsetbyname()
3105 AC_SEARCH_LIBS(res_query, resolv)
3106 AC_SEARCH_LIBS(dn_expand, resolv)
3107 AC_MSG_CHECKING(if res_query will link)
3108 AC_TRY_LINK_FUNC(res_query, AC_MSG_RESULT(yes),
3109 [AC_MSG_RESULT(no)
3110 saved_LIBS="$LIBS"
3111 LIBS="$LIBS -lresolv"
3112 AC_MSG_CHECKING(for res_query in -lresolv)
3113 AC_LINK_IFELSE([
3114 #include <resolv.h>
3115 int main()
3116 {
3117 res_query (0, 0, 0, 0, 0);
3118 return 0;
3119 }
3120 ],
3121 [LIBS="$LIBS -lresolv"
3122 AC_MSG_RESULT(yes)],
3123 [LIBS="$saved_LIBS"
3124 AC_MSG_RESULT(no)])
3125 ])
3126 AC_CHECK_FUNCS(_getshort _getlong)
3127 AC_CHECK_DECLS([_getshort, _getlong], , ,
3128 [#include <sys/types.h>
3129 #include <arpa/nameser.h>])
3130 AC_CHECK_MEMBER(HEADER.ad,
3131 [AC_DEFINE(HAVE_HEADER_AD, 1,
3132 [Define if HEADER.ad exists in arpa/nameser.h])],,
3133 [#include <arpa/nameser.h>])
3134 ])
3136 # Check whether user wants SELinux support
3137 SELINUX_MSG="no"
3138 LIBSELINUX=""
3139 AC_ARG_WITH(selinux,
3140 [ --with-selinux Enable SELinux support],
3141 [ if test "x$withval" != "xno" ; then
3142 AC_DEFINE(WITH_SELINUX,1,[Define if you want SELinux support.])
3143 SELINUX_MSG="yes"
3144 AC_CHECK_HEADER([selinux/selinux.h], ,
3145 AC_MSG_ERROR(SELinux support requires selinux.h header))
3146 AC_CHECK_LIB(selinux, setexeccon, [ LIBSELINUX="-lselinux" ],
3147 AC_MSG_ERROR(SELinux support requires libselinux library))
3148 save_LIBS="$LIBS"
3149 LIBS="$LIBS $LIBSELINUX"
3150 AC_CHECK_FUNCS(getseuserbyname get_default_context_with_level)
3151 LIBS="$save_LIBS"
3152 fi ]
3153 )
3154 AC_SUBST(LIBSELINUX)
3156 # Check whether user wants Kerberos 5 support
3157 KRB5_MSG="no"
3158 AC_ARG_WITH(kerberos5,
3159 [ --with-kerberos5=PATH Enable Kerberos 5 support],
3160 [ if test "x$withval" != "xno" ; then
3161 if test "x$withval" = "xyes" ; then
3162 KRB5ROOT="/usr/local"
3163 else
3164 KRB5ROOT=${withval}
3165 fi
3167 AC_DEFINE(KRB5, 1, [Define if you want Kerberos 5 support])
3168 KRB5_MSG="yes"
3170 AC_MSG_CHECKING(for krb5-config)
3171 if test -x $KRB5ROOT/bin/krb5-config ; then
3172 KRB5CONF=$KRB5ROOT/bin/krb5-config
3173 AC_MSG_RESULT($KRB5CONF)
3175 AC_MSG_CHECKING(for gssapi support)
3176 if $KRB5CONF | grep gssapi >/dev/null ; then
3177 AC_MSG_RESULT(yes)
3178 AC_DEFINE(GSSAPI, 1,
3179 [Define this if you want GSSAPI
3180 support in the version 2 protocol])
3181 k5confopts=gssapi
3182 else
3183 AC_MSG_RESULT(no)
3184 k5confopts=""
3185 fi
3186 K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
3187 K5LIBS="`$KRB5CONF --libs $k5confopts`"
3188 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
3189 AC_MSG_CHECKING(whether we are using Heimdal)
3190 AC_TRY_COMPILE([ #include <krb5.h> ],
3191 [ char *tmp = heimdal_version; ],
3192 [ AC_MSG_RESULT(yes)
3193 AC_DEFINE(HEIMDAL, 1,
3194 [Define this if you are using the
3195 Heimdal version of Kerberos V5]) ],
3196 AC_MSG_RESULT(no)
3197 )
3198 else
3199 AC_MSG_RESULT(no)
3200 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
3201 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
3202 AC_MSG_CHECKING(whether we are using Heimdal)
3203 AC_TRY_COMPILE([ #include <krb5.h> ],
3204 [ char *tmp = heimdal_version; ],
3205 [ AC_MSG_RESULT(yes)
3206 AC_DEFINE(HEIMDAL)
3207 K5LIBS="-lkrb5 -ldes"
3208 K5LIBS="$K5LIBS -lcom_err -lasn1"
