summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--.cvsignore28
-rw-r--r--config.h.in1597
-rwxr-xr-xconfigure18522
-rw-r--r--moduli.074
-rw-r--r--openbsd-compat/.cvsignore1
-rw-r--r--openbsd-compat/regress/.cvsignore5
-rw-r--r--regress/.cvsignore1
-rw-r--r--scard/.cvsignore2
-rw-r--r--scp.0158
-rw-r--r--sftp-server.074
-rw-r--r--sftp.0339
-rw-r--r--ssh-add.0119
-rw-r--r--ssh-agent.0123
-rw-r--r--ssh-keygen.0546
-rw-r--r--ssh-keyscan.0109
-rw-r--r--ssh-keysign.051
-rw-r--r--ssh-pkcs11-helper.025
-rw-r--r--ssh.0922
-rw-r--r--ssh_config.0776
-rw-r--r--sshd.0637
-rw-r--r--sshd_config.0780
21 files changed, 24852 insertions, 37 deletions
diff --git a/.cvsignore b/.cvsignore
deleted file mode 100644
index 9baaa3b4e..000000000
--- a/.cvsignore
+++ /dev/null
@@ -1,28 +0,0 @@
1*.0
2*.out
3Makefile
4autom4te.cache
5buildit.sh
6buildpkg.sh
7config.cache
8config.h
9config.h.in
10config.log
11config.status
12configure
13openssh.xml
14opensshd.init
15scp
16sftp
17sftp-server
18ssh
19ssh-add
20ssh-agent
21ssh-keygen
22ssh-keyscan
23ssh-keysign
24ssh-pkcs11-helper
25sshd
26stamp-h.in
27survey
28survey.sh
diff --git a/config.h.in b/config.h.in
new file mode 100644
index 000000000..ea3591a0b
--- /dev/null
+++ b/config.h.in
@@ -0,0 +1,1597 @@
1/* config.h.in. Generated from configure.ac by autoheader. */
2
3/* Define if building universal (internal helper macro) */
4#undef AC_APPLE_UNIVERSAL_BUILD
5
6/* Define if you have a getaddrinfo that fails for the all-zeros IPv6 address
7 */
8#undef AIX_GETNAMEINFO_HACK
9
10/* Define if your AIX loginfailed() function takes 4 arguments (AIX >= 5.2) */
11#undef AIX_LOGINFAILED_4ARG
12
13/* System only supports IPv4 audit records */
14#undef AU_IPv4
15
16/* Define if your resolver libs need this for getrrsetbyname */
17#undef BIND_8_COMPAT
18
19/* The system has incomplete BSM API */
20#undef BROKEN_BSM_API
21
22/* Define if cmsg_type is not passed correctly */
23#undef BROKEN_CMSG_TYPE
24
25/* getaddrinfo is broken (if present) */
26#undef BROKEN_GETADDRINFO
27
28/* getgroups(0,NULL) will return -1 */
29#undef BROKEN_GETGROUPS
30
31/* FreeBSD glob does not do what we need */
32#undef BROKEN_GLOB
33
34/* Define if you system's inet_ntoa is busted (e.g. Irix gcc issue) */
35#undef BROKEN_INET_NTOA
36
37/* ia_uinfo routines not supported by OS yet */
38#undef BROKEN_LIBIAF
39
40/* Ultrix mmap can't map files */
41#undef BROKEN_MMAP
42
43/* Define if your struct dirent expects you to allocate extra space for d_name
44 */
45#undef BROKEN_ONE_BYTE_DIRENT_D_NAME
46
47/* Can't do comparisons on readv */
48#undef BROKEN_READV_COMPARISON
49
50/* Define if you have a broken realpath. */
51#undef BROKEN_REALPATH
52
53/* Needed for NeXT */
54#undef BROKEN_SAVED_UIDS
55
56/* Define if your setregid() is broken */
57#undef BROKEN_SETREGID
58
59/* Define if your setresgid() is broken */
60#undef BROKEN_SETRESGID
61
62/* Define if your setresuid() is broken */
63#undef BROKEN_SETRESUID
64
65/* Define if your setreuid() is broken */
66#undef BROKEN_SETREUID
67
68/* LynxOS has broken setvbuf() implementation */
69#undef BROKEN_SETVBUF
70
71/* QNX shadow support is broken */
72#undef BROKEN_SHADOW_EXPIRE
73
74/* Define if your snprintf is busted */
75#undef BROKEN_SNPRINTF
76
77/* FreeBSD strnvis does not do what we need */
78#undef BROKEN_STRNVIS
79
80/* tcgetattr with ICANON may hang */
81#undef BROKEN_TCGETATTR_ICANON
82
83/* updwtmpx is broken (if present) */
84#undef BROKEN_UPDWTMPX
85
86/* Define if you have BSD auth support */
87#undef BSD_AUTH
88
89/* Define if you want to specify the path to your lastlog file */
90#undef CONF_LASTLOG_FILE
91
92/* Define if you want to specify the path to your utmp file */
93#undef CONF_UTMP_FILE
94
95/* Define if you want to specify the path to your wtmpx file */
96#undef CONF_WTMPX_FILE
97
98/* Define if you want to specify the path to your wtmp file */
99#undef CONF_WTMP_FILE
100
101/* Define if your platform needs to skip post auth file descriptor passing */
102#undef DISABLE_FD_PASSING
103
104/* Define if you don't want to use lastlog */
105#undef DISABLE_LASTLOG
106
107/* Define if you don't want to use your system's login() call */
108#undef DISABLE_LOGIN
109
110/* Define if you don't want to use pututline() etc. to write [uw]tmp */
111#undef DISABLE_PUTUTLINE
112
113/* Define if you don't want to use pututxline() etc. to write [uw]tmpx */
114#undef DISABLE_PUTUTXLINE
115
116/* Define if you want to disable shadow passwords */
117#undef DISABLE_SHADOW
118
119/* Define if you don't want to use utmp */
120#undef DISABLE_UTMP
121
122/* Define if you don't want to use utmpx */
123#undef DISABLE_UTMPX
124
125/* Define if you don't want to use wtmp */
126#undef DISABLE_WTMP
127
128/* Define if you don't want to use wtmpx */
129#undef DISABLE_WTMPX
130
131/* Enable for PKCS#11 support */
132#undef ENABLE_PKCS11
133
134/* File names may not contain backslash characters */
135#undef FILESYSTEM_NO_BACKSLASH
136
137/* fsid_t has member val */
138#undef FSID_HAS_VAL
139
140/* fsid_t has member __val */
141#undef FSID_HAS___VAL
142
143/* Define to 1 if the `getpgrp' function requires zero arguments. */
144#undef GETPGRP_VOID
145
146/* Conflicting defs for getspnam */
147#undef GETSPNAM_CONFLICTING_DEFS
148
149/* Define if your system glob() function has the GLOB_ALTDIRFUNC extension */
150#undef GLOB_HAS_ALTDIRFUNC
151
152/* Define if your system glob() function has gl_matchc options in glob_t */
153#undef GLOB_HAS_GL_MATCHC
154
155/* Define if your system glob() function has gl_statv options in glob_t */
156#undef GLOB_HAS_GL_STATV
157
158/* Define this if you want GSSAPI support in the version 2 protocol */
159#undef GSSAPI
160
161/* Define if you want to use shadow password expire field */
162#undef HAS_SHADOW_EXPIRE
163
164/* Define if your system uses access rights style file descriptor passing */
165#undef HAVE_ACCRIGHTS_IN_MSGHDR
166
167/* Define if you have ut_addr in utmp.h */
168#undef HAVE_ADDR_IN_UTMP
169
170/* Define if you have ut_addr in utmpx.h */
171#undef HAVE_ADDR_IN_UTMPX
172
173/* Define if you have ut_addr_v6 in utmp.h */
174#undef HAVE_ADDR_V6_IN_UTMP
175
176/* Define if you have ut_addr_v6 in utmpx.h */
177#undef HAVE_ADDR_V6_IN_UTMPX
178
179/* Define to 1 if you have the `arc4random' function. */
180#undef HAVE_ARC4RANDOM
181
182/* Define to 1 if you have the `arc4random_buf' function. */
183#undef HAVE_ARC4RANDOM_BUF
184
185/* Define to 1 if you have the `arc4random_uniform' function. */
186#undef HAVE_ARC4RANDOM_UNIFORM
187
188/* Define to 1 if you have the `asprintf' function. */
189#undef HAVE_ASPRINTF
190
191/* OpenBSD's gcc has bounded */
192#undef HAVE_ATTRIBUTE__BOUNDED__
193
194/* Have attribute nonnull */
195#undef HAVE_ATTRIBUTE__NONNULL__
196
197/* OpenBSD's gcc has sentinel */
198#undef HAVE_ATTRIBUTE__SENTINEL__
199
200/* Define to 1 if you have the `aug_get_machine' function. */
201#undef HAVE_AUG_GET_MACHINE
202
203/* Define to 1 if you have the `b64_ntop' function. */
204#undef HAVE_B64_NTOP
205
206/* Define to 1 if you have the `b64_pton' function. */
207#undef HAVE_B64_PTON
208
209/* Define if you have the basename function. */
210#undef HAVE_BASENAME
211
212/* Define to 1 if you have the `bcopy' function. */
213#undef HAVE_BCOPY
214
215/* Define to 1 if you have the `bindresvport_sa' function. */
216#undef HAVE_BINDRESVPORT_SA
217
218/* Define to 1 if you have the `BN_is_prime_ex' function. */
219#undef HAVE_BN_IS_PRIME_EX
220
221/* Define to 1 if you have the <bsd/libutil.h> header file. */
222#undef HAVE_BSD_LIBUTIL_H
223
224/* Define to 1 if you have the <bsm/audit.h> header file. */
225#undef HAVE_BSM_AUDIT_H
226
227/* Define to 1 if you have the <bstring.h> header file. */
228#undef HAVE_BSTRING_H
229
230/* Define to 1 if you have the `clock' function. */
231#undef HAVE_CLOCK
232
233/* define if you have clock_t data type */
234#undef HAVE_CLOCK_T
235
236/* Define to 1 if you have the `closefrom' function. */
237#undef HAVE_CLOSEFROM
238
239/* Define if gai_strerror() returns const char * */
240#undef HAVE_CONST_GAI_STRERROR_PROTO
241
242/* Define if your system uses ancillary data style file descriptor passing */
243#undef HAVE_CONTROL_IN_MSGHDR
244
245/* Define to 1 if you have the <crypto/sha2.h> header file. */
246#undef HAVE_CRYPTO_SHA2_H
247
248/* Define to 1 if you have the <crypt.h> header file. */
249#undef HAVE_CRYPT_H
250
251/* Define if you are on Cygwin */
252#undef HAVE_CYGWIN
253
254/* Define if your libraries define daemon() */
255#undef HAVE_DAEMON
256
257/* Define to 1 if you have the declaration of `authenticate', and to 0 if you
258 don't. */
259#undef HAVE_DECL_AUTHENTICATE
260
261/* Define to 1 if you have the declaration of `GLOB_NOMATCH', and to 0 if you
262 don't. */
263#undef HAVE_DECL_GLOB_NOMATCH
264
265/* Define to 1 if you have the declaration of `GSS_C_NT_HOSTBASED_SERVICE',
266 and to 0 if you don't. */
267#undef HAVE_DECL_GSS_C_NT_HOSTBASED_SERVICE
268
269/* Define to 1 if you have the declaration of `h_errno', and to 0 if you
270 don't. */
271#undef HAVE_DECL_H_ERRNO
272
273/* Define to 1 if you have the declaration of `loginfailed', and to 0 if you
274 don't. */
275#undef HAVE_DECL_LOGINFAILED
276
277/* Define to 1 if you have the declaration of `loginrestrictions', and to 0 if
278 you don't. */
279#undef HAVE_DECL_LOGINRESTRICTIONS
280
281/* Define to 1 if you have the declaration of `loginsuccess', and to 0 if you
282 don't. */
283#undef HAVE_DECL_LOGINSUCCESS
284
285/* Define to 1 if you have the declaration of `MAXSYMLINKS', and to 0 if you
286 don't. */
287#undef HAVE_DECL_MAXSYMLINKS
288
289/* Define to 1 if you have the declaration of `offsetof', and to 0 if you
290 don't. */
291#undef HAVE_DECL_OFFSETOF
292
293/* Define to 1 if you have the declaration of `O_NONBLOCK', and to 0 if you
294 don't. */
295#undef HAVE_DECL_O_NONBLOCK
296
297/* Define to 1 if you have the declaration of `passwdexpired', and to 0 if you
298 don't. */
299#undef HAVE_DECL_PASSWDEXPIRED
300
301/* Define to 1 if you have the declaration of `setauthdb', and to 0 if you
302 don't. */
303#undef HAVE_DECL_SETAUTHDB
304
305/* Define to 1 if you have the declaration of `SHUT_RD', and to 0 if you
306 don't. */
307#undef HAVE_DECL_SHUT_RD
308
309/* Define to 1 if you have the declaration of `writev', and to 0 if you don't.
310 */
311#undef HAVE_DECL_WRITEV
312
313/* Define to 1 if you have the declaration of `_getlong', and to 0 if you
314 don't. */
315#undef HAVE_DECL__GETLONG
316
317/* Define to 1 if you have the declaration of `_getshort', and to 0 if you
318 don't. */
319#undef HAVE_DECL__GETSHORT
320
321/* Define if you have /dev/ptmx */
322#undef HAVE_DEV_PTMX
323
324/* Define if you have /dev/ptc */
325#undef HAVE_DEV_PTS_AND_PTC
326
327/* Define to 1 if you have the <dirent.h> header file. */
328#undef HAVE_DIRENT_H
329
330/* Define to 1 if you have the `dirfd' function. */
331#undef HAVE_DIRFD
332
333/* Define to 1 if you have the `dirname' function. */
334#undef HAVE_DIRNAME
335
336/* Define to 1 if you have the `DSA_generate_parameters_ex' function. */
337#undef HAVE_DSA_GENERATE_PARAMETERS_EX
338
339/* Define to 1 if you have the <elf.h> header file. */
340#undef HAVE_ELF_H
341
342/* Define to 1 if you have the <endian.h> header file. */
343#undef HAVE_ENDIAN_H
344
345/* Define to 1 if you have the `endutent' function. */
346#undef HAVE_ENDUTENT
347
348/* Define to 1 if you have the `endutxent' function. */
349#undef HAVE_ENDUTXENT
350
351/* Define if your system has /etc/default/login */
352#undef HAVE_ETC_DEFAULT_LOGIN
353
354/* Define if libcrypto has EVP_CIPHER_CTX_ctrl */
355#undef HAVE_EVP_CIPHER_CTX_CTRL
356
357/* Define to 1 if you have the `EVP_sha256' function. */
358#undef HAVE_EVP_SHA256
359
360/* Define if you have ut_exit in utmp.h */
361#undef HAVE_EXIT_IN_UTMP
362
363/* Define to 1 if you have the `fchmod' function. */
364#undef HAVE_FCHMOD
365
366/* Define to 1 if you have the `fchown' function. */
367#undef HAVE_FCHOWN
368
369/* Use F_CLOSEM fcntl for closefrom */
370#undef HAVE_FCNTL_CLOSEM
371
372/* Define to 1 if you have the <fcntl.h> header file. */
373#undef HAVE_FCNTL_H
374
375/* Define to 1 if you have the <features.h> header file. */
376#undef HAVE_FEATURES_H
377
378/* Define to 1 if you have the <floatingpoint.h> header file. */
379#undef HAVE_FLOATINGPOINT_H
380
381/* Define to 1 if you have the `fmt_scaled' function. */
382#undef HAVE_FMT_SCALED
383
384/* Define to 1 if you have the `freeaddrinfo' function. */
385#undef HAVE_FREEADDRINFO
386
387/* Define to 1 if the system has the type `fsblkcnt_t'. */
388#undef HAVE_FSBLKCNT_T
389
390/* Define to 1 if the system has the type `fsfilcnt_t'. */
391#undef HAVE_FSFILCNT_T
392
393/* Define to 1 if you have the `fstatvfs' function. */
394#undef HAVE_FSTATVFS
395
396/* Define to 1 if you have the `futimes' function. */
397#undef HAVE_FUTIMES
398
399/* Define to 1 if you have the `gai_strerror' function. */
400#undef HAVE_GAI_STRERROR
401
402/* Define to 1 if you have the `getaddrinfo' function. */
403#undef HAVE_GETADDRINFO
404
405/* Define to 1 if you have the `getaudit' function. */
406#undef HAVE_GETAUDIT
407
408/* Define to 1 if you have the `getaudit_addr' function. */
409#undef HAVE_GETAUDIT_ADDR
410
411/* Define to 1 if you have the `getcwd' function. */
412#undef HAVE_GETCWD
413
414/* Define to 1 if you have the `getgrouplist' function. */
415#undef HAVE_GETGROUPLIST
416
417/* Define to 1 if you have the `getgrset' function. */
418#undef HAVE_GETGRSET
419
420/* Define to 1 if you have the `getlastlogxbyname' function. */
421#undef HAVE_GETLASTLOGXBYNAME
422
423/* Define to 1 if you have the `getluid' function. */
424#undef HAVE_GETLUID
425
426/* Define to 1 if you have the `getnameinfo' function. */
427#undef HAVE_GETNAMEINFO
428
429/* Define to 1 if you have the `getopt' function. */
430#undef HAVE_GETOPT
431
432/* Define to 1 if you have the <getopt.h> header file. */
433#undef HAVE_GETOPT_H
434
435/* Define if your getopt(3) defines and uses optreset */
436#undef HAVE_GETOPT_OPTRESET
437
438/* Define if your libraries define getpagesize() */
439#undef HAVE_GETPAGESIZE
440
441/* Define to 1 if you have the `getpeereid' function. */
442#undef HAVE_GETPEEREID
443
444/* Define to 1 if you have the `getpeerucred' function. */
445#undef HAVE_GETPEERUCRED
446
447/* Define to 1 if you have the `getpgid' function. */
448#undef HAVE_GETPGID
449
450/* Define to 1 if you have the `getpgrp' function. */
451#undef HAVE_GETPGRP
452
453/* Define to 1 if you have the `getpwanam' function. */
454#undef HAVE_GETPWANAM
455
456/* Define to 1 if you have the `getrlimit' function. */
457#undef HAVE_GETRLIMIT
458
459/* Define if getrrsetbyname() exists */
460#undef HAVE_GETRRSETBYNAME
461
462/* Define to 1 if you have the `getrusage' function. */
463#undef HAVE_GETRUSAGE
464
465/* Define to 1 if you have the `getseuserbyname' function. */
466#undef HAVE_GETSEUSERBYNAME
467
468/* Define to 1 if you have the `gettimeofday' function. */
469#undef HAVE_GETTIMEOFDAY
470
471/* Define to 1 if you have the `getttyent' function. */
472#undef HAVE_GETTTYENT
473
474/* Define to 1 if you have the `getutent' function. */
475#undef HAVE_GETUTENT
476
477/* Define to 1 if you have the `getutid' function. */
478#undef HAVE_GETUTID
479
480/* Define to 1 if you have the `getutline' function. */
481#undef HAVE_GETUTLINE
482
483/* Define to 1 if you have the `getutxent' function. */
484#undef HAVE_GETUTXENT
485
486/* Define to 1 if you have the `getutxid' function. */
487#undef HAVE_GETUTXID
488
489/* Define to 1 if you have the `getutxline' function. */
490#undef HAVE_GETUTXLINE
491
492/* Define to 1 if you have the `getutxuser' function. */
493#undef HAVE_GETUTXUSER
494
495/* Define to 1 if you have the `get_default_context_with_level' function. */
496#undef HAVE_GET_DEFAULT_CONTEXT_WITH_LEVEL
497
498/* Define to 1 if you have the `glob' function. */
499#undef HAVE_GLOB
500
501/* Define to 1 if you have the <glob.h> header file. */
502#undef HAVE_GLOB_H
503
504/* Define to 1 if you have the `group_from_gid' function. */
505#undef HAVE_GROUP_FROM_GID
506
507/* Define to 1 if you have the <gssapi_generic.h> header file. */
508#undef HAVE_GSSAPI_GENERIC_H
509
510/* Define to 1 if you have the <gssapi/gssapi_generic.h> header file. */
511#undef HAVE_GSSAPI_GSSAPI_GENERIC_H
512
513/* Define to 1 if you have the <gssapi/gssapi.h> header file. */
514#undef HAVE_GSSAPI_GSSAPI_H
515
516/* Define to 1 if you have the <gssapi/gssapi_krb5.h> header file. */
517#undef HAVE_GSSAPI_GSSAPI_KRB5_H
518
519/* Define to 1 if you have the <gssapi.h> header file. */
520#undef HAVE_GSSAPI_H
521
522/* Define to 1 if you have the <gssapi_krb5.h> header file. */
523#undef HAVE_GSSAPI_KRB5_H
524
525/* Define if HEADER.ad exists in arpa/nameser.h */
526#undef HAVE_HEADER_AD
527
528/* Define to 1 if you have the `HMAC_CTX_init' function. */
529#undef HAVE_HMAC_CTX_INIT
530
531/* Define if you have ut_host in utmp.h */
532#undef HAVE_HOST_IN_UTMP
533
534/* Define if you have ut_host in utmpx.h */
535#undef HAVE_HOST_IN_UTMPX
536
537/* Define to 1 if you have the <iaf.h> header file. */
538#undef HAVE_IAF_H
539
540/* Define to 1 if you have the <ia.h> header file. */
541#undef HAVE_IA_H
542
543/* Define if you have ut_id in utmp.h */
544#undef HAVE_ID_IN_UTMP
545
546/* Define if you have ut_id in utmpx.h */
547#undef HAVE_ID_IN_UTMPX
548
549/* Define to 1 if you have the `inet_aton' function. */
550#undef HAVE_INET_ATON
551
552/* Define to 1 if you have the `inet_ntoa' function. */
553#undef HAVE_INET_NTOA
554
555/* Define to 1 if you have the `inet_ntop' function. */
556#undef HAVE_INET_NTOP
557
558/* Define to 1 if you have the `innetgr' function. */
559#undef HAVE_INNETGR
560
561/* define if you have int64_t data type */
562#undef HAVE_INT64_T
563
564/* Define to 1 if you have the <inttypes.h> header file. */
565#undef HAVE_INTTYPES_H
566
567/* define if you have intxx_t data type */
568#undef HAVE_INTXX_T
569
570/* Define to 1 if the system has the type `in_addr_t'. */
571#undef HAVE_IN_ADDR_T
572
573/* Define to 1 if the system has the type `in_port_t'. */
574#undef HAVE_IN_PORT_T
575
576/* Define if you have isblank(3C). */
577#undef HAVE_ISBLANK
578
579/* Define to 1 if you have the <lastlog.h> header file. */
580#undef HAVE_LASTLOG_H
581
582/* Define if you want ldns support */
583#undef HAVE_LDNS
584
585/* Define to 1 if you have the <libaudit.h> header file. */
586#undef HAVE_LIBAUDIT_H
587
588/* Define to 1 if you have the `bsm' library (-lbsm). */
589#undef HAVE_LIBBSM
590
591/* Define to 1 if you have the `crypt' library (-lcrypt). */
592#undef HAVE_LIBCRYPT
593
594/* Define to 1 if you have the `dl' library (-ldl). */
595#undef HAVE_LIBDL
596
597/* Define to 1 if you have the <libgen.h> header file. */
598#undef HAVE_LIBGEN_H
599
600/* Define if system has libiaf that supports set_id */
601#undef HAVE_LIBIAF
602
603/* Define to 1 if you have the `network' library (-lnetwork). */
604#undef HAVE_LIBNETWORK
605
606/* Define to 1 if you have the `nsl' library (-lnsl). */
607#undef HAVE_LIBNSL
608
609/* Define to 1 if you have the `pam' library (-lpam). */
610#undef HAVE_LIBPAM
611
612/* Define to 1 if you have the `socket' library (-lsocket). */
613#undef HAVE_LIBSOCKET
614
615/* Define to 1 if you have the <libutil.h> header file. */
616#undef HAVE_LIBUTIL_H
617
618/* Define to 1 if you have the `xnet' library (-lxnet). */
619#undef HAVE_LIBXNET
620
621/* Define to 1 if you have the `z' library (-lz). */
622#undef HAVE_LIBZ
623
624/* Define to 1 if you have the <limits.h> header file. */
625#undef HAVE_LIMITS_H
626
627/* Define to 1 if you have the <linux/audit.h> header file. */
628#undef HAVE_LINUX_AUDIT_H
629
630/* Define to 1 if you have the <linux/filter.h> header file. */
631#undef HAVE_LINUX_FILTER_H
632
633/* Define to 1 if you have the <linux/if_tun.h> header file. */
634#undef HAVE_LINUX_IF_TUN_H
635
636/* Define to 1 if you have the <linux/seccomp.h> header file. */
637#undef HAVE_LINUX_SECCOMP_H
638
639/* Define to 1 if you have the `login' function. */
640#undef HAVE_LOGIN
641
642/* Define to 1 if you have the <login_cap.h> header file. */
643#undef HAVE_LOGIN_CAP_H
644
645/* Define to 1 if you have the `login_getcapbool' function. */
646#undef HAVE_LOGIN_GETCAPBOOL
647
648/* Define to 1 if you have the <login.h> header file. */
649#undef HAVE_LOGIN_H
650
651/* Define to 1 if you have the `logout' function. */
652#undef HAVE_LOGOUT
653
654/* Define to 1 if you have the `logwtmp' function. */
655#undef HAVE_LOGWTMP
656
657/* Define to 1 if the system has the type `long double'. */
658#undef HAVE_LONG_DOUBLE
659
660/* Define to 1 if the system has the type `long long'. */
661#undef HAVE_LONG_LONG
662
663/* Define to 1 if you have the <maillock.h> header file. */
664#undef HAVE_MAILLOCK_H
665
666/* Define to 1 if you have the `md5_crypt' function. */
667#undef HAVE_MD5_CRYPT
668
669/* Define if you want to allow MD5 passwords */
670#undef HAVE_MD5_PASSWORDS
671
672/* Define to 1 if you have the `memmove' function. */
673#undef HAVE_MEMMOVE
674
675/* Define to 1 if you have the <memory.h> header file. */
676#undef HAVE_MEMORY_H
677
678/* Define to 1 if you have the `mkdtemp' function. */
679#undef HAVE_MKDTEMP
680
681/* Define to 1 if you have the `mmap' function. */
682#undef HAVE_MMAP
683
684/* define if you have mode_t data type */
685#undef HAVE_MODE_T
686
687/* Some systems put nanosleep outside of libc */
688#undef HAVE_NANOSLEEP
689
690/* Define to 1 if you have the <ndir.h> header file. */
691#undef HAVE_NDIR_H
692
693/* Define to 1 if you have the <netdb.h> header file. */
694#undef HAVE_NETDB_H
695
696/* Define to 1 if you have the <netgroup.h> header file. */
697#undef HAVE_NETGROUP_H
698
699/* Define to 1 if you have the <net/if_tun.h> header file. */
700#undef HAVE_NET_IF_TUN_H
701
702/* Define if you are on NeXT */
703#undef HAVE_NEXT
704
705/* Define to 1 if you have the `ngetaddrinfo' function. */
706#undef HAVE_NGETADDRINFO
707
708/* Define to 1 if you have the `nsleep' function. */
709#undef HAVE_NSLEEP
710
711/* Define to 1 if you have the `ogetaddrinfo' function. */
712#undef HAVE_OGETADDRINFO
713
714/* Define if you have an old version of PAM which takes only one argument to
715 pam_strerror */
716#undef HAVE_OLD_PAM
717
718/* Define to 1 if you have the `openlog_r' function. */
719#undef HAVE_OPENLOG_R
720
721/* Define to 1 if you have the `openpty' function. */
722#undef HAVE_OPENPTY
723
724/* Define if your ssl headers are included with #include <openssl/header.h> */
725#undef HAVE_OPENSSL
726
727/* Define if you have Digital Unix Security Integration Architecture */
728#undef HAVE_OSF_SIA
729
730/* Define to 1 if you have the `pam_getenvlist' function. */
731#undef HAVE_PAM_GETENVLIST
732
733/* Define to 1 if you have the <pam/pam_appl.h> header file. */
734#undef HAVE_PAM_PAM_APPL_H
735
736/* Define to 1 if you have the `pam_putenv' function. */
737#undef HAVE_PAM_PUTENV
738
739/* Define to 1 if you have the <paths.h> header file. */
740#undef HAVE_PATHS_H
741
742/* Define if you have ut_pid in utmp.h */
743#undef HAVE_PID_IN_UTMP
744
745/* define if you have pid_t data type */
746#undef HAVE_PID_T
747
748/* Define to 1 if you have the `poll' function. */
749#undef HAVE_POLL
750
751/* Define to 1 if you have the <poll.h> header file. */
752#undef HAVE_POLL_H
753
754/* Define to 1 if you have the `prctl' function. */
755#undef HAVE_PRCTL
756
757/* Define if you have /proc/$pid/fd */
758#undef HAVE_PROC_PID
759
760/* Define to 1 if you have the `pstat' function. */
761#undef HAVE_PSTAT
762
763/* Define to 1 if you have the <pty.h> header file. */
764#undef HAVE_PTY_H
765
766/* Define to 1 if you have the `pututline' function. */
767#undef HAVE_PUTUTLINE
768
769/* Define to 1 if you have the `pututxline' function. */
770#undef HAVE_PUTUTXLINE
771
772/* Define if your password has a pw_change field */
773#undef HAVE_PW_CHANGE_IN_PASSWD
774
775/* Define if your password has a pw_class field */
776#undef HAVE_PW_CLASS_IN_PASSWD
777
778/* Define if your password has a pw_expire field */
779#undef HAVE_PW_EXPIRE_IN_PASSWD
780
781/* Define to 1 if you have the `readpassphrase' function. */
782#undef HAVE_READPASSPHRASE
783
784/* Define to 1 if you have the <readpassphrase.h> header file. */
785#undef HAVE_READPASSPHRASE_H
786
787/* Define to 1 if you have the `realpath' function. */
788#undef HAVE_REALPATH
789
790/* Define to 1 if you have the `recvmsg' function. */
791#undef HAVE_RECVMSG
792
793/* sys/resource.h has RLIMIT_NPROC */
794#undef HAVE_RLIMIT_NPROC
795
796/* Define to 1 if you have the <rpc/types.h> header file. */
797#undef HAVE_RPC_TYPES_H
798
799/* Define to 1 if you have the `rresvport_af' function. */
800#undef HAVE_RRESVPORT_AF
801
802/* Define to 1 if you have the `RSA_generate_key_ex' function. */
803#undef HAVE_RSA_GENERATE_KEY_EX
804
805/* Define to 1 if you have the `RSA_get_default_method' function. */
806#undef HAVE_RSA_GET_DEFAULT_METHOD
807
808/* Define to 1 if you have the <sandbox.h> header file. */
809#undef HAVE_SANDBOX_H
810
811/* Define to 1 if you have the `sandbox_init' function. */
812#undef HAVE_SANDBOX_INIT
813
814/* define if you have sa_family_t data type */
815#undef HAVE_SA_FAMILY_T
816
817/* Define if you have SecureWare-based protected password database */
818#undef HAVE_SECUREWARE
819
820/* Define to 1 if you have the <security/pam_appl.h> header file. */
821#undef HAVE_SECURITY_PAM_APPL_H
822
823/* Define to 1 if you have the `sendmsg' function. */
824#undef HAVE_SENDMSG
825
826/* Define to 1 if you have the `setauthdb' function. */
827#undef HAVE_SETAUTHDB
828
829/* Define to 1 if you have the `setdtablesize' function. */
830#undef HAVE_SETDTABLESIZE
831
832/* Define to 1 if you have the `setegid' function. */
833#undef HAVE_SETEGID
834
835/* Define to 1 if you have the `setenv' function. */
836#undef HAVE_SETENV
837
838/* Define to 1 if you have the `seteuid' function. */
839#undef HAVE_SETEUID
840
841/* Define to 1 if you have the `setgroupent' function. */
842#undef HAVE_SETGROUPENT
843
844/* Define to 1 if you have the `setgroups' function. */
845#undef HAVE_SETGROUPS
846
847/* Define to 1 if you have the `setlinebuf' function. */
848#undef HAVE_SETLINEBUF
849
850/* Define to 1 if you have the `setlogin' function. */
851#undef HAVE_SETLOGIN
852
853/* Define to 1 if you have the `setluid' function. */
854#undef HAVE_SETLUID
855
856/* Define to 1 if you have the `setpassent' function. */
857#undef HAVE_SETPASSENT
858
859/* Define to 1 if you have the `setpcred' function. */
860#undef HAVE_SETPCRED
861
862/* Define to 1 if you have the `setproctitle' function. */
863#undef HAVE_SETPROCTITLE
864
865/* Define to 1 if you have the `setregid' function. */
866#undef HAVE_SETREGID
867
868/* Define to 1 if you have the `setresgid' function. */
869#undef HAVE_SETRESGID
870
871/* Define to 1 if you have the `setresuid' function. */
872#undef HAVE_SETRESUID
873
874/* Define to 1 if you have the `setreuid' function. */
875#undef HAVE_SETREUID
876
877/* Define to 1 if you have the `setrlimit' function. */
878#undef HAVE_SETRLIMIT
879
880/* Define to 1 if you have the `setsid' function. */
881#undef HAVE_SETSID
882
883/* Define to 1 if you have the `setutent' function. */
884#undef HAVE_SETUTENT
885
886/* Define to 1 if you have the `setutxdb' function. */
887#undef HAVE_SETUTXDB
888
889/* Define to 1 if you have the `setutxent' function. */
890#undef HAVE_SETUTXENT
891
892/* Define to 1 if you have the `setvbuf' function. */
893#undef HAVE_SETVBUF
894
895/* Define to 1 if you have the `set_id' function. */
896#undef HAVE_SET_ID
897
898/* Define to 1 if you have the `SHA256_Update' function. */
899#undef HAVE_SHA256_UPDATE
900
901/* Define to 1 if you have the <sha2.h> header file. */
902#undef HAVE_SHA2_H
903
904/* Define to 1 if you have the <shadow.h> header file. */
905#undef HAVE_SHADOW_H
906
907/* Define to 1 if you have the `sigaction' function. */
908#undef HAVE_SIGACTION
909
910/* Define to 1 if you have the `sigvec' function. */
911#undef HAVE_SIGVEC
912
913/* Define to 1 if the system has the type `sig_atomic_t'. */
914#undef HAVE_SIG_ATOMIC_T
915
916/* define if you have size_t data type */
917#undef HAVE_SIZE_T
918
919/* Define to 1 if you have the `snprintf' function. */
920#undef HAVE_SNPRINTF
921
922/* Define to 1 if you have the `socketpair' function. */
923#undef HAVE_SOCKETPAIR
924
925/* Have PEERCRED socket option */
926#undef HAVE_SO_PEERCRED
927
928/* define if you have ssize_t data type */
929#undef HAVE_SSIZE_T
930
931/* Fields in struct sockaddr_storage */
932#undef HAVE_SS_FAMILY_IN_SS
933
934/* Define to 1 if you have the `statfs' function. */
935#undef HAVE_STATFS
936
937/* Define to 1 if you have the `statvfs' function. */
938#undef HAVE_STATVFS
939
940/* Define to 1 if you have the <stddef.h> header file. */
941#undef HAVE_STDDEF_H
942
943/* Define to 1 if you have the <stdint.h> header file. */
944#undef HAVE_STDINT_H
945
946/* Define to 1 if you have the <stdlib.h> header file. */
947#undef HAVE_STDLIB_H
948
949/* Define to 1 if you have the `strdup' function. */
950#undef HAVE_STRDUP
951
952/* Define to 1 if you have the `strerror' function. */
953#undef HAVE_STRERROR
954
955/* Define to 1 if you have the `strftime' function. */
956#undef HAVE_STRFTIME
957
958/* Silly mkstemp() */
959#undef HAVE_STRICT_MKSTEMP
960
961/* Define to 1 if you have the <strings.h> header file. */
962#undef HAVE_STRINGS_H
963
964/* Define to 1 if you have the <string.h> header file. */
965#undef HAVE_STRING_H
966
967/* Define to 1 if you have the `strlcat' function. */
968#undef HAVE_STRLCAT
969
970/* Define to 1 if you have the `strlcpy' function. */
971#undef HAVE_STRLCPY
972
973/* Define to 1 if you have the `strmode' function. */
974#undef HAVE_STRMODE
975
976/* Define to 1 if you have the `strnlen' function. */
977#undef HAVE_STRNLEN
978
979/* Define to 1 if you have the `strnvis' function. */
980#undef HAVE_STRNVIS
981
982/* Define to 1 if you have the `strptime' function. */
983#undef HAVE_STRPTIME
984
985/* Define to 1 if you have the `strsep' function. */
986#undef HAVE_STRSEP
987
988/* Define to 1 if you have the `strtoll' function. */
989#undef HAVE_STRTOLL
990
991/* Define to 1 if you have the `strtonum' function. */
992#undef HAVE_STRTONUM
993
994/* Define to 1 if you have the `strtoul' function. */
995#undef HAVE_STRTOUL
996
997/* Define to 1 if you have the `strtoull' function. */
998#undef HAVE_STRTOULL
999
1000/* define if you have struct addrinfo data type */
1001#undef HAVE_STRUCT_ADDRINFO
1002
1003/* define if you have struct in6_addr data type */
1004#undef HAVE_STRUCT_IN6_ADDR
1005
1006/* define if you have struct sockaddr_in6 data type */
1007#undef HAVE_STRUCT_SOCKADDR_IN6
1008
1009/* Define to 1 if `sin6_scope_id' is a member of `struct sockaddr_in6'. */
1010#undef HAVE_STRUCT_SOCKADDR_IN6_SIN6_SCOPE_ID
1011
1012/* define if you have struct sockaddr_storage data type */
1013#undef HAVE_STRUCT_SOCKADDR_STORAGE
1014
1015/* Define to 1 if `st_blksize' is a member of `struct stat'. */
1016#undef HAVE_STRUCT_STAT_ST_BLKSIZE
1017
1018/* Define to 1 if the system has the type `struct timespec'. */
1019#undef HAVE_STRUCT_TIMESPEC
1020
1021/* define if you have struct timeval */
1022#undef HAVE_STRUCT_TIMEVAL
1023
1024/* Define to 1 if you have the `swap32' function. */
1025#undef HAVE_SWAP32
1026
1027/* Define to 1 if you have the `sysconf' function. */
1028#undef HAVE_SYSCONF
1029
1030/* Define if you have syslen in utmpx.h */
1031#undef HAVE_SYSLEN_IN_UTMPX
1032
1033/* Define to 1 if you have the <sys/audit.h> header file. */
1034#undef HAVE_SYS_AUDIT_H
1035
1036/* Define to 1 if you have the <sys/bitypes.h> header file. */
1037#undef HAVE_SYS_BITYPES_H
1038
1039/* Define to 1 if you have the <sys/bsdtty.h> header file. */
1040#undef HAVE_SYS_BSDTTY_H
1041
1042/* Define to 1 if you have the <sys/cdefs.h> header file. */
1043#undef HAVE_SYS_CDEFS_H
1044
1045/* Define to 1 if you have the <sys/dir.h> header file. */
1046#undef HAVE_SYS_DIR_H
1047
1048/* Define if your system defines sys_errlist[] */
1049#undef HAVE_SYS_ERRLIST
1050
1051/* Define to 1 if you have the <sys/mman.h> header file. */
1052#undef HAVE_SYS_MMAN_H
1053
1054/* Define to 1 if you have the <sys/mount.h> header file. */
1055#undef HAVE_SYS_MOUNT_H
1056
1057/* Define to 1 if you have the <sys/ndir.h> header file. */
1058#undef HAVE_SYS_NDIR_H
1059
1060/* Define if your system defines sys_nerr */
1061#undef HAVE_SYS_NERR
1062
1063/* Define to 1 if you have the <sys/poll.h> header file. */
1064#undef HAVE_SYS_POLL_H
1065
1066/* Define to 1 if you have the <sys/prctl.h> header file. */
1067#undef HAVE_SYS_PRCTL_H
1068
1069/* Define to 1 if you have the <sys/pstat.h> header file. */
1070#undef HAVE_SYS_PSTAT_H
1071
1072/* Define to 1 if you have the <sys/ptms.h> header file. */
1073#undef HAVE_SYS_PTMS_H
1074
1075/* Define to 1 if you have the <sys/select.h> header file. */
1076#undef HAVE_SYS_SELECT_H
1077
1078/* Define to 1 if you have the <sys/statvfs.h> header file. */
1079#undef HAVE_SYS_STATVFS_H
1080
1081/* Define to 1 if you have the <sys/stat.h> header file. */
1082#undef HAVE_SYS_STAT_H
1083
1084/* Define to 1 if you have the <sys/stream.h> header file. */
1085#undef HAVE_SYS_STREAM_H
1086
1087/* Define to 1 if you have the <sys/stropts.h> header file. */
1088#undef HAVE_SYS_STROPTS_H
1089
1090/* Define to 1 if you have the <sys/strtio.h> header file. */
1091#undef HAVE_SYS_STRTIO_H
1092
1093/* Force use of sys/syslog.h on Ultrix */
1094#undef HAVE_SYS_SYSLOG_H
1095
1096/* Define to 1 if you have the <sys/sysmacros.h> header file. */
1097#undef HAVE_SYS_SYSMACROS_H
1098
1099/* Define to 1 if you have the <sys/timers.h> header file. */
1100#undef HAVE_SYS_TIMERS_H
1101
1102/* Define to 1 if you have the <sys/time.h> header file. */
1103#undef HAVE_SYS_TIME_H
1104
1105/* Define to 1 if you have the <sys/types.h> header file. */
1106#undef HAVE_SYS_TYPES_H
1107
1108/* Define to 1 if you have the <sys/un.h> header file. */
1109#undef HAVE_SYS_UN_H
1110
1111/* Define to 1 if you have the `tcgetpgrp' function. */
1112#undef HAVE_TCGETPGRP
1113
1114/* Define to 1 if you have the `tcsendbreak' function. */
1115#undef HAVE_TCSENDBREAK
1116
1117/* Define to 1 if you have the `time' function. */
1118#undef HAVE_TIME
1119
1120/* Define to 1 if you have the <time.h> header file. */
1121#undef HAVE_TIME_H
1122
1123/* Define if you have ut_time in utmp.h */
1124#undef HAVE_TIME_IN_UTMP
1125
1126/* Define if you have ut_time in utmpx.h */
1127#undef HAVE_TIME_IN_UTMPX
1128
1129/* Define to 1 if you have the `timingsafe_bcmp' function. */
1130#undef HAVE_TIMINGSAFE_BCMP
1131
1132/* Define to 1 if you have the <tmpdir.h> header file. */
1133#undef HAVE_TMPDIR_H
1134
1135/* Define to 1 if you have the `truncate' function. */
1136#undef HAVE_TRUNCATE
1137
1138/* Define to 1 if you have the <ttyent.h> header file. */
1139#undef HAVE_TTYENT_H
1140
1141/* Define if you have ut_tv in utmp.h */
1142#undef HAVE_TV_IN_UTMP
1143
1144/* Define if you have ut_tv in utmpx.h */
1145#undef HAVE_TV_IN_UTMPX
1146
1147/* Define if you have ut_type in utmp.h */
1148#undef HAVE_TYPE_IN_UTMP
1149
1150/* Define if you have ut_type in utmpx.h */
1151#undef HAVE_TYPE_IN_UTMPX
1152
1153/* Define to 1 if you have the <ucred.h> header file. */
1154#undef HAVE_UCRED_H
1155
1156/* define if you have uintxx_t data type */
1157#undef HAVE_UINTXX_T
1158
1159/* Define to 1 if you have the <unistd.h> header file. */
1160#undef HAVE_UNISTD_H
1161
1162/* Define to 1 if you have the `unsetenv' function. */
1163#undef HAVE_UNSETENV
1164
1165/* Define to 1 if the system has the type `unsigned long long'. */
1166#undef HAVE_UNSIGNED_LONG_LONG
1167
1168/* Define to 1 if you have the `updwtmp' function. */
1169#undef HAVE_UPDWTMP
1170
1171/* Define to 1 if you have the `updwtmpx' function. */
1172#undef HAVE_UPDWTMPX
1173
1174/* Define to 1 if you have the <usersec.h> header file. */
1175#undef HAVE_USERSEC_H
1176
1177/* Define to 1 if you have the `user_from_uid' function. */
1178#undef HAVE_USER_FROM_UID
1179
1180/* Define to 1 if you have the `usleep' function. */
1181#undef HAVE_USLEEP
1182
1183/* Define to 1 if you have the <util.h> header file. */
1184#undef HAVE_UTIL_H
1185
1186/* Define to 1 if you have the `utimes' function. */
1187#undef HAVE_UTIMES
1188
1189/* Define to 1 if you have the <utime.h> header file. */
1190#undef HAVE_UTIME_H
1191
1192/* Define to 1 if you have the `utmpname' function. */
1193#undef HAVE_UTMPNAME
1194
1195/* Define to 1 if you have the `utmpxname' function. */
1196#undef HAVE_UTMPXNAME
1197
1198/* Define to 1 if you have the <utmpx.h> header file. */
1199#undef HAVE_UTMPX_H
1200
1201/* Define to 1 if you have the <utmp.h> header file. */
1202#undef HAVE_UTMP_H
1203
1204/* define if you have u_char data type */
1205#undef HAVE_U_CHAR
1206
1207/* define if you have u_int data type */
1208#undef HAVE_U_INT
1209
1210/* define if you have u_int64_t data type */
1211#undef HAVE_U_INT64_T
1212
1213/* define if you have u_intxx_t data type */
1214#undef HAVE_U_INTXX_T
1215
1216/* Define to 1 if you have the `vasprintf' function. */
1217#undef HAVE_VASPRINTF
1218
1219/* Define if va_copy exists */
1220#undef HAVE_VA_COPY
1221
1222/* Define to 1 if you have the `vhangup' function. */
1223#undef HAVE_VHANGUP
1224
1225/* Define to 1 if you have the <vis.h> header file. */
1226#undef HAVE_VIS_H
1227
1228/* Define to 1 if you have the `vsnprintf' function. */
1229#undef HAVE_VSNPRINTF
1230
1231/* Define to 1 if you have the `waitpid' function. */
1232#undef HAVE_WAITPID
1233
1234/* Define to 1 if you have the `_getlong' function. */
1235#undef HAVE__GETLONG
1236
1237/* Define to 1 if you have the `_getpty' function. */
1238#undef HAVE__GETPTY
1239
1240/* Define to 1 if you have the `_getshort' function. */
1241#undef HAVE__GETSHORT
1242
1243/* Define if you have struct __res_state _res as an extern */
1244#undef HAVE__RES_EXTERN
1245
1246/* Define to 1 if you have the `__b64_ntop' function. */
1247#undef HAVE___B64_NTOP
1248
1249/* Define to 1 if you have the `__b64_pton' function. */
1250#undef HAVE___B64_PTON
1251
1252/* Define if compiler implements __FUNCTION__ */
1253#undef HAVE___FUNCTION__
1254
1255/* Define if libc defines __progname */
1256#undef HAVE___PROGNAME
1257
1258/* Fields in struct sockaddr_storage */
1259#undef HAVE___SS_FAMILY_IN_SS
1260
1261/* Define if __va_copy exists */
1262#undef HAVE___VA_COPY
1263
1264/* Define if compiler implements __func__ */
1265#undef HAVE___func__
1266
1267/* Define this if you are using the Heimdal version of Kerberos V5 */
1268#undef HEIMDAL
1269
1270/* Define if you need to use IP address instead of hostname in $DISPLAY */
1271#undef IPADDR_IN_DISPLAY
1272
1273/* Detect IPv4 in IPv6 mapped addresses and treat as IPv4 */
1274#undef IPV4_IN_IPV6
1275
1276/* Define if your system choked on IP TOS setting */
1277#undef IP_TOS_IS_BROKEN
1278
1279/* Define if you want Kerberos 5 support */
1280#undef KRB5
1281
1282/* Define if pututxline updates lastlog too */
1283#undef LASTLOG_WRITE_PUTUTXLINE
1284
1285/* Define if you want TCP Wrappers support */
1286#undef LIBWRAP
1287
1288/* Define to whatever link() returns for "not supported" if it doesn't return
1289 EOPNOTSUPP. */
1290#undef LINK_OPNOTSUPP_ERRNO
1291
1292/* Adjust Linux out-of-memory killer */
1293#undef LINUX_OOM_ADJUST
1294
1295/* max value of long long calculated by configure */
1296#undef LLONG_MAX
1297
1298/* min value of long long calculated by configure */
1299#undef LLONG_MIN
1300
1301/* Account locked with pw(1) */
1302#undef LOCKED_PASSWD_PREFIX
1303
1304/* String used in /etc/passwd to denote locked account */
1305#undef LOCKED_PASSWD_STRING
1306
1307/* String used in /etc/passwd to denote locked account */
1308#undef LOCKED_PASSWD_SUBSTR
1309
1310/* Some versions of /bin/login need the TERM supplied on the commandline */
1311#undef LOGIN_NEEDS_TERM
1312
1313/* Some systems need a utmpx entry for /bin/login to work */
1314#undef LOGIN_NEEDS_UTMPX
1315
1316/* Define if your login program cannot handle end of options ("--") */
1317#undef LOGIN_NO_ENDOPT
1318
1319/* If your header files don't define LOGIN_PROGRAM, then use this (detected)
1320 from environment and PATH */
1321#undef LOGIN_PROGRAM_FALLBACK
1322
1323/* Set this to your mail directory if you do not have _PATH_MAILDIR */
1324#undef MAIL_DIRECTORY
1325
1326/* Define on *nto-qnx systems */
1327#undef MISSING_FD_MASK
1328
1329/* Define on *nto-qnx systems */
1330#undef MISSING_HOWMANY
1331
1332/* Define on *nto-qnx systems */
1333#undef MISSING_NFDBITS
1334
1335/* Need setpgrp to acquire controlling tty */
1336#undef NEED_SETPGRP
1337
1338/* compiler does not accept __attribute__ on return types */
1339#undef NO_ATTRIBUTE_ON_RETURN_TYPE
1340
1341/* Define if the concept of ports only accessible to superusers isn't known */
1342#undef NO_IPPORT_RESERVED_CONCEPT
1343
1344/* Define if you don't want to use lastlog in session.c */
1345#undef NO_SSH_LASTLOG
1346
1347/* Define if X11 doesn't support AF_UNIX sockets on that system */
1348#undef NO_X11_UNIX_SOCKETS
1349
1350/* Define if EVP_DigestUpdate returns void */
1351#undef OPENSSL_EVP_DIGESTUPDATE_VOID
1352
1353/* libcrypto includes complete ECC support */
1354#undef OPENSSL_HAS_ECC
1355
1356/* libcrypto has EVP AES CTR */
1357#undef OPENSSL_HAVE_EVPCTR
1358
1359/* libcrypto has EVP AES GCM */
1360#undef OPENSSL_HAVE_EVPGCM
1361
1362/* libcrypto is missing AES 192 and 256 bit functions */
1363#undef OPENSSL_LOBOTOMISED_AES
1364
1365/* Define if you want OpenSSL's internally seeded PRNG only */
1366#undef OPENSSL_PRNG_ONLY
1367
1368/* Define to the address where bug reports for this package should be sent. */
1369#undef PACKAGE_BUGREPORT
1370
1371/* Define to the full name of this package. */
1372#undef PACKAGE_NAME
1373
1374/* Define to the full name and version of this package. */
1375#undef PACKAGE_STRING
1376
1377/* Define to the one symbol short name of this package. */
1378#undef PACKAGE_TARNAME
1379
1380/* Define to the home page for this package. */
1381#undef PACKAGE_URL
1382
1383/* Define to the version of this package. */
1384#undef PACKAGE_VERSION
1385
1386/* Define if you are using Solaris-derived PAM which passes pam_messages to
1387 the conversation function with an extra level of indirection */
1388#undef PAM_SUN_CODEBASE
1389
1390/* Work around problematic Linux PAM modules handling of PAM_TTY */
1391#undef PAM_TTY_KLUDGE
1392
1393/* must supply username to passwd */
1394#undef PASSWD_NEEDS_USERNAME
1395
1396/* System dirs owned by bin (uid 2) */
1397#undef PLATFORM_SYS_DIR_UID
1398
1399/* Port number of PRNGD/EGD random number socket */
1400#undef PRNGD_PORT
1401
1402/* Location of PRNGD/EGD random number socket */
1403#undef PRNGD_SOCKET
1404
1405/* read(1) can return 0 for a non-closed fd */
1406#undef PTY_ZEROREAD
1407
1408/* Sandbox using Darwin sandbox_init(3) */
1409#undef SANDBOX_DARWIN
1410
1411/* no privsep sandboxing */
1412#undef SANDBOX_NULL
1413
1414/* Sandbox using setrlimit(2) */
1415#undef SANDBOX_RLIMIT
1416
1417/* Sandbox using seccomp filter */
1418#undef SANDBOX_SECCOMP_FILTER
1419
1420/* setrlimit RLIMIT_FSIZE works */
1421#undef SANDBOX_SKIP_RLIMIT_FSIZE
1422
1423/* Sandbox using systrace(4) */
1424#undef SANDBOX_SYSTRACE
1425
1426/* Specify the system call convention in use */
1427#undef SECCOMP_AUDIT_ARCH
1428
1429/* Define if your platform breaks doing a seteuid before a setuid */
1430#undef SETEUID_BREAKS_SETUID
1431
1432/* The size of `int', as computed by sizeof. */
1433#undef SIZEOF_INT
1434
1435/* The size of `long int', as computed by sizeof. */
1436#undef SIZEOF_LONG_INT
1437
1438/* The size of `long long int', as computed by sizeof. */
1439#undef SIZEOF_LONG_LONG_INT
1440
1441/* The size of `short int', as computed by sizeof. */
1442#undef SIZEOF_SHORT_INT
1443
1444/* Define if you want S/Key support */
1445#undef SKEY
1446
1447/* Define if your skeychallenge() function takes 4 arguments (NetBSD) */
1448#undef SKEYCHALLENGE_4ARG
1449
1450/* Define as const if snprintf() can declare const char *fmt */
1451#undef SNPRINTF_CONST
1452
1453/* Define to a Set Process Title type if your system is supported by
1454 bsd-setproctitle.c */
1455#undef SPT_TYPE
1456
1457/* Define if sshd somehow reacquires a controlling TTY after setsid() */
1458#undef SSHD_ACQUIRES_CTTY
1459
1460/* Define if pam_chauthtok wants real uid set to the unpriv'ed user */
1461#undef SSHPAM_CHAUTHTOK_NEEDS_RUID
1462
1463/* Use audit debugging module */
1464#undef SSH_AUDIT_EVENTS
1465
1466/* Windows is sensitive to read buffer size */
1467#undef SSH_IOBUFSZ
1468
1469/* non-privileged user for privilege separation */
1470#undef SSH_PRIVSEP_USER
1471
1472/* Use tunnel device compatibility to OpenBSD */
1473#undef SSH_TUN_COMPAT_AF
1474
1475/* Open tunnel devices the FreeBSD way */
1476#undef SSH_TUN_FREEBSD
1477
1478/* Open tunnel devices the Linux tun/tap way */
1479#undef SSH_TUN_LINUX
1480
1481/* No layer 2 tunnel support */
1482#undef SSH_TUN_NO_L2
1483
1484/* Open tunnel devices the OpenBSD way */
1485#undef SSH_TUN_OPENBSD
1486
1487/* Prepend the address family to IP tunnel traffic */
1488#undef SSH_TUN_PREPEND_AF
1489
1490/* Define to 1 if you have the ANSI C header files. */
1491#undef STDC_HEADERS
1492
1493/* Define if you want a different $PATH for the superuser */
1494#undef SUPERUSER_PATH
1495
1496/* syslog_r function is safe to use in in a signal handler */
1497#undef SYSLOG_R_SAFE_IN_SIGHAND
1498
1499/* Support passwords > 8 chars */
1500#undef UNIXWARE_LONG_PASSWORDS
1501
1502/* Specify default $PATH */
1503#undef USER_PATH
1504
1505/* Define this if you want to use libkafs' AFS support */
1506#undef USE_AFS
1507
1508/* Use BSM audit module */
1509#undef USE_BSM_AUDIT
1510
1511/* Use btmp to log bad logins */
1512#undef USE_BTMP
1513
1514/* Use libedit for sftp */
1515#undef USE_LIBEDIT
1516
1517/* Use Linux audit module */
1518#undef USE_LINUX_AUDIT
1519
1520/* Enable OpenSSL engine support */
1521#undef USE_OPENSSL_ENGINE
1522
1523/* Define if you want to enable PAM support */
1524#undef USE_PAM
1525
1526/* Use PIPES instead of a socketpair() */
1527#undef USE_PIPES
1528
1529/* Define if you have Solaris process contracts */
1530#undef USE_SOLARIS_PROCESS_CONTRACTS
1531
1532/* Define if you have Solaris projects */
1533#undef USE_SOLARIS_PROJECTS
1534
1535/* Define if you shouldn't strip 'tty' from your ttyname in [uw]tmp */
1536#undef WITH_ABBREV_NO_TTY
1537
1538/* Define if you want to enable AIX4's authenticate function */
1539#undef WITH_AIXAUTHENTICATE
1540
1541/* Define if you have/want arrays (cluster-wide session managment, not C
1542 arrays) */
1543#undef WITH_IRIX_ARRAY
1544
1545/* Define if you want IRIX audit trails */
1546#undef WITH_IRIX_AUDIT
1547
1548/* Define if you want IRIX kernel jobs */
1549#undef WITH_IRIX_JOBS
1550
1551/* Define if you want IRIX project management */
1552#undef WITH_IRIX_PROJECT
1553
1554/* Define if you want SELinux support. */
1555#undef WITH_SELINUX
1556
1557/* Define WORDS_BIGENDIAN to 1 if your processor stores words with the most
1558 significant byte first (like Motorola and SPARC, unlike Intel). */
1559#if defined AC_APPLE_UNIVERSAL_BUILD
1560# if defined __BIG_ENDIAN__
1561# define WORDS_BIGENDIAN 1
1562# endif
1563#else
1564# ifndef WORDS_BIGENDIAN
1565# undef WORDS_BIGENDIAN
1566# endif
1567#endif
1568
1569/* Define if xauth is found in your path */
1570#undef XAUTH_PATH
1571
1572/* Number of bits in a file offset, on hosts where this is settable. */
1573#undef _FILE_OFFSET_BITS
1574
1575/* Define for large files, on AIX-style hosts. */
1576#undef _LARGE_FILES
1577
1578/* log for bad login attempts */
1579#undef _PATH_BTMP
1580
1581/* Full path of your "passwd" program */
1582#undef _PATH_PASSWD_PROG
1583
1584/* Specify location of ssh.pid */
1585#undef _PATH_SSH_PIDDIR
1586
1587/* Define if we don't have struct __res_state in resolv.h */
1588#undef __res_state
1589
1590/* Define to `__inline__' or `__inline' if that's what the C compiler
1591 calls it, or to nothing if 'inline' is not supported under any name. */
1592#ifndef __cplusplus
1593#undef inline
1594#endif
1595
1596/* type to use in place of socklen_t if not defined */
1597#undef socklen_t
diff --git a/configure b/configure
new file mode 100755
index 000000000..c36bb1907
--- /dev/null
+++ b/configure
@@ -0,0 +1,18522 @@
1#! /bin/sh
2# From configure.ac Revision: 1.518 .
3# Guess values for system-dependent variables and create Makefiles.
4# Generated by GNU Autoconf 2.68 for OpenSSH Portable.
5#
6# Report bugs to <openssh-unix-dev@mindrot.org>.
7#
8#
9# Copyright (C) 1992, 1993, 1994, 1995, 1996, 1998, 1999, 2000, 2001,
10# 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Free Software
11# Foundation, Inc.
12#
13#
14# This configure script is free software; the Free Software Foundation
15# gives unlimited permission to copy, distribute and modify it.
16## -------------------- ##
17## M4sh Initialization. ##
18## -------------------- ##
19
20# Be more Bourne compatible
21DUALCASE=1; export DUALCASE # for MKS sh
22if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then :
23 emulate sh
24 NULLCMD=:
25 # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
26 # is contrary to our usage. Disable this feature.
27 alias -g '${1+"$@"}'='"$@"'
28 setopt NO_GLOB_SUBST
29else
30 case `(set -o) 2>/dev/null` in #(
31 *posix*) :
32 set -o posix ;; #(
33 *) :
34 ;;
35esac
36fi
37
38
39as_nl='
40'
41export as_nl
42# Printing a long string crashes Solaris 7 /usr/bin/printf.
43as_echo='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
44as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo
45as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo$as_echo
46# Prefer a ksh shell builtin over an external printf program on Solaris,
47# but without wasting forks for bash or zsh.
48if test -z "$BASH_VERSION$ZSH_VERSION" \
49 && (test "X`print -r -- $as_echo`" = "X$as_echo") 2>/dev/null; then
50 as_echo='print -r --'
51 as_echo_n='print -rn --'
52elif (test "X`printf %s $as_echo`" = "X$as_echo") 2>/dev/null; then
53 as_echo='printf %s\n'
54 as_echo_n='printf %s'
55else
56 if test "X`(/usr/ucb/echo -n -n $as_echo) 2>/dev/null`" = "X-n $as_echo"; then
57 as_echo_body='eval /usr/ucb/echo -n "$1$as_nl"'
58 as_echo_n='/usr/ucb/echo -n'
59 else
60 as_echo_body='eval expr "X$1" : "X\\(.*\\)"'
61 as_echo_n_body='eval
62 arg=$1;
63 case $arg in #(
64 *"$as_nl"*)
65 expr "X$arg" : "X\\(.*\\)$as_nl";
66 arg=`expr "X$arg" : ".*$as_nl\\(.*\\)"`;;
67 esac;
68 expr "X$arg" : "X\\(.*\\)" | tr -d "$as_nl"
69 '
70 export as_echo_n_body
71 as_echo_n='sh -c $as_echo_n_body as_echo'
72 fi
73 export as_echo_body
74 as_echo='sh -c $as_echo_body as_echo'
75fi
76
77# The user is always right.
78if test "${PATH_SEPARATOR+set}" != set; then
79 PATH_SEPARATOR=:
80 (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
81 (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
82 PATH_SEPARATOR=';'
83 }
84fi
85
86
87# IFS
88# We need space, tab and new line, in precisely that order. Quoting is
89# there to prevent editors from complaining about space-tab.
90# (If _AS_PATH_WALK were called with IFS unset, it would disable word
91# splitting by setting IFS to empty value.)
92IFS=" "" $as_nl"
93
94# Find who we are. Look in the path if we contain no directory separator.
95as_myself=
96case $0 in #((
97 *[\\/]* ) as_myself=$0 ;;
98 *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
99for as_dir in $PATH
100do
101 IFS=$as_save_IFS
102 test -z "$as_dir" && as_dir=.
103 test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break
104 done
105IFS=$as_save_IFS
106
107 ;;
108esac
109# We did not find ourselves, most probably we were run as `sh COMMAND'
110# in which case we are not to be found in the path.
111if test "x$as_myself" = x; then
112 as_myself=$0
113fi
114if test ! -f "$as_myself"; then
115 $as_echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
116 exit 1
117fi
118
119# Unset variables that we do not need and which cause bugs (e.g. in
120# pre-3.0 UWIN ksh). But do not cause bugs in bash 2.01; the "|| exit 1"
121# suppresses any "Segmentation fault" message there. '((' could
122# trigger a bug in pdksh 5.2.14.
123for as_var in BASH_ENV ENV MAIL MAILPATH
124do eval test x\${$as_var+set} = xset \
125 && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
126done
127PS1='$ '
128PS2='> '
129PS4='+ '
130
131# NLS nuisances.
132LC_ALL=C
133export LC_ALL
134LANGUAGE=C
135export LANGUAGE
136
137# CDPATH.
138(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
139
140if test "x$CONFIG_SHELL" = x; then
141 as_bourne_compatible="if test -n \"\${ZSH_VERSION+set}\" && (emulate sh) >/dev/null 2>&1; then :
142 emulate sh
143 NULLCMD=:
144 # Pre-4.2 versions of Zsh do word splitting on \${1+\"\$@\"}, which
145 # is contrary to our usage. Disable this feature.
146 alias -g '\${1+\"\$@\"}'='\"\$@\"'
147 setopt NO_GLOB_SUBST
148else
149 case \`(set -o) 2>/dev/null\` in #(
150 *posix*) :
151 set -o posix ;; #(
152 *) :
153 ;;
154esac
155fi
156"
157 as_required="as_fn_return () { (exit \$1); }
158as_fn_success () { as_fn_return 0; }
159as_fn_failure () { as_fn_return 1; }
160as_fn_ret_success () { return 0; }
161as_fn_ret_failure () { return 1; }
162
163exitcode=0
164as_fn_success || { exitcode=1; echo as_fn_success failed.; }
165as_fn_failure && { exitcode=1; echo as_fn_failure succeeded.; }
166as_fn_ret_success || { exitcode=1; echo as_fn_ret_success failed.; }
167as_fn_ret_failure && { exitcode=1; echo as_fn_ret_failure succeeded.; }
168if ( set x; as_fn_ret_success y && test x = \"\$1\" ); then :
169
170else
171 exitcode=1; echo positional parameters were not saved.
