configure.ac

   1 # $Id: configure.ac,v 1.480 2011/08/18 04:48:24 tim Exp $
   2 #
   3 # Copyright (c) 1999-2004 Damien Miller
   4 #
   5 # Permission to use, copy, modify, and distribute this software for any
   6 # purpose with or without fee is hereby granted, provided that the above
   7 # copyright notice and this permission notice appear in all copies.
   8 #
   9 # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  10 # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  11 # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  12 # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  13 # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  14 # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  15 # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  16
  17 AC_INIT([OpenSSH], [Portable], [openssh-unix-dev@mindrot.org])
  18 AC_REVISION($Revision: 1.480 $)
  19 AC_CONFIG_SRCDIR([ssh.c])
  20 AC_LANG([C])
  21
  22 AC_CONFIG_HEADER([config.h])
  23 AC_PROG_CC
  24 AC_CANONICAL_HOST
  25 AC_C_BIGENDIAN
  26
  27 # Checks for programs.
  28 AC_PROG_AWK
  29 AC_PROG_CPP
  30 AC_PROG_RANLIB
  31 AC_PROG_INSTALL
  32 AC_PROG_EGREP
  33 AC_PATH_PROG([AR], [ar])
  34 AC_PATH_PROG([CAT], [cat])
  35 AC_PATH_PROG([KILL], [kill])
  36 AC_PATH_PROGS([PERL], [perl5 perl])
  37 AC_PATH_PROG([SED], [sed])
  38 AC_SUBST([PERL])
  39 AC_PATH_PROG([ENT], [ent])
  40 AC_SUBST([ENT])
  41 AC_PATH_PROG([TEST_MINUS_S_SH], [bash])
  42 AC_PATH_PROG([TEST_MINUS_S_SH], [ksh])
  43 AC_PATH_PROG([TEST_MINUS_S_SH], [sh])
  44 AC_PATH_PROG([SH], [sh])
  45 AC_PATH_PROG([GROFF], [groff])
  46 AC_PATH_PROG([NROFF], [nroff])
  47 AC_PATH_PROG([MANDOC], [mandoc])
  48 AC_SUBST([TEST_SHELL], [sh])
  49
  50 dnl select manpage formatter
  51 if test "x$MANDOC" != "x" ; then
  52         MANFMT="$MANDOC"
  53 elif test "x$NROFF" != "x" ; then
  54         MANFMT="$NROFF -mandoc"
  55 elif test "x$GROFF" != "x" ; then
  56         MANFMT="$GROFF -mandoc -Tascii"
  57 else
  58         AC_MSG_WARN([no manpage formatted found])
  59         MANFMT="false"
  60 fi
  61 AC_SUBST([MANFMT])
  62
  63 dnl for buildpkg.sh
  64 AC_PATH_PROG([PATH_GROUPADD_PROG], [groupadd], [groupadd],
  65         [/usr/sbin${PATH_SEPARATOR}/etc])
  66 AC_PATH_PROG([PATH_USERADD_PROG], [useradd], [useradd],
  67         [/usr/sbin${PATH_SEPARATOR}/etc])
  68 AC_CHECK_PROG([MAKE_PACKAGE_SUPPORTED], [pkgmk], [yes], [no])
  69 if test -x /sbin/sh; then
  70         AC_SUBST([STARTUP_SCRIPT_SHELL], [/sbin/sh])
  71 else
  72         AC_SUBST([STARTUP_SCRIPT_SHELL], [/bin/sh])
  73 fi
  74
  75 # System features
  76 AC_SYS_LARGEFILE
  77
  78 if test -z "$AR" ; then
  79         AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
  80 fi
  81
  82 # Use LOGIN_PROGRAM from environment if possible
  83 if test ! -z "$LOGIN_PROGRAM" ; then
  84         AC_DEFINE_UNQUOTED([LOGIN_PROGRAM_FALLBACK], ["$LOGIN_PROGRAM"],
  85                 [If your header files don't define LOGIN_PROGRAM,
  86                 then use this (detected) from environment and PATH])
  87 else
  88         # Search for login
  89         AC_PATH_PROG([LOGIN_PROGRAM_FALLBACK], [login])
  90         if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
  91                 AC_DEFINE_UNQUOTED([LOGIN_PROGRAM_FALLBACK], ["$LOGIN_PROGRAM_FALLBACK"])
  92         fi
  93 fi
  94
  95 AC_PATH_PROG([PATH_PASSWD_PROG], [passwd])
  96 if test ! -z "$PATH_PASSWD_PROG" ; then
  97         AC_DEFINE_UNQUOTED([_PATH_PASSWD_PROG], ["$PATH_PASSWD_PROG"],
  98                 [Full path of your "passwd" program])
  99 fi
 100
 101 if test -z "$LD" ; then
 102         LD=$CC
 103 fi
 104 AC_SUBST([LD])
 105
 106 AC_C_INLINE
 107
 108 AC_CHECK_DECL([LLONG_MAX], [have_llong_max=1], , [#include <limits.h>])
 109 AC_CHECK_DECL([SYSTR_POLICY_KILL], [have_systr_policy_kill=1], , [
 110         #include <sys/types.h>
 111         #include <sys/param.h>
 112         #include <dev/systrace.h>
 113 ])
 114 AC_CHECK_DECL([RLIMIT_NPROC],
 115     [AC_DEFINE([HAVE_RLIMIT_NPROC], [], [sys/resource.h has RLIMIT_NPROC])], , [
 116         #include <sys/types.h>
 117         #include <sys/resource.h>
 118 ])
 119
 120 use_stack_protector=1
 121 AC_ARG_WITH([stackprotect],
 122     [  --without-stackprotect  Don't use compiler's stack protection], [
 123     if test "x$withval" = "xno"; then
 124         use_stack_protector=0
 125     fi ])
 126
 127
 128 if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
 129         OSSH_CHECK_CFLAG_COMPILE([-Wall])
 130         OSSH_CHECK_CFLAG_COMPILE([-Wpointer-arith])
 131         OSSH_CHECK_CFLAG_COMPILE([-Wuninitialized])
 132         OSSH_CHECK_CFLAG_COMPILE([-Wsign-compare])
 133         OSSH_CHECK_CFLAG_COMPILE([-Wformat-security])
 134         OSSH_CHECK_CFLAG_COMPILE([-Wpointer-sign], [-Wno-pointer-sign])
 135         OSSH_CHECK_CFLAG_COMPILE([-Wunused-result], [-Wno-unused-result])
 136         OSSH_CHECK_CFLAG_COMPILE([-fno-strict-aliasing])
 137         AC_MSG_CHECKING([gcc version])
 138         GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'`
 139         case $GCC_VER in
 140                 1.*) no_attrib_nonnull=1 ;;
 141                 2.8* | 2.9*)
 142                      no_attrib_nonnull=1
 143                      ;;
 144                 2.*) no_attrib_nonnull=1 ;;
 145                 *) ;;
 146         esac
 147         AC_MSG_RESULT([$GCC_VER])
 148
 149         AC_MSG_CHECKING([if $CC accepts -fno-builtin-memset])
 150         saved_CFLAGS="$CFLAGS"
 151         CFLAGS="$CFLAGS -fno-builtin-memset"
 152         AC_LINK_IFELSE([AC_LANG_PROGRAM([[ #include <string.h> ]],
 153                         [[ char b[10]; memset(b, 0, sizeof(b)); ]])],
 154                 [ AC_MSG_RESULT([yes]) ],
 155                 [ AC_MSG_RESULT([no])
 156                   CFLAGS="$saved_CFLAGS" ]
 157         )
 158
 159         # -fstack-protector-all doesn't always work for some GCC versions
 160         # and/or platforms, so we test if we can.  If it's not supported
 161         # on a given platform gcc will emit a warning so we use -Werror.
 162         if test "x$use_stack_protector" = "x1"; then
 163             for t in -fstack-protector-all -fstack-protector; do
 164                 AC_MSG_CHECKING([if $CC supports $t])
 165                 saved_CFLAGS="$CFLAGS"
 166                 saved_LDFLAGS="$LDFLAGS"
 167                 CFLAGS="$CFLAGS $t -Werror"
 168                 LDFLAGS="$LDFLAGS $t -Werror"
 169                 AC_LINK_IFELSE(
 170                         [AC_LANG_PROGRAM([[ #include <stdio.h> ]],
 171                         [[
 172         char x[256];
 173         snprintf(x, sizeof(x), "XXX");
 174                          ]])],
 175                     [ AC_MSG_RESULT([yes])
 176                       CFLAGS="$saved_CFLAGS $t"
 177                       LDFLAGS="$saved_LDFLAGS $t"
 178                       AC_MSG_CHECKING([if $t works])
 179                       AC_RUN_IFELSE(
 180                         [AC_LANG_PROGRAM([[ #include <stdio.h> ]],
 181                         [[
 182         char x[256];
 183         snprintf(x, sizeof(x), "XXX");
 184                         ]])],
 185                         [ AC_MSG_RESULT([yes])
 186                           break ],
 187                         [ AC_MSG_RESULT([no]) ],
 188                         [ AC_MSG_WARN([cross compiling: cannot test])
 189                           break ]
 190                       )
 191                     ],
 192                     [ AC_MSG_RESULT([no]) ]
 193                 )
 194                 CFLAGS="$saved_CFLAGS"
 195                 LDFLAGS="$saved_LDFLAGS"
 196             done
 197         fi
 198
 199         if test -z "$have_llong_max"; then
 200                 # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
 201                 unset ac_cv_have_decl_LLONG_MAX
 202                 saved_CFLAGS="$CFLAGS"
 203                 CFLAGS="$CFLAGS -std=gnu99"
 204                 AC_CHECK_DECL([LLONG_MAX],
 205                     [have_llong_max=1],
 206                     [CFLAGS="$saved_CFLAGS"],
 207                     [#include <limits.h>]
 208                 )
 209         fi
 210 fi
 211
 212 if test "x$no_attrib_nonnull" != "x1" ; then
 213         AC_DEFINE([HAVE_ATTRIBUTE__NONNULL__], [1], [Have attribute nonnull])
 214 fi
 215
 216 AC_ARG_WITH([rpath],
 217         [  --without-rpath         Disable auto-added -R linker paths],
 218         [
 219                 if test "x$withval" = "xno" ; then
 220                         need_dash_r=""
 221                 fi
 222                 if test "x$withval" = "xyes" ; then
 223                         need_dash_r=1
 224                 fi
 225         ]
 226 )
 227
 228 # Allow user to specify flags
 229 AC_ARG_WITH([cflags],
 230         [  --with-cflags           Specify additional flags to pass to compiler],
 231         [
 232                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 233                     test "x${withval}" != "xyes"; then
 234                         CFLAGS="$CFLAGS $withval"
 235                 fi
 236         ]
 237 )
 238 AC_ARG_WITH([cppflags],
 239         [  --with-cppflags         Specify additional flags to pass to preprocessor] ,
 240         [
 241                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 242                     test "x${withval}" != "xyes"; then
 243                         CPPFLAGS="$CPPFLAGS $withval"
 244                 fi
 245         ]
 246 )
 247 AC_ARG_WITH([ldflags],
 248         [  --with-ldflags          Specify additional flags to pass to linker],
 249         [
 250                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 251                     test "x${withval}" != "xyes"; then
 252                         LDFLAGS="$LDFLAGS $withval"
 253                 fi
 254         ]
 255 )
 256 AC_ARG_WITH([libs],
 257         [  --with-libs             Specify additional libraries to link with],
 258         [
 259                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
 260                     test "x${withval}" != "xyes"; then
 261                         LIBS="$LIBS $withval"
 262                 fi
 263         ]
 264 )
 265 AC_ARG_WITH([Werror],
 266         [  --with-Werror           Build main code with -Werror],
 267         [
 268                 if test -n "$withval"  &&  test "x$withval" != "xno"; then
 269                         werror_flags="-Werror"
 270                         if test "x${withval}" != "xyes"; then
 271                                 werror_flags="$withval"
 272                         fi
 273                 fi
 274         ]
 275 )
 276
 277 AC_CHECK_HEADERS([ \
 278         bstring.h \
 279         crypt.h \
 280         crypto/sha2.h \
 281         dirent.h \
 282         endian.h \
 283         features.h \
 284         fcntl.h \
 285         floatingpoint.h \
 286         getopt.h \
 287         glob.h \
 288         ia.h \
 289         iaf.h \
 290         limits.h \
 291         login.h \
 292         maillock.h \
 293         ndir.h \
 294         net/if_tun.h \
 295         netdb.h \
 296         netgroup.h \
 297         pam/pam_appl.h \
 298         paths.h \
 299         poll.h \
 300         pty.h \
 301         readpassphrase.h \
 302         rpc/types.h \
 303         security/pam_appl.h \
 304         sha2.h \
 305         shadow.h \
 306         stddef.h \
 307         stdint.h \
 308         string.h \
 309         strings.h \
 310         sys/audit.h \
 311         sys/bitypes.h \
 312         sys/bsdtty.h \
 313         sys/cdefs.h \
 314         sys/dir.h \
 315         sys/mman.h \
 316         sys/ndir.h \
 317         sys/poll.h \
 318         sys/prctl.h \
 319         sys/pstat.h \
 320         sys/select.h \
 321         sys/stat.h \
 322         sys/stream.h \
 323         sys/stropts.h \
 324         sys/strtio.h \
 325         sys/statvfs.h \
 326         sys/sysmacros.h \
 327         sys/time.h \
 328         sys/timers.h \
 329         sys/un.h \
 330         time.h \
 331         tmpdir.h \
 332         ttyent.h \
 333         ucred.h \
 334         unistd.h \
 335         usersec.h \
 336         util.h \
 337         utime.h \
 338         utmp.h \
 339         utmpx.h \
 340         vis.h \
 341 ])
 342
 343 # lastlog.h requires sys/time.h to be included first on Solaris
 344 AC_CHECK_HEADERS([lastlog.h], [], [], [
 345 #ifdef HAVE_SYS_TIME_H
 346 # include <sys/time.h>
 347 #endif
 348 ])
 349
 350 # sys/ptms.h requires sys/stream.h to be included first on Solaris
 351 AC_CHECK_HEADERS([sys/ptms.h], [], [], [
 352 #ifdef HAVE_SYS_STREAM_H
 353 # include <sys/stream.h>
 354 #endif
 355 ])
 356
 357 # login_cap.h requires sys/types.h on NetBSD
 358 AC_CHECK_HEADERS([login_cap.h], [], [], [
 359 #include <sys/types.h>
 360 ])
 361
 362 # older BSDs need sys/param.h before sys/mount.h
 363 AC_CHECK_HEADERS([sys/mount.h], [], [], [
 364 #include <sys/param.h>
 365 ])
 366
 367 # Messages for features tested for in target-specific section
 368 SIA_MSG="no"
 369 SPC_MSG="no"
 370 SP_MSG="no"
 371
 372 # Check for some target-specific stuff
 373 case "$host" in
 374 *-*-aix*)
 375         # Some versions of VAC won't allow macro redefinitions at
 376         # -qlanglevel=ansi, and autoconf 2.60 sometimes insists on using that
 377         # particularly with older versions of vac or xlc.
 378         # It also throws errors about null macro argments, but these are
 379         # not fatal.
 380         AC_MSG_CHECKING([if compiler allows macro redefinitions])
 381         AC_COMPILE_IFELSE(
 382             [AC_LANG_PROGRAM([[
 383 #define testmacro foo
 384 #define testmacro bar]],
 385             [[ exit(0); ]])],
 386             [ AC_MSG_RESULT([yes]) ],
 387             [ AC_MSG_RESULT([no])
 388               CC="`echo $CC | sed 's/-qlanglvl\=ansi//g'`"
 389               LD="`echo $LD | sed 's/-qlanglvl\=ansi//g'`"
 390               CFLAGS="`echo $CFLAGS | sed 's/-qlanglvl\=ansi//g'`"
 391               CPPFLAGS="`echo $CPPFLAGS | sed 's/-qlanglvl\=ansi//g'`"
 392             ]
 393         )
 394
 395         AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
 396         if (test -z "$blibpath"); then
 397                 blibpath="/usr/lib:/lib"
 398         fi
 399         saved_LDFLAGS="$LDFLAGS"
 400         if test "$GCC" = "yes"; then
 401                 flags="-Wl,-blibpath: -Wl,-rpath, -blibpath:"
 402         else
 403                 flags="-blibpath: -Wl,-blibpath: -Wl,-rpath,"
 404         fi
 405         for tryflags in $flags ;do
 406                 if (test -z "$blibflags"); then
 407                         LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
 408                         AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[]])],
 409                         [blibflags=$tryflags], [])
 410                 fi
 411         done
 412         if (test -z "$blibflags"); then
 413                 AC_MSG_RESULT([not found])
 414                 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
 415         else
 416                 AC_MSG_RESULT([$blibflags])
 417         fi
 418         LDFLAGS="$saved_LDFLAGS"
 419         dnl Check for authenticate.  Might be in libs.a on older AIXes
 420         AC_CHECK_FUNC([authenticate], [AC_DEFINE([WITH_AIXAUTHENTICATE], [1],
 421                 [Define if you want to enable AIX4's authenticate function])],
 422                 [AC_CHECK_LIB([s], [authenticate],
 423                         [ AC_DEFINE([WITH_AIXAUTHENTICATE])
 424                                 LIBS="$LIBS -ls"
 425                         ])
 426                 ])
 427         dnl Check for various auth function declarations in headers.
 428         AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
 429             passwdexpired, setauthdb], , , [#include <usersec.h>])
 430         dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
 431         AC_CHECK_DECLS([loginfailed],
 432             [AC_MSG_CHECKING([if loginfailed takes 4 arguments])
 433             AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <usersec.h> ]],
 434                 [[ (void)loginfailed("user","host","tty",0); ]])],
 435                 [AC_MSG_RESULT([yes])
 436                 AC_DEFINE([AIX_LOGINFAILED_4ARG], [1],
 437                         [Define if your AIX loginfailed() function
 438                         takes 4 arguments (AIX >= 5.2)])], [AC_MSG_RESULT([no])
 439             ])],
 440             [],
 441             [#include <usersec.h>]
 442         )
 443         AC_CHECK_FUNCS([getgrset setauthdb])
 444         AC_CHECK_DECL([F_CLOSEM],
 445             AC_DEFINE([HAVE_FCNTL_CLOSEM], [1], [Use F_CLOSEM fcntl for closefrom]),
 446             [],
 447             [ #include <limits.h>
 448               #include <fcntl.h> ]
 449         )