3209 AC_CHECK_LIB(roken, net_write,
3210 [K5LIBS="$K5LIBS -lroken"])
3211 ],
3212 [ AC_MSG_RESULT(no)
3213 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
3214 ]
3215 )
3216 AC_SEARCH_LIBS(dn_expand, resolv)
3218 AC_CHECK_LIB(gssapi,gss_init_sec_context,
3219 [ AC_DEFINE(GSSAPI)
3220 K5LIBS="-lgssapi $K5LIBS" ],
3221 [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context,
3222 [ AC_DEFINE(GSSAPI)
3223 K5LIBS="-lgssapi_krb5 $K5LIBS" ],
3224 AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
3225 $K5LIBS)
3226 ],
3227 $K5LIBS)
3229 AC_CHECK_HEADER(gssapi.h, ,
3230 [ unset ac_cv_header_gssapi_h
3231 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
3232 AC_CHECK_HEADERS(gssapi.h, ,
3233 AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
3234 )
3235 ]
3236 )
3238 oldCPP="$CPPFLAGS"
3239 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
3240 AC_CHECK_HEADER(gssapi_krb5.h, ,
3241 [ CPPFLAGS="$oldCPP" ])
3243 fi
3244 if test ! -z "$need_dash_r" ; then
3245 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
3246 fi
3247 if test ! -z "$blibpath" ; then
3248 blibpath="$blibpath:${KRB5ROOT}/lib"
3249 fi
3251 AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
3252 AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
3253 AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
3255 LIBS="$LIBS $K5LIBS"
3256 AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS, 1,
3257 [Define this if you want to use libkafs' AFS support]))
3258 fi
3259 ]
3260 )
3262 # Looking for programs, paths and files
3264 PRIVSEP_PATH=/var/empty
3265 AC_ARG_WITH(privsep-path,
3266 [ --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
3267 [
3268 if test -n "$withval" && test "x$withval" != "xno" && \
3269 test "x${withval}" != "xyes"; then
3270 PRIVSEP_PATH=$withval
3271 fi
3272 ]
3273 )
3274 AC_SUBST(PRIVSEP_PATH)
3276 AC_ARG_WITH(xauth,
3277 [ --with-xauth=PATH Specify path to xauth program ],
3278 [
3279 if test -n "$withval" && test "x$withval" != "xno" && \
3280 test "x${withval}" != "xyes"; then
3281 xauth_path=$withval
3282 fi
3283 ],
3284 [
3285 TestPath="$PATH"
3286 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
3287 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
3288 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
3289 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
3290 AC_PATH_PROG(xauth_path, xauth, , $TestPath)
3291 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
3292 xauth_path="/usr/openwin/bin/xauth"
3293 fi
3294 ]
3295 )
3297 STRIP_OPT=-s
3298 AC_ARG_ENABLE(strip,
3299 [ --disable-strip Disable calling strip(1) on install],
3300 [
3301 if test "x$enableval" = "xno" ; then
3302 STRIP_OPT=
3303 fi
3304 ]
3305 )
3306 AC_SUBST(STRIP_OPT)
3308 if test -z "$xauth_path" ; then
3309 XAUTH_PATH="undefined"
3310 AC_SUBST(XAUTH_PATH)
3311 else
3312 AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path",
3313 [Define if xauth is found in your path])
3314 XAUTH_PATH=$xauth_path
3315 AC_SUBST(XAUTH_PATH)
3316 fi
3318 # Check for mail directory (last resort if we cannot get it from headers)
3319 if test ! -z "$MAIL" ; then
3320 maildir=`dirname $MAIL`
3321 AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir",
3322 [Set this to your mail directory if you don't have maillock.h])