172fi
173test x\$exitcode = x0 || exit 1"
174 as_suggested=" as_lineno_1=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_1a=\$LINENO
175 as_lineno_2=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_2a=\$LINENO
176 eval 'test \"x\$as_lineno_1'\$as_run'\" != \"x\$as_lineno_2'\$as_run'\" &&
177 test \"x\`expr \$as_lineno_1'\$as_run' + 1\`\" = \"x\$as_lineno_2'\$as_run'\"' || exit 1
178test \$(( 1 + 1 )) = 2 || exit 1"
179 if (eval "$as_required") 2>/dev/null; then :
180 as_have_required=yes
181else
182 as_have_required=no
183fi
184 if test x$as_have_required = xyes && (eval "$as_suggested") 2>/dev/null; then :
185
186else
187 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
188as_found=false
189for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH
190do
191 IFS=$as_save_IFS
192 test -z "$as_dir" && as_dir=.
193 as_found=:
194 case $as_dir in #(
195 /*)
196 for as_base in sh bash ksh sh5; do
197 # Try only shells that exist, to save several forks.
198 as_shell=$as_dir/$as_base
199 if { test -f "$as_shell" || test -f "$as_shell.exe"; } &&
200 { $as_echo "$as_bourne_compatible""$as_required" | as_run=a "$as_shell"; } 2>/dev/null; then :
201 CONFIG_SHELL=$as_shell as_have_required=yes
202 if { $as_echo "$as_bourne_compatible""$as_suggested" | as_run=a "$as_shell"; } 2>/dev/null; then :
203 break 2
204fi
205fi
206 done;;
207 esac
208 as_found=false
209done
210$as_found || { if { test -f "$SHELL" || test -f "$SHELL.exe"; } &&
211 { $as_echo "$as_bourne_compatible""$as_required" | as_run=a "$SHELL"; } 2>/dev/null; then :
212 CONFIG_SHELL=$SHELL as_have_required=yes
213fi; }
214IFS=$as_save_IFS
215
216
217 if test "x$CONFIG_SHELL" != x; then :
218 # We cannot yet assume a decent shell, so we have to provide a
219 # neutralization value for shells without unset; and this also
220 # works around shells that cannot unset nonexistent variables.
221 # Preserve -v and -x to the replacement shell.
222 BASH_ENV=/dev/null
223 ENV=/dev/null
224 (unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
225 export CONFIG_SHELL
226 case $- in # ((((
227 *v*x* | *x*v* ) as_opts=-vx ;;
228 *v* ) as_opts=-v ;;
229 *x* ) as_opts=-x ;;
230 * ) as_opts= ;;
231 esac
232 exec "$CONFIG_SHELL" $as_opts "$as_myself" ${1+"$@"}
233fi
234
235 if test x$as_have_required = xno; then :
236 $as_echo "$0: This script requires a shell more modern than all"
237 $as_echo "$0: the shells that I found on your system."
238 if test x${ZSH_VERSION+set} = xset ; then
239 $as_echo "$0: In particular, zsh $ZSH_VERSION has bugs and should"
240 $as_echo "$0: be upgraded to zsh 4.3.4 or later."
241 else
242 $as_echo "$0: Please tell bug-autoconf@gnu.org and
243$0: openssh-unix-dev@mindrot.org about your system,
244$0: including any error possibly output before this
245$0: message. Then install a modern shell, or manually run
246$0: the script under such a shell if you do have one."
247 fi
248 exit 1
249fi
250fi
251fi
252SHELL=${CONFIG_SHELL-/bin/sh}
253export SHELL
254# Unset more variables known to interfere with behavior of common tools.
255CLICOLOR_FORCE= GREP_OPTIONS=
256unset CLICOLOR_FORCE GREP_OPTIONS
257
258## --------------------- ##
259## M4sh Shell Functions. ##
260## --------------------- ##
261# as_fn_unset VAR
262# ---------------
263# Portably unset VAR.
264as_fn_unset ()
265{
266 { eval $1=; unset $1;}
267}
268as_unset=as_fn_unset
269
270# as_fn_set_status STATUS
271# -----------------------
272# Set $? to STATUS, without forking.
273as_fn_set_status ()
274{
275 return $1
276} # as_fn_set_status
277
278# as_fn_exit STATUS
279# -----------------
280# Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
281as_fn_exit ()
282{
283 set +e
284 as_fn_set_status $1
285 exit $1
286} # as_fn_exit
287
288# as_fn_mkdir_p
289# -------------
290# Create "$as_dir" as a directory, including parents if necessary.
291as_fn_mkdir_p ()
292{
293
294 case $as_dir in #(
295 -*) as_dir=./$as_dir;;
296 esac
297 test -d "$as_dir" || eval $as_mkdir_p || {
298 as_dirs=
299 while :; do
300 case $as_dir in #(
301 *\'*) as_qdir=`$as_echo "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
302 *) as_qdir=$as_dir;;
303 esac
304 as_dirs="'$as_qdir' $as_dirs"
305 as_dir=`$as_dirname -- "$as_dir" ||
306$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
307 X"$as_dir" : 'X\(//\)[^/]' \| \
308 X"$as_dir" : 'X\(//\)$' \| \
309 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
310$as_echo X"$as_dir" |
311 sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
312 s//\1/
313 q
314 }
315 /^X\(\/\/\)[^/].*/{
316 s//\1/
317 q
318 }
319 /^X\(\/\/\)$/{
320 s//\1/
321 q
322 }
323 /^X\(\/\).*/{
324 s//\1/
325 q
326 }
327 s/.*/./; q'`
328 test -d "$as_dir" && break
329 done
330 test -z "$as_dirs" || eval "mkdir $as_dirs"
331 } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
332
333
334} # as_fn_mkdir_p
335# as_fn_append VAR VALUE
336# ----------------------
337# Append the text in VALUE to the end of the definition contained in VAR. Take
338# advantage of any shell optimizations that allow amortized linear growth over
339# repeated appends, instead of the typical quadratic growth present in naive
340# implementations.
341if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null; then :
342 eval 'as_fn_append ()
343 {
344 eval $1+=\$2
345 }'
346else
347 as_fn_append ()
348 {
349 eval $1=\$$1\$2
350 }
351fi # as_fn_append
352
353# as_fn_arith ARG...
354# ------------------
355# Perform arithmetic evaluation on the ARGs, and store the result in the
356# global $as_val. Take advantage of shells that can avoid forks. The arguments
357# must be portable across $(()) and expr.
358if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null; then :
359 eval 'as_fn_arith ()
360 {
361 as_val=$(( $* ))
362 }'
363else
364 as_fn_arith ()
365 {
366 as_val=`expr "$@" || test $? -eq 1`
367 }
368fi # as_fn_arith
369
370
371# as_fn_error STATUS ERROR [LINENO LOG_FD]
372# ----------------------------------------
373# Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are
374# provided, also output the error to LOG_FD, referencing LINENO. Then exit the
375# script with STATUS, using 1 if that was 0.
376as_fn_error ()
377{
378 as_status=$1; test $as_status -eq 0 && as_status=1
379 if test "$4"; then
380 as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
381 $as_echo "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
382 fi
383 $as_echo "$as_me: error: $2" >&2
384 as_fn_exit $as_status
385} # as_fn_error
386
387if expr a : '\(a\)' >/dev/null 2>&1 &&
388 test "X`expr 00001 : '.*\(...\)'`" = X001; then
389 as_expr=expr
390else
391 as_expr=false
392fi
393
394if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
395 as_basename=basename
396else
397 as_basename=false
398fi
399
400if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
401 as_dirname=dirname
402else
403 as_dirname=false
404fi
405
406as_me=`$as_basename -- "$0" ||
407$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
408 X"$0" : 'X\(//\)$' \| \
409 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
410$as_echo X/"$0" |
411 sed '/^.*\/\([^/][^/]*\)\/*$/{
412 s//\1/
413 q
414 }
415 /^X\/\(\/\/\)$/{
416 s//\1/
417 q
418 }
419 /^X\/\(\/\).*/{
420 s//\1/
421 q
422 }
423 s/.*/./; q'`
424
425# Avoid depending upon Character Ranges.
426as_cr_letters='abcdefghijklmnopqrstuvwxyz'
427as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
428as_cr_Letters=$as_cr_letters$as_cr_LETTERS
429as_cr_digits='0123456789'
430as_cr_alnum=$as_cr_Letters$as_cr_digits
431
432
433 as_lineno_1=$LINENO as_lineno_1a=$LINENO
434 as_lineno_2=$LINENO as_lineno_2a=$LINENO
435 eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2'$as_run'" &&
436 test "x`expr $as_lineno_1'$as_run' + 1`" = "x$as_lineno_2'$as_run'"' || {
437 # Blame Lee E. McMahon (1931-1989) for sed's syntax. :-)
438 sed -n '
439 p
440 /[$]LINENO/=
441 ' <$as_myself |
442 sed '
443 s/[$]LINENO.*/&-/
444 t lineno
445 b
446 :lineno
447 N
448 :loop
449 s/[$]LINENO\([^'$as_cr_alnum'_].*\n\)\(.*\)/\2\1\2/
450 t loop
451 s/-\n.*//
452 ' >$as_me.lineno &&
453 chmod +x "$as_me.lineno" ||
454 { $as_echo "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2; as_fn_exit 1; }
455
456 # Don't try to exec as it changes $[0], causing all sort of problems
457 # (the dirname of $[0] is not the place where we might find the
458 # original and so on. Autoconf is especially sensitive to this).
459 . "./$as_me.lineno"
460 # Exit status is that of the last command.
461 exit
462}
463
464ECHO_C= ECHO_N= ECHO_T=
465case `echo -n x` in #(((((
466-n*)
467 case `echo 'xy\c'` in
468 *c*) ECHO_T=' ';; # ECHO_T is single tab character.
469 xy) ECHO_C='\c';;
470 *) echo `echo ksh88 bug on AIX 6.1` > /dev/null
471 ECHO_T=' ';;
472 esac;;
473*)
474 ECHO_N='-n';;
475esac
476
477rm -f conf$$ conf$$.exe conf$$.file
478if test -d conf$$.dir; then
479 rm -f conf$$.dir/conf$$.file
480else
481 rm -f conf$$.dir
482 mkdir conf$$.dir 2>/dev/null
483fi
484if (echo >conf$$.file) 2>/dev/null; then
485 if ln -s conf$$.file conf$$ 2>/dev/null; then
486 as_ln_s='ln -s'
487 # ... but there are two gotchas:
488 # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail.
489 # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable.
490 # In both cases, we have to default to `cp -p'.
491 ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
492 as_ln_s='cp -p'
493 elif ln conf$$.file conf$$ 2>/dev/null; then
494 as_ln_s=ln
495 else
496 as_ln_s='cp -p'
497 fi
498else
499 as_ln_s='cp -p'
500fi
501rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
502rmdir conf$$.dir 2>/dev/null
503
504if mkdir -p . 2>/dev/null; then
505 as_mkdir_p='mkdir -p "$as_dir"'
506else
507 test -d ./-p && rmdir ./-p
508 as_mkdir_p=false
509fi
510
511if test -x / >/dev/null 2>&1; then
512 as_test_x='test -x'
513else
514 if ls -dL / >/dev/null 2>&1; then
515 as_ls_L_option=L
516 else
517 as_ls_L_option=
518 fi
519 as_test_x='
520 eval sh -c '\''
521 if test -d "$1"; then
522 test -d "$1/.";
523 else
524 case $1 in #(
525 -*)set "./$1";;
526 esac;
527 case `ls -ld'$as_ls_L_option' "$1" 2>/dev/null` in #((
528 ???[sx]*):;;*)false;;esac;fi
529 '\'' sh
530 '
531fi
532as_executable_p=$as_test_x
533
534# Sed expression to map a string onto a valid CPP name.
535as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'"
536
537# Sed expression to map a string onto a valid variable name.
538as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'"
539
540
541test -n "$DJDIR" || exec 7<&0 </dev/null
542exec 6>&1
543
544# Name of the host.
545# hostname on some systems (SVR3.2, old GNU/Linux) returns a bogus exit status,
546# so uname gets run too.
547ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q`
548
549#
550# Initializations.
551#
552ac_default_prefix=/usr/local
553ac_clean_files=
554ac_config_libobj_dir=.
555LIBOBJS=
556cross_compiling=no
557subdirs=
558MFLAGS=
559MAKEFLAGS=
560
561# Identity of this package.
562PACKAGE_NAME='OpenSSH'
563PACKAGE_TARNAME='openssh'
564PACKAGE_VERSION='Portable'
565PACKAGE_STRING='OpenSSH Portable'
566PACKAGE_BUGREPORT='openssh-unix-dev@mindrot.org'
567PACKAGE_URL=''
568
569ac_unique_file="ssh.c"
570# Factoring default headers for most tests.
571ac_includes_default="\
572#include <stdio.h>
573#ifdef HAVE_SYS_TYPES_H
574# include <sys/types.h>
575#endif
576#ifdef HAVE_SYS_STAT_H
577# include <sys/stat.h>
578#endif
579#ifdef STDC_HEADERS
580# include <stdlib.h>
581# include <stddef.h>
582#else
583# ifdef HAVE_STDLIB_H
584# include <stdlib.h>
585# endif
586#endif
587#ifdef HAVE_STRING_H
588# if !defined STDC_HEADERS && defined HAVE_MEMORY_H
589# include <memory.h>
590# endif
591# include <string.h>
592#endif
593#ifdef HAVE_STRINGS_H
594# include <strings.h>
595#endif
596#ifdef HAVE_INTTYPES_H
597# include <inttypes.h>
598#endif
599#ifdef HAVE_STDINT_H
600# include <stdint.h>
601#endif
602#ifdef HAVE_UNISTD_H
603# include <unistd.h>
604#endif"
605
606ac_subst_vars='LTLIBOBJS
607LIBOBJS
608TEST_SSH_IPV6
609piddir
610user_path
611mansubdir
612MANTYPE
613XAUTH_PATH
614STRIP_OPT
615xauth_path
616PRIVSEP_PATH
617K5LIBS
618GSSLIBS
619KRB5CONF
620SSHDLIBS
621SSHLIBS
622SSH_PRIVSEP_USER
623COMMENT_OUT_ECC
624TEST_SSH_ECC
625TEST_SSH_SHA256
626LIBEDIT
627PKGCONFIG
628LD
629PATH_PASSWD_PROG
630LOGIN_PROGRAM_FALLBACK
631STARTUP_SCRIPT_SHELL
632MAKE_PACKAGE_SUPPORTED
633PATH_USERADD_PROG
634PATH_GROUPADD_PROG
635MANFMT
636TEST_SHELL
637MANDOC
638NROFF
639GROFF
640SH
641TEST_MINUS_S_SH
642ENT
643SED
644PERL
645KILL
646CAT
647AR
648INSTALL_DATA
649INSTALL_SCRIPT
650INSTALL_PROGRAM
651RANLIB
652AWK
653EGREP
654GREP
655CPP
656host_os
657host_vendor
658host_cpu
659host
660build_os
661build_vendor
662build_cpu
663build
664OBJEXT
665EXEEXT
666ac_ct_CC
667CPPFLAGS
668LDFLAGS
669CFLAGS
670CC
671target_alias
672host_alias
673build_alias
674LIBS
675ECHO_T
676ECHO_N
677ECHO_C
678DEFS
679mandir
680localedir
681libdir
682psdir
683pdfdir
684dvidir
685htmldir
686infodir
687docdir
688oldincludedir
689includedir
690localstatedir
691sharedstatedir
692sysconfdir
693datadir
694datarootdir
695libexecdir
696sbindir
697bindir
698program_transform_name
699prefix
700exec_prefix
701PACKAGE_URL
702PACKAGE_BUGREPORT
703PACKAGE_STRING
704PACKAGE_VERSION
705PACKAGE_TARNAME
706PACKAGE_NAME
707PATH_SEPARATOR
708SHELL'
709ac_subst_files=''
710ac_user_opts='
711enable_option_checking
712enable_largefile
713with_stackprotect
714with_rpath
715with_cflags
716with_cppflags
717with_ldflags
718with_libs
719with_Werror
720with_solaris_contracts
721with_solaris_projects
722with_osfsia
723with_zlib
724with_zlib_version_check
725with_skey
726with_tcp_wrappers
727with_ldns
728with_libedit
729with_audit
730with_ssl_dir
731with_openssl_header_check
732with_ssl_engine
733with_prngd_port
734with_prngd_socket
735with_pam
736with_privsep_user
737with_sandbox
738with_selinux
739with_kerberos5
740with_privsep_path
741with_xauth
742enable_strip
743with_maildir
744with_mantype
745with_md5_passwords
746with_shadow
747with_ipaddr_display
748enable_etc_default_login
749with_default_path
750with_superuser_path
751with_4in6
752with_bsd_auth
753with_pid_dir
754enable_lastlog
755enable_utmp
756enable_utmpx
757enable_wtmp
758enable_wtmpx
759enable_libutil
760enable_pututline
761enable_pututxline
762with_lastlog
763'
764 ac_precious_vars='build_alias
765host_alias
766target_alias
767CC
768CFLAGS
769LDFLAGS
770LIBS
771CPPFLAGS
772CPP'
773
774
775# Initialize some variables set by options.
776ac_init_help=
777ac_init_version=false
778ac_unrecognized_opts=
779ac_unrecognized_sep=
780# The variables have the same names as the options, with
781# dashes changed to underlines.
782cache_file=/dev/null
783exec_prefix=NONE
784no_create=
785no_recursion=
786prefix=NONE
787program_prefix=NONE
788program_suffix=NONE
789program_transform_name=s,x,x,
790silent=
791site=
792srcdir=
793verbose=
794x_includes=NONE
795x_libraries=NONE
796
797# Installation directory options.
798# These are left unexpanded so users can "make install exec_prefix=/foo"
799# and all the variables that are supposed to be based on exec_prefix
800# by default will actually change.
801# Use braces instead of parens because sh, perl, etc. also accept them.
802# (The list follows the same order as the GNU Coding Standards.)
803bindir='${exec_prefix}/bin'
804sbindir='${exec_prefix}/sbin'
805libexecdir='${exec_prefix}/libexec'
806datarootdir='${prefix}/share'
807datadir='${datarootdir}'
808sysconfdir='${prefix}/etc'
809sharedstatedir='${prefix}/com'
810localstatedir='${prefix}/var'
811includedir='${prefix}/include'
812oldincludedir='/usr/include'
813docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
814infodir='${datarootdir}/info'
815htmldir='${docdir}'
816dvidir='${docdir}'
817pdfdir='${docdir}'
818psdir='${docdir}'
819libdir='${exec_prefix}/lib'
820localedir='${datarootdir}/locale'
821mandir='${datarootdir}/man'
822
823ac_prev=
824ac_dashdash=
825for ac_option
826do
827 # If the previous option needs an argument, assign it.
828 if test -n "$ac_prev"; then
829 eval $ac_prev=\$ac_option
830 ac_prev=
831 continue
832 fi
833
834 case $ac_option in
835 *=?*) ac_optarg=`expr "X$ac_option" : '[^=]*=\(.*\)'` ;;
836 *=) ac_optarg= ;;
837 *) ac_optarg=yes ;;
838 esac
839
840 # Accept the important Cygnus configure options, so we can diagnose typos.
841
842 case $ac_dashdash$ac_option in
843 --)
844 ac_dashdash=yes ;;
845
846 -bindir | --bindir | --bindi | --bind | --bin | --bi)
847 ac_prev=bindir ;;
848 -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*)
849 bindir=$ac_optarg ;;
850
851 -build | --build | --buil | --bui | --bu)
852 ac_prev=build_alias ;;
853 -build=* | --build=* | --buil=* | --bui=* | --bu=*)
854 build_alias=$ac_optarg ;;
855
856 -cache-file | --cache-file | --cache-fil | --cache-fi \
857 | --cache-f | --cache- | --cache | --cach | --cac | --ca | --c)
858 ac_prev=cache_file ;;
859 -cache-file=* | --cache-file=* | --cache-fil=* | --cache-fi=* \
860 | --cache-f=* | --cache-=* | --cache=* | --cach=* | --cac=* | --ca=* | --c=*)
861 cache_file=$ac_optarg ;;
862
863 --config-cache | -C)
864 cache_file=config.cache ;;
865
866 -datadir | --datadir | --datadi | --datad)
867 ac_prev=datadir ;;
868 -datadir=* | --datadir=* | --datadi=* | --datad=*)
869 datadir=$ac_optarg ;;
870
871 -datarootdir | --datarootdir | --datarootdi | --datarootd | --dataroot \
872 | --dataroo | --dataro | --datar)
873 ac_prev=datarootdir ;;
874 -datarootdir=* | --datarootdir=* | --datarootdi=* | --datarootd=* \
875 | --dataroot=* | --dataroo=* | --dataro=* | --datar=*)
876 datarootdir=$ac_optarg ;;
877
878 -disable-* | --disable-*)
879 ac_useropt=`expr "x$ac_option" : 'x-*disable-\(.*\)'`
880 # Reject names that are not valid shell variable names.
881 expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
882 as_fn_error $? "invalid feature name: $ac_useropt"
883 ac_useropt_orig=$ac_useropt
884 ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
885 case $ac_user_opts in
886 *"
887"enable_$ac_useropt"
888"*) ;;
889 *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--disable-$ac_useropt_orig"
890 ac_unrecognized_sep=', ';;
891 esac
892 eval enable_$ac_useropt=no ;;
893
894 -docdir | --docdir | --docdi | --doc | --do)
895 ac_prev=docdir ;;
896 -docdir=* | --docdir=* | --docdi=* | --doc=* | --do=*)
897 docdir=$ac_optarg ;;
898
899 -dvidir | --dvidir | --dvidi | --dvid | --dvi | --dv)
900 ac_prev=dvidir ;;
901 -dvidir=* | --dvidir=* | --dvidi=* | --dvid=* | --dvi=* | --dv=*)
902 dvidir=$ac_optarg ;;
903
904 -enable-* | --enable-*)
905 ac_useropt=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'`
906 # Reject names that are not valid shell variable names.
907 expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
908 as_fn_error $? "invalid feature name: $ac_useropt"
909 ac_useropt_orig=$ac_useropt
910 ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
911 case $ac_user_opts in
912 *"
913"enable_$ac_useropt"
914"*) ;;
915 *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--enable-$ac_useropt_orig"
916 ac_unrecognized_sep=', ';;
917 esac
918 eval enable_$ac_useropt=\$ac_optarg ;;
919
920 -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \
921 | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \
922 | --exec | --exe | --ex)
923 ac_prev=exec_prefix ;;
924 -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \
925 | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \
926 | --exec=* | --exe=* | --ex=*)
927 exec_prefix=$ac_optarg ;;
928
929 -gas | --gas | --ga | --g)
930 # Obsolete; use --with-gas.
931 with_gas=yes ;;
932
933 -help | --help | --hel | --he | -h)
934 ac_init_help=long ;;
935 -help=r* | --help=r* | --hel=r* | --he=r* | -hr*)
936 ac_init_help=recursive ;;
937 -help=s* | --help=s* | --hel=s* | --he=s* | -hs*)
938 ac_init_help=short ;;
939
940 -host | --host | --hos | --ho)
941 ac_prev=host_alias ;;
942 -host=* | --host=* | --hos=* | --ho=*)
943 host_alias=$ac_optarg ;;
944
945 -htmldir | --htmldir | --htmldi | --htmld | --html | --htm | --ht)
946 ac_prev=htmldir ;;
947 -htmldir=* | --htmldir=* | --htmldi=* | --htmld=* | --html=* | --htm=* \
948 | --ht=*)
949 htmldir=$ac_optarg ;;
950
951 -includedir | --includedir | --includedi | --included | --include \
952 | --includ | --inclu | --incl | --inc)
953 ac_prev=includedir ;;
954 -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \
955 | --includ=* | --inclu=* | --incl=* | --inc=*)
956 includedir=$ac_optarg ;;
957
958 -infodir | --infodir | --infodi | --infod | --info | --inf)
959 ac_prev=infodir ;;
960 -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*)
961 infodir=$ac_optarg ;;
962
963 -libdir | --libdir | --libdi | --libd)
964 ac_prev=libdir ;;
965 -libdir=* | --libdir=* | --libdi=* | --libd=*)
966 libdir=$ac_optarg ;;
967
968 -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \
969 | --libexe | --libex | --libe)
970 ac_prev=libexecdir ;;
971 -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \
972 | --libexe=* | --libex=* | --libe=*)
973 libexecdir=$ac_optarg ;;
974
975 -localedir | --localedir | --localedi | --localed | --locale)
976 ac_prev=localedir ;;
977 -localedir=* | --localedir=* | --localedi=* | --localed=* | --locale=*)
978 localedir=$ac_optarg ;;
979
980 -localstatedir | --localstatedir | --localstatedi | --localstated \
981 | --localstate | --localstat | --localsta | --localst | --locals)
982 ac_prev=localstatedir ;;
983 -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \
984 | --localstate=* | --localstat=* | --localsta=* | --localst=* | --locals=*)
985 localstatedir=$ac_optarg ;;
986
987 -mandir | --mandir | --mandi | --mand | --man | --ma | --m)
988 ac_prev=mandir ;;
989 -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*)
990 mandir=$ac_optarg ;;
991
992 -nfp | --nfp | --nf)
993 # Obsolete; use --without-fp.
994 with_fp=no ;;
995
996 -no-create | --no-create | --no-creat | --no-crea | --no-cre \
997 | --no-cr | --no-c | -n)
998 no_create=yes ;;
999
1000 -no-recursion | --no-recursion | --no-recursio | --no-recursi \
1001 | --no-recurs | --no-recur | --no-recu | --no-rec | --no-re | --no-r)
1002 no_recursion=yes ;;
1003
1004 -oldincludedir | --oldincludedir | --oldincludedi | --oldincluded \
1005 | --oldinclude | --oldinclud | --oldinclu | --oldincl | --oldinc \
1006 | --oldin | --oldi | --old | --ol | --o)
1007 ac_prev=oldincludedir ;;
1008 -oldincludedir=* | --oldincludedir=* | --oldincludedi=* | --oldincluded=* \
1009 | --oldinclude=* | --oldinclud=* | --oldinclu=* | --oldincl=* | --oldinc=* \
1010 | --oldin=* | --oldi=* | --old=* | --ol=* | --o=*)
1011 oldincludedir=$ac_optarg ;;
1012
1013 -prefix | --prefix | --prefi | --pref | --pre | --pr | --p)
1014 ac_prev=prefix ;;
1015 -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*)
1016 prefix=$ac_optarg ;;
1017
1018 -program-prefix | --program-prefix | --program-prefi | --program-pref \
1019 | --program-pre | --program-pr | --program-p)
1020 ac_prev=program_prefix ;;
1021 -program-prefix=* | --program-prefix=* | --program-prefi=* \
1022 | --program-pref=* | --program-pre=* | --program-pr=* | --program-p=*)
1023 program_prefix=$ac_optarg ;;
1024
1025 -program-suffix | --program-suffix | --program-suffi | --program-suff \
1026 | --program-suf | --program-su | --program-s)
1027 ac_prev=program_suffix ;;
1028 -program-suffix=* | --program-suffix=* | --program-suffi=* \
1029 | --program-suff=* | --program-suf=* | --program-su=* | --program-s=*)
1030 program_suffix=$ac_optarg ;;
1031
1032 -program-transform-name | --program-transform-name \
1033 | --program-transform-nam | --program-transform-na \
1034 | --program-transform-n | --program-transform- \
1035 | --program-transform | --program-transfor \
1036 | --program-transfo | --program-transf \
1037 | --program-trans | --program-tran \
1038 | --progr-tra | --program-tr | --program-t)
1039 ac_prev=program_transform_name ;;
1040 -program-transform-name=* | --program-transform-name=* \
1041 | --program-transform-nam=* | --program-transform-na=* \
1042 | --program-transform-n=* | --program-transform-=* \
1043 | --program-transform=* | --program-transfor=* \
1044 | --program-transfo=* | --program-transf=* \
1045 | --program-trans=* | --program-tran=* \
1046 | --progr-tra=* | --program-tr=* | --program-t=*)
1047 program_transform_name=$ac_optarg ;;
1048
1049 -pdfdir | --pdfdir | --pdfdi | --pdfd | --pdf | --pd)
1050 ac_prev=pdfdir ;;
1051 -pdfdir=* | --pdfdir=* | --pdfdi=* | --pdfd=* | --pdf=* | --pd=*)
1052 pdfdir=$ac_optarg ;;
1053
1054 -psdir | --psdir | --psdi | --psd | --ps)
1055 ac_prev=psdir ;;
1056 -psdir=* | --psdir=* | --psdi=* | --psd=* | --ps=*)
1057 psdir=$ac_optarg ;;
1058
1059 -q | -quiet | --quiet | --quie | --qui | --qu | --q \
1060 | -silent | --silent | --silen | --sile | --sil)
1061 silent=yes ;;
1062
1063 -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb)
1064 ac_prev=sbindir ;;
1065 -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \
1066 | --sbi=* | --sb=*)
1067 sbindir=$ac_optarg ;;
1068
1069 -sharedstatedir | --sharedstatedir | --sharedstatedi \
1070 | --sharedstated | --sharedstate | --sharedstat | --sharedsta \
1071 | --sharedst | --shareds | --shared | --share | --shar \
1072 | --sha | --sh)
1073 ac_prev=sharedstatedir ;;
1074 -sharedstatedir=* | --sharedstatedir=* | --sharedstatedi=* \
1075 | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \
1076 | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \
1077 | --sha=* | --sh=*)
1078 sharedstatedir=$ac_optarg ;;
1079
1080 -site | --site | --sit)
1081 ac_prev=site ;;
1082 -site=* | --site=* | --sit=*)
1083 site=$ac_optarg ;;
1084
1085 -srcdir | --srcdir | --srcdi | --srcd | --src | --sr)
1086 ac_prev=srcdir ;;
1087 -srcdir=* | --srcdir=* | --srcdi=* | --srcd=* | --src=* | --sr=*)
1088 srcdir=$ac_optarg ;;
1089
1090 -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \
1091 | --syscon | --sysco | --sysc | --sys | --sy)
1092 ac_prev=sysconfdir ;;
1093 -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \
1094 | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*)
1095 sysconfdir=$ac_optarg ;;
1096
1097 -target | --target | --targe | --targ | --tar | --ta | --t)
1098 ac_prev=target_alias ;;
1099 -target=* | --target=* | --targe=* | --targ=* | --tar=* | --ta=* | --t=*)
1100 target_alias=$ac_optarg ;;
1101
1102 -v | -verbose | --verbose | --verbos | --verbo | --verb)
1103 verbose=yes ;;
1104
1105 -version | --version | --versio | --versi | --vers | -V)
1106 ac_init_version=: ;;
1107
1108 -with-* | --with-*)
1109 ac_useropt=`expr "x$ac_option" : 'x-*with-\([^=]*\)'`
1110 # Reject names that are not valid shell variable names.
1111 expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
1112 as_fn_error $? "invalid package name: $ac_useropt"
1113 ac_useropt_orig=$ac_useropt
1114 ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
1115 case $ac_user_opts in
1116 *"
1117"with_$ac_useropt"
1118"*) ;;
1119 *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--with-$ac_useropt_orig"
1120 ac_unrecognized_sep=', ';;
1121 esac
1122 eval with_$ac_useropt=\$ac_optarg ;;
1123
1124 -without-* | --without-*)
1125 ac_useropt=`expr "x$ac_option" : 'x-*without-\(.*\)'`
1126 # Reject names that are not valid shell variable names.
1127 expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
1128 as_fn_error $? "invalid package name: $ac_useropt"
1129 ac_useropt_orig=$ac_useropt
1130 ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
1131 case $ac_user_opts in
1132 *"
1133"with_$ac_useropt"
1134"*) ;;
1135 *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--without-$ac_useropt_orig"
1136 ac_unrecognized_sep=', ';;
1137 esac
1138 eval with_$ac_useropt=no ;;
1139
1140 --x)
1141 # Obsolete; use --with-x.
1142 with_x=yes ;;
1143
1144 -x-includes | --x-includes | --x-include | --x-includ | --x-inclu \
1145 | --x-incl | --x-inc | --x-in | --x-i)
1146 ac_prev=x_includes ;;
1147 -x-includes=* | --x-includes=* | --x-include=* | --x-includ=* | --x-inclu=* \
1148 | --x-incl=* | --x-inc=* | --x-in=* | --x-i=*)
1149 x_includes=$ac_optarg ;;
1150
1151 -x-libraries | --x-libraries | --x-librarie | --x-librari \
1152 | --x-librar | --x-libra | --x-libr | --x-lib | --x-li | --x-l)
1153 ac_prev=x_libraries ;;
1154 -x-libraries=* | --x-libraries=* | --x-librarie=* | --x-librari=* \
1155 | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*)
1156 x_libraries=$ac_optarg ;;
1157
1158 -*) as_fn_error $? "unrecognized option: \`$ac_option'
1159Try \`$0 --help' for more information"
1160 ;;
1161
1162 *=*)
1163 ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='`
1164 # Reject names that are not valid shell variable names.
1165 case $ac_envvar in #(
1166 '' | [0-9]* | *[!_$as_cr_alnum]* )
1167 as_fn_error $? "invalid variable name: \`$ac_envvar'" ;;
1168 esac
1169 eval $ac_envvar=\$ac_optarg
1170 export $ac_envvar ;;
1171
1172 *)
1173 # FIXME: should be removed in autoconf 3.0.
1174 $as_echo "$as_me: WARNING: you should use --build, --host, --target" >&2
1175 expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null &&
1176 $as_echo "$as_me: WARNING: invalid host type: $ac_option" >&2
1177 : "${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option}"
1178 ;;
1179
1180 esac
1181done
1182
1183if test -n "$ac_prev"; then
1184 ac_option=--`echo $ac_prev | sed 's/_/-/g'`
1185 as_fn_error $? "missing argument to $ac_option"
1186fi
1187
1188if test -n "$ac_unrecognized_opts"; then
1189 case $enable_option_checking in
1190 no) ;;
1191 fatal) as_fn_error $? "unrecognized options: $ac_unrecognized_opts" ;;
1192 *) $as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2 ;;
1193 esac
1194fi
1195
1196# Check all directory arguments for consistency.
1197for ac_var in exec_prefix prefix bindir sbindir libexecdir datarootdir \
1198 datadir sysconfdir sharedstatedir localstatedir includedir \
1199 oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
1200 libdir localedir mandir
1201do
1202 eval ac_val=\$$ac_var
1203 # Remove trailing slashes.
1204 case $ac_val in
1205 */ )
1206 ac_val=`expr "X$ac_val" : 'X\(.*[^/]\)' \| "X$ac_val" : 'X\(.*\)'`
1207 eval $ac_var=\$ac_val;;
1208 esac
1209 # Be sure to have absolute directory names.
1210 case $ac_val in
1211 [\\/$]* | ?:[\\/]* ) continue;;
1212 NONE | '' ) case $ac_var in *prefix ) continue;; esac;;
1213 esac
1214 as_fn_error $? "expected an absolute directory name for --$ac_var: $ac_val"
1215done
1216
1217# There might be people who depend on the old broken behavior: `$host'
1218# used to hold the argument of --host etc.
1219# FIXME: To remove some day.
1220build=$build_alias
1221host=$host_alias
1222target=$target_alias
1223
1224# FIXME: To remove some day.
1225if test "x$host_alias" != x; then
1226 if test "x$build_alias" = x; then
1227 cross_compiling=maybe
1228 $as_echo "$as_me: WARNING: if you wanted to set the --build type, don't use --host.
1229 If a cross compiler is detected then cross compile mode will be used" >&2
1230 elif test "x$build_alias" != "x$host_alias"; then
1231 cross_compiling=yes
1232 fi
1233fi
1234
1235ac_tool_prefix=
1236test -n "$host_alias" && ac_tool_prefix=$host_alias-
1237
1238test "$silent" = yes && exec 6>/dev/null
1239
1240
1241ac_pwd=`pwd` && test -n "$ac_pwd" &&
1242ac_ls_di=`ls -di .` &&
1243ac_pwd_ls_di=`cd "$ac_pwd" && ls -di .` ||
1244 as_fn_error $? "working directory cannot be determined"
1245test "X$ac_ls_di" = "X$ac_pwd_ls_di" ||
1246 as_fn_error $? "pwd does not report name of working directory"
1247
1248
1249# Find the source files, if location was not specified.
1250if test -z "$srcdir"; then
1251 ac_srcdir_defaulted=yes
1252 # Try the directory containing this script, then the parent directory.
1253 ac_confdir=`$as_dirname -- "$as_myself" ||
1254$as_expr X"$as_myself" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
1255 X"$as_myself" : 'X\(//\)[^/]' \| \
1256 X"$as_myself" : 'X\(//\)$' \| \
1257 X"$as_myself" : 'X\(/\)' \| . 2>/dev/null ||
1258$as_echo X"$as_myself" |
1259 sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
1260 s//\1/
1261 q
1262 }
1263 /^X\(\/\/\)[^/].*/{
1264 s//\1/
1265 q
1266 }
1267 /^X\(\/\/\)$/{
1268 s//\1/
1269 q
1270 }
1271 /^X\(\/\).*/{
1272 s//\1/
1273 q
1274 }
1275 s/.*/./; q'`
1276 srcdir=$ac_confdir
1277 if test ! -r "$srcdir/$ac_unique_file"; then
1278 srcdir=..
1279 fi
1280else
1281 ac_srcdir_defaulted=no
1282fi
1283if test ! -r "$srcdir/$ac_unique_file"; then
1284 test "$ac_srcdir_defaulted" = yes && srcdir="$ac_confdir or .."
1285 as_fn_error $? "cannot find sources ($ac_unique_file) in $srcdir"
1286fi
1287ac_msg="sources are in $srcdir, but \`cd $srcdir' does not work"
1288ac_abs_confdir=`(
1289 cd "$srcdir" && test -r "./$ac_unique_file" || as_fn_error $? "$ac_msg"
1290 pwd)`
1291# When building in place, set srcdir=.
1292if test "$ac_abs_confdir" = "$ac_pwd"; then
1293 srcdir=.
1294fi
1295# Remove unnecessary trailing slashes from srcdir.
1296# Double slashes in file names in object file debugging info
1297# mess up M-x gdb in Emacs.
1298case $srcdir in
1299*/) srcdir=`expr "X$srcdir" : 'X\(.*[^/]\)' \| "X$srcdir" : 'X\(.*\)'`;;
1300esac
1301for ac_var in $ac_precious_vars; do
1302 eval ac_env_${ac_var}_set=\${${ac_var}+set}
1303 eval ac_env_${ac_var}_value=\$${ac_var}
1304 eval ac_cv_env_${ac_var}_set=\${${ac_var}+set}
1305 eval ac_cv_env_${ac_var}_value=\$${ac_var}
1306done
1307
1308#
1309# Report the --help message.
1310#
1311if test "$ac_init_help" = "long"; then
1312 # Omit some internal or obsolete options to make the list less imposing.
1313 # This message is too long to be a string in the A/UX 3.1 sh.
1314 cat <<_ACEOF
1315\`configure' configures OpenSSH Portable to adapt to many kinds of systems.
1316
1317Usage: $0 [OPTION]... [VAR=VALUE]...
1318
1319To assign environment variables (e.g., CC, CFLAGS...), specify them as
1320VAR=VALUE. See below for descriptions of some of the useful variables.
1321
1322Defaults for the options are specified in brackets.
1323
1324Configuration:
1325 -h, --help display this help and exit
1326 --help=short display options specific to this package
1327 --help=recursive display the short help of all the included packages
1328 -V, --version display version information and exit
1329 -q, --quiet, --silent do not print \`checking ...' messages
1330 --cache-file=FILE cache test results in FILE [disabled]
1331 -C, --config-cache alias for \`--cache-file=config.cache'
1332 -n, --no-create do not create output files
1333 --srcdir=DIR find the sources in DIR [configure dir or \`..']
1334
1335Installation directories:
1336 --prefix=PREFIX install architecture-independent files in PREFIX
1337 [$ac_default_prefix]
1338 --exec-prefix=EPREFIX install architecture-dependent files in EPREFIX
1339 [PREFIX]
1340
1341By default, \`make install' will install all the files in
1342\`$ac_default_prefix/bin', \`$ac_default_prefix/lib' etc. You can specify
1343an installation prefix other than \`$ac_default_prefix' using \`--prefix',
1344for instance \`--prefix=\$HOME'.
1345
1346For better control, use the options below.
1347
1348Fine tuning of the installation directories:
1349 --bindir=DIR user executables [EPREFIX/bin]
1350 --sbindir=DIR system admin executables [EPREFIX/sbin]
1351 --libexecdir=DIR program executables [EPREFIX/libexec]
1352 --sysconfdir=DIR read-only single-machine data [PREFIX/etc]
1353 --sharedstatedir=DIR modifiable architecture-independent data [PREFIX/com]
1354 --localstatedir=DIR modifiable single-machine data [PREFIX/var]
1355 --libdir=DIR object code libraries [EPREFIX/lib]
1356 --includedir=DIR C header files [PREFIX/include]
1357 --oldincludedir=DIR C header files for non-gcc [/usr/include]
1358 --datarootdir=DIR read-only arch.-independent data root [PREFIX/share]
1359 --datadir=DIR read-only architecture-independent data [DATAROOTDIR]
1360 --infodir=DIR info documentation [DATAROOTDIR/info]
1361 --localedir=DIR locale-dependent data [DATAROOTDIR/locale]
1362 --mandir=DIR man documentation [DATAROOTDIR/man]
1363 --docdir=DIR documentation root [DATAROOTDIR/doc/openssh]
1364 --htmldir=DIR html documentation [DOCDIR]
1365 --dvidir=DIR dvi documentation [DOCDIR]
1366 --pdfdir=DIR pdf documentation [DOCDIR]
1367 --psdir=DIR ps documentation [DOCDIR]
1368_ACEOF
1369
1370 cat <<\_ACEOF
1371
1372System types:
1373 --build=BUILD configure for building on BUILD [guessed]
1374 --host=HOST cross-compile to build programs to run on HOST [BUILD]
1375_ACEOF
1376fi
1377
1378if test -n "$ac_init_help"; then
1379 case $ac_init_help in
1380 short | recursive ) echo "Configuration of OpenSSH Portable:";;
1381 esac
1382 cat <<\_ACEOF
1383
1384Optional Features:
1385 --disable-option-checking ignore unrecognized --enable/--with options
1386 --disable-FEATURE do not include FEATURE (same as --enable-FEATURE=no)
1387 --enable-FEATURE[=ARG] include FEATURE [ARG=yes]
1388 --disable-largefile omit support for large files
1389 --disable-strip Disable calling strip(1) on install
1390 --disable-etc-default-login Disable using PATH from /etc/default/login no
1391 --disable-lastlog disable use of lastlog even if detected no
1392 --disable-utmp disable use of utmp even if detected no
1393 --disable-utmpx disable use of utmpx even if detected no
1394 --disable-wtmp disable use of wtmp even if detected no
1395 --disable-wtmpx disable use of wtmpx even if detected no
1396 --disable-libutil disable use of libutil (login() etc.) no
1397 --disable-pututline disable use of pututline() etc. (uwtmp) no
1398 --disable-pututxline disable use of pututxline() etc. (uwtmpx) no
1399
1400Optional Packages:
1401 --with-PACKAGE[=ARG] use PACKAGE [ARG=yes]
1402 --without-PACKAGE do not use PACKAGE (same as --with-PACKAGE=no)
1403 --without-stackprotect Don't use compiler's stack protection
1404 --without-rpath Disable auto-added -R linker paths
1405 --with-cflags Specify additional flags to pass to compiler
1406 --with-cppflags Specify additional flags to pass to preprocessor
1407 --with-ldflags Specify additional flags to pass to linker
1408 --with-libs Specify additional libraries to link with
1409 --with-Werror Build main code with -Werror
1410 --with-solaris-contracts Enable Solaris process contracts (experimental)
1411 --with-solaris-projects Enable Solaris projects (experimental)
1412 --with-osfsia Enable Digital Unix SIA
1413 --with-zlib=PATH Use zlib in PATH
1414 --without-zlib-version-check Disable zlib version check
1415 --with-skey[=PATH] Enable S/Key support (optionally in PATH)
1416 --with-tcp-wrappers[=PATH] Enable tcpwrappers support (optionally in PATH)
1417 --with-ldns[=PATH] Use ldns for DNSSEC support (optionally in PATH)
1418 --with-libedit[=PATH] Enable libedit support for sftp
1419 --with-audit=module Enable audit support (modules=debug,bsm,linux)
1420 --with-ssl-dir=PATH Specify path to OpenSSL installation
1421 --without-openssl-header-check Disable OpenSSL version consistency check
1422 --with-ssl-engine Enable OpenSSL (hardware) ENGINE support
1423 --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT
1424 --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)
1425 --with-pam Enable PAM support
1426 --with-privsep-user=user Specify non-privileged user for privilege separation
1427 --with-sandbox=style Specify privilege separation sandbox (no, darwin, rlimit, systrace, seccomp_filter)
1428 --with-selinux Enable SELinux support
1429 --with-kerberos5=PATH Enable Kerberos 5 support
1430 --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)
1431 --with-xauth=PATH Specify path to xauth program
1432 --with-maildir=/path/to/mail Specify your system mail directory
1433 --with-mantype=man|cat|doc Set man page type
1434 --with-md5-passwords Enable use of MD5 passwords
1435 --without-shadow Disable shadow password support
1436 --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY
1437 --with-default-path= Specify default \$PATH environment for server
1438 --with-superuser-path= Specify different path for super-user
1439 --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses
1440 --with-bsd-auth Enable BSD auth support
1441 --with-pid-dir=PATH Specify location of ssh.pid file
1442 --with-lastlog=FILE|DIR specify lastlog location common locations
1443
1444Some influential environment variables:
1445 CC C compiler command
1446 CFLAGS C compiler flags
1447 LDFLAGS linker flags, e.g. -L<lib dir> if you have libraries in a
1448 nonstandard directory <lib dir>
1449 LIBS libraries to pass to the linker, e.g. -l<library>
1450 CPPFLAGS (Objective) C/C++ preprocessor flags, e.g. -I<include dir> if
1451 you have headers in a nonstandard directory <include dir>
1452 CPP C preprocessor
1453
1454Use these variables to override the choices made by `configure' or to help
1455it to find libraries and programs with nonstandard names/locations.
1456
1457Report bugs to <openssh-unix-dev@mindrot.org>.
1458_ACEOF
1459ac_status=$?
1460fi
1461
1462if test "$ac_init_help" = "recursive"; then
1463 # If there are subdirs, report their specific --help.
1464 for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue
1465 test -d "$ac_dir" ||
1466 { cd "$srcdir" && ac_pwd=`pwd` && srcdir=. && test -d "$ac_dir"; } ||
1467 continue
1468 ac_builddir=.
1469
1470case "$ac_dir" in
1471.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
1472*)
1473 ac_dir_suffix=/`$as_echo "$ac_dir" | sed 's|^\.[\\/]||'`
1474 # A ".." for each directory in $ac_dir_suffix.
1475 ac_top_builddir_sub=`$as_echo "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
1476 case $ac_top_builddir_sub in
1477 "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
1478 *) ac_top_build_prefix=$ac_top_builddir_sub/ ;;
1479 esac ;;
1480esac
1481ac_abs_top_builddir=$ac_pwd
1482ac_abs_builddir=$ac_pwd$ac_dir_suffix
1483# for backward compatibility:
1484ac_top_builddir=$ac_top_build_prefix
1485
1486case $srcdir in
1487 .) # We are building in place.
1488 ac_srcdir=.
1489 ac_top_srcdir=$ac_top_builddir_sub
1490 ac_abs_top_srcdir=$ac_pwd ;;
1491 [\\/]* | ?:[\\/]* ) # Absolute name.
1492 ac_srcdir=$srcdir$ac_dir_suffix;
1493 ac_top_srcdir=$srcdir
1494 ac_abs_top_srcdir=$srcdir ;;
1495 *) # Relative name.
1496 ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
1497 ac_top_srcdir=$ac_top_build_prefix$srcdir
1498 ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
1499esac
1500ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
1501
1502 cd "$ac_dir" || { ac_status=$?; continue; }
1503 # Check for guested configure.
1504 if test -f "$ac_srcdir/configure.gnu"; then
1505 echo &&
1506 $SHELL "$ac_srcdir/configure.gnu" --help=recursive
1507 elif test -f "$ac_srcdir/configure"; then
1508 echo &&
1509 $SHELL "$ac_srcdir/configure" --help=recursive
1510 else
1511 $as_echo "$as_me: WARNING: no configuration information is in $ac_dir" >&2
1512 fi || ac_status=$?
1513 cd "$ac_pwd" || { ac_status=$?; break; }
1514 done
1515fi
1516
1517test -n "$ac_init_help" && exit $ac_status
1518if $ac_init_version; then
1519 cat <<\_ACEOF
1520OpenSSH configure Portable
1521generated by GNU Autoconf 2.68
1522
1523Copyright (C) 2010 Free Software Foundation, Inc.
1524This configure script is free software; the Free Software Foundation
1525gives unlimited permission to copy, distribute and modify it.
1526_ACEOF
1527 exit
1528fi
1529
1530## ------------------------ ##
1531## Autoconf initialization. ##
1532## ------------------------ ##
1533
1534# ac_fn_c_try_compile LINENO
1535# --------------------------
1536# Try to compile conftest.$ac_ext, and return whether this succeeded.
1537ac_fn_c_try_compile ()
1538{
1539 as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
1540 rm -f conftest.$ac_objext
1541 if { { ac_try="$ac_compile"
1542case "(($ac_try" in
1543 *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
1544 *) ac_try_echo=$ac_try;;
1545esac
1546eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
1547$as_echo "$ac_try_echo"; } >&5
1548 (eval "$ac_compile") 2>conftest.err
1549 ac_status=$?
1550 if test -s conftest.err; then
1551 grep -v '^ *+' conftest.err >conftest.er1
1552 cat conftest.er1 >&5
1553 mv -f conftest.er1 conftest.err
1554 fi
1555 $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
1556 test $ac_status = 0; } && {
1557 test -z "$ac_c_werror_flag" ||
1558 test ! -s conftest.err
1559 } && test -s conftest.$ac_objext; then :
1560 ac_retval=0
1561else
1562 $as_echo "$as_me: failed program was:" >&5
1563sed 's/^/| /' conftest.$ac_ext >&5
1564
1565 ac_retval=1
1566fi
1567 eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
1568 as_fn_set_status $ac_retval
1569
1570} # ac_fn_c_try_compile
1571
1572# ac_fn_c_try_run LINENO
1573# ----------------------
1574# Try to link conftest.$ac_ext, and return whether this succeeded. Assumes
1575# that executables *can* be run.
1576ac_fn_c_try_run ()
1577{
1578 as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
1579 if { { ac_try="$ac_link"
1580case "(($ac_try" in
1581 *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
1582 *) ac_try_echo=$ac_try;;
1583esac
1584eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
1585$as_echo "$ac_try_echo"; } >&5
1586 (eval "$ac_link") 2>&5
1587 ac_status=$?
1588 $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
1589 test $ac_status = 0; } && { ac_try='./conftest$ac_exeext'
1590 { { case "(($ac_try" in
1591 *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
1592 *) ac_try_echo=$ac_try;;
1593esac
1594eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
1595$as_echo "$ac_try_echo"; } >&5
1596 (eval "$ac_try") 2>&5
1597 ac_status=$?
1598 $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
1599 test $ac_status = 0; }; }; then :
1600 ac_retval=0
1601else
1602 $as_echo "$as_me: program exited with status $ac_status" >&5
1603 $as_echo "$as_me: failed program was:" >&5
1604sed 's/^/| /' conftest.$ac_ext >&5
1605
1606 ac_retval=$ac_status
1607fi
1608 rm -rf conftest.dSYM conftest_ipa8_conftest.oo
1609 eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
1610 as_fn_set_status $ac_retval
1611
1612} # ac_fn_c_try_run
1613
1614# ac_fn_c_try_cpp LINENO
1615# ----------------------
1616# Try to preprocess conftest.$ac_ext, and return whether this succeeded.
1617ac_fn_c_try_cpp ()
1618{
1619 as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
1620 if { { ac_try="$ac_cpp conftest.$ac_ext"
1621case "(($ac_try" in
1622 *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
1623 *) ac_try_echo=$ac_try;;
1624esac
1625eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
1626$as_echo "$ac_try_echo"; } >&5
1627 (eval "$ac_cpp conftest.$ac_ext") 2>conftest.err
1628 ac_status=$?
1629 if test -s conftest.err; then
1630 grep -v '^ *+' conftest.err >conftest.er1
1631 cat conftest.er1 >&5
1632 mv -f conftest.er1 conftest.err
1633 fi
1634 $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
1635 test $ac_status = 0; } > conftest.i && {
1636 test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
1637 test ! -s conftest.err
1638 }; then :
1639 ac_retval=0
1640else
1641 $as_echo "$as_me: failed program was:" >&5
1642sed 's/^/| /' conftest.$ac_ext >&5
1643
1644 ac_retval=1
1645fi
1646 eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
1647 as_fn_set_status $ac_retval
1648
1649} # ac_fn_c_try_cpp
1650
1651# ac_fn_c_check_header_compile LINENO HEADER VAR INCLUDES
1652# -------------------------------------------------------
1653# Tests whether HEADER exists and can be compiled using the include files in
1654# INCLUDES, setting the cache variable VAR accordingly.
1655ac_fn_c_check_header_compile ()
1656{
1657 as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
1658 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
1659$as_echo_n "checking for $2... " >&6; }
1660if eval \${$3+:} false; then :
1661 $as_echo_n "(cached) " >&6
1662else
1663 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
1664/* end confdefs.h. */
1665$4
1666#include <$2>
1667_ACEOF
1668if ac_fn_c_try_compile "$LINENO"; then :
1669 eval "$3=yes"
1670else
1671 eval "$3=no"
1672fi
1673rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
1674fi
1675eval ac_res=\$$3
1676 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
1677$as_echo "$ac_res" >&6; }
1678 eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
1679
1680} # ac_fn_c_check_header_compile
1681
1682# ac_fn_c_check_decl LINENO SYMBOL VAR INCLUDES
1683# ---------------------------------------------
1684# Tests whether SYMBOL is declared in INCLUDES, setting cache variable VAR
1685# accordingly.
1686ac_fn_c_check_decl ()
1687{
1688 as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
1689 as_decl_name=`echo $2|sed 's/ *(.*//'`
1690 as_decl_use=`echo $2|sed -e 's/(/((/' -e 's/)/) 0&/' -e 's/,/) 0& (/g'`
1691 { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $as_decl_name is declared" >&5
1692$as_echo_n "checking whether $as_decl_name is declared... " >&6; }
1693if eval \${$3+:} false; then :
1694 $as_echo_n "(cached) " >&6
1695else
1696 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
1697/* end confdefs.h. */
1698$4
1699int
1700main ()
1701{
1702#ifndef $as_decl_name
1703#ifdef __cplusplus
1704 (void) $as_decl_use;
1705#else
1706 (void) $as_decl_name;
1707#endif
1708#endif
1709
1710 ;
1711 return 0;
1712}
1713_ACEOF
1714if ac_fn_c_try_compile "$LINENO"; then :
1715 eval "$3=yes"
1716else
1717 eval "$3=no"
1718fi
1719rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
1720fi
1721eval ac_res=\$$3
1722 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
1723$as_echo "$ac_res" >&6; }
1724 eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
1725
1726} # ac_fn_c_check_decl
1727
1728# ac_fn_c_try_link LINENO
1729# -----------------------
1730# Try to link conftest.$ac_ext, and return whether this succeeded.
1731ac_fn_c_try_link ()
1732{
1733 as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
1734 rm -f conftest.$ac_objext conftest$ac_exeext
1735 if { { ac_try="$ac_link"
1736case "(($ac_try" in
1737 *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
1738 *) ac_try_echo=$ac_try;;
1739esac
1740eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
1741$as_echo "$ac_try_echo"; } >&5
1742 (eval "$ac_link") 2>conftest.err
1743 ac_status=$?
1744 if test -s conftest.err; then
1745 grep -v '^ *+' conftest.err >conftest.er1
1746 cat conftest.er1 >&5
1747 mv -f conftest.er1 conftest.err
1748 fi
1749 $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
1750 test $ac_status = 0; } && {
1751 test -z "$ac_c_werror_flag" ||
1752 test ! -s conftest.err
1753 } && test -s conftest$ac_exeext && {
1754 test "$cross_compiling" = yes ||
1755 $as_test_x conftest$ac_exeext
1756 }; then :
1757 ac_retval=0
1758else
1759 $as_echo "$as_me: failed program was:" >&5
1760sed 's/^/| /' conftest.$ac_ext >&5
1761
1762 ac_retval=1
1763fi
1764 # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information
1765 # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would
1766 # interfere with the next link command; also delete a directory that is
1767 # left behind by Apple's compiler. We do this before executing the actions.
1768 rm -rf conftest.dSYM conftest_ipa8_conftest.oo
1769 eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
1770 as_fn_set_status $ac_retval
1771
1772} # ac_fn_c_try_link
1773
1774# ac_fn_c_check_header_mongrel LINENO HEADER VAR INCLUDES
1775# -------------------------------------------------------
1776# Tests whether HEADER exists, giving a warning if it cannot be compiled using
1777# the include files in INCLUDES and setting the cache variable VAR
1778# accordingly.
1779ac_fn_c_check_header_mongrel ()
1780{
1781 as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
1782 if eval \${$3+:} false; then :
1783 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
1784$as_echo_n "checking for $2... " >&6; }
1785if eval \${$3+:} false; then :
1786 $as_echo_n "(cached) " >&6
1787fi
1788eval ac_res=\$$3
1789 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
1790$as_echo "$ac_res" >&6; }
1791else
1792 # Is the header compilable?
1793{ $as_echo "$as_me:${as_lineno-$LINENO}: checking $2 usability" >&5
1794$as_echo_n "checking $2 usability... " >&6; }
1795cat confdefs.h - <<_ACEOF >conftest.$ac_ext
1796/* end confdefs.h. */
1797$4
1798#include <$2>
1799_ACEOF
1800if ac_fn_c_try_compile "$LINENO"; then :
1801 ac_header_compiler=yes
1802else
1803 ac_header_compiler=no
1804fi
1805rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
1806{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_header_compiler" >&5
1807$as_echo "$ac_header_compiler" >&6; }
1808
1809# Is the header present?
1810{ $as_echo "$as_me:${as_lineno-$LINENO}: checking $2 presence" >&5
1811$as_echo_n "checking $2 presence... " >&6; }
1812cat confdefs.h - <<_ACEOF >conftest.$ac_ext
1813/* end confdefs.h. */
1814#include <$2>
1815_ACEOF
1816if ac_fn_c_try_cpp "$LINENO"; then :
1817 ac_header_preproc=yes
1818else
1819 ac_header_preproc=no
1820fi
1821rm -f conftest.err conftest.i conftest.$ac_ext
1822{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_header_preproc" >&5
1823$as_echo "$ac_header_preproc" >&6; }
1824
1825# So? What about this header?
1826case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in #((
1827 yes:no: )
1828 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: accepted by the compiler, rejected by the preprocessor!" >&5
1829$as_echo "$as_me: WARNING: $2: accepted by the compiler, rejected by the preprocessor!" >&2;}
1830 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: proceeding with the compiler's result" >&5
1831$as_echo "$as_me: WARNING: $2: proceeding with the compiler's result" >&2;}
1832 ;;
1833 no:yes:* )
1834 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: present but cannot be compiled" >&5
1835$as_echo "$as_me: WARNING: $2: present but cannot be compiled" >&2;}
1836 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: check for missing prerequisite headers?" >&5
1837$as_echo "$as_me: WARNING: $2: check for missing prerequisite headers?" >&2;}
1838 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: see the Autoconf documentation" >&5
1839$as_echo "$as_me: WARNING: $2: see the Autoconf documentation" >&2;}
1840 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: section \"Present But Cannot Be Compiled\"" >&5
1841$as_echo "$as_me: WARNING: $2: section \"Present But Cannot Be Compiled\"" >&2;}
1842 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: proceeding with the compiler's result" >&5
1843$as_echo "$as_me: WARNING: $2: proceeding with the compiler's result" >&2;}
1844( $as_echo "## ------------------------------------------- ##
1845## Report this to openssh-unix-dev@mindrot.org ##
1846## ------------------------------------------- ##"
1847 ) | sed "s/^/$as_me: WARNING: /" >&2
1848 ;;
1849esac
1850 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
1851$as_echo_n "checking for $2... " >&6; }
1852if eval \${$3+:} false; then :
1853 $as_echo_n "(cached) " >&6
1854else
1855 eval "$3=\$ac_header_compiler"
1856fi
1857eval ac_res=\$$3
1858 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
1859$as_echo "$ac_res" >&6; }
1860fi
1861 eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
1862
1863} # ac_fn_c_check_header_mongrel
1864
1865# ac_fn_c_check_func LINENO FUNC VAR
1866# ----------------------------------
1867# Tests whether FUNC exists, setting the cache variable VAR accordingly
1868ac_fn_c_check_func ()
1869{
1870 as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
1871 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
1872$as_echo_n "checking for $2... " >&6; }
1873if eval \${$3+:} false; then :
1874 $as_echo_n "(cached) " >&6
1875else
1876 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
1877/* end confdefs.h. */
1878/* Define $2 to an innocuous variant, in case <limits.h> declares $2.
1879 For example, HP-UX 11i <limits.h> declares gettimeofday. */
1880#define $2 innocuous_$2
1881
1882/* System header to define __stub macros and hopefully few prototypes,
1883 which can conflict with char $2 (); below.
1884 Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
1885 <limits.h> exists even on freestanding compilers. */
1886
1887#ifdef __STDC__
1888# include <limits.h>
1889#else
1890# include <assert.h>
1891#endif
1892
1893#undef $2
1894
1895/* Override any GCC internal prototype to avoid an error.
1896 Use char because int might match the return type of a GCC
1897 builtin and then its argument prototype would still apply. */
1898#ifdef __cplusplus
1899extern "C"
1900#endif
1901char $2 ();
1902/* The GNU C library defines this for functions which it implements
1903 to always fail with ENOSYS. Some functions are actually named
1904 something starting with __ and the normal name is an alias. */
1905#if defined __stub_$2 || defined __stub___$2
1906choke me
1907#endif
1908
1909int
1910main ()
1911{
1912return $2 ();
1913 ;
1914 return 0;
1915}
1916_ACEOF
1917if ac_fn_c_try_link "$LINENO"; then :
1918 eval "$3=yes"
1919else
1920 eval "$3=no"
1921fi
1922rm -f core conftest.err conftest.$ac_objext \
1923 conftest$ac_exeext conftest.$ac_ext
1924fi
1925eval ac_res=\$$3
1926 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
1927$as_echo "$ac_res" >&6; }
1928 eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
1929
1930} # ac_fn_c_check_func
1931
1932# ac_fn_c_check_type LINENO TYPE VAR INCLUDES
1933# -------------------------------------------
1934# Tests whether TYPE exists after having included INCLUDES, setting cache
1935# variable VAR accordingly.
1936ac_fn_c_check_type ()
1937{
1938 as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
1939 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
1940$as_echo_n "checking for $2... " >&6; }
1941if eval \${$3+:} false; then :
1942 $as_echo_n "(cached) " >&6
1943else
1944 eval "$3=no"
1945 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
1946/* end confdefs.h. */
1947$4
1948int
1949main ()
1950{
1951if (sizeof ($2))
1952 return 0;
1953 ;
1954 return 0;
1955}
1956_ACEOF
1957if ac_fn_c_try_compile "$LINENO"; then :
1958 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
1959/* end confdefs.h. */
1960$4
1961int
1962main ()
1963{
1964if (sizeof (($2)))
1965 return 0;
1966 ;
1967 return 0;
1968}
1969_ACEOF
1970if ac_fn_c_try_compile "$LINENO"; then :
1971
1972else
1973 eval "$3=yes"
1974fi
1975rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
1976fi
1977rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
1978fi
1979eval ac_res=\$$3
1980 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
1981$as_echo "$ac_res" >&6; }
1982 eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
1983
1984} # ac_fn_c_check_type
1985
1986# ac_fn_c_compute_int LINENO EXPR VAR INCLUDES
1987# --------------------------------------------
1988# Tries to find the compile-time value of EXPR in a program that includes
1989# INCLUDES, setting VAR accordingly. Returns whether the value could be
1990# computed
1991ac_fn_c_compute_int ()
1992{
1993 as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
1994 if test "$cross_compiling" = yes; then
1995 # Depending upon the size, compute the lo and hi bounds.