 450         check_for_aix_broken_getaddrinfo=1
 451         AC_DEFINE([BROKEN_REALPATH], [1], [Define if you have a broken realpath.])
 452         AC_DEFINE([SETEUID_BREAKS_SETUID], [1],
 453             [Define if your platform breaks doing a seteuid before a setuid])
 454         AC_DEFINE([BROKEN_SETREUID], [1], [Define if your setreuid() is broken])
 455         AC_DEFINE([BROKEN_SETREGID], [1], [Define if your setregid() is broken])
 456         dnl AIX handles lastlog as part of its login message
 457         AC_DEFINE([DISABLE_LASTLOG], [1], [Define if you don't want to use lastlog])
 458         AC_DEFINE([LOGIN_NEEDS_UTMPX], [1],
 459                 [Some systems need a utmpx entry for /bin/login to work])
 460         AC_DEFINE([SPT_TYPE], [SPT_REUSEARGV],
 461                 [Define to a Set Process Title type if your system is
 462                 supported by bsd-setproctitle.c])
 463         AC_DEFINE([SSHPAM_CHAUTHTOK_NEEDS_RUID], [1],
 464             [AIX 5.2 and 5.3 (and presumably newer) require this])
 465         AC_DEFINE([PTY_ZEROREAD], [1], [read(1) can return 0 for a non-closed fd])
 466         ;;
 467 *-*-cygwin*)
 468         check_for_libcrypt_later=1
 469         LIBS="$LIBS /usr/lib/textreadmode.o"
 470         AC_DEFINE([HAVE_CYGWIN], [1], [Define if you are on Cygwin])
 471         AC_DEFINE([USE_PIPES], [1], [Use PIPES instead of a socketpair()])
 472         AC_DEFINE([DISABLE_SHADOW], [1],
 473                 [Define if you want to disable shadow passwords])
 474         AC_DEFINE([NO_X11_UNIX_SOCKETS], [1],
 475                 [Define if X11 doesn't support AF_UNIX sockets on that system])
 476         AC_DEFINE([NO_IPPORT_RESERVED_CONCEPT], [1],
 477                 [Define if the concept of ports only accessible to
 478                 superusers isn't known])
 479         AC_DEFINE([DISABLE_FD_PASSING], [1],
 480                 [Define if your platform needs to skip post auth
 481                 file descriptor passing])
 482         AC_DEFINE([SSH_IOBUFSZ], [65535], [Windows is sensitive to read buffer size])
 483         AC_DEFINE([FILESYSTEM_NO_BACKSLASH], [1], [File names may not contain backslash characters])
 484         ;;
 485 *-*-dgux*)
 486         AC_DEFINE([IP_TOS_IS_BROKEN], [1],
 487                 [Define if your system choked on IP TOS setting])
 488         AC_DEFINE([SETEUID_BREAKS_SETUID])
 489         AC_DEFINE([BROKEN_SETREUID])
 490         AC_DEFINE([BROKEN_SETREGID])
 491         ;;
 492 *-*-darwin*)
 493         AC_MSG_CHECKING([if we have working getaddrinfo])
 494         AC_RUN_IFELSE([AC_LANG_SOURCE([[ #include <mach-o/dyld.h>
 495 main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
 496                 exit(0);
 497         else
 498                 exit(1);
 499 }
 500                         ]])],
 501         [AC_MSG_RESULT([working])],
 502         [AC_MSG_RESULT([buggy])
 503         AC_DEFINE([BROKEN_GETADDRINFO], [1],
 504                 [getaddrinfo is broken (if present)])
 505         ],
 506         [AC_MSG_RESULT([assume it is working])])
 507         AC_DEFINE([SETEUID_BREAKS_SETUID])
 508         AC_DEFINE([BROKEN_SETREUID])
 509         AC_DEFINE([BROKEN_SETREGID])
 510         AC_DEFINE([BROKEN_GLOB], [1], [OS X glob does not do what we expect])
 511         AC_DEFINE_UNQUOTED([BIND_8_COMPAT], [1],
 512                 [Define if your resolver libs need this for getrrsetbyname])
 513         AC_DEFINE([SSH_TUN_FREEBSD], [1], [Open tunnel devices the FreeBSD way])
 514         AC_DEFINE([SSH_TUN_COMPAT_AF], [1],
 515             [Use tunnel device compatibility to OpenBSD])
 516         AC_DEFINE([SSH_TUN_PREPEND_AF], [1],
 517             [Prepend the address family to IP tunnel traffic])
 518         m4_pattern_allow([AU_IPv])
 519         AC_CHECK_DECL([AU_IPv4], [],
 520             AC_DEFINE([AU_IPv4], [0], [System only supports IPv4 audit records])
 521             [#include <bsm/audit.h>]
 522         AC_DEFINE([LASTLOG_WRITE_PUTUTXLINE], [1],
 523             [Define if pututxline updates lastlog too])
 524         )
 525         AC_DEFINE([SPT_TYPE], [SPT_REUSEARGV],
 526                 [Define to a Set Process Title type if your system is
 527                 supported by bsd-setproctitle.c])
 528         AC_CHECK_FUNCS([sandbox_init])
 529         AC_CHECK_HEADERS([sandbox.h])
 530         ;;
 531 *-*-dragonfly*)
 532         SSHDLIBS="$SSHDLIBS -lcrypt"
 533         ;;
 534 *-*-haiku*)
 535     LIBS="$LIBS -lbsd "
 536     AC_CHECK_LIB([network], [socket])
 537     AC_DEFINE([HAVE_U_INT64_T])
 538     MANTYPE=man
 539     ;;
 540 *-*-hpux*)
 541         # first we define all of the options common to all HP-UX releases
 542         CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
 543         IPADDR_IN_DISPLAY=yes
 544         AC_DEFINE([USE_PIPES])
 545         AC_DEFINE([LOGIN_NO_ENDOPT], [1],
 546             [Define if your login program cannot handle end of options ("--")])
 547         AC_DEFINE([LOGIN_NEEDS_UTMPX])
 548         AC_DEFINE([LOCKED_PASSWD_STRING], ["*"],
 549                 [String used in /etc/passwd to denote locked account])
 550         AC_DEFINE([SPT_TYPE], [SPT_PSTAT])
 551         maildir="/var/mail"
 552         LIBS="$LIBS -lsec"
 553         AC_CHECK_LIB([xnet], [t_error], ,
 554             [AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***])])
 555
 556         # next, we define all of the options specific to major releases
 557         case "$host" in
 558         *-*-hpux10*)
 559                 if test -z "$GCC"; then
 560                         CFLAGS="$CFLAGS -Ae"
 561                 fi
 562                 ;;
 563         *-*-hpux11*)
 564                 AC_DEFINE([PAM_SUN_CODEBASE], [1],
 565                         [Define if you are using Solaris-derived PAM which
 566                         passes pam_messages to the conversation function
 567                         with an extra level of indirection])
 568                 AC_DEFINE([DISABLE_UTMP], [1],
 569                         [Define if you don't want to use utmp])
 570                 AC_DEFINE([USE_BTMP], [1], [Use btmp to log bad logins])
 571                 check_for_hpux_broken_getaddrinfo=1
 572                 check_for_conflicting_getspnam=1
 573                 ;;
 574         esac
 575
 576         # lastly, we define options specific to minor releases
 577         case "$host" in
 578         *-*-hpux10.26)
 579                 AC_DEFINE([HAVE_SECUREWARE], [1],
 580                         [Define if you have SecureWare-based
 581                         protected password database])
 582                 disable_ptmx_check=yes
 583                 LIBS="$LIBS -lsecpw"
 584                 ;;
 585         esac
 586         ;;
 587 *-*-irix5*)
 588         PATH="$PATH:/usr/etc"
 589         AC_DEFINE([BROKEN_INET_NTOA], [1],
 590                 [Define if you system's inet_ntoa is busted
 591                 (e.g. Irix gcc issue)])
 592         AC_DEFINE([SETEUID_BREAKS_SETUID])
 593         AC_DEFINE([BROKEN_SETREUID])
 594         AC_DEFINE([BROKEN_SETREGID])
 595         AC_DEFINE([WITH_ABBREV_NO_TTY], [1],
 596                 [Define if you shouldn't strip 'tty' from your
 597                 ttyname in [uw]tmp])
 598         AC_DEFINE([LOCKED_PASSWD_STRING], ["*LK*"])
 599         ;;
 600 *-*-irix6*)
 601         PATH="$PATH:/usr/etc"
 602         AC_DEFINE([WITH_IRIX_ARRAY], [1],
 603                 [Define if you have/want arrays
 604                 (cluster-wide session managment, not C arrays)])
 605         AC_DEFINE([WITH_IRIX_PROJECT], [1],
 606                 [Define if you want IRIX project management])
 607         AC_DEFINE([WITH_IRIX_AUDIT], [1],
 608                 [Define if you want IRIX audit trails])
 609         AC_CHECK_FUNC([jlimit_startjob], [AC_DEFINE([WITH_IRIX_JOBS], [1],
 610                 [Define if you want IRIX kernel jobs])])
 611         AC_DEFINE([BROKEN_INET_NTOA])
 612         AC_DEFINE([SETEUID_BREAKS_SETUID])
 613         AC_DEFINE([BROKEN_SETREUID])
 614         AC_DEFINE([BROKEN_SETREGID])
 615         AC_DEFINE([BROKEN_UPDWTMPX], [1], [updwtmpx is broken (if present)])
 616         AC_DEFINE([WITH_ABBREV_NO_TTY])
 617         AC_DEFINE([LOCKED_PASSWD_STRING], ["*LK*"])
 618         ;;
 619 *-*-k*bsd*-gnu | *-*-kopensolaris*-gnu)
 620         check_for_libcrypt_later=1
 621         AC_DEFINE([PAM_TTY_KLUDGE])
 622         AC_DEFINE([LOCKED_PASSWD_PREFIX], ["!"])
 623         AC_DEFINE([SPT_TYPE], [SPT_REUSEARGV])
 624         AC_DEFINE([_PATH_BTMP], ["/var/log/btmp"], [log for bad login attempts])
 625         AC_DEFINE([USE_BTMP], [1], [Use btmp to log bad logins])
 626         ;;
 627 *-*-linux*)
 628         no_dev_ptmx=1
 629         check_for_libcrypt_later=1
 630         check_for_openpty_ctty_bug=1
 631         AC_DEFINE([PAM_TTY_KLUDGE], [1],
 632                 [Work around problematic Linux PAM modules handling of PAM_TTY])
 633         AC_DEFINE([LOCKED_PASSWD_PREFIX], ["!"],
 634                 [String used in /etc/passwd to denote locked account])
 635         AC_DEFINE([SPT_TYPE], [SPT_REUSEARGV])
 636         AC_DEFINE([LINK_OPNOTSUPP_ERRNO], [EPERM],
 637                 [Define to whatever link() returns for "not supported"
 638                 if it doesn't return EOPNOTSUPP.])
 639         AC_DEFINE([_PATH_BTMP], ["/var/log/btmp"], [log for bad login attempts])
 640         AC_DEFINE([USE_BTMP])
 641         AC_DEFINE([LINUX_OOM_ADJUST], [1], [Adjust Linux out-of-memory killer])
 642         inet6_default_4in6=yes
 643         case `uname -r` in
 644         1.*|2.0.*)
 645                 AC_DEFINE([BROKEN_CMSG_TYPE], [1],
 646                         [Define if cmsg_type is not passed correctly])
 647                 ;;
 648         esac
 649         # tun(4) forwarding compat code
 650         AC_CHECK_HEADERS([linux/if_tun.h])
 651         if test "x$ac_cv_header_linux_if_tun_h" = "xyes" ; then
 652                 AC_DEFINE([SSH_TUN_LINUX], [1],
 653                     [Open tunnel devices the Linux tun/tap way])
 654                 AC_DEFINE([SSH_TUN_COMPAT_AF], [1],
 655                     [Use tunnel device compatibility to OpenBSD])
 656                 AC_DEFINE([SSH_TUN_PREPEND_AF], [1],
 657                     [Prepend the address family to IP tunnel traffic])
 658         fi
 659         ;;
 660 mips-sony-bsd|mips-sony-newsos4)
 661         AC_DEFINE([NEED_SETPGRP], [1], [Need setpgrp to acquire controlling tty])
 662         SONY=1
 663         ;;
 664 *-*-netbsd*)
 665         check_for_libcrypt_before=1
 666         if test "x$withval" != "xno" ; then
 667                 need_dash_r=1
 668         fi
 669         AC_DEFINE([SSH_TUN_FREEBSD], [1], [Open tunnel devices the FreeBSD way])
 670         AC_CHECK_HEADER([net/if_tap.h], ,
 671             AC_DEFINE([SSH_TUN_NO_L2], [1], [No layer 2 tunnel support]))
 672         AC_DEFINE([SSH_TUN_PREPEND_AF], [1],
 673             [Prepend the address family to IP tunnel traffic])
 674         ;;
 675 *-*-freebsd*)
 676         check_for_libcrypt_later=1
 677         AC_DEFINE([LOCKED_PASSWD_PREFIX], ["*LOCKED*"], [Account locked with pw(1)])
 678         AC_DEFINE([SSH_TUN_FREEBSD], [1], [Open tunnel devices the FreeBSD way])
 679         AC_CHECK_HEADER([net/if_tap.h], ,
 680             AC_DEFINE([SSH_TUN_NO_L2], [1], [No layer 2 tunnel support]))
 681         AC_DEFINE([BROKEN_GLOB], [1], [FreeBSD glob does not do what we need])
 682         ;;
 683 *-*-bsdi*)
 684         AC_DEFINE([SETEUID_BREAKS_SETUID])
 685         AC_DEFINE([BROKEN_SETREUID])
 686         AC_DEFINE([BROKEN_SETREGID])
 687         ;;
 688 *-next-*)
 689         conf_lastlog_location="/usr/adm/lastlog"
 690         conf_utmp_location=/etc/utmp
 691         conf_wtmp_location=/usr/adm/wtmp
 692         maildir=/usr/spool/mail
 693         AC_DEFINE([HAVE_NEXT], [1], [Define if you are on NeXT])
 694         AC_DEFINE([BROKEN_REALPATH])
 695         AC_DEFINE([USE_PIPES])
 696         AC_DEFINE([BROKEN_SAVED_UIDS], [1], [Needed for NeXT])
 697         ;;
 698 *-*-openbsd*)
 699         AC_DEFINE([HAVE_ATTRIBUTE__SENTINEL__], [1], [OpenBSD's gcc has sentinel])
 700         AC_DEFINE([HAVE_ATTRIBUTE__BOUNDED__], [1], [OpenBSD's gcc has bounded])
 701         AC_DEFINE([SSH_TUN_OPENBSD], [1], [Open tunnel devices the OpenBSD way])
 702         AC_DEFINE([SYSLOG_R_SAFE_IN_SIGHAND], [1],
 703             [syslog_r function is safe to use in in a signal handler])
 704         ;;
 705 *-*-solaris*)
 706         if test "x$withval" != "xno" ; then
 707                 need_dash_r=1
 708         fi
 709         AC_DEFINE([PAM_SUN_CODEBASE])
 710         AC_DEFINE([LOGIN_NEEDS_UTMPX])
 711         AC_DEFINE([LOGIN_NEEDS_TERM], [1],
 712                 [Some versions of /bin/login need the TERM supplied
 713                 on the commandline])
 714         AC_DEFINE([PAM_TTY_KLUDGE])
 715         AC_DEFINE([SSHPAM_CHAUTHTOK_NEEDS_RUID], [1],
 716                 [Define if pam_chauthtok wants real uid set
 717                 to the unpriv'ed user])
 718         AC_DEFINE([LOCKED_PASSWD_STRING], ["*LK*"])
 719         # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
 720         AC_DEFINE([SSHD_ACQUIRES_CTTY], [1],
 721                 [Define if sshd somehow reacquires a controlling TTY
 722                 after setsid()])
 723         AC_DEFINE([PASSWD_NEEDS_USERNAME], [1], [must supply username to passwd
 724                 in case the name is longer than 8 chars])
 725         AC_DEFINE([BROKEN_TCGETATTR_ICANON], [1], [tcgetattr with ICANON may hang])
 726         external_path_file=/etc/default/login
 727         # hardwire lastlog location (can't detect it on some versions)
 728         conf_lastlog_location="/var/adm/lastlog"
 729         AC_MSG_CHECKING([for obsolete utmp and wtmp in solaris2.x])
 730         sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
 731         if test "$sol2ver" -ge 8; then
 732                 AC_MSG_RESULT([yes])
 733                 AC_DEFINE([DISABLE_UTMP])
 734                 AC_DEFINE([DISABLE_WTMP], [1],
 735                         [Define if you don't want to use wtmp])
 736         else
 737                 AC_MSG_RESULT([no])
 738         fi
 739         AC_ARG_WITH([solaris-contracts],
 740                 [  --with-solaris-contracts Enable Solaris process contracts (experimental)],
 741                 [
 742                 AC_CHECK_LIB([contract], [ct_tmpl_activate],
 743                         [ AC_DEFINE([USE_SOLARIS_PROCESS_CONTRACTS], [1],
 744                                 [Define if you have Solaris process contracts])
 745                           SSHDLIBS="$SSHDLIBS -lcontract"
 746                           SPC_MSG="yes" ], )
 747                 ],
 748         )
 749         AC_ARG_WITH([solaris-projects],
 750                 [  --with-solaris-projects Enable Solaris projects (experimental)],
 751                 [
 752                 AC_CHECK_LIB([project], [setproject],
 753                         [ AC_DEFINE([USE_SOLARIS_PROJECTS], [1],
 754                                 [Define if you have Solaris projects])
 755                         SSHDLIBS="$SSHDLIBS -lproject"
 756                         SP_MSG="yes" ], )
 757                 ],
 758         )
 759         ;;
 760 *-*-sunos4*)
 761         CPPFLAGS="$CPPFLAGS -DSUNOS4"
 762         AC_CHECK_FUNCS([getpwanam])
 763         AC_DEFINE([PAM_SUN_CODEBASE])
 764         conf_utmp_location=/etc/utmp
 765         conf_wtmp_location=/var/adm/wtmp
 766         conf_lastlog_location=/var/adm/lastlog
 767         AC_DEFINE([USE_PIPES])
 768         ;;
 769 *-ncr-sysv*)
 770         LIBS="$LIBS -lc89"
 771         AC_DEFINE([USE_PIPES])
 772         AC_DEFINE([SSHD_ACQUIRES_CTTY])
 773         AC_DEFINE([SETEUID_BREAKS_SETUID])
 774         AC_DEFINE([BROKEN_SETREUID])
 775         AC_DEFINE([BROKEN_SETREGID])
 776         ;;
 777 *-sni-sysv*)
 778         # /usr/ucblib MUST NOT be searched on ReliantUNIX
 779         AC_CHECK_LIB([dl], [dlsym], ,)
 780         # -lresolv needs to be at the end of LIBS or DNS lookups break
 781         AC_CHECK_LIB([resolv], [res_query], [ LIBS="$LIBS -lresolv" ])
 782         IPADDR_IN_DISPLAY=yes
 783         AC_DEFINE([USE_PIPES])
 784         AC_DEFINE([IP_TOS_IS_BROKEN])
 785         AC_DEFINE([SETEUID_BREAKS_SETUID])
 786         AC_DEFINE([BROKEN_SETREUID])
 787         AC_DEFINE([BROKEN_SETREGID])
 788         AC_DEFINE([SSHD_ACQUIRES_CTTY])
 789         external_path_file=/etc/default/login
 790         # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
 791         # Attention: always take care to bind libsocket and libnsl before libc,
 792         # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
 793         ;;
 794 # UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
 795 *-*-sysv4.2*)
 796         AC_DEFINE([USE_PIPES])
 797         AC_DEFINE([SETEUID_BREAKS_SETUID])
 798         AC_DEFINE([BROKEN_SETREUID])
 799         AC_DEFINE([BROKEN_SETREGID])
 800         AC_DEFINE([PASSWD_NEEDS_USERNAME], [1], [must supply username to passwd])
 801         AC_DEFINE([LOCKED_PASSWD_STRING], ["*LK*"])
 802         ;;
 803 # UnixWare 7.x, OpenUNIX 8
 804 *-*-sysv5*)
 805         CPPFLAGS="$CPPFLAGS -Dvsnprintf=_xvsnprintf -Dsnprintf=_xsnprintf"
 806         AC_DEFINE([UNIXWARE_LONG_PASSWORDS], [1], [Support passwords > 8 chars])
 807         AC_DEFINE([USE_PIPES])
 808         AC_DEFINE([SETEUID_BREAKS_SETUID])
 809         AC_DEFINE([BROKEN_GETADDRINFO])
 810         AC_DEFINE([BROKEN_SETREUID])
 811         AC_DEFINE([BROKEN_SETREGID])
 812         AC_DEFINE([PASSWD_NEEDS_USERNAME])
 813         case "$host" in
 814         *-*-sysv5SCO_SV*)       # SCO OpenServer 6.x
 815                 maildir=/var/spool/mail
 816                 TEST_SHELL=/u95/bin/sh
 817                 AC_DEFINE([BROKEN_LIBIAF], [1],
 818                         [ia_uinfo routines not supported by OS yet])
 819                 AC_DEFINE([BROKEN_UPDWTMPX])
 820                 AC_CHECK_LIB([prot], [getluid], [ LIBS="$LIBS -lprot"
 821                         AC_CHECK_FUNCS([getluid setluid], , , [-lprot])
 822                         AC_DEFINE([HAVE_SECUREWARE])
 823                         AC_DEFINE([DISABLE_SHADOW])
 824                         ], , )
 825                 ;;
 826         *)      AC_DEFINE([LOCKED_PASSWD_STRING], ["*LK*"])
 827                 check_for_libcrypt_later=1
 828                 ;;
 829         esac
 830         ;;
 831 *-*-sysv*)
 832         ;;
 833 # SCO UNIX and OEM versions of SCO UNIX
 834 *-*-sco3.2v4*)
 835         AC_MSG_ERROR("This Platform is no longer supported.")
 836         ;;
 837 # SCO OpenServer 5.x
 838 *-*-sco3.2v5*)
 839         if test -z "$GCC"; then
 840                 CFLAGS="$CFLAGS -belf"
 841         fi
 842         LIBS="$LIBS -lprot -lx -ltinfo -lm"
 843         no_dev_ptmx=1
 844         AC_DEFINE([USE_PIPES])
 845         AC_DEFINE([HAVE_SECUREWARE])
 846         AC_DEFINE([DISABLE_SHADOW])
 847         AC_DEFINE([DISABLE_FD_PASSING])
 848         AC_DEFINE([SETEUID_BREAKS_SETUID])
 849         AC_DEFINE([BROKEN_GETADDRINFO])
 850         AC_DEFINE([BROKEN_SETREUID])
 851         AC_DEFINE([BROKEN_SETREGID])
 852         AC_DEFINE([WITH_ABBREV_NO_TTY])
 853         AC_DEFINE([BROKEN_UPDWTMPX])
 854         AC_DEFINE([PASSWD_NEEDS_USERNAME])
 855         AC_CHECK_FUNCS([getluid setluid])
 856         MANTYPE=man
 857         TEST_SHELL=ksh
 858         ;;
 859 *-*-unicosmk*)
 860         AC_DEFINE([NO_SSH_LASTLOG], [1],
 861                 [Define if you don't want to use lastlog in session.c])
 862         AC_DEFINE([SETEUID_BREAKS_SETUID])
 863         AC_DEFINE([BROKEN_SETREUID])
 864         AC_DEFINE([BROKEN_SETREGID])
 865         AC_DEFINE([USE_PIPES])
 866         AC_DEFINE([DISABLE_FD_PASSING])
 867         LDFLAGS="$LDFLAGS"
 868         LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
 869         MANTYPE=cat
 870         ;;
 871 *-*-unicosmp*)
 872         AC_DEFINE([SETEUID_BREAKS_SETUID])
 873         AC_DEFINE([BROKEN_SETREUID])
 874         AC_DEFINE([BROKEN_SETREGID])
 875         AC_DEFINE([WITH_ABBREV_NO_TTY])
 876         AC_DEFINE([USE_PIPES])
 877         AC_DEFINE([DISABLE_FD_PASSING])
 878         LDFLAGS="$LDFLAGS"
 879         LIBS="$LIBS -lgen -lacid -ldb"
 880         MANTYPE=cat
 881         ;;
 882 *-*-unicos*)
 883         AC_DEFINE([SETEUID_BREAKS_SETUID])
 884         AC_DEFINE([BROKEN_SETREUID])
 885         AC_DEFINE([BROKEN_SETREGID])
 886         AC_DEFINE([USE_PIPES])
 887         AC_DEFINE([DISABLE_FD_PASSING])
 888         AC_DEFINE([NO_SSH_LASTLOG])
 889         LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
 890         LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
 891         MANTYPE=cat
 892         ;;
 893 *-dec-osf*)
 894         AC_MSG_CHECKING([for Digital Unix SIA])
 895         no_osfsia=""
 896         AC_ARG_WITH([osfsia],
 897                 [  --with-osfsia           Enable Digital Unix SIA],
 898                 [
 899                         if test "x$withval" = "xno" ; then
 900                                 AC_MSG_RESULT([disabled])
 901                                 no_osfsia=1
 902                         fi
 903                 ],
 904         )
 905         if test -z "$no_osfsia" ; then
 906                 if test -f /etc/sia/matrix.conf; then
 907                         AC_MSG_RESULT([yes])
 908                         AC_DEFINE([HAVE_OSF_SIA], [1],
 909                                 [Define if you have Digital Unix Security
 910                                 Integration Architecture])
 911                         AC_DEFINE([DISABLE_LOGIN], [1],
 912                                 [Define if you don't want to use your
 913                                 system's login() call])
 914                         AC_DEFINE([DISABLE_FD_PASSING])
 915                         LIBS="$LIBS -lsecurity -ldb -lm -laud"
 916                         SIA_MSG="yes"
 917                 else
 918                         AC_MSG_RESULT([no])
 919                         AC_DEFINE([LOCKED_PASSWD_SUBSTR], ["Nologin"],
 920                           [String used in /etc/passwd to denote locked account])
 921                 fi
 922         fi
 923         AC_DEFINE([BROKEN_GETADDRINFO])
 924         AC_DEFINE([SETEUID_BREAKS_SETUID])
 925         AC_DEFINE([BROKEN_SETREUID])
 926         AC_DEFINE([BROKEN_SETREGID])
 927         AC_DEFINE([BROKEN_READV_COMPARISON], [1], [Can't do comparisons on readv])
 928         ;;
 929
 930 *-*-nto-qnx*)
 931         AC_DEFINE([USE_PIPES])
 932         AC_DEFINE([NO_X11_UNIX_SOCKETS])
 933         AC_DEFINE([MISSING_NFDBITS], [1], [Define on *nto-qnx systems])
 934         AC_DEFINE([MISSING_HOWMANY], [1], [Define on *nto-qnx systems])
 935         AC_DEFINE([MISSING_FD_MASK], [1], [Define on *nto-qnx systems])
 936         AC_DEFINE([DISABLE_LASTLOG])
 937         AC_DEFINE([SSHD_ACQUIRES_CTTY])
 938         AC_DEFINE([BROKEN_SHADOW_EXPIRE], [1], [QNX shadow support is broken])
 939         enable_etc_default_login=no     # has incompatible /etc/default/login
 940         case "$host" in
 941         *-*-nto-qnx6*)
 942                 AC_DEFINE([DISABLE_FD_PASSING])
 943                 ;;
 944         esac
 945         ;;
 946
 947 *-*-ultrix*)
 948         AC_DEFINE([BROKEN_GETGROUPS], [1], [getgroups(0,NULL) will return -1])
 949         AC_DEFINE([BROKEN_MMAP], [1], [Ultrix mmap can't map files])
 950         AC_DEFINE([NEED_SETPGRP])
 951         AC_DEFINE([HAVE_SYS_SYSLOG_H], [1], [Force use of sys/syslog.h on Ultrix])
 952         ;;
 953
 954 *-*-lynxos)
 955         CFLAGS="$CFLAGS -D__NO_INCLUDE_WARN__"
 956         AC_DEFINE([MISSING_HOWMANY])
 957         AC_DEFINE([BROKEN_SETVBUF], [1], [LynxOS has broken setvbuf() implementation])
 958         ;;
 959 esac
 960
 961 AC_MSG_CHECKING([compiler and flags for sanity])
 962 AC_RUN_IFELSE([AC_LANG_PROGRAM([[ #include <stdio.h> ]], [[ exit(0); ]])],
 963         [       AC_MSG_RESULT([yes]) ],
 964         [
 965                 AC_MSG_RESULT([no])
 966                 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
 967         ],
 968         [       AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
 969 )
 970
 971 dnl Checks for header files.