3323 fi
3325 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
3326 AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
3327 disable_ptmx_check=yes
3328 fi
3329 if test -z "$no_dev_ptmx" ; then
3330 if test "x$disable_ptmx_check" != "xyes" ; then
3331 AC_CHECK_FILE("/dev/ptmx",
3332 [
3333 AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX, 1,
3334 [Define if you have /dev/ptmx])
3335 have_dev_ptmx=1
3336 ]
3337 )
3338 fi
3339 fi
3341 if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
3342 AC_CHECK_FILE("/dev/ptc",
3343 [
3344 AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC, 1,
3345 [Define if you have /dev/ptc])
3346 have_dev_ptc=1
3347 ]
3348 )
3349 else
3350 AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
3351 fi
3353 # Options from here on. Some of these are preset by platform above
3354 AC_ARG_WITH(mantype,
3355 [ --with-mantype=man|cat|doc Set man page type],
3356 [
3357 case "$withval" in
3358 man|cat|doc)
3359 MANTYPE=$withval
3360 ;;
3361 *)
3362 AC_MSG_ERROR(invalid man type: $withval)
3363 ;;
3364 esac
3365 ]
3366 )
3367 if test -z "$MANTYPE"; then
3368 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
3369 AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
3370 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
3371 MANTYPE=doc
3372 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
3373 MANTYPE=man
3374 else
3375 MANTYPE=cat
3376 fi
3377 fi
3378 AC_SUBST(MANTYPE)
3379 if test "$MANTYPE" = "doc"; then
3380 mansubdir=man;
3381 else
3382 mansubdir=$MANTYPE;
3383 fi
3384 AC_SUBST(mansubdir)
3386 # Check whether to enable MD5 passwords
3387 MD5_MSG="no"
3388 AC_ARG_WITH(md5-passwords,
3389 [ --with-md5-passwords Enable use of MD5 passwords],
3390 [
3391 if test "x$withval" != "xno" ; then
3392 AC_DEFINE(HAVE_MD5_PASSWORDS, 1,
3393 [Define if you want to allow MD5 passwords])
3394 MD5_MSG="yes"
3395 fi
3396 ]
3397 )
3399 # Whether to disable shadow password support
3400 AC_ARG_WITH(shadow,
3401 [ --without-shadow Disable shadow password support],
3402 [
3403 if test "x$withval" = "xno" ; then
3404 AC_DEFINE(DISABLE_SHADOW)
3405 disable_shadow=yes
3406 fi
3407 ]
3408 )
3410 if test -z "$disable_shadow" ; then
3411 AC_MSG_CHECKING([if the systems has expire shadow information])
3412 AC_TRY_COMPILE(
3413 [
3414 #include <sys/types.h>
3415 #include <shadow.h>
3416 struct spwd sp;
3417 ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
3418 [ sp_expire_available=yes ], []
3419 )
3421 if test "x$sp_expire_available" = "xyes" ; then
3422 AC_MSG_RESULT(yes)
3423 AC_DEFINE(HAS_SHADOW_EXPIRE, 1,
3424 [Define if you want to use shadow password expire field])
3425 else
3426 AC_MSG_RESULT(no)
3427 fi
3428 fi
3430 # Use ip address instead of hostname in $DISPLAY
3431 if test ! -z "$IPADDR_IN_DISPLAY" ; then
3432 DISPLAY_HACK_MSG="yes"
3433 AC_DEFINE(IPADDR_IN_DISPLAY, 1,
3434 [Define if you need to use IP address
3435 instead of hostname in $DISPLAY])
3436 else
3437 DISPLAY_HACK_MSG="no"
3438 AC_ARG_WITH(ipaddr-display,
3439 [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY],
3440 [
3441 if test "x$withval" != "xno" ; then
3442 AC_DEFINE(IPADDR_IN_DISPLAY)
3443 DISPLAY_HACK_MSG="yes"
3444 fi
3445 ]
3446 )
3447 fi
3449 # check for /etc/default/login and use it if present.