1996cat confdefs.h - <<_ACEOF >conftest.$ac_ext
1997/* end confdefs.h. */
1998$4
1999int
2000main ()
2001{
2002static int test_array [1 - 2 * !(($2) >= 0)];
2003test_array [0] = 0
2004
2005 ;
2006 return 0;
2007}
2008_ACEOF
2009if ac_fn_c_try_compile "$LINENO"; then :
2010 ac_lo=0 ac_mid=0
2011 while :; do
2012 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
2013/* end confdefs.h. */
2014$4
2015int
2016main ()
2017{
2018static int test_array [1 - 2 * !(($2) <= $ac_mid)];
2019test_array [0] = 0
2020
2021 ;
2022 return 0;
2023}
2024_ACEOF
2025if ac_fn_c_try_compile "$LINENO"; then :
2026 ac_hi=$ac_mid; break
2027else
2028 as_fn_arith $ac_mid + 1 && ac_lo=$as_val
2029 if test $ac_lo -le $ac_mid; then
2030 ac_lo= ac_hi=
2031 break
2032 fi
2033 as_fn_arith 2 '*' $ac_mid + 1 && ac_mid=$as_val
2034fi
2035rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
2036 done
2037else
2038 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
2039/* end confdefs.h. */
2040$4
2041int
2042main ()
2043{
2044static int test_array [1 - 2 * !(($2) < 0)];
2045test_array [0] = 0
2046
2047 ;
2048 return 0;
2049}
2050_ACEOF
2051if ac_fn_c_try_compile "$LINENO"; then :
2052 ac_hi=-1 ac_mid=-1
2053 while :; do
2054 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
2055/* end confdefs.h. */
2056$4
2057int
2058main ()
2059{
2060static int test_array [1 - 2 * !(($2) >= $ac_mid)];
2061test_array [0] = 0
2062
2063 ;
2064 return 0;
2065}
2066_ACEOF
2067if ac_fn_c_try_compile "$LINENO"; then :
2068 ac_lo=$ac_mid; break
2069else
2070 as_fn_arith '(' $ac_mid ')' - 1 && ac_hi=$as_val
2071 if test $ac_mid -le $ac_hi; then
2072 ac_lo= ac_hi=
2073 break
2074 fi
2075 as_fn_arith 2 '*' $ac_mid && ac_mid=$as_val
2076fi
2077rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
2078 done
2079else
2080 ac_lo= ac_hi=
2081fi
2082rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
2083fi
2084rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
2085# Binary search between lo and hi bounds.
2086while test "x$ac_lo" != "x$ac_hi"; do
2087 as_fn_arith '(' $ac_hi - $ac_lo ')' / 2 + $ac_lo && ac_mid=$as_val
2088 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
2089/* end confdefs.h. */
2090$4
2091int
2092main ()
2093{
2094static int test_array [1 - 2 * !(($2) <= $ac_mid)];
2095test_array [0] = 0
2096
2097 ;
2098 return 0;
2099}
2100_ACEOF
2101if ac_fn_c_try_compile "$LINENO"; then :
2102 ac_hi=$ac_mid
2103else
2104 as_fn_arith '(' $ac_mid ')' + 1 && ac_lo=$as_val
2105fi
2106rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
2107done
2108case $ac_lo in #((
2109?*) eval "$3=\$ac_lo"; ac_retval=0 ;;
2110'') ac_retval=1 ;;
2111esac
2112 else
2113 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
2114/* end confdefs.h. */
2115$4
2116static long int longval () { return $2; }
2117static unsigned long int ulongval () { return $2; }
2118#include <stdio.h>
2119#include <stdlib.h>
2120int
2121main ()
2122{
2123
2124 FILE *f = fopen ("conftest.val", "w");
2125 if (! f)
2126 return 1;
2127 if (($2) < 0)
2128 {
2129 long int i = longval ();
2130 if (i != ($2))
2131 return 1;
2132 fprintf (f, "%ld", i);
2133 }
2134 else
2135 {
2136 unsigned long int i = ulongval ();
2137 if (i != ($2))
2138 return 1;
2139 fprintf (f, "%lu", i);
2140 }
2141 /* Do not output a trailing newline, as this causes \r\n confusion
2142 on some platforms. */
2143 return ferror (f) || fclose (f) != 0;
2144
2145 ;
2146 return 0;
2147}
2148_ACEOF
2149if ac_fn_c_try_run "$LINENO"; then :
2150 echo >>conftest.val; read $3 <conftest.val; ac_retval=0
2151else
2152 ac_retval=1
2153fi
2154rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
2155 conftest.$ac_objext conftest.beam conftest.$ac_ext
2156rm -f conftest.val
2157
2158 fi
2159 eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
2160 as_fn_set_status $ac_retval
2161
2162} # ac_fn_c_compute_int
2163
2164# ac_fn_c_check_member LINENO AGGR MEMBER VAR INCLUDES
2165# ----------------------------------------------------
2166# Tries to find if the field MEMBER exists in type AGGR, after including
2167# INCLUDES, setting cache variable VAR accordingly.
2168ac_fn_c_check_member ()
2169{
2170 as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
2171 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2.$3" >&5
2172$as_echo_n "checking for $2.$3... " >&6; }
2173if eval \${$4+:} false; then :
2174 $as_echo_n "(cached) " >&6
2175else
2176 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
2177/* end confdefs.h. */
2178$5
2179int
2180main ()
2181{
2182static $2 ac_aggr;
2183if (ac_aggr.$3)
2184return 0;
2185 ;
2186 return 0;
2187}
2188_ACEOF
2189if ac_fn_c_try_compile "$LINENO"; then :
2190 eval "$4=yes"
2191else
2192 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
2193/* end confdefs.h. */
2194$5
2195int
2196main ()
2197{
2198static $2 ac_aggr;
2199if (sizeof ac_aggr.$3)
2200return 0;
2201 ;
2202 return 0;
2203}
2204_ACEOF
2205if ac_fn_c_try_compile "$LINENO"; then :
2206 eval "$4=yes"
2207else
2208 eval "$4=no"
2209fi
2210rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
2211fi
2212rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
2213fi
2214eval ac_res=\$$4
2215 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
2216$as_echo "$ac_res" >&6; }
2217 eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
2218
2219} # ac_fn_c_check_member
2220cat >config.log <<_ACEOF
2221This file contains any messages produced by compilers while
2222running configure, to aid debugging if configure makes a mistake.
2223
2224It was created by OpenSSH $as_me Portable, which was
2225generated by GNU Autoconf 2.68. Invocation command line was
2226
2227 $ $0 $@
2228
2229_ACEOF
2230exec 5>>config.log
2231{
2232cat <<_ASUNAME
2233## --------- ##
2234## Platform. ##
2235## --------- ##
2236
2237hostname = `(hostname || uname -n) 2>/dev/null | sed 1q`
2238uname -m = `(uname -m) 2>/dev/null || echo unknown`
2239uname -r = `(uname -r) 2>/dev/null || echo unknown`
2240uname -s = `(uname -s) 2>/dev/null || echo unknown`
2241uname -v = `(uname -v) 2>/dev/null || echo unknown`
2242
2243/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null || echo unknown`
2244/bin/uname -X = `(/bin/uname -X) 2>/dev/null || echo unknown`
2245
2246/bin/arch = `(/bin/arch) 2>/dev/null || echo unknown`
2247/usr/bin/arch -k = `(/usr/bin/arch -k) 2>/dev/null || echo unknown`
2248/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null || echo unknown`
2249/usr/bin/hostinfo = `(/usr/bin/hostinfo) 2>/dev/null || echo unknown`
2250/bin/machine = `(/bin/machine) 2>/dev/null || echo unknown`
2251/usr/bin/oslevel = `(/usr/bin/oslevel) 2>/dev/null || echo unknown`
2252/bin/universe = `(/bin/universe) 2>/dev/null || echo unknown`
2253
2254_ASUNAME
2255
2256as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
2257for as_dir in $PATH
2258do
2259 IFS=$as_save_IFS
2260 test -z "$as_dir" && as_dir=.
2261 $as_echo "PATH: $as_dir"
2262 done
2263IFS=$as_save_IFS
2264
2265} >&5
2266
2267cat >&5 <<_ACEOF
2268
2269
2270## ----------- ##
2271## Core tests. ##
2272## ----------- ##
2273
2274_ACEOF
2275
2276
2277# Keep a trace of the command line.
2278# Strip out --no-create and --no-recursion so they do not pile up.
2279# Strip out --silent because we don't want to record it for future runs.
2280# Also quote any args containing shell meta-characters.
2281# Make two passes to allow for proper duplicate-argument suppression.
2282ac_configure_args=
2283ac_configure_args0=
2284ac_configure_args1=
2285ac_must_keep_next=false
2286for ac_pass in 1 2
2287do
2288 for ac_arg
2289 do
2290 case $ac_arg in
2291 -no-create | --no-c* | -n | -no-recursion | --no-r*) continue ;;
2292 -q | -quiet | --quiet | --quie | --qui | --qu | --q \
2293 | -silent | --silent | --silen | --sile | --sil)
2294 continue ;;
2295 *\'*)
2296 ac_arg=`$as_echo "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
2297 esac
2298 case $ac_pass in
2299 1) as_fn_append ac_configure_args0 " '$ac_arg'" ;;
2300 2)
2301 as_fn_append ac_configure_args1 " '$ac_arg'"
2302 if test $ac_must_keep_next = true; then
2303 ac_must_keep_next=false # Got value, back to normal.
2304 else
2305 case $ac_arg in
2306 *=* | --config-cache | -C | -disable-* | --disable-* \
2307 | -enable-* | --enable-* | -gas | --g* | -nfp | --nf* \
2308 | -q | -quiet | --q* | -silent | --sil* | -v | -verb* \
2309 | -with-* | --with-* | -without-* | --without-* | --x)
2310 case "$ac_configure_args0 " in
2311 "$ac_configure_args1"*" '$ac_arg' "* ) continue ;;
2312 esac
2313 ;;
2314 -* ) ac_must_keep_next=true ;;
2315 esac
2316 fi
2317 as_fn_append ac_configure_args " '$ac_arg'"
2318 ;;
2319 esac
2320 done
2321done
2322{ ac_configure_args0=; unset ac_configure_args0;}
2323{ ac_configure_args1=; unset ac_configure_args1;}
2324
2325# When interrupted or exit'd, cleanup temporary files, and complete
2326# config.log. We remove comments because anyway the quotes in there
2327# would cause problems or look ugly.
2328# WARNING: Use '\'' to represent an apostrophe within the trap.
2329# WARNING: Do not start the trap code with a newline, due to a FreeBSD 4.0 bug.
2330trap 'exit_status=$?
2331 # Save into config.log some information that might help in debugging.
2332 {
2333 echo
2334
2335 $as_echo "## ---------------- ##
2336## Cache variables. ##
2337## ---------------- ##"
2338 echo
2339 # The following way of writing the cache mishandles newlines in values,
2340(
2341 for ac_var in `(set) 2>&1 | sed -n '\''s/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'\''`; do
2342 eval ac_val=\$$ac_var
2343 case $ac_val in #(
2344 *${as_nl}*)
2345 case $ac_var in #(
2346 *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
2347$as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
2348 esac
2349 case $ac_var in #(
2350 _ | IFS | as_nl) ;; #(
2351 BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
2352 *) { eval $ac_var=; unset $ac_var;} ;;
2353 esac ;;
2354 esac
2355 done
2356 (set) 2>&1 |
2357 case $as_nl`(ac_space='\'' '\''; set) 2>&1` in #(
2358 *${as_nl}ac_space=\ *)
2359 sed -n \
2360 "s/'\''/'\''\\\\'\'''\''/g;
2361 s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\''\\2'\''/p"
2362 ;; #(
2363 *)
2364 sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p"
2365 ;;
2366 esac |
2367 sort
2368)
2369 echo
2370
2371 $as_echo "## ----------------- ##
2372## Output variables. ##
2373## ----------------- ##"
2374 echo
2375 for ac_var in $ac_subst_vars
2376 do
2377 eval ac_val=\$$ac_var
2378 case $ac_val in
2379 *\'\''*) ac_val=`$as_echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;;
2380 esac
2381 $as_echo "$ac_var='\''$ac_val'\''"
2382 done | sort
2383 echo
2384
2385 if test -n "$ac_subst_files"; then
2386 $as_echo "## ------------------- ##
2387## File substitutions. ##
2388## ------------------- ##"
2389 echo
2390 for ac_var in $ac_subst_files
2391 do
2392 eval ac_val=\$$ac_var
2393 case $ac_val in
2394 *\'\''*) ac_val=`$as_echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;;
2395 esac
2396 $as_echo "$ac_var='\''$ac_val'\''"
2397 done | sort
2398 echo
2399 fi
2400
2401 if test -s confdefs.h; then
2402 $as_echo "## ----------- ##
2403## confdefs.h. ##
2404## ----------- ##"
2405 echo
2406 cat confdefs.h
2407 echo
2408 fi
2409 test "$ac_signal" != 0 &&
2410 $as_echo "$as_me: caught signal $ac_signal"
2411 $as_echo "$as_me: exit $exit_status"
2412 } >&5
2413 rm -f core *.core core.conftest.* &&
2414 rm -f -r conftest* confdefs* conf$$* $ac_clean_files &&
2415 exit $exit_status
2416' 0
2417for ac_signal in 1 2 13 15; do
2418 trap 'ac_signal='$ac_signal'; as_fn_exit 1' $ac_signal
2419done
2420ac_signal=0
2421
2422# confdefs.h avoids OS command line length limits that DEFS can exceed.
2423rm -f -r conftest* confdefs.h
2424
2425$as_echo "/* confdefs.h */" > confdefs.h
2426
2427# Predefined preprocessor variables.
2428
2429cat >>confdefs.h <<_ACEOF
2430#define PACKAGE_NAME "$PACKAGE_NAME"
2431_ACEOF
2432
2433cat >>confdefs.h <<_ACEOF
2434#define PACKAGE_TARNAME "$PACKAGE_TARNAME"
2435_ACEOF
2436
2437cat >>confdefs.h <<_ACEOF
2438#define PACKAGE_VERSION "$PACKAGE_VERSION"
2439_ACEOF
2440
2441cat >>confdefs.h <<_ACEOF
2442#define PACKAGE_STRING "$PACKAGE_STRING"
2443_ACEOF
2444
2445cat >>confdefs.h <<_ACEOF
2446#define PACKAGE_BUGREPORT "$PACKAGE_BUGREPORT"
2447_ACEOF
2448
2449cat >>confdefs.h <<_ACEOF
2450#define PACKAGE_URL "$PACKAGE_URL"
2451_ACEOF
2452
2453
2454# Let the site file select an alternate cache file if it wants to.
2455# Prefer an explicitly selected file to automatically selected ones.
2456ac_site_file1=NONE
2457ac_site_file2=NONE
2458if test -n "$CONFIG_SITE"; then
2459 # We do not want a PATH search for config.site.
2460 case $CONFIG_SITE in #((
2461 -*) ac_site_file1=./$CONFIG_SITE;;
2462 */*) ac_site_file1=$CONFIG_SITE;;
2463 *) ac_site_file1=./$CONFIG_SITE;;
2464 esac
2465elif test "x$prefix" != xNONE; then
2466 ac_site_file1=$prefix/share/config.site
2467 ac_site_file2=$prefix/etc/config.site
2468else
2469 ac_site_file1=$ac_default_prefix/share/config.site
2470 ac_site_file2=$ac_default_prefix/etc/config.site
2471fi
2472for ac_site_file in "$ac_site_file1" "$ac_site_file2"
2473do
2474 test "x$ac_site_file" = xNONE && continue
2475 if test /dev/null != "$ac_site_file" && test -r "$ac_site_file"; then
2476 { $as_echo "$as_me:${as_lineno-$LINENO}: loading site script $ac_site_file" >&5
2477$as_echo "$as_me: loading site script $ac_site_file" >&6;}
2478 sed 's/^/| /' "$ac_site_file" >&5
2479 . "$ac_site_file" \
2480 || { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
2481$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
2482as_fn_error $? "failed to load site script $ac_site_file
2483See \`config.log' for more details" "$LINENO" 5; }
2484 fi
2485done
2486
2487if test -r "$cache_file"; then
2488 # Some versions of bash will fail to source /dev/null (special files
2489 # actually), so we avoid doing that. DJGPP emulates it as a regular file.
2490 if test /dev/null != "$cache_file" && test -f "$cache_file"; then
2491 { $as_echo "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5
2492$as_echo "$as_me: loading cache $cache_file" >&6;}
2493 case $cache_file in
2494 [\\/]* | ?:[\\/]* ) . "$cache_file";;
2495 *) . "./$cache_file";;
2496 esac
2497 fi
2498else
2499 { $as_echo "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5
2500$as_echo "$as_me: creating cache $cache_file" >&6;}
2501 >$cache_file
2502fi
2503
2504# Check that the precious variables saved in the cache have kept the same
2505# value.
2506ac_cache_corrupted=false
2507for ac_var in $ac_precious_vars; do
2508 eval ac_old_set=\$ac_cv_env_${ac_var}_set
2509 eval ac_new_set=\$ac_env_${ac_var}_set
2510 eval ac_old_val=\$ac_cv_env_${ac_var}_value
2511 eval ac_new_val=\$ac_env_${ac_var}_value
2512 case $ac_old_set,$ac_new_set in
2513 set,)
2514 { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&5
2515$as_echo "$as_me: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&2;}
2516 ac_cache_corrupted=: ;;
2517 ,set)
2518 { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was not set in the previous run" >&5
2519$as_echo "$as_me: error: \`$ac_var' was not set in the previous run" >&2;}
2520 ac_cache_corrupted=: ;;
2521 ,);;
2522 *)
2523 if test "x$ac_old_val" != "x$ac_new_val"; then
2524 # differences in whitespace do not lead to failure.
2525 ac_old_val_w=`echo x $ac_old_val`
2526 ac_new_val_w=`echo x $ac_new_val`
2527 if test "$ac_old_val_w" != "$ac_new_val_w"; then
2528 { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' has changed since the previous run:" >&5
2529$as_echo "$as_me: error: \`$ac_var' has changed since the previous run:" >&2;}
2530 ac_cache_corrupted=:
2531 else
2532 { $as_echo "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&5
2533$as_echo "$as_me: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&2;}
2534 eval $ac_var=\$ac_old_val
2535 fi
2536 { $as_echo "$as_me:${as_lineno-$LINENO}: former value: \`$ac_old_val'" >&5
2537$as_echo "$as_me: former value: \`$ac_old_val'" >&2;}
2538 { $as_echo "$as_me:${as_lineno-$LINENO}: current value: \`$ac_new_val'" >&5
2539$as_echo "$as_me: current value: \`$ac_new_val'" >&2;}
2540 fi;;
2541 esac
2542 # Pass precious variables to config.status.
2543 if test "$ac_new_set" = set; then
2544 case $ac_new_val in
2545 *\'*) ac_arg=$ac_var=`$as_echo "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;;
2546 *) ac_arg=$ac_var=$ac_new_val ;;
2547 esac
2548 case " $ac_configure_args " in
2549 *" '$ac_arg' "*) ;; # Avoid dups. Use of quotes ensures accuracy.
2550 *) as_fn_append ac_configure_args " '$ac_arg'" ;;
2551 esac
2552 fi
2553done
2554if $ac_cache_corrupted; then
2555 { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
2556$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
2557 { $as_echo "$as_me:${as_lineno-$LINENO}: error: changes in the environment can compromise the build" >&5
2558$as_echo "$as_me: error: changes in the environment can compromise the build" >&2;}
2559 as_fn_error $? "run \`make distclean' and/or \`rm $cache_file' and start over" "$LINENO" 5
2560fi
2561## -------------------- ##
2562## Main body of script. ##
2563## -------------------- ##
2564
2565ac_ext=c
2566ac_cpp='$CPP $CPPFLAGS'
2567ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
2568ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
2569ac_compiler_gnu=$ac_cv_c_compiler_gnu
2570
2571
2572
2573
2574ac_ext=c
2575ac_cpp='$CPP $CPPFLAGS'
2576ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
2577ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
2578ac_compiler_gnu=$ac_cv_c_compiler_gnu
2579
2580
2581ac_config_headers="$ac_config_headers config.h"
2582
2583ac_ext=c
2584ac_cpp='$CPP $CPPFLAGS'
2585ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
2586ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
2587ac_compiler_gnu=$ac_cv_c_compiler_gnu
2588if test -n "$ac_tool_prefix"; then
2589 # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args.
2590set dummy ${ac_tool_prefix}gcc; ac_word=$2
2591{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
2592$as_echo_n "checking for $ac_word... " >&6; }
2593if ${ac_cv_prog_CC+:} false; then :
2594 $as_echo_n "(cached) " >&6
2595else
2596 if test -n "$CC"; then
2597 ac_cv_prog_CC="$CC" # Let the user override the test.
2598else
2599as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
2600for as_dir in $PATH
2601do
2602 IFS=$as_save_IFS
2603 test -z "$as_dir" && as_dir=.
2604 for ac_exec_ext in '' $ac_executable_extensions; do
2605 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
2606 ac_cv_prog_CC="${ac_tool_prefix}gcc"
2607 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
2608 break 2
2609 fi
2610done
2611 done
2612IFS=$as_save_IFS
2613
2614fi
2615fi
2616CC=$ac_cv_prog_CC
2617if test -n "$CC"; then
2618 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
2619$as_echo "$CC" >&6; }
2620else
2621 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
2622$as_echo "no" >&6; }
2623fi
2624
2625
2626fi
2627if test -z "$ac_cv_prog_CC"; then
2628 ac_ct_CC=$CC
2629 # Extract the first word of "gcc", so it can be a program name with args.
2630set dummy gcc; ac_word=$2
2631{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
2632$as_echo_n "checking for $ac_word... " >&6; }
2633if ${ac_cv_prog_ac_ct_CC+:} false; then :
2634 $as_echo_n "(cached) " >&6
2635else
2636 if test -n "$ac_ct_CC"; then
2637 ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
2638else
2639as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
2640for as_dir in $PATH
2641do
2642 IFS=$as_save_IFS
2643 test -z "$as_dir" && as_dir=.
2644 for ac_exec_ext in '' $ac_executable_extensions; do
2645 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
2646 ac_cv_prog_ac_ct_CC="gcc"
2647 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
2648 break 2
2649 fi
2650done
2651 done
2652IFS=$as_save_IFS
2653
2654fi
2655fi
2656ac_ct_CC=$ac_cv_prog_ac_ct_CC
2657if test -n "$ac_ct_CC"; then
2658 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
2659$as_echo "$ac_ct_CC" >&6; }
2660else
2661 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
2662$as_echo "no" >&6; }
2663fi
2664
2665 if test "x$ac_ct_CC" = x; then
2666 CC=""
2667 else
2668 case $cross_compiling:$ac_tool_warned in
2669yes:)
2670{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
2671$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
2672ac_tool_warned=yes ;;
2673esac
2674 CC=$ac_ct_CC
2675 fi
2676else
2677 CC="$ac_cv_prog_CC"
2678fi
2679
2680if test -z "$CC"; then
2681 if test -n "$ac_tool_prefix"; then
2682 # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args.
2683set dummy ${ac_tool_prefix}cc; ac_word=$2
2684{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
2685$as_echo_n "checking for $ac_word... " >&6; }
2686if ${ac_cv_prog_CC+:} false; then :
2687 $as_echo_n "(cached) " >&6
2688else
2689 if test -n "$CC"; then
2690 ac_cv_prog_CC="$CC" # Let the user override the test.
2691else
2692as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
2693for as_dir in $PATH
2694do
2695 IFS=$as_save_IFS
2696 test -z "$as_dir" && as_dir=.
2697 for ac_exec_ext in '' $ac_executable_extensions; do
2698 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
2699 ac_cv_prog_CC="${ac_tool_prefix}cc"
2700 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
2701 break 2
2702 fi
2703done
2704 done
2705IFS=$as_save_IFS
2706
2707fi
2708fi
2709CC=$ac_cv_prog_CC
2710if test -n "$CC"; then
2711 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
2712$as_echo "$CC" >&6; }
2713else
2714 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
2715$as_echo "no" >&6; }
2716fi
2717
2718
2719 fi
2720fi
2721if test -z "$CC"; then
2722 # Extract the first word of "cc", so it can be a program name with args.
2723set dummy cc; ac_word=$2
2724{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
2725$as_echo_n "checking for $ac_word... " >&6; }
2726if ${ac_cv_prog_CC+:} false; then :
2727 $as_echo_n "(cached) " >&6
2728else
2729 if test -n "$CC"; then
2730 ac_cv_prog_CC="$CC" # Let the user override the test.
2731else
2732 ac_prog_rejected=no
2733as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
2734for as_dir in $PATH
2735do
2736 IFS=$as_save_IFS
2737 test -z "$as_dir" && as_dir=.
2738 for ac_exec_ext in '' $ac_executable_extensions; do
2739 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
2740 if test "$as_dir/$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then
2741 ac_prog_rejected=yes
2742 continue
2743 fi
2744 ac_cv_prog_CC="cc"
2745 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
2746 break 2
2747 fi
2748done
2749 done
2750IFS=$as_save_IFS
2751
2752if test $ac_prog_rejected = yes; then
2753 # We found a bogon in the path, so make sure we never use it.
2754 set dummy $ac_cv_prog_CC
2755 shift
2756 if test $# != 0; then
2757 # We chose a different compiler from the bogus one.
2758 # However, it has the same basename, so the bogon will be chosen
2759 # first if we set CC to just the basename; use the full file name.
2760 shift
2761 ac_cv_prog_CC="$as_dir/$ac_word${1+' '}$@"
2762 fi
2763fi
2764fi
2765fi
2766CC=$ac_cv_prog_CC
2767if test -n "$CC"; then
2768 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
2769$as_echo "$CC" >&6; }
2770else
2771 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
2772$as_echo "no" >&6; }
2773fi
2774
2775
2776fi
2777if test -z "$CC"; then
2778 if test -n "$ac_tool_prefix"; then
2779 for ac_prog in cl.exe
2780 do
2781 # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
2782set dummy $ac_tool_prefix$ac_prog; ac_word=$2
2783{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
2784$as_echo_n "checking for $ac_word... " >&6; }
2785if ${ac_cv_prog_CC+:} false; then :
2786 $as_echo_n "(cached) " >&6
2787else
2788 if test -n "$CC"; then
2789 ac_cv_prog_CC="$CC" # Let the user override the test.
2790else
2791as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
2792for as_dir in $PATH
2793do
2794 IFS=$as_save_IFS
2795 test -z "$as_dir" && as_dir=.
2796 for ac_exec_ext in '' $ac_executable_extensions; do
2797 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
2798 ac_cv_prog_CC="$ac_tool_prefix$ac_prog"
2799 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
2800 break 2
2801 fi
2802done
2803 done
2804IFS=$as_save_IFS
2805
2806fi
2807fi
2808CC=$ac_cv_prog_CC
2809if test -n "$CC"; then
2810 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
2811$as_echo "$CC" >&6; }
2812else
2813 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
2814$as_echo "no" >&6; }
2815fi
2816
2817
2818 test -n "$CC" && break
2819 done
2820fi
2821if test -z "$CC"; then
2822 ac_ct_CC=$CC
2823 for ac_prog in cl.exe
2824do
2825 # Extract the first word of "$ac_prog", so it can be a program name with args.
2826set dummy $ac_prog; ac_word=$2
2827{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
2828$as_echo_n "checking for $ac_word... " >&6; }
2829if ${ac_cv_prog_ac_ct_CC+:} false; then :
2830 $as_echo_n "(cached) " >&6
2831else
2832 if test -n "$ac_ct_CC"; then
2833 ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
2834else
2835as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
2836for as_dir in $PATH
2837do
2838 IFS=$as_save_IFS
2839 test -z "$as_dir" && as_dir=.
2840 for ac_exec_ext in '' $ac_executable_extensions; do
2841 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
2842 ac_cv_prog_ac_ct_CC="$ac_prog"
2843 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
2844 break 2
2845 fi
2846done
2847 done
2848IFS=$as_save_IFS
2849
2850fi
2851fi
2852ac_ct_CC=$ac_cv_prog_ac_ct_CC
2853if test -n "$ac_ct_CC"; then
2854 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
2855$as_echo "$ac_ct_CC" >&6; }
2856else
2857 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
2858$as_echo "no" >&6; }
2859fi
2860
2861
2862 test -n "$ac_ct_CC" && break
2863done
2864
2865 if test "x$ac_ct_CC" = x; then
2866 CC=""
2867 else
2868 case $cross_compiling:$ac_tool_warned in
2869yes:)
2870{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
2871$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
2872ac_tool_warned=yes ;;
2873esac
2874 CC=$ac_ct_CC
2875 fi
2876fi
2877
2878fi
2879
2880
2881test -z "$CC" && { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
2882$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
2883as_fn_error $? "no acceptable C compiler found in \$PATH
2884See \`config.log' for more details" "$LINENO" 5; }
2885
2886# Provide some information about the compiler.
2887$as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5
2888set X $ac_compile
2889ac_compiler=$2
2890for ac_option in --version -v -V -qversion; do
2891 { { ac_try="$ac_compiler $ac_option >&5"
2892case "(($ac_try" in
2893 *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
2894 *) ac_try_echo=$ac_try;;
2895esac
2896eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
2897$as_echo "$ac_try_echo"; } >&5
2898 (eval "$ac_compiler $ac_option >&5") 2>conftest.err
2899 ac_status=$?
2900 if test -s conftest.err; then
2901 sed '10a\
2902... rest of stderr output deleted ...
2903 10q' conftest.err >conftest.er1
2904 cat conftest.er1 >&5
2905 fi
2906 rm -f conftest.er1 conftest.err
2907 $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
2908 test $ac_status = 0; }
2909done
2910
2911cat confdefs.h - <<_ACEOF >conftest.$ac_ext
2912/* end confdefs.h. */
2913
2914int
2915main ()
2916{
2917
2918 ;
2919 return 0;
2920}
2921_ACEOF
2922ac_clean_files_save=$ac_clean_files
2923ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out"
2924# Try to create an executable without -o first, disregard a.out.
2925# It will help us diagnose broken compilers, and finding out an intuition
2926# of exeext.
2927{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5
2928$as_echo_n "checking whether the C compiler works... " >&6; }
2929ac_link_default=`$as_echo "$ac_link" | sed 's/ -o *conftest[^ ]*//'`
2930
2931# The possible output files:
2932ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*"
2933
2934ac_rmfiles=
2935for ac_file in $ac_files
2936do
2937 case $ac_file in
2938 *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
2939 * ) ac_rmfiles="$ac_rmfiles $ac_file";;
2940 esac
2941done
2942rm -f $ac_rmfiles
2943
2944if { { ac_try="$ac_link_default"
2945case "(($ac_try" in
2946 *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
2947 *) ac_try_echo=$ac_try;;
2948esac
2949eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
2950$as_echo "$ac_try_echo"; } >&5
2951 (eval "$ac_link_default") 2>&5
2952 ac_status=$?
2953 $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
2954 test $ac_status = 0; }; then :
2955 # Autoconf-2.13 could set the ac_cv_exeext variable to `no'.
2956# So ignore a value of `no', otherwise this would lead to `EXEEXT = no'
2957# in a Makefile. We should not override ac_cv_exeext if it was cached,
2958# so that the user can short-circuit this test for compilers unknown to
2959# Autoconf.
2960for ac_file in $ac_files ''
2961do
2962 test -f "$ac_file" || continue
2963 case $ac_file in
2964 *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj )
2965 ;;
2966 [ab].out )
2967 # We found the default executable, but exeext='' is most
2968 # certainly right.
2969 break;;
2970 *.* )
2971 if test "${ac_cv_exeext+set}" = set && test "$ac_cv_exeext" != no;
2972 then :; else
2973 ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
2974 fi
2975 # We set ac_cv_exeext here because the later test for it is not
2976 # safe: cross compilers may not add the suffix if given an `-o'
2977 # argument, so we may need to know it at that point already.
2978 # Even if this section looks crufty: it has the advantage of
2979 # actually working.
2980 break;;
2981 * )
2982 break;;
2983 esac
2984done
2985test "$ac_cv_exeext" = no && ac_cv_exeext=
2986
2987else
2988 ac_file=''
2989fi
2990if test -z "$ac_file"; then :
2991 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
2992$as_echo "no" >&6; }
2993$as_echo "$as_me: failed program was:" >&5
2994sed 's/^/| /' conftest.$ac_ext >&5
2995
2996{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
2997$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
2998as_fn_error 77 "C compiler cannot create executables
2999See \`config.log' for more details" "$LINENO" 5; }
3000else
3001 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
3002$as_echo "yes" >&6; }
3003fi
3004{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5
3005$as_echo_n "checking for C compiler default output file name... " >&6; }
3006{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5
3007$as_echo "$ac_file" >&6; }
3008ac_exeext=$ac_cv_exeext
3009
3010rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out
3011ac_clean_files=$ac_clean_files_save
3012{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5
3013$as_echo_n "checking for suffix of executables... " >&6; }
3014if { { ac_try="$ac_link"
3015case "(($ac_try" in
3016 *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
3017 *) ac_try_echo=$ac_try;;
3018esac
3019eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
3020$as_echo "$ac_try_echo"; } >&5
3021 (eval "$ac_link") 2>&5
3022 ac_status=$?
3023 $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
3024 test $ac_status = 0; }; then :
3025 # If both `conftest.exe' and `conftest' are `present' (well, observable)
3026# catch `conftest.exe'. For instance with Cygwin, `ls conftest' will
3027# work properly (i.e., refer to `conftest.exe'), while it won't with
3028# `rm'.
3029for ac_file in conftest.exe conftest conftest.*; do
3030 test -f "$ac_file" || continue
3031 case $ac_file in
3032 *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
3033 *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
3034 break;;
3035 * ) break;;
3036 esac
3037done
3038else
3039 { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
3040$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
3041as_fn_error $? "cannot compute suffix of executables: cannot compile and link
3042See \`config.log' for more details" "$LINENO" 5; }
3043fi
3044rm -f conftest conftest$ac_cv_exeext
3045{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5
3046$as_echo "$ac_cv_exeext" >&6; }
3047
3048rm -f conftest.$ac_ext
3049EXEEXT=$ac_cv_exeext
3050ac_exeext=$EXEEXT
3051cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3052/* end confdefs.h. */
3053#include <stdio.h>
3054int
3055main ()
3056{
3057FILE *f = fopen ("conftest.out", "w");
3058 return ferror (f) || fclose (f) != 0;
3059
3060 ;
3061 return 0;
3062}
3063_ACEOF
3064ac_clean_files="$ac_clean_files conftest.out"
3065# Check that the compiler produces executables we can run. If not, either
3066# the compiler is broken, or we cross compile.
3067{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5
3068$as_echo_n "checking whether we are cross compiling... " >&6; }
3069if test "$cross_compiling" != yes; then
3070 { { ac_try="$ac_link"
3071case "(($ac_try" in
3072 *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
3073 *) ac_try_echo=$ac_try;;
3074esac
3075eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
3076$as_echo "$ac_try_echo"; } >&5
3077 (eval "$ac_link") 2>&5
3078 ac_status=$?
3079 $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
3080 test $ac_status = 0; }
3081 if { ac_try='./conftest$ac_cv_exeext'
3082 { { case "(($ac_try" in
3083 *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
3084 *) ac_try_echo=$ac_try;;
3085esac
3086eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
3087$as_echo "$ac_try_echo"; } >&5
3088 (eval "$ac_try") 2>&5
3089 ac_status=$?
3090 $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
3091 test $ac_status = 0; }; }; then
3092 cross_compiling=no
3093 else
3094 if test "$cross_compiling" = maybe; then
3095 cross_compiling=yes
3096 else
3097 { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
3098$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
3099as_fn_error $? "cannot run C compiled programs.
3100If you meant to cross compile, use \`--host'.
3101See \`config.log' for more details" "$LINENO" 5; }
3102 fi
3103 fi
3104fi
3105{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5
3106$as_echo "$cross_compiling" >&6; }
3107
3108rm -f conftest.$ac_ext conftest$ac_cv_exeext conftest.out
3109ac_clean_files=$ac_clean_files_save
3110{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5
3111$as_echo_n "checking for suffix of object files... " >&6; }
3112if ${ac_cv_objext+:} false; then :
3113 $as_echo_n "(cached) " >&6
3114else
3115 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3116/* end confdefs.h. */
3117
3118int
3119main ()
3120{
3121
3122 ;
3123 return 0;
3124}
3125_ACEOF
3126rm -f conftest.o conftest.obj
3127if { { ac_try="$ac_compile"
3128case "(($ac_try" in
3129 *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
3130 *) ac_try_echo=$ac_try;;
3131esac
3132eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
3133$as_echo "$ac_try_echo"; } >&5
3134 (eval "$ac_compile") 2>&5
3135 ac_status=$?
3136 $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
3137 test $ac_status = 0; }; then :
3138 for ac_file in conftest.o conftest.obj conftest.*; do
3139 test -f "$ac_file" || continue;
3140 case $ac_file in
3141 *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;;
3142 *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'`
3143 break;;
3144 esac
3145done
3146else
3147 $as_echo "$as_me: failed program was:" >&5
3148sed 's/^/| /' conftest.$ac_ext >&5
3149
3150{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
3151$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
3152as_fn_error $? "cannot compute suffix of object files: cannot compile
3153See \`config.log' for more details" "$LINENO" 5; }
3154fi
3155rm -f conftest.$ac_cv_objext conftest.$ac_ext
3156fi
3157{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5
3158$as_echo "$ac_cv_objext" >&6; }
3159OBJEXT=$ac_cv_objext
3160ac_objext=$OBJEXT
3161{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are using the GNU C compiler" >&5
3162$as_echo_n "checking whether we are using the GNU C compiler... " >&6; }
3163if ${ac_cv_c_compiler_gnu+:} false; then :
3164 $as_echo_n "(cached) " >&6
3165else
3166 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3167/* end confdefs.h. */
3168
3169int
3170main ()
3171{
3172#ifndef __GNUC__
3173 choke me
3174#endif
3175
3176 ;
3177 return 0;
3178}
3179_ACEOF
3180if ac_fn_c_try_compile "$LINENO"; then :
3181 ac_compiler_gnu=yes
3182else
3183 ac_compiler_gnu=no
3184fi
3185rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
3186ac_cv_c_compiler_gnu=$ac_compiler_gnu
3187
3188fi
3189{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5
3190$as_echo "$ac_cv_c_compiler_gnu" >&6; }
3191if test $ac_compiler_gnu = yes; then
3192 GCC=yes
3193else
3194 GCC=
3195fi
3196ac_test_CFLAGS=${CFLAGS+set}
3197ac_save_CFLAGS=$CFLAGS
3198{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5
3199$as_echo_n "checking whether $CC accepts -g... " >&6; }
3200if ${ac_cv_prog_cc_g+:} false; then :
3201 $as_echo_n "(cached) " >&6
3202else
3203 ac_save_c_werror_flag=$ac_c_werror_flag
3204 ac_c_werror_flag=yes
3205 ac_cv_prog_cc_g=no
3206 CFLAGS="-g"
3207 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3208/* end confdefs.h. */
3209
3210int
3211main ()
3212{
3213
3214 ;
3215 return 0;
3216}
3217_ACEOF
3218if ac_fn_c_try_compile "$LINENO"; then :
3219 ac_cv_prog_cc_g=yes
3220else
3221 CFLAGS=""
3222 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3223/* end confdefs.h. */
3224
3225int
3226main ()
3227{
3228
3229 ;
3230 return 0;
3231}
3232_ACEOF
3233if ac_fn_c_try_compile "$LINENO"; then :
3234
3235else
3236 ac_c_werror_flag=$ac_save_c_werror_flag
3237 CFLAGS="-g"
3238 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3239/* end confdefs.h. */
3240
3241int
3242main ()
3243{
3244
3245 ;
3246 return 0;
3247}
3248_ACEOF
3249if ac_fn_c_try_compile "$LINENO"; then :
3250 ac_cv_prog_cc_g=yes
3251fi
3252rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
3253fi
3254rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
3255fi
3256rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
3257 ac_c_werror_flag=$ac_save_c_werror_flag
3258fi
3259{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5
3260$as_echo "$ac_cv_prog_cc_g" >&6; }
3261if test "$ac_test_CFLAGS" = set; then
3262 CFLAGS=$ac_save_CFLAGS
3263elif test $ac_cv_prog_cc_g = yes; then
3264 if test "$GCC" = yes; then
3265 CFLAGS="-g -O2"
3266 else
3267 CFLAGS="-g"
3268 fi
3269else
3270 if test "$GCC" = yes; then
3271 CFLAGS="-O2"
3272 else
3273 CFLAGS=
3274 fi
3275fi
3276{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $CC option to accept ISO C89" >&5
3277$as_echo_n "checking for $CC option to accept ISO C89... " >&6; }
3278if ${ac_cv_prog_cc_c89+:} false; then :
3279 $as_echo_n "(cached) " >&6
3280else
3281 ac_cv_prog_cc_c89=no
3282ac_save_CC=$CC
3283cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3284/* end confdefs.h. */
3285#include <stdarg.h>
3286#include <stdio.h>
3287#include <sys/types.h>
3288#include <sys/stat.h>
3289/* Most of the following tests are stolen from RCS 5.7's src/conf.sh. */
3290struct buf { int x; };
3291FILE * (*rcsopen) (struct buf *, struct stat *, int);
3292static char *e (p, i)
3293 char **p;
3294 int i;
3295{
3296 return p[i];
3297}
3298static char *f (char * (*g) (char **, int), char **p, ...)
3299{
3300 char *s;
3301 va_list v;
3302 va_start (v,p);
3303 s = g (p, va_arg (v,int));
3304 va_end (v);
3305 return s;
3306}
3307
3308/* OSF 4.0 Compaq cc is some sort of almost-ANSI by default. It has
3309 function prototypes and stuff, but not '\xHH' hex character constants.
3310 These don't provoke an error unfortunately, instead are silently treated
3311 as 'x'. The following induces an error, until -std is added to get
3312 proper ANSI mode. Curiously '\x00'!='x' always comes out true, for an
3313 array size at least. It's necessary to write '\x00'==0 to get something
3314 that's true only with -std. */
3315int osf4_cc_array ['\x00' == 0 ? 1 : -1];
3316
3317/* IBM C 6 for AIX is almost-ANSI by default, but it replaces macro parameters
3318 inside strings and character constants. */
3319#define FOO(x) 'x'
3320int xlc6_cc_array[FOO(a) == 'x' ? 1 : -1];
3321
3322int test (int i, double x);
3323struct s1 {int (*f) (int a);};
3324struct s2 {int (*f) (double a);};
3325int pairnames (int, char **, FILE *(*)(struct buf *, struct stat *, int), int, int);
3326int argc;
3327char **argv;
3328int
3329main ()
3330{
3331return f (e, argv, 0) != argv[0] || f (e, argv, 1) != argv[1];
3332 ;
3333 return 0;
3334}
3335_ACEOF
3336for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std \
3337 -Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__"
3338do
3339 CC="$ac_save_CC $ac_arg"
3340 if ac_fn_c_try_compile "$LINENO"; then :
3341 ac_cv_prog_cc_c89=$ac_arg
3342fi
3343rm -f core conftest.err conftest.$ac_objext
3344 test "x$ac_cv_prog_cc_c89" != "xno" && break
3345done
3346rm -f conftest.$ac_ext
3347CC=$ac_save_CC
3348
3349fi
3350# AC_CACHE_VAL
3351case "x$ac_cv_prog_cc_c89" in
3352 x)
3353 { $as_echo "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
3354$as_echo "none needed" >&6; } ;;
3355 xno)
3356 { $as_echo "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
3357$as_echo "unsupported" >&6; } ;;
3358 *)
3359 CC="$CC $ac_cv_prog_cc_c89"
3360 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5
3361$as_echo "$ac_cv_prog_cc_c89" >&6; } ;;
3362esac
3363if test "x$ac_cv_prog_cc_c89" != xno; then :
3364
3365fi
3366
3367ac_ext=c
3368ac_cpp='$CPP $CPPFLAGS'
3369ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
3370ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
3371ac_compiler_gnu=$ac_cv_c_compiler_gnu
3372
3373ac_aux_dir=
3374for ac_dir in "$srcdir" "$srcdir/.." "$srcdir/../.."; do
3375 if test -f "$ac_dir/install-sh"; then
3376 ac_aux_dir=$ac_dir
3377 ac_install_sh="$ac_aux_dir/install-sh -c"
3378 break
3379 elif test -f "$ac_dir/install.sh"; then
3380 ac_aux_dir=$ac_dir
3381 ac_install_sh="$ac_aux_dir/install.sh -c"
3382 break
3383 elif test -f "$ac_dir/shtool"; then
3384 ac_aux_dir=$ac_dir
3385 ac_install_sh="$ac_aux_dir/shtool install -c"
3386 break
3387 fi
3388done
3389if test -z "$ac_aux_dir"; then
3390 as_fn_error $? "cannot find install-sh, install.sh, or shtool in \"$srcdir\" \"$srcdir/..\" \"$srcdir/../..\"" "$LINENO" 5
3391fi
3392
3393# These three variables are undocumented and unsupported,
3394# and are intended to be withdrawn in a future Autoconf release.
3395# They can cause serious problems if a builder's source tree is in a directory
3396# whose full name contains unusual characters.
3397ac_config_guess="$SHELL $ac_aux_dir/config.guess" # Please don't use this var.
3398ac_config_sub="$SHELL $ac_aux_dir/config.sub" # Please don't use this var.
3399ac_configure="$SHELL $ac_aux_dir/configure" # Please don't use this var.
3400
3401
3402# Make sure we can run config.sub.
3403$SHELL "$ac_aux_dir/config.sub" sun4 >/dev/null 2>&1 ||
3404 as_fn_error $? "cannot run $SHELL $ac_aux_dir/config.sub" "$LINENO" 5
3405
3406{ $as_echo "$as_me:${as_lineno-$LINENO}: checking build system type" >&5
3407$as_echo_n "checking build system type... " >&6; }
3408if ${ac_cv_build+:} false; then :
3409 $as_echo_n "(cached) " >&6
3410else
3411 ac_build_alias=$build_alias
3412test "x$ac_build_alias" = x &&
3413 ac_build_alias=`$SHELL "$ac_aux_dir/config.guess"`
3414test "x$ac_build_alias" = x &&
3415 as_fn_error $? "cannot guess build type; you must specify one" "$LINENO" 5
3416ac_cv_build=`$SHELL "$ac_aux_dir/config.sub" $ac_build_alias` ||
3417 as_fn_error $? "$SHELL $ac_aux_dir/config.sub $ac_build_alias failed" "$LINENO" 5
3418
3419fi
3420{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_build" >&5
3421$as_echo "$ac_cv_build" >&6; }
3422case $ac_cv_build in
3423*-*-*) ;;
3424*) as_fn_error $? "invalid value of canonical build" "$LINENO" 5;;
3425esac
3426build=$ac_cv_build
3427ac_save_IFS=$IFS; IFS='-'
3428set x $ac_cv_build
3429shift
3430build_cpu=$1
3431build_vendor=$2
3432shift; shift
3433# Remember, the first character of IFS is used to create $*,
3434# except with old shells:
3435build_os=$*
3436IFS=$ac_save_IFS
3437case $build_os in *\ *) build_os=`echo "$build_os" | sed 's/ /-/g'`;; esac
3438
3439
3440{ $as_echo "$as_me:${as_lineno-$LINENO}: checking host system type" >&5
3441$as_echo_n "checking host system type... " >&6; }
3442if ${ac_cv_host+:} false; then :
3443 $as_echo_n "(cached) " >&6
3444else
3445 if test "x$host_alias" = x; then
3446 ac_cv_host=$ac_cv_build
3447else
3448 ac_cv_host=`$SHELL "$ac_aux_dir/config.sub" $host_alias` ||
3449 as_fn_error $? "$SHELL $ac_aux_dir/config.sub $host_alias failed" "$LINENO" 5
3450fi
3451
3452fi
3453{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_host" >&5
3454$as_echo "$ac_cv_host" >&6; }
3455case $ac_cv_host in
3456*-*-*) ;;
3457*) as_fn_error $? "invalid value of canonical host" "$LINENO" 5;;
3458esac
3459host=$ac_cv_host
3460ac_save_IFS=$IFS; IFS='-'
3461set x $ac_cv_host
3462shift
3463host_cpu=$1
3464host_vendor=$2
3465shift; shift
3466# Remember, the first character of IFS is used to create $*,
3467# except with old shells:
3468host_os=$*
3469IFS=$ac_save_IFS
3470case $host_os in *\ *) host_os=`echo "$host_os" | sed 's/ /-/g'`;; esac
3471
3472
3473
3474ac_ext=c
3475ac_cpp='$CPP $CPPFLAGS'
3476ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
3477ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
3478ac_compiler_gnu=$ac_cv_c_compiler_gnu
3479{ $as_echo "$as_me:${as_lineno-$LINENO}: checking how to run the C preprocessor" >&5
3480$as_echo_n "checking how to run the C preprocessor... " >&6; }
3481# On Suns, sometimes $CPP names a directory.
3482if test -n "$CPP" && test -d "$CPP"; then
3483 CPP=
3484fi
3485if test -z "$CPP"; then
3486 if ${ac_cv_prog_CPP+:} false; then :
3487 $as_echo_n "(cached) " >&6
3488else
3489 # Double quotes because CPP needs to be expanded
3490 for CPP in "$CC -E" "$CC -E -traditional-cpp" "/lib/cpp"
3491 do
3492 ac_preproc_ok=false
3493for ac_c_preproc_warn_flag in '' yes
3494do
3495 # Use a header file that comes with gcc, so configuring glibc
3496 # with a fresh cross-compiler works.
3497 # Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
3498 # <limits.h> exists even on freestanding compilers.
3499 # On the NeXT, cc -E runs the code through the compiler's parser,
3500 # not just through cpp. "Syntax error" is here to catch this case.
3501 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3502/* end confdefs.h. */
3503#ifdef __STDC__
3504# include <limits.h>
3505#else
3506# include <assert.h>
3507#endif
3508 Syntax error
3509_ACEOF
3510if ac_fn_c_try_cpp "$LINENO"; then :
3511
3512else
3513 # Broken: fails on valid input.
3514continue
3515fi
3516rm -f conftest.err conftest.i conftest.$ac_ext
3517
3518 # OK, works on sane cases. Now check whether nonexistent headers
3519 # can be detected and how.
3520 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3521/* end confdefs.h. */
3522#include <ac_nonexistent.h>
3523_ACEOF
3524if ac_fn_c_try_cpp "$LINENO"; then :
3525 # Broken: success on invalid input.
3526continue
3527else
3528 # Passes both tests.
3529ac_preproc_ok=:
3530break
3531fi
3532rm -f conftest.err conftest.i conftest.$ac_ext
3533
3534done
3535# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
3536rm -f conftest.i conftest.err conftest.$ac_ext
3537if $ac_preproc_ok; then :
3538 break
3539fi
3540
3541 done
3542 ac_cv_prog_CPP=$CPP
3543
3544fi
3545 CPP=$ac_cv_prog_CPP
3546else
3547 ac_cv_prog_CPP=$CPP
3548fi
3549{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $CPP" >&5
3550$as_echo "$CPP" >&6; }
3551ac_preproc_ok=false
3552for ac_c_preproc_warn_flag in '' yes
3553do
3554 # Use a header file that comes with gcc, so configuring glibc
3555 # with a fresh cross-compiler works.
3556 # Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
3557 # <limits.h> exists even on freestanding compilers.
3558 # On the NeXT, cc -E runs the code through the compiler's parser,
3559 # not just through cpp. "Syntax error" is here to catch this case.
3560 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3561/* end confdefs.h. */
3562#ifdef __STDC__
3563# include <limits.h>
3564#else
3565# include <assert.h>
3566#endif
3567 Syntax error
3568_ACEOF
3569if ac_fn_c_try_cpp "$LINENO"; then :
3570
3571else
3572 # Broken: fails on valid input.
3573continue
3574fi
3575rm -f conftest.err conftest.i conftest.$ac_ext
3576
3577 # OK, works on sane cases. Now check whether nonexistent headers
3578 # can be detected and how.
3579 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3580/* end confdefs.h. */
3581#include <ac_nonexistent.h>
3582_ACEOF
3583if ac_fn_c_try_cpp "$LINENO"; then :
3584 # Broken: success on invalid input.
3585continue
3586else
3587 # Passes both tests.
3588ac_preproc_ok=:
3589break
3590fi
3591rm -f conftest.err conftest.i conftest.$ac_ext
3592
3593done
3594# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
3595rm -f conftest.i conftest.err conftest.$ac_ext
3596if $ac_preproc_ok; then :
3597
3598else
3599 { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
3600$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
3601as_fn_error $? "C preprocessor \"$CPP\" fails sanity check
3602See \`config.log' for more details" "$LINENO" 5; }
3603fi
3604
3605ac_ext=c
3606ac_cpp='$CPP $CPPFLAGS'
3607ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
3608ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
3609ac_compiler_gnu=$ac_cv_c_compiler_gnu
3610
3611
3612{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5
3613$as_echo_n "checking for grep that handles long lines and -e... " >&6; }
3614if ${ac_cv_path_GREP+:} false; then :
3615 $as_echo_n "(cached) " >&6
3616else
3617 if test -z "$GREP"; then
3618 ac_path_GREP_found=false
3619 # Loop through the user's path and test for each of PROGNAME-LIST
3620 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
3621for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
3622do
3623 IFS=$as_save_IFS
3624 test -z "$as_dir" && as_dir=.
3625 for ac_prog in grep ggrep; do
3626 for ac_exec_ext in '' $ac_executable_extensions; do
3627 ac_path_GREP="$as_dir/$ac_prog$ac_exec_ext"
3628 { test -f "$ac_path_GREP" && $as_test_x "$ac_path_GREP"; } || continue
3629# Check for GNU ac_path_GREP and select it if it is found.
3630 # Check for GNU $ac_path_GREP
3631case `"$ac_path_GREP" --version 2>&1` in
3632*GNU*)
3633 ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;;
3634*)
3635 ac_count=0
3636 $as_echo_n 0123456789 >"conftest.in"
3637 while :
3638 do
3639 cat "conftest.in" "conftest.in" >"conftest.tmp"
3640 mv "conftest.tmp" "conftest.in"
3641 cp "conftest.in" "conftest.nl"
3642 $as_echo 'GREP' >> "conftest.nl"
3643 "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break
3644 diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
3645 as_fn_arith $ac_count + 1 && ac_count=$as_val
3646 if test $ac_count -gt ${ac_path_GREP_max-0}; then
3647 # Best one so far, save it but keep looking for a better one
3648 ac_cv_path_GREP="$ac_path_GREP"
3649 ac_path_GREP_max=$ac_count
3650 fi
3651 # 10*(2^10) chars as input seems more than enough
3652 test $ac_count -gt 10 && break
3653 done
3654 rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
3655esac
3656
3657 $ac_path_GREP_found && break 3
3658 done
3659 done
3660 done
3661IFS=$as_save_IFS
3662 if test -z "$ac_cv_path_GREP"; then
3663 as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
3664 fi
3665else
3666 ac_cv_path_GREP=$GREP
3667fi
3668
3669fi
3670{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5
3671$as_echo "$ac_cv_path_GREP" >&6; }
3672 GREP="$ac_cv_path_GREP"
3673
3674
3675{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5
3676$as_echo_n "checking for egrep... " >&6; }
3677if ${ac_cv_path_EGREP+:} false; then :
3678 $as_echo_n "(cached) " >&6
3679else
3680 if echo a | $GREP -E '(a|b)' >/dev/null 2>&1
3681 then ac_cv_path_EGREP="$GREP -E"
3682 else
3683 if test -z "$EGREP"; then
3684 ac_path_EGREP_found=false
3685 # Loop through the user's path and test for each of PROGNAME-LIST
3686 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
3687for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
3688do
3689 IFS=$as_save_IFS
3690 test -z "$as_dir" && as_dir=.
3691 for ac_prog in egrep; do
3692 for ac_exec_ext in '' $ac_executable_extensions; do
3693 ac_path_EGREP="$as_dir/$ac_prog$ac_exec_ext"
3694 { test -f "$ac_path_EGREP" && $as_test_x "$ac_path_EGREP"; } || continue
3695# Check for GNU ac_path_EGREP and select it if it is found.
3696 # Check for GNU $ac_path_EGREP
3697case `"$ac_path_EGREP" --version 2>&1` in
3698*GNU*)
3699 ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;;
3700*)
3701 ac_count=0
3702 $as_echo_n 0123456789 >"conftest.in"
3703 while :
3704 do
3705 cat "conftest.in" "conftest.in" >"conftest.tmp"
3706 mv "conftest.tmp" "conftest.in"
3707 cp "conftest.in" "conftest.nl"
3708 $as_echo 'EGREP' >> "conftest.nl"
3709 "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break
3710 diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
3711 as_fn_arith $ac_count + 1 && ac_count=$as_val
3712 if test $ac_count -gt ${ac_path_EGREP_max-0}; then
3713 # Best one so far, save it but keep looking for a better one
3714 ac_cv_path_EGREP="$ac_path_EGREP"
3715 ac_path_EGREP_max=$ac_count
3716 fi
3717 # 10*(2^10) chars as input seems more than enough
3718 test $ac_count -gt 10 && break
3719 done
3720 rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
3721esac
3722
3723 $ac_path_EGREP_found && break 3
3724 done
3725 done
3726 done
3727IFS=$as_save_IFS
3728 if test -z "$ac_cv_path_EGREP"; then
3729 as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
3730 fi
3731else
3732 ac_cv_path_EGREP=$EGREP
3733fi
3734
3735 fi
3736fi
3737{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5
3738$as_echo "$ac_cv_path_EGREP" >&6; }
3739 EGREP="$ac_cv_path_EGREP"
3740
3741
3742{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for ANSI C header files" >&5
3743$as_echo_n "checking for ANSI C header files... " >&6; }
3744if ${ac_cv_header_stdc+:} false; then :
3745 $as_echo_n "(cached) " >&6
3746else
3747 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3748/* end confdefs.h. */
3749#include <stdlib.h>
3750#include <stdarg.h>
3751#include <string.h>
3752#include <float.h>
3753
3754int
3755main ()
3756{
3757
3758 ;
3759 return 0;
3760}
3761_ACEOF
3762if ac_fn_c_try_compile "$LINENO"; then :
3763 ac_cv_header_stdc=yes
3764else
3765 ac_cv_header_stdc=no
3766fi
3767rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
3768
3769if test $ac_cv_header_stdc = yes; then
3770 # SunOS 4.x string.h does not declare mem*, contrary to ANSI.
3771 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3772/* end confdefs.h. */
3773#include <string.h>
3774
3775_ACEOF
3776if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
3777 $EGREP "memchr" >/dev/null 2>&1; then :
3778
3779else
3780 ac_cv_header_stdc=no
3781fi
3782rm -f conftest*
3783
3784fi
3785
3786if test $ac_cv_header_stdc = yes; then
3787 # ISC 2.0.2 stdlib.h does not declare free, contrary to ANSI.
3788 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3789/* end confdefs.h. */
3790#include <stdlib.h>
3791
3792_ACEOF
3793if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
3794 $EGREP "free" >/dev/null 2>&1; then :
3795
3796else
3797 ac_cv_header_stdc=no
3798fi
3799rm -f conftest*
3800
3801fi
3802
3803if test $ac_cv_header_stdc = yes; then
3804 # /bin/cc in Irix-4.0.5 gets non-ANSI ctype macros unless using -ansi.
3805 if test "$cross_compiling" = yes; then :
3806 :
3807else
3808 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3809/* end confdefs.h. */
3810#include <ctype.h>
3811#include <stdlib.h>
3812#if ((' ' & 0x0FF) == 0x020)
3813# define ISLOWER(c) ('a' <= (c) && (c) <= 'z')
3814# define TOUPPER(c) (ISLOWER(c) ? 'A' + ((c) - 'a') : (c))
3815#else
3816# define ISLOWER(c) \
3817 (('a' <= (c) && (c) <= 'i') \
3818 || ('j' <= (c) && (c) <= 'r') \
3819 || ('s' <= (c) && (c) <= 'z'))
3820# define TOUPPER(c) (ISLOWER(c) ? ((c) | 0x40) : (c))
3821#endif
3822
3823#define XOR(e, f) (((e) && !(f)) || (!(e) && (f)))
3824int
3825main ()
3826{
3827 int i;
3828 for (i = 0; i < 256; i++)
3829 if (XOR (islower (i), ISLOWER (i))
3830 || toupper (i) != TOUPPER (i))
3831 return 2;
3832 return 0;
3833}
3834_ACEOF
3835if ac_fn_c_try_run "$LINENO"; then :
3836
3837else
3838 ac_cv_header_stdc=no
3839fi
3840rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
3841 conftest.$ac_objext conftest.beam conftest.$ac_ext
3842fi
3843
3844fi
3845fi
3846{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_stdc" >&5
3847$as_echo "$ac_cv_header_stdc" >&6; }
3848if test $ac_cv_header_stdc = yes; then
3849
3850$as_echo "#define STDC_HEADERS 1" >>confdefs.h
3851
3852fi
3853
3854# On IRIX 5.3, sys/types and inttypes.h are conflicting.
3855for ac_header in sys/types.h sys/stat.h stdlib.h string.h memory.h strings.h \
3856 inttypes.h stdint.h unistd.h
3857do :
3858 as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
3859ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default
3860"
3861if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
3862 cat >>confdefs.h <<_ACEOF
3863#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
3864_ACEOF
3865
3866fi
3867
3868done
3869
3870
3871 { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether byte ordering is bigendian" >&5
3872$as_echo_n "checking whether byte ordering is bigendian... " >&6; }
3873if ${ac_cv_c_bigendian+:} false; then :
3874 $as_echo_n "(cached) " >&6
3875else
3876 ac_cv_c_bigendian=unknown
3877 # See if we're dealing with a universal compiler.
3878 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3879/* end confdefs.h. */
3880#ifndef __APPLE_CC__
3881 not a universal capable compiler
3882 #endif
3883 typedef int dummy;
3884
3885_ACEOF
3886if ac_fn_c_try_compile "$LINENO"; then :
3887
3888 # Check for potential -arch flags. It is not universal unless
3889 # there are at least two -arch flags with different values.
3890 ac_arch=
3891 ac_prev=
3892 for ac_word in $CC $CFLAGS $CPPFLAGS $LDFLAGS; do
3893 if test -n "$ac_prev"; then
3894 case $ac_word in
3895 i?86 | x86_64 | ppc | ppc64)
3896 if test -z "$ac_arch" || test "$ac_arch" = "$ac_word"; then
3897 ac_arch=$ac_word
3898 else
3899 ac_cv_c_bigendian=universal
3900 break
3901 fi
3902 ;;
3903 esac
3904 ac_prev=
3905 elif test "x$ac_word" = "x-arch"; then
3906 ac_prev=arch
3907 fi
3908 done
3909fi
3910rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
3911 if test $ac_cv_c_bigendian = unknown; then
3912 # See if sys/param.h defines the BYTE_ORDER macro.
3913 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3914/* end confdefs.h. */
3915#include <sys/types.h>
3916 #include <sys/param.h>
3917
3918int
3919main ()
3920{
3921#if ! (defined BYTE_ORDER && defined BIG_ENDIAN \
3922 && defined LITTLE_ENDIAN && BYTE_ORDER && BIG_ENDIAN \
3923 && LITTLE_ENDIAN)
3924 bogus endian macros
3925 #endif
3926
3927 ;
3928 return 0;
3929}
3930_ACEOF
3931if ac_fn_c_try_compile "$LINENO"; then :
3932 # It does; now see whether it defined to BIG_ENDIAN or not.
3933 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3934/* end confdefs.h. */
3935#include <sys/types.h>
3936 #include <sys/param.h>
3937
3938int
3939main ()
3940{
3941#if BYTE_ORDER != BIG_ENDIAN
3942 not big endian
3943 #endif
3944
3945 ;
3946 return 0;
3947}
3948_ACEOF
3949if ac_fn_c_try_compile "$LINENO"; then :
3950 ac_cv_c_bigendian=yes
3951else
3952 ac_cv_c_bigendian=no
3953fi
3954rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
3955fi
3956rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
3957 fi
3958 if test $ac_cv_c_bigendian = unknown; then
3959 # See if <limits.h> defines _LITTLE_ENDIAN or _BIG_ENDIAN (e.g., Solaris).
3960 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3961/* end confdefs.h. */
3962#include <limits.h>
3963
3964int
3965main ()
3966{
3967#if ! (defined _LITTLE_ENDIAN || defined _BIG_ENDIAN)
3968 bogus endian macros
3969 #endif
3970
3971 ;
3972 return 0;
3973}
3974_ACEOF
3975if ac_fn_c_try_compile "$LINENO"; then :
3976 # It does; now see whether it defined to _BIG_ENDIAN or not.
3977 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
3978/* end confdefs.h. */
3979#include <limits.h>
3980
3981int
3982main ()
3983{
3984#ifndef _BIG_ENDIAN
3985 not big endian
3986 #endif
3987
3988 ;
3989 return 0;
3990}
3991_ACEOF
3992if ac_fn_c_try_compile "$LINENO"; then :
3993 ac_cv_c_bigendian=yes
3994else
3995 ac_cv_c_bigendian=no
3996fi
3997rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
3998fi
3999rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
4000 fi
4001 if test $ac_cv_c_bigendian = unknown; then
4002 # Compile a test program.
4003 if test "$cross_compiling" = yes; then :
4004 # Try to guess by grepping values from an object file.