 972 # Checks for libraries.
 973 AC_CHECK_FUNC([yp_match], , [AC_CHECK_LIB([nsl], [yp_match])])
 974 AC_CHECK_FUNC([setsockopt], , [AC_CHECK_LIB([socket], [setsockopt])])
 975
 976 dnl IRIX and Solaris 2.5.1 have dirname() in libgen
 977 AC_CHECK_FUNCS([dirname], [AC_CHECK_HEADERS([libgen.h])] , [
 978         AC_CHECK_LIB([gen], [dirname], [
 979                 AC_CACHE_CHECK([for broken dirname],
 980                         ac_cv_have_broken_dirname, [
 981                         save_LIBS="$LIBS"
 982                         LIBS="$LIBS -lgen"
 983                         AC_RUN_IFELSE(
 984                                 [AC_LANG_SOURCE([[
 985 #include <libgen.h>
 986 #include <string.h>
 987
 988 int main(int argc, char **argv) {
 989     char *s, buf[32];
 990
 991     strncpy(buf,"/etc", 32);
 992     s = dirname(buf);
 993     if (!s || strncmp(s, "/", 32) != 0) {
 994         exit(1);
 995     } else {
 996         exit(0);
 997     }
 998 }
 999                                 ]])],
1000                                 [ ac_cv_have_broken_dirname="no" ],
1001                                 [ ac_cv_have_broken_dirname="yes" ],
1002                                 [ ac_cv_have_broken_dirname="no" ],
1003                         )
1004                         LIBS="$save_LIBS"
1005                 ])
1006                 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
1007                         LIBS="$LIBS -lgen"
1008                         AC_DEFINE([HAVE_DIRNAME])
1009                         AC_CHECK_HEADERS([libgen.h])
1010                 fi
1011         ])
1012 ])
1013
1014 AC_CHECK_FUNC([getspnam], ,
1015         [AC_CHECK_LIB([gen], [getspnam], [LIBS="$LIBS -lgen"])])
1016 AC_SEARCH_LIBS([basename], [gen], [AC_DEFINE([HAVE_BASENAME], [1],
1017         [Define if you have the basename function.])])
1018
1019 dnl zlib is required
1020 AC_ARG_WITH([zlib],
1021         [  --with-zlib=PATH        Use zlib in PATH],
1022         [ if test "x$withval" = "xno" ; then
1023                 AC_MSG_ERROR([*** zlib is required ***])
1024           elif test "x$withval" != "xyes"; then
1025                 if test -d "$withval/lib"; then
1026                         if test -n "${need_dash_r}"; then
1027                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1028                         else
1029                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1030                         fi
1031                 else
1032                         if test -n "${need_dash_r}"; then
1033                                 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1034                         else
1035                                 LDFLAGS="-L${withval} ${LDFLAGS}"
1036                         fi
1037                 fi
1038                 if test -d "$withval/include"; then
1039                         CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1040                 else
1041                         CPPFLAGS="-I${withval} ${CPPFLAGS}"
1042                 fi
1043         fi ]
1044 )
1045
1046 AC_CHECK_HEADER([zlib.h], ,[AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***])])
1047 AC_CHECK_LIB([z], [deflate], ,
1048         [
1049                 saved_CPPFLAGS="$CPPFLAGS"
1050                 saved_LDFLAGS="$LDFLAGS"
1051                 save_LIBS="$LIBS"
1052                 dnl Check default zlib install dir
1053                 if test -n "${need_dash_r}"; then
1054                         LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
1055                 else
1056                         LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
1057                 fi
1058                 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
1059                 LIBS="$LIBS -lz"
1060                 AC_TRY_LINK_FUNC([deflate], [AC_DEFINE([HAVE_LIBZ])],
1061                         [
1062                                 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
1063                         ]
1064                 )
1065         ]
1066 )
1067
1068 AC_ARG_WITH([zlib-version-check],
1069         [  --without-zlib-version-check Disable zlib version check],
1070         [  if test "x$withval" = "xno" ; then
1071                 zlib_check_nonfatal=1
1072            fi
1073         ]
1074 )
1075
1076 AC_MSG_CHECKING([for possibly buggy zlib])
1077 AC_RUN_IFELSE([AC_LANG_PROGRAM([[
1078 #include <stdio.h>
1079 #include <zlib.h>
1080         ]],
1081         [[
1082         int a=0, b=0, c=0, d=0, n, v;
1083         n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
1084         if (n != 3 && n != 4)
1085                 exit(1);
1086         v = a*1000000 + b*10000 + c*100 + d;
1087         fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
1088
1089         /* 1.1.4 is OK */
1090         if (a == 1 && b == 1 && c >= 4)
1091                 exit(0);
1092
1093         /* 1.2.3 and up are OK */
1094         if (v >= 1020300)
1095                 exit(0);
1096
1097         exit(2);
1098         ]])],
1099         AC_MSG_RESULT([no]),
1100         [ AC_MSG_RESULT([yes])
1101           if test -z "$zlib_check_nonfatal" ; then
1102                 AC_MSG_ERROR([*** zlib too old - check config.log ***
1103 Your reported zlib version has known security problems.  It's possible your
1104 vendor has fixed these problems without changing the version number.  If you
1105 are sure this is the case, you can disable the check by running
1106 "./configure --without-zlib-version-check".
1107 If you are in doubt, upgrade zlib to version 1.2.3 or greater.
1108 See http://www.gzip.org/zlib/ for details.])
1109           else
1110                 AC_MSG_WARN([zlib version may have security problems])
1111           fi
1112         ],
1113         [       AC_MSG_WARN([cross compiling: not checking zlib version]) ]
1114 )
1115
1116 dnl UnixWare 2.x
1117 AC_CHECK_FUNC([strcasecmp],
1118         [], [ AC_CHECK_LIB([resolv], [strcasecmp], [LIBS="$LIBS -lresolv"]) ]
1119 )
1120 AC_CHECK_FUNCS([utimes],
1121         [], [ AC_CHECK_LIB([c89], [utimes], [AC_DEFINE([HAVE_UTIMES])
1122                                         LIBS="$LIBS -lc89"]) ]
1123 )
1124
1125 dnl    Checks for libutil functions
1126 AC_CHECK_HEADERS([libutil.h])
1127 AC_SEARCH_LIBS([login], [util bsd], [AC_DEFINE([HAVE_LOGIN], [1],
1128         [Define if your libraries define login()])])
1129 AC_CHECK_FUNCS([fmt_scaled logout updwtmp logwtmp])
1130
1131 AC_FUNC_STRFTIME
1132
1133 # Check for ALTDIRFUNC glob() extension
1134 AC_MSG_CHECKING([for GLOB_ALTDIRFUNC support])
1135 AC_EGREP_CPP([FOUNDIT],
1136         [
1137                 #include <glob.h>
1138                 #ifdef GLOB_ALTDIRFUNC
1139                 FOUNDIT
1140                 #endif
1141         ],
1142         [
1143                 AC_DEFINE([GLOB_HAS_ALTDIRFUNC], [1],
1144                         [Define if your system glob() function has
1145                         the GLOB_ALTDIRFUNC extension])
1146                 AC_MSG_RESULT([yes])
1147         ],
1148         [
1149                 AC_MSG_RESULT([no])
1150         ]
1151 )
1152
1153 # Check for g.gl_matchc glob() extension
1154 AC_MSG_CHECKING([for gl_matchc field in glob_t])
1155 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <glob.h> ]],
1156         [[ glob_t g; g.gl_matchc = 1; ]])],
1157         [
1158                 AC_DEFINE([GLOB_HAS_GL_MATCHC], [1],
1159                         [Define if your system glob() function has
1160                         gl_matchc options in glob_t])
1161                 AC_MSG_RESULT([yes])
1162         ], [
1163                 AC_MSG_RESULT([no])
1164 ])
1165
1166 # Check for g.gl_statv glob() extension
1167 AC_MSG_CHECKING([for gl_statv and GLOB_KEEPSTAT extensions for glob])
1168 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <glob.h> ]], [[
1169 #ifndef GLOB_KEEPSTAT
1170 #error "glob does not support GLOB_KEEPSTAT extension"
1171 #endif
1172 glob_t g;
1173 g.gl_statv = NULL;
1174 ]])],
1175         [
1176                 AC_DEFINE([GLOB_HAS_GL_STATV], [1],
1177                         [Define if your system glob() function has
1178                         gl_statv options in glob_t])
1179                 AC_MSG_RESULT([yes])
1180         ], [
1181                 AC_MSG_RESULT([no])
1182
1183 ])
1184
1185 AC_CHECK_DECLS([GLOB_NOMATCH], , , [#include <glob.h>])
1186
1187 AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
1188 AC_RUN_IFELSE(
1189         [AC_LANG_PROGRAM([[
1190 #include <sys/types.h>
1191 #include <dirent.h>]],
1192         [[
1193         struct dirent d;
1194         exit(sizeof(d.d_name)<=sizeof(char));
1195         ]])],
1196         [AC_MSG_RESULT([yes])],
1197         [
1198                 AC_MSG_RESULT([no])
1199                 AC_DEFINE([BROKEN_ONE_BYTE_DIRENT_D_NAME], [1],
1200                         [Define if your struct dirent expects you to
1201                         allocate extra space for d_name])
1202         ],
1203         [
1204                 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
1205                 AC_DEFINE([BROKEN_ONE_BYTE_DIRENT_D_NAME])
1206         ]
1207 )
1208
1209 AC_MSG_CHECKING([for /proc/pid/fd directory])
1210 if test -d "/proc/$$/fd" ; then
1211         AC_DEFINE([HAVE_PROC_PID], [1], [Define if you have /proc/$pid/fd])
1212         AC_MSG_RESULT([yes])
1213 else
1214         AC_MSG_RESULT([no])
1215 fi
1216
1217 # Check whether user wants S/Key support
1218 SKEY_MSG="no"
1219 AC_ARG_WITH([skey],
1220         [  --with-skey[[=PATH]]      Enable S/Key support (optionally in PATH)],
1221         [
1222                 if test "x$withval" != "xno" ; then
1223
1224                         if test "x$withval" != "xyes" ; then
1225                                 CPPFLAGS="$CPPFLAGS -I${withval}/include"
1226                                 LDFLAGS="$LDFLAGS -L${withval}/lib"
1227                         fi
1228
1229                         AC_DEFINE([SKEY], [1], [Define if you want S/Key support])
1230                         LIBS="-lskey $LIBS"
1231                         SKEY_MSG="yes"
1232
1233                         AC_MSG_CHECKING([for s/key support])
1234                         AC_LINK_IFELSE(
1235                                 [AC_LANG_PROGRAM([[
1236 #include <stdio.h>
1237 #include <skey.h>
1238                                 ]], [[
1239         char *ff = skey_keyinfo(""); ff="";
1240         exit(0);
1241                                 ]])],
1242                                 [AC_MSG_RESULT([yes])],
1243                                 [
1244                                         AC_MSG_RESULT([no])
1245                                         AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
1246                                 ])
1247                         AC_MSG_CHECKING([if skeychallenge takes 4 arguments])
1248                         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1249 #include <stdio.h>
1250 #include <skey.h>
1251                                 ]], [[
1252         (void)skeychallenge(NULL,"name","",0);
1253                                 ]])],
1254                         [
1255                                 AC_MSG_RESULT([yes])
1256                                 AC_DEFINE([SKEYCHALLENGE_4ARG], [1],
1257                                         [Define if your skeychallenge()
1258                                         function takes 4 arguments (NetBSD)])],
1259                         [
1260                                 AC_MSG_RESULT([no])
1261                         ])
1262                 fi
1263         ]
1264 )
1265
1266 # Check whether user wants TCP wrappers support
1267 TCPW_MSG="no"
1268 AC_ARG_WITH([tcp-wrappers],
1269         [  --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
1270         [
1271                 if test "x$withval" != "xno" ; then
1272                         saved_LIBS="$LIBS"
1273                         saved_LDFLAGS="$LDFLAGS"
1274                         saved_CPPFLAGS="$CPPFLAGS"
1275                         if test -n "${withval}" && \
1276                             test "x${withval}" != "xyes"; then
1277                                 if test -d "${withval}/lib"; then
1278                                         if test -n "${need_dash_r}"; then
1279                                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1280                                         else
1281                                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1282                                         fi
1283                                 else
1284                                         if test -n "${need_dash_r}"; then
1285                                                 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
1286                                         else
1287                                                 LDFLAGS="-L${withval} ${LDFLAGS}"
1288                                         fi
1289                                 fi
1290                                 if test -d "${withval}/include"; then
1291                                         CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
1292                                 else
1293                                         CPPFLAGS="-I${withval} ${CPPFLAGS}"
1294                                 fi
1295                         fi
1296                         LIBS="-lwrap $LIBS"
1297                         AC_MSG_CHECKING([for libwrap])
1298                         AC_LINK_IFELSE([AC_LANG_PROGRAM([[
1299 #include <sys/types.h>
1300 #include <sys/socket.h>
1301 #include <netinet/in.h>
1302 #include <tcpd.h>
1303 int deny_severity = 0, allow_severity = 0;
1304                                 ]], [[
1305         hosts_access(0);
1306                                 ]])], [
1307                                         AC_MSG_RESULT([yes])
1308                                         AC_DEFINE([LIBWRAP], [1],
1309                                                 [Define if you want
1310                                                 TCP Wrappers support])
1311                                         SSHDLIBS="$SSHDLIBS -lwrap"
1312                                         TCPW_MSG="yes"
1313                                 ], [
1314                                         AC_MSG_ERROR([*** libwrap missing])
1315
1316                         ])
1317                         LIBS="$saved_LIBS"
1318                 fi
1319         ]
1320 )
1321
1322 # Check whether user wants libedit support
1323 LIBEDIT_MSG="no"
1324 AC_ARG_WITH([libedit],
1325         [  --with-libedit[[=PATH]]   Enable libedit support for sftp],
1326         [ if test "x$withval" != "xno" ; then
1327                 if test "x$withval" = "xyes" ; then
1328                         AC_PATH_PROG([PKGCONFIG], [pkg-config], [no])
1329                         if test "x$PKGCONFIG" != "xno"; then
1330                                 AC_MSG_CHECKING([if $PKGCONFIG knows about libedit])
1331                                 if "$PKGCONFIG" libedit; then
1332                                         AC_MSG_RESULT([yes])
1333                                         use_pkgconfig_for_libedit=yes
1334                                 else
1335                                         AC_MSG_RESULT([no])
1336                                 fi
1337                         fi
1338                 else
1339                         CPPFLAGS="$CPPFLAGS -I${withval}/include"
1340                         if test -n "${need_dash_r}"; then
1341                                 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1342                         else
1343                                 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1344                         fi
1345                 fi
1346                 if test "x$use_pkgconfig_for_libedit" = "xyes"; then
1347                         LIBEDIT=`$PKGCONFIG --libs-only-l libedit`
1348                         CPPFLAGS="$CPPFLAGS `$PKGCONFIG --cflags libedit`"
1349                 else
1350                         LIBEDIT="-ledit -lcurses"
1351                 fi
1352                 OTHERLIBS=`echo $LIBEDIT | sed 's/-ledit//'`
1353                 AC_CHECK_LIB([edit], [el_init],
1354                         [ AC_DEFINE([USE_LIBEDIT], [1], [Use libedit for sftp])
1355                           LIBEDIT_MSG="yes"
1356                           AC_SUBST([LIBEDIT])
1357                         ],
1358                         [ AC_MSG_ERROR([libedit not found]) ],
1359                         [ $OTHERLIBS ]
1360                 )
1361                 AC_MSG_CHECKING([if libedit version is compatible])
1362                 AC_COMPILE_IFELSE(
1363                     [AC_LANG_PROGRAM([[ #include <histedit.h> ]],
1364                     [[
1365         int i = H_SETSIZE;
1366         el_init("", NULL, NULL, NULL);
1367         exit(0);
1368                     ]])],
1369                     [ AC_MSG_RESULT([yes]) ],
1370                     [ AC_MSG_RESULT([no])
1371                       AC_MSG_ERROR([libedit version is not compatible]) ]
1372                 )
1373         fi ]
1374 )
1375
1376 AUDIT_MODULE=none
1377 AC_ARG_WITH([audit],
1378         [  --with-audit=module     Enable audit support (modules=debug,bsm,linux)],
1379         [
1380           AC_MSG_CHECKING([for supported audit module])
1381           case "$withval" in
1382           bsm)
1383                 AC_MSG_RESULT([bsm])
1384                 AUDIT_MODULE=bsm
1385                 dnl    Checks for headers, libs and functions
1386                 AC_CHECK_HEADERS([bsm/audit.h], [],
1387                     [AC_MSG_ERROR([BSM enabled and bsm/audit.h not found])],
1388                     [
1389 #ifdef HAVE_TIME_H
1390 # include <time.h>
1391 #endif
1392                     ]
1393 )
1394                 AC_CHECK_LIB([bsm], [getaudit], [],
1395                     [AC_MSG_ERROR([BSM enabled and required library not found])])
1396                 AC_CHECK_FUNCS([getaudit], [],
1397                     [AC_MSG_ERROR([BSM enabled and required function not found])])
1398                 # These are optional
1399                 AC_CHECK_FUNCS([getaudit_addr aug_get_machine])
1400                 AC_DEFINE([USE_BSM_AUDIT], [1], [Use BSM audit module])
1401                 ;;
1402           linux)
1403                 AC_MSG_RESULT([linux])
1404                 AUDIT_MODULE=linux
1405                 dnl    Checks for headers, libs and functions
1406                 AC_CHECK_HEADERS([libaudit.h])
1407                 SSHDLIBS="$SSHDLIBS -laudit"
1408                 AC_DEFINE([USE_LINUX_AUDIT], [1], [Use Linux audit module])
1409                 ;;
1410           debug)
1411                 AUDIT_MODULE=debug
1412                 AC_MSG_RESULT([debug])
1413                 AC_DEFINE([SSH_AUDIT_EVENTS], [1], [Use audit debugging module])
1414                 ;;
1415           no)
1416                 AC_MSG_RESULT([no])
1417                 ;;
1418           *)
1419                 AC_MSG_ERROR([Unknown audit module $withval])
1420                 ;;
1421         esac ]
1422 )
1423
1424 dnl    Checks for library functions. Please keep in alphabetical order
1425 AC_CHECK_FUNCS([ \
1426         arc4random \
1427         arc4random_buf \
1428         arc4random_uniform \
1429         asprintf \
1430         b64_ntop \
1431         __b64_ntop \
1432         b64_pton \
1433         __b64_pton \
1434         bcopy \
1435         bindresvport_sa \
1436         clock \
1437         closefrom \
1438         dirfd \
1439         fchmod \
1440         fchown \
1441         freeaddrinfo \
1442         fstatvfs \
1443         futimes \
1444         getaddrinfo \
1445         getcwd \
1446         getgrouplist \
1447         getnameinfo \
1448         getopt \
1449         getpeereid \
1450         getpeerucred \
1451         _getpty \
1452         getrlimit \
1453         getttyent \
1454         glob \
1455         group_from_gid \
1456         inet_aton \
1457         inet_ntoa \
1458         inet_ntop \
1459         innetgr \
1460         login_getcapbool \
1461         md5_crypt \
1462         memmove \
1463         mkdtemp \
1464         mmap \
1465         ngetaddrinfo \
1466         nsleep \
1467         ogetaddrinfo \
1468         openlog_r \
1469         openpty \
1470         poll \
1471         prctl \
1472         pstat \
1473         readpassphrase \
1474         realpath \
1475         recvmsg \
1476         rresvport_af \
1477         sendmsg \
1478         setdtablesize \
1479         setegid \
1480         setenv \
1481         seteuid \
1482         setgroupent \
1483         setgroups \
1484         setlogin \
1485         setpassent\
1486         setpcred \
1487         setproctitle \
1488         setregid \
1489         setreuid \
1490         setrlimit \
1491         setsid \
1492         setvbuf \
1493         sigaction \
1494         sigvec \
1495         snprintf \
1496         socketpair \
1497         statfs \
1498         statvfs \
1499         strdup \
1500         strerror \
1501         strlcat \
1502         strlcpy \
1503         strmode \
1504         strnvis \
1505         strptime \
1506         strtonum \
1507         strtoll \
1508         strtoul \
1509         swap32 \
1510         sysconf \
1511         tcgetpgrp \
1512         timingsafe_bcmp \
1513         truncate \
1514         unsetenv \
1515         updwtmpx \
1516         user_from_uid \
1517         vasprintf \
1518         vhangup \
1519         vsnprintf \
1520         waitpid \
1521 ])
1522
1523 AC_LINK_IFELSE(
1524         [AC_LANG_PROGRAM(
1525            [[ #include <ctype.h> ]],
1526            [[ return (isblank('a')); ]])],
1527         [AC_DEFINE([HAVE_ISBLANK], [1], [Define if you have isblank(3C).])