3450 AC_ARG_ENABLE(etc-default-login,
3451 [ --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
3452 [ if test "x$enableval" = "xno"; then
3453 AC_MSG_NOTICE([/etc/default/login handling disabled])
3454 etc_default_login=no
3455 else
3456 etc_default_login=yes
3457 fi ],
3458 [ if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
3459 then
3460 AC_MSG_WARN([cross compiling: not checking /etc/default/login])
3461 etc_default_login=no
3462 else
3463 etc_default_login=yes
3464 fi ]
3465 )
3467 if test "x$etc_default_login" != "xno"; then
3468 AC_CHECK_FILE("/etc/default/login",
3469 [ external_path_file=/etc/default/login ])
3470 if test "x$external_path_file" = "x/etc/default/login"; then
3471 AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN, 1,
3472 [Define if your system has /etc/default/login])
3473 fi
3474 fi
3476 dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
3477 if test $ac_cv_func_login_getcapbool = "yes" && \
3478 test $ac_cv_header_login_cap_h = "yes" ; then
3479 external_path_file=/etc/login.conf
3480 fi
3482 # Whether to mess with the default path
3483 SERVER_PATH_MSG="(default)"
3484 AC_ARG_WITH(default-path,
3485 [ --with-default-path= Specify default \$PATH environment for server],
3486 [
3487 if test "x$external_path_file" = "x/etc/login.conf" ; then
3488 AC_MSG_WARN([
3489 --with-default-path=PATH has no effect on this system.
3490 Edit /etc/login.conf instead.])
3491 elif test "x$withval" != "xno" ; then
3492 if test ! -z "$external_path_file" ; then
3493 AC_MSG_WARN([
3494 --with-default-path=PATH will only be used if PATH is not defined in
3495 $external_path_file .])
3496 fi
3497 user_path="$withval"
3498 SERVER_PATH_MSG="$withval"
3499 fi
3500 ],
3501 [ if test "x$external_path_file" = "x/etc/login.conf" ; then
3502 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
3503 else
3504 if test ! -z "$external_path_file" ; then
3505 AC_MSG_WARN([
3506 If PATH is defined in $external_path_file, ensure the path to scp is included,
3507 otherwise scp will not work.])
3508 fi
3509 AC_RUN_IFELSE(
3510 [AC_LANG_SOURCE([[
3511 /* find out what STDPATH is */
3512 #include <stdio.h>
3513 #ifdef HAVE_PATHS_H
3514 # include <paths.h>
3515 #endif
3516 #ifndef _PATH_STDPATH
3517 # ifdef _PATH_USERPATH /* Irix */
3518 # define _PATH_STDPATH _PATH_USERPATH
3519 # else
3520 # define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
3521 # endif
3522 #endif
3523 #include <sys/types.h>
3524 #include <sys/stat.h>
3525 #include <fcntl.h>
3526 #define DATA "conftest.stdpath"
3528 main()
3529 {
3530 FILE *fd;
3531 int rc;
3533 fd = fopen(DATA,"w");
3534 if(fd == NULL)
3535 exit(1);
3537 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
3538 exit(1);
3540 exit(0);
3541 }
3542 ]])],
3543 [ user_path=`cat conftest.stdpath` ],
3544 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
3545 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
3546 )
3547 # make sure $bindir is in USER_PATH so scp will work
3548 t_bindir=`eval echo ${bindir}`
3549 case $t_bindir in
3550 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
3551 esac
3552 case $t_bindir in
3553 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
3554 esac
3555 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
3556 if test $? -ne 0 ; then