4005 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
4006/* end confdefs.h. */
4007short int ascii_mm[] =
4008 { 0x4249, 0x4765, 0x6E44, 0x6961, 0x6E53, 0x7953, 0 };
4009 short int ascii_ii[] =
4010 { 0x694C, 0x5454, 0x656C, 0x6E45, 0x6944, 0x6E61, 0 };
4011 int use_ascii (int i) {
4012 return ascii_mm[i] + ascii_ii[i];
4013 }
4014 short int ebcdic_ii[] =
4015 { 0x89D3, 0xE3E3, 0x8593, 0x95C5, 0x89C4, 0x9581, 0 };
4016 short int ebcdic_mm[] =
4017 { 0xC2C9, 0xC785, 0x95C4, 0x8981, 0x95E2, 0xA8E2, 0 };
4018 int use_ebcdic (int i) {
4019 return ebcdic_mm[i] + ebcdic_ii[i];
4020 }
4021 extern int foo;
4022
4023int
4024main ()
4025{
4026return use_ascii (foo) == use_ebcdic (foo);
4027 ;
4028 return 0;
4029}
4030_ACEOF
4031if ac_fn_c_try_compile "$LINENO"; then :
4032 if grep BIGenDianSyS conftest.$ac_objext >/dev/null; then
4033 ac_cv_c_bigendian=yes
4034 fi
4035 if grep LiTTleEnDian conftest.$ac_objext >/dev/null ; then
4036 if test "$ac_cv_c_bigendian" = unknown; then
4037 ac_cv_c_bigendian=no
4038 else
4039 # finding both strings is unlikely to happen, but who knows?
4040 ac_cv_c_bigendian=unknown
4041 fi
4042 fi
4043fi
4044rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
4045else
4046 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
4047/* end confdefs.h. */
4048$ac_includes_default
4049int
4050main ()
4051{
4052
4053 /* Are we little or big endian? From Harbison&Steele. */
4054 union
4055 {
4056 long int l;
4057 char c[sizeof (long int)];
4058 } u;
4059 u.l = 1;
4060 return u.c[sizeof (long int) - 1] == 1;
4061
4062 ;
4063 return 0;
4064}
4065_ACEOF
4066if ac_fn_c_try_run "$LINENO"; then :
4067 ac_cv_c_bigendian=no
4068else
4069 ac_cv_c_bigendian=yes
4070fi
4071rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
4072 conftest.$ac_objext conftest.beam conftest.$ac_ext
4073fi
4074
4075 fi
4076fi
4077{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_bigendian" >&5
4078$as_echo "$ac_cv_c_bigendian" >&6; }
4079 case $ac_cv_c_bigendian in #(
4080 yes)
4081 $as_echo "#define WORDS_BIGENDIAN 1" >>confdefs.h
4082;; #(
4083 no)
4084 ;; #(
4085 universal)
4086
4087$as_echo "#define AC_APPLE_UNIVERSAL_BUILD 1" >>confdefs.h
4088
4089 ;; #(
4090 *)
4091 as_fn_error $? "unknown endianness
4092 presetting ac_cv_c_bigendian=no (or yes) will help" "$LINENO" 5 ;;
4093 esac
4094
4095
4096# Checks for programs.
4097for ac_prog in gawk mawk nawk awk
4098do
4099 # Extract the first word of "$ac_prog", so it can be a program name with args.
4100set dummy $ac_prog; ac_word=$2
4101{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
4102$as_echo_n "checking for $ac_word... " >&6; }
4103if ${ac_cv_prog_AWK+:} false; then :
4104 $as_echo_n "(cached) " >&6
4105else
4106 if test -n "$AWK"; then
4107 ac_cv_prog_AWK="$AWK" # Let the user override the test.
4108else
4109as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4110for as_dir in $PATH
4111do
4112 IFS=$as_save_IFS
4113 test -z "$as_dir" && as_dir=.
4114 for ac_exec_ext in '' $ac_executable_extensions; do
4115 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
4116 ac_cv_prog_AWK="$ac_prog"
4117 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
4118 break 2
4119 fi
4120done
4121 done
4122IFS=$as_save_IFS
4123
4124fi
4125fi
4126AWK=$ac_cv_prog_AWK
4127if test -n "$AWK"; then
4128 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5
4129$as_echo "$AWK" >&6; }
4130else
4131 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
4132$as_echo "no" >&6; }
4133fi
4134
4135
4136 test -n "$AWK" && break
4137done
4138
4139ac_ext=c
4140ac_cpp='$CPP $CPPFLAGS'
4141ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
4142ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
4143ac_compiler_gnu=$ac_cv_c_compiler_gnu
4144{ $as_echo "$as_me:${as_lineno-$LINENO}: checking how to run the C preprocessor" >&5
4145$as_echo_n "checking how to run the C preprocessor... " >&6; }
4146# On Suns, sometimes $CPP names a directory.
4147if test -n "$CPP" && test -d "$CPP"; then
4148 CPP=
4149fi
4150if test -z "$CPP"; then
4151 if ${ac_cv_prog_CPP+:} false; then :
4152 $as_echo_n "(cached) " >&6
4153else
4154 # Double quotes because CPP needs to be expanded
4155 for CPP in "$CC -E" "$CC -E -traditional-cpp" "/lib/cpp"
4156 do
4157 ac_preproc_ok=false
4158for ac_c_preproc_warn_flag in '' yes
4159do
4160 # Use a header file that comes with gcc, so configuring glibc
4161 # with a fresh cross-compiler works.
4162 # Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
4163 # <limits.h> exists even on freestanding compilers.
4164 # On the NeXT, cc -E runs the code through the compiler's parser,
4165 # not just through cpp. "Syntax error" is here to catch this case.
4166 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
4167/* end confdefs.h. */
4168#ifdef __STDC__
4169# include <limits.h>
4170#else
4171# include <assert.h>
4172#endif
4173 Syntax error
4174_ACEOF
4175if ac_fn_c_try_cpp "$LINENO"; then :
4176
4177else
4178 # Broken: fails on valid input.
4179continue
4180fi
4181rm -f conftest.err conftest.i conftest.$ac_ext
4182
4183 # OK, works on sane cases. Now check whether nonexistent headers
4184 # can be detected and how.
4185 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
4186/* end confdefs.h. */
4187#include <ac_nonexistent.h>
4188_ACEOF
4189if ac_fn_c_try_cpp "$LINENO"; then :
4190 # Broken: success on invalid input.
4191continue
4192else
4193 # Passes both tests.
4194ac_preproc_ok=:
4195break
4196fi
4197rm -f conftest.err conftest.i conftest.$ac_ext
4198
4199done
4200# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
4201rm -f conftest.i conftest.err conftest.$ac_ext
4202if $ac_preproc_ok; then :
4203 break
4204fi
4205
4206 done
4207 ac_cv_prog_CPP=$CPP
4208
4209fi
4210 CPP=$ac_cv_prog_CPP
4211else
4212 ac_cv_prog_CPP=$CPP
4213fi
4214{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $CPP" >&5
4215$as_echo "$CPP" >&6; }
4216ac_preproc_ok=false
4217for ac_c_preproc_warn_flag in '' yes
4218do
4219 # Use a header file that comes with gcc, so configuring glibc
4220 # with a fresh cross-compiler works.
4221 # Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
4222 # <limits.h> exists even on freestanding compilers.
4223 # On the NeXT, cc -E runs the code through the compiler's parser,
4224 # not just through cpp. "Syntax error" is here to catch this case.
4225 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
4226/* end confdefs.h. */
4227#ifdef __STDC__
4228# include <limits.h>
4229#else
4230# include <assert.h>
4231#endif
4232 Syntax error
4233_ACEOF
4234if ac_fn_c_try_cpp "$LINENO"; then :
4235
4236else
4237 # Broken: fails on valid input.
4238continue
4239fi
4240rm -f conftest.err conftest.i conftest.$ac_ext
4241
4242 # OK, works on sane cases. Now check whether nonexistent headers
4243 # can be detected and how.
4244 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
4245/* end confdefs.h. */
4246#include <ac_nonexistent.h>
4247_ACEOF
4248if ac_fn_c_try_cpp "$LINENO"; then :
4249 # Broken: success on invalid input.
4250continue
4251else
4252 # Passes both tests.
4253ac_preproc_ok=:
4254break
4255fi
4256rm -f conftest.err conftest.i conftest.$ac_ext
4257
4258done
4259# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
4260rm -f conftest.i conftest.err conftest.$ac_ext
4261if $ac_preproc_ok; then :
4262
4263else
4264 { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
4265$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
4266as_fn_error $? "C preprocessor \"$CPP\" fails sanity check
4267See \`config.log' for more details" "$LINENO" 5; }
4268fi
4269
4270ac_ext=c
4271ac_cpp='$CPP $CPPFLAGS'
4272ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
4273ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
4274ac_compiler_gnu=$ac_cv_c_compiler_gnu
4275
4276if test -n "$ac_tool_prefix"; then
4277 # Extract the first word of "${ac_tool_prefix}ranlib", so it can be a program name with args.
4278set dummy ${ac_tool_prefix}ranlib; ac_word=$2
4279{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
4280$as_echo_n "checking for $ac_word... " >&6; }
4281if ${ac_cv_prog_RANLIB+:} false; then :
4282 $as_echo_n "(cached) " >&6
4283else
4284 if test -n "$RANLIB"; then
4285 ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test.
4286else
4287as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4288for as_dir in $PATH
4289do
4290 IFS=$as_save_IFS
4291 test -z "$as_dir" && as_dir=.
4292 for ac_exec_ext in '' $ac_executable_extensions; do
4293 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
4294 ac_cv_prog_RANLIB="${ac_tool_prefix}ranlib"
4295 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
4296 break 2
4297 fi
4298done
4299 done
4300IFS=$as_save_IFS
4301
4302fi
4303fi
4304RANLIB=$ac_cv_prog_RANLIB
4305if test -n "$RANLIB"; then
4306 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $RANLIB" >&5
4307$as_echo "$RANLIB" >&6; }
4308else
4309 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
4310$as_echo "no" >&6; }
4311fi
4312
4313
4314fi
4315if test -z "$ac_cv_prog_RANLIB"; then
4316 ac_ct_RANLIB=$RANLIB
4317 # Extract the first word of "ranlib", so it can be a program name with args.
4318set dummy ranlib; ac_word=$2
4319{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
4320$as_echo_n "checking for $ac_word... " >&6; }
4321if ${ac_cv_prog_ac_ct_RANLIB+:} false; then :
4322 $as_echo_n "(cached) " >&6
4323else
4324 if test -n "$ac_ct_RANLIB"; then
4325 ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test.
4326else
4327as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4328for as_dir in $PATH
4329do
4330 IFS=$as_save_IFS
4331 test -z "$as_dir" && as_dir=.
4332 for ac_exec_ext in '' $ac_executable_extensions; do
4333 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
4334 ac_cv_prog_ac_ct_RANLIB="ranlib"
4335 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
4336 break 2
4337 fi
4338done
4339 done
4340IFS=$as_save_IFS
4341
4342fi
4343fi
4344ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB
4345if test -n "$ac_ct_RANLIB"; then
4346 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_RANLIB" >&5
4347$as_echo "$ac_ct_RANLIB" >&6; }
4348else
4349 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
4350$as_echo "no" >&6; }
4351fi
4352
4353 if test "x$ac_ct_RANLIB" = x; then
4354 RANLIB=":"
4355 else
4356 case $cross_compiling:$ac_tool_warned in
4357yes:)
4358{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
4359$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
4360ac_tool_warned=yes ;;
4361esac
4362 RANLIB=$ac_ct_RANLIB
4363 fi
4364else
4365 RANLIB="$ac_cv_prog_RANLIB"
4366fi
4367
4368# Find a good install program. We prefer a C program (faster),
4369# so one script is as good as another. But avoid the broken or
4370# incompatible versions:
4371# SysV /etc/install, /usr/sbin/install
4372# SunOS /usr/etc/install
4373# IRIX /sbin/install
4374# AIX /bin/install
4375# AmigaOS /C/install, which installs bootblocks on floppy discs
4376# AIX 4 /usr/bin/installbsd, which doesn't work without a -g flag
4377# AFS /usr/afsws/bin/install, which mishandles nonexistent args
4378# SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff"
4379# OS/2's system install, which has a completely different semantic
4380# ./install, which can be erroneously created by make from ./install.sh.
4381# Reject install programs that cannot install multiple files.
4382{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for a BSD-compatible install" >&5
4383$as_echo_n "checking for a BSD-compatible install... " >&6; }
4384if test -z "$INSTALL"; then
4385if ${ac_cv_path_install+:} false; then :
4386 $as_echo_n "(cached) " >&6
4387else
4388 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4389for as_dir in $PATH
4390do
4391 IFS=$as_save_IFS
4392 test -z "$as_dir" && as_dir=.
4393 # Account for people who put trailing slashes in PATH elements.
4394case $as_dir/ in #((
4395 ./ | .// | /[cC]/* | \
4396 /etc/* | /usr/sbin/* | /usr/etc/* | /sbin/* | /usr/afsws/bin/* | \
4397 ?:[\\/]os2[\\/]install[\\/]* | ?:[\\/]OS2[\\/]INSTALL[\\/]* | \
4398 /usr/ucb/* ) ;;
4399 *)
4400 # OSF1 and SCO ODT 3.0 have their own names for install.
4401 # Don't use installbsd from OSF since it installs stuff as root
4402 # by default.
4403 for ac_prog in ginstall scoinst install; do
4404 for ac_exec_ext in '' $ac_executable_extensions; do
4405 if { test -f "$as_dir/$ac_prog$ac_exec_ext" && $as_test_x "$as_dir/$ac_prog$ac_exec_ext"; }; then
4406 if test $ac_prog = install &&
4407 grep dspmsg "$as_dir/$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
4408 # AIX install. It has an incompatible calling convention.
4409 :
4410 elif test $ac_prog = install &&
4411 grep pwplus "$as_dir/$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
4412 # program-specific install script used by HP pwplus--don't use.
4413 :
4414 else
4415 rm -rf conftest.one conftest.two conftest.dir
4416 echo one > conftest.one
4417 echo two > conftest.two
4418 mkdir conftest.dir
4419 if "$as_dir/$ac_prog$ac_exec_ext" -c conftest.one conftest.two "`pwd`/conftest.dir" &&
4420 test -s conftest.one && test -s conftest.two &&
4421 test -s conftest.dir/conftest.one &&
4422 test -s conftest.dir/conftest.two
4423 then
4424 ac_cv_path_install="$as_dir/$ac_prog$ac_exec_ext -c"
4425 break 3
4426 fi
4427 fi
4428 fi
4429 done
4430 done
4431 ;;
4432esac
4433
4434 done
4435IFS=$as_save_IFS
4436
4437rm -rf conftest.one conftest.two conftest.dir
4438
4439fi
4440 if test "${ac_cv_path_install+set}" = set; then
4441 INSTALL=$ac_cv_path_install
4442 else
4443 # As a last resort, use the slow shell script. Don't cache a
4444 # value for INSTALL within a source directory, because that will
4445 # break other packages using the cache if that directory is
4446 # removed, or if the value is a relative name.
4447 INSTALL=$ac_install_sh
4448 fi
4449fi
4450{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $INSTALL" >&5
4451$as_echo "$INSTALL" >&6; }
4452
4453# Use test -z because SunOS4 sh mishandles braces in ${var-val}.
4454# It thinks the first close brace ends the variable substitution.
4455test -z "$INSTALL_PROGRAM" && INSTALL_PROGRAM='${INSTALL}'
4456
4457test -z "$INSTALL_SCRIPT" && INSTALL_SCRIPT='${INSTALL}'
4458
4459test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644'
4460
4461{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5
4462$as_echo_n "checking for egrep... " >&6; }
4463if ${ac_cv_path_EGREP+:} false; then :
4464 $as_echo_n "(cached) " >&6
4465else
4466 if echo a | $GREP -E '(a|b)' >/dev/null 2>&1
4467 then ac_cv_path_EGREP="$GREP -E"
4468 else
4469 if test -z "$EGREP"; then
4470 ac_path_EGREP_found=false
4471 # Loop through the user's path and test for each of PROGNAME-LIST
4472 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4473for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
4474do
4475 IFS=$as_save_IFS
4476 test -z "$as_dir" && as_dir=.
4477 for ac_prog in egrep; do
4478 for ac_exec_ext in '' $ac_executable_extensions; do
4479 ac_path_EGREP="$as_dir/$ac_prog$ac_exec_ext"
4480 { test -f "$ac_path_EGREP" && $as_test_x "$ac_path_EGREP"; } || continue
4481# Check for GNU ac_path_EGREP and select it if it is found.
4482 # Check for GNU $ac_path_EGREP
4483case `"$ac_path_EGREP" --version 2>&1` in
4484*GNU*)
4485 ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;;
4486*)
4487 ac_count=0
4488 $as_echo_n 0123456789 >"conftest.in"
4489 while :
4490 do
4491 cat "conftest.in" "conftest.in" >"conftest.tmp"
4492 mv "conftest.tmp" "conftest.in"
4493 cp "conftest.in" "conftest.nl"
4494 $as_echo 'EGREP' >> "conftest.nl"
4495 "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break
4496 diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
4497 as_fn_arith $ac_count + 1 && ac_count=$as_val
4498 if test $ac_count -gt ${ac_path_EGREP_max-0}; then
4499 # Best one so far, save it but keep looking for a better one
4500 ac_cv_path_EGREP="$ac_path_EGREP"
4501 ac_path_EGREP_max=$ac_count
4502 fi
4503 # 10*(2^10) chars as input seems more than enough
4504 test $ac_count -gt 10 && break
4505 done
4506 rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
4507esac
4508
4509 $ac_path_EGREP_found && break 3
4510 done
4511 done
4512 done
4513IFS=$as_save_IFS
4514 if test -z "$ac_cv_path_EGREP"; then
4515 as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
4516 fi
4517else
4518 ac_cv_path_EGREP=$EGREP
4519fi
4520
4521 fi
4522fi
4523{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5
4524$as_echo "$ac_cv_path_EGREP" >&6; }
4525 EGREP="$ac_cv_path_EGREP"
4526
4527
4528# Extract the first word of "ar", so it can be a program name with args.
4529set dummy ar; ac_word=$2
4530{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
4531$as_echo_n "checking for $ac_word... " >&6; }
4532if ${ac_cv_path_AR+:} false; then :
4533 $as_echo_n "(cached) " >&6
4534else
4535 case $AR in
4536 [\\/]* | ?:[\\/]*)
4537 ac_cv_path_AR="$AR" # Let the user override the test with a path.
4538 ;;
4539 *)
4540 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4541for as_dir in $PATH
4542do
4543 IFS=$as_save_IFS
4544 test -z "$as_dir" && as_dir=.
4545 for ac_exec_ext in '' $ac_executable_extensions; do
4546 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
4547 ac_cv_path_AR="$as_dir/$ac_word$ac_exec_ext"
4548 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
4549 break 2
4550 fi
4551done
4552 done
4553IFS=$as_save_IFS
4554
4555 ;;
4556esac
4557fi
4558AR=$ac_cv_path_AR
4559if test -n "$AR"; then
4560 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $AR" >&5
4561$as_echo "$AR" >&6; }
4562else
4563 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
4564$as_echo "no" >&6; }
4565fi
4566
4567
4568# Extract the first word of "cat", so it can be a program name with args.
4569set dummy cat; ac_word=$2
4570{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
4571$as_echo_n "checking for $ac_word... " >&6; }
4572if ${ac_cv_path_CAT+:} false; then :
4573 $as_echo_n "(cached) " >&6
4574else
4575 case $CAT in
4576 [\\/]* | ?:[\\/]*)
4577 ac_cv_path_CAT="$CAT" # Let the user override the test with a path.
4578 ;;
4579 *)
4580 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4581for as_dir in $PATH
4582do
4583 IFS=$as_save_IFS
4584 test -z "$as_dir" && as_dir=.
4585 for ac_exec_ext in '' $ac_executable_extensions; do
4586 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
4587 ac_cv_path_CAT="$as_dir/$ac_word$ac_exec_ext"
4588 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
4589 break 2
4590 fi
4591done
4592 done
4593IFS=$as_save_IFS
4594
4595 ;;
4596esac
4597fi
4598CAT=$ac_cv_path_CAT
4599if test -n "$CAT"; then
4600 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CAT" >&5
4601$as_echo "$CAT" >&6; }
4602else
4603 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
4604$as_echo "no" >&6; }
4605fi
4606
4607
4608# Extract the first word of "kill", so it can be a program name with args.
4609set dummy kill; ac_word=$2
4610{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
4611$as_echo_n "checking for $ac_word... " >&6; }
4612if ${ac_cv_path_KILL+:} false; then :
4613 $as_echo_n "(cached) " >&6
4614else
4615 case $KILL in
4616 [\\/]* | ?:[\\/]*)
4617 ac_cv_path_KILL="$KILL" # Let the user override the test with a path.
4618 ;;
4619 *)
4620 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4621for as_dir in $PATH
4622do
4623 IFS=$as_save_IFS
4624 test -z "$as_dir" && as_dir=.
4625 for ac_exec_ext in '' $ac_executable_extensions; do
4626 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
4627 ac_cv_path_KILL="$as_dir/$ac_word$ac_exec_ext"
4628 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
4629 break 2
4630 fi
4631done
4632 done
4633IFS=$as_save_IFS
4634
4635 ;;
4636esac
4637fi
4638KILL=$ac_cv_path_KILL
4639if test -n "$KILL"; then
4640 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $KILL" >&5
4641$as_echo "$KILL" >&6; }
4642else
4643 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
4644$as_echo "no" >&6; }
4645fi
4646
4647
4648for ac_prog in perl5 perl
4649do
4650 # Extract the first word of "$ac_prog", so it can be a program name with args.
4651set dummy $ac_prog; ac_word=$2
4652{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
4653$as_echo_n "checking for $ac_word... " >&6; }
4654if ${ac_cv_path_PERL+:} false; then :
4655 $as_echo_n "(cached) " >&6
4656else
4657 case $PERL in
4658 [\\/]* | ?:[\\/]*)
4659 ac_cv_path_PERL="$PERL" # Let the user override the test with a path.
4660 ;;
4661 *)
4662 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4663for as_dir in $PATH
4664do
4665 IFS=$as_save_IFS
4666 test -z "$as_dir" && as_dir=.
4667 for ac_exec_ext in '' $ac_executable_extensions; do
4668 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
4669 ac_cv_path_PERL="$as_dir/$ac_word$ac_exec_ext"
4670 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
4671 break 2
4672 fi
4673done
4674 done
4675IFS=$as_save_IFS
4676
4677 ;;
4678esac
4679fi
4680PERL=$ac_cv_path_PERL
4681if test -n "$PERL"; then
4682 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PERL" >&5
4683$as_echo "$PERL" >&6; }
4684else
4685 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
4686$as_echo "no" >&6; }
4687fi
4688
4689
4690 test -n "$PERL" && break
4691done
4692
4693# Extract the first word of "sed", so it can be a program name with args.
4694set dummy sed; ac_word=$2
4695{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
4696$as_echo_n "checking for $ac_word... " >&6; }
4697if ${ac_cv_path_SED+:} false; then :
4698 $as_echo_n "(cached) " >&6
4699else
4700 case $SED in
4701 [\\/]* | ?:[\\/]*)
4702 ac_cv_path_SED="$SED" # Let the user override the test with a path.
4703 ;;
4704 *)
4705 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4706for as_dir in $PATH
4707do
4708 IFS=$as_save_IFS
4709 test -z "$as_dir" && as_dir=.
4710 for ac_exec_ext in '' $ac_executable_extensions; do
4711 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
4712 ac_cv_path_SED="$as_dir/$ac_word$ac_exec_ext"
4713 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
4714 break 2
4715 fi
4716done
4717 done
4718IFS=$as_save_IFS
4719
4720 ;;
4721esac
4722fi
4723SED=$ac_cv_path_SED
4724if test -n "$SED"; then
4725 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $SED" >&5
4726$as_echo "$SED" >&6; }
4727else
4728 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
4729$as_echo "no" >&6; }
4730fi
4731
4732
4733
4734# Extract the first word of "ent", so it can be a program name with args.
4735set dummy ent; ac_word=$2
4736{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
4737$as_echo_n "checking for $ac_word... " >&6; }
4738if ${ac_cv_path_ENT+:} false; then :
4739 $as_echo_n "(cached) " >&6
4740else
4741 case $ENT in
4742 [\\/]* | ?:[\\/]*)
4743 ac_cv_path_ENT="$ENT" # Let the user override the test with a path.
4744 ;;
4745 *)
4746 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4747for as_dir in $PATH
4748do
4749 IFS=$as_save_IFS
4750 test -z "$as_dir" && as_dir=.
4751 for ac_exec_ext in '' $ac_executable_extensions; do
4752 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
4753 ac_cv_path_ENT="$as_dir/$ac_word$ac_exec_ext"
4754 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
4755 break 2
4756 fi
4757done
4758 done
4759IFS=$as_save_IFS
4760
4761 ;;
4762esac
4763fi
4764ENT=$ac_cv_path_ENT
4765if test -n "$ENT"; then
4766 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ENT" >&5
4767$as_echo "$ENT" >&6; }
4768else
4769 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
4770$as_echo "no" >&6; }
4771fi
4772
4773
4774
4775# Extract the first word of "bash", so it can be a program name with args.
4776set dummy bash; ac_word=$2
4777{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
4778$as_echo_n "checking for $ac_word... " >&6; }
4779if ${ac_cv_path_TEST_MINUS_S_SH+:} false; then :
4780 $as_echo_n "(cached) " >&6
4781else
4782 case $TEST_MINUS_S_SH in
4783 [\\/]* | ?:[\\/]*)
4784 ac_cv_path_TEST_MINUS_S_SH="$TEST_MINUS_S_SH" # Let the user override the test with a path.
4785 ;;
4786 *)
4787 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4788for as_dir in $PATH
4789do
4790 IFS=$as_save_IFS
4791 test -z "$as_dir" && as_dir=.
4792 for ac_exec_ext in '' $ac_executable_extensions; do
4793 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
4794 ac_cv_path_TEST_MINUS_S_SH="$as_dir/$ac_word$ac_exec_ext"
4795 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
4796 break 2
4797 fi
4798done
4799 done
4800IFS=$as_save_IFS
4801
4802 ;;
4803esac
4804fi
4805TEST_MINUS_S_SH=$ac_cv_path_TEST_MINUS_S_SH
4806if test -n "$TEST_MINUS_S_SH"; then
4807 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $TEST_MINUS_S_SH" >&5
4808$as_echo "$TEST_MINUS_S_SH" >&6; }
4809else
4810 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
4811$as_echo "no" >&6; }
4812fi
4813
4814
4815# Extract the first word of "ksh", so it can be a program name with args.
4816set dummy ksh; ac_word=$2
4817{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
4818$as_echo_n "checking for $ac_word... " >&6; }
4819if ${ac_cv_path_TEST_MINUS_S_SH+:} false; then :
4820 $as_echo_n "(cached) " >&6
4821else
4822 case $TEST_MINUS_S_SH in
4823 [\\/]* | ?:[\\/]*)
4824 ac_cv_path_TEST_MINUS_S_SH="$TEST_MINUS_S_SH" # Let the user override the test with a path.
4825 ;;
4826 *)
4827 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4828for as_dir in $PATH
4829do
4830 IFS=$as_save_IFS
4831 test -z "$as_dir" && as_dir=.
4832 for ac_exec_ext in '' $ac_executable_extensions; do
4833 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
4834 ac_cv_path_TEST_MINUS_S_SH="$as_dir/$ac_word$ac_exec_ext"
4835 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
4836 break 2
4837 fi
4838done
4839 done
4840IFS=$as_save_IFS
4841
4842 ;;
4843esac
4844fi
4845TEST_MINUS_S_SH=$ac_cv_path_TEST_MINUS_S_SH
4846if test -n "$TEST_MINUS_S_SH"; then
4847 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $TEST_MINUS_S_SH" >&5
4848$as_echo "$TEST_MINUS_S_SH" >&6; }
4849else
4850 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
4851$as_echo "no" >&6; }
4852fi
4853
4854
4855# Extract the first word of "sh", so it can be a program name with args.
4856set dummy sh; ac_word=$2
4857{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
4858$as_echo_n "checking for $ac_word... " >&6; }
4859if ${ac_cv_path_TEST_MINUS_S_SH+:} false; then :
4860 $as_echo_n "(cached) " >&6
4861else
4862 case $TEST_MINUS_S_SH in
4863 [\\/]* | ?:[\\/]*)
4864 ac_cv_path_TEST_MINUS_S_SH="$TEST_MINUS_S_SH" # Let the user override the test with a path.
4865 ;;
4866 *)
4867 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4868for as_dir in $PATH
4869do
4870 IFS=$as_save_IFS
4871 test -z "$as_dir" && as_dir=.
4872 for ac_exec_ext in '' $ac_executable_extensions; do
4873 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
4874 ac_cv_path_TEST_MINUS_S_SH="$as_dir/$ac_word$ac_exec_ext"
4875 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
4876 break 2
4877 fi
4878done
4879 done
4880IFS=$as_save_IFS
4881
4882 ;;
4883esac
4884fi
4885TEST_MINUS_S_SH=$ac_cv_path_TEST_MINUS_S_SH
4886if test -n "$TEST_MINUS_S_SH"; then
4887 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $TEST_MINUS_S_SH" >&5
4888$as_echo "$TEST_MINUS_S_SH" >&6; }
4889else
4890 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
4891$as_echo "no" >&6; }
4892fi
4893
4894
4895# Extract the first word of "sh", so it can be a program name with args.
4896set dummy sh; ac_word=$2
4897{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
4898$as_echo_n "checking for $ac_word... " >&6; }
4899if ${ac_cv_path_SH+:} false; then :
4900 $as_echo_n "(cached) " >&6
4901else
4902 case $SH in
4903 [\\/]* | ?:[\\/]*)
4904 ac_cv_path_SH="$SH" # Let the user override the test with a path.
4905 ;;
4906 *)
4907 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4908for as_dir in $PATH
4909do
4910 IFS=$as_save_IFS
4911 test -z "$as_dir" && as_dir=.
4912 for ac_exec_ext in '' $ac_executable_extensions; do
4913 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
4914 ac_cv_path_SH="$as_dir/$ac_word$ac_exec_ext"
4915 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
4916 break 2
4917 fi
4918done
4919 done
4920IFS=$as_save_IFS
4921
4922 ;;
4923esac
4924fi
4925SH=$ac_cv_path_SH
4926if test -n "$SH"; then
4927 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $SH" >&5
4928$as_echo "$SH" >&6; }
4929else
4930 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
4931$as_echo "no" >&6; }
4932fi
4933
4934
4935# Extract the first word of "groff", so it can be a program name with args.
4936set dummy groff; ac_word=$2
4937{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
4938$as_echo_n "checking for $ac_word... " >&6; }
4939if ${ac_cv_path_GROFF+:} false; then :
4940 $as_echo_n "(cached) " >&6
4941else
4942 case $GROFF in
4943 [\\/]* | ?:[\\/]*)
4944 ac_cv_path_GROFF="$GROFF" # Let the user override the test with a path.
4945 ;;
4946 *)
4947 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4948for as_dir in $PATH
4949do
4950 IFS=$as_save_IFS
4951 test -z "$as_dir" && as_dir=.
4952 for ac_exec_ext in '' $ac_executable_extensions; do
4953 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
4954 ac_cv_path_GROFF="$as_dir/$ac_word$ac_exec_ext"
4955 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
4956 break 2
4957 fi
4958done
4959 done
4960IFS=$as_save_IFS
4961
4962 ;;
4963esac
4964fi
4965GROFF=$ac_cv_path_GROFF
4966if test -n "$GROFF"; then
4967 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $GROFF" >&5
4968$as_echo "$GROFF" >&6; }
4969else
4970 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
4971$as_echo "no" >&6; }
4972fi
4973
4974
4975# Extract the first word of "nroff", so it can be a program name with args.
4976set dummy nroff; ac_word=$2
4977{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
4978$as_echo_n "checking for $ac_word... " >&6; }
4979if ${ac_cv_path_NROFF+:} false; then :
4980 $as_echo_n "(cached) " >&6
4981else
4982 case $NROFF in
4983 [\\/]* | ?:[\\/]*)
4984 ac_cv_path_NROFF="$NROFF" # Let the user override the test with a path.
4985 ;;
4986 *)
4987 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
4988for as_dir in $PATH
4989do
4990 IFS=$as_save_IFS
4991 test -z "$as_dir" && as_dir=.
4992 for ac_exec_ext in '' $ac_executable_extensions; do
4993 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
4994 ac_cv_path_NROFF="$as_dir/$ac_word$ac_exec_ext"
4995 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
4996 break 2
4997 fi
4998done
4999 done
5000IFS=$as_save_IFS
5001
5002 ;;
5003esac
5004fi
5005NROFF=$ac_cv_path_NROFF
5006if test -n "$NROFF"; then
5007 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $NROFF" >&5
5008$as_echo "$NROFF" >&6; }
5009else
5010 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5011$as_echo "no" >&6; }
5012fi
5013
5014
5015# Extract the first word of "mandoc", so it can be a program name with args.
5016set dummy mandoc; ac_word=$2
5017{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
5018$as_echo_n "checking for $ac_word... " >&6; }
5019if ${ac_cv_path_MANDOC+:} false; then :
5020 $as_echo_n "(cached) " >&6
5021else
5022 case $MANDOC in
5023 [\\/]* | ?:[\\/]*)
5024 ac_cv_path_MANDOC="$MANDOC" # Let the user override the test with a path.
5025 ;;
5026 *)
5027 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
5028for as_dir in $PATH
5029do
5030 IFS=$as_save_IFS
5031 test -z "$as_dir" && as_dir=.
5032 for ac_exec_ext in '' $ac_executable_extensions; do
5033 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
5034 ac_cv_path_MANDOC="$as_dir/$ac_word$ac_exec_ext"
5035 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
5036 break 2
5037 fi
5038done
5039 done
5040IFS=$as_save_IFS
5041
5042 ;;
5043esac
5044fi
5045MANDOC=$ac_cv_path_MANDOC
5046if test -n "$MANDOC"; then
5047 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $MANDOC" >&5
5048$as_echo "$MANDOC" >&6; }
5049else
5050 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5051$as_echo "no" >&6; }
5052fi
5053
5054
5055TEST_SHELL=sh
5056
5057
5058if test "x$MANDOC" != "x" ; then
5059 MANFMT="$MANDOC"
5060elif test "x$NROFF" != "x" ; then
5061 MANFMT="$NROFF -mandoc"
5062elif test "x$GROFF" != "x" ; then
5063 MANFMT="$GROFF -mandoc -Tascii"
5064else
5065 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: no manpage formatted found" >&5
5066$as_echo "$as_me: WARNING: no manpage formatted found" >&2;}
5067 MANFMT="false"
5068fi
5069
5070
5071# Extract the first word of "groupadd", so it can be a program name with args.
5072set dummy groupadd; ac_word=$2
5073{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
5074$as_echo_n "checking for $ac_word... " >&6; }
5075if ${ac_cv_path_PATH_GROUPADD_PROG+:} false; then :
5076 $as_echo_n "(cached) " >&6
5077else
5078 case $PATH_GROUPADD_PROG in
5079 [\\/]* | ?:[\\/]*)
5080 ac_cv_path_PATH_GROUPADD_PROG="$PATH_GROUPADD_PROG" # Let the user override the test with a path.
5081 ;;
5082 *)
5083 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
5084for as_dir in /usr/sbin${PATH_SEPARATOR}/etc
5085do
5086 IFS=$as_save_IFS
5087 test -z "$as_dir" && as_dir=.
5088 for ac_exec_ext in '' $ac_executable_extensions; do
5089 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
5090 ac_cv_path_PATH_GROUPADD_PROG="$as_dir/$ac_word$ac_exec_ext"
5091 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
5092 break 2
5093 fi
5094done
5095 done
5096IFS=$as_save_IFS
5097
5098 test -z "$ac_cv_path_PATH_GROUPADD_PROG" && ac_cv_path_PATH_GROUPADD_PROG="groupadd"
5099 ;;
5100esac
5101fi
5102PATH_GROUPADD_PROG=$ac_cv_path_PATH_GROUPADD_PROG
5103if test -n "$PATH_GROUPADD_PROG"; then
5104 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PATH_GROUPADD_PROG" >&5
5105$as_echo "$PATH_GROUPADD_PROG" >&6; }
5106else
5107 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5108$as_echo "no" >&6; }
5109fi
5110
5111
5112# Extract the first word of "useradd", so it can be a program name with args.
5113set dummy useradd; ac_word=$2
5114{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
5115$as_echo_n "checking for $ac_word... " >&6; }
5116if ${ac_cv_path_PATH_USERADD_PROG+:} false; then :
5117 $as_echo_n "(cached) " >&6
5118else
5119 case $PATH_USERADD_PROG in
5120 [\\/]* | ?:[\\/]*)
5121 ac_cv_path_PATH_USERADD_PROG="$PATH_USERADD_PROG" # Let the user override the test with a path.
5122 ;;
5123 *)
5124 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
5125for as_dir in /usr/sbin${PATH_SEPARATOR}/etc
5126do
5127 IFS=$as_save_IFS
5128 test -z "$as_dir" && as_dir=.
5129 for ac_exec_ext in '' $ac_executable_extensions; do
5130 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
5131 ac_cv_path_PATH_USERADD_PROG="$as_dir/$ac_word$ac_exec_ext"
5132 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
5133 break 2
5134 fi
5135done
5136 done
5137IFS=$as_save_IFS
5138
5139 test -z "$ac_cv_path_PATH_USERADD_PROG" && ac_cv_path_PATH_USERADD_PROG="useradd"
5140 ;;
5141esac
5142fi
5143PATH_USERADD_PROG=$ac_cv_path_PATH_USERADD_PROG
5144if test -n "$PATH_USERADD_PROG"; then
5145 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PATH_USERADD_PROG" >&5
5146$as_echo "$PATH_USERADD_PROG" >&6; }
5147else
5148 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5149$as_echo "no" >&6; }
5150fi
5151
5152
5153# Extract the first word of "pkgmk", so it can be a program name with args.
5154set dummy pkgmk; ac_word=$2
5155{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
5156$as_echo_n "checking for $ac_word... " >&6; }
5157if ${ac_cv_prog_MAKE_PACKAGE_SUPPORTED+:} false; then :
5158 $as_echo_n "(cached) " >&6
5159else
5160 if test -n "$MAKE_PACKAGE_SUPPORTED"; then
5161 ac_cv_prog_MAKE_PACKAGE_SUPPORTED="$MAKE_PACKAGE_SUPPORTED" # Let the user override the test.
5162else
5163as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
5164for as_dir in $PATH
5165do
5166 IFS=$as_save_IFS
5167 test -z "$as_dir" && as_dir=.
5168 for ac_exec_ext in '' $ac_executable_extensions; do
5169 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
5170 ac_cv_prog_MAKE_PACKAGE_SUPPORTED="yes"
5171 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
5172 break 2
5173 fi
5174done
5175 done
5176IFS=$as_save_IFS
5177
5178 test -z "$ac_cv_prog_MAKE_PACKAGE_SUPPORTED" && ac_cv_prog_MAKE_PACKAGE_SUPPORTED="no"
5179fi
5180fi
5181MAKE_PACKAGE_SUPPORTED=$ac_cv_prog_MAKE_PACKAGE_SUPPORTED
5182if test -n "$MAKE_PACKAGE_SUPPORTED"; then
5183 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $MAKE_PACKAGE_SUPPORTED" >&5
5184$as_echo "$MAKE_PACKAGE_SUPPORTED" >&6; }
5185else
5186 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5187$as_echo "no" >&6; }
5188fi
5189
5190
5191if test -x /sbin/sh; then
5192 STARTUP_SCRIPT_SHELL=/sbin/sh
5193
5194else
5195 STARTUP_SCRIPT_SHELL=/bin/sh
5196
5197fi
5198
5199# System features
5200# Check whether --enable-largefile was given.
5201if test "${enable_largefile+set}" = set; then :
5202 enableval=$enable_largefile;
5203fi
5204
5205if test "$enable_largefile" != no; then
5206
5207 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for special C compiler options needed for large files" >&5
5208$as_echo_n "checking for special C compiler options needed for large files... " >&6; }
5209if ${ac_cv_sys_largefile_CC+:} false; then :
5210 $as_echo_n "(cached) " >&6
5211else
5212 ac_cv_sys_largefile_CC=no
5213 if test "$GCC" != yes; then
5214 ac_save_CC=$CC
5215 while :; do
5216 # IRIX 6.2 and later do not support large files by default,
5217 # so use the C compiler's -n32 option if that helps.
5218 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5219/* end confdefs.h. */
5220#include <sys/types.h>
5221 /* Check that off_t can represent 2**63 - 1 correctly.
5222 We can't simply define LARGE_OFF_T to be 9223372036854775807,
5223 since some C++ compilers masquerading as C compilers
5224 incorrectly reject 9223372036854775807. */
5225#define LARGE_OFF_T (((off_t) 1 << 62) - 1 + ((off_t) 1 << 62))
5226 int off_t_is_large[(LARGE_OFF_T % 2147483629 == 721
5227 && LARGE_OFF_T % 2147483647 == 1)
5228 ? 1 : -1];
5229int
5230main ()
5231{
5232
5233 ;
5234 return 0;
5235}
5236_ACEOF
5237 if ac_fn_c_try_compile "$LINENO"; then :
5238 break
5239fi
5240rm -f core conftest.err conftest.$ac_objext
5241 CC="$CC -n32"
5242 if ac_fn_c_try_compile "$LINENO"; then :
5243 ac_cv_sys_largefile_CC=' -n32'; break
5244fi
5245rm -f core conftest.err conftest.$ac_objext
5246 break
5247 done
5248 CC=$ac_save_CC
5249 rm -f conftest.$ac_ext
5250 fi
5251fi
5252{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sys_largefile_CC" >&5
5253$as_echo "$ac_cv_sys_largefile_CC" >&6; }
5254 if test "$ac_cv_sys_largefile_CC" != no; then
5255 CC=$CC$ac_cv_sys_largefile_CC
5256 fi
5257
5258 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for _FILE_OFFSET_BITS value needed for large files" >&5
5259$as_echo_n "checking for _FILE_OFFSET_BITS value needed for large files... " >&6; }
5260if ${ac_cv_sys_file_offset_bits+:} false; then :
5261 $as_echo_n "(cached) " >&6
5262else
5263 while :; do
5264 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5265/* end confdefs.h. */
5266#include <sys/types.h>
5267 /* Check that off_t can represent 2**63 - 1 correctly.
5268 We can't simply define LARGE_OFF_T to be 9223372036854775807,
5269 since some C++ compilers masquerading as C compilers
5270 incorrectly reject 9223372036854775807. */
5271#define LARGE_OFF_T (((off_t) 1 << 62) - 1 + ((off_t) 1 << 62))
5272 int off_t_is_large[(LARGE_OFF_T % 2147483629 == 721
5273 && LARGE_OFF_T % 2147483647 == 1)
5274 ? 1 : -1];
5275int
5276main ()
5277{
5278
5279 ;
5280 return 0;
5281}
5282_ACEOF
5283if ac_fn_c_try_compile "$LINENO"; then :
5284 ac_cv_sys_file_offset_bits=no; break
5285fi
5286rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5287 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5288/* end confdefs.h. */
5289#define _FILE_OFFSET_BITS 64
5290#include <sys/types.h>
5291 /* Check that off_t can represent 2**63 - 1 correctly.
5292 We can't simply define LARGE_OFF_T to be 9223372036854775807,
5293 since some C++ compilers masquerading as C compilers
5294 incorrectly reject 9223372036854775807. */
5295#define LARGE_OFF_T (((off_t) 1 << 62) - 1 + ((off_t) 1 << 62))
5296 int off_t_is_large[(LARGE_OFF_T % 2147483629 == 721
5297 && LARGE_OFF_T % 2147483647 == 1)
5298 ? 1 : -1];
5299int
5300main ()
5301{
5302
5303 ;
5304 return 0;
5305}
5306_ACEOF
5307if ac_fn_c_try_compile "$LINENO"; then :
5308 ac_cv_sys_file_offset_bits=64; break
5309fi
5310rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5311 ac_cv_sys_file_offset_bits=unknown
5312 break
5313done
5314fi
5315{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sys_file_offset_bits" >&5
5316$as_echo "$ac_cv_sys_file_offset_bits" >&6; }
5317case $ac_cv_sys_file_offset_bits in #(
5318 no | unknown) ;;
5319 *)
5320cat >>confdefs.h <<_ACEOF
5321#define _FILE_OFFSET_BITS $ac_cv_sys_file_offset_bits
5322_ACEOF
5323;;
5324esac
5325rm -rf conftest*
5326 if test $ac_cv_sys_file_offset_bits = unknown; then
5327 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for _LARGE_FILES value needed for large files" >&5
5328$as_echo_n "checking for _LARGE_FILES value needed for large files... " >&6; }
5329if ${ac_cv_sys_large_files+:} false; then :
5330 $as_echo_n "(cached) " >&6
5331else
5332 while :; do
5333 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5334/* end confdefs.h. */
5335#include <sys/types.h>
5336 /* Check that off_t can represent 2**63 - 1 correctly.
5337 We can't simply define LARGE_OFF_T to be 9223372036854775807,
5338 since some C++ compilers masquerading as C compilers
5339 incorrectly reject 9223372036854775807. */
5340#define LARGE_OFF_T (((off_t) 1 << 62) - 1 + ((off_t) 1 << 62))
5341 int off_t_is_large[(LARGE_OFF_T % 2147483629 == 721
5342 && LARGE_OFF_T % 2147483647 == 1)
5343 ? 1 : -1];
5344int
5345main ()
5346{
5347
5348 ;
5349 return 0;
5350}
5351_ACEOF
5352if ac_fn_c_try_compile "$LINENO"; then :
5353 ac_cv_sys_large_files=no; break
5354fi
5355rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5356 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5357/* end confdefs.h. */
5358#define _LARGE_FILES 1
5359#include <sys/types.h>
5360 /* Check that off_t can represent 2**63 - 1 correctly.
5361 We can't simply define LARGE_OFF_T to be 9223372036854775807,
5362 since some C++ compilers masquerading as C compilers
5363 incorrectly reject 9223372036854775807. */
5364#define LARGE_OFF_T (((off_t) 1 << 62) - 1 + ((off_t) 1 << 62))
5365 int off_t_is_large[(LARGE_OFF_T % 2147483629 == 721
5366 && LARGE_OFF_T % 2147483647 == 1)
5367 ? 1 : -1];
5368int
5369main ()
5370{
5371
5372 ;
5373 return 0;
5374}
5375_ACEOF
5376if ac_fn_c_try_compile "$LINENO"; then :
5377 ac_cv_sys_large_files=1; break
5378fi
5379rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5380 ac_cv_sys_large_files=unknown
5381 break
5382done
5383fi
5384{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sys_large_files" >&5
5385$as_echo "$ac_cv_sys_large_files" >&6; }
5386case $ac_cv_sys_large_files in #(
5387 no | unknown) ;;
5388 *)
5389cat >>confdefs.h <<_ACEOF
5390#define _LARGE_FILES $ac_cv_sys_large_files
5391_ACEOF
5392;;
5393esac
5394rm -rf conftest*
5395 fi
5396fi
5397
5398
5399if test -z "$AR" ; then
5400 as_fn_error $? "*** 'ar' missing, please install or fix your \$PATH ***" "$LINENO" 5
5401fi
5402
5403# Use LOGIN_PROGRAM from environment if possible
5404if test ! -z "$LOGIN_PROGRAM" ; then
5405
5406cat >>confdefs.h <<_ACEOF
5407#define LOGIN_PROGRAM_FALLBACK "$LOGIN_PROGRAM"
5408_ACEOF
5409
5410else
5411 # Search for login
5412 # Extract the first word of "login", so it can be a program name with args.
5413set dummy login; ac_word=$2
5414{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
5415$as_echo_n "checking for $ac_word... " >&6; }
5416if ${ac_cv_path_LOGIN_PROGRAM_FALLBACK+:} false; then :
5417 $as_echo_n "(cached) " >&6
5418else
5419 case $LOGIN_PROGRAM_FALLBACK in
5420 [\\/]* | ?:[\\/]*)
5421 ac_cv_path_LOGIN_PROGRAM_FALLBACK="$LOGIN_PROGRAM_FALLBACK" # Let the user override the test with a path.
5422 ;;
5423 *)
5424 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
5425for as_dir in $PATH
5426do
5427 IFS=$as_save_IFS
5428 test -z "$as_dir" && as_dir=.
5429 for ac_exec_ext in '' $ac_executable_extensions; do
5430 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
5431 ac_cv_path_LOGIN_PROGRAM_FALLBACK="$as_dir/$ac_word$ac_exec_ext"
5432 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
5433 break 2
5434 fi
5435done
5436 done
5437IFS=$as_save_IFS
5438
5439 ;;
5440esac
5441fi
5442LOGIN_PROGRAM_FALLBACK=$ac_cv_path_LOGIN_PROGRAM_FALLBACK
5443if test -n "$LOGIN_PROGRAM_FALLBACK"; then
5444 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $LOGIN_PROGRAM_FALLBACK" >&5
5445$as_echo "$LOGIN_PROGRAM_FALLBACK" >&6; }
5446else
5447 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5448$as_echo "no" >&6; }
5449fi
5450
5451
5452 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
5453 cat >>confdefs.h <<_ACEOF
5454#define LOGIN_PROGRAM_FALLBACK "$LOGIN_PROGRAM_FALLBACK"
5455_ACEOF
5456
5457 fi
5458fi
5459
5460# Extract the first word of "passwd", so it can be a program name with args.
5461set dummy passwd; ac_word=$2
5462{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
5463$as_echo_n "checking for $ac_word... " >&6; }
5464if ${ac_cv_path_PATH_PASSWD_PROG+:} false; then :
5465 $as_echo_n "(cached) " >&6
5466else
5467 case $PATH_PASSWD_PROG in
5468 [\\/]* | ?:[\\/]*)
5469 ac_cv_path_PATH_PASSWD_PROG="$PATH_PASSWD_PROG" # Let the user override the test with a path.
5470 ;;
5471 *)
5472 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
5473for as_dir in $PATH
5474do
5475 IFS=$as_save_IFS
5476 test -z "$as_dir" && as_dir=.
5477 for ac_exec_ext in '' $ac_executable_extensions; do
5478 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
5479 ac_cv_path_PATH_PASSWD_PROG="$as_dir/$ac_word$ac_exec_ext"
5480 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
5481 break 2
5482 fi
5483done
5484 done
5485IFS=$as_save_IFS
5486
5487 ;;
5488esac
5489fi
5490PATH_PASSWD_PROG=$ac_cv_path_PATH_PASSWD_PROG
5491if test -n "$PATH_PASSWD_PROG"; then
5492 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PATH_PASSWD_PROG" >&5
5493$as_echo "$PATH_PASSWD_PROG" >&6; }
5494else
5495 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5496$as_echo "no" >&6; }
5497fi
5498
5499
5500if test ! -z "$PATH_PASSWD_PROG" ; then
5501
5502cat >>confdefs.h <<_ACEOF
5503#define _PATH_PASSWD_PROG "$PATH_PASSWD_PROG"
5504_ACEOF
5505
5506fi
5507
5508if test -z "$LD" ; then
5509 LD=$CC
5510fi
5511
5512
5513{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for inline" >&5
5514$as_echo_n "checking for inline... " >&6; }
5515if ${ac_cv_c_inline+:} false; then :
5516 $as_echo_n "(cached) " >&6
5517else
5518 ac_cv_c_inline=no
5519for ac_kw in inline __inline__ __inline; do
5520 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5521/* end confdefs.h. */
5522#ifndef __cplusplus
5523typedef int foo_t;
5524static $ac_kw foo_t static_foo () {return 0; }
5525$ac_kw foo_t foo () {return 0; }
5526#endif
5527
5528_ACEOF
5529if ac_fn_c_try_compile "$LINENO"; then :
5530 ac_cv_c_inline=$ac_kw
5531fi
5532rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5533 test "$ac_cv_c_inline" != no && break
5534done
5535
5536fi
5537{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_inline" >&5
5538$as_echo "$ac_cv_c_inline" >&6; }
5539
5540case $ac_cv_c_inline in
5541 inline | yes) ;;
5542 *)
5543 case $ac_cv_c_inline in
5544 no) ac_val=;;
5545 *) ac_val=$ac_cv_c_inline;;
5546 esac
5547 cat >>confdefs.h <<_ACEOF
5548#ifndef __cplusplus
5549#define inline $ac_val
5550#endif
5551_ACEOF
5552 ;;
5553esac
5554
5555
5556ac_fn_c_check_decl "$LINENO" "LLONG_MAX" "ac_cv_have_decl_LLONG_MAX" "#include <limits.h>
5557"
5558if test "x$ac_cv_have_decl_LLONG_MAX" = xyes; then :
5559 have_llong_max=1
5560fi
5561
5562ac_fn_c_check_decl "$LINENO" "SYSTR_POLICY_KILL" "ac_cv_have_decl_SYSTR_POLICY_KILL" "
5563 #include <sys/types.h>
5564 #include <sys/param.h>
5565 #include <dev/systrace.h>
5566
5567"
5568if test "x$ac_cv_have_decl_SYSTR_POLICY_KILL" = xyes; then :
5569 have_systr_policy_kill=1
5570fi
5571
5572ac_fn_c_check_decl "$LINENO" "RLIMIT_NPROC" "ac_cv_have_decl_RLIMIT_NPROC" "
5573 #include <sys/types.h>
5574 #include <sys/resource.h>
5575
5576"
5577if test "x$ac_cv_have_decl_RLIMIT_NPROC" = xyes; then :
5578
5579$as_echo "#define HAVE_RLIMIT_NPROC /**/" >>confdefs.h
5580
5581fi
5582
5583ac_fn_c_check_decl "$LINENO" "PR_SET_NO_NEW_PRIVS" "ac_cv_have_decl_PR_SET_NO_NEW_PRIVS" "
5584 #include <sys/types.h>
5585 #include <linux/prctl.h>
5586
5587"
5588if test "x$ac_cv_have_decl_PR_SET_NO_NEW_PRIVS" = xyes; then :
5589 have_linux_no_new_privs=1
5590fi
5591
5592use_stack_protector=1
5593
5594# Check whether --with-stackprotect was given.
5595if test "${with_stackprotect+set}" = set; then :
5596 withval=$with_stackprotect;
5597 if test "x$withval" = "xno"; then
5598 use_stack_protector=0
5599 fi
5600fi
5601
5602
5603
5604if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
5605 {
5606 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wall" >&5
5607$as_echo_n "checking if $CC supports -Wall... " >&6; }
5608 saved_CFLAGS="$CFLAGS"
5609 CFLAGS="$CFLAGS -Wall"
5610 _define_flag=""
5611 test "x$_define_flag" = "x" && _define_flag="-Wall"
5612 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5613/* end confdefs.h. */
5614int main(void) { return 0; }
5615_ACEOF
5616if ac_fn_c_try_compile "$LINENO"; then :
5617 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
5618$as_echo "yes" >&6; }
5619 CFLAGS="$saved_CFLAGS $_define_flag"
5620else
5621 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5622$as_echo "no" >&6; }
5623 CFLAGS="$saved_CFLAGS"
5624
5625fi
5626rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5627}
5628 {
5629 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-arith" >&5
5630$as_echo_n "checking if $CC supports -Wpointer-arith... " >&6; }
5631 saved_CFLAGS="$CFLAGS"
5632 CFLAGS="$CFLAGS -Wpointer-arith"
5633 _define_flag=""
5634 test "x$_define_flag" = "x" && _define_flag="-Wpointer-arith"
5635 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5636/* end confdefs.h. */
5637int main(void) { return 0; }
5638_ACEOF
5639if ac_fn_c_try_compile "$LINENO"; then :
5640 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
5641$as_echo "yes" >&6; }
5642 CFLAGS="$saved_CFLAGS $_define_flag"
5643else
5644 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5645$as_echo "no" >&6; }
5646 CFLAGS="$saved_CFLAGS"
5647
5648fi
5649rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5650}
5651 {
5652 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wuninitialized" >&5
5653$as_echo_n "checking if $CC supports -Wuninitialized... " >&6; }
5654 saved_CFLAGS="$CFLAGS"
5655 CFLAGS="$CFLAGS -Wuninitialized"
5656 _define_flag=""
5657 test "x$_define_flag" = "x" && _define_flag="-Wuninitialized"
5658 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5659/* end confdefs.h. */
5660int main(void) { return 0; }
5661_ACEOF
5662if ac_fn_c_try_compile "$LINENO"; then :
5663 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
5664$as_echo "yes" >&6; }
5665 CFLAGS="$saved_CFLAGS $_define_flag"
5666else
5667 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5668$as_echo "no" >&6; }
5669 CFLAGS="$saved_CFLAGS"
5670
5671fi
5672rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5673}
5674 {
5675 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wsign-compare" >&5
5676$as_echo_n "checking if $CC supports -Wsign-compare... " >&6; }
5677 saved_CFLAGS="$CFLAGS"
5678 CFLAGS="$CFLAGS -Wsign-compare"
5679 _define_flag=""
5680 test "x$_define_flag" = "x" && _define_flag="-Wsign-compare"
5681 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5682/* end confdefs.h. */
5683int main(void) { return 0; }
5684_ACEOF
5685if ac_fn_c_try_compile "$LINENO"; then :
5686 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
5687$as_echo "yes" >&6; }
5688 CFLAGS="$saved_CFLAGS $_define_flag"
5689else
5690 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5691$as_echo "no" >&6; }
5692 CFLAGS="$saved_CFLAGS"
5693
5694fi
5695rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5696}
5697 {
5698 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wformat-security" >&5
5699$as_echo_n "checking if $CC supports -Wformat-security... " >&6; }
5700 saved_CFLAGS="$CFLAGS"
5701 CFLAGS="$CFLAGS -Wformat-security"
5702 _define_flag=""
5703 test "x$_define_flag" = "x" && _define_flag="-Wformat-security"
5704 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5705/* end confdefs.h. */
5706int main(void) { return 0; }
5707_ACEOF
5708if ac_fn_c_try_compile "$LINENO"; then :
5709 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
5710$as_echo "yes" >&6; }
5711 CFLAGS="$saved_CFLAGS $_define_flag"
5712else
5713 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5714$as_echo "no" >&6; }
5715 CFLAGS="$saved_CFLAGS"
5716
5717fi
5718rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5719}
5720 {
5721 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-sign" >&5
5722$as_echo_n "checking if $CC supports -Wpointer-sign... " >&6; }
5723 saved_CFLAGS="$CFLAGS"
5724 CFLAGS="$CFLAGS -Wpointer-sign"
5725 _define_flag="-Wno-pointer-sign"
5726 test "x$_define_flag" = "x" && _define_flag="-Wpointer-sign"
5727 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5728/* end confdefs.h. */
5729int main(void) { return 0; }
5730_ACEOF
5731if ac_fn_c_try_compile "$LINENO"; then :
5732 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
5733$as_echo "yes" >&6; }
5734 CFLAGS="$saved_CFLAGS $_define_flag"
5735else
5736 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5737$as_echo "no" >&6; }
5738 CFLAGS="$saved_CFLAGS"
5739
5740fi
5741rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5742}
5743 {
5744 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wunused-result" >&5
5745$as_echo_n "checking if $CC supports -Wunused-result... " >&6; }
5746 saved_CFLAGS="$CFLAGS"
5747 CFLAGS="$CFLAGS -Wunused-result"
5748 _define_flag="-Wno-unused-result"
5749 test "x$_define_flag" = "x" && _define_flag="-Wunused-result"
5750 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5751/* end confdefs.h. */
5752int main(void) { return 0; }
5753_ACEOF
5754if ac_fn_c_try_compile "$LINENO"; then :
5755 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
5756$as_echo "yes" >&6; }
5757 CFLAGS="$saved_CFLAGS $_define_flag"
5758else
5759 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5760$as_echo "no" >&6; }
5761 CFLAGS="$saved_CFLAGS"
5762
5763fi
5764rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5765}
5766 {
5767 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -fno-strict-aliasing" >&5
5768$as_echo_n "checking if $CC supports -fno-strict-aliasing... " >&6; }
5769 saved_CFLAGS="$CFLAGS"
5770 CFLAGS="$CFLAGS -fno-strict-aliasing"
5771 _define_flag=""
5772 test "x$_define_flag" = "x" && _define_flag="-fno-strict-aliasing"
5773 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5774/* end confdefs.h. */
5775int main(void) { return 0; }
5776_ACEOF
5777if ac_fn_c_try_compile "$LINENO"; then :
5778 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
5779$as_echo "yes" >&6; }
5780 CFLAGS="$saved_CFLAGS $_define_flag"
5781else
5782 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5783$as_echo "no" >&6; }
5784 CFLAGS="$saved_CFLAGS"
5785
5786fi
5787rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5788}
5789 {
5790 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -D_FORTIFY_SOURCE=2" >&5
5791$as_echo_n "checking if $CC supports -D_FORTIFY_SOURCE=2... " >&6; }
5792 saved_CFLAGS="$CFLAGS"
5793 CFLAGS="$CFLAGS -D_FORTIFY_SOURCE=2"
5794 _define_flag=""
5795 test "x$_define_flag" = "x" && _define_flag="-D_FORTIFY_SOURCE=2"
5796 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5797/* end confdefs.h. */
5798int main(void) { return 0; }
5799_ACEOF
5800if ac_fn_c_try_compile "$LINENO"; then :
5801 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
5802$as_echo "yes" >&6; }
5803 CFLAGS="$saved_CFLAGS $_define_flag"
5804else
5805 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5806$as_echo "no" >&6; }
5807 CFLAGS="$saved_CFLAGS"
5808
5809fi
5810rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5811}
5812 { $as_echo "$as_me:${as_lineno-$LINENO}: checking gcc version" >&5
5813$as_echo_n "checking gcc version... " >&6; }
5814 GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'`
5815 case $GCC_VER in
5816 1.*) no_attrib_nonnull=1 ;;
5817 2.8* | 2.9*)
5818 no_attrib_nonnull=1
5819 ;;
5820 2.*) no_attrib_nonnull=1 ;;
5821 *) ;;
5822 esac
5823 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $GCC_VER" >&5
5824$as_echo "$GCC_VER" >&6; }
5825
5826 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC accepts -fno-builtin-memset" >&5
5827$as_echo_n "checking if $CC accepts -fno-builtin-memset... " >&6; }
5828 saved_CFLAGS="$CFLAGS"
5829 CFLAGS="$CFLAGS -fno-builtin-memset"
5830 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5831/* end confdefs.h. */
5832 #include <string.h>
5833int
5834main ()
5835{
5836 char b[10]; memset(b, 0, sizeof(b));
5837 ;
5838 return 0;
5839}
5840_ACEOF
5841if ac_fn_c_try_link "$LINENO"; then :
5842 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
5843$as_echo "yes" >&6; }
5844else
5845 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5846$as_echo "no" >&6; }
5847 CFLAGS="$saved_CFLAGS"
5848
5849fi
5850rm -f core conftest.err conftest.$ac_objext \
5851 conftest$ac_exeext conftest.$ac_ext
5852
5853 # -fstack-protector-all doesn't always work for some GCC versions
5854 # and/or platforms, so we test if we can. If it's not supported
5855 # on a given platform gcc will emit a warning so we use -Werror.
5856 if test "x$use_stack_protector" = "x1"; then
5857 for t in -fstack-protector-all -fstack-protector; do
5858 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports $t" >&5
5859$as_echo_n "checking if $CC supports $t... " >&6; }
5860 saved_CFLAGS="$CFLAGS"
5861 saved_LDFLAGS="$LDFLAGS"
5862 CFLAGS="$CFLAGS $t -Werror"
5863 LDFLAGS="$LDFLAGS $t -Werror"
5864 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5865/* end confdefs.h. */
5866 #include <stdio.h>
5867int
5868main ()
5869{
5870
5871 char x[256];
5872 snprintf(x, sizeof(x), "XXX");
5873
5874 ;
5875 return 0;
5876}
5877_ACEOF
5878if ac_fn_c_try_link "$LINENO"; then :
5879 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
5880$as_echo "yes" >&6; }
5881 CFLAGS="$saved_CFLAGS $t"
5882 LDFLAGS="$saved_LDFLAGS $t"
5883 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $t works" >&5
5884$as_echo_n "checking if $t works... " >&6; }
5885 if test "$cross_compiling" = yes; then :
5886 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: cannot test" >&5
5887$as_echo "$as_me: WARNING: cross compiling: cannot test" >&2;}
5888 break
5889
5890else
5891 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5892/* end confdefs.h. */
5893 #include <stdio.h>
5894int
5895main ()
5896{
5897
5898 char x[256];
5899 snprintf(x, sizeof(x), "XXX");
5900
5901 ;
5902 return 0;
5903}
5904_ACEOF
5905if ac_fn_c_try_run "$LINENO"; then :
5906 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
5907$as_echo "yes" >&6; }
5908 break
5909else
5910 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5911$as_echo "no" >&6; }
5912fi
5913rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
5914 conftest.$ac_objext conftest.beam conftest.$ac_ext
5915fi
5916
5917
5918else
5919 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5920$as_echo "no" >&6; }
5921
5922fi
5923rm -f core conftest.err conftest.$ac_objext \
5924 conftest$ac_exeext conftest.$ac_ext
5925 CFLAGS="$saved_CFLAGS"
5926 LDFLAGS="$saved_LDFLAGS"
5927 done
5928 fi
5929
5930 if test -z "$have_llong_max"; then
5931 # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
5932 unset ac_cv_have_decl_LLONG_MAX
5933 saved_CFLAGS="$CFLAGS"
5934 CFLAGS="$CFLAGS -std=gnu99"
5935 ac_fn_c_check_decl "$LINENO" "LLONG_MAX" "ac_cv_have_decl_LLONG_MAX" "#include <limits.h>
5936
5937"
5938if test "x$ac_cv_have_decl_LLONG_MAX" = xyes; then :
5939 have_llong_max=1
5940else
5941 CFLAGS="$saved_CFLAGS"
5942fi
5943
5944 fi
5945fi
5946
5947{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if compiler allows __attribute__ on return types" >&5
5948$as_echo_n "checking if compiler allows __attribute__ on return types... " >&6; }
5949cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5950/* end confdefs.h. */
5951
5952#include <stdlib.h>
5953__attribute__((__unused__)) static void foo(void){return;}
5954int
5955main ()
5956{
5957 exit(0);
5958 ;
5959 return 0;
5960}
5961_ACEOF
5962if ac_fn_c_try_compile "$LINENO"; then :
5963 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
5964$as_echo "yes" >&6; }
5965else
5966 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5967$as_echo "no" >&6; }
5968
5969$as_echo "#define NO_ATTRIBUTE_ON_RETURN_TYPE 1" >>confdefs.h
5970
5971
5972fi
5973rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5974
5975if test "x$no_attrib_nonnull" != "x1" ; then
5976
5977$as_echo "#define HAVE_ATTRIBUTE__NONNULL__ 1" >>confdefs.h
5978
5979fi
5980
5981
5982# Check whether --with-rpath was given.