1528 ])
1529
1530 # PKCS#11 support requires dlopen() and co
1531 AC_SEARCH_LIBS([dlopen], [dl],
1532     [AC_DEFINE([ENABLE_PKCS11], [], [Enable for PKCS#11 support])]
1533 )
1534
1535 # IRIX has a const char return value for gai_strerror()
1536 AC_CHECK_FUNCS([gai_strerror], [
1537         AC_DEFINE([HAVE_GAI_STRERROR])
1538         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1539 #include <sys/types.h>
1540 #include <sys/socket.h>
1541 #include <netdb.h>
1542
1543 const char *gai_strerror(int);
1544                         ]], [[
1545         char *str;
1546         str = gai_strerror(0);
1547                         ]])], [
1548                 AC_DEFINE([HAVE_CONST_GAI_STRERROR_PROTO], [1],
1549                 [Define if gai_strerror() returns const char *])], [])])
1550
1551 AC_SEARCH_LIBS([nanosleep], [rt posix4], [AC_DEFINE([HAVE_NANOSLEEP], [1],
1552         [Some systems put nanosleep outside of libc])])
1553
1554 dnl Make sure prototypes are defined for these before using them.
1555 AC_CHECK_DECL([getrusage], [AC_CHECK_FUNCS([getrusage])])
1556 AC_CHECK_DECL([strsep],
1557         [AC_CHECK_FUNCS([strsep])],
1558         [],
1559         [
1560 #ifdef HAVE_STRING_H
1561 # include <string.h>
1562 #endif
1563         ])
1564
1565 dnl tcsendbreak might be a macro
1566 AC_CHECK_DECL([tcsendbreak],
1567         [AC_DEFINE([HAVE_TCSENDBREAK])],
1568         [AC_CHECK_FUNCS([tcsendbreak])],
1569         [#include <termios.h>]
1570 )
1571
1572 AC_CHECK_DECLS([h_errno], , ,[#include <netdb.h>])
1573
1574 AC_CHECK_DECLS([SHUT_RD], , ,
1575         [
1576 #include <sys/types.h>
1577 #include <sys/socket.h>
1578         ])
1579
1580 AC_CHECK_DECLS([O_NONBLOCK], , ,
1581         [
1582 #include <sys/types.h>
1583 #ifdef HAVE_SYS_STAT_H
1584 # include <sys/stat.h>
1585 #endif
1586 #ifdef HAVE_FCNTL_H
1587 # include <fcntl.h>
1588 #endif
1589         ])
1590
1591 AC_CHECK_DECLS([writev], , , [
1592 #include <sys/types.h>
1593 #include <sys/uio.h>
1594 #include <unistd.h>
1595         ])
1596
1597 AC_CHECK_DECLS([MAXSYMLINKS], , , [
1598 #include <sys/param.h>
1599         ])
1600
1601 AC_CHECK_DECLS([offsetof], , , [
1602 #include <stddef.h>
1603         ])
1604
1605 AC_CHECK_FUNCS([setresuid], [
1606         dnl Some platorms have setresuid that isn't implemented, test for this
1607         AC_MSG_CHECKING([if setresuid seems to work])
1608         AC_RUN_IFELSE(
1609                 [AC_LANG_PROGRAM([[
1610 #include <stdlib.h>
1611 #include <errno.h>
1612                 ]], [[
1613         errno=0;
1614         setresuid(0,0,0);
1615         if (errno==ENOSYS)
1616                 exit(1);
1617         else
1618                 exit(0);
1619                 ]])],
1620                 [AC_MSG_RESULT([yes])],
1621                 [AC_DEFINE([BROKEN_SETRESUID], [1],
1622                         [Define if your setresuid() is broken])
1623                  AC_MSG_RESULT([not implemented])],
1624                 [AC_MSG_WARN([cross compiling: not checking setresuid])]
1625         )
1626 ])
1627
1628 AC_CHECK_FUNCS([setresgid], [
1629         dnl Some platorms have setresgid that isn't implemented, test for this
1630         AC_MSG_CHECKING([if setresgid seems to work])
1631         AC_RUN_IFELSE(
1632                 [AC_LANG_PROGRAM([[
1633 #include <stdlib.h>
1634 #include <errno.h>
1635                 ]], [[
1636         errno=0;
1637         setresgid(0,0,0);
1638         if (errno==ENOSYS)
1639                 exit(1);
1640         else
1641                 exit(0);
1642                 ]])],
1643                 [AC_MSG_RESULT([yes])],
1644                 [AC_DEFINE([BROKEN_SETRESGID], [1],
1645                         [Define if your setresgid() is broken])
1646                  AC_MSG_RESULT([not implemented])],
1647                 [AC_MSG_WARN([cross compiling: not checking setresuid])]
1648         )
1649 ])
1650
1651 dnl    Checks for time functions
1652 AC_CHECK_FUNCS([gettimeofday time])
1653 dnl    Checks for utmp functions
1654 AC_CHECK_FUNCS([endutent getutent getutid getutline pututline setutent])
1655 AC_CHECK_FUNCS([utmpname])
1656 dnl    Checks for utmpx functions
1657 AC_CHECK_FUNCS([endutxent getutxent getutxid getutxline getutxuser pututxline])
1658 AC_CHECK_FUNCS([setutxdb setutxent utmpxname])
1659 dnl    Checks for lastlog functions
1660 AC_CHECK_FUNCS([getlastlogxbyname])
1661
1662 AC_CHECK_FUNC([daemon],
1663         [AC_DEFINE([HAVE_DAEMON], [1], [Define if your libraries define daemon()])],
1664         [AC_CHECK_LIB([bsd], [daemon],
1665                 [LIBS="$LIBS -lbsd"; AC_DEFINE([HAVE_DAEMON])])]
1666 )
1667
1668 AC_CHECK_FUNC([getpagesize],
1669         [AC_DEFINE([HAVE_GETPAGESIZE], [1],
1670                 [Define if your libraries define getpagesize()])],
1671         [AC_CHECK_LIB([ucb], [getpagesize],
1672                 [LIBS="$LIBS -lucb"; AC_DEFINE([HAVE_GETPAGESIZE])])]
1673 )
1674
1675 # Check for broken snprintf
1676 if test "x$ac_cv_func_snprintf" = "xyes" ; then
1677         AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
1678         AC_RUN_IFELSE(
1679                 [AC_LANG_PROGRAM([[ #include <stdio.h> ]],
1680                 [[
1681         char b[5];
1682         snprintf(b,5,"123456789");
1683         exit(b[4]!='\0');
1684                 ]])],
1685                 [AC_MSG_RESULT([yes])],
1686                 [
1687                         AC_MSG_RESULT([no])
1688                         AC_DEFINE([BROKEN_SNPRINTF], [1],
1689                                 [Define if your snprintf is busted])
1690                         AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
1691                 ],
1692                 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
1693         )
1694 fi
1695
1696 # If we don't have a working asprintf, then we strongly depend on vsnprintf
1697 # returning the right thing on overflow: the number of characters it tried to
1698 # create (as per SUSv3)
1699 if test "x$ac_cv_func_asprintf" != "xyes" && \
1700    test "x$ac_cv_func_vsnprintf" = "xyes" ; then
1701         AC_MSG_CHECKING([whether vsnprintf returns correct values on overflow])
1702         AC_RUN_IFELSE(
1703                 [AC_LANG_PROGRAM([[
1704 #include <sys/types.h>
1705 #include <stdio.h>
1706 #include <stdarg.h>
1707
1708 int x_snprintf(char *str,size_t count,const char *fmt,...)
1709 {
1710         size_t ret; va_list ap;
1711         va_start(ap, fmt); ret = vsnprintf(str, count, fmt, ap); va_end(ap);
1712         return ret;
1713 }
1714                 ]], [[
1715         char x[1];
1716         exit(x_snprintf(x, 1, "%s %d", "hello", 12345) == 11 ? 0 : 1);
1717                 ]])],
1718                 [AC_MSG_RESULT([yes])],
1719                 [
1720                         AC_MSG_RESULT([no])
1721                         AC_DEFINE([BROKEN_SNPRINTF], [1],
1722                                 [Define if your snprintf is busted])
1723                         AC_MSG_WARN([****** Your vsnprintf() function is broken, complain to your vendor])
1724                 ],
1725                 [ AC_MSG_WARN([cross compiling: Assuming working vsnprintf()]) ]
1726         )
1727 fi
1728
1729 # On systems where [v]snprintf is broken, but is declared in stdio,
1730 # check that the fmt argument is const char * or just char *.
1731 # This is only useful for when BROKEN_SNPRINTF
1732 AC_MSG_CHECKING([whether snprintf can declare const char *fmt])
1733 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1734 #include <stdio.h>
1735 int snprintf(char *a, size_t b, const char *c, ...) { return 0; }
1736                 ]], [[
1737         snprintf(0, 0, 0);
1738                 ]])],
1739    [AC_MSG_RESULT([yes])
1740     AC_DEFINE([SNPRINTF_CONST], [const],
1741               [Define as const if snprintf() can declare const char *fmt])],
1742    [AC_MSG_RESULT([no])
1743     AC_DEFINE([SNPRINTF_CONST], [/* not const */])])
1744
1745 # Check for missing getpeereid (or equiv) support
1746 NO_PEERCHECK=""
1747 if test "x$ac_cv_func_getpeereid" != "xyes" -a "x$ac_cv_func_getpeerucred" != "xyes"; then
1748         AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
1749         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1750 #include <sys/types.h>
1751 #include <sys/socket.h>]], [[int i = SO_PEERCRED;]])],
1752                 [ AC_MSG_RESULT([yes])
1753                   AC_DEFINE([HAVE_SO_PEERCRED], [1], [Have PEERCRED socket option])
1754                 ], [AC_MSG_RESULT([no])
1755                 NO_PEERCHECK=1
1756         ])
1757 fi
1758
1759 dnl see whether mkstemp() requires XXXXXX
1760 if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1761 AC_MSG_CHECKING([for (overly) strict mkstemp])
1762 AC_RUN_IFELSE(
1763         [AC_LANG_PROGRAM([[
1764 #include <stdlib.h>
1765         ]], [[
1766         char template[]="conftest.mkstemp-test";
1767         if (mkstemp(template) == -1)
1768                 exit(1);
1769         unlink(template);
1770         exit(0);
1771         ]])],
1772         [
1773                 AC_MSG_RESULT([no])
1774         ],
1775         [
1776                 AC_MSG_RESULT([yes])
1777                 AC_DEFINE([HAVE_STRICT_MKSTEMP], [1], [Silly mkstemp()])
1778         ],
1779         [
1780                 AC_MSG_RESULT([yes])
1781                 AC_DEFINE([HAVE_STRICT_MKSTEMP])
1782         ]
1783 )
1784 fi
1785
1786 dnl make sure that openpty does not reacquire controlling terminal
1787 if test ! -z "$check_for_openpty_ctty_bug"; then
1788         AC_MSG_CHECKING([if openpty correctly handles controlling tty])
1789         AC_RUN_IFELSE(
1790                 [AC_LANG_PROGRAM([[
1791 #include <stdio.h>
1792 #include <sys/fcntl.h>
1793 #include <sys/types.h>
1794 #include <sys/wait.h>
1795                 ]], [[
1796         pid_t pid;
1797         int fd, ptyfd, ttyfd, status;
1798
1799         pid = fork();
1800         if (pid < 0) {          /* failed */
1801                 exit(1);
1802         } else if (pid > 0) {   /* parent */
1803                 waitpid(pid, &status, 0);
1804                 if (WIFEXITED(status))
1805                         exit(WEXITSTATUS(status));
1806                 else
1807                         exit(2);
1808         } else {                /* child */
1809                 close(0); close(1); close(2);
1810                 setsid();
1811                 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
1812                 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
1813                 if (fd >= 0)
1814                         exit(3);        /* Acquired ctty: broken */
1815                 else
1816                         exit(0);        /* Did not acquire ctty: OK */
1817         }
1818                 ]])],
1819                 [
1820                         AC_MSG_RESULT([yes])
1821                 ],
1822                 [
1823                         AC_MSG_RESULT([no])
1824                         AC_DEFINE([SSHD_ACQUIRES_CTTY])
1825                 ],
1826                 [
1827                         AC_MSG_RESULT([cross-compiling, assuming yes])
1828                 ]
1829         )
1830 fi
1831
1832 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1833     test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
1834         AC_MSG_CHECKING([if getaddrinfo seems to work])
1835         AC_RUN_IFELSE(
1836                 [AC_LANG_PROGRAM([[
1837 #include <stdio.h>
1838 #include <sys/socket.h>
1839 #include <netdb.h>
1840 #include <errno.h>
1841 #include <netinet/in.h>
1842
1843 #define TEST_PORT "2222"
1844                 ]], [[
1845         int err, sock;
1846         struct addrinfo *gai_ai, *ai, hints;
1847         char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1848
1849         memset(&hints, 0, sizeof(hints));
1850         hints.ai_family = PF_UNSPEC;
1851         hints.ai_socktype = SOCK_STREAM;
1852         hints.ai_flags = AI_PASSIVE;
1853
1854         err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1855         if (err != 0) {
1856                 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1857                 exit(1);
1858         }
1859
1860         for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1861                 if (ai->ai_family != AF_INET6)
1862                         continue;
1863
1864                 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1865                     sizeof(ntop), strport, sizeof(strport),
1866                     NI_NUMERICHOST|NI_NUMERICSERV);
1867
1868                 if (err != 0) {
1869                         if (err == EAI_SYSTEM)
1870                                 perror("getnameinfo EAI_SYSTEM");
1871                         else
1872                                 fprintf(stderr, "getnameinfo failed: %s\n",
1873                                     gai_strerror(err));
1874                         exit(2);
1875                 }
1876
1877                 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
1878                 if (sock < 0)
1879                         perror("socket");
1880                 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
1881                         if (errno == EBADF)
1882                                 exit(3);
1883                 }
1884         }
1885         exit(0);
1886                 ]])],
1887                 [
1888                         AC_MSG_RESULT([yes])
1889                 ],
1890                 [
1891                         AC_MSG_RESULT([no])
1892                         AC_DEFINE([BROKEN_GETADDRINFO])
1893                 ],
1894                 [
1895                         AC_MSG_RESULT([cross-compiling, assuming yes])
1896                 ]
1897         )
1898 fi
1899
1900 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
1901     test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
1902         AC_MSG_CHECKING([if getaddrinfo seems to work])
1903         AC_RUN_IFELSE(
1904                 [AC_LANG_PROGRAM([[
1905 #include <stdio.h>
1906 #include <sys/socket.h>
1907 #include <netdb.h>
1908 #include <errno.h>
1909 #include <netinet/in.h>
1910
1911 #define TEST_PORT "2222"
1912                 ]], [[
1913         int err, sock;
1914         struct addrinfo *gai_ai, *ai, hints;
1915         char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
1916
1917         memset(&hints, 0, sizeof(hints));
1918         hints.ai_family = PF_UNSPEC;
1919         hints.ai_socktype = SOCK_STREAM;
1920         hints.ai_flags = AI_PASSIVE;
1921
1922         err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
1923         if (err != 0) {
1924                 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
1925                 exit(1);
1926         }
1927
1928         for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
1929                 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
1930                         continue;
1931
1932                 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
1933                     sizeof(ntop), strport, sizeof(strport),
1934                     NI_NUMERICHOST|NI_NUMERICSERV);
1935
1936                 if (ai->ai_family == AF_INET && err != 0) {
1937                         perror("getnameinfo");
1938                         exit(2);
1939                 }
1940         }
1941         exit(0);
1942                 ]])],
1943                 [
1944                         AC_MSG_RESULT([yes])
1945                         AC_DEFINE([AIX_GETNAMEINFO_HACK], [1],
1946                                 [Define if you have a getaddrinfo that fails
1947                                 for the all-zeros IPv6 address])
1948                 ],
1949                 [
1950                         AC_MSG_RESULT([no])
1951                         AC_DEFINE([BROKEN_GETADDRINFO])
1952                 ],
1953                 [
1954                         AC_MSG_RESULT([cross-compiling, assuming no])
1955                 ]
1956         )
1957 fi
1958
1959 if test "x$check_for_conflicting_getspnam" = "x1"; then
1960         AC_MSG_CHECKING([for conflicting getspnam in shadow.h])
1961         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <shadow.h> ]],
1962                 [[ exit(0); ]])],
1963                 [
1964                         AC_MSG_RESULT([no])
1965                 ],
1966                 [
1967                         AC_MSG_RESULT([yes])
1968                         AC_DEFINE([GETSPNAM_CONFLICTING_DEFS], [1],
1969                             [Conflicting defs for getspnam])
1970                 ]
1971         )
1972 fi
1973
1974 AC_FUNC_GETPGRP
1975
1976 # Search for OpenSSL
1977 saved_CPPFLAGS="$CPPFLAGS"
1978 saved_LDFLAGS="$LDFLAGS"
1979 AC_ARG_WITH([ssl-dir],
1980         [  --with-ssl-dir=PATH     Specify path to OpenSSL installation ],
1981         [
1982                 if test "x$withval" != "xno" ; then
1983                         case "$withval" in
1984                                 # Relative paths
1985                                 ./*|../*)       withval="`pwd`/$withval"
1986                         esac
1987                         if test -d "$withval/lib"; then
1988                                 if test -n "${need_dash_r}"; then
1989                                         LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1990                                 else
1991                                         LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1992                                 fi
1993                         elif test -d "$withval/lib64"; then
1994                                 if test -n "${need_dash_r}"; then
1995                                         LDFLAGS="-L${withval}/lib64 -R${withval}/lib64 ${LDFLAGS}"
1996                                 else
1997                                         LDFLAGS="-L${withval}/lib64 ${LDFLAGS}"
1998                                 fi
1999                         else
2000                                 if test -n "${need_dash_r}"; then
2001                                         LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
2002                                 else
2003                                         LDFLAGS="-L${withval} ${LDFLAGS}"
2004                                 fi
2005                         fi
2006                         if test -d "$withval/include"; then
2007                                 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
2008                         else
2009                                 CPPFLAGS="-I${withval} ${CPPFLAGS}"
2010                         fi
2011                 fi
2012         ]
2013 )
2014 LIBS="-lcrypto $LIBS"
2015 AC_TRY_LINK_FUNC([RAND_add], [AC_DEFINE([HAVE_OPENSSL], [1],
2016         [Define if your ssl headers are included
2017         with #include <openssl/header.h>])],
2018         [
2019                 dnl Check default openssl install dir
2020                 if test -n "${need_dash_r}"; then
2021                         LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
2022                 else
2023                         LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
2024                 fi
2025                 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
2026                 AC_CHECK_HEADER([openssl/opensslv.h], ,
2027                     [AC_MSG_ERROR([*** OpenSSL headers missing - please install first or check config.log ***])])
2028                 AC_TRY_LINK_FUNC([RAND_add], [AC_DEFINE([HAVE_OPENSSL])],
2029                         [
2030                                 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
2031                         ]
2032                 )
2033         ]
2034 )
2035
2036 # Determine OpenSSL header version
2037 AC_MSG_CHECKING([OpenSSL header version])
2038 AC_RUN_IFELSE(
2039         [AC_LANG_PROGRAM([[
2040 #include <stdio.h>
2041 #include <string.h>
2042 #include <openssl/opensslv.h>
2043 #define DATA "conftest.sslincver"
2044         ]], [[
2045         FILE *fd;
2046         int rc;
2047
2048         fd = fopen(DATA,"w");
2049         if(fd == NULL)
2050                 exit(1);
2051
2052         if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
2053                 exit(1);
2054
2055         exit(0);
2056         ]])],
2057         [
2058                 ssl_header_ver=`cat conftest.sslincver`
2059                 AC_MSG_RESULT([$ssl_header_ver])
2060         ],
2061         [
2062                 AC_MSG_RESULT([not found])
2063                 AC_MSG_ERROR([OpenSSL version header not found.])
2064         ],
2065         [
2066                 AC_MSG_WARN([cross compiling: not checking])
2067         ]
2068 )
2069
2070 # Determine OpenSSL library version
2071 AC_MSG_CHECKING([OpenSSL library version])
2072 AC_RUN_IFELSE(
2073         [AC_LANG_PROGRAM([[
2074 #include <stdio.h>
2075 #include <string.h>
2076 #include <openssl/opensslv.h>
2077 #include <openssl/crypto.h>
2078 #define DATA "conftest.ssllibver"
2079         ]], [[
2080         FILE *fd;
2081         int rc;
2082
2083         fd = fopen(DATA,"w");
2084         if(fd == NULL)
2085                 exit(1);
2086
2087         if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
2088                 exit(1);
2089
2090         exit(0);
2091         ]])],
2092         [
2093                 ssl_library_ver=`cat conftest.ssllibver`
2094                 AC_MSG_RESULT([$ssl_library_ver])
2095         ],
2096         [
2097                 AC_MSG_RESULT([not found])
2098                 AC_MSG_ERROR([OpenSSL library not found.])
2099         ],
2100         [
2101                 AC_MSG_WARN([cross compiling: not checking])
2102         ]
2103 )
2104
2105 AC_ARG_WITH([openssl-header-check],
2106         [  --without-openssl-header-check Disable OpenSSL version consistency check],
2107         [  if test "x$withval" = "xno" ; then
2108                 openssl_check_nonfatal=1
2109            fi
2110         ]
2111 )
2112
2113 # Sanity check OpenSSL headers
2114 AC_MSG_CHECKING([whether OpenSSL's headers match the library])
2115 AC_RUN_IFELSE(
2116         [AC_LANG_PROGRAM([[
2117 #include <string.h>
2118 #include <openssl/opensslv.h>
2119         ]], [[
2120         exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1);
2121         ]])],
2122         [
2123                 AC_MSG_RESULT([yes])
2124         ],
2125         [
2126                 AC_MSG_RESULT([no])
2127                 if test "x$openssl_check_nonfatal" = "x"; then
2128                         AC_MSG_ERROR([Your OpenSSL headers do not match your
2129 library. Check config.log for details.