3557 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
3558 if test $? -ne 0 ; then
3559 user_path=$user_path:$t_bindir
3560 AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
3561 fi
3562 fi
3563 fi ]
3564 )
3565 if test "x$external_path_file" != "x/etc/login.conf" ; then
3566 AC_DEFINE_UNQUOTED(USER_PATH, "$user_path", [Specify default $PATH])
3567 AC_SUBST(user_path)
3568 fi
3570 # Set superuser path separately to user path
3571 AC_ARG_WITH(superuser-path,
3572 [ --with-superuser-path= Specify different path for super-user],
3573 [
3574 if test -n "$withval" && test "x$withval" != "xno" && \
3575 test "x${withval}" != "xyes"; then
3576 AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval",
3577 [Define if you want a different $PATH
3578 for the superuser])
3579 superuser_path=$withval
3580 fi
3581 ]
3582 )
3585 AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
3586 IPV4_IN6_HACK_MSG="no"
3587 AC_ARG_WITH(4in6,
3588 [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses],
3589 [
3590 if test "x$withval" != "xno" ; then
3591 AC_MSG_RESULT(yes)
3592 AC_DEFINE(IPV4_IN_IPV6, 1,
3593 [Detect IPv4 in IPv6 mapped addresses
3594 and treat as IPv4])
3595 IPV4_IN6_HACK_MSG="yes"
3596 else
3597 AC_MSG_RESULT(no)
3598 fi
3599 ],[
3600 if test "x$inet6_default_4in6" = "xyes"; then
3601 AC_MSG_RESULT([yes (default)])
3602 AC_DEFINE(IPV4_IN_IPV6)
3603 IPV4_IN6_HACK_MSG="yes"
3604 else
3605 AC_MSG_RESULT([no (default)])
3606 fi
3607 ]
3608 )
3610 # Whether to enable BSD auth support
3611 BSD_AUTH_MSG=no
3612 AC_ARG_WITH(bsd-auth,
3613 [ --with-bsd-auth Enable BSD auth support],
3614 [
3615 if test "x$withval" != "xno" ; then
3616 AC_DEFINE(BSD_AUTH, 1,
3617 [Define if you have BSD auth support])
3618 BSD_AUTH_MSG=yes
3619 fi
3620 ]
3621 )
3623 # Where to place sshd.pid
3624 piddir=/var/run
3625 # make sure the directory exists
3626 if test ! -d $piddir ; then
3627 piddir=`eval echo ${sysconfdir}`
3628 case $piddir in
3629 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
3630 esac
3631 fi
3633 AC_ARG_WITH(pid-dir,
3634 [ --with-pid-dir=PATH Specify location of ssh.pid file],
3635 [
3636 if test -n "$withval" && test "x$withval" != "xno" && \
3637 test "x${withval}" != "xyes"; then
3638 piddir=$withval
3639 if test ! -d $piddir ; then
3640 AC_MSG_WARN([** no $piddir directory on this system **])
3641 fi
3642 fi
3643 ]
3644 )
3646 AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir", [Specify location of ssh.pid])
3647 AC_SUBST(piddir)
3649 dnl allow user to disable some login recording features
3650 AC_ARG_ENABLE(lastlog,
3651 [ --disable-lastlog disable use of lastlog even if detected [no]],
3652 [
3653 if test "x$enableval" = "xno" ; then
3654 AC_DEFINE(DISABLE_LASTLOG)
3655 fi
3656 ]
3657 )
3658 AC_ARG_ENABLE(utmp,
3659 [ --disable-utmp disable use of utmp even if detected [no]],
3660 [
3661 if test "x$enableval" = "xno" ; then
3662 AC_DEFINE(DISABLE_UTMP)
3663 fi
3664 ]
3665 )
3666 AC_ARG_ENABLE(utmpx,
3667 [ --disable-utmpx disable use of utmpx even if detected [no]],
3668 [
3669 if test "x$enableval" = "xno" ; then
3670 AC_DEFINE(DISABLE_UTMPX, 1,
3671 [Define if you don't want to use utmpx])
3672 fi
3673 ]
3674 )
3675 AC_ARG_ENABLE(wtmp,
3676 [ --disable-wtmp disable use of wtmp even if detected [no]],
3677 [
3678 if test "x$enableval" = "xno" ; then
3679 AC_DEFINE(DISABLE_WTMP)