5983if test "${with_rpath+set}" = set; then :
5984 withval=$with_rpath;
5985 if test "x$withval" = "xno" ; then
5986 need_dash_r=""
5987 fi
5988 if test "x$withval" = "xyes" ; then
5989 need_dash_r=1
5990 fi
5991
5992
5993fi
5994
5995
5996# Allow user to specify flags
5997
5998# Check whether --with-cflags was given.
5999if test "${with_cflags+set}" = set; then :
6000 withval=$with_cflags;
6001 if test -n "$withval" && test "x$withval" != "xno" && \
6002 test "x${withval}" != "xyes"; then
6003 CFLAGS="$CFLAGS $withval"
6004 fi
6005
6006
6007fi
6008
6009
6010# Check whether --with-cppflags was given.
6011if test "${with_cppflags+set}" = set; then :
6012 withval=$with_cppflags;
6013 if test -n "$withval" && test "x$withval" != "xno" && \
6014 test "x${withval}" != "xyes"; then
6015 CPPFLAGS="$CPPFLAGS $withval"
6016 fi
6017
6018
6019fi
6020
6021
6022# Check whether --with-ldflags was given.
6023if test "${with_ldflags+set}" = set; then :
6024 withval=$with_ldflags;
6025 if test -n "$withval" && test "x$withval" != "xno" && \
6026 test "x${withval}" != "xyes"; then
6027 LDFLAGS="$LDFLAGS $withval"
6028 fi
6029
6030
6031fi
6032
6033
6034# Check whether --with-libs was given.
6035if test "${with_libs+set}" = set; then :
6036 withval=$with_libs;
6037 if test -n "$withval" && test "x$withval" != "xno" && \
6038 test "x${withval}" != "xyes"; then
6039 LIBS="$LIBS $withval"
6040 fi
6041
6042
6043fi
6044
6045
6046# Check whether --with-Werror was given.
6047if test "${with_Werror+set}" = set; then :
6048 withval=$with_Werror;
6049 if test -n "$withval" && test "x$withval" != "xno"; then
6050 werror_flags="-Werror"
6051 if test "x${withval}" != "xyes"; then
6052 werror_flags="$withval"
6053 fi
6054 fi
6055
6056
6057fi
6058
6059
6060for ac_header in \
6061 bstring.h \
6062 crypt.h \
6063 crypto/sha2.h \
6064 dirent.h \
6065 endian.h \
6066 elf.h \
6067 features.h \
6068 fcntl.h \
6069 floatingpoint.h \
6070 getopt.h \
6071 glob.h \
6072 ia.h \
6073 iaf.h \
6074 limits.h \
6075 login.h \
6076 maillock.h \
6077 ndir.h \
6078 net/if_tun.h \
6079 netdb.h \
6080 netgroup.h \
6081 pam/pam_appl.h \
6082 paths.h \
6083 poll.h \
6084 pty.h \
6085 readpassphrase.h \
6086 rpc/types.h \
6087 security/pam_appl.h \
6088 sha2.h \
6089 shadow.h \
6090 stddef.h \
6091 stdint.h \
6092 string.h \
6093 strings.h \
6094 sys/audit.h \
6095 sys/bitypes.h \
6096 sys/bsdtty.h \
6097 sys/cdefs.h \
6098 sys/dir.h \
6099 sys/mman.h \
6100 sys/ndir.h \
6101 sys/poll.h \
6102 sys/prctl.h \
6103 sys/pstat.h \
6104 sys/select.h \
6105 sys/stat.h \
6106 sys/stream.h \
6107 sys/stropts.h \
6108 sys/strtio.h \
6109 sys/statvfs.h \
6110 sys/sysmacros.h \
6111 sys/time.h \
6112 sys/timers.h \
6113 sys/un.h \
6114 time.h \
6115 tmpdir.h \
6116 ttyent.h \
6117 ucred.h \
6118 unistd.h \
6119 usersec.h \
6120 util.h \
6121 utime.h \
6122 utmp.h \
6123 utmpx.h \
6124 vis.h \
6125
6126do :
6127 as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
6128ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
6129if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
6130 cat >>confdefs.h <<_ACEOF
6131#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
6132_ACEOF
6133
6134fi
6135
6136done
6137
6138
6139# lastlog.h requires sys/time.h to be included first on Solaris
6140for ac_header in lastlog.h
6141do :
6142 ac_fn_c_check_header_compile "$LINENO" "lastlog.h" "ac_cv_header_lastlog_h" "
6143#ifdef HAVE_SYS_TIME_H
6144# include <sys/time.h>
6145#endif
6146
6147"
6148if test "x$ac_cv_header_lastlog_h" = xyes; then :
6149 cat >>confdefs.h <<_ACEOF
6150#define HAVE_LASTLOG_H 1
6151_ACEOF
6152
6153fi
6154
6155done
6156
6157
6158# sys/ptms.h requires sys/stream.h to be included first on Solaris
6159for ac_header in sys/ptms.h
6160do :
6161 ac_fn_c_check_header_compile "$LINENO" "sys/ptms.h" "ac_cv_header_sys_ptms_h" "
6162#ifdef HAVE_SYS_STREAM_H
6163# include <sys/stream.h>
6164#endif
6165
6166"
6167if test "x$ac_cv_header_sys_ptms_h" = xyes; then :
6168 cat >>confdefs.h <<_ACEOF
6169#define HAVE_SYS_PTMS_H 1
6170_ACEOF
6171
6172fi
6173
6174done
6175
6176
6177# login_cap.h requires sys/types.h on NetBSD
6178for ac_header in login_cap.h
6179do :
6180 ac_fn_c_check_header_compile "$LINENO" "login_cap.h" "ac_cv_header_login_cap_h" "
6181#include <sys/types.h>
6182
6183"
6184if test "x$ac_cv_header_login_cap_h" = xyes; then :
6185 cat >>confdefs.h <<_ACEOF
6186#define HAVE_LOGIN_CAP_H 1
6187_ACEOF
6188
6189fi
6190
6191done
6192
6193
6194# older BSDs need sys/param.h before sys/mount.h
6195for ac_header in sys/mount.h
6196do :
6197 ac_fn_c_check_header_compile "$LINENO" "sys/mount.h" "ac_cv_header_sys_mount_h" "
6198#include <sys/param.h>
6199
6200"
6201if test "x$ac_cv_header_sys_mount_h" = xyes; then :
6202 cat >>confdefs.h <<_ACEOF
6203#define HAVE_SYS_MOUNT_H 1
6204_ACEOF
6205
6206fi
6207
6208done
6209
6210
6211# Messages for features tested for in target-specific section
6212SIA_MSG="no"
6213SPC_MSG="no"
6214SP_MSG="no"
6215
6216# Check for some target-specific stuff
6217case "$host" in
6218*-*-aix*)
6219 # Some versions of VAC won't allow macro redefinitions at
6220 # -qlanglevel=ansi, and autoconf 2.60 sometimes insists on using that
6221 # particularly with older versions of vac or xlc.
6222 # It also throws errors about null macro argments, but these are
6223 # not fatal.
6224 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if compiler allows macro redefinitions" >&5
6225$as_echo_n "checking if compiler allows macro redefinitions... " >&6; }
6226 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
6227/* end confdefs.h. */
6228
6229#define testmacro foo
6230#define testmacro bar
6231int
6232main ()
6233{
6234 exit(0);
6235 ;
6236 return 0;
6237}
6238_ACEOF
6239if ac_fn_c_try_compile "$LINENO"; then :
6240 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
6241$as_echo "yes" >&6; }
6242else
6243 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
6244$as_echo "no" >&6; }
6245 CC="`echo $CC | sed 's/-qlanglvl\=ansi//g'`"
6246 LD="`echo $LD | sed 's/-qlanglvl\=ansi//g'`"
6247 CFLAGS="`echo $CFLAGS | sed 's/-qlanglvl\=ansi//g'`"
6248 CPPFLAGS="`echo $CPPFLAGS | sed 's/-qlanglvl\=ansi//g'`"
6249
6250
6251fi
6252rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
6253
6254 { $as_echo "$as_me:${as_lineno-$LINENO}: checking how to specify blibpath for linker ($LD)" >&5
6255$as_echo_n "checking how to specify blibpath for linker ($LD)... " >&6; }
6256 if (test -z "$blibpath"); then
6257 blibpath="/usr/lib:/lib"
6258 fi
6259 saved_LDFLAGS="$LDFLAGS"
6260 if test "$GCC" = "yes"; then
6261 flags="-Wl,-blibpath: -Wl,-rpath, -blibpath:"
6262 else
6263 flags="-blibpath: -Wl,-blibpath: -Wl,-rpath,"
6264 fi
6265 for tryflags in $flags ;do
6266 if (test -z "$blibflags"); then
6267 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
6268 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
6269/* end confdefs.h. */
6270
6271int
6272main ()
6273{
6274
6275 ;
6276 return 0;
6277}
6278_ACEOF
6279if ac_fn_c_try_link "$LINENO"; then :
6280 blibflags=$tryflags
6281fi
6282rm -f core conftest.err conftest.$ac_objext \
6283 conftest$ac_exeext conftest.$ac_ext
6284 fi
6285 done
6286 if (test -z "$blibflags"); then
6287 { $as_echo "$as_me:${as_lineno-$LINENO}: result: not found" >&5
6288$as_echo "not found" >&6; }
6289 as_fn_error $? "*** must be able to specify blibpath on AIX - check config.log" "$LINENO" 5
6290 else
6291 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $blibflags" >&5
6292$as_echo "$blibflags" >&6; }
6293 fi
6294 LDFLAGS="$saved_LDFLAGS"
6295 ac_fn_c_check_func "$LINENO" "authenticate" "ac_cv_func_authenticate"
6296if test "x$ac_cv_func_authenticate" = xyes; then :
6297
6298$as_echo "#define WITH_AIXAUTHENTICATE 1" >>confdefs.h
6299
6300else
6301 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for authenticate in -ls" >&5
6302$as_echo_n "checking for authenticate in -ls... " >&6; }
6303if ${ac_cv_lib_s_authenticate+:} false; then :
6304 $as_echo_n "(cached) " >&6
6305else
6306 ac_check_lib_save_LIBS=$LIBS
6307LIBS="-ls $LIBS"
6308cat confdefs.h - <<_ACEOF >conftest.$ac_ext
6309/* end confdefs.h. */
6310
6311/* Override any GCC internal prototype to avoid an error.
6312 Use char because int might match the return type of a GCC
6313 builtin and then its argument prototype would still apply. */
6314#ifdef __cplusplus
6315extern "C"
6316#endif
6317char authenticate ();
6318int
6319main ()
6320{
6321return authenticate ();
6322 ;
6323 return 0;
6324}
6325_ACEOF
6326if ac_fn_c_try_link "$LINENO"; then :
6327 ac_cv_lib_s_authenticate=yes
6328else
6329 ac_cv_lib_s_authenticate=no
6330fi
6331rm -f core conftest.err conftest.$ac_objext \
6332 conftest$ac_exeext conftest.$ac_ext
6333LIBS=$ac_check_lib_save_LIBS
6334fi
6335{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_s_authenticate" >&5
6336$as_echo "$ac_cv_lib_s_authenticate" >&6; }
6337if test "x$ac_cv_lib_s_authenticate" = xyes; then :
6338 $as_echo "#define WITH_AIXAUTHENTICATE 1" >>confdefs.h
6339
6340 LIBS="$LIBS -ls"
6341
6342fi
6343
6344
6345fi
6346
6347 ac_fn_c_check_decl "$LINENO" "authenticate" "ac_cv_have_decl_authenticate" "#include <usersec.h>
6348"
6349if test "x$ac_cv_have_decl_authenticate" = xyes; then :
6350 ac_have_decl=1
6351else
6352 ac_have_decl=0
6353fi
6354
6355cat >>confdefs.h <<_ACEOF
6356#define HAVE_DECL_AUTHENTICATE $ac_have_decl
6357_ACEOF
6358ac_fn_c_check_decl "$LINENO" "loginrestrictions" "ac_cv_have_decl_loginrestrictions" "#include <usersec.h>
6359"
6360if test "x$ac_cv_have_decl_loginrestrictions" = xyes; then :
6361 ac_have_decl=1
6362else
6363 ac_have_decl=0
6364fi
6365
6366cat >>confdefs.h <<_ACEOF
6367#define HAVE_DECL_LOGINRESTRICTIONS $ac_have_decl
6368_ACEOF
6369ac_fn_c_check_decl "$LINENO" "loginsuccess" "ac_cv_have_decl_loginsuccess" "#include <usersec.h>
6370"
6371if test "x$ac_cv_have_decl_loginsuccess" = xyes; then :
6372 ac_have_decl=1
6373else
6374 ac_have_decl=0
6375fi
6376
6377cat >>confdefs.h <<_ACEOF
6378#define HAVE_DECL_LOGINSUCCESS $ac_have_decl
6379_ACEOF
6380ac_fn_c_check_decl "$LINENO" "passwdexpired" "ac_cv_have_decl_passwdexpired" "#include <usersec.h>
6381"
6382if test "x$ac_cv_have_decl_passwdexpired" = xyes; then :
6383 ac_have_decl=1
6384else
6385 ac_have_decl=0
6386fi
6387
6388cat >>confdefs.h <<_ACEOF
6389#define HAVE_DECL_PASSWDEXPIRED $ac_have_decl
6390_ACEOF
6391ac_fn_c_check_decl "$LINENO" "setauthdb" "ac_cv_have_decl_setauthdb" "#include <usersec.h>
6392"
6393if test "x$ac_cv_have_decl_setauthdb" = xyes; then :
6394 ac_have_decl=1
6395else
6396 ac_have_decl=0
6397fi
6398
6399cat >>confdefs.h <<_ACEOF
6400#define HAVE_DECL_SETAUTHDB $ac_have_decl
6401_ACEOF
6402
6403 ac_fn_c_check_decl "$LINENO" "loginfailed" "ac_cv_have_decl_loginfailed" "#include <usersec.h>
6404
6405"
6406if test "x$ac_cv_have_decl_loginfailed" = xyes; then :
6407 ac_have_decl=1
6408else
6409 ac_have_decl=0
6410fi
6411
6412cat >>confdefs.h <<_ACEOF
6413#define HAVE_DECL_LOGINFAILED $ac_have_decl
6414_ACEOF
6415if test $ac_have_decl = 1; then :
6416 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if loginfailed takes 4 arguments" >&5
6417$as_echo_n "checking if loginfailed takes 4 arguments... " >&6; }
6418 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
6419/* end confdefs.h. */
6420 #include <usersec.h>
6421int
6422main ()
6423{
6424 (void)loginfailed("user","host","tty",0);
6425 ;
6426 return 0;
6427}
6428_ACEOF
6429if ac_fn_c_try_compile "$LINENO"; then :
6430 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
6431$as_echo "yes" >&6; }
6432
6433$as_echo "#define AIX_LOGINFAILED_4ARG 1" >>confdefs.h
6434
6435else
6436 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
6437$as_echo "no" >&6; }
6438
6439fi
6440rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
6441fi
6442
6443 for ac_func in getgrset setauthdb
6444do :
6445 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
6446ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
6447if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
6448 cat >>confdefs.h <<_ACEOF
6449#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
6450_ACEOF
6451
6452fi
6453done
6454
6455 ac_fn_c_check_decl "$LINENO" "F_CLOSEM" "ac_cv_have_decl_F_CLOSEM" " #include <limits.h>
6456 #include <fcntl.h>
6457
6458"
6459if test "x$ac_cv_have_decl_F_CLOSEM" = xyes; then :
6460
6461$as_echo "#define HAVE_FCNTL_CLOSEM 1" >>confdefs.h
6462
6463fi
6464
6465 check_for_aix_broken_getaddrinfo=1
6466
6467$as_echo "#define BROKEN_REALPATH 1" >>confdefs.h
6468
6469
6470$as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
6471
6472
6473$as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
6474
6475
6476$as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
6477
6478
6479$as_echo "#define DISABLE_LASTLOG 1" >>confdefs.h
6480
6481
6482$as_echo "#define LOGIN_NEEDS_UTMPX 1" >>confdefs.h
6483
6484
6485$as_echo "#define SPT_TYPE SPT_REUSEARGV" >>confdefs.h
6486
6487
6488$as_echo "#define SSHPAM_CHAUTHTOK_NEEDS_RUID 1" >>confdefs.h
6489
6490
6491$as_echo "#define PTY_ZEROREAD 1" >>confdefs.h
6492
6493
6494$as_echo "#define PLATFORM_SYS_DIR_UID 2" >>confdefs.h
6495
6496 ;;
6497*-*-cygwin*)
6498 check_for_libcrypt_later=1
6499 LIBS="$LIBS /usr/lib/textreadmode.o"
6500
6501$as_echo "#define HAVE_CYGWIN 1" >>confdefs.h
6502
6503
6504$as_echo "#define USE_PIPES 1" >>confdefs.h
6505
6506
6507$as_echo "#define DISABLE_SHADOW 1" >>confdefs.h
6508
6509
6510$as_echo "#define NO_X11_UNIX_SOCKETS 1" >>confdefs.h
6511
6512
6513$as_echo "#define NO_IPPORT_RESERVED_CONCEPT 1" >>confdefs.h
6514
6515
6516$as_echo "#define DISABLE_FD_PASSING 1" >>confdefs.h
6517
6518
6519$as_echo "#define SSH_IOBUFSZ 65535" >>confdefs.h
6520
6521
6522$as_echo "#define FILESYSTEM_NO_BACKSLASH 1" >>confdefs.h
6523
6524 ;;
6525*-*-dgux*)
6526
6527$as_echo "#define IP_TOS_IS_BROKEN 1" >>confdefs.h
6528
6529 $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
6530
6531 $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
6532
6533 $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
6534
6535 ;;
6536*-*-darwin*)
6537 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if we have working getaddrinfo" >&5
6538$as_echo_n "checking if we have working getaddrinfo... " >&6; }
6539 if test "$cross_compiling" = yes; then :
6540 { $as_echo "$as_me:${as_lineno-$LINENO}: result: assume it is working" >&5
6541$as_echo "assume it is working" >&6; }
6542else
6543 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
6544/* end confdefs.h. */
6545 #include <mach-o/dyld.h>
6546main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
6547 exit(0);
6548 else
6549 exit(1);
6550}
6551
6552_ACEOF
6553if ac_fn_c_try_run "$LINENO"; then :
6554 { $as_echo "$as_me:${as_lineno-$LINENO}: result: working" >&5
6555$as_echo "working" >&6; }
6556else
6557 { $as_echo "$as_me:${as_lineno-$LINENO}: result: buggy" >&5
6558$as_echo "buggy" >&6; }
6559
6560$as_echo "#define BROKEN_GETADDRINFO 1" >>confdefs.h
6561
6562
6563fi
6564rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
6565 conftest.$ac_objext conftest.beam conftest.$ac_ext
6566fi
6567
6568 $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
6569
6570 $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
6571
6572 $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
6573
6574
6575$as_echo "#define BROKEN_GLOB 1" >>confdefs.h
6576
6577
6578cat >>confdefs.h <<_ACEOF
6579#define BIND_8_COMPAT 1
6580_ACEOF
6581
6582
6583$as_echo "#define SSH_TUN_FREEBSD 1" >>confdefs.h
6584
6585
6586$as_echo "#define SSH_TUN_COMPAT_AF 1" >>confdefs.h
6587
6588
6589$as_echo "#define SSH_TUN_PREPEND_AF 1" >>confdefs.h
6590
6591
6592 ac_fn_c_check_decl "$LINENO" "AU_IPv4" "ac_cv_have_decl_AU_IPv4" "$ac_includes_default"
6593if test "x$ac_cv_have_decl_AU_IPv4" = xyes; then :
6594
6595else
6596
6597$as_echo "#define AU_IPv4 0" >>confdefs.h
6598
6599 #include <bsm/audit.h>
6600
6601$as_echo "#define LASTLOG_WRITE_PUTUTXLINE 1" >>confdefs.h
6602
6603
6604fi
6605
6606
6607$as_echo "#define SPT_TYPE SPT_REUSEARGV" >>confdefs.h
6608
6609 for ac_func in sandbox_init
6610do :
6611 ac_fn_c_check_func "$LINENO" "sandbox_init" "ac_cv_func_sandbox_init"
6612if test "x$ac_cv_func_sandbox_init" = xyes; then :
6613 cat >>confdefs.h <<_ACEOF
6614#define HAVE_SANDBOX_INIT 1
6615_ACEOF
6616
6617fi
6618done
6619
6620 for ac_header in sandbox.h
6621do :
6622 ac_fn_c_check_header_mongrel "$LINENO" "sandbox.h" "ac_cv_header_sandbox_h" "$ac_includes_default"
6623if test "x$ac_cv_header_sandbox_h" = xyes; then :
6624 cat >>confdefs.h <<_ACEOF
6625#define HAVE_SANDBOX_H 1
6626_ACEOF
6627
6628fi
6629
6630done
6631
6632 ;;
6633*-*-dragonfly*)
6634 SSHDLIBS="$SSHDLIBS -lcrypt"
6635 ;;
6636*-*-haiku*)
6637 LIBS="$LIBS -lbsd "
6638 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for socket in -lnetwork" >&5
6639$as_echo_n "checking for socket in -lnetwork... " >&6; }
6640if ${ac_cv_lib_network_socket+:} false; then :
6641 $as_echo_n "(cached) " >&6
6642else
6643 ac_check_lib_save_LIBS=$LIBS
6644LIBS="-lnetwork $LIBS"
6645cat confdefs.h - <<_ACEOF >conftest.$ac_ext
6646/* end confdefs.h. */
6647
6648/* Override any GCC internal prototype to avoid an error.
6649 Use char because int might match the return type of a GCC
6650 builtin and then its argument prototype would still apply. */
6651#ifdef __cplusplus
6652extern "C"
6653#endif
6654char socket ();
6655int
6656main ()
6657{
6658return socket ();
6659 ;
6660 return 0;
6661}
6662_ACEOF
6663if ac_fn_c_try_link "$LINENO"; then :
6664 ac_cv_lib_network_socket=yes
6665else
6666 ac_cv_lib_network_socket=no
6667fi
6668rm -f core conftest.err conftest.$ac_objext \
6669 conftest$ac_exeext conftest.$ac_ext
6670LIBS=$ac_check_lib_save_LIBS
6671fi
6672{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_network_socket" >&5
6673$as_echo "$ac_cv_lib_network_socket" >&6; }
6674if test "x$ac_cv_lib_network_socket" = xyes; then :
6675 cat >>confdefs.h <<_ACEOF
6676#define HAVE_LIBNETWORK 1
6677_ACEOF
6678
6679 LIBS="-lnetwork $LIBS"
6680
6681fi
6682
6683 $as_echo "#define HAVE_U_INT64_T 1" >>confdefs.h
6684
6685 MANTYPE=man
6686 ;;
6687*-*-hpux*)
6688 # first we define all of the options common to all HP-UX releases
6689 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
6690 IPADDR_IN_DISPLAY=yes
6691 $as_echo "#define USE_PIPES 1" >>confdefs.h
6692
6693
6694$as_echo "#define LOGIN_NO_ENDOPT 1" >>confdefs.h
6695
6696 $as_echo "#define LOGIN_NEEDS_UTMPX 1" >>confdefs.h
6697
6698
6699$as_echo "#define LOCKED_PASSWD_STRING \"*\"" >>confdefs.h
6700
6701 $as_echo "#define SPT_TYPE SPT_PSTAT" >>confdefs.h
6702
6703
6704$as_echo "#define PLATFORM_SYS_DIR_UID 2" >>confdefs.h
6705
6706 maildir="/var/mail"
6707 LIBS="$LIBS -lsec"
6708 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for t_error in -lxnet" >&5
6709$as_echo_n "checking for t_error in -lxnet... " >&6; }
6710if ${ac_cv_lib_xnet_t_error+:} false; then :
6711 $as_echo_n "(cached) " >&6
6712else
6713 ac_check_lib_save_LIBS=$LIBS
6714LIBS="-lxnet $LIBS"
6715cat confdefs.h - <<_ACEOF >conftest.$ac_ext
6716/* end confdefs.h. */
6717
6718/* Override any GCC internal prototype to avoid an error.
6719 Use char because int might match the return type of a GCC
6720 builtin and then its argument prototype would still apply. */
6721#ifdef __cplusplus
6722extern "C"
6723#endif
6724char t_error ();
6725int
6726main ()
6727{
6728return t_error ();
6729 ;
6730 return 0;
6731}
6732_ACEOF
6733if ac_fn_c_try_link "$LINENO"; then :
6734 ac_cv_lib_xnet_t_error=yes
6735else
6736 ac_cv_lib_xnet_t_error=no
6737fi
6738rm -f core conftest.err conftest.$ac_objext \
6739 conftest$ac_exeext conftest.$ac_ext
6740LIBS=$ac_check_lib_save_LIBS
6741fi
6742{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_xnet_t_error" >&5
6743$as_echo "$ac_cv_lib_xnet_t_error" >&6; }
6744if test "x$ac_cv_lib_xnet_t_error" = xyes; then :
6745 cat >>confdefs.h <<_ACEOF
6746#define HAVE_LIBXNET 1
6747_ACEOF
6748
6749 LIBS="-lxnet $LIBS"
6750
6751else
6752 as_fn_error $? "*** -lxnet needed on HP-UX - check config.log ***" "$LINENO" 5
6753fi
6754
6755
6756 # next, we define all of the options specific to major releases
6757 case "$host" in
6758 *-*-hpux10*)
6759 if test -z "$GCC"; then
6760 CFLAGS="$CFLAGS -Ae"
6761 fi
6762 ;;
6763 *-*-hpux11*)
6764
6765$as_echo "#define PAM_SUN_CODEBASE 1" >>confdefs.h
6766
6767
6768$as_echo "#define DISABLE_UTMP 1" >>confdefs.h
6769
6770
6771$as_echo "#define USE_BTMP 1" >>confdefs.h
6772
6773 check_for_hpux_broken_getaddrinfo=1
6774 check_for_conflicting_getspnam=1
6775 ;;
6776 esac
6777
6778 # lastly, we define options specific to minor releases
6779 case "$host" in
6780 *-*-hpux10.26)
6781
6782$as_echo "#define HAVE_SECUREWARE 1" >>confdefs.h
6783
6784 disable_ptmx_check=yes
6785 LIBS="$LIBS -lsecpw"
6786 ;;
6787 esac
6788 ;;
6789*-*-irix5*)
6790 PATH="$PATH:/usr/etc"
6791
6792$as_echo "#define BROKEN_INET_NTOA 1" >>confdefs.h
6793
6794 $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
6795
6796 $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
6797
6798 $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
6799
6800
6801$as_echo "#define WITH_ABBREV_NO_TTY 1" >>confdefs.h
6802
6803 $as_echo "#define LOCKED_PASSWD_STRING \"*LK*\"" >>confdefs.h
6804
6805 ;;
6806*-*-irix6*)
6807 PATH="$PATH:/usr/etc"
6808
6809$as_echo "#define WITH_IRIX_ARRAY 1" >>confdefs.h
6810
6811
6812$as_echo "#define WITH_IRIX_PROJECT 1" >>confdefs.h
6813
6814
6815$as_echo "#define WITH_IRIX_AUDIT 1" >>confdefs.h
6816
6817 ac_fn_c_check_func "$LINENO" "jlimit_startjob" "ac_cv_func_jlimit_startjob"
6818if test "x$ac_cv_func_jlimit_startjob" = xyes; then :
6819
6820$as_echo "#define WITH_IRIX_JOBS 1" >>confdefs.h
6821
6822fi
6823
6824 $as_echo "#define BROKEN_INET_NTOA 1" >>confdefs.h
6825
6826 $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
6827
6828 $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
6829
6830 $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
6831
6832
6833$as_echo "#define BROKEN_UPDWTMPX 1" >>confdefs.h
6834
6835 $as_echo "#define WITH_ABBREV_NO_TTY 1" >>confdefs.h
6836
6837 $as_echo "#define LOCKED_PASSWD_STRING \"*LK*\"" >>confdefs.h
6838
6839 ;;
6840*-*-k*bsd*-gnu | *-*-kopensolaris*-gnu)
6841 check_for_libcrypt_later=1
6842 $as_echo "#define PAM_TTY_KLUDGE 1" >>confdefs.h
6843
6844 $as_echo "#define LOCKED_PASSWD_PREFIX \"!\"" >>confdefs.h
6845
6846 $as_echo "#define SPT_TYPE SPT_REUSEARGV" >>confdefs.h
6847
6848
6849$as_echo "#define _PATH_BTMP \"/var/log/btmp\"" >>confdefs.h
6850
6851
6852$as_echo "#define USE_BTMP 1" >>confdefs.h
6853
6854 ;;
6855*-*-linux*)
6856 no_dev_ptmx=1
6857 check_for_libcrypt_later=1
6858 check_for_openpty_ctty_bug=1
6859
6860$as_echo "#define PAM_TTY_KLUDGE 1" >>confdefs.h
6861
6862
6863$as_echo "#define LOCKED_PASSWD_PREFIX \"!\"" >>confdefs.h
6864
6865 $as_echo "#define SPT_TYPE SPT_REUSEARGV" >>confdefs.h
6866
6867
6868$as_echo "#define LINK_OPNOTSUPP_ERRNO EPERM" >>confdefs.h
6869
6870
6871$as_echo "#define _PATH_BTMP \"/var/log/btmp\"" >>confdefs.h
6872
6873 $as_echo "#define USE_BTMP 1" >>confdefs.h
6874
6875
6876$as_echo "#define LINUX_OOM_ADJUST 1" >>confdefs.h
6877
6878 inet6_default_4in6=yes
6879 case `uname -r` in
6880 1.*|2.0.*)
6881
6882$as_echo "#define BROKEN_CMSG_TYPE 1" >>confdefs.h
6883
6884 ;;
6885 esac
6886 # tun(4) forwarding compat code
6887 for ac_header in linux/if_tun.h
6888do :
6889 ac_fn_c_check_header_mongrel "$LINENO" "linux/if_tun.h" "ac_cv_header_linux_if_tun_h" "$ac_includes_default"
6890if test "x$ac_cv_header_linux_if_tun_h" = xyes; then :
6891 cat >>confdefs.h <<_ACEOF
6892#define HAVE_LINUX_IF_TUN_H 1
6893_ACEOF
6894
6895fi
6896
6897done
6898
6899 if test "x$ac_cv_header_linux_if_tun_h" = "xyes" ; then
6900
6901$as_echo "#define SSH_TUN_LINUX 1" >>confdefs.h
6902
6903
6904$as_echo "#define SSH_TUN_COMPAT_AF 1" >>confdefs.h
6905
6906
6907$as_echo "#define SSH_TUN_PREPEND_AF 1" >>confdefs.h
6908
6909 fi
6910 for ac_header in linux/seccomp.h linux/filter.h linux/audit.h
6911do :
6912 as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
6913ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "#include <linux/types.h>
6914"
6915if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
6916 cat >>confdefs.h <<_ACEOF
6917#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
6918_ACEOF
6919
6920fi
6921
6922done
6923
6924 for ac_func in prctl
6925do :
6926 ac_fn_c_check_func "$LINENO" "prctl" "ac_cv_func_prctl"
6927if test "x$ac_cv_func_prctl" = xyes; then :
6928 cat >>confdefs.h <<_ACEOF
6929#define HAVE_PRCTL 1
6930_ACEOF
6931
6932fi
6933done
6934
6935 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for seccomp architecture" >&5
6936$as_echo_n "checking for seccomp architecture... " >&6; }
6937 seccomp_audit_arch=
6938 case "$host" in
6939 x86_64-*)
6940 seccomp_audit_arch=AUDIT_ARCH_X86_64
6941 ;;
6942 i*86-*)
6943 seccomp_audit_arch=AUDIT_ARCH_I386
6944 ;;
6945 arm*-*)
6946 seccomp_audit_arch=AUDIT_ARCH_ARM
6947 ;;
6948 esac
6949 if test "x$seccomp_audit_arch" != "x" ; then
6950 { $as_echo "$as_me:${as_lineno-$LINENO}: result: \"$seccomp_audit_arch\"" >&5
6951$as_echo "\"$seccomp_audit_arch\"" >&6; }
6952
6953cat >>confdefs.h <<_ACEOF
6954#define SECCOMP_AUDIT_ARCH $seccomp_audit_arch
6955_ACEOF
6956
6957 else
6958 { $as_echo "$as_me:${as_lineno-$LINENO}: result: architecture not supported" >&5
6959$as_echo "architecture not supported" >&6; }
6960 fi
6961 ;;
6962mips-sony-bsd|mips-sony-newsos4)
6963
6964$as_echo "#define NEED_SETPGRP 1" >>confdefs.h
6965
6966 SONY=1
6967 ;;
6968*-*-netbsd*)
6969 check_for_libcrypt_before=1
6970 if test "x$withval" != "xno" ; then
6971 need_dash_r=1
6972 fi
6973
6974$as_echo "#define SSH_TUN_FREEBSD 1" >>confdefs.h
6975
6976 ac_fn_c_check_header_mongrel "$LINENO" "net/if_tap.h" "ac_cv_header_net_if_tap_h" "$ac_includes_default"
6977if test "x$ac_cv_header_net_if_tap_h" = xyes; then :
6978
6979else
6980
6981$as_echo "#define SSH_TUN_NO_L2 1" >>confdefs.h
6982
6983fi
6984
6985
6986
6987$as_echo "#define SSH_TUN_PREPEND_AF 1" >>confdefs.h
6988
6989 ;;
6990*-*-freebsd*)
6991 check_for_libcrypt_later=1
6992
6993$as_echo "#define LOCKED_PASSWD_PREFIX \"*LOCKED*\"" >>confdefs.h
6994
6995
6996$as_echo "#define SSH_TUN_FREEBSD 1" >>confdefs.h
6997
6998 ac_fn_c_check_header_mongrel "$LINENO" "net/if_tap.h" "ac_cv_header_net_if_tap_h" "$ac_includes_default"
6999if test "x$ac_cv_header_net_if_tap_h" = xyes; then :
7000
7001else
7002
7003$as_echo "#define SSH_TUN_NO_L2 1" >>confdefs.h
7004
7005fi
7006
7007
7008
7009$as_echo "#define BROKEN_GLOB 1" >>confdefs.h
7010
7011
7012$as_echo "#define BROKEN_STRNVIS 1" >>confdefs.h
7013
7014 ;;
7015*-*-bsdi*)
7016 $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
7017
7018 $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
7019
7020 $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
7021
7022 ;;
7023*-next-*)
7024 conf_lastlog_location="/usr/adm/lastlog"
7025 conf_utmp_location=/etc/utmp
7026 conf_wtmp_location=/usr/adm/wtmp
7027 maildir=/usr/spool/mail
7028
7029$as_echo "#define HAVE_NEXT 1" >>confdefs.h
7030
7031 $as_echo "#define BROKEN_REALPATH 1" >>confdefs.h
7032
7033 $as_echo "#define USE_PIPES 1" >>confdefs.h
7034
7035
7036$as_echo "#define BROKEN_SAVED_UIDS 1" >>confdefs.h
7037
7038 ;;
7039*-*-openbsd*)
7040
7041$as_echo "#define HAVE_ATTRIBUTE__SENTINEL__ 1" >>confdefs.h
7042
7043
7044$as_echo "#define HAVE_ATTRIBUTE__BOUNDED__ 1" >>confdefs.h
7045
7046
7047$as_echo "#define SSH_TUN_OPENBSD 1" >>confdefs.h
7048
7049
7050$as_echo "#define SYSLOG_R_SAFE_IN_SIGHAND 1" >>confdefs.h
7051
7052 ;;
7053*-*-solaris*)
7054 if test "x$withval" != "xno" ; then
7055 need_dash_r=1
7056 fi
7057 $as_echo "#define PAM_SUN_CODEBASE 1" >>confdefs.h
7058
7059 $as_echo "#define LOGIN_NEEDS_UTMPX 1" >>confdefs.h
7060
7061
7062$as_echo "#define LOGIN_NEEDS_TERM 1" >>confdefs.h
7063
7064 $as_echo "#define PAM_TTY_KLUDGE 1" >>confdefs.h
7065
7066
7067$as_echo "#define SSHPAM_CHAUTHTOK_NEEDS_RUID 1" >>confdefs.h
7068
7069 $as_echo "#define LOCKED_PASSWD_STRING \"*LK*\"" >>confdefs.h
7070
7071 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
7072
7073$as_echo "#define SSHD_ACQUIRES_CTTY 1" >>confdefs.h
7074
7075
7076$as_echo "#define PASSWD_NEEDS_USERNAME 1" >>confdefs.h
7077
7078
7079$as_echo "#define BROKEN_TCGETATTR_ICANON 1" >>confdefs.h
7080
7081 external_path_file=/etc/default/login
7082 # hardwire lastlog location (can't detect it on some versions)
7083 conf_lastlog_location="/var/adm/lastlog"
7084 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for obsolete utmp and wtmp in solaris2.x" >&5
7085$as_echo_n "checking for obsolete utmp and wtmp in solaris2.x... " >&6; }
7086 sol2ver=`echo "$host"| sed -e 's/.*[0-9]\.//'`
7087 if test "$sol2ver" -ge 8; then
7088 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
7089$as_echo "yes" >&6; }
7090 $as_echo "#define DISABLE_UTMP 1" >>confdefs.h
7091
7092
7093$as_echo "#define DISABLE_WTMP 1" >>confdefs.h
7094
7095 else
7096 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
7097$as_echo "no" >&6; }
7098 fi
7099
7100# Check whether --with-solaris-contracts was given.
7101if test "${with_solaris_contracts+set}" = set; then :
7102 withval=$with_solaris_contracts;
7103 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ct_tmpl_activate in -lcontract" >&5
7104$as_echo_n "checking for ct_tmpl_activate in -lcontract... " >&6; }
7105if ${ac_cv_lib_contract_ct_tmpl_activate+:} false; then :
7106 $as_echo_n "(cached) " >&6
7107else
7108 ac_check_lib_save_LIBS=$LIBS
7109LIBS="-lcontract $LIBS"
7110cat confdefs.h - <<_ACEOF >conftest.$ac_ext
7111/* end confdefs.h. */
7112
7113/* Override any GCC internal prototype to avoid an error.
7114 Use char because int might match the return type of a GCC
7115 builtin and then its argument prototype would still apply. */
7116#ifdef __cplusplus
7117extern "C"
7118#endif
7119char ct_tmpl_activate ();
7120int
7121main ()
7122{
7123return ct_tmpl_activate ();
7124 ;
7125 return 0;
7126}
7127_ACEOF
7128if ac_fn_c_try_link "$LINENO"; then :
7129 ac_cv_lib_contract_ct_tmpl_activate=yes
7130else
7131 ac_cv_lib_contract_ct_tmpl_activate=no
7132fi
7133rm -f core conftest.err conftest.$ac_objext \
7134 conftest$ac_exeext conftest.$ac_ext
7135LIBS=$ac_check_lib_save_LIBS
7136fi
7137{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_contract_ct_tmpl_activate" >&5
7138$as_echo "$ac_cv_lib_contract_ct_tmpl_activate" >&6; }
7139if test "x$ac_cv_lib_contract_ct_tmpl_activate" = xyes; then :
7140
7141$as_echo "#define USE_SOLARIS_PROCESS_CONTRACTS 1" >>confdefs.h
7142
7143 SSHDLIBS="$SSHDLIBS -lcontract"
7144 SPC_MSG="yes"
7145fi
7146
7147
7148fi
7149
7150
7151# Check whether --with-solaris-projects was given.
7152if test "${with_solaris_projects+set}" = set; then :
7153 withval=$with_solaris_projects;
7154 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for setproject in -lproject" >&5
7155$as_echo_n "checking for setproject in -lproject... " >&6; }
7156if ${ac_cv_lib_project_setproject+:} false; then :
7157 $as_echo_n "(cached) " >&6
7158else
7159 ac_check_lib_save_LIBS=$LIBS
7160LIBS="-lproject $LIBS"
7161cat confdefs.h - <<_ACEOF >conftest.$ac_ext
7162/* end confdefs.h. */
7163
7164/* Override any GCC internal prototype to avoid an error.
7165 Use char because int might match the return type of a GCC
7166 builtin and then its argument prototype would still apply. */
7167#ifdef __cplusplus
7168extern "C"
7169#endif
7170char setproject ();
7171int
7172main ()
7173{
7174return setproject ();
7175 ;
7176 return 0;
7177}
7178_ACEOF
7179if ac_fn_c_try_link "$LINENO"; then :
7180 ac_cv_lib_project_setproject=yes
7181else
7182 ac_cv_lib_project_setproject=no
7183fi
7184rm -f core conftest.err conftest.$ac_objext \
7185 conftest$ac_exeext conftest.$ac_ext
7186LIBS=$ac_check_lib_save_LIBS
7187fi
7188{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_project_setproject" >&5
7189$as_echo "$ac_cv_lib_project_setproject" >&6; }
7190if test "x$ac_cv_lib_project_setproject" = xyes; then :
7191
7192$as_echo "#define USE_SOLARIS_PROJECTS 1" >>confdefs.h
7193
7194 SSHDLIBS="$SSHDLIBS -lproject"
7195 SP_MSG="yes"
7196fi
7197
7198
7199fi
7200
7201 ;;
7202*-*-sunos4*)
7203 CPPFLAGS="$CPPFLAGS -DSUNOS4"
7204 for ac_func in getpwanam
7205do :
7206 ac_fn_c_check_func "$LINENO" "getpwanam" "ac_cv_func_getpwanam"
7207if test "x$ac_cv_func_getpwanam" = xyes; then :
7208 cat >>confdefs.h <<_ACEOF
7209#define HAVE_GETPWANAM 1
7210_ACEOF
7211
7212fi
7213done
7214
7215 $as_echo "#define PAM_SUN_CODEBASE 1" >>confdefs.h
7216
7217 conf_utmp_location=/etc/utmp
7218 conf_wtmp_location=/var/adm/wtmp
7219 conf_lastlog_location=/var/adm/lastlog
7220 $as_echo "#define USE_PIPES 1" >>confdefs.h
7221
7222 ;;
7223*-ncr-sysv*)
7224 LIBS="$LIBS -lc89"
7225 $as_echo "#define USE_PIPES 1" >>confdefs.h
7226
7227 $as_echo "#define SSHD_ACQUIRES_CTTY 1" >>confdefs.h
7228
7229 $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
7230
7231 $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
7232
7233 $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
7234
7235 ;;
7236*-sni-sysv*)
7237 # /usr/ucblib MUST NOT be searched on ReliantUNIX
7238 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for dlsym in -ldl" >&5
7239$as_echo_n "checking for dlsym in -ldl... " >&6; }
7240if ${ac_cv_lib_dl_dlsym+:} false; then :
7241 $as_echo_n "(cached) " >&6
7242else
7243 ac_check_lib_save_LIBS=$LIBS
7244LIBS="-ldl $LIBS"
7245cat confdefs.h - <<_ACEOF >conftest.$ac_ext
7246/* end confdefs.h. */
7247
7248/* Override any GCC internal prototype to avoid an error.
7249 Use char because int might match the return type of a GCC
7250 builtin and then its argument prototype would still apply. */
7251#ifdef __cplusplus
7252extern "C"
7253#endif
7254char dlsym ();
7255int
7256main ()
7257{
7258return dlsym ();
7259 ;
7260 return 0;
7261}
7262_ACEOF
7263if ac_fn_c_try_link "$LINENO"; then :
7264 ac_cv_lib_dl_dlsym=yes
7265else
7266 ac_cv_lib_dl_dlsym=no
7267fi
7268rm -f core conftest.err conftest.$ac_objext \
7269 conftest$ac_exeext conftest.$ac_ext
7270LIBS=$ac_check_lib_save_LIBS
7271fi
7272{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlsym" >&5
7273$as_echo "$ac_cv_lib_dl_dlsym" >&6; }
7274if test "x$ac_cv_lib_dl_dlsym" = xyes; then :
7275 cat >>confdefs.h <<_ACEOF
7276#define HAVE_LIBDL 1
7277_ACEOF
7278
7279 LIBS="-ldl $LIBS"
7280
7281fi
7282
7283 # -lresolv needs to be at the end of LIBS or DNS lookups break
7284 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for res_query in -lresolv" >&5
7285$as_echo_n "checking for res_query in -lresolv... " >&6; }
7286if ${ac_cv_lib_resolv_res_query+:} false; then :
7287 $as_echo_n "(cached) " >&6
7288else
7289 ac_check_lib_save_LIBS=$LIBS
7290LIBS="-lresolv $LIBS"
7291cat confdefs.h - <<_ACEOF >conftest.$ac_ext
7292/* end confdefs.h. */
7293
7294/* Override any GCC internal prototype to avoid an error.
7295 Use char because int might match the return type of a GCC
7296 builtin and then its argument prototype would still apply. */
7297#ifdef __cplusplus
7298extern "C"
7299#endif
7300char res_query ();
7301int
7302main ()
7303{
7304return res_query ();
7305 ;
7306 return 0;
7307}
7308_ACEOF
7309if ac_fn_c_try_link "$LINENO"; then :
7310 ac_cv_lib_resolv_res_query=yes
7311else
7312 ac_cv_lib_resolv_res_query=no
7313fi
7314rm -f core conftest.err conftest.$ac_objext \
7315 conftest$ac_exeext conftest.$ac_ext
7316LIBS=$ac_check_lib_save_LIBS
7317fi
7318{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_resolv_res_query" >&5
7319$as_echo "$ac_cv_lib_resolv_res_query" >&6; }
7320if test "x$ac_cv_lib_resolv_res_query" = xyes; then :
7321 LIBS="$LIBS -lresolv"
7322fi
7323
7324 IPADDR_IN_DISPLAY=yes
7325 $as_echo "#define USE_PIPES 1" >>confdefs.h
7326
7327 $as_echo "#define IP_TOS_IS_BROKEN 1" >>confdefs.h
7328
7329 $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
7330
7331 $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
7332
7333 $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
7334
7335 $as_echo "#define SSHD_ACQUIRES_CTTY 1" >>confdefs.h
7336
7337 external_path_file=/etc/default/login
7338 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
7339 # Attention: always take care to bind libsocket and libnsl before libc,
7340 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
7341 ;;
7342# UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
7343*-*-sysv4.2*)
7344 $as_echo "#define USE_PIPES 1" >>confdefs.h
7345
7346 $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
7347
7348 $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
7349
7350 $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
7351
7352
7353$as_echo "#define PASSWD_NEEDS_USERNAME 1" >>confdefs.h
7354
7355 $as_echo "#define LOCKED_PASSWD_STRING \"*LK*\"" >>confdefs.h
7356
7357 ;;
7358# UnixWare 7.x, OpenUNIX 8
7359*-*-sysv5*)
7360 CPPFLAGS="$CPPFLAGS -Dvsnprintf=_xvsnprintf -Dsnprintf=_xsnprintf"
7361
7362$as_echo "#define UNIXWARE_LONG_PASSWORDS 1" >>confdefs.h
7363
7364 $as_echo "#define USE_PIPES 1" >>confdefs.h
7365
7366 $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
7367
7368 $as_echo "#define BROKEN_GETADDRINFO 1" >>confdefs.h
7369
7370 $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
7371
7372 $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
7373
7374 $as_echo "#define PASSWD_NEEDS_USERNAME 1" >>confdefs.h
7375
7376 case "$host" in
7377 *-*-sysv5SCO_SV*) # SCO OpenServer 6.x
7378 maildir=/var/spool/mail
7379 TEST_SHELL=/u95/bin/sh
7380
7381$as_echo "#define BROKEN_LIBIAF 1" >>confdefs.h
7382
7383 $as_echo "#define BROKEN_UPDWTMPX 1" >>confdefs.h
7384
7385 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for getluid in -lprot" >&5
7386$as_echo_n "checking for getluid in -lprot... " >&6; }
7387if ${ac_cv_lib_prot_getluid+:} false; then :
7388 $as_echo_n "(cached) " >&6
7389else
7390 ac_check_lib_save_LIBS=$LIBS
7391LIBS="-lprot $LIBS"
7392cat confdefs.h - <<_ACEOF >conftest.$ac_ext
7393/* end confdefs.h. */
7394
7395/* Override any GCC internal prototype to avoid an error.
7396 Use char because int might match the return type of a GCC
7397 builtin and then its argument prototype would still apply. */
7398#ifdef __cplusplus
7399extern "C"
7400#endif
7401char getluid ();
7402int
7403main ()
7404{
7405return getluid ();
7406 ;
7407 return 0;
7408}
7409_ACEOF
7410if ac_fn_c_try_link "$LINENO"; then :
7411 ac_cv_lib_prot_getluid=yes
7412else
7413 ac_cv_lib_prot_getluid=no
7414fi
7415rm -f core conftest.err conftest.$ac_objext \
7416 conftest$ac_exeext conftest.$ac_ext
7417LIBS=$ac_check_lib_save_LIBS
7418fi
7419{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_prot_getluid" >&5
7420$as_echo "$ac_cv_lib_prot_getluid" >&6; }
7421if test "x$ac_cv_lib_prot_getluid" = xyes; then :
7422 LIBS="$LIBS -lprot"
7423 for ac_func in getluid setluid
7424do :
7425 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
7426ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
7427if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
7428 cat >>confdefs.h <<_ACEOF
7429#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
7430_ACEOF
7431
7432fi
7433done
7434
7435 $as_echo "#define HAVE_SECUREWARE 1" >>confdefs.h
7436
7437 $as_echo "#define DISABLE_SHADOW 1" >>confdefs.h
7438
7439
7440fi
7441
7442 ;;
7443 *) $as_echo "#define LOCKED_PASSWD_STRING \"*LK*\"" >>confdefs.h
7444
7445 check_for_libcrypt_later=1
7446 ;;
7447 esac
7448 ;;
7449*-*-sysv*)
7450 ;;
7451# SCO UNIX and OEM versions of SCO UNIX
7452*-*-sco3.2v4*)
7453 as_fn_error $? "\"This Platform is no longer supported.\"" "$LINENO" 5
7454 ;;
7455# SCO OpenServer 5.x
7456*-*-sco3.2v5*)
7457 if test -z "$GCC"; then
7458 CFLAGS="$CFLAGS -belf"
7459 fi
7460 LIBS="$LIBS -lprot -lx -ltinfo -lm"
7461 no_dev_ptmx=1
7462 $as_echo "#define USE_PIPES 1" >>confdefs.h
7463
7464 $as_echo "#define HAVE_SECUREWARE 1" >>confdefs.h
7465
7466 $as_echo "#define DISABLE_SHADOW 1" >>confdefs.h
7467
7468 $as_echo "#define DISABLE_FD_PASSING 1" >>confdefs.h
7469
7470 $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
7471
7472 $as_echo "#define BROKEN_GETADDRINFO 1" >>confdefs.h
7473
7474 $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
7475
7476 $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
7477
7478 $as_echo "#define WITH_ABBREV_NO_TTY 1" >>confdefs.h
7479
7480 $as_echo "#define BROKEN_UPDWTMPX 1" >>confdefs.h
7481
7482 $as_echo "#define PASSWD_NEEDS_USERNAME 1" >>confdefs.h
7483
7484 for ac_func in getluid setluid
7485do :
7486 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
7487ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
7488if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
7489 cat >>confdefs.h <<_ACEOF
7490#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
7491_ACEOF
7492
7493fi
7494done
7495
7496 MANTYPE=man
7497 TEST_SHELL=ksh
7498 SKIP_DISABLE_LASTLOG_DEFINE=yes
7499 ;;
7500*-*-unicosmk*)
7501
7502$as_echo "#define NO_SSH_LASTLOG 1" >>confdefs.h
7503
7504 $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
7505
7506 $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
7507
7508 $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
7509
7510 $as_echo "#define USE_PIPES 1" >>confdefs.h
7511
7512 $as_echo "#define DISABLE_FD_PASSING 1" >>confdefs.h
7513
7514 LDFLAGS="$LDFLAGS"
7515 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
7516 MANTYPE=cat
7517 ;;
7518*-*-unicosmp*)
7519 $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
7520
7521 $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
7522
7523 $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
7524
7525 $as_echo "#define WITH_ABBREV_NO_TTY 1" >>confdefs.h
7526
7527 $as_echo "#define USE_PIPES 1" >>confdefs.h
7528
7529 $as_echo "#define DISABLE_FD_PASSING 1" >>confdefs.h
7530
7531 LDFLAGS="$LDFLAGS"
7532 LIBS="$LIBS -lgen -lacid -ldb"
7533 MANTYPE=cat
7534 ;;
7535*-*-unicos*)
7536 $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
7537
7538 $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
7539
7540 $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
7541
7542 $as_echo "#define USE_PIPES 1" >>confdefs.h
7543
7544 $as_echo "#define DISABLE_FD_PASSING 1" >>confdefs.h
7545
7546 $as_echo "#define NO_SSH_LASTLOG 1" >>confdefs.h
7547
7548 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
7549 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
7550 MANTYPE=cat
7551 ;;
7552*-dec-osf*)
7553 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for Digital Unix SIA" >&5
7554$as_echo_n "checking for Digital Unix SIA... " >&6; }
7555 no_osfsia=""
7556
7557# Check whether --with-osfsia was given.
7558if test "${with_osfsia+set}" = set; then :
7559 withval=$with_osfsia;
7560 if test "x$withval" = "xno" ; then
7561 { $as_echo "$as_me:${as_lineno-$LINENO}: result: disabled" >&5
7562$as_echo "disabled" >&6; }
7563 no_osfsia=1
7564 fi
7565
7566fi
7567
7568 if test -z "$no_osfsia" ; then
7569 if test -f /etc/sia/matrix.conf; then
7570 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
7571$as_echo "yes" >&6; }
7572
7573$as_echo "#define HAVE_OSF_SIA 1" >>confdefs.h
7574
7575
7576$as_echo "#define DISABLE_LOGIN 1" >>confdefs.h
7577
7578 $as_echo "#define DISABLE_FD_PASSING 1" >>confdefs.h
7579
7580 LIBS="$LIBS -lsecurity -ldb -lm -laud"
7581 SIA_MSG="yes"
7582 else
7583 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
7584$as_echo "no" >&6; }
7585
7586$as_echo "#define LOCKED_PASSWD_SUBSTR \"Nologin\"" >>confdefs.h
7587
7588 fi
7589 fi
7590 $as_echo "#define BROKEN_GETADDRINFO 1" >>confdefs.h
7591
7592 $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
7593
7594 $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
7595
7596 $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
7597
7598
7599$as_echo "#define BROKEN_READV_COMPARISON 1" >>confdefs.h
7600
7601 ;;
7602
7603*-*-nto-qnx*)
7604 $as_echo "#define USE_PIPES 1" >>confdefs.h
7605
7606 $as_echo "#define NO_X11_UNIX_SOCKETS 1" >>confdefs.h
7607
7608
7609$as_echo "#define MISSING_NFDBITS 1" >>confdefs.h
7610
7611
7612$as_echo "#define MISSING_HOWMANY 1" >>confdefs.h
7613
7614
7615$as_echo "#define MISSING_FD_MASK 1" >>confdefs.h
7616
7617 $as_echo "#define DISABLE_LASTLOG 1" >>confdefs.h
7618
7619 $as_echo "#define SSHD_ACQUIRES_CTTY 1" >>confdefs.h
7620
7621
7622$as_echo "#define BROKEN_SHADOW_EXPIRE 1" >>confdefs.h
7623
7624 enable_etc_default_login=no # has incompatible /etc/default/login
7625 case "$host" in
7626 *-*-nto-qnx6*)
7627 $as_echo "#define DISABLE_FD_PASSING 1" >>confdefs.h
7628
7629 ;;
7630 esac
7631 ;;
7632
7633*-*-ultrix*)
7634
7635$as_echo "#define BROKEN_GETGROUPS 1" >>confdefs.h
7636
7637
7638$as_echo "#define BROKEN_MMAP 1" >>confdefs.h
7639
7640 $as_echo "#define NEED_SETPGRP 1" >>confdefs.h
7641
7642
7643$as_echo "#define HAVE_SYS_SYSLOG_H 1" >>confdefs.h
7644
7645 ;;
7646
7647*-*-lynxos)
7648 CFLAGS="$CFLAGS -D__NO_INCLUDE_WARN__"
7649 $as_echo "#define MISSING_HOWMANY 1" >>confdefs.h
7650
7651
7652$as_echo "#define BROKEN_SETVBUF 1" >>confdefs.h
7653
7654 ;;
7655esac
7656
7657{ $as_echo "$as_me:${as_lineno-$LINENO}: checking compiler and flags for sanity" >&5
7658$as_echo_n "checking compiler and flags for sanity... " >&6; }
7659if test "$cross_compiling" = yes; then :
7660 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking compiler sanity" >&5
7661$as_echo "$as_me: WARNING: cross compiling: not checking compiler sanity" >&2;}
7662
7663else
7664 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
7665/* end confdefs.h. */
7666 #include <stdio.h>
7667int
7668main ()
7669{
7670 exit(0);
7671 ;
7672 return 0;
7673}
7674_ACEOF
7675if ac_fn_c_try_run "$LINENO"; then :
7676 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
7677$as_echo "yes" >&6; }
7678else
7679
7680 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
7681$as_echo "no" >&6; }
7682 as_fn_error $? "*** compiler cannot create working executables, check config.log ***" "$LINENO" 5
7683
7684fi
7685rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
7686 conftest.$ac_objext conftest.beam conftest.$ac_ext
7687fi
7688
7689
7690# Checks for libraries.
7691ac_fn_c_check_func "$LINENO" "yp_match" "ac_cv_func_yp_match"
7692if test "x$ac_cv_func_yp_match" = xyes; then :
7693
7694else
7695 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for yp_match in -lnsl" >&5
7696$as_echo_n "checking for yp_match in -lnsl... " >&6; }
7697if ${ac_cv_lib_nsl_yp_match+:} false; then :
7698 $as_echo_n "(cached) " >&6
7699else
7700 ac_check_lib_save_LIBS=$LIBS
7701LIBS="-lnsl $LIBS"
7702cat confdefs.h - <<_ACEOF >conftest.$ac_ext
7703/* end confdefs.h. */
7704
7705/* Override any GCC internal prototype to avoid an error.
7706 Use char because int might match the return type of a GCC
7707 builtin and then its argument prototype would still apply. */
7708#ifdef __cplusplus
7709extern "C"
7710#endif
7711char yp_match ();
7712int
7713main ()
7714{
7715return yp_match ();
7716 ;
7717 return 0;
7718}
7719_ACEOF
7720if ac_fn_c_try_link "$LINENO"; then :
7721 ac_cv_lib_nsl_yp_match=yes
7722else
7723 ac_cv_lib_nsl_yp_match=no
7724fi
7725rm -f core conftest.err conftest.$ac_objext \
7726 conftest$ac_exeext conftest.$ac_ext
7727LIBS=$ac_check_lib_save_LIBS
7728fi
7729{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_nsl_yp_match" >&5
7730$as_echo "$ac_cv_lib_nsl_yp_match" >&6; }
7731if test "x$ac_cv_lib_nsl_yp_match" = xyes; then :
7732 cat >>confdefs.h <<_ACEOF
7733#define HAVE_LIBNSL 1
7734_ACEOF
7735
7736 LIBS="-lnsl $LIBS"
7737
7738fi
7739
7740fi
7741
7742ac_fn_c_check_func "$LINENO" "setsockopt" "ac_cv_func_setsockopt"
7743if test "x$ac_cv_func_setsockopt" = xyes; then :
7744
7745else
7746 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for setsockopt in -lsocket" >&5
7747$as_echo_n "checking for setsockopt in -lsocket... " >&6; }
7748if ${ac_cv_lib_socket_setsockopt+:} false; then :
7749 $as_echo_n "(cached) " >&6
7750else
7751 ac_check_lib_save_LIBS=$LIBS
7752LIBS="-lsocket $LIBS"
7753cat confdefs.h - <<_ACEOF >conftest.$ac_ext
7754/* end confdefs.h. */
7755
7756/* Override any GCC internal prototype to avoid an error.
7757 Use char because int might match the return type of a GCC
7758 builtin and then its argument prototype would still apply. */
7759#ifdef __cplusplus
7760extern "C"
7761#endif
7762char setsockopt ();
7763int
7764main ()
7765{
7766return setsockopt ();
7767 ;
7768 return 0;
7769}
7770_ACEOF
7771if ac_fn_c_try_link "$LINENO"; then :
7772 ac_cv_lib_socket_setsockopt=yes
7773else
7774 ac_cv_lib_socket_setsockopt=no
7775fi
7776rm -f core conftest.err conftest.$ac_objext \
7777 conftest$ac_exeext conftest.$ac_ext
7778LIBS=$ac_check_lib_save_LIBS
7779fi
7780{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_socket_setsockopt" >&5
7781$as_echo "$ac_cv_lib_socket_setsockopt" >&6; }
7782if test "x$ac_cv_lib_socket_setsockopt" = xyes; then :
7783 cat >>confdefs.h <<_ACEOF
7784#define HAVE_LIBSOCKET 1
7785_ACEOF
7786
7787 LIBS="-lsocket $LIBS"
7788
7789fi
7790
7791fi
7792
7793
7794for ac_func in dirname
7795do :
7796 ac_fn_c_check_func "$LINENO" "dirname" "ac_cv_func_dirname"
7797if test "x$ac_cv_func_dirname" = xyes; then :
7798 cat >>confdefs.h <<_ACEOF
7799#define HAVE_DIRNAME 1
7800_ACEOF
7801 for ac_header in libgen.h
7802do :
7803 ac_fn_c_check_header_mongrel "$LINENO" "libgen.h" "ac_cv_header_libgen_h" "$ac_includes_default"
7804if test "x$ac_cv_header_libgen_h" = xyes; then :
7805 cat >>confdefs.h <<_ACEOF
7806#define HAVE_LIBGEN_H 1
7807_ACEOF
7808
7809fi
7810
7811done
7812
7813else
7814
7815 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for dirname in -lgen" >&5
7816$as_echo_n "checking for dirname in -lgen... " >&6; }
7817if ${ac_cv_lib_gen_dirname+:} false; then :
7818 $as_echo_n "(cached) " >&6
7819else
7820 ac_check_lib_save_LIBS=$LIBS
7821LIBS="-lgen $LIBS"
7822cat confdefs.h - <<_ACEOF >conftest.$ac_ext
7823/* end confdefs.h. */
7824
7825/* Override any GCC internal prototype to avoid an error.
7826 Use char because int might match the return type of a GCC
7827 builtin and then its argument prototype would still apply. */
7828#ifdef __cplusplus
7829extern "C"
7830#endif
7831char dirname ();
7832int
7833main ()
7834{
7835return dirname ();
7836 ;
7837 return 0;
7838}
7839_ACEOF
7840if ac_fn_c_try_link "$LINENO"; then :
7841 ac_cv_lib_gen_dirname=yes
7842else
7843 ac_cv_lib_gen_dirname=no
7844fi
7845rm -f core conftest.err conftest.$ac_objext \
7846 conftest$ac_exeext conftest.$ac_ext
7847LIBS=$ac_check_lib_save_LIBS
7848fi
7849{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_gen_dirname" >&5
7850$as_echo "$ac_cv_lib_gen_dirname" >&6; }
7851if test "x$ac_cv_lib_gen_dirname" = xyes; then :
7852
7853 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for broken dirname" >&5
7854$as_echo_n "checking for broken dirname... " >&6; }
7855if ${ac_cv_have_broken_dirname+:} false; then :
7856 $as_echo_n "(cached) " >&6
7857else
7858
7859 save_LIBS="$LIBS"
7860 LIBS="$LIBS -lgen"
7861 if test "$cross_compiling" = yes; then :
7862 ac_cv_have_broken_dirname="no"
7863else
7864 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
7865/* end confdefs.h. */
7866
7867#include <libgen.h>
7868#include <string.h>
7869
7870int main(int argc, char **argv) {
7871 char *s, buf[32];
7872
7873 strncpy(buf,"/etc", 32);
7874 s = dirname(buf);
7875 if (!s || strncmp(s, "/", 32) != 0) {
7876 exit(1);
7877 } else {
7878 exit(0);
7879 }
7880}
7881
7882_ACEOF
7883if ac_fn_c_try_run "$LINENO"; then :
7884 ac_cv_have_broken_dirname="no"
7885else
7886 ac_cv_have_broken_dirname="yes"
7887fi
7888rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
7889 conftest.$ac_objext conftest.beam conftest.$ac_ext
7890fi
7891
7892 LIBS="$save_LIBS"
7893
7894fi
7895{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_broken_dirname" >&5
7896$as_echo "$ac_cv_have_broken_dirname" >&6; }
7897 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
7898 LIBS="$LIBS -lgen"
7899 $as_echo "#define HAVE_DIRNAME 1" >>confdefs.h
7900
7901 for ac_header in libgen.h
7902do :
7903 ac_fn_c_check_header_mongrel "$LINENO" "libgen.h" "ac_cv_header_libgen_h" "$ac_includes_default"
7904if test "x$ac_cv_header_libgen_h" = xyes; then :
7905 cat >>confdefs.h <<_ACEOF
7906#define HAVE_LIBGEN_H 1
7907_ACEOF
7908
7909fi
7910
7911done
7912
7913 fi
7914
7915fi
7916
7917
7918fi
7919done
7920
7921
7922ac_fn_c_check_func "$LINENO" "getspnam" "ac_cv_func_getspnam"
7923if test "x$ac_cv_func_getspnam" = xyes; then :
7924
7925else
7926 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for getspnam in -lgen" >&5
7927$as_echo_n "checking for getspnam in -lgen... " >&6; }
7928if ${ac_cv_lib_gen_getspnam+:} false; then :
7929 $as_echo_n "(cached) " >&6
7930else
7931 ac_check_lib_save_LIBS=$LIBS
7932LIBS="-lgen $LIBS"
7933cat confdefs.h - <<_ACEOF >conftest.$ac_ext
7934/* end confdefs.h. */
7935
7936/* Override any GCC internal prototype to avoid an error.