2130 If you are sure your installation is consistent, you can disable the check
2131 by running "./configure --without-openssl-header-check".
2132 Also see contrib/findssl.sh for help identifying header/library mismatches.
2133 ])
2134                 else
2135                         AC_MSG_WARN([Your OpenSSL headers do not match your
2136 library. Check config.log for details.
2137 Also see contrib/findssl.sh for help identifying header/library mismatches.])
2138                 fi
2139         ],
2140         [
2141                 AC_MSG_WARN([cross compiling: not checking])
2142         ]
2143 )
2144
2145 AC_MSG_CHECKING([if programs using OpenSSL functions will link])
2146 AC_LINK_IFELSE(
2147         [AC_LANG_PROGRAM([[ #include <openssl/evp.h> ]],
2148         [[ SSLeay_add_all_algorithms(); ]])],
2149         [
2150                 AC_MSG_RESULT([yes])
2151         ],
2152         [
2153                 AC_MSG_RESULT([no])
2154                 saved_LIBS="$LIBS"
2155                 LIBS="$LIBS -ldl"
2156                 AC_MSG_CHECKING([if programs using OpenSSL need -ldl])
2157                 AC_LINK_IFELSE(
2158                         [AC_LANG_PROGRAM([[ #include <openssl/evp.h> ]],
2159                         [[ SSLeay_add_all_algorithms(); ]])],
2160                         [
2161                                 AC_MSG_RESULT([yes])
2162                         ],
2163                         [
2164                                 AC_MSG_RESULT([no])
2165                                 LIBS="$saved_LIBS"
2166                         ]
2167                 )
2168         ]
2169 )
2170
2171 AC_CHECK_FUNCS([RSA_generate_key_ex DSA_generate_parameters_ex BN_is_prime_ex RSA_get_default_method])
2172
2173 AC_ARG_WITH([ssl-engine],
2174         [  --with-ssl-engine       Enable OpenSSL (hardware) ENGINE support ],
2175         [ if test "x$withval" != "xno" ; then
2176                 AC_MSG_CHECKING([for OpenSSL ENGINE support])
2177                 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2178 #include <openssl/engine.h>
2179                         ]], [[
2180         ENGINE_load_builtin_engines();
2181         ENGINE_register_all_complete();
2182                         ]])],
2183                         [ AC_MSG_RESULT([yes])
2184                           AC_DEFINE([USE_OPENSSL_ENGINE], [1],
2185                              [Enable OpenSSL engine support])
2186                         ], [ AC_MSG_ERROR([OpenSSL ENGINE support not found])
2187                 ])
2188           fi ]
2189 )
2190
2191 # Check for OpenSSL without EVP_aes_{192,256}_cbc
2192 AC_MSG_CHECKING([whether OpenSSL has crippled AES support])
2193 AC_LINK_IFELSE(
2194         [AC_LANG_PROGRAM([[
2195 #include <string.h>
2196 #include <openssl/evp.h>
2197         ]], [[
2198         exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);
2199         ]])],
2200         [
2201                 AC_MSG_RESULT([no])
2202         ],
2203         [
2204                 AC_MSG_RESULT([yes])
2205                 AC_DEFINE([OPENSSL_LOBOTOMISED_AES], [1],
2206                     [libcrypto is missing AES 192 and 256 bit functions])
2207         ]
2208 )
2209
2210 AC_MSG_CHECKING([if EVP_DigestUpdate returns an int])
2211 AC_LINK_IFELSE(
2212         [AC_LANG_PROGRAM([[
2213 #include <string.h>
2214 #include <openssl/evp.h>
2215         ]], [[
2216         if(EVP_DigestUpdate(NULL, NULL,0))
2217                 exit(0);
2218         ]])],
2219         [
2220                 AC_MSG_RESULT([yes])
2221         ],
2222         [
2223                 AC_MSG_RESULT([no])
2224                 AC_DEFINE([OPENSSL_EVP_DIGESTUPDATE_VOID], [1],
2225                     [Define if EVP_DigestUpdate returns void])
2226         ]
2227 )
2228
2229 # Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
2230 # because the system crypt() is more featureful.
2231 if test "x$check_for_libcrypt_before" = "x1"; then
2232         AC_CHECK_LIB([crypt], [crypt])
2233 fi
2234
2235 # Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
2236 # version in OpenSSL.
2237 if test "x$check_for_libcrypt_later" = "x1"; then
2238         AC_CHECK_LIB([crypt], [crypt], [LIBS="$LIBS -lcrypt"])
2239 fi
2240
2241 # Search for SHA256 support in libc and/or OpenSSL
2242 AC_CHECK_FUNCS([SHA256_Update EVP_sha256], [TEST_SSH_SHA256=yes],
2243     [TEST_SSH_SHA256=no])
2244 AC_SUBST([TEST_SSH_SHA256])
2245
2246 # Check complete ECC support in OpenSSL
2247 AC_MSG_CHECKING([whether OpenSSL has complete ECC support])
2248 AC_LINK_IFELSE(
2249         [AC_LANG_PROGRAM([[
2250 #include <openssl/ec.h>
2251 #include <openssl/ecdh.h>
2252 #include <openssl/ecdsa.h>
2253 #include <openssl/evp.h>
2254 #include <openssl/objects.h>
2255 #include <openssl/opensslv.h>
2256 #if OPENSSL_VERSION_NUMBER < 0x0090807f /* 0.9.8g */
2257 # error "OpenSSL < 0.9.8g has unreliable ECC code"
2258 #endif
2259         ]], [[
2260         EC_KEY *e = EC_KEY_new_by_curve_name(NID_secp521r1);
2261         const EVP_MD *m = EVP_sha512(); /* We need this too */
2262         ]])],
2263         [
2264                 AC_MSG_RESULT([yes])
2265                 AC_DEFINE([OPENSSL_HAS_ECC], [1],
2266                     [libcrypto includes complete ECC support])
2267                 TEST_SSH_ECC=yes
2268                 COMMENT_OUT_ECC=""
2269         ],
2270         [
2271                 AC_MSG_RESULT([no])
2272                 TEST_SSH_ECC=no
2273                 COMMENT_OUT_ECC="#no ecc#"
2274         ]
2275 )
2276 AC_SUBST([TEST_SSH_ECC])
2277 AC_SUBST([COMMENT_OUT_ECC])
2278
2279 saved_LIBS="$LIBS"
2280 AC_CHECK_LIB([iaf], [ia_openinfo], [
2281         LIBS="$LIBS -liaf"
2282         AC_CHECK_FUNCS([set_id], [SSHDLIBS="$SSHDLIBS -liaf"
2283                                 AC_DEFINE([HAVE_LIBIAF], [1],
2284                         [Define if system has libiaf that supports set_id])
2285                                 ])
2286 ])
2287 LIBS="$saved_LIBS"
2288
2289 ### Configure cryptographic random number support
2290
2291 # Check wheter OpenSSL seeds itself
2292 AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
2293 AC_RUN_IFELSE(
2294         [AC_LANG_PROGRAM([[
2295 #include <string.h>
2296 #include <openssl/rand.h>
2297         ]], [[
2298         exit(RAND_status() == 1 ? 0 : 1);
2299         ]])],
2300         [
2301                 OPENSSL_SEEDS_ITSELF=yes
2302                 AC_MSG_RESULT([yes])
2303         ],
2304         [
2305                 AC_MSG_RESULT([no])
2306         ],
2307         [
2308                 AC_MSG_WARN([cross compiling: assuming yes])
2309                 # This is safe, since we will fatal() at runtime if
2310                 # OpenSSL is not seeded correctly.
2311                 OPENSSL_SEEDS_ITSELF=yes
2312         ]
2313 )
2314
2315 # PRNGD TCP socket
2316 AC_ARG_WITH([prngd-port],
2317         [  --with-prngd-port=PORT  read entropy from PRNGD/EGD TCP localhost:PORT],
2318         [
2319                 case "$withval" in
2320                 no)
2321                         withval=""
2322                         ;;
2323                 [[0-9]]*)
2324                         ;;
2325                 *)
2326                         AC_MSG_ERROR([You must specify a numeric port number for --with-prngd-port])
2327                         ;;
2328                 esac
2329                 if test ! -z "$withval" ; then
2330                         PRNGD_PORT="$withval"
2331                         AC_DEFINE_UNQUOTED([PRNGD_PORT], [$PRNGD_PORT],
2332                                 [Port number of PRNGD/EGD random number socket])
2333                 fi
2334         ]
2335 )
2336
2337 # PRNGD Unix domain socket
2338 AC_ARG_WITH([prngd-socket],
2339         [  --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
2340         [
2341                 case "$withval" in
2342                 yes)
2343                         withval="/var/run/egd-pool"
2344                         ;;
2345                 no)
2346                         withval=""
2347                         ;;
2348                 /*)
2349                         ;;
2350                 *)
2351                         AC_MSG_ERROR([You must specify an absolute path to the entropy socket])
2352                         ;;
2353                 esac
2354
2355                 if test ! -z "$withval" ; then
2356                         if test ! -z "$PRNGD_PORT" ; then
2357                                 AC_MSG_ERROR([You may not specify both a PRNGD/EGD port and socket])
2358                         fi
2359                         if test ! -r "$withval" ; then
2360                                 AC_MSG_WARN([Entropy socket is not readable])
2361                         fi
2362                         PRNGD_SOCKET="$withval"
2363                         AC_DEFINE_UNQUOTED([PRNGD_SOCKET], ["$PRNGD_SOCKET"],
2364                                 [Location of PRNGD/EGD random number socket])
2365                 fi
2366         ],
2367         [
2368                 # Check for existing socket only if we don't have a random device already
2369                 if test "x$OPENSSL_SEEDS_ITSELF" != "xyes" ; then
2370                         AC_MSG_CHECKING([for PRNGD/EGD socket])
2371                         # Insert other locations here
2372                         for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
2373                                 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
2374                                         PRNGD_SOCKET="$sock"
2375                                         AC_DEFINE_UNQUOTED([PRNGD_SOCKET], ["$PRNGD_SOCKET"])
2376                                         break;
2377                                 fi
2378                         done
2379                         if test ! -z "$PRNGD_SOCKET" ; then
2380                                 AC_MSG_RESULT([$PRNGD_SOCKET])
2381                         else
2382                                 AC_MSG_RESULT([not found])
2383                         fi
2384                 fi
2385         ]
2386 )
2387
2388 # Which randomness source do we use?
2389 if test ! -z "$PRNGD_PORT" ; then
2390         RAND_MSG="PRNGd port $PRNGD_PORT"
2391 elif test ! -z "$PRNGD_SOCKET" ; then
2392         RAND_MSG="PRNGd socket $PRNGD_SOCKET"
2393 elif test ! -z "$OPENSSL_SEEDS_ITSELF" ; then
2394         AC_DEFINE([OPENSSL_PRNG_ONLY], [1],
2395                 [Define if you want OpenSSL's internally seeded PRNG only])
2396         RAND_MSG="OpenSSL internal ONLY"
2397 else
2398         AC_MSG_ERROR([OpenSSH has no source of random numbers. Please configure OpenSSL with an entropy source or re-run configure using one of the --with-prngd-port or --with-prngd-socket options])
2399 fi
2400
2401 # Check for PAM libs
2402 PAM_MSG="no"
2403 AC_ARG_WITH([pam],
2404         [  --with-pam              Enable PAM support ],
2405         [
2406                 if test "x$withval" != "xno" ; then
2407                         if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
2408                            test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
2409                                 AC_MSG_ERROR([PAM headers not found])
2410                         fi
2411
2412                         saved_LIBS="$LIBS"
2413                         AC_CHECK_LIB([dl], [dlopen], , )
2414                         AC_CHECK_LIB([pam], [pam_set_item], , [AC_MSG_ERROR([*** libpam missing])])
2415                         AC_CHECK_FUNCS([pam_getenvlist])
2416                         AC_CHECK_FUNCS([pam_putenv])
2417                         LIBS="$saved_LIBS"
2418
2419                         PAM_MSG="yes"
2420
2421                         SSHDLIBS="$SSHDLIBS -lpam"
2422                         AC_DEFINE([USE_PAM], [1],
2423                                 [Define if you want to enable PAM support])
2424
2425                         if test $ac_cv_lib_dl_dlopen = yes; then
2426                                 case "$LIBS" in
2427                                 *-ldl*)
2428                                         # libdl already in LIBS
2429                                         ;;
2430                                 *)
2431                                         SSHDLIBS="$SSHDLIBS -ldl"
2432                                         ;;
2433                                 esac
2434                         fi
2435                 fi
2436         ]
2437 )
2438
2439 # Check for older PAM
2440 if test "x$PAM_MSG" = "xyes" ; then
2441         # Check PAM strerror arguments (old PAM)
2442         AC_MSG_CHECKING([whether pam_strerror takes only one argument])
2443         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2444 #include <stdlib.h>
2445 #if defined(HAVE_SECURITY_PAM_APPL_H)
2446 #include <security/pam_appl.h>
2447 #elif defined (HAVE_PAM_PAM_APPL_H)
2448 #include <pam/pam_appl.h>
2449 #endif
2450                 ]], [[
2451 (void)pam_strerror((pam_handle_t *)NULL, -1);
2452                 ]])], [AC_MSG_RESULT([no])], [
2453                         AC_DEFINE([HAVE_OLD_PAM], [1],
2454                                 [Define if you have an old version of PAM
2455                                 which takes only one argument to pam_strerror])
2456                         AC_MSG_RESULT([yes])
2457                         PAM_MSG="yes (old library)"
2458
2459         ])
2460 fi
2461
2462 SSH_PRIVSEP_USER=sshd
2463 AC_ARG_WITH([privsep-user],
2464         [  --with-privsep-user=user Specify non-privileged user for privilege separation],
2465         [
2466                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
2467                     test "x${withval}" != "xyes"; then
2468                         SSH_PRIVSEP_USER=$withval
2469                 fi
2470         ]
2471 )
2472 AC_DEFINE_UNQUOTED([SSH_PRIVSEP_USER], ["$SSH_PRIVSEP_USER"],
2473         [non-privileged user for privilege separation])
2474 AC_SUBST([SSH_PRIVSEP_USER])
2475
2476 # Decide which sandbox style to use
2477 sandbox_arg=""
2478 AC_ARG_WITH([sandbox],
2479         [  --with-sandbox=style    Specify privilege separation sandbox (no, darwin, rlimit, systrace)],
2480         [
2481                 if test "x$withval" = "xyes" ; then
2482                         sandbox_arg=""
2483                 else
2484                         sandbox_arg="$withval"
2485                 fi
2486         ]
2487 )
2488 if test "x$sandbox_arg" = "xsystrace" || \
2489    ( test -z "$sandbox_arg" && test "x$have_systr_policy_kill" = "x1" ) ; then
2490         test "x$have_systr_policy_kill" != "x1" && \
2491                 AC_MSG_ERROR([systrace sandbox requires systrace headers and SYSTR_POLICY_KILL support])
2492         SANDBOX_STYLE="systrace"
2493         AC_DEFINE([SANDBOX_SYSTRACE], [1], [Sandbox using systrace(4)])
2494 elif test "x$sandbox_arg" = "xdarwin" || \
2495      ( test -z "$sandbox_arg" && test "x$ac_cv_func_sandbox_init" = "xyes" && \
2496        test "x$ac_cv_header_sandbox_h" = "xyes") ; then
2497         test "x$ac_cv_func_sandbox_init" != "xyes" -o \
2498              "x$ac_cv_header_sandbox_h" != "xyes" && \
2499                 AC_MSG_ERROR([Darwin seatbelt sandbox requires sandbox.h and sandbox_init function])
2500         SANDBOX_STYLE="darwin"
2501         AC_DEFINE([SANDBOX_DARWIN], [1], [Sandbox using Darwin sandbox_init(3)])
2502 elif test "x$sandbox_arg" = "xrlimit" || \
2503      ( test -z "$sandbox_arg" && test "x$ac_cv_func_setrlimit" = "xyes" ) ; then
2504         test "x$ac_cv_func_setrlimit" != "xyes" && \
2505                 AC_MSG_ERROR([rlimit sandbox requires setrlimit function])
2506         SANDBOX_STYLE="rlimit"
2507         AC_DEFINE([SANDBOX_RLIMIT], [1], [Sandbox using setrlimit(2)])
2508 elif test -z "$sandbox_arg" || test "x$sandbox_arg" = "xno" || \
2509      test "x$sandbox_arg" = "xnone" || test "x$sandbox_arg" = "xnull" ; then
2510         SANDBOX_STYLE="none"
2511         AC_DEFINE([SANDBOX_NULL], [1], [no privsep sandboxing])
2512 else
2513         AC_MSG_ERROR([unsupported --with-sandbox])
2514 fi
2515
2516 # Cheap hack to ensure NEWS-OS libraries are arranged right.
2517 if test ! -z "$SONY" ; then
2518   LIBS="$LIBS -liberty";
2519 fi
2520
2521 # Check for  long long datatypes
2522 AC_CHECK_TYPES([long long, unsigned long long, long double])
2523
2524 # Check datatype sizes
2525 AC_CHECK_SIZEOF([char], [1])
2526 AC_CHECK_SIZEOF([short int], [2])
2527 AC_CHECK_SIZEOF([int], [4])
2528 AC_CHECK_SIZEOF([long int], [4])
2529 AC_CHECK_SIZEOF([long long int], [8])
2530
2531 # Sanity check long long for some platforms (AIX)
2532 if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
2533         ac_cv_sizeof_long_long_int=0
2534 fi
2535
2536 # compute LLONG_MIN and LLONG_MAX if we don't know them.
2537 if test -z "$have_llong_max"; then
2538         AC_MSG_CHECKING([for max value of long long])
2539         AC_RUN_IFELSE(
2540                 [AC_LANG_PROGRAM([[
2541 #include <stdio.h>
2542 /* Why is this so damn hard? */
2543 #ifdef __GNUC__
2544 # undef __GNUC__
2545 #endif
2546 #define __USE_ISOC99
2547 #include <limits.h>
2548 #define DATA "conftest.llminmax"
2549 #define my_abs(a) ((a) < 0 ? ((a) * -1) : (a))
2550
2551 /*
2552  * printf in libc on some platforms (eg old Tru64) does not understand %lld so
2553  * we do this the hard way.