3680 fi
3681 ]
3682 )
3683 AC_ARG_ENABLE(wtmpx,
3684 [ --disable-wtmpx disable use of wtmpx even if detected [no]],
3685 [
3686 if test "x$enableval" = "xno" ; then
3687 AC_DEFINE(DISABLE_WTMPX, 1,
3688 [Define if you don't want to use wtmpx])
3689 fi
3690 ]
3691 )
3692 AC_ARG_ENABLE(libutil,
3693 [ --disable-libutil disable use of libutil (login() etc.) [no]],
3694 [
3695 if test "x$enableval" = "xno" ; then
3696 AC_DEFINE(DISABLE_LOGIN)
3697 fi
3698 ]
3699 )
3700 AC_ARG_ENABLE(pututline,
3701 [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]],
3702 [
3703 if test "x$enableval" = "xno" ; then
3704 AC_DEFINE(DISABLE_PUTUTLINE, 1,
3705 [Define if you don't want to use pututline()
3706 etc. to write [uw]tmp])
3707 fi
3708 ]
3709 )
3710 AC_ARG_ENABLE(pututxline,
3711 [ --disable-pututxline disable use of pututxline() etc. ([uw]tmpx) [no]],
3712 [
3713 if test "x$enableval" = "xno" ; then
3714 AC_DEFINE(DISABLE_PUTUTXLINE, 1,
3715 [Define if you don't want to use pututxline()
3716 etc. to write [uw]tmpx])
3717 fi
3718 ]
3719 )
3720 AC_ARG_WITH(lastlog,
3721 [ --with-lastlog=FILE|DIR specify lastlog location [common locations]],
3722 [
3723 if test "x$withval" = "xno" ; then
3724 AC_DEFINE(DISABLE_LASTLOG)
3725 elif test -n "$withval" && test "x${withval}" != "xyes"; then
3726 conf_lastlog_location=$withval
3727 fi
3728 ]
3729 )
3731 dnl lastlog, [uw]tmpx? detection
3732 dnl NOTE: set the paths in the platform section to avoid the
3733 dnl need for command-line parameters
3734 dnl lastlog and [uw]tmp are subject to a file search if all else fails
3736 dnl lastlog detection
3737 dnl NOTE: the code itself will detect if lastlog is a directory
3738 AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
3739 AC_TRY_COMPILE([
3740 #include <sys/types.h>
3741 #include <utmp.h>
3742 #ifdef HAVE_LASTLOG_H
3743 # include <lastlog.h>
3744 #endif
3745 #ifdef HAVE_PATHS_H
3746 # include <paths.h>
3747 #endif
3748 #ifdef HAVE_LOGIN_H
3749 # include <login.h>
3750 #endif
3751 ],
3752 [ char *lastlog = LASTLOG_FILE; ],
3753 [ AC_MSG_RESULT(yes) ],
3754 [
3755 AC_MSG_RESULT(no)
3756 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
3757 AC_TRY_COMPILE([
3758 #include <sys/types.h>
3759 #include <utmp.h>
3760 #ifdef HAVE_LASTLOG_H
3761 # include <lastlog.h>
3762 #endif
3763 #ifdef HAVE_PATHS_H
3764 # include <paths.h>
3765 #endif
3766 ],
3767 [ char *lastlog = _PATH_LASTLOG; ],
3768 [ AC_MSG_RESULT(yes) ],
3769 [
3770 AC_MSG_RESULT(no)
3771 system_lastlog_path=no
3772 ])
3773 ]
3774 )
3776 if test -z "$conf_lastlog_location"; then
3777 if test x"$system_lastlog_path" = x"no" ; then
3778 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
3779 if (test -d "$f" || test -f "$f") ; then
3780 conf_lastlog_location=$f
3781 fi
3782 done
3783 if test -z "$conf_lastlog_location"; then
3784 AC_MSG_WARN([** Cannot find lastlog **])
3785 dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
3786 fi
3787 fi
3788 fi
3790 if test -n "$conf_lastlog_location"; then
3791 AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location",
3792 [Define if you want to specify the path to your lastlog file])
3793 fi
3795 dnl utmp detection
3796 AC_MSG_CHECKING([if your system defines UTMP_FILE])
3797 AC_TRY_COMPILE([
3798 #include <sys/types.h>
3799 #include <utmp.h>