7937 Use char because int might match the return type of a GCC
7938 builtin and then its argument prototype would still apply. */
7939#ifdef __cplusplus
7940extern "C"
7941#endif
7942char getspnam ();
7943int
7944main ()
7945{
7946return getspnam ();
7947 ;
7948 return 0;
7949}
7950_ACEOF
7951if ac_fn_c_try_link "$LINENO"; then :
7952 ac_cv_lib_gen_getspnam=yes
7953else
7954 ac_cv_lib_gen_getspnam=no
7955fi
7956rm -f core conftest.err conftest.$ac_objext \
7957 conftest$ac_exeext conftest.$ac_ext
7958LIBS=$ac_check_lib_save_LIBS
7959fi
7960{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_gen_getspnam" >&5
7961$as_echo "$ac_cv_lib_gen_getspnam" >&6; }
7962if test "x$ac_cv_lib_gen_getspnam" = xyes; then :
7963 LIBS="$LIBS -lgen"
7964fi
7965
7966fi
7967
7968{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing basename" >&5
7969$as_echo_n "checking for library containing basename... " >&6; }
7970if ${ac_cv_search_basename+:} false; then :
7971 $as_echo_n "(cached) " >&6
7972else
7973 ac_func_search_save_LIBS=$LIBS
7974cat confdefs.h - <<_ACEOF >conftest.$ac_ext
7975/* end confdefs.h. */
7976
7977/* Override any GCC internal prototype to avoid an error.
7978 Use char because int might match the return type of a GCC
7979 builtin and then its argument prototype would still apply. */
7980#ifdef __cplusplus
7981extern "C"
7982#endif
7983char basename ();
7984int
7985main ()
7986{
7987return basename ();
7988 ;
7989 return 0;
7990}
7991_ACEOF
7992for ac_lib in '' gen; do
7993 if test -z "$ac_lib"; then
7994 ac_res="none required"
7995 else
7996 ac_res=-l$ac_lib
7997 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
7998 fi
7999 if ac_fn_c_try_link "$LINENO"; then :
8000 ac_cv_search_basename=$ac_res
8001fi
8002rm -f core conftest.err conftest.$ac_objext \
8003 conftest$ac_exeext
8004 if ${ac_cv_search_basename+:} false; then :
8005 break
8006fi
8007done
8008if ${ac_cv_search_basename+:} false; then :
8009
8010else
8011 ac_cv_search_basename=no
8012fi
8013rm conftest.$ac_ext
8014LIBS=$ac_func_search_save_LIBS
8015fi
8016{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_basename" >&5
8017$as_echo "$ac_cv_search_basename" >&6; }
8018ac_res=$ac_cv_search_basename
8019if test "$ac_res" != no; then :
8020 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
8021
8022$as_echo "#define HAVE_BASENAME 1" >>confdefs.h
8023
8024fi
8025
8026
8027
8028# Check whether --with-zlib was given.
8029if test "${with_zlib+set}" = set; then :
8030 withval=$with_zlib; if test "x$withval" = "xno" ; then
8031 as_fn_error $? "*** zlib is required ***" "$LINENO" 5
8032 elif test "x$withval" != "xyes"; then
8033 if test -d "$withval/lib"; then
8034 if test -n "${need_dash_r}"; then
8035 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
8036 else
8037 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
8038 fi
8039 else
8040 if test -n "${need_dash_r}"; then
8041 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
8042 else
8043 LDFLAGS="-L${withval} ${LDFLAGS}"
8044 fi
8045 fi
8046 if test -d "$withval/include"; then
8047 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
8048 else
8049 CPPFLAGS="-I${withval} ${CPPFLAGS}"
8050 fi
8051 fi
8052
8053fi
8054
8055
8056ac_fn_c_check_header_mongrel "$LINENO" "zlib.h" "ac_cv_header_zlib_h" "$ac_includes_default"
8057if test "x$ac_cv_header_zlib_h" = xyes; then :
8058
8059else
8060 as_fn_error $? "*** zlib.h missing - please install first or check config.log ***" "$LINENO" 5
8061fi
8062
8063
8064{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for deflate in -lz" >&5
8065$as_echo_n "checking for deflate in -lz... " >&6; }
8066if ${ac_cv_lib_z_deflate+:} false; then :
8067 $as_echo_n "(cached) " >&6
8068else
8069 ac_check_lib_save_LIBS=$LIBS
8070LIBS="-lz $LIBS"
8071cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8072/* end confdefs.h. */
8073
8074/* Override any GCC internal prototype to avoid an error.
8075 Use char because int might match the return type of a GCC
8076 builtin and then its argument prototype would still apply. */
8077#ifdef __cplusplus
8078extern "C"
8079#endif
8080char deflate ();
8081int
8082main ()
8083{
8084return deflate ();
8085 ;
8086 return 0;
8087}
8088_ACEOF
8089if ac_fn_c_try_link "$LINENO"; then :
8090 ac_cv_lib_z_deflate=yes
8091else
8092 ac_cv_lib_z_deflate=no
8093fi
8094rm -f core conftest.err conftest.$ac_objext \
8095 conftest$ac_exeext conftest.$ac_ext
8096LIBS=$ac_check_lib_save_LIBS
8097fi
8098{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_z_deflate" >&5
8099$as_echo "$ac_cv_lib_z_deflate" >&6; }
8100if test "x$ac_cv_lib_z_deflate" = xyes; then :
8101 cat >>confdefs.h <<_ACEOF
8102#define HAVE_LIBZ 1
8103_ACEOF
8104
8105 LIBS="-lz $LIBS"
8106
8107else
8108
8109 saved_CPPFLAGS="$CPPFLAGS"
8110 saved_LDFLAGS="$LDFLAGS"
8111 save_LIBS="$LIBS"
8112 if test -n "${need_dash_r}"; then
8113 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
8114 else
8115 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
8116 fi
8117 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
8118 LIBS="$LIBS -lz"
8119 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8120/* end confdefs.h. */
8121
8122/* Override any GCC internal prototype to avoid an error.
8123 Use char because int might match the return type of a GCC
8124 builtin and then its argument prototype would still apply. */
8125#ifdef __cplusplus
8126extern "C"
8127#endif
8128char deflate ();
8129int
8130main ()
8131{
8132return deflate ();
8133 ;
8134 return 0;
8135}
8136_ACEOF
8137if ac_fn_c_try_link "$LINENO"; then :
8138 $as_echo "#define HAVE_LIBZ 1" >>confdefs.h
8139
8140else
8141
8142 as_fn_error $? "*** zlib missing - please install first or check config.log ***" "$LINENO" 5
8143
8144
8145fi
8146rm -f core conftest.err conftest.$ac_objext \
8147 conftest$ac_exeext conftest.$ac_ext
8148
8149
8150fi
8151
8152
8153
8154# Check whether --with-zlib-version-check was given.
8155if test "${with_zlib_version_check+set}" = set; then :
8156 withval=$with_zlib_version_check; if test "x$withval" = "xno" ; then
8157 zlib_check_nonfatal=1
8158 fi
8159
8160
8161fi
8162
8163
8164{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for possibly buggy zlib" >&5
8165$as_echo_n "checking for possibly buggy zlib... " >&6; }
8166if test "$cross_compiling" = yes; then :
8167 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking zlib version" >&5
8168$as_echo "$as_me: WARNING: cross compiling: not checking zlib version" >&2;}
8169
8170else
8171 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8172/* end confdefs.h. */
8173
8174#include <stdio.h>
8175#include <zlib.h>
8176
8177int
8178main ()
8179{
8180
8181 int a=0, b=0, c=0, d=0, n, v;
8182 n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
8183 if (n != 3 && n != 4)
8184 exit(1);
8185 v = a*1000000 + b*10000 + c*100 + d;
8186 fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
8187
8188 /* 1.1.4 is OK */
8189 if (a == 1 && b == 1 && c >= 4)
8190 exit(0);
8191
8192 /* 1.2.3 and up are OK */
8193 if (v >= 1020300)
8194 exit(0);
8195
8196 exit(2);
8197
8198 ;
8199 return 0;
8200}
8201_ACEOF
8202if ac_fn_c_try_run "$LINENO"; then :
8203 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
8204$as_echo "no" >&6; }
8205else
8206 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
8207$as_echo "yes" >&6; }
8208 if test -z "$zlib_check_nonfatal" ; then
8209 as_fn_error $? "*** zlib too old - check config.log ***
8210Your reported zlib version has known security problems. It's possible your
8211vendor has fixed these problems without changing the version number. If you
8212are sure this is the case, you can disable the check by running
8213\"./configure --without-zlib-version-check\".
8214If you are in doubt, upgrade zlib to version 1.2.3 or greater.
8215See http://www.gzip.org/zlib/ for details." "$LINENO" 5
8216 else
8217 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: zlib version may have security problems" >&5
8218$as_echo "$as_me: WARNING: zlib version may have security problems" >&2;}
8219 fi
8220
8221fi
8222rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
8223 conftest.$ac_objext conftest.beam conftest.$ac_ext
8224fi
8225
8226
8227ac_fn_c_check_func "$LINENO" "strcasecmp" "ac_cv_func_strcasecmp"
8228if test "x$ac_cv_func_strcasecmp" = xyes; then :
8229
8230else
8231 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for strcasecmp in -lresolv" >&5
8232$as_echo_n "checking for strcasecmp in -lresolv... " >&6; }
8233if ${ac_cv_lib_resolv_strcasecmp+:} false; then :
8234 $as_echo_n "(cached) " >&6
8235else
8236 ac_check_lib_save_LIBS=$LIBS
8237LIBS="-lresolv $LIBS"
8238cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8239/* end confdefs.h. */
8240
8241/* Override any GCC internal prototype to avoid an error.
8242 Use char because int might match the return type of a GCC
8243 builtin and then its argument prototype would still apply. */
8244#ifdef __cplusplus
8245extern "C"
8246#endif
8247char strcasecmp ();
8248int
8249main ()
8250{
8251return strcasecmp ();
8252 ;
8253 return 0;
8254}
8255_ACEOF
8256if ac_fn_c_try_link "$LINENO"; then :
8257 ac_cv_lib_resolv_strcasecmp=yes
8258else
8259 ac_cv_lib_resolv_strcasecmp=no
8260fi
8261rm -f core conftest.err conftest.$ac_objext \
8262 conftest$ac_exeext conftest.$ac_ext
8263LIBS=$ac_check_lib_save_LIBS
8264fi
8265{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_resolv_strcasecmp" >&5
8266$as_echo "$ac_cv_lib_resolv_strcasecmp" >&6; }
8267if test "x$ac_cv_lib_resolv_strcasecmp" = xyes; then :
8268 LIBS="$LIBS -lresolv"
8269fi
8270
8271
8272fi
8273
8274for ac_func in utimes
8275do :
8276 ac_fn_c_check_func "$LINENO" "utimes" "ac_cv_func_utimes"
8277if test "x$ac_cv_func_utimes" = xyes; then :
8278 cat >>confdefs.h <<_ACEOF
8279#define HAVE_UTIMES 1
8280_ACEOF
8281
8282else
8283 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for utimes in -lc89" >&5
8284$as_echo_n "checking for utimes in -lc89... " >&6; }
8285if ${ac_cv_lib_c89_utimes+:} false; then :
8286 $as_echo_n "(cached) " >&6
8287else
8288 ac_check_lib_save_LIBS=$LIBS
8289LIBS="-lc89 $LIBS"
8290cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8291/* end confdefs.h. */
8292
8293/* Override any GCC internal prototype to avoid an error.
8294 Use char because int might match the return type of a GCC
8295 builtin and then its argument prototype would still apply. */
8296#ifdef __cplusplus
8297extern "C"
8298#endif
8299char utimes ();
8300int
8301main ()
8302{
8303return utimes ();
8304 ;
8305 return 0;
8306}
8307_ACEOF
8308if ac_fn_c_try_link "$LINENO"; then :
8309 ac_cv_lib_c89_utimes=yes
8310else
8311 ac_cv_lib_c89_utimes=no
8312fi
8313rm -f core conftest.err conftest.$ac_objext \
8314 conftest$ac_exeext conftest.$ac_ext
8315LIBS=$ac_check_lib_save_LIBS
8316fi
8317{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_c89_utimes" >&5
8318$as_echo "$ac_cv_lib_c89_utimes" >&6; }
8319if test "x$ac_cv_lib_c89_utimes" = xyes; then :
8320 $as_echo "#define HAVE_UTIMES 1" >>confdefs.h
8321
8322 LIBS="$LIBS -lc89"
8323fi
8324
8325
8326fi
8327done
8328
8329
8330for ac_header in bsd/libutil.h libutil.h
8331do :
8332 as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
8333ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
8334if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
8335 cat >>confdefs.h <<_ACEOF
8336#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
8337_ACEOF
8338
8339fi
8340
8341done
8342
8343{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing fmt_scaled" >&5
8344$as_echo_n "checking for library containing fmt_scaled... " >&6; }
8345if ${ac_cv_search_fmt_scaled+:} false; then :
8346 $as_echo_n "(cached) " >&6
8347else
8348 ac_func_search_save_LIBS=$LIBS
8349cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8350/* end confdefs.h. */
8351
8352/* Override any GCC internal prototype to avoid an error.
8353 Use char because int might match the return type of a GCC
8354 builtin and then its argument prototype would still apply. */
8355#ifdef __cplusplus
8356extern "C"
8357#endif
8358char fmt_scaled ();
8359int
8360main ()
8361{
8362return fmt_scaled ();
8363 ;
8364 return 0;
8365}
8366_ACEOF
8367for ac_lib in '' util bsd; do
8368 if test -z "$ac_lib"; then
8369 ac_res="none required"
8370 else
8371 ac_res=-l$ac_lib
8372 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
8373 fi
8374 if ac_fn_c_try_link "$LINENO"; then :
8375 ac_cv_search_fmt_scaled=$ac_res
8376fi
8377rm -f core conftest.err conftest.$ac_objext \
8378 conftest$ac_exeext
8379 if ${ac_cv_search_fmt_scaled+:} false; then :
8380 break
8381fi
8382done
8383if ${ac_cv_search_fmt_scaled+:} false; then :
8384
8385else
8386 ac_cv_search_fmt_scaled=no
8387fi
8388rm conftest.$ac_ext
8389LIBS=$ac_func_search_save_LIBS
8390fi
8391{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_fmt_scaled" >&5
8392$as_echo "$ac_cv_search_fmt_scaled" >&6; }
8393ac_res=$ac_cv_search_fmt_scaled
8394if test "$ac_res" != no; then :
8395 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
8396
8397fi
8398
8399{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing login" >&5
8400$as_echo_n "checking for library containing login... " >&6; }
8401if ${ac_cv_search_login+:} false; then :
8402 $as_echo_n "(cached) " >&6
8403else
8404 ac_func_search_save_LIBS=$LIBS
8405cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8406/* end confdefs.h. */
8407
8408/* Override any GCC internal prototype to avoid an error.
8409 Use char because int might match the return type of a GCC
8410 builtin and then its argument prototype would still apply. */
8411#ifdef __cplusplus
8412extern "C"
8413#endif
8414char login ();
8415int
8416main ()
8417{
8418return login ();
8419 ;
8420 return 0;
8421}
8422_ACEOF
8423for ac_lib in '' util bsd; do
8424 if test -z "$ac_lib"; then
8425 ac_res="none required"
8426 else
8427 ac_res=-l$ac_lib
8428 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
8429 fi
8430 if ac_fn_c_try_link "$LINENO"; then :
8431 ac_cv_search_login=$ac_res
8432fi
8433rm -f core conftest.err conftest.$ac_objext \
8434 conftest$ac_exeext
8435 if ${ac_cv_search_login+:} false; then :
8436 break
8437fi
8438done
8439if ${ac_cv_search_login+:} false; then :
8440
8441else
8442 ac_cv_search_login=no
8443fi
8444rm conftest.$ac_ext
8445LIBS=$ac_func_search_save_LIBS
8446fi
8447{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_login" >&5
8448$as_echo "$ac_cv_search_login" >&6; }
8449ac_res=$ac_cv_search_login
8450if test "$ac_res" != no; then :
8451 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
8452
8453fi
8454
8455{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing logout" >&5
8456$as_echo_n "checking for library containing logout... " >&6; }
8457if ${ac_cv_search_logout+:} false; then :
8458 $as_echo_n "(cached) " >&6
8459else
8460 ac_func_search_save_LIBS=$LIBS
8461cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8462/* end confdefs.h. */
8463
8464/* Override any GCC internal prototype to avoid an error.
8465 Use char because int might match the return type of a GCC
8466 builtin and then its argument prototype would still apply. */
8467#ifdef __cplusplus
8468extern "C"
8469#endif
8470char logout ();
8471int
8472main ()
8473{
8474return logout ();
8475 ;
8476 return 0;
8477}
8478_ACEOF
8479for ac_lib in '' util bsd; do
8480 if test -z "$ac_lib"; then
8481 ac_res="none required"
8482 else
8483 ac_res=-l$ac_lib
8484 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
8485 fi
8486 if ac_fn_c_try_link "$LINENO"; then :
8487 ac_cv_search_logout=$ac_res
8488fi
8489rm -f core conftest.err conftest.$ac_objext \
8490 conftest$ac_exeext
8491 if ${ac_cv_search_logout+:} false; then :
8492 break
8493fi
8494done
8495if ${ac_cv_search_logout+:} false; then :
8496
8497else
8498 ac_cv_search_logout=no
8499fi
8500rm conftest.$ac_ext
8501LIBS=$ac_func_search_save_LIBS
8502fi
8503{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_logout" >&5
8504$as_echo "$ac_cv_search_logout" >&6; }
8505ac_res=$ac_cv_search_logout
8506if test "$ac_res" != no; then :
8507 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
8508
8509fi
8510
8511{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing logwtmp" >&5
8512$as_echo_n "checking for library containing logwtmp... " >&6; }
8513if ${ac_cv_search_logwtmp+:} false; then :
8514 $as_echo_n "(cached) " >&6
8515else
8516 ac_func_search_save_LIBS=$LIBS
8517cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8518/* end confdefs.h. */
8519
8520/* Override any GCC internal prototype to avoid an error.
8521 Use char because int might match the return type of a GCC
8522 builtin and then its argument prototype would still apply. */
8523#ifdef __cplusplus
8524extern "C"
8525#endif
8526char logwtmp ();
8527int
8528main ()
8529{
8530return logwtmp ();
8531 ;
8532 return 0;
8533}
8534_ACEOF
8535for ac_lib in '' util bsd; do
8536 if test -z "$ac_lib"; then
8537 ac_res="none required"
8538 else
8539 ac_res=-l$ac_lib
8540 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
8541 fi
8542 if ac_fn_c_try_link "$LINENO"; then :
8543 ac_cv_search_logwtmp=$ac_res
8544fi
8545rm -f core conftest.err conftest.$ac_objext \
8546 conftest$ac_exeext
8547 if ${ac_cv_search_logwtmp+:} false; then :
8548 break
8549fi
8550done
8551if ${ac_cv_search_logwtmp+:} false; then :
8552
8553else
8554 ac_cv_search_logwtmp=no
8555fi
8556rm conftest.$ac_ext
8557LIBS=$ac_func_search_save_LIBS
8558fi
8559{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_logwtmp" >&5
8560$as_echo "$ac_cv_search_logwtmp" >&6; }
8561ac_res=$ac_cv_search_logwtmp
8562if test "$ac_res" != no; then :
8563 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
8564
8565fi
8566
8567{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing openpty" >&5
8568$as_echo_n "checking for library containing openpty... " >&6; }
8569if ${ac_cv_search_openpty+:} false; then :
8570 $as_echo_n "(cached) " >&6
8571else
8572 ac_func_search_save_LIBS=$LIBS
8573cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8574/* end confdefs.h. */
8575
8576/* Override any GCC internal prototype to avoid an error.
8577 Use char because int might match the return type of a GCC
8578 builtin and then its argument prototype would still apply. */
8579#ifdef __cplusplus
8580extern "C"
8581#endif
8582char openpty ();
8583int
8584main ()
8585{
8586return openpty ();
8587 ;
8588 return 0;
8589}
8590_ACEOF
8591for ac_lib in '' util bsd; do
8592 if test -z "$ac_lib"; then
8593 ac_res="none required"
8594 else
8595 ac_res=-l$ac_lib
8596 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
8597 fi
8598 if ac_fn_c_try_link "$LINENO"; then :
8599 ac_cv_search_openpty=$ac_res
8600fi
8601rm -f core conftest.err conftest.$ac_objext \
8602 conftest$ac_exeext
8603 if ${ac_cv_search_openpty+:} false; then :
8604 break
8605fi
8606done
8607if ${ac_cv_search_openpty+:} false; then :
8608
8609else
8610 ac_cv_search_openpty=no
8611fi
8612rm conftest.$ac_ext
8613LIBS=$ac_func_search_save_LIBS
8614fi
8615{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_openpty" >&5
8616$as_echo "$ac_cv_search_openpty" >&6; }
8617ac_res=$ac_cv_search_openpty
8618if test "$ac_res" != no; then :
8619 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
8620
8621fi
8622
8623{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing updwtmp" >&5
8624$as_echo_n "checking for library containing updwtmp... " >&6; }
8625if ${ac_cv_search_updwtmp+:} false; then :
8626 $as_echo_n "(cached) " >&6
8627else
8628 ac_func_search_save_LIBS=$LIBS
8629cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8630/* end confdefs.h. */
8631
8632/* Override any GCC internal prototype to avoid an error.
8633 Use char because int might match the return type of a GCC
8634 builtin and then its argument prototype would still apply. */
8635#ifdef __cplusplus
8636extern "C"
8637#endif
8638char updwtmp ();
8639int
8640main ()
8641{
8642return updwtmp ();
8643 ;
8644 return 0;
8645}
8646_ACEOF
8647for ac_lib in '' util bsd; do
8648 if test -z "$ac_lib"; then
8649 ac_res="none required"
8650 else
8651 ac_res=-l$ac_lib
8652 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
8653 fi
8654 if ac_fn_c_try_link "$LINENO"; then :
8655 ac_cv_search_updwtmp=$ac_res
8656fi
8657rm -f core conftest.err conftest.$ac_objext \
8658 conftest$ac_exeext
8659 if ${ac_cv_search_updwtmp+:} false; then :
8660 break
8661fi
8662done
8663if ${ac_cv_search_updwtmp+:} false; then :
8664
8665else
8666 ac_cv_search_updwtmp=no
8667fi
8668rm conftest.$ac_ext
8669LIBS=$ac_func_search_save_LIBS
8670fi
8671{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_updwtmp" >&5
8672$as_echo "$ac_cv_search_updwtmp" >&6; }
8673ac_res=$ac_cv_search_updwtmp
8674if test "$ac_res" != no; then :
8675 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
8676
8677fi
8678
8679for ac_func in fmt_scaled login logout openpty updwtmp logwtmp
8680do :
8681 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
8682ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
8683if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
8684 cat >>confdefs.h <<_ACEOF
8685#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
8686_ACEOF
8687
8688fi
8689done
8690
8691
8692for ac_func in strftime
8693do :
8694 ac_fn_c_check_func "$LINENO" "strftime" "ac_cv_func_strftime"
8695if test "x$ac_cv_func_strftime" = xyes; then :
8696 cat >>confdefs.h <<_ACEOF
8697#define HAVE_STRFTIME 1
8698_ACEOF
8699
8700else
8701 # strftime is in -lintl on SCO UNIX.
8702{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for strftime in -lintl" >&5
8703$as_echo_n "checking for strftime in -lintl... " >&6; }
8704if ${ac_cv_lib_intl_strftime+:} false; then :
8705 $as_echo_n "(cached) " >&6
8706else
8707 ac_check_lib_save_LIBS=$LIBS
8708LIBS="-lintl $LIBS"
8709cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8710/* end confdefs.h. */
8711
8712/* Override any GCC internal prototype to avoid an error.
8713 Use char because int might match the return type of a GCC
8714 builtin and then its argument prototype would still apply. */
8715#ifdef __cplusplus
8716extern "C"
8717#endif
8718char strftime ();
8719int
8720main ()
8721{
8722return strftime ();
8723 ;
8724 return 0;
8725}
8726_ACEOF
8727if ac_fn_c_try_link "$LINENO"; then :
8728 ac_cv_lib_intl_strftime=yes
8729else
8730 ac_cv_lib_intl_strftime=no
8731fi
8732rm -f core conftest.err conftest.$ac_objext \
8733 conftest$ac_exeext conftest.$ac_ext
8734LIBS=$ac_check_lib_save_LIBS
8735fi
8736{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_intl_strftime" >&5
8737$as_echo "$ac_cv_lib_intl_strftime" >&6; }
8738if test "x$ac_cv_lib_intl_strftime" = xyes; then :
8739 $as_echo "#define HAVE_STRFTIME 1" >>confdefs.h
8740
8741LIBS="-lintl $LIBS"
8742fi
8743
8744fi
8745done
8746
8747
8748# Check for ALTDIRFUNC glob() extension
8749{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for GLOB_ALTDIRFUNC support" >&5
8750$as_echo_n "checking for GLOB_ALTDIRFUNC support... " >&6; }
8751cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8752/* end confdefs.h. */
8753
8754 #include <glob.h>
8755 #ifdef GLOB_ALTDIRFUNC
8756 FOUNDIT
8757 #endif
8758
8759_ACEOF
8760if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
8761 $EGREP "FOUNDIT" >/dev/null 2>&1; then :
8762
8763
8764$as_echo "#define GLOB_HAS_ALTDIRFUNC 1" >>confdefs.h
8765
8766 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
8767$as_echo "yes" >&6; }
8768
8769else
8770
8771 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
8772$as_echo "no" >&6; }
8773
8774
8775fi
8776rm -f conftest*
8777
8778
8779# Check for g.gl_matchc glob() extension
8780{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for gl_matchc field in glob_t" >&5
8781$as_echo_n "checking for gl_matchc field in glob_t... " >&6; }
8782cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8783/* end confdefs.h. */
8784 #include <glob.h>
8785int
8786main ()
8787{
8788 glob_t g; g.gl_matchc = 1;
8789 ;
8790 return 0;
8791}
8792_ACEOF
8793if ac_fn_c_try_compile "$LINENO"; then :
8794
8795
8796$as_echo "#define GLOB_HAS_GL_MATCHC 1" >>confdefs.h
8797
8798 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
8799$as_echo "yes" >&6; }
8800
8801else
8802
8803 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
8804$as_echo "no" >&6; }
8805
8806fi
8807rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
8808
8809# Check for g.gl_statv glob() extension
8810{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for gl_statv and GLOB_KEEPSTAT extensions for glob" >&5
8811$as_echo_n "checking for gl_statv and GLOB_KEEPSTAT extensions for glob... " >&6; }
8812cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8813/* end confdefs.h. */
8814 #include <glob.h>
8815int
8816main ()
8817{
8818
8819#ifndef GLOB_KEEPSTAT
8820#error "glob does not support GLOB_KEEPSTAT extension"
8821#endif
8822glob_t g;
8823g.gl_statv = NULL;
8824
8825 ;
8826 return 0;
8827}
8828_ACEOF
8829if ac_fn_c_try_compile "$LINENO"; then :
8830
8831
8832$as_echo "#define GLOB_HAS_GL_STATV 1" >>confdefs.h
8833
8834 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
8835$as_echo "yes" >&6; }
8836
8837else
8838
8839 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
8840$as_echo "no" >&6; }
8841
8842
8843fi
8844rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
8845
8846ac_fn_c_check_decl "$LINENO" "GLOB_NOMATCH" "ac_cv_have_decl_GLOB_NOMATCH" "#include <glob.h>
8847"
8848if test "x$ac_cv_have_decl_GLOB_NOMATCH" = xyes; then :
8849 ac_have_decl=1
8850else
8851 ac_have_decl=0
8852fi
8853
8854cat >>confdefs.h <<_ACEOF
8855#define HAVE_DECL_GLOB_NOMATCH $ac_have_decl
8856_ACEOF
8857
8858
8859{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether struct dirent allocates space for d_name" >&5
8860$as_echo_n "checking whether struct dirent allocates space for d_name... " >&6; }
8861if test "$cross_compiling" = yes; then :
8862
8863 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME" >&5
8864$as_echo "$as_me: WARNING: cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME" >&2;}
8865 $as_echo "#define BROKEN_ONE_BYTE_DIRENT_D_NAME 1" >>confdefs.h
8866
8867
8868
8869else
8870 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8871/* end confdefs.h. */
8872
8873#include <sys/types.h>
8874#include <dirent.h>
8875int
8876main ()
8877{
8878
8879 struct dirent d;
8880 exit(sizeof(d.d_name)<=sizeof(char));
8881
8882 ;
8883 return 0;
8884}
8885_ACEOF
8886if ac_fn_c_try_run "$LINENO"; then :
8887 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
8888$as_echo "yes" >&6; }
8889else
8890
8891 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
8892$as_echo "no" >&6; }
8893
8894$as_echo "#define BROKEN_ONE_BYTE_DIRENT_D_NAME 1" >>confdefs.h
8895
8896
8897fi
8898rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
8899 conftest.$ac_objext conftest.beam conftest.$ac_ext
8900fi
8901
8902
8903{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for /proc/pid/fd directory" >&5
8904$as_echo_n "checking for /proc/pid/fd directory... " >&6; }
8905if test -d "/proc/$$/fd" ; then
8906
8907$as_echo "#define HAVE_PROC_PID 1" >>confdefs.h
8908
8909 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
8910$as_echo "yes" >&6; }
8911else
8912 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
8913$as_echo "no" >&6; }
8914fi
8915
8916# Check whether user wants S/Key support
8917SKEY_MSG="no"
8918
8919# Check whether --with-skey was given.
8920if test "${with_skey+set}" = set; then :
8921 withval=$with_skey;
8922 if test "x$withval" != "xno" ; then
8923
8924 if test "x$withval" != "xyes" ; then
8925 CPPFLAGS="$CPPFLAGS -I${withval}/include"
8926 LDFLAGS="$LDFLAGS -L${withval}/lib"
8927 fi
8928
8929
8930$as_echo "#define SKEY 1" >>confdefs.h
8931
8932 LIBS="-lskey $LIBS"
8933 SKEY_MSG="yes"
8934
8935 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for s/key support" >&5
8936$as_echo_n "checking for s/key support... " >&6; }
8937 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8938/* end confdefs.h. */
8939
8940#include <stdio.h>
8941#include <skey.h>
8942
8943int
8944main ()
8945{
8946
8947 char *ff = skey_keyinfo(""); ff="";
8948 exit(0);
8949
8950 ;
8951 return 0;
8952}
8953_ACEOF
8954if ac_fn_c_try_link "$LINENO"; then :
8955 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
8956$as_echo "yes" >&6; }
8957else
8958
8959 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
8960$as_echo "no" >&6; }
8961 as_fn_error $? "** Incomplete or missing s/key libraries." "$LINENO" 5
8962
8963fi
8964rm -f core conftest.err conftest.$ac_objext \
8965 conftest$ac_exeext conftest.$ac_ext
8966 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if skeychallenge takes 4 arguments" >&5
8967$as_echo_n "checking if skeychallenge takes 4 arguments... " >&6; }
8968 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8969/* end confdefs.h. */
8970
8971#include <stdio.h>
8972#include <skey.h>
8973
8974int
8975main ()
8976{
8977
8978 (void)skeychallenge(NULL,"name","",0);
8979
8980 ;
8981 return 0;
8982}
8983_ACEOF
8984if ac_fn_c_try_compile "$LINENO"; then :
8985
8986 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
8987$as_echo "yes" >&6; }
8988
8989$as_echo "#define SKEYCHALLENGE_4ARG 1" >>confdefs.h
8990
8991else
8992
8993 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
8994$as_echo "no" >&6; }
8995
8996fi
8997rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
8998 fi
8999
9000
9001fi
9002
9003
9004# Check whether user wants TCP wrappers support
9005TCPW_MSG="no"
9006
9007# Check whether --with-tcp-wrappers was given.
9008if test "${with_tcp_wrappers+set}" = set; then :
9009 withval=$with_tcp_wrappers;
9010 if test "x$withval" != "xno" ; then
9011 saved_LIBS="$LIBS"
9012 saved_LDFLAGS="$LDFLAGS"
9013 saved_CPPFLAGS="$CPPFLAGS"
9014 if test -n "${withval}" && \
9015 test "x${withval}" != "xyes"; then
9016 if test -d "${withval}/lib"; then
9017 if test -n "${need_dash_r}"; then
9018 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
9019 else
9020 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
9021 fi
9022 else
9023 if test -n "${need_dash_r}"; then
9024 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
9025 else
9026 LDFLAGS="-L${withval} ${LDFLAGS}"
9027 fi
9028 fi
9029 if test -d "${withval}/include"; then
9030 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
9031 else
9032 CPPFLAGS="-I${withval} ${CPPFLAGS}"
9033 fi
9034 fi
9035 LIBS="-lwrap $LIBS"
9036 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for libwrap" >&5
9037$as_echo_n "checking for libwrap... " >&6; }
9038 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
9039/* end confdefs.h. */
9040
9041#include <sys/types.h>
9042#include <sys/socket.h>
9043#include <netinet/in.h>
9044#include <tcpd.h>
9045int deny_severity = 0, allow_severity = 0;
9046
9047int
9048main ()
9049{
9050
9051 hosts_access(0);
9052
9053 ;
9054 return 0;
9055}
9056_ACEOF
9057if ac_fn_c_try_link "$LINENO"; then :
9058
9059 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
9060$as_echo "yes" >&6; }
9061
9062$as_echo "#define LIBWRAP 1" >>confdefs.h
9063
9064 SSHDLIBS="$SSHDLIBS -lwrap"
9065 TCPW_MSG="yes"
9066
9067else
9068
9069 as_fn_error $? "*** libwrap missing" "$LINENO" 5
9070
9071
9072fi
9073rm -f core conftest.err conftest.$ac_objext \
9074 conftest$ac_exeext conftest.$ac_ext
9075 LIBS="$saved_LIBS"
9076 fi
9077
9078
9079fi
9080
9081
9082# Check whether user wants to use ldns
9083LDNS_MSG="no"
9084
9085# Check whether --with-ldns was given.
9086if test "${with_ldns+set}" = set; then :
9087 withval=$with_ldns;
9088 if test "x$withval" != "xno" ; then
9089
9090 if test "x$withval" != "xyes" ; then
9091 CPPFLAGS="$CPPFLAGS -I${withval}/include"
9092 LDFLAGS="$LDFLAGS -L${withval}/lib"
9093 fi
9094
9095
9096$as_echo "#define HAVE_LDNS 1" >>confdefs.h
9097
9098 LIBS="-lldns $LIBS"
9099 LDNS_MSG="yes"
9100
9101 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ldns support" >&5
9102$as_echo_n "checking for ldns support... " >&6; }
9103 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
9104/* end confdefs.h. */
9105
9106#include <stdio.h>
9107#include <stdlib.h>
9108#include <stdint.h>
9109#include <ldns/ldns.h>
9110int main() { ldns_status status = ldns_verify_trusted(NULL, NULL, NULL, NULL); status=LDNS_STATUS_OK; exit(0); }
9111
9112
9113_ACEOF
9114if ac_fn_c_try_link "$LINENO"; then :
9115 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
9116$as_echo "yes" >&6; }
9117else
9118
9119 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
9120$as_echo "no" >&6; }
9121 as_fn_error $? "** Incomplete or missing ldns libraries." "$LINENO" 5
9122
9123fi
9124rm -f core conftest.err conftest.$ac_objext \
9125 conftest$ac_exeext conftest.$ac_ext
9126 fi
9127
9128
9129fi
9130
9131
9132# Check whether user wants libedit support
9133LIBEDIT_MSG="no"
9134
9135# Check whether --with-libedit was given.
9136if test "${with_libedit+set}" = set; then :
9137 withval=$with_libedit; if test "x$withval" != "xno" ; then
9138 if test "x$withval" = "xyes" ; then
9139 if test -n "$ac_tool_prefix"; then
9140 # Extract the first word of "${ac_tool_prefix}pkg-config", so it can be a program name with args.
9141set dummy ${ac_tool_prefix}pkg-config; ac_word=$2
9142{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
9143$as_echo_n "checking for $ac_word... " >&6; }
9144if ${ac_cv_path_PKGCONFIG+:} false; then :
9145 $as_echo_n "(cached) " >&6
9146else
9147 case $PKGCONFIG in
9148 [\\/]* | ?:[\\/]*)
9149 ac_cv_path_PKGCONFIG="$PKGCONFIG" # Let the user override the test with a path.
9150 ;;
9151 *)
9152 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
9153for as_dir in $PATH
9154do
9155 IFS=$as_save_IFS
9156 test -z "$as_dir" && as_dir=.
9157 for ac_exec_ext in '' $ac_executable_extensions; do
9158 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
9159 ac_cv_path_PKGCONFIG="$as_dir/$ac_word$ac_exec_ext"
9160 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
9161 break 2
9162 fi
9163done
9164 done
9165IFS=$as_save_IFS
9166
9167 ;;
9168esac
9169fi
9170PKGCONFIG=$ac_cv_path_PKGCONFIG
9171if test -n "$PKGCONFIG"; then
9172 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PKGCONFIG" >&5
9173$as_echo "$PKGCONFIG" >&6; }
9174else
9175 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
9176$as_echo "no" >&6; }
9177fi
9178
9179
9180fi
9181if test -z "$ac_cv_path_PKGCONFIG"; then
9182 ac_pt_PKGCONFIG=$PKGCONFIG
9183 # Extract the first word of "pkg-config", so it can be a program name with args.
9184set dummy pkg-config; ac_word=$2
9185{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
9186$as_echo_n "checking for $ac_word... " >&6; }
9187if ${ac_cv_path_ac_pt_PKGCONFIG+:} false; then :
9188 $as_echo_n "(cached) " >&6
9189else
9190 case $ac_pt_PKGCONFIG in
9191 [\\/]* | ?:[\\/]*)
9192 ac_cv_path_ac_pt_PKGCONFIG="$ac_pt_PKGCONFIG" # Let the user override the test with a path.
9193 ;;
9194 *)
9195 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
9196for as_dir in $PATH
9197do
9198 IFS=$as_save_IFS
9199 test -z "$as_dir" && as_dir=.
9200 for ac_exec_ext in '' $ac_executable_extensions; do
9201 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
9202 ac_cv_path_ac_pt_PKGCONFIG="$as_dir/$ac_word$ac_exec_ext"
9203 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
9204 break 2
9205 fi
9206done
9207 done
9208IFS=$as_save_IFS
9209
9210 ;;
9211esac
9212fi
9213ac_pt_PKGCONFIG=$ac_cv_path_ac_pt_PKGCONFIG
9214if test -n "$ac_pt_PKGCONFIG"; then
9215 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_pt_PKGCONFIG" >&5
9216$as_echo "$ac_pt_PKGCONFIG" >&6; }
9217else
9218 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
9219$as_echo "no" >&6; }
9220fi
9221
9222 if test "x$ac_pt_PKGCONFIG" = x; then
9223 PKGCONFIG="no"
9224 else
9225 case $cross_compiling:$ac_tool_warned in
9226yes:)
9227{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
9228$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
9229ac_tool_warned=yes ;;
9230esac
9231 PKGCONFIG=$ac_pt_PKGCONFIG
9232 fi
9233else
9234 PKGCONFIG="$ac_cv_path_PKGCONFIG"
9235fi
9236
9237 if test "x$PKGCONFIG" != "xno"; then
9238 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $PKGCONFIG knows about libedit" >&5
9239$as_echo_n "checking if $PKGCONFIG knows about libedit... " >&6; }
9240 if "$PKGCONFIG" libedit; then
9241 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
9242$as_echo "yes" >&6; }
9243 use_pkgconfig_for_libedit=yes
9244 else
9245 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
9246$as_echo "no" >&6; }
9247 fi
9248 fi
9249 else
9250 CPPFLAGS="$CPPFLAGS -I${withval}/include"
9251 if test -n "${need_dash_r}"; then
9252 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
9253 else
9254 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
9255 fi
9256 fi
9257 if test "x$use_pkgconfig_for_libedit" = "xyes"; then
9258 LIBEDIT=`$PKGCONFIG --libs-only-l libedit`
9259 CPPFLAGS="$CPPFLAGS `$PKGCONFIG --cflags libedit`"
9260 else
9261 LIBEDIT="-ledit -lcurses"
9262 fi
9263 OTHERLIBS=`echo $LIBEDIT | sed 's/-ledit//'`
9264 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for el_init in -ledit" >&5
9265$as_echo_n "checking for el_init in -ledit... " >&6; }
9266if ${ac_cv_lib_edit_el_init+:} false; then :
9267 $as_echo_n "(cached) " >&6
9268else
9269 ac_check_lib_save_LIBS=$LIBS
9270LIBS="-ledit $OTHERLIBS
9271 $LIBS"
9272cat confdefs.h - <<_ACEOF >conftest.$ac_ext
9273/* end confdefs.h. */
9274
9275/* Override any GCC internal prototype to avoid an error.
9276 Use char because int might match the return type of a GCC
9277 builtin and then its argument prototype would still apply. */
9278#ifdef __cplusplus
9279extern "C"
9280#endif
9281char el_init ();
9282int
9283main ()
9284{
9285return el_init ();
9286 ;
9287 return 0;
9288}
9289_ACEOF
9290if ac_fn_c_try_link "$LINENO"; then :
9291 ac_cv_lib_edit_el_init=yes
9292else
9293 ac_cv_lib_edit_el_init=no
9294fi
9295rm -f core conftest.err conftest.$ac_objext \
9296 conftest$ac_exeext conftest.$ac_ext
9297LIBS=$ac_check_lib_save_LIBS
9298fi
9299{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_edit_el_init" >&5
9300$as_echo "$ac_cv_lib_edit_el_init" >&6; }
9301if test "x$ac_cv_lib_edit_el_init" = xyes; then :
9302
9303$as_echo "#define USE_LIBEDIT 1" >>confdefs.h
9304
9305 LIBEDIT_MSG="yes"
9306
9307
9308else
9309 as_fn_error $? "libedit not found" "$LINENO" 5
9310fi
9311
9312 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if libedit version is compatible" >&5
9313$as_echo_n "checking if libedit version is compatible... " >&6; }
9314 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
9315/* end confdefs.h. */
9316 #include <histedit.h>
9317int
9318main ()
9319{
9320
9321 int i = H_SETSIZE;
9322 el_init("", NULL, NULL, NULL);
9323 exit(0);
9324
9325 ;
9326 return 0;
9327}
9328_ACEOF
9329if ac_fn_c_try_compile "$LINENO"; then :
9330 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
9331$as_echo "yes" >&6; }
9332else
9333 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
9334$as_echo "no" >&6; }
9335 as_fn_error $? "libedit version is not compatible" "$LINENO" 5
9336
9337fi
9338rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
9339 fi
9340
9341fi
9342
9343
9344AUDIT_MODULE=none
9345
9346# Check whether --with-audit was given.
9347if test "${with_audit+set}" = set; then :
9348 withval=$with_audit;
9349 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for supported audit module" >&5
9350$as_echo_n "checking for supported audit module... " >&6; }
9351 case "$withval" in
9352 bsm)
9353 { $as_echo "$as_me:${as_lineno-$LINENO}: result: bsm" >&5
9354$as_echo "bsm" >&6; }
9355 AUDIT_MODULE=bsm
9356 for ac_header in bsm/audit.h
9357do :
9358 ac_fn_c_check_header_compile "$LINENO" "bsm/audit.h" "ac_cv_header_bsm_audit_h" "
9359#ifdef HAVE_TIME_H
9360# include <time.h>
9361#endif
9362
9363
9364"
9365if test "x$ac_cv_header_bsm_audit_h" = xyes; then :
9366 cat >>confdefs.h <<_ACEOF
9367#define HAVE_BSM_AUDIT_H 1
9368_ACEOF
9369
9370else
9371 as_fn_error $? "BSM enabled and bsm/audit.h not found" "$LINENO" 5
9372fi
9373
9374done
9375
9376 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for getaudit in -lbsm" >&5
9377$as_echo_n "checking for getaudit in -lbsm... " >&6; }
9378if ${ac_cv_lib_bsm_getaudit+:} false; then :
9379 $as_echo_n "(cached) " >&6
9380else
9381 ac_check_lib_save_LIBS=$LIBS
9382LIBS="-lbsm $LIBS"
9383cat confdefs.h - <<_ACEOF >conftest.$ac_ext
9384/* end confdefs.h. */
9385
9386/* Override any GCC internal prototype to avoid an error.
9387 Use char because int might match the return type of a GCC
9388 builtin and then its argument prototype would still apply. */
9389#ifdef __cplusplus
9390extern "C"
9391#endif
9392char getaudit ();
9393int
9394main ()
9395{
9396return getaudit ();
9397 ;
9398 return 0;
9399}
9400_ACEOF
9401if ac_fn_c_try_link "$LINENO"; then :
9402 ac_cv_lib_bsm_getaudit=yes
9403else
9404 ac_cv_lib_bsm_getaudit=no
9405fi
9406rm -f core conftest.err conftest.$ac_objext \
9407 conftest$ac_exeext conftest.$ac_ext
9408LIBS=$ac_check_lib_save_LIBS
9409fi
9410{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_bsm_getaudit" >&5
9411$as_echo "$ac_cv_lib_bsm_getaudit" >&6; }
9412if test "x$ac_cv_lib_bsm_getaudit" = xyes; then :
9413 cat >>confdefs.h <<_ACEOF
9414#define HAVE_LIBBSM 1
9415_ACEOF
9416
9417 LIBS="-lbsm $LIBS"
9418
9419else
9420 as_fn_error $? "BSM enabled and required library not found" "$LINENO" 5
9421fi
9422
9423 for ac_func in getaudit
9424do :
9425 ac_fn_c_check_func "$LINENO" "getaudit" "ac_cv_func_getaudit"
9426if test "x$ac_cv_func_getaudit" = xyes; then :
9427 cat >>confdefs.h <<_ACEOF
9428#define HAVE_GETAUDIT 1
9429_ACEOF
9430
9431else
9432 as_fn_error $? "BSM enabled and required function not found" "$LINENO" 5
9433fi
9434done
9435
9436 # These are optional
9437 for ac_func in getaudit_addr aug_get_machine
9438do :
9439 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
9440ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
9441if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
9442 cat >>confdefs.h <<_ACEOF
9443#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
9444_ACEOF
9445
9446fi
9447done
9448
9449
9450$as_echo "#define USE_BSM_AUDIT 1" >>confdefs.h
9451
9452 if test "$sol2ver" -eq 11; then
9453 SSHDLIBS="$SSHDLIBS -lscf"
9454
9455$as_echo "#define BROKEN_BSM_API 1" >>confdefs.h
9456
9457 fi
9458 ;;
9459 linux)
9460 { $as_echo "$as_me:${as_lineno-$LINENO}: result: linux" >&5
9461$as_echo "linux" >&6; }
9462 AUDIT_MODULE=linux
9463 for ac_header in libaudit.h
9464do :
9465 ac_fn_c_check_header_mongrel "$LINENO" "libaudit.h" "ac_cv_header_libaudit_h" "$ac_includes_default"
9466if test "x$ac_cv_header_libaudit_h" = xyes; then :
9467 cat >>confdefs.h <<_ACEOF
9468#define HAVE_LIBAUDIT_H 1
9469_ACEOF
9470
9471fi
9472
9473done
9474
9475 SSHDLIBS="$SSHDLIBS -laudit"
9476
9477$as_echo "#define USE_LINUX_AUDIT 1" >>confdefs.h
9478
9479 ;;
9480 debug)
9481 AUDIT_MODULE=debug
9482 { $as_echo "$as_me:${as_lineno-$LINENO}: result: debug" >&5
9483$as_echo "debug" >&6; }
9484
9485$as_echo "#define SSH_AUDIT_EVENTS 1" >>confdefs.h
9486
9487 ;;
9488 no)
9489 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
9490$as_echo "no" >&6; }
9491 ;;
9492 *)
9493 as_fn_error $? "Unknown audit module $withval" "$LINENO" 5
9494 ;;
9495 esac
9496
9497fi
9498
9499
9500for ac_func in \
9501 arc4random \
9502 arc4random_buf \
9503 arc4random_uniform \
9504 asprintf \
9505 b64_ntop \
9506 __b64_ntop \
9507 b64_pton \
9508 __b64_pton \
9509 bcopy \
9510 bindresvport_sa \
9511 clock \
9512 closefrom \
9513 dirfd \
9514 fchmod \
9515 fchown \
9516 freeaddrinfo \
9517 fstatvfs \
9518 futimes \
9519 getaddrinfo \
9520 getcwd \
9521 getgrouplist \
9522 getnameinfo \
9523 getopt \
9524 getpeereid \
9525 getpeerucred \
9526 getpgid \
9527 getpgrp \
9528 _getpty \
9529 getrlimit \
9530 getttyent \
9531 glob \
9532 group_from_gid \
9533 inet_aton \
9534 inet_ntoa \
9535 inet_ntop \
9536 innetgr \
9537 login_getcapbool \
9538 md5_crypt \
9539 memmove \
9540 mkdtemp \
9541 mmap \
9542 ngetaddrinfo \
9543 nsleep \
9544 ogetaddrinfo \
9545 openlog_r \
9546 poll \
9547 prctl \
9548 pstat \
9549 readpassphrase \
9550 realpath \
9551 recvmsg \
9552 rresvport_af \
9553 sendmsg \
9554 setdtablesize \
9555 setegid \
9556 setenv \
9557 seteuid \
9558 setgroupent \
9559 setgroups \
9560 setlinebuf \
9561 setlogin \
9562 setpassent\
9563 setpcred \
9564 setproctitle \
9565 setregid \
9566 setreuid \
9567 setrlimit \
9568 setsid \
9569 setvbuf \
9570 sigaction \
9571 sigvec \
9572 snprintf \
9573 socketpair \
9574 statfs \
9575 statvfs \
9576 strdup \
9577 strerror \
9578 strlcat \
9579 strlcpy \
9580 strmode \
9581 strnlen \
9582 strnvis \
9583 strptime \
9584 strtonum \
9585 strtoll \
9586 strtoul \
9587 strtoull \
9588 swap32 \
9589 sysconf \
9590 tcgetpgrp \
9591 timingsafe_bcmp \
9592 truncate \
9593 unsetenv \
9594 updwtmpx \
9595 user_from_uid \
9596 usleep \
9597 vasprintf \
9598 vhangup \
9599 vsnprintf \
9600 waitpid \
9601
9602do :
9603 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
9604ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
9605if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
9606 cat >>confdefs.h <<_ACEOF
9607#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
9608_ACEOF
9609
9610fi
9611done
9612
9613
9614cat confdefs.h - <<_ACEOF >conftest.$ac_ext
9615/* end confdefs.h. */
9616 #include <ctype.h>
9617int
9618main ()
9619{
9620 return (isblank('a'));
9621 ;
9622 return 0;
9623}
9624_ACEOF
9625if ac_fn_c_try_link "$LINENO"; then :
9626
9627$as_echo "#define HAVE_ISBLANK 1" >>confdefs.h
9628
9629
9630fi
9631rm -f core conftest.err conftest.$ac_objext \
9632 conftest$ac_exeext conftest.$ac_ext
9633
9634# PKCS#11 support requires dlopen() and co
9635{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing dlopen" >&5
9636$as_echo_n "checking for library containing dlopen... " >&6; }
9637if ${ac_cv_search_dlopen+:} false; then :
9638 $as_echo_n "(cached) " >&6
9639else
9640 ac_func_search_save_LIBS=$LIBS
9641cat confdefs.h - <<_ACEOF >conftest.$ac_ext
9642/* end confdefs.h. */
9643
9644/* Override any GCC internal prototype to avoid an error.
9645 Use char because int might match the return type of a GCC
9646 builtin and then its argument prototype would still apply. */
9647#ifdef __cplusplus
9648extern "C"
9649#endif
9650char dlopen ();
9651int
9652main ()
9653{
9654return dlopen ();
9655 ;
9656 return 0;
9657}
9658_ACEOF
9659for ac_lib in '' dl; do
9660 if test -z "$ac_lib"; then
9661 ac_res="none required"
9662 else
9663 ac_res=-l$ac_lib
9664 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
9665 fi
9666 if ac_fn_c_try_link "$LINENO"; then :
9667 ac_cv_search_dlopen=$ac_res
9668fi
9669rm -f core conftest.err conftest.$ac_objext \
9670 conftest$ac_exeext
9671 if ${ac_cv_search_dlopen+:} false; then :
9672 break
9673fi
9674done
9675if ${ac_cv_search_dlopen+:} false; then :
9676
9677else
9678 ac_cv_search_dlopen=no
9679fi
9680rm conftest.$ac_ext
9681LIBS=$ac_func_search_save_LIBS
9682fi
9683{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_dlopen" >&5
9684$as_echo "$ac_cv_search_dlopen" >&6; }
9685ac_res=$ac_cv_search_dlopen
9686if test "$ac_res" != no; then :
9687 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
9688
9689$as_echo "#define ENABLE_PKCS11 /**/" >>confdefs.h
9690
9691
9692fi
9693
9694
9695# IRIX has a const char return value for gai_strerror()
9696for ac_func in gai_strerror
9697do :
9698 ac_fn_c_check_func "$LINENO" "gai_strerror" "ac_cv_func_gai_strerror"
9699if test "x$ac_cv_func_gai_strerror" = xyes; then :
9700 cat >>confdefs.h <<_ACEOF
9701#define HAVE_GAI_STRERROR 1
9702_ACEOF
9703
9704 $as_echo "#define HAVE_GAI_STRERROR 1" >>confdefs.h
9705
9706 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
9707/* end confdefs.h. */
9708
9709#include <sys/types.h>
9710#include <sys/socket.h>
9711#include <netdb.h>
9712
9713const char *gai_strerror(int);
9714
9715int
9716main ()
9717{
9718
9719 char *str;
9720 str = gai_strerror(0);
9721
9722 ;
9723 return 0;
9724}
9725_ACEOF
9726if ac_fn_c_try_compile "$LINENO"; then :
9727
9728
9729$as_echo "#define HAVE_CONST_GAI_STRERROR_PROTO 1" >>confdefs.h
9730
9731fi
9732rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
9733fi
9734done
9735
9736
9737{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing nanosleep" >&5
9738$as_echo_n "checking for library containing nanosleep... " >&6; }
9739if ${ac_cv_search_nanosleep+:} false; then :
9740 $as_echo_n "(cached) " >&6
9741else
9742 ac_func_search_save_LIBS=$LIBS
9743cat confdefs.h - <<_ACEOF >conftest.$ac_ext
9744/* end confdefs.h. */
9745
9746/* Override any GCC internal prototype to avoid an error.
9747 Use char because int might match the return type of a GCC
9748 builtin and then its argument prototype would still apply. */
9749#ifdef __cplusplus
9750extern "C"
9751#endif
9752char nanosleep ();
9753int
9754main ()
9755{
9756return nanosleep ();
9757 ;
9758 return 0;
9759}
9760_ACEOF
9761for ac_lib in '' rt posix4; do
9762 if test -z "$ac_lib"; then
9763 ac_res="none required"
9764 else
9765 ac_res=-l$ac_lib
9766 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
9767 fi
9768 if ac_fn_c_try_link "$LINENO"; then :
9769 ac_cv_search_nanosleep=$ac_res
9770fi
9771rm -f core conftest.err conftest.$ac_objext \
9772 conftest$ac_exeext
9773 if ${ac_cv_search_nanosleep+:} false; then :
9774 break
9775fi
9776done
9777if ${ac_cv_search_nanosleep+:} false; then :
9778
9779else
9780 ac_cv_search_nanosleep=no
9781fi
9782rm conftest.$ac_ext
9783LIBS=$ac_func_search_save_LIBS
9784fi
9785{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_nanosleep" >&5
9786$as_echo "$ac_cv_search_nanosleep" >&6; }
9787ac_res=$ac_cv_search_nanosleep
9788if test "$ac_res" != no; then :
9789 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
9790
9791$as_echo "#define HAVE_NANOSLEEP 1" >>confdefs.h
9792
9793fi
9794
9795
9796ac_fn_c_check_decl "$LINENO" "getrusage" "ac_cv_have_decl_getrusage" "$ac_includes_default"
9797if test "x$ac_cv_have_decl_getrusage" = xyes; then :
9798 for ac_func in getrusage
9799do :
9800 ac_fn_c_check_func "$LINENO" "getrusage" "ac_cv_func_getrusage"
9801if test "x$ac_cv_func_getrusage" = xyes; then :
9802 cat >>confdefs.h <<_ACEOF
9803#define HAVE_GETRUSAGE 1
9804_ACEOF
9805
9806fi
9807done
9808
9809fi
9810
9811ac_fn_c_check_decl "$LINENO" "strsep" "ac_cv_have_decl_strsep" "
9812#ifdef HAVE_STRING_H
9813# include <string.h>
9814#endif
9815
9816"
9817if test "x$ac_cv_have_decl_strsep" = xyes; then :
9818 for ac_func in strsep
9819do :
9820 ac_fn_c_check_func "$LINENO" "strsep" "ac_cv_func_strsep"
9821if test "x$ac_cv_func_strsep" = xyes; then :
9822 cat >>confdefs.h <<_ACEOF
9823#define HAVE_STRSEP 1
9824_ACEOF
9825
9826fi
9827done
9828
9829fi
9830
9831
9832ac_fn_c_check_decl "$LINENO" "tcsendbreak" "ac_cv_have_decl_tcsendbreak" "#include <termios.h>
9833
9834"
9835if test "x$ac_cv_have_decl_tcsendbreak" = xyes; then :
9836 $as_echo "#define HAVE_TCSENDBREAK 1" >>confdefs.h
9837
9838else
9839 for ac_func in tcsendbreak
9840do :
9841 ac_fn_c_check_func "$LINENO" "tcsendbreak" "ac_cv_func_tcsendbreak"
9842if test "x$ac_cv_func_tcsendbreak" = xyes; then :
9843 cat >>confdefs.h <<_ACEOF
9844#define HAVE_TCSENDBREAK 1
9845_ACEOF
9846
9847fi
9848done
9849
9850fi
9851
9852
9853ac_fn_c_check_decl "$LINENO" "h_errno" "ac_cv_have_decl_h_errno" "#include <netdb.h>
9854"
9855if test "x$ac_cv_have_decl_h_errno" = xyes; then :
9856 ac_have_decl=1
9857else
9858 ac_have_decl=0
9859fi
9860
9861cat >>confdefs.h <<_ACEOF
9862#define HAVE_DECL_H_ERRNO $ac_have_decl
9863_ACEOF
9864
9865
9866ac_fn_c_check_decl "$LINENO" "SHUT_RD" "ac_cv_have_decl_SHUT_RD" "
9867#include <sys/types.h>
9868#include <sys/socket.h>
9869
9870"
9871if test "x$ac_cv_have_decl_SHUT_RD" = xyes; then :
9872 ac_have_decl=1
9873else
9874 ac_have_decl=0
9875fi
9876
9877cat >>confdefs.h <<_ACEOF
9878#define HAVE_DECL_SHUT_RD $ac_have_decl
9879_ACEOF
9880
9881
9882ac_fn_c_check_decl "$LINENO" "O_NONBLOCK" "ac_cv_have_decl_O_NONBLOCK" "
9883#include <sys/types.h>
9884#ifdef HAVE_SYS_STAT_H
9885# include <sys/stat.h>
9886#endif
9887#ifdef HAVE_FCNTL_H
9888# include <fcntl.h>
9889#endif
9890
9891"
9892if test "x$ac_cv_have_decl_O_NONBLOCK" = xyes; then :
9893 ac_have_decl=1
9894else
9895 ac_have_decl=0
9896fi
9897
9898cat >>confdefs.h <<_ACEOF
9899#define HAVE_DECL_O_NONBLOCK $ac_have_decl
9900_ACEOF
9901
9902
9903ac_fn_c_check_decl "$LINENO" "writev" "ac_cv_have_decl_writev" "
9904#include <sys/types.h>
9905#include <sys/uio.h>
9906#include <unistd.h>
9907
9908"
9909if test "x$ac_cv_have_decl_writev" = xyes; then :
9910 ac_have_decl=1
9911else
9912 ac_have_decl=0
9913fi
9914
9915cat >>confdefs.h <<_ACEOF
9916#define HAVE_DECL_WRITEV $ac_have_decl
9917_ACEOF
9918
9919
9920ac_fn_c_check_decl "$LINENO" "MAXSYMLINKS" "ac_cv_have_decl_MAXSYMLINKS" "
9921#include <sys/param.h>
9922
9923"
9924if test "x$ac_cv_have_decl_MAXSYMLINKS" = xyes; then :
9925 ac_have_decl=1
9926else
9927 ac_have_decl=0
9928fi
9929
9930cat >>confdefs.h <<_ACEOF
9931#define HAVE_DECL_MAXSYMLINKS $ac_have_decl
9932_ACEOF
9933
9934
9935ac_fn_c_check_decl "$LINENO" "offsetof" "ac_cv_have_decl_offsetof" "
9936#include <stddef.h>
9937
9938"
9939if test "x$ac_cv_have_decl_offsetof" = xyes; then :
9940 ac_have_decl=1
9941else
9942 ac_have_decl=0
9943fi
9944
9945cat >>confdefs.h <<_ACEOF
9946#define HAVE_DECL_OFFSETOF $ac_have_decl
9947_ACEOF
9948
9949
9950for ac_func in setresuid
9951do :
9952 ac_fn_c_check_func "$LINENO" "setresuid" "ac_cv_func_setresuid"
9953if test "x$ac_cv_func_setresuid" = xyes; then :
9954 cat >>confdefs.h <<_ACEOF
9955#define HAVE_SETRESUID 1
9956_ACEOF
9957
9958 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if setresuid seems to work" >&5
9959$as_echo_n "checking if setresuid seems to work... " >&6; }
9960 if test "$cross_compiling" = yes; then :
9961 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking setresuid" >&5
9962$as_echo "$as_me: WARNING: cross compiling: not checking setresuid" >&2;}
9963
9964else
9965 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
9966/* end confdefs.h. */
9967
9968#include <stdlib.h>
9969#include <errno.h>
9970
9971int
9972main ()
9973{
9974
9975 errno=0;
9976 setresuid(0,0,0);
9977 if (errno==ENOSYS)
9978 exit(1);
9979 else
9980 exit(0);
9981
9982 ;
9983 return 0;
9984}
9985_ACEOF
9986if ac_fn_c_try_run "$LINENO"; then :
9987 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
9988$as_echo "yes" >&6; }
9989else
9990
9991$as_echo "#define BROKEN_SETRESUID 1" >>confdefs.h
9992
9993 { $as_echo "$as_me:${as_lineno-$LINENO}: result: not implemented" >&5
9994$as_echo "not implemented" >&6; }
9995fi
9996rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
9997 conftest.$ac_objext conftest.beam conftest.$ac_ext
9998fi
9999
10000
10001fi
10002done
10003
10004
10005for ac_func in setresgid
10006do :
10007 ac_fn_c_check_func "$LINENO" "setresgid" "ac_cv_func_setresgid"
10008if test "x$ac_cv_func_setresgid" = xyes; then :
10009 cat >>confdefs.h <<_ACEOF
10010#define HAVE_SETRESGID 1
10011_ACEOF
10012
10013 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if setresgid seems to work" >&5
10014$as_echo_n "checking if setresgid seems to work... " >&6; }
10015 if test "$cross_compiling" = yes; then :
10016 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking setresuid" >&5
10017$as_echo "$as_me: WARNING: cross compiling: not checking setresuid" >&2;}
10018
10019else
10020 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10021/* end confdefs.h. */
10022
10023#include <stdlib.h>
10024#include <errno.h>
10025
10026int
10027main ()
10028{
10029
10030 errno=0;
10031 setresgid(0,0,0);
10032 if (errno==ENOSYS)
10033 exit(1);
10034 else
10035 exit(0);
10036
10037 ;
10038 return 0;
10039}
10040_ACEOF
10041if ac_fn_c_try_run "$LINENO"; then :
10042 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
10043$as_echo "yes" >&6; }
10044else
10045
10046$as_echo "#define BROKEN_SETRESGID 1" >>confdefs.h
10047
10048 { $as_echo "$as_me:${as_lineno-$LINENO}: result: not implemented" >&5
10049$as_echo "not implemented" >&6; }
10050fi
10051rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
10052 conftest.$ac_objext conftest.beam conftest.$ac_ext
10053fi
10054
10055
10056fi
10057done
10058
10059
10060for ac_func in gettimeofday time
10061do :
10062 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
10063ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
10064if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
10065 cat >>confdefs.h <<_ACEOF
10066#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
10067_ACEOF
10068
10069fi
10070done
10071
10072for ac_func in endutent getutent getutid getutline pututline setutent
10073do :
10074 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
10075ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
10076if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
10077 cat >>confdefs.h <<_ACEOF
10078#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
10079_ACEOF
10080
10081fi
10082done
10083
10084for ac_func in utmpname
10085do :
10086 ac_fn_c_check_func "$LINENO" "utmpname" "ac_cv_func_utmpname"
10087if test "x$ac_cv_func_utmpname" = xyes; then :
10088 cat >>confdefs.h <<_ACEOF
10089#define HAVE_UTMPNAME 1
10090_ACEOF
10091
10092fi
10093done
10094
10095for ac_func in endutxent getutxent getutxid getutxline getutxuser pututxline
10096do :
10097 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
10098ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
10099if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
10100 cat >>confdefs.h <<_ACEOF
10101#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
10102_ACEOF
10103
10104fi
10105done
10106
10107for ac_func in setutxdb setutxent utmpxname
10108do :
10109 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
10110ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
10111if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
10112 cat >>confdefs.h <<_ACEOF
10113#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
10114_ACEOF
10115
10116fi
10117done
10118
10119for ac_func in getlastlogxbyname
10120do :
10121 ac_fn_c_check_func "$LINENO" "getlastlogxbyname" "ac_cv_func_getlastlogxbyname"
10122if test "x$ac_cv_func_getlastlogxbyname" = xyes; then :
10123 cat >>confdefs.h <<_ACEOF
10124#define HAVE_GETLASTLOGXBYNAME 1
10125_ACEOF
10126
10127fi
10128done
10129
10130
10131ac_fn_c_check_func "$LINENO" "daemon" "ac_cv_func_daemon"
10132if test "x$ac_cv_func_daemon" = xyes; then :
10133
10134$as_echo "#define HAVE_DAEMON 1" >>confdefs.h
10135
10136else
10137 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for daemon in -lbsd" >&5
10138$as_echo_n "checking for daemon in -lbsd... " >&6; }
10139if ${ac_cv_lib_bsd_daemon+:} false; then :
10140 $as_echo_n "(cached) " >&6
10141else
10142 ac_check_lib_save_LIBS=$LIBS
10143LIBS="-lbsd $LIBS"
10144cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10145/* end confdefs.h. */
10146
10147/* Override any GCC internal prototype to avoid an error.