2554  */
2555 static int
2556 fprint_ll(FILE *f, long long n)
2557 {
2558         unsigned int i;
2559         int l[sizeof(long long) * 8];
2560
2561         if (n < 0)
2562                 if (fprintf(f, "-") < 0)
2563                         return -1;
2564         for (i = 0; n != 0; i++) {
2565                 l[i] = my_abs(n % 10);
2566                 n /= 10;
2567         }
2568         do {
2569                 if (fprintf(f, "%d", l[--i]) < 0)
2570                         return -1;
2571         } while (i != 0);
2572         if (fprintf(f, " ") < 0)
2573                 return -1;
2574         return 0;
2575 }
2576                 ]], [[
2577         FILE *f;
2578         long long i, llmin, llmax = 0;
2579
2580         if((f = fopen(DATA,"w")) == NULL)
2581                 exit(1);
2582
2583 #if defined(LLONG_MIN) && defined(LLONG_MAX)
2584         fprintf(stderr, "Using system header for LLONG_MIN and LLONG_MAX\n");
2585         llmin = LLONG_MIN;
2586         llmax = LLONG_MAX;
2587 #else
2588         fprintf(stderr, "Calculating  LLONG_MIN and LLONG_MAX\n");
2589         /* This will work on one's complement and two's complement */
2590         for (i = 1; i > llmax; i <<= 1, i++)
2591                 llmax = i;
2592         llmin = llmax + 1LL;    /* wrap */
2593 #endif
2594
2595         /* Sanity check */
2596         if (llmin + 1 < llmin || llmin - 1 < llmin || llmax + 1 > llmax
2597             || llmax - 1 > llmax || llmin == llmax || llmin == 0
2598             || llmax == 0 || llmax < LONG_MAX || llmin > LONG_MIN) {
2599                 fprintf(f, "unknown unknown\n");
2600                 exit(2);
2601         }
2602
2603         if (fprint_ll(f, llmin) < 0)
2604                 exit(3);
2605         if (fprint_ll(f, llmax) < 0)
2606                 exit(4);
2607         if (fclose(f) < 0)
2608                 exit(5);
2609         exit(0);
2610                 ]])],
2611                 [
2612                         llong_min=`$AWK '{print $1}' conftest.llminmax`
2613                         llong_max=`$AWK '{print $2}' conftest.llminmax`
2614
2615                         AC_MSG_RESULT([$llong_max])
2616                         AC_DEFINE_UNQUOTED([LLONG_MAX], [${llong_max}LL],
2617                             [max value of long long calculated by configure])
2618                         AC_MSG_CHECKING([for min value of long long])
2619                         AC_MSG_RESULT([$llong_min])
2620                         AC_DEFINE_UNQUOTED([LLONG_MIN], [${llong_min}LL],
2621                             [min value of long long calculated by configure])
2622                 ],
2623                 [
2624                         AC_MSG_RESULT([not found])
2625                 ],
2626                 [
2627                         AC_MSG_WARN([cross compiling: not checking])
2628                 ]
2629         )
2630 fi
2631
2632
2633 # More checks for data types
2634 AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
2635         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
2636         [[ u_int a; a = 1;]])],
2637         [ ac_cv_have_u_int="yes" ], [ ac_cv_have_u_int="no"
2638         ])
2639 ])
2640 if test "x$ac_cv_have_u_int" = "xyes" ; then
2641         AC_DEFINE([HAVE_U_INT], [1], [define if you have u_int data type])
2642         have_u_int=1
2643 fi
2644
2645 AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
2646         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
2647         [[ int8_t a; int16_t b; int32_t c; a = b = c = 1;]])],
2648         [ ac_cv_have_intxx_t="yes" ], [ ac_cv_have_intxx_t="no"
2649         ])
2650 ])
2651 if test "x$ac_cv_have_intxx_t" = "xyes" ; then
2652         AC_DEFINE([HAVE_INTXX_T], [1], [define if you have intxx_t data type])
2653         have_intxx_t=1
2654 fi
2655
2656 if (test -z "$have_intxx_t" && \
2657            test "x$ac_cv_header_stdint_h" = "xyes")
2658 then
2659     AC_MSG_CHECKING([for intXX_t types in stdint.h])
2660         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <stdint.h> ]],
2661         [[ int8_t a; int16_t b; int32_t c; a = b = c = 1;]])],
2662                 [
2663                         AC_DEFINE([HAVE_INTXX_T])
2664                         AC_MSG_RESULT([yes])
2665                 ], [ AC_MSG_RESULT([no])
2666         ])
2667 fi
2668
2669 AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
2670         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2671 #include <sys/types.h>
2672 #ifdef HAVE_STDINT_H
2673 # include <stdint.h>
2674 #endif
2675 #include <sys/socket.h>
2676 #ifdef HAVE_SYS_BITYPES_H
2677 # include <sys/bitypes.h>
2678 #endif
2679                 ]], [[
2680 int64_t a; a = 1;
2681                 ]])],
2682         [ ac_cv_have_int64_t="yes" ], [ ac_cv_have_int64_t="no"
2683         ])
2684 ])
2685 if test "x$ac_cv_have_int64_t" = "xyes" ; then
2686         AC_DEFINE([HAVE_INT64_T], [1], [define if you have int64_t data type])
2687 fi
2688
2689 AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
2690         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
2691         [[ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;]])],
2692         [ ac_cv_have_u_intxx_t="yes" ], [ ac_cv_have_u_intxx_t="no"
2693         ])
2694 ])
2695 if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
2696         AC_DEFINE([HAVE_U_INTXX_T], [1], [define if you have u_intxx_t data type])
2697         have_u_intxx_t=1
2698 fi
2699
2700 if test -z "$have_u_intxx_t" ; then
2701     AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
2702         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/socket.h> ]],
2703         [[ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;]])],
2704                 [
2705                         AC_DEFINE([HAVE_U_INTXX_T])
2706                         AC_MSG_RESULT([yes])
2707                 ], [ AC_MSG_RESULT([no])
2708         ])
2709 fi
2710
2711 AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
2712         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
2713         [[ u_int64_t a; a = 1;]])],
2714         [ ac_cv_have_u_int64_t="yes" ], [ ac_cv_have_u_int64_t="no"
2715         ])
2716 ])
2717 if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
2718         AC_DEFINE([HAVE_U_INT64_T], [1], [define if you have u_int64_t data type])
2719         have_u_int64_t=1
2720 fi
2721
2722 if test -z "$have_u_int64_t" ; then
2723     AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
2724         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/bitypes.h> ]],
2725         [[ u_int64_t a; a = 1]])],
2726                 [
2727                         AC_DEFINE([HAVE_U_INT64_T])
2728                         AC_MSG_RESULT([yes])
2729                 ], [ AC_MSG_RESULT([no])
2730         ])
2731 fi
2732
2733 if test -z "$have_u_intxx_t" ; then
2734         AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
2735                 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2736 #include <sys/types.h>
2737                         ]], [[
2738         uint8_t a;
2739         uint16_t b;
2740         uint32_t c;
2741         a = b = c = 1;
2742                         ]])],
2743                 [ ac_cv_have_uintxx_t="yes" ], [ ac_cv_have_uintxx_t="no"
2744                 ])
2745         ])
2746         if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
2747                 AC_DEFINE([HAVE_UINTXX_T], [1],
2748                         [define if you have uintxx_t data type])
2749         fi
2750 fi
2751
2752 if test -z "$have_uintxx_t" ; then
2753     AC_MSG_CHECKING([for uintXX_t types in stdint.h])
2754         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <stdint.h> ]],
2755         [[ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;]])],
2756                 [
2757                         AC_DEFINE([HAVE_UINTXX_T])
2758                         AC_MSG_RESULT([yes])
2759                 ], [ AC_MSG_RESULT([no])
2760         ])
2761 fi
2762
2763 if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
2764            test "x$ac_cv_header_sys_bitypes_h" = "xyes")
2765 then
2766         AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
2767         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2768 #include <sys/bitypes.h>
2769                 ]], [[
2770                         int8_t a; int16_t b; int32_t c;
2771                         u_int8_t e; u_int16_t f; u_int32_t g;
2772                         a = b = c = e = f = g = 1;
2773                 ]])],
2774                 [
2775                         AC_DEFINE([HAVE_U_INTXX_T])
2776                         AC_DEFINE([HAVE_INTXX_T])
2777                         AC_MSG_RESULT([yes])
2778                 ], [AC_MSG_RESULT([no])
2779         ])
2780 fi
2781
2782
2783 AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
2784         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
2785         [[ u_char foo; foo = 125; ]])],
2786         [ ac_cv_have_u_char="yes" ], [ ac_cv_have_u_char="no"
2787         ])
2788 ])
2789 if test "x$ac_cv_have_u_char" = "xyes" ; then
2790         AC_DEFINE([HAVE_U_CHAR], [1], [define if you have u_char data type])
2791 fi
2792
2793 TYPE_SOCKLEN_T
2794
2795 AC_CHECK_TYPES([sig_atomic_t], , , [#include <signal.h>])
2796 AC_CHECK_TYPES([fsblkcnt_t, fsfilcnt_t], , , [
2797 #include <sys/types.h>
2798 #ifdef HAVE_SYS_BITYPES_H
2799 #include <sys/bitypes.h>
2800 #endif
2801 #ifdef HAVE_SYS_STATFS_H
2802 #include <sys/statfs.h>
2803 #endif
2804 #ifdef HAVE_SYS_STATVFS_H
2805 #include <sys/statvfs.h>
2806 #endif
2807 ])
2808
2809 AC_CHECK_TYPES([in_addr_t, in_port_t], , ,
2810 [#include <sys/types.h>
2811 #include <netinet/in.h>])
2812
2813 AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
2814         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
2815         [[ size_t foo; foo = 1235; ]])],
2816         [ ac_cv_have_size_t="yes" ], [ ac_cv_have_size_t="no"
2817         ])
2818 ])
2819 if test "x$ac_cv_have_size_t" = "xyes" ; then
2820         AC_DEFINE([HAVE_SIZE_T], [1], [define if you have size_t data type])
2821 fi
2822
2823 AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
2824         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
2825         [[ ssize_t foo; foo = 1235; ]])],
2826         [ ac_cv_have_ssize_t="yes" ], [ ac_cv_have_ssize_t="no"
2827         ])
2828 ])
2829 if test "x$ac_cv_have_ssize_t" = "xyes" ; then
2830         AC_DEFINE([HAVE_SSIZE_T], [1], [define if you have ssize_t data type])
2831 fi
2832
2833 AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
2834         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <time.h> ]],
2835         [[ clock_t foo; foo = 1235; ]])],
2836         [ ac_cv_have_clock_t="yes" ], [ ac_cv_have_clock_t="no"
2837         ])
2838 ])
2839 if test "x$ac_cv_have_clock_t" = "xyes" ; then
2840         AC_DEFINE([HAVE_CLOCK_T], [1], [define if you have clock_t data type])
2841 fi
2842
2843 AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
2844         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2845 #include <sys/types.h>
2846 #include <sys/socket.h>
2847                 ]], [[ sa_family_t foo; foo = 1235; ]])],
2848         [ ac_cv_have_sa_family_t="yes" ],
2849         [ AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2850 #include <sys/types.h>
2851 #include <sys/socket.h>
2852 #include <netinet/in.h>
2853                 ]], [[ sa_family_t foo; foo = 1235; ]])],
2854                 [ ac_cv_have_sa_family_t="yes" ],
2855                 [ ac_cv_have_sa_family_t="no" ]
2856         )
2857         ])
2858 ])
2859 if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
2860         AC_DEFINE([HAVE_SA_FAMILY_T], [1],
2861                 [define if you have sa_family_t data type])
2862 fi
2863
2864 AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
2865         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
2866         [[ pid_t foo; foo = 1235; ]])],
2867         [ ac_cv_have_pid_t="yes" ], [ ac_cv_have_pid_t="no"
2868         ])
2869 ])
2870 if test "x$ac_cv_have_pid_t" = "xyes" ; then
2871         AC_DEFINE([HAVE_PID_T], [1], [define if you have pid_t data type])
2872 fi
2873
2874 AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
2875         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
2876         [[ mode_t foo; foo = 1235; ]])],
2877         [ ac_cv_have_mode_t="yes" ], [ ac_cv_have_mode_t="no"
2878         ])
2879 ])
2880 if test "x$ac_cv_have_mode_t" = "xyes" ; then
2881         AC_DEFINE([HAVE_MODE_T], [1], [define if you have mode_t data type])
2882 fi
2883
2884
2885 AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
2886         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2887 #include <sys/types.h>
2888 #include <sys/socket.h>
2889                 ]], [[ struct sockaddr_storage s; ]])],
2890         [ ac_cv_have_struct_sockaddr_storage="yes" ],
2891         [ ac_cv_have_struct_sockaddr_storage="no"
2892         ])
2893 ])
2894 if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
2895         AC_DEFINE([HAVE_STRUCT_SOCKADDR_STORAGE], [1],
2896                 [define if you have struct sockaddr_storage data type])
2897 fi
2898
2899 AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
2900         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2901 #include <sys/types.h>
2902 #include <netinet/in.h>
2903                 ]], [[ struct sockaddr_in6 s; s.sin6_family = 0; ]])],
2904         [ ac_cv_have_struct_sockaddr_in6="yes" ],
2905         [ ac_cv_have_struct_sockaddr_in6="no"
2906         ])
2907 ])
2908 if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
2909         AC_DEFINE([HAVE_STRUCT_SOCKADDR_IN6], [1],
2910                 [define if you have struct sockaddr_in6 data type])
2911 fi
2912
2913 AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
2914         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2915 #include <sys/types.h>
2916 #include <netinet/in.h>
2917                 ]], [[ struct in6_addr s; s.s6_addr[0] = 0; ]])],
2918         [ ac_cv_have_struct_in6_addr="yes" ],
2919         [ ac_cv_have_struct_in6_addr="no"
2920         ])
2921 ])
2922 if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
2923         AC_DEFINE([HAVE_STRUCT_IN6_ADDR], [1],
2924                 [define if you have struct in6_addr data type])
2925
2926 dnl Now check for sin6_scope_id
2927         AC_CHECK_MEMBERS([struct sockaddr_in6.sin6_scope_id], , ,
2928                 [
2929 #ifdef HAVE_SYS_TYPES_H
2930 #include <sys/types.h>
2931 #endif
2932 #include <netinet/in.h>
2933                 ])
2934 fi
2935
2936 AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
2937         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2938 #include <sys/types.h>
2939 #include <sys/socket.h>
2940 #include <netdb.h>
2941                 ]], [[ struct addrinfo s; s.ai_flags = AI_PASSIVE; ]])],
2942         [ ac_cv_have_struct_addrinfo="yes" ],
2943         [ ac_cv_have_struct_addrinfo="no"
2944         ])
2945 ])
2946 if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
2947         AC_DEFINE([HAVE_STRUCT_ADDRINFO], [1],
2948                 [define if you have struct addrinfo data type])
2949 fi
2950
2951 AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
2952         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/time.h> ]],
2953         [[ struct timeval tv; tv.tv_sec = 1;]])],
2954         [ ac_cv_have_struct_timeval="yes" ],
2955         [ ac_cv_have_struct_timeval="no"
2956         ])
2957 ])
2958 if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
2959         AC_DEFINE([HAVE_STRUCT_TIMEVAL], [1], [define if you have struct timeval])
2960         have_struct_timeval=1
2961 fi
2962
2963 AC_CHECK_TYPES([struct timespec])
2964
2965 # We need int64_t or else certian parts of the compile will fail.
2966 if test "x$ac_cv_have_int64_t" = "xno" && \
2967         test "x$ac_cv_sizeof_long_int" != "x8" && \
2968         test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
2969         echo "OpenSSH requires int64_t support.  Contact your vendor or install"
2970         echo "an alternative compiler (I.E., GCC) before continuing."
2971         echo ""
2972         exit 1;
2973 else
2974 dnl test snprintf (broken on SCO w/gcc)
2975         AC_RUN_IFELSE(
2976                 [AC_LANG_SOURCE([[
2977 #include <stdio.h>
2978 #include <string.h>
2979 #ifdef HAVE_SNPRINTF
2980 main()
2981 {
2982         char buf[50];
2983         char expected_out[50];
2984         int mazsize = 50 ;
2985 #if (SIZEOF_LONG_INT == 8)
2986         long int num = 0x7fffffffffffffff;
2987 #else
2988         long long num = 0x7fffffffffffffffll;
2989 #endif
2990         strcpy(expected_out, "9223372036854775807");
2991         snprintf(buf, mazsize, "%lld", num);
2992         if(strcmp(buf, expected_out) != 0)
2993                 exit(1);
2994         exit(0);
2995 }
2996 #else
2997 main() { exit(0); }
2998 #endif
2999                 ]])], [ true ], [ AC_DEFINE([BROKEN_SNPRINTF]) ],
3000                 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
3001         )
3002 fi
3003
3004 dnl Checks for structure members
3005 OSSH_CHECK_HEADER_FOR_FIELD([ut_host], [utmp.h], [HAVE_HOST_IN_UTMP])
3006 OSSH_CHECK_HEADER_FOR_FIELD([ut_host], [utmpx.h], [HAVE_HOST_IN_UTMPX])
3007 OSSH_CHECK_HEADER_FOR_FIELD([syslen], [utmpx.h], [HAVE_SYSLEN_IN_UTMPX])
3008 OSSH_CHECK_HEADER_FOR_FIELD([ut_pid], [utmp.h], [HAVE_PID_IN_UTMP])
3009 OSSH_CHECK_HEADER_FOR_FIELD([ut_type], [utmp.h], [HAVE_TYPE_IN_UTMP])
3010 OSSH_CHECK_HEADER_FOR_FIELD([ut_type], [utmpx.h], [HAVE_TYPE_IN_UTMPX])
3011 OSSH_CHECK_HEADER_FOR_FIELD([ut_tv], [utmp.h], [HAVE_TV_IN_UTMP])
3012 OSSH_CHECK_HEADER_FOR_FIELD([ut_id], [utmp.h], [HAVE_ID_IN_UTMP])
3013 OSSH_CHECK_HEADER_FOR_FIELD([ut_id], [utmpx.h], [HAVE_ID_IN_UTMPX])
3014 OSSH_CHECK_HEADER_FOR_FIELD([ut_addr], [utmp.h], [HAVE_ADDR_IN_UTMP])
3015 OSSH_CHECK_HEADER_FOR_FIELD([ut_addr], [utmpx.h], [HAVE_ADDR_IN_UTMPX])
3016 OSSH_CHECK_HEADER_FOR_FIELD([ut_addr_v6], [utmp.h], [HAVE_ADDR_V6_IN_UTMP])
3017 OSSH_CHECK_HEADER_FOR_FIELD([ut_addr_v6], [utmpx.h], [HAVE_ADDR_V6_IN_UTMPX])
3018 OSSH_CHECK_HEADER_FOR_FIELD([ut_exit], [utmp.h], [HAVE_EXIT_IN_UTMP])
3019 OSSH_CHECK_HEADER_FOR_FIELD([ut_time], [utmp.h], [HAVE_TIME_IN_UTMP])
3020 OSSH_CHECK_HEADER_FOR_FIELD([ut_time], [utmpx.h], [HAVE_TIME_IN_UTMPX])
3021 OSSH_CHECK_HEADER_FOR_FIELD([ut_tv], [utmpx.h], [HAVE_TV_IN_UTMPX])
3022
3023 AC_CHECK_MEMBERS([struct stat.st_blksize])
3024 AC_CHECK_MEMBER([struct __res_state.retrans], [], [AC_DEFINE([__res_state], [state],
3025         [Define if we don't have struct __res_state in resolv.h])],
3026 [
3027 #include <stdio.h>
3028 #if HAVE_SYS_TYPES_H
3029 # include <sys/types.h>
3030 #endif
3031 #include <netinet/in.h>
3032 #include <arpa/nameser.h>
3033 #include <resolv.h>
3034 ])
3035
3036 AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
3037                 ac_cv_have_ss_family_in_struct_ss, [
3038         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
3039 #include <sys/types.h>
3040 #include <sys/socket.h>
3041                 ]], [[ struct sockaddr_storage s; s.ss_family = 1; ]])],
3042         [ ac_cv_have_ss_family_in_struct_ss="yes" ],
3043         [ ac_cv_have_ss_family_in_struct_ss="no" ])
3044 ])
3045 if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
3046         AC_DEFINE([HAVE_SS_FAMILY_IN_SS], [1], [Fields in struct sockaddr_storage])
3047 fi
3048
3049 AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
3050                 ac_cv_have___ss_family_in_struct_ss, [
3051         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
3052 #include <sys/types.h>
3053 #include <sys/socket.h>
3054                 ]], [[ struct sockaddr_storage s; s.__ss_family = 1; ]])],
3055         [ ac_cv_have___ss_family_in_struct_ss="yes" ],
3056         [ ac_cv_have___ss_family_in_struct_ss="no"
3057         ])
3058 ])
3059 if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
3060         AC_DEFINE([HAVE___SS_FAMILY_IN_SS], [1],
3061                 [Fields in struct sockaddr_storage])
3062 fi
3063
3064 AC_CACHE_CHECK([for pw_class field in struct passwd],
3065                 ac_cv_have_pw_class_in_struct_passwd, [
3066         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <pwd.h> ]],
3067         [[ struct passwd p; p.pw_class = 0; ]])],
3068         [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
3069         [ ac_cv_have_pw_class_in_struct_passwd="no"
3070         ])
3071 ])
3072 if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
3073         AC_DEFINE([HAVE_PW_CLASS_IN_PASSWD], [1],
3074                 [Define if your password has a pw_class field])
3075 fi
3076
3077 AC_CACHE_CHECK([for pw_expire field in struct passwd],
3078                 ac_cv_have_pw_expire_in_struct_passwd, [
3079         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <pwd.h> ]],
3080         [[ struct passwd p; p.pw_expire = 0; ]])],
3081         [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
3082         [ ac_cv_have_pw_expire_in_struct_passwd="no"
3083         ])
3084 ])
3085 if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
3086         AC_DEFINE([HAVE_PW_EXPIRE_IN_PASSWD], [1],
3087                 [Define if your password has a pw_expire field])
3088 fi
3089
3090 AC_CACHE_CHECK([for pw_change field in struct passwd],
3091                 ac_cv_have_pw_change_in_struct_passwd, [
3092         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <pwd.h> ]],
3093         [[ struct passwd p; p.pw_change = 0; ]])],
3094         [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
3095         [ ac_cv_have_pw_change_in_struct_passwd="no"
3096         ])
3097 ])
3098 if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
3099         AC_DEFINE([HAVE_PW_CHANGE_IN_PASSWD], [1],
3100                 [Define if your password has a pw_change field])
3101 fi
3102
3103 AC_CACHE_CHECK([for pw_gecos field in struct passwd],
3104                 ac_cv_have_pw_gecos_in_struct_passwd, [
3105         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <pwd.h> ]],
3106         [[ struct passwd p; p.pw_gecos = 0; ]])],
3107         [ ac_cv_have_pw_gecos_in_struct_passwd="yes" ],
3108         [ ac_cv_have_pw_gecos_in_struct_passwd="no"
3109         ])
3110 ])
3111 if test "x$ac_cv_have_pw_gecos_in_struct_passwd" = "xyes" ; then
3112         AC_DEFINE([HAVE_PW_GECOS_IN_PASSWD], [1],
3113                 [Define if your password has a pw_gecos field])
3114 fi
3115
3116 dnl make sure we're using the real structure members and not defines
3117 AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
3118                 ac_cv_have_accrights_in_msghdr, [
3119         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
3120 #include <sys/types.h>
3121 #include <sys/socket.h>
3122 #include <sys/uio.h>
3123                 ]], [[
3124 #ifdef msg_accrights
3125 #error "msg_accrights is a macro"
3126 exit(1);
3127 #endif
3128 struct msghdr m;
3129 m.msg_accrights = 0;
3130 exit(0);
3131                 ]])],
3132                 [ ac_cv_have_accrights_in_msghdr="yes" ],
3133                 [ ac_cv_have_accrights_in_msghdr="no" ]
3134         )
3135 ])
3136 if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
3137         AC_DEFINE([HAVE_ACCRIGHTS_IN_MSGHDR], [1],
3138                 [Define if your system uses access rights style
3139                 file descriptor passing])
3140 fi
3141
3142 AC_MSG_CHECKING([if struct statvfs.f_fsid is integral type])
3143 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
3144 #include <sys/types.h>
3145 #include <sys/stat.h>
3146 #ifdef HAVE_SYS_TIME_H
3147 # include <sys/time.h>
3148 #endif
3149 #ifdef HAVE_SYS_MOUNT_H
3150 #include <sys/mount.h>
3151 #endif
3152 #ifdef HAVE_SYS_STATVFS_H
3153 #include <sys/statvfs.h>
3154 #endif
3155         ]], [[ struct statvfs s; s.f_fsid = 0; ]])],
3156         [ AC_MSG_RESULT([yes]) ],
3157         [ AC_MSG_RESULT([no])
3158
3159         AC_MSG_CHECKING([if fsid_t has member val])
3160         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
3161 #include <sys/types.h>
3162 #include <sys/statvfs.h>
3163         ]], [[ fsid_t t; t.val[0] = 0; ]])],
3164         [ AC_MSG_RESULT([yes])
3165           AC_DEFINE([FSID_HAS_VAL], [1], [fsid_t has member val]) ],
3166         [ AC_MSG_RESULT([no]) ])
3167
3168         AC_MSG_CHECKING([if f_fsid has member __val])
3169         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
3170 #include <sys/types.h>
3171 #include <sys/statvfs.h>
3172         ]], [[ fsid_t t; t.__val[0] = 0; ]])],
3173         [ AC_MSG_RESULT([yes])