3800 #ifdef HAVE_PATHS_H
3801 # include <paths.h>
3802 #endif
3803 ],
3804 [ char *utmp = UTMP_FILE; ],
3805 [ AC_MSG_RESULT(yes) ],
3806 [ AC_MSG_RESULT(no)
3807 system_utmp_path=no ]
3808 )
3809 if test -z "$conf_utmp_location"; then
3810 if test x"$system_utmp_path" = x"no" ; then
3811 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
3812 if test -f $f ; then
3813 conf_utmp_location=$f
3814 fi
3815 done
3816 if test -z "$conf_utmp_location"; then
3817 AC_DEFINE(DISABLE_UTMP)
3818 fi
3819 fi
3820 fi
3821 if test -n "$conf_utmp_location"; then
3822 AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location",
3823 [Define if you want to specify the path to your utmp file])
3824 fi
3826 dnl wtmp detection
3827 AC_MSG_CHECKING([if your system defines WTMP_FILE])
3828 AC_TRY_COMPILE([
3829 #include <sys/types.h>
3830 #include <utmp.h>
3831 #ifdef HAVE_PATHS_H
3832 # include <paths.h>
3833 #endif
3834 ],
3835 [ char *wtmp = WTMP_FILE; ],
3836 [ AC_MSG_RESULT(yes) ],
3837 [ AC_MSG_RESULT(no)
3838 system_wtmp_path=no ]
3839 )
3840 if test -z "$conf_wtmp_location"; then
3841 if test x"$system_wtmp_path" = x"no" ; then
3842 for f in /usr/adm/wtmp /var/log/wtmp; do
3843 if test -f $f ; then
3844 conf_wtmp_location=$f
3845 fi
3846 done
3847 if test -z "$conf_wtmp_location"; then
3848 AC_DEFINE(DISABLE_WTMP)
3849 fi
3850 fi
3851 fi
3852 if test -n "$conf_wtmp_location"; then
3853 AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location",
3854 [Define if you want to specify the path to your wtmp file])
3855 fi
3858 dnl utmpx detection - I don't know any system so perverse as to require
3859 dnl utmpx, but not define UTMPX_FILE (ditto wtmpx.) No doubt it's out
3860 dnl there, though.
3861 AC_MSG_CHECKING([if your system defines UTMPX_FILE])
3862 AC_TRY_COMPILE([
3863 #include <sys/types.h>
3864 #include <utmp.h>
3865 #ifdef HAVE_UTMPX_H
3866 #include <utmpx.h>
3867 #endif
3868 #ifdef HAVE_PATHS_H
3869 # include <paths.h>
3870 #endif
3871 ],
3872 [ char *utmpx = UTMPX_FILE; ],
3873 [ AC_MSG_RESULT(yes) ],
3874 [ AC_MSG_RESULT(no)
3875 system_utmpx_path=no ]
3876 )
3877 if test -z "$conf_utmpx_location"; then
3878 if test x"$system_utmpx_path" = x"no" ; then
3879 AC_DEFINE(DISABLE_UTMPX)
3880 fi
3881 else
3882 AC_DEFINE_UNQUOTED(CONF_UTMPX_FILE, "$conf_utmpx_location",
3883 [Define if you want to specify the path to your utmpx file])
3884 fi
3886 dnl wtmpx detection
3887 AC_MSG_CHECKING([if your system defines WTMPX_FILE])
3888 AC_TRY_COMPILE([
3889 #include <sys/types.h>
3890 #include <utmp.h>
3891 #ifdef HAVE_UTMPX_H
3892 #include <utmpx.h>
3893 #endif
3894 #ifdef HAVE_PATHS_H
3895 # include <paths.h>
3896 #endif
3897 ],
3898 [ char *wtmpx = WTMPX_FILE; ],
3899 [ AC_MSG_RESULT(yes) ],
3900 [ AC_MSG_RESULT(no)
3901 system_wtmpx_path=no ]
3902 )
3903 if test -z "$conf_wtmpx_location"; then
3904 if test x"$system_wtmpx_path" = x"no" ; then
3905 AC_DEFINE(DISABLE_WTMPX)
3906 fi
3907 else
3908 AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location",
3909 [Define if you want to specify the path to your wtmpx file])
3910 fi
3913 if test ! -z "$blibpath" ; then
3914 LDFLAGS="$LDFLAGS $blibflags$blibpath"
3915 AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
3916 fi
3918 dnl Adding -Werror to CFLAGS early prevents configure tests from running.
3919 dnl Add now.