10148 Use char because int might match the return type of a GCC
10149 builtin and then its argument prototype would still apply. */
10150#ifdef __cplusplus
10151extern "C"
10152#endif
10153char daemon ();
10154int
10155main ()
10156{
10157return daemon ();
10158 ;
10159 return 0;
10160}
10161_ACEOF
10162if ac_fn_c_try_link "$LINENO"; then :
10163 ac_cv_lib_bsd_daemon=yes
10164else
10165 ac_cv_lib_bsd_daemon=no
10166fi
10167rm -f core conftest.err conftest.$ac_objext \
10168 conftest$ac_exeext conftest.$ac_ext
10169LIBS=$ac_check_lib_save_LIBS
10170fi
10171{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_bsd_daemon" >&5
10172$as_echo "$ac_cv_lib_bsd_daemon" >&6; }
10173if test "x$ac_cv_lib_bsd_daemon" = xyes; then :
10174 LIBS="$LIBS -lbsd"; $as_echo "#define HAVE_DAEMON 1" >>confdefs.h
10175
10176fi
10177
10178
10179fi
10180
10181
10182ac_fn_c_check_func "$LINENO" "getpagesize" "ac_cv_func_getpagesize"
10183if test "x$ac_cv_func_getpagesize" = xyes; then :
10184
10185$as_echo "#define HAVE_GETPAGESIZE 1" >>confdefs.h
10186
10187else
10188 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for getpagesize in -lucb" >&5
10189$as_echo_n "checking for getpagesize in -lucb... " >&6; }
10190if ${ac_cv_lib_ucb_getpagesize+:} false; then :
10191 $as_echo_n "(cached) " >&6
10192else
10193 ac_check_lib_save_LIBS=$LIBS
10194LIBS="-lucb $LIBS"
10195cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10196/* end confdefs.h. */
10197
10198/* Override any GCC internal prototype to avoid an error.
10199 Use char because int might match the return type of a GCC
10200 builtin and then its argument prototype would still apply. */
10201#ifdef __cplusplus
10202extern "C"
10203#endif
10204char getpagesize ();
10205int
10206main ()
10207{
10208return getpagesize ();
10209 ;
10210 return 0;
10211}
10212_ACEOF
10213if ac_fn_c_try_link "$LINENO"; then :
10214 ac_cv_lib_ucb_getpagesize=yes
10215else
10216 ac_cv_lib_ucb_getpagesize=no
10217fi
10218rm -f core conftest.err conftest.$ac_objext \
10219 conftest$ac_exeext conftest.$ac_ext
10220LIBS=$ac_check_lib_save_LIBS
10221fi
10222{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_ucb_getpagesize" >&5
10223$as_echo "$ac_cv_lib_ucb_getpagesize" >&6; }
10224if test "x$ac_cv_lib_ucb_getpagesize" = xyes; then :
10225 LIBS="$LIBS -lucb"; $as_echo "#define HAVE_GETPAGESIZE 1" >>confdefs.h
10226
10227fi
10228
10229
10230fi
10231
10232
10233# Check for broken snprintf
10234if test "x$ac_cv_func_snprintf" = "xyes" ; then
10235 { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether snprintf correctly terminates long strings" >&5
10236$as_echo_n "checking whether snprintf correctly terminates long strings... " >&6; }
10237 if test "$cross_compiling" = yes; then :
10238 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: Assuming working snprintf()" >&5
10239$as_echo "$as_me: WARNING: cross compiling: Assuming working snprintf()" >&2;}
10240
10241else
10242 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10243/* end confdefs.h. */
10244 #include <stdio.h>
10245int
10246main ()
10247{
10248
10249 char b[5];
10250 snprintf(b,5,"123456789");
10251 exit(b[4]!='\0');
10252
10253 ;
10254 return 0;
10255}
10256_ACEOF
10257if ac_fn_c_try_run "$LINENO"; then :
10258 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
10259$as_echo "yes" >&6; }
10260else
10261
10262 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
10263$as_echo "no" >&6; }
10264
10265$as_echo "#define BROKEN_SNPRINTF 1" >>confdefs.h
10266
10267 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: ****** Your snprintf() function is broken, complain to your vendor" >&5
10268$as_echo "$as_me: WARNING: ****** Your snprintf() function is broken, complain to your vendor" >&2;}
10269
10270fi
10271rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
10272 conftest.$ac_objext conftest.beam conftest.$ac_ext
10273fi
10274
10275fi
10276
10277# If we don't have a working asprintf, then we strongly depend on vsnprintf
10278# returning the right thing on overflow: the number of characters it tried to
10279# create (as per SUSv3)
10280if test "x$ac_cv_func_asprintf" != "xyes" && \
10281 test "x$ac_cv_func_vsnprintf" = "xyes" ; then
10282 { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether vsnprintf returns correct values on overflow" >&5
10283$as_echo_n "checking whether vsnprintf returns correct values on overflow... " >&6; }
10284 if test "$cross_compiling" = yes; then :
10285 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: Assuming working vsnprintf()" >&5
10286$as_echo "$as_me: WARNING: cross compiling: Assuming working vsnprintf()" >&2;}
10287
10288else
10289 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10290/* end confdefs.h. */
10291
10292#include <sys/types.h>
10293#include <stdio.h>
10294#include <stdarg.h>
10295
10296int x_snprintf(char *str,size_t count,const char *fmt,...)
10297{
10298 size_t ret; va_list ap;
10299 va_start(ap, fmt); ret = vsnprintf(str, count, fmt, ap); va_end(ap);
10300 return ret;
10301}
10302
10303int
10304main ()
10305{
10306
10307 char x[1];
10308 exit(x_snprintf(x, 1, "%s %d", "hello", 12345) == 11 ? 0 : 1);
10309
10310 ;
10311 return 0;
10312}
10313_ACEOF
10314if ac_fn_c_try_run "$LINENO"; then :
10315 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
10316$as_echo "yes" >&6; }
10317else
10318
10319 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
10320$as_echo "no" >&6; }
10321
10322$as_echo "#define BROKEN_SNPRINTF 1" >>confdefs.h
10323
10324 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: ****** Your vsnprintf() function is broken, complain to your vendor" >&5
10325$as_echo "$as_me: WARNING: ****** Your vsnprintf() function is broken, complain to your vendor" >&2;}
10326
10327fi
10328rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
10329 conftest.$ac_objext conftest.beam conftest.$ac_ext
10330fi
10331
10332fi
10333
10334# On systems where [v]snprintf is broken, but is declared in stdio,
10335# check that the fmt argument is const char * or just char *.
10336# This is only useful for when BROKEN_SNPRINTF
10337{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether snprintf can declare const char *fmt" >&5
10338$as_echo_n "checking whether snprintf can declare const char *fmt... " >&6; }
10339cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10340/* end confdefs.h. */
10341
10342#include <stdio.h>
10343int snprintf(char *a, size_t b, const char *c, ...) { return 0; }
10344
10345int
10346main ()
10347{
10348
10349 snprintf(0, 0, 0);
10350
10351 ;
10352 return 0;
10353}
10354_ACEOF
10355if ac_fn_c_try_compile "$LINENO"; then :
10356 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
10357$as_echo "yes" >&6; }
10358
10359$as_echo "#define SNPRINTF_CONST const" >>confdefs.h
10360
10361else
10362 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
10363$as_echo "no" >&6; }
10364 $as_echo "#define SNPRINTF_CONST /* not const */" >>confdefs.h
10365
10366fi
10367rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
10368
10369# Check for missing getpeereid (or equiv) support
10370NO_PEERCHECK=""
10371if test "x$ac_cv_func_getpeereid" != "xyes" -a "x$ac_cv_func_getpeerucred" != "xyes"; then
10372 { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether system supports SO_PEERCRED getsockopt" >&5
10373$as_echo_n "checking whether system supports SO_PEERCRED getsockopt... " >&6; }
10374 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10375/* end confdefs.h. */
10376
10377#include <sys/types.h>
10378#include <sys/socket.h>
10379int
10380main ()
10381{
10382int i = SO_PEERCRED;
10383 ;
10384 return 0;
10385}
10386_ACEOF
10387if ac_fn_c_try_compile "$LINENO"; then :
10388 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
10389$as_echo "yes" >&6; }
10390
10391$as_echo "#define HAVE_SO_PEERCRED 1" >>confdefs.h
10392
10393
10394else
10395 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
10396$as_echo "no" >&6; }
10397 NO_PEERCHECK=1
10398
10399fi
10400rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
10401fi
10402
10403if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
10404{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for (overly) strict mkstemp" >&5
10405$as_echo_n "checking for (overly) strict mkstemp... " >&6; }
10406if test "$cross_compiling" = yes; then :
10407
10408 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
10409$as_echo "yes" >&6; }
10410 $as_echo "#define HAVE_STRICT_MKSTEMP 1" >>confdefs.h
10411
10412
10413
10414else
10415 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10416/* end confdefs.h. */
10417
10418#include <stdlib.h>
10419
10420int
10421main ()
10422{
10423
10424 char template[]="conftest.mkstemp-test";
10425 if (mkstemp(template) == -1)
10426 exit(1);
10427 unlink(template);
10428 exit(0);
10429
10430 ;
10431 return 0;
10432}
10433_ACEOF
10434if ac_fn_c_try_run "$LINENO"; then :
10435
10436 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
10437$as_echo "no" >&6; }
10438
10439else
10440
10441 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
10442$as_echo "yes" >&6; }
10443
10444$as_echo "#define HAVE_STRICT_MKSTEMP 1" >>confdefs.h
10445
10446
10447fi
10448rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
10449 conftest.$ac_objext conftest.beam conftest.$ac_ext
10450fi
10451
10452fi
10453
10454if test ! -z "$check_for_openpty_ctty_bug"; then
10455 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if openpty correctly handles controlling tty" >&5
10456$as_echo_n "checking if openpty correctly handles controlling tty... " >&6; }
10457 if test "$cross_compiling" = yes; then :
10458
10459 { $as_echo "$as_me:${as_lineno-$LINENO}: result: cross-compiling, assuming yes" >&5
10460$as_echo "cross-compiling, assuming yes" >&6; }
10461
10462
10463else
10464 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10465/* end confdefs.h. */
10466
10467#include <stdio.h>
10468#include <sys/fcntl.h>
10469#include <sys/types.h>
10470#include <sys/wait.h>
10471
10472int
10473main ()
10474{
10475
10476 pid_t pid;
10477 int fd, ptyfd, ttyfd, status;
10478
10479 pid = fork();
10480 if (pid < 0) { /* failed */
10481 exit(1);
10482 } else if (pid > 0) { /* parent */
10483 waitpid(pid, &status, 0);
10484 if (WIFEXITED(status))
10485 exit(WEXITSTATUS(status));
10486 else
10487 exit(2);
10488 } else { /* child */
10489 close(0); close(1); close(2);
10490 setsid();
10491 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
10492 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
10493 if (fd >= 0)
10494 exit(3); /* Acquired ctty: broken */
10495 else
10496 exit(0); /* Did not acquire ctty: OK */
10497 }
10498
10499 ;
10500 return 0;
10501}
10502_ACEOF
10503if ac_fn_c_try_run "$LINENO"; then :
10504
10505 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
10506$as_echo "yes" >&6; }
10507
10508else
10509
10510 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
10511$as_echo "no" >&6; }
10512 $as_echo "#define SSHD_ACQUIRES_CTTY 1" >>confdefs.h
10513
10514
10515fi
10516rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
10517 conftest.$ac_objext conftest.beam conftest.$ac_ext
10518fi
10519
10520fi
10521
10522if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
10523 test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
10524 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if getaddrinfo seems to work" >&5
10525$as_echo_n "checking if getaddrinfo seems to work... " >&6; }
10526 if test "$cross_compiling" = yes; then :
10527
10528 { $as_echo "$as_me:${as_lineno-$LINENO}: result: cross-compiling, assuming yes" >&5
10529$as_echo "cross-compiling, assuming yes" >&6; }
10530
10531
10532else
10533 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10534/* end confdefs.h. */
10535
10536#include <stdio.h>
10537#include <sys/socket.h>
10538#include <netdb.h>
10539#include <errno.h>
10540#include <netinet/in.h>
10541
10542#define TEST_PORT "2222"
10543
10544int
10545main ()
10546{
10547
10548 int err, sock;
10549 struct addrinfo *gai_ai, *ai, hints;
10550 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
10551
10552 memset(&hints, 0, sizeof(hints));
10553 hints.ai_family = PF_UNSPEC;
10554 hints.ai_socktype = SOCK_STREAM;
10555 hints.ai_flags = AI_PASSIVE;
10556
10557 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
10558 if (err != 0) {
10559 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
10560 exit(1);
10561 }
10562
10563 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
10564 if (ai->ai_family != AF_INET6)
10565 continue;
10566
10567 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
10568 sizeof(ntop), strport, sizeof(strport),
10569 NI_NUMERICHOST|NI_NUMERICSERV);
10570
10571 if (err != 0) {
10572 if (err == EAI_SYSTEM)
10573 perror("getnameinfo EAI_SYSTEM");
10574 else
10575 fprintf(stderr, "getnameinfo failed: %s\n",
10576 gai_strerror(err));
10577 exit(2);
10578 }
10579
10580 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
10581 if (sock < 0)
10582 perror("socket");
10583 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
10584 if (errno == EBADF)
10585 exit(3);
10586 }
10587 }
10588 exit(0);
10589
10590 ;
10591 return 0;
10592}
10593_ACEOF
10594if ac_fn_c_try_run "$LINENO"; then :
10595
10596 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
10597$as_echo "yes" >&6; }
10598
10599else
10600
10601 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
10602$as_echo "no" >&6; }
10603 $as_echo "#define BROKEN_GETADDRINFO 1" >>confdefs.h
10604
10605
10606fi
10607rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
10608 conftest.$ac_objext conftest.beam conftest.$ac_ext
10609fi
10610
10611fi
10612
10613if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
10614 test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
10615 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if getaddrinfo seems to work" >&5
10616$as_echo_n "checking if getaddrinfo seems to work... " >&6; }
10617 if test "$cross_compiling" = yes; then :
10618
10619 { $as_echo "$as_me:${as_lineno-$LINENO}: result: cross-compiling, assuming no" >&5
10620$as_echo "cross-compiling, assuming no" >&6; }
10621
10622
10623else
10624 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10625/* end confdefs.h. */
10626
10627#include <stdio.h>
10628#include <sys/socket.h>
10629#include <netdb.h>
10630#include <errno.h>
10631#include <netinet/in.h>
10632
10633#define TEST_PORT "2222"
10634
10635int
10636main ()
10637{
10638
10639 int err, sock;
10640 struct addrinfo *gai_ai, *ai, hints;
10641 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
10642
10643 memset(&hints, 0, sizeof(hints));
10644 hints.ai_family = PF_UNSPEC;
10645 hints.ai_socktype = SOCK_STREAM;
10646 hints.ai_flags = AI_PASSIVE;
10647
10648 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
10649 if (err != 0) {
10650 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
10651 exit(1);
10652 }
10653
10654 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
10655 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
10656 continue;
10657
10658 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
10659 sizeof(ntop), strport, sizeof(strport),
10660 NI_NUMERICHOST|NI_NUMERICSERV);
10661
10662 if (ai->ai_family == AF_INET && err != 0) {
10663 perror("getnameinfo");
10664 exit(2);
10665 }
10666 }
10667 exit(0);
10668
10669 ;
10670 return 0;
10671}
10672_ACEOF
10673if ac_fn_c_try_run "$LINENO"; then :
10674
10675 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
10676$as_echo "yes" >&6; }
10677
10678$as_echo "#define AIX_GETNAMEINFO_HACK 1" >>confdefs.h
10679
10680
10681else
10682
10683 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
10684$as_echo "no" >&6; }
10685 $as_echo "#define BROKEN_GETADDRINFO 1" >>confdefs.h
10686
10687
10688fi
10689rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
10690 conftest.$ac_objext conftest.beam conftest.$ac_ext
10691fi
10692
10693fi
10694
10695if test "x$check_for_conflicting_getspnam" = "x1"; then
10696 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for conflicting getspnam in shadow.h" >&5
10697$as_echo_n "checking for conflicting getspnam in shadow.h... " >&6; }
10698 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10699/* end confdefs.h. */
10700 #include <shadow.h>
10701int
10702main ()
10703{
10704 exit(0);
10705 ;
10706 return 0;
10707}
10708_ACEOF
10709if ac_fn_c_try_compile "$LINENO"; then :
10710
10711 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
10712$as_echo "no" >&6; }
10713
10714else
10715
10716 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
10717$as_echo "yes" >&6; }
10718
10719$as_echo "#define GETSPNAM_CONFLICTING_DEFS 1" >>confdefs.h
10720
10721
10722
10723fi
10724rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
10725fi
10726
10727{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether getpgrp requires zero arguments" >&5
10728$as_echo_n "checking whether getpgrp requires zero arguments... " >&6; }
10729if ${ac_cv_func_getpgrp_void+:} false; then :
10730 $as_echo_n "(cached) " >&6
10731else
10732 # Use it with a single arg.
10733cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10734/* end confdefs.h. */
10735$ac_includes_default
10736int
10737main ()
10738{
10739getpgrp (0);
10740 ;
10741 return 0;
10742}
10743_ACEOF
10744if ac_fn_c_try_compile "$LINENO"; then :
10745 ac_cv_func_getpgrp_void=no
10746else
10747 ac_cv_func_getpgrp_void=yes
10748fi
10749rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
10750
10751fi
10752{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_func_getpgrp_void" >&5
10753$as_echo "$ac_cv_func_getpgrp_void" >&6; }
10754if test $ac_cv_func_getpgrp_void = yes; then
10755
10756$as_echo "#define GETPGRP_VOID 1" >>confdefs.h
10757
10758fi
10759
10760
10761# Search for OpenSSL
10762saved_CPPFLAGS="$CPPFLAGS"
10763saved_LDFLAGS="$LDFLAGS"
10764
10765# Check whether --with-ssl-dir was given.
10766if test "${with_ssl_dir+set}" = set; then :
10767 withval=$with_ssl_dir;
10768 if test "x$withval" != "xno" ; then
10769 case "$withval" in
10770 # Relative paths
10771 ./*|../*) withval="`pwd`/$withval"
10772 esac
10773 if test -d "$withval/lib"; then
10774 if test -n "${need_dash_r}"; then
10775 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
10776 else
10777 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
10778 fi
10779 elif test -d "$withval/lib64"; then
10780 if test -n "${need_dash_r}"; then
10781 LDFLAGS="-L${withval}/lib64 -R${withval}/lib64 ${LDFLAGS}"
10782 else
10783 LDFLAGS="-L${withval}/lib64 ${LDFLAGS}"
10784 fi
10785 else
10786 if test -n "${need_dash_r}"; then
10787 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
10788 else
10789 LDFLAGS="-L${withval} ${LDFLAGS}"
10790 fi
10791 fi
10792 if test -d "$withval/include"; then
10793 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
10794 else
10795 CPPFLAGS="-I${withval} ${CPPFLAGS}"
10796 fi
10797 fi
10798
10799
10800fi
10801
10802LIBS="-lcrypto $LIBS"
10803cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10804/* end confdefs.h. */
10805
10806/* Override any GCC internal prototype to avoid an error.
10807 Use char because int might match the return type of a GCC
10808 builtin and then its argument prototype would still apply. */
10809#ifdef __cplusplus
10810extern "C"
10811#endif
10812char RAND_add ();
10813int
10814main ()
10815{
10816return RAND_add ();
10817 ;
10818 return 0;
10819}
10820_ACEOF
10821if ac_fn_c_try_link "$LINENO"; then :
10822
10823$as_echo "#define HAVE_OPENSSL 1" >>confdefs.h
10824
10825else
10826
10827 if test -n "${need_dash_r}"; then
10828 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
10829 else
10830 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
10831 fi
10832 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
10833 ac_fn_c_check_header_mongrel "$LINENO" "openssl/opensslv.h" "ac_cv_header_openssl_opensslv_h" "$ac_includes_default"
10834if test "x$ac_cv_header_openssl_opensslv_h" = xyes; then :
10835
10836else
10837 as_fn_error $? "*** OpenSSL headers missing - please install first or check config.log ***" "$LINENO" 5
10838fi
10839
10840
10841 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10842/* end confdefs.h. */
10843
10844/* Override any GCC internal prototype to avoid an error.
10845 Use char because int might match the return type of a GCC
10846 builtin and then its argument prototype would still apply. */
10847#ifdef __cplusplus
10848extern "C"
10849#endif
10850char RAND_add ();
10851int
10852main ()
10853{
10854return RAND_add ();
10855 ;
10856 return 0;
10857}
10858_ACEOF
10859if ac_fn_c_try_link "$LINENO"; then :
10860 $as_echo "#define HAVE_OPENSSL 1" >>confdefs.h
10861
10862else
10863
10864 as_fn_error $? "*** Can't find recent OpenSSL libcrypto (see config.log for details) ***" "$LINENO" 5
10865
10866
10867fi
10868rm -f core conftest.err conftest.$ac_objext \
10869 conftest$ac_exeext conftest.$ac_ext
10870
10871
10872fi
10873rm -f core conftest.err conftest.$ac_objext \
10874 conftest$ac_exeext conftest.$ac_ext
10875
10876# Determine OpenSSL header version
10877{ $as_echo "$as_me:${as_lineno-$LINENO}: checking OpenSSL header version" >&5
10878$as_echo_n "checking OpenSSL header version... " >&6; }
10879if test "$cross_compiling" = yes; then :
10880
10881 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking" >&5
10882$as_echo "$as_me: WARNING: cross compiling: not checking" >&2;}
10883
10884
10885else
10886 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10887/* end confdefs.h. */
10888
10889#include <stdio.h>
10890#include <string.h>
10891#include <openssl/opensslv.h>
10892#define DATA "conftest.sslincver"
10893
10894int
10895main ()
10896{
10897
10898 FILE *fd;
10899 int rc;
10900
10901 fd = fopen(DATA,"w");
10902 if(fd == NULL)
10903 exit(1);
10904
10905 if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
10906 exit(1);
10907
10908 exit(0);
10909
10910 ;
10911 return 0;
10912}
10913_ACEOF
10914if ac_fn_c_try_run "$LINENO"; then :
10915
10916 ssl_header_ver=`cat conftest.sslincver`
10917 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ssl_header_ver" >&5
10918$as_echo "$ssl_header_ver" >&6; }
10919
10920else
10921
10922 { $as_echo "$as_me:${as_lineno-$LINENO}: result: not found" >&5
10923$as_echo "not found" >&6; }
10924 as_fn_error $? "OpenSSL version header not found." "$LINENO" 5
10925
10926fi
10927rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
10928 conftest.$ac_objext conftest.beam conftest.$ac_ext
10929fi
10930
10931
10932# Determine OpenSSL library version
10933{ $as_echo "$as_me:${as_lineno-$LINENO}: checking OpenSSL library version" >&5
10934$as_echo_n "checking OpenSSL library version... " >&6; }
10935if test "$cross_compiling" = yes; then :
10936
10937 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking" >&5
10938$as_echo "$as_me: WARNING: cross compiling: not checking" >&2;}
10939
10940
10941else
10942 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
10943/* end confdefs.h. */
10944
10945#include <stdio.h>
10946#include <string.h>
10947#include <openssl/opensslv.h>
10948#include <openssl/crypto.h>
10949#define DATA "conftest.ssllibver"
10950
10951int
10952main ()
10953{
10954
10955 FILE *fd;
10956 int rc;
10957
10958 fd = fopen(DATA,"w");
10959 if(fd == NULL)
10960 exit(1);
10961
10962 if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0)
10963 exit(1);
10964
10965 exit(0);
10966
10967 ;
10968 return 0;
10969}
10970_ACEOF
10971if ac_fn_c_try_run "$LINENO"; then :
10972
10973 ssl_library_ver=`cat conftest.ssllibver`
10974 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ssl_library_ver" >&5
10975$as_echo "$ssl_library_ver" >&6; }
10976
10977else
10978
10979 { $as_echo "$as_me:${as_lineno-$LINENO}: result: not found" >&5
10980$as_echo "not found" >&6; }
10981 as_fn_error $? "OpenSSL library not found." "$LINENO" 5
10982
10983fi
10984rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
10985 conftest.$ac_objext conftest.beam conftest.$ac_ext
10986fi
10987
10988
10989
10990# Check whether --with-openssl-header-check was given.
10991if test "${with_openssl_header_check+set}" = set; then :
10992 withval=$with_openssl_header_check; if test "x$withval" = "xno" ; then
10993 openssl_check_nonfatal=1
10994 fi
10995
10996
10997fi
10998
10999
11000# Sanity check OpenSSL headers
11001{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether OpenSSL's headers match the library" >&5
11002$as_echo_n "checking whether OpenSSL's headers match the library... " >&6; }
11003if test "$cross_compiling" = yes; then :
11004
11005 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking" >&5
11006$as_echo "$as_me: WARNING: cross compiling: not checking" >&2;}
11007
11008
11009else
11010 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11011/* end confdefs.h. */
11012
11013#include <string.h>
11014#include <openssl/opensslv.h>
11015
11016int
11017main ()
11018{
11019
11020 exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1);
11021
11022 ;
11023 return 0;
11024}
11025_ACEOF
11026if ac_fn_c_try_run "$LINENO"; then :
11027
11028 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
11029$as_echo "yes" >&6; }
11030
11031else
11032
11033 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
11034$as_echo "no" >&6; }
11035 if test "x$openssl_check_nonfatal" = "x"; then
11036 as_fn_error $? "Your OpenSSL headers do not match your
11037library. Check config.log for details.
11038If you are sure your installation is consistent, you can disable the check
11039by running \"./configure --without-openssl-header-check\".
11040Also see contrib/findssl.sh for help identifying header/library mismatches.
11041" "$LINENO" 5
11042 else
11043 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Your OpenSSL headers do not match your
11044library. Check config.log for details.
11045Also see contrib/findssl.sh for help identifying header/library mismatches." >&5
11046$as_echo "$as_me: WARNING: Your OpenSSL headers do not match your
11047library. Check config.log for details.
11048Also see contrib/findssl.sh for help identifying header/library mismatches." >&2;}
11049 fi
11050
11051fi
11052rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
11053 conftest.$ac_objext conftest.beam conftest.$ac_ext
11054fi
11055
11056
11057{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if programs using OpenSSL functions will link" >&5
11058$as_echo_n "checking if programs using OpenSSL functions will link... " >&6; }
11059cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11060/* end confdefs.h. */
11061 #include <openssl/evp.h>
11062int
11063main ()
11064{
11065 SSLeay_add_all_algorithms();
11066 ;
11067 return 0;
11068}
11069_ACEOF
11070if ac_fn_c_try_link "$LINENO"; then :
11071
11072 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
11073$as_echo "yes" >&6; }
11074
11075else
11076
11077 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
11078$as_echo "no" >&6; }
11079 saved_LIBS="$LIBS"
11080 LIBS="$LIBS -ldl"
11081 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if programs using OpenSSL need -ldl" >&5
11082$as_echo_n "checking if programs using OpenSSL need -ldl... " >&6; }
11083 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11084/* end confdefs.h. */
11085 #include <openssl/evp.h>
11086int
11087main ()
11088{
11089 SSLeay_add_all_algorithms();
11090 ;
11091 return 0;
11092}
11093_ACEOF
11094if ac_fn_c_try_link "$LINENO"; then :
11095
11096 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
11097$as_echo "yes" >&6; }
11098
11099else
11100
11101 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
11102$as_echo "no" >&6; }
11103 LIBS="$saved_LIBS"
11104
11105
11106fi
11107rm -f core conftest.err conftest.$ac_objext \
11108 conftest$ac_exeext conftest.$ac_ext
11109
11110
11111fi
11112rm -f core conftest.err conftest.$ac_objext \
11113 conftest$ac_exeext conftest.$ac_ext
11114
11115for ac_func in RSA_generate_key_ex DSA_generate_parameters_ex BN_is_prime_ex RSA_get_default_method HMAC_CTX_init
11116do :
11117 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
11118ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
11119if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
11120 cat >>confdefs.h <<_ACEOF
11121#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
11122_ACEOF
11123
11124fi
11125done
11126
11127
11128
11129# Check whether --with-ssl-engine was given.
11130if test "${with_ssl_engine+set}" = set; then :
11131 withval=$with_ssl_engine; if test "x$withval" != "xno" ; then
11132 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL ENGINE support" >&5
11133$as_echo_n "checking for OpenSSL ENGINE support... " >&6; }
11134 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11135/* end confdefs.h. */
11136
11137#include <openssl/engine.h>
11138
11139int
11140main ()
11141{
11142
11143 ENGINE_load_builtin_engines();
11144 ENGINE_register_all_complete();
11145
11146 ;
11147 return 0;
11148}
11149_ACEOF
11150if ac_fn_c_try_compile "$LINENO"; then :
11151 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
11152$as_echo "yes" >&6; }
11153
11154$as_echo "#define USE_OPENSSL_ENGINE 1" >>confdefs.h
11155
11156
11157else
11158 as_fn_error $? "OpenSSL ENGINE support not found" "$LINENO" 5
11159
11160fi
11161rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
11162 fi
11163
11164fi
11165
11166
11167# Check for OpenSSL without EVP_aes_{192,256}_cbc
11168{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether OpenSSL has crippled AES support" >&5
11169$as_echo_n "checking whether OpenSSL has crippled AES support... " >&6; }
11170cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11171/* end confdefs.h. */
11172
11173#include <string.h>
11174#include <openssl/evp.h>
11175
11176int
11177main ()
11178{
11179
11180 exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);
11181
11182 ;
11183 return 0;
11184}
11185_ACEOF
11186if ac_fn_c_try_link "$LINENO"; then :
11187
11188 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
11189$as_echo "no" >&6; }
11190
11191else
11192
11193 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
11194$as_echo "yes" >&6; }
11195
11196$as_echo "#define OPENSSL_LOBOTOMISED_AES 1" >>confdefs.h
11197
11198
11199
11200fi
11201rm -f core conftest.err conftest.$ac_objext \
11202 conftest$ac_exeext conftest.$ac_ext
11203
11204# Check for OpenSSL with EVP_aes_*ctr
11205{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether OpenSSL has AES CTR via EVP" >&5
11206$as_echo_n "checking whether OpenSSL has AES CTR via EVP... " >&6; }
11207cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11208/* end confdefs.h. */
11209
11210#include <string.h>
11211#include <openssl/evp.h>
11212
11213int
11214main ()
11215{
11216
11217 exit(EVP_aes_128_ctr() == NULL ||
11218 EVP_aes_192_cbc() == NULL ||
11219 EVP_aes_256_cbc() == NULL);
11220
11221 ;
11222 return 0;
11223}
11224_ACEOF
11225if ac_fn_c_try_link "$LINENO"; then :
11226
11227 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
11228$as_echo "yes" >&6; }
11229
11230$as_echo "#define OPENSSL_HAVE_EVPCTR 1" >>confdefs.h
11231
11232
11233else
11234
11235 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
11236$as_echo "no" >&6; }
11237
11238
11239fi
11240rm -f core conftest.err conftest.$ac_objext \
11241 conftest$ac_exeext conftest.$ac_ext
11242
11243# Check for OpenSSL with EVP_aes_*gcm
11244{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether OpenSSL has AES GCM via EVP" >&5
11245$as_echo_n "checking whether OpenSSL has AES GCM via EVP... " >&6; }
11246cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11247/* end confdefs.h. */
11248
11249#include <string.h>
11250#include <openssl/evp.h>
11251
11252int
11253main ()
11254{
11255
11256 exit(EVP_aes_128_gcm() == NULL ||
11257 EVP_aes_256_gcm() == NULL ||
11258 EVP_CTRL_GCM_SET_IV_FIXED == 0 ||
11259 EVP_CTRL_GCM_IV_GEN == 0 ||
11260 EVP_CTRL_GCM_SET_TAG == 0 ||
11261 EVP_CTRL_GCM_GET_TAG == 0 ||
11262 EVP_CIPHER_CTX_ctrl(NULL, 0, 0, NULL) == 0);
11263
11264 ;
11265 return 0;
11266}
11267_ACEOF
11268if ac_fn_c_try_link "$LINENO"; then :
11269
11270 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
11271$as_echo "yes" >&6; }
11272
11273$as_echo "#define OPENSSL_HAVE_EVPGCM 1" >>confdefs.h
11274
11275
11276else
11277
11278 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
11279$as_echo "no" >&6; }
11280
11281
11282fi
11283rm -f core conftest.err conftest.$ac_objext \
11284 conftest$ac_exeext conftest.$ac_ext
11285
11286{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing EVP_CIPHER_CTX_ctrl" >&5
11287$as_echo_n "checking for library containing EVP_CIPHER_CTX_ctrl... " >&6; }
11288if ${ac_cv_search_EVP_CIPHER_CTX_ctrl+:} false; then :
11289 $as_echo_n "(cached) " >&6
11290else
11291 ac_func_search_save_LIBS=$LIBS
11292cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11293/* end confdefs.h. */
11294
11295/* Override any GCC internal prototype to avoid an error.
11296 Use char because int might match the return type of a GCC
11297 builtin and then its argument prototype would still apply. */
11298#ifdef __cplusplus
11299extern "C"
11300#endif
11301char EVP_CIPHER_CTX_ctrl ();
11302int
11303main ()
11304{
11305return EVP_CIPHER_CTX_ctrl ();
11306 ;
11307 return 0;
11308}
11309_ACEOF
11310for ac_lib in '' crypto; do
11311 if test -z "$ac_lib"; then
11312 ac_res="none required"
11313 else
11314 ac_res=-l$ac_lib
11315 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
11316 fi
11317 if ac_fn_c_try_link "$LINENO"; then :
11318 ac_cv_search_EVP_CIPHER_CTX_ctrl=$ac_res
11319fi
11320rm -f core conftest.err conftest.$ac_objext \
11321 conftest$ac_exeext
11322 if ${ac_cv_search_EVP_CIPHER_CTX_ctrl+:} false; then :
11323 break
11324fi
11325done
11326if ${ac_cv_search_EVP_CIPHER_CTX_ctrl+:} false; then :
11327
11328else
11329 ac_cv_search_EVP_CIPHER_CTX_ctrl=no
11330fi
11331rm conftest.$ac_ext
11332LIBS=$ac_func_search_save_LIBS
11333fi
11334{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_EVP_CIPHER_CTX_ctrl" >&5
11335$as_echo "$ac_cv_search_EVP_CIPHER_CTX_ctrl" >&6; }
11336ac_res=$ac_cv_search_EVP_CIPHER_CTX_ctrl
11337if test "$ac_res" != no; then :
11338 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
11339
11340$as_echo "#define HAVE_EVP_CIPHER_CTX_CTRL 1" >>confdefs.h
11341
11342fi
11343
11344
11345{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if EVP_DigestUpdate returns an int" >&5
11346$as_echo_n "checking if EVP_DigestUpdate returns an int... " >&6; }
11347cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11348/* end confdefs.h. */
11349
11350#include <string.h>
11351#include <openssl/evp.h>
11352
11353int
11354main ()
11355{
11356
11357 if(EVP_DigestUpdate(NULL, NULL,0))
11358 exit(0);
11359
11360 ;
11361 return 0;
11362}
11363_ACEOF
11364if ac_fn_c_try_link "$LINENO"; then :
11365
11366 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
11367$as_echo "yes" >&6; }
11368
11369else
11370
11371 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
11372$as_echo "no" >&6; }
11373
11374$as_echo "#define OPENSSL_EVP_DIGESTUPDATE_VOID 1" >>confdefs.h
11375
11376
11377
11378fi
11379rm -f core conftest.err conftest.$ac_objext \
11380 conftest$ac_exeext conftest.$ac_ext
11381
11382# Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
11383# because the system crypt() is more featureful.
11384if test "x$check_for_libcrypt_before" = "x1"; then
11385 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for crypt in -lcrypt" >&5
11386$as_echo_n "checking for crypt in -lcrypt... " >&6; }
11387if ${ac_cv_lib_crypt_crypt+:} false; then :
11388 $as_echo_n "(cached) " >&6
11389else
11390 ac_check_lib_save_LIBS=$LIBS
11391LIBS="-lcrypt $LIBS"
11392cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11393/* end confdefs.h. */
11394
11395/* Override any GCC internal prototype to avoid an error.
11396 Use char because int might match the return type of a GCC
11397 builtin and then its argument prototype would still apply. */
11398#ifdef __cplusplus
11399extern "C"
11400#endif
11401char crypt ();
11402int
11403main ()
11404{
11405return crypt ();
11406 ;
11407 return 0;
11408}
11409_ACEOF
11410if ac_fn_c_try_link "$LINENO"; then :
11411 ac_cv_lib_crypt_crypt=yes
11412else
11413 ac_cv_lib_crypt_crypt=no
11414fi
11415rm -f core conftest.err conftest.$ac_objext \
11416 conftest$ac_exeext conftest.$ac_ext
11417LIBS=$ac_check_lib_save_LIBS
11418fi
11419{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypt_crypt" >&5
11420$as_echo "$ac_cv_lib_crypt_crypt" >&6; }
11421if test "x$ac_cv_lib_crypt_crypt" = xyes; then :
11422 cat >>confdefs.h <<_ACEOF
11423#define HAVE_LIBCRYPT 1
11424_ACEOF
11425
11426 LIBS="-lcrypt $LIBS"
11427
11428fi
11429
11430fi
11431
11432# Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
11433# version in OpenSSL.
11434if test "x$check_for_libcrypt_later" = "x1"; then
11435 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for crypt in -lcrypt" >&5
11436$as_echo_n "checking for crypt in -lcrypt... " >&6; }
11437if ${ac_cv_lib_crypt_crypt+:} false; then :
11438 $as_echo_n "(cached) " >&6
11439else
11440 ac_check_lib_save_LIBS=$LIBS
11441LIBS="-lcrypt $LIBS"
11442cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11443/* end confdefs.h. */
11444
11445/* Override any GCC internal prototype to avoid an error.
11446 Use char because int might match the return type of a GCC
11447 builtin and then its argument prototype would still apply. */
11448#ifdef __cplusplus
11449extern "C"
11450#endif
11451char crypt ();
11452int
11453main ()
11454{
11455return crypt ();
11456 ;
11457 return 0;
11458}
11459_ACEOF
11460if ac_fn_c_try_link "$LINENO"; then :
11461 ac_cv_lib_crypt_crypt=yes
11462else
11463 ac_cv_lib_crypt_crypt=no
11464fi
11465rm -f core conftest.err conftest.$ac_objext \
11466 conftest$ac_exeext conftest.$ac_ext
11467LIBS=$ac_check_lib_save_LIBS
11468fi
11469{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypt_crypt" >&5
11470$as_echo "$ac_cv_lib_crypt_crypt" >&6; }
11471if test "x$ac_cv_lib_crypt_crypt" = xyes; then :
11472 LIBS="$LIBS -lcrypt"
11473fi
11474
11475fi
11476
11477# Search for SHA256 support in libc and/or OpenSSL
11478for ac_func in SHA256_Update EVP_sha256
11479do :
11480 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
11481ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
11482if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
11483 cat >>confdefs.h <<_ACEOF
11484#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
11485_ACEOF
11486 TEST_SSH_SHA256=yes
11487else
11488 TEST_SSH_SHA256=no
11489fi
11490done
11491
11492
11493
11494# Check complete ECC support in OpenSSL
11495{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether OpenSSL has complete ECC support" >&5
11496$as_echo_n "checking whether OpenSSL has complete ECC support... " >&6; }
11497cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11498/* end confdefs.h. */
11499
11500#include <openssl/ec.h>
11501#include <openssl/ecdh.h>
11502#include <openssl/ecdsa.h>
11503#include <openssl/evp.h>
11504#include <openssl/objects.h>
11505#include <openssl/opensslv.h>
11506#if OPENSSL_VERSION_NUMBER < 0x0090807f /* 0.9.8g */
11507# error "OpenSSL < 0.9.8g has unreliable ECC code"
11508#endif
11509
11510int
11511main ()
11512{
11513
11514 EC_KEY *e = EC_KEY_new_by_curve_name(NID_secp521r1);
11515 const EVP_MD *m = EVP_sha512(); /* We need this too */
11516
11517 ;
11518 return 0;
11519}
11520_ACEOF
11521if ac_fn_c_try_link "$LINENO"; then :
11522
11523 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
11524$as_echo "yes" >&6; }
11525
11526$as_echo "#define OPENSSL_HAS_ECC 1" >>confdefs.h
11527
11528 TEST_SSH_ECC=yes
11529 COMMENT_OUT_ECC=""
11530
11531else
11532
11533 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
11534$as_echo "no" >&6; }
11535 TEST_SSH_ECC=no
11536 COMMENT_OUT_ECC="#no ecc#"
11537
11538
11539fi
11540rm -f core conftest.err conftest.$ac_objext \
11541 conftest$ac_exeext conftest.$ac_ext
11542
11543
11544
11545saved_LIBS="$LIBS"
11546{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for ia_openinfo in -liaf" >&5
11547$as_echo_n "checking for ia_openinfo in -liaf... " >&6; }
11548if ${ac_cv_lib_iaf_ia_openinfo+:} false; then :
11549 $as_echo_n "(cached) " >&6
11550else
11551 ac_check_lib_save_LIBS=$LIBS
11552LIBS="-liaf $LIBS"
11553cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11554/* end confdefs.h. */
11555
11556/* Override any GCC internal prototype to avoid an error.
11557 Use char because int might match the return type of a GCC
11558 builtin and then its argument prototype would still apply. */
11559#ifdef __cplusplus
11560extern "C"
11561#endif
11562char ia_openinfo ();
11563int
11564main ()
11565{
11566return ia_openinfo ();
11567 ;
11568 return 0;
11569}
11570_ACEOF
11571if ac_fn_c_try_link "$LINENO"; then :
11572 ac_cv_lib_iaf_ia_openinfo=yes
11573else
11574 ac_cv_lib_iaf_ia_openinfo=no
11575fi
11576rm -f core conftest.err conftest.$ac_objext \
11577 conftest$ac_exeext conftest.$ac_ext
11578LIBS=$ac_check_lib_save_LIBS
11579fi
11580{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_iaf_ia_openinfo" >&5
11581$as_echo "$ac_cv_lib_iaf_ia_openinfo" >&6; }
11582if test "x$ac_cv_lib_iaf_ia_openinfo" = xyes; then :
11583
11584 LIBS="$LIBS -liaf"
11585 for ac_func in set_id
11586do :
11587 ac_fn_c_check_func "$LINENO" "set_id" "ac_cv_func_set_id"
11588if test "x$ac_cv_func_set_id" = xyes; then :
11589 cat >>confdefs.h <<_ACEOF
11590#define HAVE_SET_ID 1
11591_ACEOF
11592 SSHDLIBS="$SSHDLIBS -liaf"
11593
11594$as_echo "#define HAVE_LIBIAF 1" >>confdefs.h
11595
11596
11597fi
11598done
11599
11600
11601fi
11602
11603LIBS="$saved_LIBS"
11604
11605### Configure cryptographic random number support
11606
11607# Check wheter OpenSSL seeds itself
11608{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether OpenSSL's PRNG is internally seeded" >&5
11609$as_echo_n "checking whether OpenSSL's PRNG is internally seeded... " >&6; }
11610if test "$cross_compiling" = yes; then :
11611
11612 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: assuming yes" >&5
11613$as_echo "$as_me: WARNING: cross compiling: assuming yes" >&2;}
11614 # This is safe, since we will fatal() at runtime if
11615 # OpenSSL is not seeded correctly.
11616 OPENSSL_SEEDS_ITSELF=yes
11617
11618
11619else
11620 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11621/* end confdefs.h. */
11622
11623#include <string.h>
11624#include <openssl/rand.h>
11625
11626int
11627main ()
11628{
11629
11630 exit(RAND_status() == 1 ? 0 : 1);
11631
11632 ;
11633 return 0;
11634}
11635_ACEOF
11636if ac_fn_c_try_run "$LINENO"; then :
11637
11638 OPENSSL_SEEDS_ITSELF=yes
11639 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
11640$as_echo "yes" >&6; }
11641
11642else
11643
11644 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
11645$as_echo "no" >&6; }
11646
11647fi
11648rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
11649 conftest.$ac_objext conftest.beam conftest.$ac_ext
11650fi
11651
11652
11653# PRNGD TCP socket
11654
11655# Check whether --with-prngd-port was given.
11656if test "${with_prngd_port+set}" = set; then :
11657 withval=$with_prngd_port;
11658 case "$withval" in
11659 no)
11660 withval=""
11661 ;;
11662 [0-9]*)
11663 ;;
11664 *)
11665 as_fn_error $? "You must specify a numeric port number for --with-prngd-port" "$LINENO" 5
11666 ;;
11667 esac
11668 if test ! -z "$withval" ; then
11669 PRNGD_PORT="$withval"
11670
11671cat >>confdefs.h <<_ACEOF
11672#define PRNGD_PORT $PRNGD_PORT
11673_ACEOF
11674
11675 fi
11676
11677
11678fi
11679
11680
11681# PRNGD Unix domain socket
11682
11683# Check whether --with-prngd-socket was given.
11684if test "${with_prngd_socket+set}" = set; then :
11685 withval=$with_prngd_socket;
11686 case "$withval" in
11687 yes)
11688 withval="/var/run/egd-pool"
11689 ;;
11690 no)
11691 withval=""
11692 ;;
11693 /*)
11694 ;;
11695 *)
11696 as_fn_error $? "You must specify an absolute path to the entropy socket" "$LINENO" 5
11697 ;;
11698 esac
11699
11700 if test ! -z "$withval" ; then
11701 if test ! -z "$PRNGD_PORT" ; then
11702 as_fn_error $? "You may not specify both a PRNGD/EGD port and socket" "$LINENO" 5
11703 fi
11704 if test ! -r "$withval" ; then
11705 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Entropy socket is not readable" >&5
11706$as_echo "$as_me: WARNING: Entropy socket is not readable" >&2;}
11707 fi
11708 PRNGD_SOCKET="$withval"
11709
11710cat >>confdefs.h <<_ACEOF
11711#define PRNGD_SOCKET "$PRNGD_SOCKET"
11712_ACEOF
11713
11714 fi
11715
11716else
11717
11718 # Check for existing socket only if we don't have a random device already
11719 if test "x$OPENSSL_SEEDS_ITSELF" != "xyes" ; then
11720 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for PRNGD/EGD socket" >&5
11721$as_echo_n "checking for PRNGD/EGD socket... " >&6; }
11722 # Insert other locations here
11723 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
11724 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
11725 PRNGD_SOCKET="$sock"
11726 cat >>confdefs.h <<_ACEOF
11727#define PRNGD_SOCKET "$PRNGD_SOCKET"
11728_ACEOF
11729
11730 break;
11731 fi
11732 done
11733 if test ! -z "$PRNGD_SOCKET" ; then
11734 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PRNGD_SOCKET" >&5
11735$as_echo "$PRNGD_SOCKET" >&6; }
11736 else
11737 { $as_echo "$as_me:${as_lineno-$LINENO}: result: not found" >&5
11738$as_echo "not found" >&6; }
11739 fi
11740 fi
11741
11742
11743fi
11744
11745
11746# Which randomness source do we use?
11747if test ! -z "$PRNGD_PORT" ; then
11748 RAND_MSG="PRNGd port $PRNGD_PORT"
11749elif test ! -z "$PRNGD_SOCKET" ; then
11750 RAND_MSG="PRNGd socket $PRNGD_SOCKET"
11751elif test ! -z "$OPENSSL_SEEDS_ITSELF" ; then
11752
11753$as_echo "#define OPENSSL_PRNG_ONLY 1" >>confdefs.h
11754
11755 RAND_MSG="OpenSSL internal ONLY"
11756else
11757 as_fn_error $? "OpenSSH has no source of random numbers. Please configure OpenSSL with an entropy source or re-run configure using one of the --with-prngd-port or --with-prngd-socket options" "$LINENO" 5
11758fi
11759
11760# Check for PAM libs
11761PAM_MSG="no"
11762
11763# Check whether --with-pam was given.
11764if test "${with_pam+set}" = set; then :
11765 withval=$with_pam;
11766 if test "x$withval" != "xno" ; then
11767 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
11768 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
11769 as_fn_error $? "PAM headers not found" "$LINENO" 5
11770 fi
11771
11772 saved_LIBS="$LIBS"
11773 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5
11774$as_echo_n "checking for dlopen in -ldl... " >&6; }
11775if ${ac_cv_lib_dl_dlopen+:} false; then :
11776 $as_echo_n "(cached) " >&6
11777else
11778 ac_check_lib_save_LIBS=$LIBS
11779LIBS="-ldl $LIBS"
11780cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11781/* end confdefs.h. */
11782
11783/* Override any GCC internal prototype to avoid an error.
11784 Use char because int might match the return type of a GCC
11785 builtin and then its argument prototype would still apply. */
11786#ifdef __cplusplus
11787extern "C"
11788#endif
11789char dlopen ();
11790int
11791main ()
11792{
11793return dlopen ();
11794 ;
11795 return 0;
11796}
11797_ACEOF
11798if ac_fn_c_try_link "$LINENO"; then :
11799 ac_cv_lib_dl_dlopen=yes
11800else
11801 ac_cv_lib_dl_dlopen=no
11802fi
11803rm -f core conftest.err conftest.$ac_objext \
11804 conftest$ac_exeext conftest.$ac_ext
11805LIBS=$ac_check_lib_save_LIBS
11806fi
11807{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5
11808$as_echo "$ac_cv_lib_dl_dlopen" >&6; }
11809if test "x$ac_cv_lib_dl_dlopen" = xyes; then :
11810 cat >>confdefs.h <<_ACEOF
11811#define HAVE_LIBDL 1
11812_ACEOF
11813
11814 LIBS="-ldl $LIBS"
11815
11816fi
11817
11818 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for pam_set_item in -lpam" >&5
11819$as_echo_n "checking for pam_set_item in -lpam... " >&6; }
11820if ${ac_cv_lib_pam_pam_set_item+:} false; then :
11821 $as_echo_n "(cached) " >&6
11822else
11823 ac_check_lib_save_LIBS=$LIBS
11824LIBS="-lpam $LIBS"
11825cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11826/* end confdefs.h. */
11827
11828/* Override any GCC internal prototype to avoid an error.
11829 Use char because int might match the return type of a GCC
11830 builtin and then its argument prototype would still apply. */
11831#ifdef __cplusplus
11832extern "C"
11833#endif
11834char pam_set_item ();
11835int
11836main ()
11837{
11838return pam_set_item ();
11839 ;
11840 return 0;
11841}
11842_ACEOF
11843if ac_fn_c_try_link "$LINENO"; then :
11844 ac_cv_lib_pam_pam_set_item=yes
11845else
11846 ac_cv_lib_pam_pam_set_item=no
11847fi
11848rm -f core conftest.err conftest.$ac_objext \
11849 conftest$ac_exeext conftest.$ac_ext
11850LIBS=$ac_check_lib_save_LIBS
11851fi
11852{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_pam_pam_set_item" >&5
11853$as_echo "$ac_cv_lib_pam_pam_set_item" >&6; }
11854if test "x$ac_cv_lib_pam_pam_set_item" = xyes; then :
11855 cat >>confdefs.h <<_ACEOF
11856#define HAVE_LIBPAM 1
11857_ACEOF
11858
11859 LIBS="-lpam $LIBS"
11860
11861else
11862 as_fn_error $? "*** libpam missing" "$LINENO" 5
11863fi
11864
11865 for ac_func in pam_getenvlist
11866do :
11867 ac_fn_c_check_func "$LINENO" "pam_getenvlist" "ac_cv_func_pam_getenvlist"
11868if test "x$ac_cv_func_pam_getenvlist" = xyes; then :
11869 cat >>confdefs.h <<_ACEOF
11870#define HAVE_PAM_GETENVLIST 1
11871_ACEOF
11872
11873fi
11874done
11875
11876 for ac_func in pam_putenv
11877do :
11878 ac_fn_c_check_func "$LINENO" "pam_putenv" "ac_cv_func_pam_putenv"
11879if test "x$ac_cv_func_pam_putenv" = xyes; then :
11880 cat >>confdefs.h <<_ACEOF
11881#define HAVE_PAM_PUTENV 1
11882_ACEOF
11883
11884fi
11885done
11886
11887 LIBS="$saved_LIBS"
11888
11889 PAM_MSG="yes"
11890
11891 SSHDLIBS="$SSHDLIBS -lpam"
11892
11893$as_echo "#define USE_PAM 1" >>confdefs.h
11894
11895
11896 if test $ac_cv_lib_dl_dlopen = yes; then
11897 case "$LIBS" in
11898 *-ldl*)
11899 # libdl already in LIBS
11900 ;;
11901 *)
11902 SSHDLIBS="$SSHDLIBS -ldl"
11903 ;;
11904 esac
11905 fi
11906 fi
11907
11908
11909fi
11910
11911
11912# Check for older PAM
11913if test "x$PAM_MSG" = "xyes" ; then
11914 # Check PAM strerror arguments (old PAM)
11915 { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether pam_strerror takes only one argument" >&5
11916$as_echo_n "checking whether pam_strerror takes only one argument... " >&6; }
11917 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11918/* end confdefs.h. */
11919
11920#include <stdlib.h>
11921#if defined(HAVE_SECURITY_PAM_APPL_H)
11922#include <security/pam_appl.h>
11923#elif defined (HAVE_PAM_PAM_APPL_H)
11924#include <pam/pam_appl.h>
11925#endif
11926
11927int
11928main ()
11929{
11930
11931(void)pam_strerror((pam_handle_t *)NULL, -1);
11932
11933 ;
11934 return 0;
11935}
11936_ACEOF
11937if ac_fn_c_try_compile "$LINENO"; then :
11938 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
11939$as_echo "no" >&6; }
11940else
11941
11942
11943$as_echo "#define HAVE_OLD_PAM 1" >>confdefs.h
11944
11945 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
11946$as_echo "yes" >&6; }
11947 PAM_MSG="yes (old library)"
11948
11949
11950fi
11951rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
11952fi
11953
11954SSH_PRIVSEP_USER=sshd
11955
11956# Check whether --with-privsep-user was given.
11957if test "${with_privsep_user+set}" = set; then :
11958 withval=$with_privsep_user;
11959 if test -n "$withval" && test "x$withval" != "xno" && \
11960 test "x${withval}" != "xyes"; then
11961 SSH_PRIVSEP_USER=$withval
11962 fi
11963
11964
11965fi
11966
11967
11968cat >>confdefs.h <<_ACEOF
11969#define SSH_PRIVSEP_USER "$SSH_PRIVSEP_USER"
11970_ACEOF
11971
11972
11973
11974if test "x$have_linux_no_new_privs" = "x1" ; then
11975ac_fn_c_check_decl "$LINENO" "SECCOMP_MODE_FILTER" "ac_cv_have_decl_SECCOMP_MODE_FILTER" "
11976 #include <sys/types.h>
11977 #include <linux/seccomp.h>
11978
11979"
11980if test "x$ac_cv_have_decl_SECCOMP_MODE_FILTER" = xyes; then :
11981 have_seccomp_filter=1
11982fi
11983
11984fi
11985if test "x$have_seccomp_filter" = "x1" ; then
11986{ $as_echo "$as_me:${as_lineno-$LINENO}: checking kernel for seccomp_filter support" >&5
11987$as_echo_n "checking kernel for seccomp_filter support... " >&6; }
11988cat confdefs.h - <<_ACEOF >conftest.$ac_ext
11989/* end confdefs.h. */
11990
11991 #include <errno.h>
11992 #include <elf.h>
11993 #include <linux/audit.h>
11994 #include <linux/seccomp.h>
11995 #include <stdlib.h>
11996 #include <sys/prctl.h>
11997
11998int
11999main ()
12000{
12001 int i = $seccomp_audit_arch;
12002 errno = 0;
12003 prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, NULL, 0, 0);
12004 exit(errno == EFAULT ? 0 : 1);
12005 ;
12006 return 0;
12007}
12008_ACEOF
12009if ac_fn_c_try_link "$LINENO"; then :
12010 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
12011$as_echo "yes" >&6; }
12012else
12013
12014 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
12015$as_echo "no" >&6; }
12016 # Disable seccomp filter as a target
12017 have_seccomp_filter=0
12018
12019
12020fi
12021rm -f core conftest.err conftest.$ac_objext \
12022 conftest$ac_exeext conftest.$ac_ext
12023fi
12024
12025# Decide which sandbox style to use
12026sandbox_arg=""
12027
12028# Check whether --with-sandbox was given.
12029if test "${with_sandbox+set}" = set; then :
12030 withval=$with_sandbox;
12031 if test "x$withval" = "xyes" ; then
12032 sandbox_arg=""
12033 else
12034 sandbox_arg="$withval"
12035 fi
12036
12037
12038fi
12039
12040
12041# Some platforms (seems to be the ones that have a kernel poll(2)-type
12042# function with which they implement select(2)) use an extra file descriptor
12043# when calling select(2), which means we can't use the rlimit sandbox.
12044{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if select works with descriptor rlimit" >&5
12045$as_echo_n "checking if select works with descriptor rlimit... " >&6; }
12046if test "$cross_compiling" = yes; then :
12047 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: assuming yes" >&5
12048$as_echo "$as_me: WARNING: cross compiling: assuming yes" >&2;}
12049
12050else
12051 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12052/* end confdefs.h. */
12053
12054#include <sys/types.h>
12055#ifdef HAVE_SYS_TIME_H
12056# include <sys/time.h>
12057#endif
12058#include <sys/resource.h>
12059#ifdef HAVE_SYS_SELECT_H
12060# include <sys/select.h>
12061#endif
12062#include <errno.h>
12063#include <fcntl.h>
12064#include <stdlib.h>
12065
12066int
12067main ()
12068{
12069
12070 struct rlimit rl_zero;
12071 int fd, r;
12072 fd_set fds;
12073 struct timeval tv;
12074
12075 fd = open("/dev/null", O_RDONLY);
12076 FD_ZERO(&fds);
12077 FD_SET(fd, &fds);
12078 rl_zero.rlim_cur = rl_zero.rlim_max = 0;
12079 setrlimit(RLIMIT_FSIZE, &rl_zero);
12080 setrlimit(RLIMIT_NOFILE, &rl_zero);
12081 tv.tv_sec = 1;
12082 tv.tv_usec = 0;
12083 r = select(fd+1, &fds, NULL, NULL, &tv);
12084 exit (r == -1 ? 1 : 0);
12085
12086 ;
12087 return 0;
12088}
12089_ACEOF
12090if ac_fn_c_try_run "$LINENO"; then :
12091 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
12092$as_echo "yes" >&6; }
12093 select_works_with_rlimit=yes
12094else
12095 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
12096$as_echo "no" >&6; }
12097 select_works_with_rlimit=no
12098fi
12099rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
12100 conftest.$ac_objext conftest.beam conftest.$ac_ext
12101fi
12102
12103
12104{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if setrlimit(RLIMIT_NOFILE,{0,0}) works" >&5
12105$as_echo_n "checking if setrlimit(RLIMIT_NOFILE,{0,0}) works... " >&6; }
12106if test "$cross_compiling" = yes; then :
12107 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: assuming yes" >&5
12108$as_echo "$as_me: WARNING: cross compiling: assuming yes" >&2;}
12109
12110else
12111 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12112/* end confdefs.h. */
12113
12114#include <sys/types.h>
12115#ifdef HAVE_SYS_TIME_H
12116# include <sys/time.h>
12117#endif
12118#include <sys/resource.h>
12119#include <errno.h>
12120#include <stdlib.h>
12121
12122int
12123main ()
12124{
12125
12126 struct rlimit rl_zero;
12127 int fd, r;
12128 fd_set fds;
12129
12130 rl_zero.rlim_cur = rl_zero.rlim_max = 0;
12131 r = setrlimit(RLIMIT_NOFILE, &rl_zero);
12132 exit (r == -1 ? 1 : 0);
12133
12134 ;
12135 return 0;
12136}
12137_ACEOF
12138if ac_fn_c_try_run "$LINENO"; then :
12139 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
12140$as_echo "yes" >&6; }
12141 rlimit_nofile_zero_works=yes
12142else
12143 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
12144$as_echo "no" >&6; }
12145 rlimit_nofile_zero_works=no
12146fi
12147rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
12148 conftest.$ac_objext conftest.beam conftest.$ac_ext
12149fi
12150
12151
12152{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if setrlimit RLIMIT_FSIZE works" >&5
12153$as_echo_n "checking if setrlimit RLIMIT_FSIZE works... " >&6; }
12154if test "$cross_compiling" = yes; then :
12155 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: assuming yes" >&5
12156$as_echo "$as_me: WARNING: cross compiling: assuming yes" >&2;}
12157
12158else
12159 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12160/* end confdefs.h. */
12161
12162#include <sys/types.h>
12163#include <sys/resource.h>
12164#include <stdlib.h>
12165
12166int
12167main ()
12168{
12169
12170 struct rlimit rl_zero;
12171
12172 rl_zero.rlim_cur = rl_zero.rlim_max = 0;
12173 exit(setrlimit(RLIMIT_FSIZE, &rl_zero) != 0);
12174
12175 ;
12176 return 0;
12177}
12178_ACEOF
12179if ac_fn_c_try_run "$LINENO"; then :
12180 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
12181$as_echo "yes" >&6; }
12182else
12183 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
12184$as_echo "no" >&6; }
12185
12186$as_echo "#define SANDBOX_SKIP_RLIMIT_FSIZE 1" >>confdefs.h
12187
12188fi
12189rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
12190 conftest.$ac_objext conftest.beam conftest.$ac_ext
12191fi
12192
12193
12194if test "x$sandbox_arg" = "xsystrace" || \
12195 ( test -z "$sandbox_arg" && test "x$have_systr_policy_kill" = "x1" ) ; then
12196 test "x$have_systr_policy_kill" != "x1" && \
12197 as_fn_error $? "systrace sandbox requires systrace headers and SYSTR_POLICY_KILL support" "$LINENO" 5
12198 SANDBOX_STYLE="systrace"
12199
12200$as_echo "#define SANDBOX_SYSTRACE 1" >>confdefs.h
12201
12202elif test "x$sandbox_arg" = "xdarwin" || \
12203 ( test -z "$sandbox_arg" && test "x$ac_cv_func_sandbox_init" = "xyes" && \
12204 test "x$ac_cv_header_sandbox_h" = "xyes") ; then
12205 test "x$ac_cv_func_sandbox_init" != "xyes" -o \
12206 "x$ac_cv_header_sandbox_h" != "xyes" && \
12207 as_fn_error $? "Darwin seatbelt sandbox requires sandbox.h and sandbox_init function" "$LINENO" 5
12208 SANDBOX_STYLE="darwin"
12209
12210$as_echo "#define SANDBOX_DARWIN 1" >>confdefs.h
12211
12212elif test "x$sandbox_arg" = "xseccomp_filter" || \
12213 ( test -z "$sandbox_arg" && \
12214 test "x$have_seccomp_filter" = "x1" && \
12215 test "x$ac_cv_header_elf_h" = "xyes" && \
12216 test "x$ac_cv_header_linux_audit_h" = "xyes" && \
12217 test "x$ac_cv_header_linux_filter_h" = "xyes" && \
12218 test "x$seccomp_audit_arch" != "x" && \
12219 test "x$have_linux_no_new_privs" = "x1" && \
12220 test "x$ac_cv_func_prctl" = "xyes" ) ; then
12221 test "x$seccomp_audit_arch" = "x" && \
12222 as_fn_error $? "seccomp_filter sandbox not supported on $host" "$LINENO" 5
12223 test "x$have_linux_no_new_privs" != "x1" && \
12224 as_fn_error $? "seccomp_filter sandbox requires PR_SET_NO_NEW_PRIVS" "$LINENO" 5
12225 test "x$have_seccomp_filter" != "x1" && \
12226 as_fn_error $? "seccomp_filter sandbox requires seccomp headers" "$LINENO" 5
12227 test "x$ac_cv_func_prctl" != "xyes" && \
12228 as_fn_error $? "seccomp_filter sandbox requires prctl function" "$LINENO" 5
12229 SANDBOX_STYLE="seccomp_filter"
12230
12231$as_echo "#define SANDBOX_SECCOMP_FILTER 1" >>confdefs.h
12232
12233elif test "x$sandbox_arg" = "xrlimit" || \
12234 ( test -z "$sandbox_arg" && test "x$ac_cv_func_setrlimit" = "xyes" && \
12235 test "x$select_works_with_rlimit" = "xyes" && \
12236 test "x$rlimit_nofile_zero_works" = "xyes" ) ; then
12237 test "x$ac_cv_func_setrlimit" != "xyes" && \
12238 as_fn_error $? "rlimit sandbox requires setrlimit function" "$LINENO" 5
12239 test "x$select_works_with_rlimit" != "xyes" && \
12240 as_fn_error $? "rlimit sandbox requires select to work with rlimit" "$LINENO" 5
12241 SANDBOX_STYLE="rlimit"
12242
12243$as_echo "#define SANDBOX_RLIMIT 1" >>confdefs.h
12244
12245elif test -z "$sandbox_arg" || test "x$sandbox_arg" = "xno" || \
12246 test "x$sandbox_arg" = "xnone" || test "x$sandbox_arg" = "xnull" ; then
12247 SANDBOX_STYLE="none"
12248
12249$as_echo "#define SANDBOX_NULL 1" >>confdefs.h
12250
12251else
12252 as_fn_error $? "unsupported --with-sandbox" "$LINENO" 5
12253fi
12254
12255# Cheap hack to ensure NEWS-OS libraries are arranged right.