3174           AC_DEFINE([FSID_HAS___VAL], [1], [fsid_t has member __val]) ],
3175         [ AC_MSG_RESULT([no]) ])
3176 ])
3177
3178 AC_CACHE_CHECK([for msg_control field in struct msghdr],
3179                 ac_cv_have_control_in_msghdr, [
3180         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
3181 #include <sys/types.h>
3182 #include <sys/socket.h>
3183 #include <sys/uio.h>
3184                 ]], [[
3185 #ifdef msg_control
3186 #error "msg_control is a macro"
3187 exit(1);
3188 #endif
3189 struct msghdr m;
3190 m.msg_control = 0;
3191 exit(0);
3192                 ]])],
3193                 [ ac_cv_have_control_in_msghdr="yes" ],
3194                 [ ac_cv_have_control_in_msghdr="no" ]
3195         )
3196 ])
3197 if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
3198         AC_DEFINE([HAVE_CONTROL_IN_MSGHDR], [1],
3199                 [Define if your system uses ancillary data style
3200                 file descriptor passing])
3201 fi
3202
3203 AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
3204         AC_LINK_IFELSE([AC_LANG_PROGRAM([[]],
3205                 [[ extern char *__progname; printf("%s", __progname); ]])],
3206         [ ac_cv_libc_defines___progname="yes" ],
3207         [ ac_cv_libc_defines___progname="no"
3208         ])
3209 ])
3210 if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
3211         AC_DEFINE([HAVE___PROGNAME], [1], [Define if libc defines __progname])
3212 fi
3213
3214 AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
3215         AC_LINK_IFELSE([AC_LANG_PROGRAM([[ #include <stdio.h> ]],
3216                 [[ printf("%s", __FUNCTION__); ]])],
3217         [ ac_cv_cc_implements___FUNCTION__="yes" ],
3218         [ ac_cv_cc_implements___FUNCTION__="no"
3219         ])
3220 ])
3221 if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
3222         AC_DEFINE([HAVE___FUNCTION__], [1],
3223                 [Define if compiler implements __FUNCTION__])
3224 fi
3225
3226 AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
3227         AC_LINK_IFELSE([AC_LANG_PROGRAM([[ #include <stdio.h> ]],
3228                 [[ printf("%s", __func__); ]])],
3229         [ ac_cv_cc_implements___func__="yes" ],
3230         [ ac_cv_cc_implements___func__="no"
3231         ])
3232 ])
3233 if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
3234         AC_DEFINE([HAVE___func__], [1], [Define if compiler implements __func__])
3235 fi
3236
3237 AC_CACHE_CHECK([whether va_copy exists], ac_cv_have_va_copy, [
3238         AC_LINK_IFELSE([AC_LANG_PROGRAM([[
3239 #include <stdarg.h>
3240 va_list x,y;
3241                 ]], [[ va_copy(x,y); ]])],
3242         [ ac_cv_have_va_copy="yes" ],
3243         [ ac_cv_have_va_copy="no"
3244         ])
3245 ])
3246 if test "x$ac_cv_have_va_copy" = "xyes" ; then
3247         AC_DEFINE([HAVE_VA_COPY], [1], [Define if va_copy exists])
3248 fi
3249
3250 AC_CACHE_CHECK([whether __va_copy exists], ac_cv_have___va_copy, [
3251         AC_LINK_IFELSE([AC_LANG_PROGRAM([[
3252 #include <stdarg.h>
3253 va_list x,y;
3254                 ]], [[ __va_copy(x,y); ]])],
3255         [ ac_cv_have___va_copy="yes" ], [ ac_cv_have___va_copy="no"
3256         ])
3257 ])
3258 if test "x$ac_cv_have___va_copy" = "xyes" ; then
3259         AC_DEFINE([HAVE___VA_COPY], [1], [Define if __va_copy exists])
3260 fi
3261
3262 AC_CACHE_CHECK([whether getopt has optreset support],
3263                 ac_cv_have_getopt_optreset, [
3264         AC_LINK_IFELSE([AC_LANG_PROGRAM([[ #include <getopt.h> ]],
3265                 [[ extern int optreset; optreset = 0; ]])],
3266         [ ac_cv_have_getopt_optreset="yes" ],
3267         [ ac_cv_have_getopt_optreset="no"
3268         ])
3269 ])
3270 if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
3271         AC_DEFINE([HAVE_GETOPT_OPTRESET], [1],
3272                 [Define if your getopt(3) defines and uses optreset])
3273 fi
3274
3275 AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
3276         AC_LINK_IFELSE([AC_LANG_PROGRAM([[]],
3277 [[ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);]])],
3278         [ ac_cv_libc_defines_sys_errlist="yes" ],
3279         [ ac_cv_libc_defines_sys_errlist="no"
3280         ])
3281 ])
3282 if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
3283         AC_DEFINE([HAVE_SYS_ERRLIST], [1],
3284                 [Define if your system defines sys_errlist[]])
3285 fi
3286
3287
3288 AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
3289         AC_LINK_IFELSE([AC_LANG_PROGRAM([[]],
3290 [[ extern int sys_nerr; printf("%i", sys_nerr);]])],
3291         [ ac_cv_libc_defines_sys_nerr="yes" ],
3292         [ ac_cv_libc_defines_sys_nerr="no"
3293         ])
3294 ])
3295 if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
3296         AC_DEFINE([HAVE_SYS_NERR], [1], [Define if your system defines sys_nerr])
3297 fi
3298
3299 # Check libraries needed by DNS fingerprint support
3300 AC_SEARCH_LIBS([getrrsetbyname], [resolv],
3301         [AC_DEFINE([HAVE_GETRRSETBYNAME], [1],
3302                 [Define if getrrsetbyname() exists])],
3303         [
3304                 # Needed by our getrrsetbyname()
3305                 AC_SEARCH_LIBS([res_query], [resolv])
3306                 AC_SEARCH_LIBS([dn_expand], [resolv])
3307                 AC_MSG_CHECKING([if res_query will link])
3308                 AC_LINK_IFELSE([AC_LANG_PROGRAM([[
3309 #include <sys/types.h>
3310 #include <netinet/in.h>
3311 #include <arpa/nameser.h>
3312 #include <netdb.h>
3313 #include <resolv.h>
3314                                 ]], [[
3315         res_query (0, 0, 0, 0, 0);
3316                                 ]])],
3317                     AC_MSG_RESULT([yes]),
3318                    [AC_MSG_RESULT([no])
3319                     saved_LIBS="$LIBS"
3320                     LIBS="$LIBS -lresolv"
3321                     AC_MSG_CHECKING([for res_query in -lresolv])
3322                     AC_LINK_IFELSE([AC_LANG_PROGRAM([[
3323 #include <sys/types.h>
3324 #include <netinet/in.h>
3325 #include <arpa/nameser.h>
3326 #include <netdb.h>
3327 #include <resolv.h>
3328                                 ]], [[
3329         res_query (0, 0, 0, 0, 0);
3330                                 ]])],
3331                         [AC_MSG_RESULT([yes])],
3332                         [LIBS="$saved_LIBS"
3333                          AC_MSG_RESULT([no])])
3334                     ])
3335                 AC_CHECK_FUNCS([_getshort _getlong])
3336                 AC_CHECK_DECLS([_getshort, _getlong], , ,
3337                     [#include <sys/types.h>
3338                     #include <arpa/nameser.h>])
3339                 AC_CHECK_MEMBER([HEADER.ad],
3340                         [AC_DEFINE([HAVE_HEADER_AD], [1],
3341                             [Define if HEADER.ad exists in arpa/nameser.h])], ,
3342                         [#include <arpa/nameser.h>])
3343         ])
3344
3345 AC_MSG_CHECKING([if struct __res_state _res is an extern])
3346 AC_LINK_IFELSE([AC_LANG_PROGRAM([[
3347 #include <stdio.h>
3348 #if HAVE_SYS_TYPES_H
3349 # include <sys/types.h>
3350 #endif
3351 #include <netinet/in.h>
3352 #include <arpa/nameser.h>
3353 #include <resolv.h>
3354 extern struct __res_state _res;
3355                 ]], [[ ]])],
3356                 [AC_MSG_RESULT([yes])
3357                  AC_DEFINE([HAVE__RES_EXTERN], [1],
3358                     [Define if you have struct __res_state _res as an extern])
3359                 ],
3360                 [ AC_MSG_RESULT([no]) ]
3361 )
3362
3363 # Check whether user wants SELinux support
3364 SELINUX_MSG="no"
3365 LIBSELINUX=""
3366 AC_ARG_WITH([selinux],
3367         [  --with-selinux          Enable SELinux support],
3368         [ if test "x$withval" != "xno" ; then
3369                 save_LIBS="$LIBS"
3370                 AC_DEFINE([WITH_SELINUX], [1],
3371                         [Define if you want SELinux support.])
3372                 SELINUX_MSG="yes"
3373                 AC_CHECK_HEADER([selinux/selinux.h], ,
3374                         AC_MSG_ERROR([SELinux support requires selinux.h header]))
3375                 AC_CHECK_LIB([selinux], [setexeccon],
3376                         [ LIBSELINUX="-lselinux"
3377                           LIBS="$LIBS -lselinux"
3378                         ],
3379                         AC_MSG_ERROR([SELinux support requires libselinux library]))
3380                 SSHLIBS="$SSHLIBS $LIBSELINUX"
3381                 SSHDLIBS="$SSHDLIBS $LIBSELINUX"
3382                 AC_CHECK_FUNCS([getseuserbyname get_default_context_with_level])
3383                 LIBS="$save_LIBS"
3384         fi ]
3385 )
3386 AC_SUBST([SSHLIBS])
3387 AC_SUBST([SSHDLIBS])
3388
3389 # Check whether user wants Kerberos 5 support
3390 KRB5_MSG="no"
3391 AC_ARG_WITH([kerberos5],
3392         [  --with-kerberos5=PATH   Enable Kerberos 5 support],
3393         [ if test "x$withval" != "xno" ; then
3394                 if test "x$withval" = "xyes" ; then
3395                         KRB5ROOT="/usr/local"
3396                 else
3397                         KRB5ROOT=${withval}
3398                 fi
3399
3400                 AC_DEFINE([KRB5], [1], [Define if you want Kerberos 5 support])
3401                 KRB5_MSG="yes"
3402
3403                 AC_PATH_PROG([KRB5CONF], [krb5-config],
3404                              [$KRB5ROOT/bin/krb5-config],
3405                              [$KRB5ROOT/bin:$PATH])
3406                 if test -x $KRB5CONF ; then
3407
3408                         AC_MSG_CHECKING([for gssapi support])
3409                         if $KRB5CONF | grep gssapi >/dev/null ; then
3410                                 AC_MSG_RESULT([yes])
3411                                 AC_DEFINE([GSSAPI], [1],
3412                                         [Define this if you want GSSAPI
3413                                         support in the version 2 protocol])
3414                                 k5confopts=gssapi
3415                         else
3416                                 AC_MSG_RESULT([no])
3417                                 k5confopts=""
3418                         fi
3419                         K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
3420                         K5LIBS="`$KRB5CONF --libs $k5confopts`"
3421                         CPPFLAGS="$CPPFLAGS $K5CFLAGS"
3422                         AC_MSG_CHECKING([whether we are using Heimdal])
3423                         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <krb5.h>
3424                                 ]], [[ char *tmp = heimdal_version; ]])],
3425                                 [ AC_MSG_RESULT([yes])
3426                                 AC_DEFINE([HEIMDAL], [1],
3427                                 [Define this if you are using the Heimdal
3428                                 version of Kerberos V5]) ],
3429                                 [AC_MSG_RESULT([no])
3430                         ])
3431                 else
3432                         CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
3433                         LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
3434                         AC_MSG_CHECKING([whether we are using Heimdal])
3435                         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <krb5.h>
3436                                 ]], [[ char *tmp = heimdal_version; ]])],
3437                                         [ AC_MSG_RESULT([yes])
3438                                          AC_DEFINE([HEIMDAL])
3439                                          K5LIBS="-lkrb5"
3440                                          K5LIBS="$K5LIBS -lcom_err -lasn1"
3441                                          AC_CHECK_LIB([roken], [net_write],
3442                                            [K5LIBS="$K5LIBS -lroken"])
3443                                          AC_CHECK_LIB([des], [des_cbc_encrypt],
3444                                            [K5LIBS="$K5LIBS -ldes"])
3445                                        ], [ AC_MSG_RESULT([no])
3446                                          K5LIBS="-lkrb5 -lk5crypto -lcom_err"
3447
3448                         ])
3449                         AC_SEARCH_LIBS([dn_expand], [resolv])
3450
3451                         AC_CHECK_LIB([gssapi_krb5], [gss_init_sec_context],
3452                                 [ AC_DEFINE([GSSAPI])
3453                                   K5LIBS="-lgssapi_krb5 $K5LIBS" ],
3454                                 [ AC_CHECK_LIB([gssapi], [gss_init_sec_context],
3455                                         [ AC_DEFINE([GSSAPI])
3456                                           K5LIBS="-lgssapi $K5LIBS" ],
3457                                         AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
3458                                         $K5LIBS)
3459                                 ],
3460                                 $K5LIBS)
3461
3462                         AC_CHECK_HEADER([gssapi.h], ,
3463                                 [ unset ac_cv_header_gssapi_h
3464                                   CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
3465                                   AC_CHECK_HEADERS([gssapi.h], ,
3466                                         AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
3467                                   )
3468                                 ]
3469                         )
3470
3471                         oldCPP="$CPPFLAGS"
3472                         CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
3473                         AC_CHECK_HEADER([gssapi_krb5.h], ,
3474                                         [ CPPFLAGS="$oldCPP" ])
3475
3476                 fi
3477                 if test ! -z "$need_dash_r" ; then
3478                         LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
3479                 fi
3480                 if test ! -z "$blibpath" ; then
3481                         blibpath="$blibpath:${KRB5ROOT}/lib"
3482                 fi
3483
3484                 AC_CHECK_HEADERS([gssapi.h gssapi/gssapi.h])
3485                 AC_CHECK_HEADERS([gssapi_krb5.h gssapi/gssapi_krb5.h])
3486                 AC_CHECK_HEADERS([gssapi_generic.h gssapi/gssapi_generic.h])
3487
3488                 LIBS="$LIBS $K5LIBS"
3489                 AC_SEARCH_LIBS([k_hasafs], [kafs], [AC_DEFINE([USE_AFS], [1],
3490                         [Define this if you want to use libkafs' AFS support])])
3491         fi
3492         ]
3493 )
3494
3495 # Looking for programs, paths and files
3496
3497 PRIVSEP_PATH=/var/empty
3498 AC_ARG_WITH([privsep-path],
3499         [  --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
3500         [
3501                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3502                     test "x${withval}" != "xyes"; then
3503                         PRIVSEP_PATH=$withval
3504                 fi
3505         ]
3506 )
3507 AC_SUBST([PRIVSEP_PATH])
3508
3509 AC_ARG_WITH([xauth],
3510         [  --with-xauth=PATH       Specify path to xauth program ],
3511         [
3512                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3513                     test "x${withval}" != "xyes"; then
3514                         xauth_path=$withval
3515                 fi
3516         ],
3517         [
3518                 TestPath="$PATH"
3519                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
3520                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
3521                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
3522                 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
3523                 AC_PATH_PROG([xauth_path], [xauth], , [$TestPath])
3524                 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
3525                         xauth_path="/usr/openwin/bin/xauth"
3526                 fi
3527         ]
3528 )
3529
3530 STRIP_OPT=-s
3531 AC_ARG_ENABLE([strip],
3532         [  --disable-strip         Disable calling strip(1) on install],
3533         [
3534                 if test "x$enableval" = "xno" ; then
3535                         STRIP_OPT=
3536                 fi
3537         ]
3538 )
3539 AC_SUBST([STRIP_OPT])
3540
3541 if test -z "$xauth_path" ; then
3542         XAUTH_PATH="undefined"
3543         AC_SUBST([XAUTH_PATH])
3544 else
3545         AC_DEFINE_UNQUOTED([XAUTH_PATH], ["$xauth_path"],
3546                 [Define if xauth is found in your path])
3547         XAUTH_PATH=$xauth_path
3548         AC_SUBST([XAUTH_PATH])
3549 fi
3550
3551 dnl # --with-maildir=/path/to/mail gets top priority.
3552 dnl # if maildir is set in the platform case statement above we use that.
3553 dnl # Otherwise we run a program to get the dir from system headers.
3554 dnl # We first look for _PATH_MAILDIR then MAILDIR then _PATH_MAIL
3555 dnl # If we find _PATH_MAILDIR we do nothing because that is what
3556 dnl # session.c expects anyway. Otherwise we set to the value found
3557 dnl # stripping any trailing slash. If for some strage reason our program
3558 dnl # does not find what it needs, we default to /var/spool/mail.
3559 # Check for mail directory
3560 AC_ARG_WITH([maildir],
3561     [  --with-maildir=/path/to/mail    Specify your system mail directory],
3562     [
3563         if test "X$withval" != X  &&  test "x$withval" != xno  &&  \
3564             test "x${withval}" != xyes; then
3565                 AC_DEFINE_UNQUOTED([MAIL_DIRECTORY], ["$withval"],
3566             [Set this to your mail directory if you do not have _PATH_MAILDIR])
3567             fi
3568      ],[
3569         if test "X$maildir" != "X"; then
3570             AC_DEFINE_UNQUOTED([MAIL_DIRECTORY], ["$maildir"])
3571         else
3572             AC_MSG_CHECKING([Discovering system mail directory])
3573             AC_RUN_IFELSE(
3574                 [AC_LANG_PROGRAM([[
3575 #include <stdio.h>
3576 #include <string.h>
3577 #ifdef HAVE_PATHS_H
3578 #include <paths.h>
3579 #endif
3580 #ifdef HAVE_MAILLOCK_H
3581 #include <maillock.h>
3582 #endif
3583 #define DATA "conftest.maildir"
3584         ]], [[
3585         FILE *fd;
3586         int rc;
3587
3588         fd = fopen(DATA,"w");
3589         if(fd == NULL)
3590                 exit(1);
3591
3592 #if defined (_PATH_MAILDIR)
3593         if ((rc = fprintf(fd ,"_PATH_MAILDIR:%s\n", _PATH_MAILDIR)) <0)
3594                 exit(1);
3595 #elif defined (MAILDIR)
3596         if ((rc = fprintf(fd ,"MAILDIR:%s\n", MAILDIR)) <0)
3597                 exit(1);
3598 #elif defined (_PATH_MAIL)
3599         if ((rc = fprintf(fd ,"_PATH_MAIL:%s\n", _PATH_MAIL)) <0)
3600                 exit(1);
3601 #else
3602         exit (2);
3603 #endif
3604
3605         exit(0);
3606                 ]])],
3607                 [
3608                     maildir_what=`awk -F: '{print $1}' conftest.maildir`
3609                     maildir=`awk -F: '{print $2}' conftest.maildir \
3610                         | sed 's|/$||'`
3611                     AC_MSG_RESULT([Using: $maildir from $maildir_what])
3612                     if test "x$maildir_what" != "x_PATH_MAILDIR"; then
3613                         AC_DEFINE_UNQUOTED([MAIL_DIRECTORY], ["$maildir"])
3614                     fi
3615                 ],
3616                 [
3617                     if test "X$ac_status" = "X2";then
3618 # our test program didn't find it. Default to /var/spool/mail
3619                         AC_MSG_RESULT([Using: default value of /var/spool/mail])
3620                         AC_DEFINE_UNQUOTED([MAIL_DIRECTORY], ["/var/spool/mail"])
3621                      else
3622                         AC_MSG_RESULT([*** not found ***])
3623                      fi
3624                 ],
3625                 [
3626                         AC_MSG_WARN([cross compiling: use --with-maildir=/path/to/mail])
3627                 ]
3628             )
3629         fi
3630     ]
3631 ) # maildir
3632
3633 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
3634         AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
3635         disable_ptmx_check=yes
3636 fi
3637 if test -z "$no_dev_ptmx" ; then
3638         if test "x$disable_ptmx_check" != "xyes" ; then
3639                 AC_CHECK_FILE(["/dev/ptmx"],
3640                         [
3641                                 AC_DEFINE_UNQUOTED([HAVE_DEV_PTMX], [1],
3642                                         [Define if you have /dev/ptmx])
3643                                 have_dev_ptmx=1
3644                         ]
3645                 )
3646         fi
3647 fi
3648
3649 if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
3650         AC_CHECK_FILE(["/dev/ptc"],
3651                 [
3652                         AC_DEFINE_UNQUOTED([HAVE_DEV_PTS_AND_PTC], [1],
3653                                 [Define if you have /dev/ptc])
3654                         have_dev_ptc=1
3655                 ]
3656         )
3657 else
3658         AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
3659 fi
3660
3661 # Options from here on. Some of these are preset by platform above
3662 AC_ARG_WITH([mantype],
3663         [  --with-mantype=man|cat|doc  Set man page type],
3664         [
3665                 case "$withval" in
3666                 man|cat|doc)
3667                         MANTYPE=$withval
3668                         ;;
3669                 *)
3670                         AC_MSG_ERROR([invalid man type: $withval])
3671                         ;;
3672                 esac
3673         ]
3674 )
3675 if test -z "$MANTYPE"; then
3676         TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
3677         AC_PATH_PROGS([NROFF], [nroff awf], [/bin/false], [$TestPath])
3678         if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
3679                 MANTYPE=doc
3680         elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
3681                 MANTYPE=man
3682         else
3683                 MANTYPE=cat
3684         fi
3685 fi
3686 AC_SUBST([MANTYPE])
3687 if test "$MANTYPE" = "doc"; then
3688         mansubdir=man;
3689 else
3690         mansubdir=$MANTYPE;
3691 fi
3692 AC_SUBST([mansubdir])
3693
3694 # Check whether to enable MD5 passwords
3695 MD5_MSG="no"
3696 AC_ARG_WITH([md5-passwords],
3697         [  --with-md5-passwords    Enable use of MD5 passwords],
3698         [
3699                 if test "x$withval" != "xno" ; then
3700                         AC_DEFINE([HAVE_MD5_PASSWORDS], [1],
3701                                 [Define if you want to allow MD5 passwords])
3702                         MD5_MSG="yes"
3703                 fi
3704         ]
3705 )
3706
3707 # Whether to disable shadow password support
3708 AC_ARG_WITH([shadow],
3709         [  --without-shadow        Disable shadow password support],
3710         [
3711                 if test "x$withval" = "xno" ; then
3712                         AC_DEFINE([DISABLE_SHADOW])
3713                         disable_shadow=yes
3714                 fi
3715         ]
3716 )
3717
3718 if test -z "$disable_shadow" ; then
3719         AC_MSG_CHECKING([if the systems has expire shadow information])
3720         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
3721 #include <sys/types.h>
3722 #include <shadow.h>
3723 struct spwd sp;
3724                 ]], [[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ]])],
3725                 [ sp_expire_available=yes ], [
3726         ])
3727
3728         if test "x$sp_expire_available" = "xyes" ; then
3729                 AC_MSG_RESULT([yes])
3730                 AC_DEFINE([HAS_SHADOW_EXPIRE], [1],
3731                     [Define if you want to use shadow password expire field])
3732         else
3733                 AC_MSG_RESULT([no])
3734         fi
3735 fi
3736
3737 # Use ip address instead of hostname in $DISPLAY
3738 if test ! -z "$IPADDR_IN_DISPLAY" ; then
3739         DISPLAY_HACK_MSG="yes"
3740         AC_DEFINE([IPADDR_IN_DISPLAY], [1],
3741                 [Define if you need to use IP address
3742                 instead of hostname in $DISPLAY])
3743 else
3744         DISPLAY_HACK_MSG="no"
3745         AC_ARG_WITH([ipaddr-display],
3746                 [  --with-ipaddr-display   Use ip address instead of hostname in \$DISPLAY],
3747                 [
3748                         if test "x$withval" != "xno" ; then
3749                                 AC_DEFINE([IPADDR_IN_DISPLAY])
3750                                 DISPLAY_HACK_MSG="yes"
3751                         fi
3752                 ]
3753         )
3754 fi
3755
3756 # check for /etc/default/login and use it if present.