3920 CFLAGS="$CFLAGS $werror_flags"
3922 AC_EXEEXT
3923 AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openssh.xml \
3924 openbsd-compat/Makefile openbsd-compat/regress/Makefile \
3925 scard/Makefile ssh_prng_cmds survey.sh])
3926 AC_OUTPUT
3928 # Print summary of options
3930 # Someone please show me a better way :)
3931 A=`eval echo ${prefix}` ; A=`eval echo ${A}`
3932 B=`eval echo ${bindir}` ; B=`eval echo ${B}`
3933 C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
3934 D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
3935 E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
3936 F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
3937 G=`eval echo ${piddir}` ; G=`eval echo ${G}`
3938 H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
3939 I=`eval echo ${user_path}` ; I=`eval echo ${I}`
3940 J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
3942 echo ""
3943 echo "OpenSSH has been configured with the following options:"
3944 echo " User binaries: $B"
3945 echo " System binaries: $C"
3946 echo " Configuration files: $D"
3947 echo " Askpass program: $E"
3948 echo " Manual pages: $F"
3949 echo " PID file: $G"
3950 echo " Privilege separation chroot path: $H"
3951 if test "x$external_path_file" = "x/etc/login.conf" ; then
3952 echo " At runtime, sshd will use the path defined in $external_path_file"
3953 echo " Make sure the path to scp is present, otherwise scp will not work"
3954 else
3955 echo " sshd default user PATH: $I"
3956 if test ! -z "$external_path_file"; then
3957 echo " (If PATH is set in $external_path_file it will be used instead. If"
3958 echo " used, ensure the path to scp is present, otherwise scp will not work.)"
3959 fi
3960 fi
3961 if test ! -z "$superuser_path" ; then
3962 echo " sshd superuser user PATH: $J"
3963 fi
3964 echo " Manpage format: $MANTYPE"
3965 echo " PAM support: $PAM_MSG"
3966 echo " OSF SIA support: $SIA_MSG"
3967 echo " KerberosV support: $KRB5_MSG"
3968 echo " SELinux support: $SELINUX_MSG"
3969 echo " Smartcard support: $SCARD_MSG"
3970 echo " S/KEY support: $SKEY_MSG"
3971 echo " TCP Wrappers support: $TCPW_MSG"
3972 echo " MD5 password support: $MD5_MSG"
3973 echo " libedit support: $LIBEDIT_MSG"
3974 echo " Solaris process contract support: $SPC_MSG"
3975 echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
3976 echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
3977 echo " BSD Auth support: $BSD_AUTH_MSG"
3978 echo " Random number source: $RAND_MSG"
3979 if test ! -z "$USE_RAND_HELPER" ; then
3980 echo " ssh-rand-helper collects from: $RAND_HELPER_MSG"
3981 fi
3983 echo ""
3985 echo " Host: ${host}"
3986 echo " Compiler: ${CC}"
3987 echo " Compiler flags: ${CFLAGS}"
3988 echo "Preprocessor flags: ${CPPFLAGS}"
3989 echo " Linker flags: ${LDFLAGS}"
3990 echo " Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}"
3992 echo ""
3994 if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
3995 echo "SVR4 style packages are supported with \"make package\""
3996 echo ""
3997 fi
3999 if test "x$PAM_MSG" = "xyes" ; then
4000 echo "PAM is enabled. You may need to install a PAM control file "
4001 echo "for sshd, otherwise password authentication may fail. "
4002 echo "Example PAM control files can be found in the contrib/ "
4003 echo "subdirectory"
4004 echo ""
4005 fi
4007 if test ! -z "$RAND_HELPER_CMDHASH" ; then
4008 echo "WARNING: you are using the builtin random number collection "
4009 echo "service. Please read WARNING.RNG and request that your OS "
4010 echo "vendor includes kernel-based random number collection in "
4011 echo "future versions of your OS."
4012 echo ""
4013 fi
4015 if test ! -z "$NO_PEERCHECK" ; then
4016 echo "WARNING: the operating system that you are using does not "
4017 echo "appear to support either the getpeereid() API nor the "
4018 echo "SO_PEERCRED getsockopt() option. These facilities are used to "
4019 echo "enforce security checks to prevent unauthorised connections to "
4020 echo "ssh-agent. Their absence increases the risk that a malicious "
4021 echo "user can connect to your agent. "
4022 echo ""
4023 fi
4025 if test "$AUDIT_MODULE" = "bsm" ; then
4026 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
4027 echo "See the Solaris section in README.platform for details."
4028 fi