3757 AC_ARG_ENABLE([etc-default-login],
3758         [  --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
3759         [ if test "x$enableval" = "xno"; then
3760                 AC_MSG_NOTICE([/etc/default/login handling disabled])
3761                 etc_default_login=no
3762           else
3763                 etc_default_login=yes
3764           fi ],
3765         [ if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
3766           then
3767                 AC_MSG_WARN([cross compiling: not checking /etc/default/login])
3768                 etc_default_login=no
3769           else
3770                 etc_default_login=yes
3771           fi ]
3772 )
3773
3774 if test "x$etc_default_login" != "xno"; then
3775         AC_CHECK_FILE(["/etc/default/login"],
3776             [ external_path_file=/etc/default/login ])
3777         if test "x$external_path_file" = "x/etc/default/login"; then
3778                 AC_DEFINE([HAVE_ETC_DEFAULT_LOGIN], [1],
3779                         [Define if your system has /etc/default/login])
3780         fi
3781 fi
3782
3783 dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
3784 if test $ac_cv_func_login_getcapbool = "yes" && \
3785         test $ac_cv_header_login_cap_h = "yes" ; then
3786         external_path_file=/etc/login.conf
3787 fi
3788
3789 # Whether to mess with the default path
3790 SERVER_PATH_MSG="(default)"
3791 AC_ARG_WITH([default-path],
3792         [  --with-default-path=    Specify default \$PATH environment for server],
3793         [
3794                 if test "x$external_path_file" = "x/etc/login.conf" ; then
3795                         AC_MSG_WARN([
3796 --with-default-path=PATH has no effect on this system.
3797 Edit /etc/login.conf instead.])
3798                 elif test "x$withval" != "xno" ; then
3799                         if test ! -z "$external_path_file" ; then
3800                                 AC_MSG_WARN([
3801 --with-default-path=PATH will only be used if PATH is not defined in
3802 $external_path_file .])
3803                         fi
3804                         user_path="$withval"
3805                         SERVER_PATH_MSG="$withval"
3806                 fi
3807         ],
3808         [ if test "x$external_path_file" = "x/etc/login.conf" ; then
3809                 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
3810         else
3811                 if test ! -z "$external_path_file" ; then
3812                         AC_MSG_WARN([
3813 If PATH is defined in $external_path_file, ensure the path to scp is included,
3814 otherwise scp will not work.])
3815                 fi
3816                 AC_RUN_IFELSE(
3817                         [AC_LANG_PROGRAM([[
3818 /* find out what STDPATH is */
3819 #include <stdio.h>
3820 #ifdef HAVE_PATHS_H
3821 # include <paths.h>
3822 #endif
3823 #ifndef _PATH_STDPATH
3824 # ifdef _PATH_USERPATH  /* Irix */
3825 #  define _PATH_STDPATH _PATH_USERPATH
3826 # else
3827 #  define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
3828 # endif
3829 #endif
3830 #include <sys/types.h>
3831 #include <sys/stat.h>
3832 #include <fcntl.h>
3833 #define DATA "conftest.stdpath"
3834                         ]], [[
3835         FILE *fd;
3836         int rc;
3837
3838         fd = fopen(DATA,"w");
3839         if(fd == NULL)
3840                 exit(1);
3841
3842         if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
3843                 exit(1);
3844
3845         exit(0);
3846                 ]])],
3847                 [ user_path=`cat conftest.stdpath` ],
3848                 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
3849                 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
3850         )
3851 # make sure $bindir is in USER_PATH so scp will work
3852                 t_bindir=`eval echo ${bindir}`
3853                 case $t_bindir in
3854                         NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
3855                 esac
3856                 case $t_bindir in
3857                         NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
3858                 esac
3859                 echo $user_path | grep ":$t_bindir"  > /dev/null 2>&1
3860                 if test $? -ne 0  ; then
3861                         echo $user_path | grep "^$t_bindir"  > /dev/null 2>&1
3862                         if test $? -ne 0  ; then
3863                                 user_path=$user_path:$t_bindir
3864                                 AC_MSG_RESULT([Adding $t_bindir to USER_PATH so scp will work])
3865                         fi
3866                 fi
3867         fi ]
3868 )
3869 if test "x$external_path_file" != "x/etc/login.conf" ; then
3870         AC_DEFINE_UNQUOTED([USER_PATH], ["$user_path"], [Specify default $PATH])
3871         AC_SUBST([user_path])
3872 fi
3873
3874 # Set superuser path separately to user path
3875 AC_ARG_WITH([superuser-path],
3876         [  --with-superuser-path=  Specify different path for super-user],
3877         [
3878                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3879                     test "x${withval}" != "xyes"; then
3880                         AC_DEFINE_UNQUOTED([SUPERUSER_PATH], ["$withval"],
3881                                 [Define if you want a different $PATH
3882                                 for the superuser])
3883                         superuser_path=$withval
3884                 fi
3885         ]
3886 )
3887
3888
3889 AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
3890 IPV4_IN6_HACK_MSG="no"
3891 AC_ARG_WITH(4in6,
3892         [  --with-4in6             Check for and convert IPv4 in IPv6 mapped addresses],
3893         [
3894                 if test "x$withval" != "xno" ; then
3895                         AC_MSG_RESULT([yes])
3896                         AC_DEFINE([IPV4_IN_IPV6], [1],
3897                                 [Detect IPv4 in IPv6 mapped addresses
3898                                 and treat as IPv4])
3899                         IPV4_IN6_HACK_MSG="yes"
3900                 else
3901                         AC_MSG_RESULT([no])
3902                 fi
3903         ], [
3904                 if test "x$inet6_default_4in6" = "xyes"; then
3905                         AC_MSG_RESULT([yes (default)])
3906                         AC_DEFINE([IPV4_IN_IPV6])
3907                         IPV4_IN6_HACK_MSG="yes"
3908                 else
3909                         AC_MSG_RESULT([no (default)])
3910                 fi
3911         ]
3912 )
3913
3914 # Whether to enable BSD auth support
3915 BSD_AUTH_MSG=no
3916 AC_ARG_WITH([bsd-auth],
3917         [  --with-bsd-auth         Enable BSD auth support],
3918         [
3919                 if test "x$withval" != "xno" ; then
3920                         AC_DEFINE([BSD_AUTH], [1],
3921                                 [Define if you have BSD auth support])
3922                         BSD_AUTH_MSG=yes
3923                 fi
3924         ]
3925 )
3926
3927 # Where to place sshd.pid
3928 piddir=/var/run
3929 # make sure the directory exists
3930 if test ! -d $piddir ; then
3931         piddir=`eval echo ${sysconfdir}`
3932         case $piddir in
3933                 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
3934         esac
3935 fi
3936
3937 AC_ARG_WITH([pid-dir],
3938         [  --with-pid-dir=PATH     Specify location of ssh.pid file],
3939         [
3940                 if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
3941                     test "x${withval}" != "xyes"; then
3942                         piddir=$withval
3943                         if test ! -d $piddir ; then
3944                         AC_MSG_WARN([** no $piddir directory on this system **])
3945                         fi
3946                 fi
3947         ]
3948 )
3949
3950 AC_DEFINE_UNQUOTED([_PATH_SSH_PIDDIR], ["$piddir"],
3951         [Specify location of ssh.pid])
3952 AC_SUBST([piddir])
3953
3954 dnl allow user to disable some login recording features
3955 AC_ARG_ENABLE([lastlog],
3956         [  --disable-lastlog       disable use of lastlog even if detected [no]],
3957         [
3958                 if test "x$enableval" = "xno" ; then
3959                         AC_DEFINE([DISABLE_LASTLOG])
3960                 fi
3961         ]
3962 )
3963 AC_ARG_ENABLE([utmp],
3964         [  --disable-utmp          disable use of utmp even if detected [no]],
3965         [
3966                 if test "x$enableval" = "xno" ; then
3967                         AC_DEFINE([DISABLE_UTMP])
3968                 fi
3969         ]
3970 )
3971 AC_ARG_ENABLE([utmpx],
3972         [  --disable-utmpx         disable use of utmpx even if detected [no]],
3973         [
3974                 if test "x$enableval" = "xno" ; then
3975                         AC_DEFINE([DISABLE_UTMPX], [1],
3976                                 [Define if you don't want to use utmpx])
3977                 fi
3978         ]
3979 )
3980 AC_ARG_ENABLE([wtmp],
3981         [  --disable-wtmp          disable use of wtmp even if detected [no]],
3982         [
3983                 if test "x$enableval" = "xno" ; then
3984                         AC_DEFINE([DISABLE_WTMP])
3985                 fi
3986         ]
3987 )
3988 AC_ARG_ENABLE([wtmpx],
3989         [  --disable-wtmpx         disable use of wtmpx even if detected [no]],
3990         [
3991                 if test "x$enableval" = "xno" ; then
3992                         AC_DEFINE([DISABLE_WTMPX], [1],
3993                                 [Define if you don't want to use wtmpx])
3994                 fi
3995         ]
3996 )
3997 AC_ARG_ENABLE([libutil],
3998         [  --disable-libutil       disable use of libutil (login() etc.) [no]],
3999         [
4000                 if test "x$enableval" = "xno" ; then
4001                         AC_DEFINE([DISABLE_LOGIN])
4002                 fi
4003         ]
4004 )
4005 AC_ARG_ENABLE([pututline],
4006         [  --disable-pututline     disable use of pututline() etc. ([uw]tmp) [no]],
4007         [
4008                 if test "x$enableval" = "xno" ; then
4009                         AC_DEFINE([DISABLE_PUTUTLINE], [1],
4010                                 [Define if you don't want to use pututline()
4011                                 etc. to write [uw]tmp])
4012                 fi
4013         ]
4014 )
4015 AC_ARG_ENABLE([pututxline],
4016         [  --disable-pututxline    disable use of pututxline() etc. ([uw]tmpx) [no]],
4017         [
4018                 if test "x$enableval" = "xno" ; then
4019                         AC_DEFINE([DISABLE_PUTUTXLINE], [1],
4020                                 [Define if you don't want to use pututxline()
4021                                 etc. to write [uw]tmpx])
4022                 fi
4023         ]
4024 )
4025 AC_ARG_WITH([lastlog],
4026   [  --with-lastlog=FILE|DIR specify lastlog location [common locations]],
4027         [
4028                 if test "x$withval" = "xno" ; then
4029                         AC_DEFINE([DISABLE_LASTLOG])
4030                 elif test -n "$withval"  &&  test "x${withval}" != "xyes"; then
4031                         conf_lastlog_location=$withval
4032                 fi
4033         ]
4034 )
4035
4036 dnl lastlog, [uw]tmpx? detection
4037 dnl  NOTE: set the paths in the platform section to avoid the
4038 dnl   need for command-line parameters
4039 dnl lastlog and [uw]tmp are subject to a file search if all else fails
4040
4041 dnl lastlog detection
4042 dnl  NOTE: the code itself will detect if lastlog is a directory
4043 AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
4044 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
4045 #include <sys/types.h>
4046 #include <utmp.h>
4047 #ifdef HAVE_LASTLOG_H
4048 #  include <lastlog.h>
4049 #endif
4050 #ifdef HAVE_PATHS_H
4051 #  include <paths.h>
4052 #endif
4053 #ifdef HAVE_LOGIN_H
4054 # include <login.h>
4055 #endif
4056         ]], [[ char *lastlog = LASTLOG_FILE; ]])],
4057                 [ AC_MSG_RESULT([yes]) ],
4058                 [
4059                 AC_MSG_RESULT([no])
4060                 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
4061                 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
4062 #include <sys/types.h>
4063 #include <utmp.h>
4064 #ifdef HAVE_LASTLOG_H
4065 #  include <lastlog.h>
4066 #endif
4067 #ifdef HAVE_PATHS_H
4068 #  include <paths.h>
4069 #endif
4070                 ]], [[ char *lastlog = _PATH_LASTLOG; ]])],
4071                 [ AC_MSG_RESULT([yes]) ],
4072                 [
4073                         AC_MSG_RESULT([no])
4074                         system_lastlog_path=no
4075                 ])
4076 ])
4077
4078 if test -z "$conf_lastlog_location"; then
4079         if test x"$system_lastlog_path" = x"no" ; then
4080                 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
4081                                 if (test -d "$f" || test -f "$f") ; then
4082                                         conf_lastlog_location=$f
4083                                 fi
4084                 done
4085                 if test -z "$conf_lastlog_location"; then
4086                         AC_MSG_WARN([** Cannot find lastlog **])
4087                         dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
4088                 fi
4089         fi
4090 fi
4091
4092 if test -n "$conf_lastlog_location"; then
4093         AC_DEFINE_UNQUOTED([CONF_LASTLOG_FILE], ["$conf_lastlog_location"],
4094                 [Define if you want to specify the path to your lastlog file])
4095 fi
4096
4097 dnl utmp detection
4098 AC_MSG_CHECKING([if your system defines UTMP_FILE])
4099 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
4100 #include <sys/types.h>
4101 #include <utmp.h>
4102 #ifdef HAVE_PATHS_H
4103 #  include <paths.h>
4104 #endif
4105         ]], [[ char *utmp = UTMP_FILE; ]])],
4106         [ AC_MSG_RESULT([yes]) ],
4107         [ AC_MSG_RESULT([no])
4108           system_utmp_path=no
4109 ])
4110 if test -z "$conf_utmp_location"; then
4111         if test x"$system_utmp_path" = x"no" ; then
4112                 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
4113                         if test -f $f ; then
4114                                 conf_utmp_location=$f
4115                         fi
4116                 done
4117                 if test -z "$conf_utmp_location"; then
4118                         AC_DEFINE([DISABLE_UTMP])
4119                 fi
4120         fi
4121 fi
4122 if test -n "$conf_utmp_location"; then
4123         AC_DEFINE_UNQUOTED([CONF_UTMP_FILE], ["$conf_utmp_location"],
4124                 [Define if you want to specify the path to your utmp file])
4125 fi
4126
4127 dnl wtmp detection
4128 AC_MSG_CHECKING([if your system defines WTMP_FILE])
4129 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
4130 #include <sys/types.h>
4131 #include <utmp.h>
4132 #ifdef HAVE_PATHS_H
4133 #  include <paths.h>
4134 #endif
4135         ]], [[ char *wtmp = WTMP_FILE; ]])],
4136         [ AC_MSG_RESULT([yes]) ],
4137         [ AC_MSG_RESULT([no])
4138           system_wtmp_path=no
4139 ])
4140 if test -z "$conf_wtmp_location"; then
4141         if test x"$system_wtmp_path" = x"no" ; then
4142                 for f in /usr/adm/wtmp /var/log/wtmp; do
4143                         if test -f $f ; then
4144                                 conf_wtmp_location=$f
4145                         fi
4146                 done
4147                 if test -z "$conf_wtmp_location"; then
4148                         AC_DEFINE([DISABLE_WTMP])
4149                 fi
4150         fi
4151 fi
4152 if test -n "$conf_wtmp_location"; then
4153         AC_DEFINE_UNQUOTED([CONF_WTMP_FILE], ["$conf_wtmp_location"],
4154                 [Define if you want to specify the path to your wtmp file])
4155 fi
4156
4157
4158 dnl wtmpx detection
4159 AC_MSG_CHECKING([if your system defines WTMPX_FILE])
4160 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
4161 #include <sys/types.h>
4162 #include <utmp.h>
4163 #ifdef HAVE_UTMPX_H
4164 #include <utmpx.h>
4165 #endif
4166 #ifdef HAVE_PATHS_H
4167 #  include <paths.h>
4168 #endif
4169         ]], [[ char *wtmpx = WTMPX_FILE; ]])],
4170         [ AC_MSG_RESULT([yes]) ],
4171         [ AC_MSG_RESULT([no])
4172           system_wtmpx_path=no
4173 ])
4174 if test -z "$conf_wtmpx_location"; then
4175         if test x"$system_wtmpx_path" = x"no" ; then
4176                 AC_DEFINE([DISABLE_WTMPX])
4177         fi
4178 else
4179         AC_DEFINE_UNQUOTED([CONF_WTMPX_FILE], ["$conf_wtmpx_location"],
4180                 [Define if you want to specify the path to your wtmpx file])
4181 fi
4182
4183
4184 if test ! -z "$blibpath" ; then
4185         LDFLAGS="$LDFLAGS $blibflags$blibpath"
4186         AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
4187 fi
4188
4189 dnl Adding -Werror to CFLAGS early prevents configure tests from running.
4190 dnl Add now.
4191 CFLAGS="$CFLAGS $werror_flags"
4192
4193 if test "x$ac_cv_func_getaddrinfo" != "xyes" ; then
4194         TEST_SSH_IPV6=no
4195 else
4196         TEST_SSH_IPV6=yes
4197 fi
4198 AC_CHECK_DECL([BROKEN_GETADDRINFO],  [TEST_SSH_IPV6=no])
4199 AC_SUBST([TEST_SSH_IPV6], [$TEST_SSH_IPV6])
4200
4201 AC_EXEEXT
4202 AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openssh.xml \
4203         openbsd-compat/Makefile openbsd-compat/regress/Makefile \
4204         survey.sh])
4205 AC_OUTPUT
4206
4207 # Print summary of options
4208
4209 # Someone please show me a better way :)
4210 A=`eval echo ${prefix}` ; A=`eval echo ${A}`
4211 B=`eval echo ${bindir}` ; B=`eval echo ${B}`
4212 C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
4213 D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
4214 E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
4215 F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
4216 G=`eval echo ${piddir}` ; G=`eval echo ${G}`
4217 H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
4218 I=`eval echo ${user_path}` ; I=`eval echo ${I}`
4219 J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
4220
4221 echo ""
4222 echo "OpenSSH has been configured with the following options:"
4223 echo "                     User binaries: $B"
4224 echo "                   System binaries: $C"
4225 echo "               Configuration files: $D"
4226 echo "                   Askpass program: $E"
4227 echo "                      Manual pages: $F"
4228 echo "                          PID file: $G"
4229 echo "  Privilege separation chroot path: $H"
4230 if test "x$external_path_file" = "x/etc/login.conf" ; then
4231 echo "   At runtime, sshd will use the path defined in $external_path_file"
4232 echo "   Make sure the path to scp is present, otherwise scp will not work"
4233 else
4234 echo "            sshd default user PATH: $I"
4235         if test ! -z "$external_path_file"; then
4236 echo "   (If PATH is set in $external_path_file it will be used instead. If"
4237 echo "   used, ensure the path to scp is present, otherwise scp will not work.)"
4238         fi
4239 fi
4240 if test ! -z "$superuser_path" ; then
4241 echo "          sshd superuser user PATH: $J"
4242 fi
4243 echo "                    Manpage format: $MANTYPE"
4244 echo "                       PAM support: $PAM_MSG"
4245 echo "                   OSF SIA support: $SIA_MSG"
4246 echo "                 KerberosV support: $KRB5_MSG"
4247 echo "                   SELinux support: $SELINUX_MSG"
4248 echo "                 Smartcard support: $SCARD_MSG"
4249 echo "                     S/KEY support: $SKEY_MSG"
4250 echo "              TCP Wrappers support: $TCPW_MSG"
4251 echo "              MD5 password support: $MD5_MSG"
4252 echo "                   libedit support: $LIBEDIT_MSG"
4253 echo "  Solaris process contract support: $SPC_MSG"
4254 echo "           Solaris project support: $SP_MSG"
4255 echo "       IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
4256 echo "           Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
4257 echo "                  BSD Auth support: $BSD_AUTH_MSG"
4258 echo "              Random number source: $RAND_MSG"
4259 echo "             Privsep sandbox style: $SANDBOX_STYLE"
4260
4261 echo ""
4262
4263 echo "              Host: ${host}"
4264 echo "          Compiler: ${CC}"
4265 echo "    Compiler flags: ${CFLAGS}"
4266 echo "Preprocessor flags: ${CPPFLAGS}"
4267 echo "      Linker flags: ${LDFLAGS}"
4268 echo "         Libraries: ${LIBS}"
4269 if test ! -z "${SSHDLIBS}"; then
4270 echo "         +for sshd: ${SSHDLIBS}"
4271 fi
4272 if test ! -z "${SSHLIBS}"; then
4273 echo "          +for ssh: ${SSHLIBS}"
4274 fi
4275
4276 echo ""
4277
4278 if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
4279         echo "SVR4 style packages are supported with \"make package\""
4280         echo ""
4281 fi
4282
4283 if test "x$PAM_MSG" = "xyes" ; then
4284         echo "PAM is enabled. You may need to install a PAM control file "
4285         echo "for sshd, otherwise password authentication may fail. "
4286         echo "Example PAM control files can be found in the contrib/ "
4287         echo "subdirectory"
4288         echo ""
4289 fi
4290
4291 if test ! -z "$NO_PEERCHECK" ; then
4292         echo "WARNING: the operating system that you are using does not"
4293         echo "appear to support getpeereid(), getpeerucred() or the"
4294         echo "SO_PEERCRED getsockopt() option. These facilities are used to"
4295         echo "enforce security checks to prevent unauthorised connections to"
4296         echo "ssh-agent. Their absence increases the risk that a malicious"
4297         echo "user can connect to your agent."
4298         echo ""
4299 fi
4300
4301 if test "$AUDIT_MODULE" = "bsm" ; then
4302         echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
4303         echo "See the Solaris section in README.platform for details."
4304 fi