12256if test ! -z "$SONY" ; then
12257 LIBS="$LIBS -liberty";
12258fi
12259
12260# Check for long long datatypes
12261ac_fn_c_check_type "$LINENO" "long long" "ac_cv_type_long_long" "$ac_includes_default"
12262if test "x$ac_cv_type_long_long" = xyes; then :
12263
12264cat >>confdefs.h <<_ACEOF
12265#define HAVE_LONG_LONG 1
12266_ACEOF
12267
12268
12269fi
12270ac_fn_c_check_type "$LINENO" "unsigned long long" "ac_cv_type_unsigned_long_long" "$ac_includes_default"
12271if test "x$ac_cv_type_unsigned_long_long" = xyes; then :
12272
12273cat >>confdefs.h <<_ACEOF
12274#define HAVE_UNSIGNED_LONG_LONG 1
12275_ACEOF
12276
12277
12278fi
12279ac_fn_c_check_type "$LINENO" "long double" "ac_cv_type_long_double" "$ac_includes_default"
12280if test "x$ac_cv_type_long_double" = xyes; then :
12281
12282cat >>confdefs.h <<_ACEOF
12283#define HAVE_LONG_DOUBLE 1
12284_ACEOF
12285
12286
12287fi
12288
12289
12290# Check datatype sizes
12291# The cast to long int works around a bug in the HP C Compiler
12292# version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
12293# declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
12294# This bug is HP SR number 8606223364.
12295{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of short int" >&5
12296$as_echo_n "checking size of short int... " >&6; }
12297if ${ac_cv_sizeof_short_int+:} false; then :
12298 $as_echo_n "(cached) " >&6
12299else
12300 if ac_fn_c_compute_int "$LINENO" "(long int) (sizeof (short int))" "ac_cv_sizeof_short_int" "$ac_includes_default"; then :
12301
12302else
12303 if test "$ac_cv_type_short_int" = yes; then
12304 { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
12305$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
12306as_fn_error 77 "cannot compute sizeof (short int)
12307See \`config.log' for more details" "$LINENO" 5; }
12308 else
12309 ac_cv_sizeof_short_int=0
12310 fi
12311fi
12312
12313fi
12314{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sizeof_short_int" >&5
12315$as_echo "$ac_cv_sizeof_short_int" >&6; }
12316
12317
12318
12319cat >>confdefs.h <<_ACEOF
12320#define SIZEOF_SHORT_INT $ac_cv_sizeof_short_int
12321_ACEOF
12322
12323
12324# The cast to long int works around a bug in the HP C Compiler
12325# version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
12326# declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
12327# This bug is HP SR number 8606223364.
12328{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of int" >&5
12329$as_echo_n "checking size of int... " >&6; }
12330if ${ac_cv_sizeof_int+:} false; then :
12331 $as_echo_n "(cached) " >&6
12332else
12333 if ac_fn_c_compute_int "$LINENO" "(long int) (sizeof (int))" "ac_cv_sizeof_int" "$ac_includes_default"; then :
12334
12335else
12336 if test "$ac_cv_type_int" = yes; then
12337 { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
12338$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
12339as_fn_error 77 "cannot compute sizeof (int)
12340See \`config.log' for more details" "$LINENO" 5; }
12341 else
12342 ac_cv_sizeof_int=0
12343 fi
12344fi
12345
12346fi
12347{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sizeof_int" >&5
12348$as_echo "$ac_cv_sizeof_int" >&6; }
12349
12350
12351
12352cat >>confdefs.h <<_ACEOF
12353#define SIZEOF_INT $ac_cv_sizeof_int
12354_ACEOF
12355
12356
12357# The cast to long int works around a bug in the HP C Compiler
12358# version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
12359# declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
12360# This bug is HP SR number 8606223364.
12361{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of long int" >&5
12362$as_echo_n "checking size of long int... " >&6; }
12363if ${ac_cv_sizeof_long_int+:} false; then :
12364 $as_echo_n "(cached) " >&6
12365else
12366 if ac_fn_c_compute_int "$LINENO" "(long int) (sizeof (long int))" "ac_cv_sizeof_long_int" "$ac_includes_default"; then :
12367
12368else
12369 if test "$ac_cv_type_long_int" = yes; then
12370 { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
12371$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
12372as_fn_error 77 "cannot compute sizeof (long int)
12373See \`config.log' for more details" "$LINENO" 5; }
12374 else
12375 ac_cv_sizeof_long_int=0
12376 fi
12377fi
12378
12379fi
12380{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sizeof_long_int" >&5
12381$as_echo "$ac_cv_sizeof_long_int" >&6; }
12382
12383
12384
12385cat >>confdefs.h <<_ACEOF
12386#define SIZEOF_LONG_INT $ac_cv_sizeof_long_int
12387_ACEOF
12388
12389
12390# The cast to long int works around a bug in the HP C Compiler
12391# version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
12392# declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
12393# This bug is HP SR number 8606223364.
12394{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of long long int" >&5
12395$as_echo_n "checking size of long long int... " >&6; }
12396if ${ac_cv_sizeof_long_long_int+:} false; then :
12397 $as_echo_n "(cached) " >&6
12398else
12399 if ac_fn_c_compute_int "$LINENO" "(long int) (sizeof (long long int))" "ac_cv_sizeof_long_long_int" "$ac_includes_default"; then :
12400
12401else
12402 if test "$ac_cv_type_long_long_int" = yes; then
12403 { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
12404$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
12405as_fn_error 77 "cannot compute sizeof (long long int)
12406See \`config.log' for more details" "$LINENO" 5; }
12407 else
12408 ac_cv_sizeof_long_long_int=0
12409 fi
12410fi
12411
12412fi
12413{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sizeof_long_long_int" >&5
12414$as_echo "$ac_cv_sizeof_long_long_int" >&6; }
12415
12416
12417
12418cat >>confdefs.h <<_ACEOF
12419#define SIZEOF_LONG_LONG_INT $ac_cv_sizeof_long_long_int
12420_ACEOF
12421
12422
12423
12424# Sanity check long long for some platforms (AIX)
12425if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
12426 ac_cv_sizeof_long_long_int=0
12427fi
12428
12429# compute LLONG_MIN and LLONG_MAX if we don't know them.
12430if test -z "$have_llong_max"; then
12431 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for max value of long long" >&5
12432$as_echo_n "checking for max value of long long... " >&6; }
12433 if test "$cross_compiling" = yes; then :
12434
12435 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking" >&5
12436$as_echo "$as_me: WARNING: cross compiling: not checking" >&2;}
12437
12438
12439else
12440 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12441/* end confdefs.h. */
12442
12443#include <stdio.h>
12444/* Why is this so damn hard? */
12445#ifdef __GNUC__
12446# undef __GNUC__
12447#endif
12448#define __USE_ISOC99
12449#include <limits.h>
12450#define DATA "conftest.llminmax"
12451#define my_abs(a) ((a) < 0 ? ((a) * -1) : (a))
12452
12453/*
12454 * printf in libc on some platforms (eg old Tru64) does not understand %lld so
12455 * we do this the hard way.
12456 */
12457static int
12458fprint_ll(FILE *f, long long n)
12459{
12460 unsigned int i;
12461 int l[sizeof(long long) * 8];
12462
12463 if (n < 0)
12464 if (fprintf(f, "-") < 0)
12465 return -1;
12466 for (i = 0; n != 0; i++) {
12467 l[i] = my_abs(n % 10);
12468 n /= 10;
12469 }
12470 do {
12471 if (fprintf(f, "%d", l[--i]) < 0)
12472 return -1;
12473 } while (i != 0);
12474 if (fprintf(f, " ") < 0)
12475 return -1;
12476 return 0;
12477}
12478
12479int
12480main ()
12481{
12482
12483 FILE *f;
12484 long long i, llmin, llmax = 0;
12485
12486 if((f = fopen(DATA,"w")) == NULL)
12487 exit(1);
12488
12489#if defined(LLONG_MIN) && defined(LLONG_MAX)
12490 fprintf(stderr, "Using system header for LLONG_MIN and LLONG_MAX\n");
12491 llmin = LLONG_MIN;
12492 llmax = LLONG_MAX;
12493#else
12494 fprintf(stderr, "Calculating LLONG_MIN and LLONG_MAX\n");
12495 /* This will work on one's complement and two's complement */
12496 for (i = 1; i > llmax; i <<= 1, i++)
12497 llmax = i;
12498 llmin = llmax + 1LL; /* wrap */
12499#endif
12500
12501 /* Sanity check */
12502 if (llmin + 1 < llmin || llmin - 1 < llmin || llmax + 1 > llmax
12503 || llmax - 1 > llmax || llmin == llmax || llmin == 0
12504 || llmax == 0 || llmax < LONG_MAX || llmin > LONG_MIN) {
12505 fprintf(f, "unknown unknown\n");
12506 exit(2);
12507 }
12508
12509 if (fprint_ll(f, llmin) < 0)
12510 exit(3);
12511 if (fprint_ll(f, llmax) < 0)
12512 exit(4);
12513 if (fclose(f) < 0)
12514 exit(5);
12515 exit(0);
12516
12517 ;
12518 return 0;
12519}
12520_ACEOF
12521if ac_fn_c_try_run "$LINENO"; then :
12522
12523 llong_min=`$AWK '{print $1}' conftest.llminmax`
12524 llong_max=`$AWK '{print $2}' conftest.llminmax`
12525
12526 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $llong_max" >&5
12527$as_echo "$llong_max" >&6; }
12528
12529cat >>confdefs.h <<_ACEOF
12530#define LLONG_MAX ${llong_max}LL
12531_ACEOF
12532
12533 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for min value of long long" >&5
12534$as_echo_n "checking for min value of long long... " >&6; }
12535 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $llong_min" >&5
12536$as_echo "$llong_min" >&6; }
12537
12538cat >>confdefs.h <<_ACEOF
12539#define LLONG_MIN ${llong_min}LL
12540_ACEOF
12541
12542
12543else
12544
12545 { $as_echo "$as_me:${as_lineno-$LINENO}: result: not found" >&5
12546$as_echo "not found" >&6; }
12547
12548fi
12549rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
12550 conftest.$ac_objext conftest.beam conftest.$ac_ext
12551fi
12552
12553fi
12554
12555
12556# More checks for data types
12557{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for u_int type" >&5
12558$as_echo_n "checking for u_int type... " >&6; }
12559if ${ac_cv_have_u_int+:} false; then :
12560 $as_echo_n "(cached) " >&6
12561else
12562
12563 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12564/* end confdefs.h. */
12565 #include <sys/types.h>
12566int
12567main ()
12568{
12569 u_int a; a = 1;
12570 ;
12571 return 0;
12572}
12573_ACEOF
12574if ac_fn_c_try_compile "$LINENO"; then :
12575 ac_cv_have_u_int="yes"
12576else
12577 ac_cv_have_u_int="no"
12578
12579fi
12580rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
12581
12582fi
12583{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_u_int" >&5
12584$as_echo "$ac_cv_have_u_int" >&6; }
12585if test "x$ac_cv_have_u_int" = "xyes" ; then
12586
12587$as_echo "#define HAVE_U_INT 1" >>confdefs.h
12588
12589 have_u_int=1
12590fi
12591
12592{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for intXX_t types" >&5
12593$as_echo_n "checking for intXX_t types... " >&6; }
12594if ${ac_cv_have_intxx_t+:} false; then :
12595 $as_echo_n "(cached) " >&6
12596else
12597
12598 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12599/* end confdefs.h. */
12600 #include <sys/types.h>
12601int
12602main ()
12603{
12604 int8_t a; int16_t b; int32_t c; a = b = c = 1;
12605 ;
12606 return 0;
12607}
12608_ACEOF
12609if ac_fn_c_try_compile "$LINENO"; then :
12610 ac_cv_have_intxx_t="yes"
12611else
12612 ac_cv_have_intxx_t="no"
12613
12614fi
12615rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
12616
12617fi
12618{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_intxx_t" >&5
12619$as_echo "$ac_cv_have_intxx_t" >&6; }
12620if test "x$ac_cv_have_intxx_t" = "xyes" ; then
12621
12622$as_echo "#define HAVE_INTXX_T 1" >>confdefs.h
12623
12624 have_intxx_t=1
12625fi
12626
12627if (test -z "$have_intxx_t" && \
12628 test "x$ac_cv_header_stdint_h" = "xyes")
12629then
12630 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for intXX_t types in stdint.h" >&5
12631$as_echo_n "checking for intXX_t types in stdint.h... " >&6; }
12632 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12633/* end confdefs.h. */
12634 #include <stdint.h>
12635int
12636main ()
12637{
12638 int8_t a; int16_t b; int32_t c; a = b = c = 1;
12639 ;
12640 return 0;
12641}
12642_ACEOF
12643if ac_fn_c_try_compile "$LINENO"; then :
12644
12645 $as_echo "#define HAVE_INTXX_T 1" >>confdefs.h
12646
12647 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
12648$as_echo "yes" >&6; }
12649
12650else
12651 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
12652$as_echo "no" >&6; }
12653
12654fi
12655rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
12656fi
12657
12658{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for int64_t type" >&5
12659$as_echo_n "checking for int64_t type... " >&6; }
12660if ${ac_cv_have_int64_t+:} false; then :
12661 $as_echo_n "(cached) " >&6
12662else
12663
12664 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12665/* end confdefs.h. */
12666
12667#include <sys/types.h>
12668#ifdef HAVE_STDINT_H
12669# include <stdint.h>
12670#endif
12671#include <sys/socket.h>
12672#ifdef HAVE_SYS_BITYPES_H
12673# include <sys/bitypes.h>
12674#endif
12675
12676int
12677main ()
12678{
12679
12680int64_t a; a = 1;
12681
12682 ;
12683 return 0;
12684}
12685_ACEOF
12686if ac_fn_c_try_compile "$LINENO"; then :
12687 ac_cv_have_int64_t="yes"
12688else
12689 ac_cv_have_int64_t="no"
12690
12691fi
12692rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
12693
12694fi
12695{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_int64_t" >&5
12696$as_echo "$ac_cv_have_int64_t" >&6; }
12697if test "x$ac_cv_have_int64_t" = "xyes" ; then
12698
12699$as_echo "#define HAVE_INT64_T 1" >>confdefs.h
12700
12701fi
12702
12703{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for u_intXX_t types" >&5
12704$as_echo_n "checking for u_intXX_t types... " >&6; }
12705if ${ac_cv_have_u_intxx_t+:} false; then :
12706 $as_echo_n "(cached) " >&6
12707else
12708
12709 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12710/* end confdefs.h. */
12711 #include <sys/types.h>
12712int
12713main ()
12714{
12715 u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;
12716 ;
12717 return 0;
12718}
12719_ACEOF
12720if ac_fn_c_try_compile "$LINENO"; then :
12721 ac_cv_have_u_intxx_t="yes"
12722else
12723 ac_cv_have_u_intxx_t="no"
12724
12725fi
12726rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
12727
12728fi
12729{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_u_intxx_t" >&5
12730$as_echo "$ac_cv_have_u_intxx_t" >&6; }
12731if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
12732
12733$as_echo "#define HAVE_U_INTXX_T 1" >>confdefs.h
12734
12735 have_u_intxx_t=1
12736fi
12737
12738if test -z "$have_u_intxx_t" ; then
12739 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for u_intXX_t types in sys/socket.h" >&5
12740$as_echo_n "checking for u_intXX_t types in sys/socket.h... " >&6; }
12741 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12742/* end confdefs.h. */
12743 #include <sys/socket.h>
12744int
12745main ()
12746{
12747 u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;
12748 ;
12749 return 0;
12750}
12751_ACEOF
12752if ac_fn_c_try_compile "$LINENO"; then :
12753
12754 $as_echo "#define HAVE_U_INTXX_T 1" >>confdefs.h
12755
12756 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
12757$as_echo "yes" >&6; }
12758
12759else
12760 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
12761$as_echo "no" >&6; }
12762
12763fi
12764rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
12765fi
12766
12767{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for u_int64_t types" >&5
12768$as_echo_n "checking for u_int64_t types... " >&6; }
12769if ${ac_cv_have_u_int64_t+:} false; then :
12770 $as_echo_n "(cached) " >&6
12771else
12772
12773 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12774/* end confdefs.h. */
12775 #include <sys/types.h>
12776int
12777main ()
12778{
12779 u_int64_t a; a = 1;
12780 ;
12781 return 0;
12782}
12783_ACEOF
12784if ac_fn_c_try_compile "$LINENO"; then :
12785 ac_cv_have_u_int64_t="yes"
12786else
12787 ac_cv_have_u_int64_t="no"
12788
12789fi
12790rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
12791
12792fi
12793{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_u_int64_t" >&5
12794$as_echo "$ac_cv_have_u_int64_t" >&6; }
12795if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
12796
12797$as_echo "#define HAVE_U_INT64_T 1" >>confdefs.h
12798
12799 have_u_int64_t=1
12800fi
12801
12802if test -z "$have_u_int64_t" ; then
12803 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for u_int64_t type in sys/bitypes.h" >&5
12804$as_echo_n "checking for u_int64_t type in sys/bitypes.h... " >&6; }
12805 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12806/* end confdefs.h. */
12807 #include <sys/bitypes.h>
12808int
12809main ()
12810{
12811 u_int64_t a; a = 1
12812 ;
12813 return 0;
12814}
12815_ACEOF
12816if ac_fn_c_try_compile "$LINENO"; then :
12817
12818 $as_echo "#define HAVE_U_INT64_T 1" >>confdefs.h
12819
12820 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
12821$as_echo "yes" >&6; }
12822
12823else
12824 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
12825$as_echo "no" >&6; }
12826
12827fi
12828rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
12829fi
12830
12831if test -z "$have_u_intxx_t" ; then
12832 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for uintXX_t types" >&5
12833$as_echo_n "checking for uintXX_t types... " >&6; }
12834if ${ac_cv_have_uintxx_t+:} false; then :
12835 $as_echo_n "(cached) " >&6
12836else
12837
12838 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12839/* end confdefs.h. */
12840
12841#include <sys/types.h>
12842
12843int
12844main ()
12845{
12846
12847 uint8_t a;
12848 uint16_t b;
12849 uint32_t c;
12850 a = b = c = 1;
12851
12852 ;
12853 return 0;
12854}
12855_ACEOF
12856if ac_fn_c_try_compile "$LINENO"; then :
12857 ac_cv_have_uintxx_t="yes"
12858else
12859 ac_cv_have_uintxx_t="no"
12860
12861fi
12862rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
12863
12864fi
12865{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_uintxx_t" >&5
12866$as_echo "$ac_cv_have_uintxx_t" >&6; }
12867 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
12868
12869$as_echo "#define HAVE_UINTXX_T 1" >>confdefs.h
12870
12871 fi
12872fi
12873
12874if test -z "$have_uintxx_t" ; then
12875 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for uintXX_t types in stdint.h" >&5
12876$as_echo_n "checking for uintXX_t types in stdint.h... " >&6; }
12877 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12878/* end confdefs.h. */
12879 #include <stdint.h>
12880int
12881main ()
12882{
12883 uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;
12884 ;
12885 return 0;
12886}
12887_ACEOF
12888if ac_fn_c_try_compile "$LINENO"; then :
12889
12890 $as_echo "#define HAVE_UINTXX_T 1" >>confdefs.h
12891
12892 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
12893$as_echo "yes" >&6; }
12894
12895else
12896 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
12897$as_echo "no" >&6; }
12898
12899fi
12900rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
12901fi
12902
12903if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
12904 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
12905then
12906 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for intXX_t and u_intXX_t types in sys/bitypes.h" >&5
12907$as_echo_n "checking for intXX_t and u_intXX_t types in sys/bitypes.h... " >&6; }
12908 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12909/* end confdefs.h. */
12910
12911#include <sys/bitypes.h>
12912
12913int
12914main ()
12915{
12916
12917 int8_t a; int16_t b; int32_t c;
12918 u_int8_t e; u_int16_t f; u_int32_t g;
12919 a = b = c = e = f = g = 1;
12920
12921 ;
12922 return 0;
12923}
12924_ACEOF
12925if ac_fn_c_try_compile "$LINENO"; then :
12926
12927 $as_echo "#define HAVE_U_INTXX_T 1" >>confdefs.h
12928
12929 $as_echo "#define HAVE_INTXX_T 1" >>confdefs.h
12930
12931 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
12932$as_echo "yes" >&6; }
12933
12934else
12935 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
12936$as_echo "no" >&6; }
12937
12938fi
12939rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
12940fi
12941
12942
12943{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for u_char" >&5
12944$as_echo_n "checking for u_char... " >&6; }
12945if ${ac_cv_have_u_char+:} false; then :
12946 $as_echo_n "(cached) " >&6
12947else
12948
12949 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12950/* end confdefs.h. */
12951 #include <sys/types.h>
12952int
12953main ()
12954{
12955 u_char foo; foo = 125;
12956 ;
12957 return 0;
12958}
12959_ACEOF
12960if ac_fn_c_try_compile "$LINENO"; then :
12961 ac_cv_have_u_char="yes"
12962else
12963 ac_cv_have_u_char="no"
12964
12965fi
12966rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
12967
12968fi
12969{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_u_char" >&5
12970$as_echo "$ac_cv_have_u_char" >&6; }
12971if test "x$ac_cv_have_u_char" = "xyes" ; then
12972
12973$as_echo "#define HAVE_U_CHAR 1" >>confdefs.h
12974
12975fi
12976
12977
12978 ac_fn_c_check_type "$LINENO" "socklen_t" "ac_cv_type_socklen_t" "#include <sys/types.h>
12979#include <sys/socket.h>
12980"
12981if test "x$ac_cv_type_socklen_t" = xyes; then :
12982
12983else
12984
12985 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for socklen_t equivalent" >&5
12986$as_echo_n "checking for socklen_t equivalent... " >&6; }
12987 if ${curl_cv_socklen_t_equiv+:} false; then :
12988 $as_echo_n "(cached) " >&6
12989else
12990
12991 # Systems have either "struct sockaddr *" or
12992 # "void *" as the second argument to getpeername
12993 curl_cv_socklen_t_equiv=
12994 for arg2 in "struct sockaddr" void; do
12995 for t in int size_t unsigned long "unsigned long"; do
12996 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
12997/* end confdefs.h. */
12998
12999 #include <sys/types.h>
13000 #include <sys/socket.h>
13001
13002 int getpeername (int, $arg2 *, $t *);
13003
13004int
13005main ()
13006{
13007
13008 $t len;
13009 getpeername(0,0,&len);
13010
13011 ;
13012 return 0;
13013}
13014_ACEOF
13015if ac_fn_c_try_compile "$LINENO"; then :
13016
13017 curl_cv_socklen_t_equiv="$t"
13018 break
13019
13020fi
13021rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
13022 done
13023 done
13024
13025 if test "x$curl_cv_socklen_t_equiv" = x; then
13026 as_fn_error $? "Cannot find a type to use in place of socklen_t" "$LINENO" 5
13027 fi
13028
13029fi
13030
13031 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $curl_cv_socklen_t_equiv" >&5
13032$as_echo "$curl_cv_socklen_t_equiv" >&6; }
13033
13034cat >>confdefs.h <<_ACEOF
13035#define socklen_t $curl_cv_socklen_t_equiv
13036_ACEOF
13037
13038fi
13039
13040
13041
13042ac_fn_c_check_type "$LINENO" "sig_atomic_t" "ac_cv_type_sig_atomic_t" "#include <signal.h>
13043"
13044if test "x$ac_cv_type_sig_atomic_t" = xyes; then :
13045
13046cat >>confdefs.h <<_ACEOF
13047#define HAVE_SIG_ATOMIC_T 1
13048_ACEOF
13049
13050
13051fi
13052
13053ac_fn_c_check_type "$LINENO" "fsblkcnt_t" "ac_cv_type_fsblkcnt_t" "
13054#include <sys/types.h>
13055#ifdef HAVE_SYS_BITYPES_H
13056#include <sys/bitypes.h>
13057#endif
13058#ifdef HAVE_SYS_STATFS_H
13059#include <sys/statfs.h>
13060#endif
13061#ifdef HAVE_SYS_STATVFS_H
13062#include <sys/statvfs.h>
13063#endif
13064
13065"
13066if test "x$ac_cv_type_fsblkcnt_t" = xyes; then :
13067
13068cat >>confdefs.h <<_ACEOF
13069#define HAVE_FSBLKCNT_T 1
13070_ACEOF
13071
13072
13073fi
13074ac_fn_c_check_type "$LINENO" "fsfilcnt_t" "ac_cv_type_fsfilcnt_t" "
13075#include <sys/types.h>
13076#ifdef HAVE_SYS_BITYPES_H
13077#include <sys/bitypes.h>
13078#endif
13079#ifdef HAVE_SYS_STATFS_H
13080#include <sys/statfs.h>
13081#endif
13082#ifdef HAVE_SYS_STATVFS_H
13083#include <sys/statvfs.h>
13084#endif
13085
13086"
13087if test "x$ac_cv_type_fsfilcnt_t" = xyes; then :
13088
13089cat >>confdefs.h <<_ACEOF
13090#define HAVE_FSFILCNT_T 1
13091_ACEOF
13092
13093
13094fi
13095
13096
13097ac_fn_c_check_type "$LINENO" "in_addr_t" "ac_cv_type_in_addr_t" "#include <sys/types.h>
13098#include <netinet/in.h>
13099"
13100if test "x$ac_cv_type_in_addr_t" = xyes; then :
13101
13102cat >>confdefs.h <<_ACEOF
13103#define HAVE_IN_ADDR_T 1
13104_ACEOF
13105
13106
13107fi
13108ac_fn_c_check_type "$LINENO" "in_port_t" "ac_cv_type_in_port_t" "#include <sys/types.h>
13109#include <netinet/in.h>
13110"
13111if test "x$ac_cv_type_in_port_t" = xyes; then :
13112
13113cat >>confdefs.h <<_ACEOF
13114#define HAVE_IN_PORT_T 1
13115_ACEOF
13116
13117
13118fi
13119
13120
13121{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for size_t" >&5
13122$as_echo_n "checking for size_t... " >&6; }
13123if ${ac_cv_have_size_t+:} false; then :
13124 $as_echo_n "(cached) " >&6
13125else
13126
13127 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13128/* end confdefs.h. */
13129 #include <sys/types.h>
13130int
13131main ()
13132{
13133 size_t foo; foo = 1235;
13134 ;
13135 return 0;
13136}
13137_ACEOF
13138if ac_fn_c_try_compile "$LINENO"; then :
13139 ac_cv_have_size_t="yes"
13140else
13141 ac_cv_have_size_t="no"
13142
13143fi
13144rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
13145
13146fi
13147{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_size_t" >&5
13148$as_echo "$ac_cv_have_size_t" >&6; }
13149if test "x$ac_cv_have_size_t" = "xyes" ; then
13150
13151$as_echo "#define HAVE_SIZE_T 1" >>confdefs.h
13152
13153fi
13154
13155{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for ssize_t" >&5
13156$as_echo_n "checking for ssize_t... " >&6; }
13157if ${ac_cv_have_ssize_t+:} false; then :
13158 $as_echo_n "(cached) " >&6
13159else
13160
13161 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13162/* end confdefs.h. */
13163 #include <sys/types.h>
13164int
13165main ()
13166{
13167 ssize_t foo; foo = 1235;
13168 ;
13169 return 0;
13170}
13171_ACEOF
13172if ac_fn_c_try_compile "$LINENO"; then :
13173 ac_cv_have_ssize_t="yes"
13174else
13175 ac_cv_have_ssize_t="no"
13176
13177fi
13178rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
13179
13180fi
13181{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_ssize_t" >&5
13182$as_echo "$ac_cv_have_ssize_t" >&6; }
13183if test "x$ac_cv_have_ssize_t" = "xyes" ; then
13184
13185$as_echo "#define HAVE_SSIZE_T 1" >>confdefs.h
13186
13187fi
13188
13189{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for clock_t" >&5
13190$as_echo_n "checking for clock_t... " >&6; }
13191if ${ac_cv_have_clock_t+:} false; then :
13192 $as_echo_n "(cached) " >&6
13193else
13194
13195 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13196/* end confdefs.h. */
13197 #include <time.h>
13198int
13199main ()
13200{
13201 clock_t foo; foo = 1235;
13202 ;
13203 return 0;
13204}
13205_ACEOF
13206if ac_fn_c_try_compile "$LINENO"; then :
13207 ac_cv_have_clock_t="yes"
13208else
13209 ac_cv_have_clock_t="no"
13210
13211fi
13212rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
13213
13214fi
13215{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_clock_t" >&5
13216$as_echo "$ac_cv_have_clock_t" >&6; }
13217if test "x$ac_cv_have_clock_t" = "xyes" ; then
13218
13219$as_echo "#define HAVE_CLOCK_T 1" >>confdefs.h
13220
13221fi
13222
13223{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for sa_family_t" >&5
13224$as_echo_n "checking for sa_family_t... " >&6; }
13225if ${ac_cv_have_sa_family_t+:} false; then :
13226 $as_echo_n "(cached) " >&6
13227else
13228
13229 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13230/* end confdefs.h. */
13231
13232#include <sys/types.h>
13233#include <sys/socket.h>
13234
13235int
13236main ()
13237{
13238 sa_family_t foo; foo = 1235;
13239 ;
13240 return 0;
13241}
13242_ACEOF
13243if ac_fn_c_try_compile "$LINENO"; then :
13244 ac_cv_have_sa_family_t="yes"
13245else
13246 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13247/* end confdefs.h. */
13248
13249#include <sys/types.h>
13250#include <sys/socket.h>
13251#include <netinet/in.h>
13252
13253int
13254main ()
13255{
13256 sa_family_t foo; foo = 1235;
13257 ;
13258 return 0;
13259}
13260_ACEOF
13261if ac_fn_c_try_compile "$LINENO"; then :
13262 ac_cv_have_sa_family_t="yes"
13263else
13264 ac_cv_have_sa_family_t="no"
13265
13266fi
13267rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
13268
13269fi
13270rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
13271
13272fi
13273{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_sa_family_t" >&5
13274$as_echo "$ac_cv_have_sa_family_t" >&6; }
13275if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
13276
13277$as_echo "#define HAVE_SA_FAMILY_T 1" >>confdefs.h
13278
13279fi
13280
13281{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for pid_t" >&5
13282$as_echo_n "checking for pid_t... " >&6; }
13283if ${ac_cv_have_pid_t+:} false; then :
13284 $as_echo_n "(cached) " >&6
13285else
13286
13287 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13288/* end confdefs.h. */
13289 #include <sys/types.h>
13290int
13291main ()
13292{
13293 pid_t foo; foo = 1235;
13294 ;
13295 return 0;
13296}
13297_ACEOF
13298if ac_fn_c_try_compile "$LINENO"; then :
13299 ac_cv_have_pid_t="yes"
13300else
13301 ac_cv_have_pid_t="no"
13302
13303fi
13304rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
13305
13306fi
13307{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_pid_t" >&5
13308$as_echo "$ac_cv_have_pid_t" >&6; }
13309if test "x$ac_cv_have_pid_t" = "xyes" ; then
13310
13311$as_echo "#define HAVE_PID_T 1" >>confdefs.h
13312
13313fi
13314
13315{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for mode_t" >&5
13316$as_echo_n "checking for mode_t... " >&6; }
13317if ${ac_cv_have_mode_t+:} false; then :
13318 $as_echo_n "(cached) " >&6
13319else
13320
13321 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13322/* end confdefs.h. */
13323 #include <sys/types.h>
13324int
13325main ()
13326{
13327 mode_t foo; foo = 1235;
13328 ;
13329 return 0;
13330}
13331_ACEOF
13332if ac_fn_c_try_compile "$LINENO"; then :
13333 ac_cv_have_mode_t="yes"
13334else
13335 ac_cv_have_mode_t="no"
13336
13337fi
13338rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
13339
13340fi
13341{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_mode_t" >&5
13342$as_echo "$ac_cv_have_mode_t" >&6; }
13343if test "x$ac_cv_have_mode_t" = "xyes" ; then
13344
13345$as_echo "#define HAVE_MODE_T 1" >>confdefs.h
13346
13347fi
13348
13349
13350{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for struct sockaddr_storage" >&5
13351$as_echo_n "checking for struct sockaddr_storage... " >&6; }
13352if ${ac_cv_have_struct_sockaddr_storage+:} false; then :
13353 $as_echo_n "(cached) " >&6
13354else
13355
13356 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13357/* end confdefs.h. */
13358
13359#include <sys/types.h>
13360#include <sys/socket.h>
13361
13362int
13363main ()
13364{
13365 struct sockaddr_storage s;
13366 ;
13367 return 0;
13368}
13369_ACEOF
13370if ac_fn_c_try_compile "$LINENO"; then :
13371 ac_cv_have_struct_sockaddr_storage="yes"
13372else
13373 ac_cv_have_struct_sockaddr_storage="no"
13374
13375fi
13376rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
13377
13378fi
13379{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_struct_sockaddr_storage" >&5
13380$as_echo "$ac_cv_have_struct_sockaddr_storage" >&6; }
13381if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
13382
13383$as_echo "#define HAVE_STRUCT_SOCKADDR_STORAGE 1" >>confdefs.h
13384
13385fi
13386
13387{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for struct sockaddr_in6" >&5
13388$as_echo_n "checking for struct sockaddr_in6... " >&6; }
13389if ${ac_cv_have_struct_sockaddr_in6+:} false; then :
13390 $as_echo_n "(cached) " >&6
13391else
13392
13393 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13394/* end confdefs.h. */
13395
13396#include <sys/types.h>
13397#include <netinet/in.h>
13398
13399int
13400main ()
13401{
13402 struct sockaddr_in6 s; s.sin6_family = 0;
13403 ;
13404 return 0;
13405}
13406_ACEOF
13407if ac_fn_c_try_compile "$LINENO"; then :
13408 ac_cv_have_struct_sockaddr_in6="yes"
13409else
13410 ac_cv_have_struct_sockaddr_in6="no"
13411
13412fi
13413rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
13414
13415fi
13416{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_struct_sockaddr_in6" >&5
13417$as_echo "$ac_cv_have_struct_sockaddr_in6" >&6; }
13418if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
13419
13420$as_echo "#define HAVE_STRUCT_SOCKADDR_IN6 1" >>confdefs.h
13421
13422fi
13423
13424{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for struct in6_addr" >&5
13425$as_echo_n "checking for struct in6_addr... " >&6; }
13426if ${ac_cv_have_struct_in6_addr+:} false; then :
13427 $as_echo_n "(cached) " >&6
13428else
13429
13430 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13431/* end confdefs.h. */
13432
13433#include <sys/types.h>
13434#include <netinet/in.h>
13435
13436int
13437main ()
13438{
13439 struct in6_addr s; s.s6_addr[0] = 0;
13440 ;
13441 return 0;
13442}
13443_ACEOF
13444if ac_fn_c_try_compile "$LINENO"; then :
13445 ac_cv_have_struct_in6_addr="yes"
13446else
13447 ac_cv_have_struct_in6_addr="no"
13448
13449fi
13450rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
13451
13452fi
13453{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_struct_in6_addr" >&5
13454$as_echo "$ac_cv_have_struct_in6_addr" >&6; }
13455if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
13456
13457$as_echo "#define HAVE_STRUCT_IN6_ADDR 1" >>confdefs.h
13458
13459
13460 ac_fn_c_check_member "$LINENO" "struct sockaddr_in6" "sin6_scope_id" "ac_cv_member_struct_sockaddr_in6_sin6_scope_id" "
13461#ifdef HAVE_SYS_TYPES_H
13462#include <sys/types.h>
13463#endif
13464#include <netinet/in.h>
13465
13466"
13467if test "x$ac_cv_member_struct_sockaddr_in6_sin6_scope_id" = xyes; then :
13468
13469cat >>confdefs.h <<_ACEOF
13470#define HAVE_STRUCT_SOCKADDR_IN6_SIN6_SCOPE_ID 1
13471_ACEOF
13472
13473
13474fi
13475
13476fi
13477
13478{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for struct addrinfo" >&5
13479$as_echo_n "checking for struct addrinfo... " >&6; }
13480if ${ac_cv_have_struct_addrinfo+:} false; then :
13481 $as_echo_n "(cached) " >&6
13482else
13483
13484 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13485/* end confdefs.h. */
13486
13487#include <sys/types.h>
13488#include <sys/socket.h>
13489#include <netdb.h>
13490
13491int
13492main ()
13493{
13494 struct addrinfo s; s.ai_flags = AI_PASSIVE;
13495 ;
13496 return 0;
13497}
13498_ACEOF
13499if ac_fn_c_try_compile "$LINENO"; then :
13500 ac_cv_have_struct_addrinfo="yes"
13501else
13502 ac_cv_have_struct_addrinfo="no"
13503
13504fi
13505rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
13506
13507fi
13508{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_struct_addrinfo" >&5
13509$as_echo "$ac_cv_have_struct_addrinfo" >&6; }
13510if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
13511
13512$as_echo "#define HAVE_STRUCT_ADDRINFO 1" >>confdefs.h
13513
13514fi
13515
13516{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for struct timeval" >&5
13517$as_echo_n "checking for struct timeval... " >&6; }
13518if ${ac_cv_have_struct_timeval+:} false; then :
13519 $as_echo_n "(cached) " >&6
13520else
13521
13522 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13523/* end confdefs.h. */
13524 #include <sys/time.h>
13525int
13526main ()
13527{
13528 struct timeval tv; tv.tv_sec = 1;
13529 ;
13530 return 0;
13531}
13532_ACEOF
13533if ac_fn_c_try_compile "$LINENO"; then :
13534 ac_cv_have_struct_timeval="yes"
13535else
13536 ac_cv_have_struct_timeval="no"
13537
13538fi
13539rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
13540
13541fi
13542{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_struct_timeval" >&5
13543$as_echo "$ac_cv_have_struct_timeval" >&6; }
13544if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
13545
13546$as_echo "#define HAVE_STRUCT_TIMEVAL 1" >>confdefs.h
13547
13548 have_struct_timeval=1
13549fi
13550
13551ac_fn_c_check_type "$LINENO" "struct timespec" "ac_cv_type_struct_timespec" "$ac_includes_default"
13552if test "x$ac_cv_type_struct_timespec" = xyes; then :
13553
13554cat >>confdefs.h <<_ACEOF
13555#define HAVE_STRUCT_TIMESPEC 1
13556_ACEOF
13557
13558
13559fi
13560
13561
13562# We need int64_t or else certian parts of the compile will fail.
13563if test "x$ac_cv_have_int64_t" = "xno" && \
13564 test "x$ac_cv_sizeof_long_int" != "x8" && \
13565 test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
13566 echo "OpenSSH requires int64_t support. Contact your vendor or install"
13567 echo "an alternative compiler (I.E., GCC) before continuing."
13568 echo ""
13569 exit 1;
13570else
13571 if test "$cross_compiling" = yes; then :
13572 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: Assuming working snprintf()" >&5
13573$as_echo "$as_me: WARNING: cross compiling: Assuming working snprintf()" >&2;}
13574
13575else
13576 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13577/* end confdefs.h. */
13578
13579#include <stdio.h>
13580#include <string.h>
13581#ifdef HAVE_SNPRINTF
13582main()
13583{
13584 char buf[50];
13585 char expected_out[50];
13586 int mazsize = 50 ;
13587#if (SIZEOF_LONG_INT == 8)
13588 long int num = 0x7fffffffffffffff;
13589#else
13590 long long num = 0x7fffffffffffffffll;
13591#endif
13592 strcpy(expected_out, "9223372036854775807");
13593 snprintf(buf, mazsize, "%lld", num);
13594 if(strcmp(buf, expected_out) != 0)
13595 exit(1);
13596 exit(0);
13597}
13598#else
13599main() { exit(0); }
13600#endif
13601
13602_ACEOF
13603if ac_fn_c_try_run "$LINENO"; then :
13604 true
13605else
13606 $as_echo "#define BROKEN_SNPRINTF 1" >>confdefs.h
13607
13608fi
13609rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
13610 conftest.$ac_objext conftest.beam conftest.$ac_ext
13611fi
13612
13613fi
13614
13615
13616# look for field 'ut_host' in header 'utmp.h'
13617 ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
13618 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_host
13619 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_host field in utmp.h" >&5
13620$as_echo_n "checking for ut_host field in utmp.h... " >&6; }
13621 if eval \${$ossh_varname+:} false; then :
13622 $as_echo_n "(cached) " >&6
13623else
13624
13625 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13626/* end confdefs.h. */
13627#include <utmp.h>
13628
13629_ACEOF
13630if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
13631 $EGREP "ut_host" >/dev/null 2>&1; then :
13632 eval "$ossh_varname=yes"
13633else
13634 eval "$ossh_varname=no"
13635fi
13636rm -f conftest*
13637
13638fi
13639
13640 ossh_result=`eval 'echo $'"$ossh_varname"`
13641 if test -n "`echo $ossh_varname`"; then
13642 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
13643$as_echo "$ossh_result" >&6; }
13644 if test "x$ossh_result" = "xyes"; then
13645
13646$as_echo "#define HAVE_HOST_IN_UTMP 1" >>confdefs.h
13647
13648 fi
13649 else
13650 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
13651$as_echo "no" >&6; }
13652 fi
13653
13654
13655# look for field 'ut_host' in header 'utmpx.h'
13656 ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
13657 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_host
13658 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_host field in utmpx.h" >&5
13659$as_echo_n "checking for ut_host field in utmpx.h... " >&6; }
13660 if eval \${$ossh_varname+:} false; then :
13661 $as_echo_n "(cached) " >&6
13662else
13663
13664 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13665/* end confdefs.h. */
13666#include <utmpx.h>
13667
13668_ACEOF
13669if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
13670 $EGREP "ut_host" >/dev/null 2>&1; then :
13671 eval "$ossh_varname=yes"
13672else
13673 eval "$ossh_varname=no"
13674fi
13675rm -f conftest*
13676
13677fi
13678
13679 ossh_result=`eval 'echo $'"$ossh_varname"`
13680 if test -n "`echo $ossh_varname`"; then
13681 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
13682$as_echo "$ossh_result" >&6; }
13683 if test "x$ossh_result" = "xyes"; then
13684
13685$as_echo "#define HAVE_HOST_IN_UTMPX 1" >>confdefs.h
13686
13687 fi
13688 else
13689 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
13690$as_echo "no" >&6; }
13691 fi
13692
13693
13694# look for field 'syslen' in header 'utmpx.h'
13695 ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
13696 ossh_varname="ossh_cv_$ossh_safe""_has_"syslen
13697 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for syslen field in utmpx.h" >&5
13698$as_echo_n "checking for syslen field in utmpx.h... " >&6; }
13699 if eval \${$ossh_varname+:} false; then :
13700 $as_echo_n "(cached) " >&6
13701else
13702
13703 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13704/* end confdefs.h. */
13705#include <utmpx.h>
13706
13707_ACEOF
13708if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
13709 $EGREP "syslen" >/dev/null 2>&1; then :
13710 eval "$ossh_varname=yes"
13711else
13712 eval "$ossh_varname=no"
13713fi
13714rm -f conftest*
13715
13716fi
13717
13718 ossh_result=`eval 'echo $'"$ossh_varname"`
13719 if test -n "`echo $ossh_varname`"; then
13720 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
13721$as_echo "$ossh_result" >&6; }
13722 if test "x$ossh_result" = "xyes"; then
13723
13724$as_echo "#define HAVE_SYSLEN_IN_UTMPX 1" >>confdefs.h
13725
13726 fi
13727 else
13728 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
13729$as_echo "no" >&6; }
13730 fi
13731
13732
13733# look for field 'ut_pid' in header 'utmp.h'
13734 ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
13735 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_pid
13736 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_pid field in utmp.h" >&5
13737$as_echo_n "checking for ut_pid field in utmp.h... " >&6; }
13738 if eval \${$ossh_varname+:} false; then :
13739 $as_echo_n "(cached) " >&6
13740else
13741
13742 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13743/* end confdefs.h. */
13744#include <utmp.h>
13745
13746_ACEOF
13747if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
13748 $EGREP "ut_pid" >/dev/null 2>&1; then :
13749 eval "$ossh_varname=yes"
13750else
13751 eval "$ossh_varname=no"
13752fi
13753rm -f conftest*
13754
13755fi
13756
13757 ossh_result=`eval 'echo $'"$ossh_varname"`
13758 if test -n "`echo $ossh_varname`"; then
13759 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
13760$as_echo "$ossh_result" >&6; }
13761 if test "x$ossh_result" = "xyes"; then
13762
13763$as_echo "#define HAVE_PID_IN_UTMP 1" >>confdefs.h
13764
13765 fi
13766 else
13767 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
13768$as_echo "no" >&6; }
13769 fi
13770
13771
13772# look for field 'ut_type' in header 'utmp.h'
13773 ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
13774 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_type
13775 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_type field in utmp.h" >&5
13776$as_echo_n "checking for ut_type field in utmp.h... " >&6; }
13777 if eval \${$ossh_varname+:} false; then :
13778 $as_echo_n "(cached) " >&6
13779else
13780
13781 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13782/* end confdefs.h. */
13783#include <utmp.h>
13784
13785_ACEOF
13786if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
13787 $EGREP "ut_type" >/dev/null 2>&1; then :
13788 eval "$ossh_varname=yes"
13789else
13790 eval "$ossh_varname=no"
13791fi
13792rm -f conftest*
13793
13794fi
13795
13796 ossh_result=`eval 'echo $'"$ossh_varname"`
13797 if test -n "`echo $ossh_varname`"; then
13798 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
13799$as_echo "$ossh_result" >&6; }
13800 if test "x$ossh_result" = "xyes"; then
13801
13802$as_echo "#define HAVE_TYPE_IN_UTMP 1" >>confdefs.h
13803
13804 fi
13805 else
13806 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
13807$as_echo "no" >&6; }
13808 fi
13809
13810
13811# look for field 'ut_type' in header 'utmpx.h'
13812 ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
13813 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_type
13814 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_type field in utmpx.h" >&5
13815$as_echo_n "checking for ut_type field in utmpx.h... " >&6; }
13816 if eval \${$ossh_varname+:} false; then :
13817 $as_echo_n "(cached) " >&6
13818else
13819
13820 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13821/* end confdefs.h. */
13822#include <utmpx.h>
13823
13824_ACEOF
13825if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
13826 $EGREP "ut_type" >/dev/null 2>&1; then :
13827 eval "$ossh_varname=yes"
13828else
13829 eval "$ossh_varname=no"
13830fi
13831rm -f conftest*
13832
13833fi
13834
13835 ossh_result=`eval 'echo $'"$ossh_varname"`
13836 if test -n "`echo $ossh_varname`"; then
13837 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
13838$as_echo "$ossh_result" >&6; }
13839 if test "x$ossh_result" = "xyes"; then
13840
13841$as_echo "#define HAVE_TYPE_IN_UTMPX 1" >>confdefs.h
13842
13843 fi
13844 else
13845 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
13846$as_echo "no" >&6; }
13847 fi
13848
13849
13850# look for field 'ut_tv' in header 'utmp.h'
13851 ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
13852 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_tv
13853 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_tv field in utmp.h" >&5
13854$as_echo_n "checking for ut_tv field in utmp.h... " >&6; }
13855 if eval \${$ossh_varname+:} false; then :
13856 $as_echo_n "(cached) " >&6
13857else
13858
13859 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13860/* end confdefs.h. */
13861#include <utmp.h>
13862
13863_ACEOF
13864if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
13865 $EGREP "ut_tv" >/dev/null 2>&1; then :
13866 eval "$ossh_varname=yes"
13867else
13868 eval "$ossh_varname=no"
13869fi
13870rm -f conftest*
13871
13872fi
13873
13874 ossh_result=`eval 'echo $'"$ossh_varname"`
13875 if test -n "`echo $ossh_varname`"; then
13876 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
13877$as_echo "$ossh_result" >&6; }
13878 if test "x$ossh_result" = "xyes"; then
13879
13880$as_echo "#define HAVE_TV_IN_UTMP 1" >>confdefs.h
13881
13882 fi
13883 else
13884 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
13885$as_echo "no" >&6; }
13886 fi
13887
13888
13889# look for field 'ut_id' in header 'utmp.h'
13890 ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
13891 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_id
13892 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_id field in utmp.h" >&5
13893$as_echo_n "checking for ut_id field in utmp.h... " >&6; }
13894 if eval \${$ossh_varname+:} false; then :
13895 $as_echo_n "(cached) " >&6
13896else
13897
13898 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13899/* end confdefs.h. */
13900#include <utmp.h>
13901
13902_ACEOF
13903if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
13904 $EGREP "ut_id" >/dev/null 2>&1; then :
13905 eval "$ossh_varname=yes"
13906else
13907 eval "$ossh_varname=no"
13908fi
13909rm -f conftest*
13910
13911fi
13912
13913 ossh_result=`eval 'echo $'"$ossh_varname"`
13914 if test -n "`echo $ossh_varname`"; then
13915 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
13916$as_echo "$ossh_result" >&6; }
13917 if test "x$ossh_result" = "xyes"; then
13918
13919$as_echo "#define HAVE_ID_IN_UTMP 1" >>confdefs.h
13920
13921 fi
13922 else
13923 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
13924$as_echo "no" >&6; }
13925 fi
13926
13927
13928# look for field 'ut_id' in header 'utmpx.h'
13929 ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
13930 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_id
13931 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_id field in utmpx.h" >&5
13932$as_echo_n "checking for ut_id field in utmpx.h... " >&6; }
13933 if eval \${$ossh_varname+:} false; then :
13934 $as_echo_n "(cached) " >&6
13935else
13936
13937 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13938/* end confdefs.h. */
13939#include <utmpx.h>
13940
13941_ACEOF
13942if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
13943 $EGREP "ut_id" >/dev/null 2>&1; then :
13944 eval "$ossh_varname=yes"
13945else
13946 eval "$ossh_varname=no"
13947fi
13948rm -f conftest*
13949
13950fi
13951
13952 ossh_result=`eval 'echo $'"$ossh_varname"`
13953 if test -n "`echo $ossh_varname`"; then
13954 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
13955$as_echo "$ossh_result" >&6; }
13956 if test "x$ossh_result" = "xyes"; then
13957
13958$as_echo "#define HAVE_ID_IN_UTMPX 1" >>confdefs.h
13959
13960 fi
13961 else
13962 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
13963$as_echo "no" >&6; }
13964 fi
13965
13966
13967# look for field 'ut_addr' in header 'utmp.h'
13968 ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
13969 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_addr
13970 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_addr field in utmp.h" >&5
13971$as_echo_n "checking for ut_addr field in utmp.h... " >&6; }
13972 if eval \${$ossh_varname+:} false; then :
13973 $as_echo_n "(cached) " >&6
13974else
13975
13976 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
13977/* end confdefs.h. */
13978#include <utmp.h>
13979
13980_ACEOF
13981if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
13982 $EGREP "ut_addr" >/dev/null 2>&1; then :
13983 eval "$ossh_varname=yes"
13984else
13985 eval "$ossh_varname=no"
13986fi
13987rm -f conftest*
13988
13989fi
13990
13991 ossh_result=`eval 'echo $'"$ossh_varname"`
13992 if test -n "`echo $ossh_varname`"; then
13993 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
13994$as_echo "$ossh_result" >&6; }
13995 if test "x$ossh_result" = "xyes"; then
13996
13997$as_echo "#define HAVE_ADDR_IN_UTMP 1" >>confdefs.h
13998
13999 fi
14000 else
14001 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
14002$as_echo "no" >&6; }
14003 fi
14004
14005
14006# look for field 'ut_addr' in header 'utmpx.h'
14007 ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
14008 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_addr
14009 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_addr field in utmpx.h" >&5
14010$as_echo_n "checking for ut_addr field in utmpx.h... " >&6; }
14011 if eval \${$ossh_varname+:} false; then :
14012 $as_echo_n "(cached) " >&6
14013else
14014
14015 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14016/* end confdefs.h. */
14017#include <utmpx.h>
14018
14019_ACEOF
14020if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
14021 $EGREP "ut_addr" >/dev/null 2>&1; then :
14022 eval "$ossh_varname=yes"
14023else
14024 eval "$ossh_varname=no"
14025fi
14026rm -f conftest*
14027
14028fi
14029
14030 ossh_result=`eval 'echo $'"$ossh_varname"`
14031 if test -n "`echo $ossh_varname`"; then
14032 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
14033$as_echo "$ossh_result" >&6; }
14034 if test "x$ossh_result" = "xyes"; then
14035
14036$as_echo "#define HAVE_ADDR_IN_UTMPX 1" >>confdefs.h
14037
14038 fi
14039 else
14040 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
14041$as_echo "no" >&6; }
14042 fi
14043
14044
14045# look for field 'ut_addr_v6' in header 'utmp.h'
14046 ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
14047 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_addr_v6
14048 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_addr_v6 field in utmp.h" >&5
14049$as_echo_n "checking for ut_addr_v6 field in utmp.h... " >&6; }
14050 if eval \${$ossh_varname+:} false; then :
14051 $as_echo_n "(cached) " >&6
14052else
14053
14054 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14055/* end confdefs.h. */
14056#include <utmp.h>
14057
14058_ACEOF
14059if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
14060 $EGREP "ut_addr_v6" >/dev/null 2>&1; then :
14061 eval "$ossh_varname=yes"
14062else
14063 eval "$ossh_varname=no"
14064fi
14065rm -f conftest*
14066
14067fi
14068
14069 ossh_result=`eval 'echo $'"$ossh_varname"`
14070 if test -n "`echo $ossh_varname`"; then
14071 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
14072$as_echo "$ossh_result" >&6; }
14073 if test "x$ossh_result" = "xyes"; then
14074
14075$as_echo "#define HAVE_ADDR_V6_IN_UTMP 1" >>confdefs.h
14076
14077 fi
14078 else
14079 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
14080$as_echo "no" >&6; }
14081 fi
14082
14083
14084# look for field 'ut_addr_v6' in header 'utmpx.h'
14085 ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
14086 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_addr_v6
14087 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_addr_v6 field in utmpx.h" >&5
14088$as_echo_n "checking for ut_addr_v6 field in utmpx.h... " >&6; }
14089 if eval \${$ossh_varname+:} false; then :
14090 $as_echo_n "(cached) " >&6
14091else
14092
14093 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14094/* end confdefs.h. */
14095#include <utmpx.h>
14096
14097_ACEOF
14098if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
14099 $EGREP "ut_addr_v6" >/dev/null 2>&1; then :
14100 eval "$ossh_varname=yes"
14101else
14102 eval "$ossh_varname=no"
14103fi
14104rm -f conftest*
14105
14106fi
14107
14108 ossh_result=`eval 'echo $'"$ossh_varname"`
14109 if test -n "`echo $ossh_varname`"; then
14110 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
14111$as_echo "$ossh_result" >&6; }
14112 if test "x$ossh_result" = "xyes"; then
14113
14114$as_echo "#define HAVE_ADDR_V6_IN_UTMPX 1" >>confdefs.h
14115
14116 fi
14117 else
14118 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
14119$as_echo "no" >&6; }
14120 fi
14121
14122
14123# look for field 'ut_exit' in header 'utmp.h'
14124 ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
14125 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_exit
14126 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_exit field in utmp.h" >&5
14127$as_echo_n "checking for ut_exit field in utmp.h... " >&6; }
14128 if eval \${$ossh_varname+:} false; then :
14129 $as_echo_n "(cached) " >&6
14130else
14131
14132 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14133/* end confdefs.h. */
14134#include <utmp.h>
14135
14136_ACEOF
14137if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
14138 $EGREP "ut_exit" >/dev/null 2>&1; then :
14139 eval "$ossh_varname=yes"
14140else
14141 eval "$ossh_varname=no"
14142fi
14143rm -f conftest*
14144
14145fi
14146
14147 ossh_result=`eval 'echo $'"$ossh_varname"`
14148 if test -n "`echo $ossh_varname`"; then
14149 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
14150$as_echo "$ossh_result" >&6; }
14151 if test "x$ossh_result" = "xyes"; then
14152
14153$as_echo "#define HAVE_EXIT_IN_UTMP 1" >>confdefs.h
14154
14155 fi
14156 else
14157 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
14158$as_echo "no" >&6; }
14159 fi
14160
14161
14162# look for field 'ut_time' in header 'utmp.h'
14163 ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
14164 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_time
14165 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_time field in utmp.h" >&5
14166$as_echo_n "checking for ut_time field in utmp.h... " >&6; }
14167 if eval \${$ossh_varname+:} false; then :
14168 $as_echo_n "(cached) " >&6
14169else
14170
14171 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14172/* end confdefs.h. */
14173#include <utmp.h>
14174
14175_ACEOF
14176if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
14177 $EGREP "ut_time" >/dev/null 2>&1; then :
14178 eval "$ossh_varname=yes"
14179else
14180 eval "$ossh_varname=no"
14181fi
14182rm -f conftest*
14183
14184fi
14185
14186 ossh_result=`eval 'echo $'"$ossh_varname"`
14187 if test -n "`echo $ossh_varname`"; then
14188 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
14189$as_echo "$ossh_result" >&6; }
14190 if test "x$ossh_result" = "xyes"; then
14191
14192$as_echo "#define HAVE_TIME_IN_UTMP 1" >>confdefs.h
14193
14194 fi
14195 else
14196 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
14197$as_echo "no" >&6; }
14198 fi
14199
14200
14201# look for field 'ut_time' in header 'utmpx.h'
14202 ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
14203 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_time
14204 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_time field in utmpx.h" >&5
14205$as_echo_n "checking for ut_time field in utmpx.h... " >&6; }
14206 if eval \${$ossh_varname+:} false; then :
14207 $as_echo_n "(cached) " >&6
14208else
14209
14210 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14211/* end confdefs.h. */
14212#include <utmpx.h>
14213
14214_ACEOF
14215if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
14216 $EGREP "ut_time" >/dev/null 2>&1; then :
14217 eval "$ossh_varname=yes"
14218else
14219 eval "$ossh_varname=no"
14220fi
14221rm -f conftest*
14222
14223fi
14224
14225 ossh_result=`eval 'echo $'"$ossh_varname"`
14226 if test -n "`echo $ossh_varname`"; then
14227 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
14228$as_echo "$ossh_result" >&6; }
14229 if test "x$ossh_result" = "xyes"; then
14230
14231$as_echo "#define HAVE_TIME_IN_UTMPX 1" >>confdefs.h
14232
14233 fi
14234 else
14235 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
14236$as_echo "no" >&6; }
14237 fi
14238
14239
14240# look for field 'ut_tv' in header 'utmpx.h'
14241 ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
14242 ossh_varname="ossh_cv_$ossh_safe""_has_"ut_tv
14243 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_tv field in utmpx.h" >&5
14244$as_echo_n "checking for ut_tv field in utmpx.h... " >&6; }
14245 if eval \${$ossh_varname+:} false; then :
14246 $as_echo_n "(cached) " >&6
14247else
14248
14249 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14250/* end confdefs.h. */
14251#include <utmpx.h>
14252
14253_ACEOF
14254if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
14255 $EGREP "ut_tv" >/dev/null 2>&1; then :
14256 eval "$ossh_varname=yes"
14257else
14258 eval "$ossh_varname=no"
14259fi
14260rm -f conftest*
14261
14262fi
14263
14264 ossh_result=`eval 'echo $'"$ossh_varname"`
14265 if test -n "`echo $ossh_varname`"; then
14266 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
14267$as_echo "$ossh_result" >&6; }
14268 if test "x$ossh_result" = "xyes"; then
14269
14270$as_echo "#define HAVE_TV_IN_UTMPX 1" >>confdefs.h
14271
14272 fi
14273 else
14274 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
14275$as_echo "no" >&6; }
14276 fi
14277
14278
14279ac_fn_c_check_member "$LINENO" "struct stat" "st_blksize" "ac_cv_member_struct_stat_st_blksize" "$ac_includes_default"
14280if test "x$ac_cv_member_struct_stat_st_blksize" = xyes; then :
14281
14282cat >>confdefs.h <<_ACEOF
14283#define HAVE_STRUCT_STAT_ST_BLKSIZE 1
14284_ACEOF
14285
14286
14287fi
14288
14289ac_fn_c_check_member "$LINENO" "struct __res_state" "retrans" "ac_cv_member_struct___res_state_retrans" "
14290#include <stdio.h>
14291#if HAVE_SYS_TYPES_H
14292# include <sys/types.h>
14293#endif
14294#include <netinet/in.h>
14295#include <arpa/nameser.h>
14296#include <resolv.h>
14297
14298"
14299if test "x$ac_cv_member_struct___res_state_retrans" = xyes; then :
14300
14301else
14302
14303$as_echo "#define __res_state state" >>confdefs.h
14304
14305fi
14306
14307
14308{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for ss_family field in struct sockaddr_storage" >&5
14309$as_echo_n "checking for ss_family field in struct sockaddr_storage... " >&6; }
14310if ${ac_cv_have_ss_family_in_struct_ss+:} false; then :
14311 $as_echo_n "(cached) " >&6
14312else
14313
14314 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14315/* end confdefs.h. */
14316
14317#include <sys/types.h>
14318#include <sys/socket.h>
14319
14320int
14321main ()
14322{
14323 struct sockaddr_storage s; s.ss_family = 1;
14324 ;
14325 return 0;
14326}
14327_ACEOF
14328if ac_fn_c_try_compile "$LINENO"; then :
14329 ac_cv_have_ss_family_in_struct_ss="yes"
14330else
14331 ac_cv_have_ss_family_in_struct_ss="no"
14332fi
14333rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
14334
14335fi
14336{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_ss_family_in_struct_ss" >&5
14337$as_echo "$ac_cv_have_ss_family_in_struct_ss" >&6; }
14338if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
14339
14340$as_echo "#define HAVE_SS_FAMILY_IN_SS 1" >>confdefs.h
14341
14342fi
14343
14344{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for __ss_family field in struct sockaddr_storage" >&5
14345$as_echo_n "checking for __ss_family field in struct sockaddr_storage... " >&6; }
14346if ${ac_cv_have___ss_family_in_struct_ss+:} false; then :
14347 $as_echo_n "(cached) " >&6
14348else
14349
14350 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14351/* end confdefs.h. */
14352
14353#include <sys/types.h>
14354#include <sys/socket.h>
14355
14356int
14357main ()
14358{
14359 struct sockaddr_storage s; s.__ss_family = 1;
14360 ;
14361 return 0;
14362}
14363_ACEOF
14364if ac_fn_c_try_compile "$LINENO"; then :
14365 ac_cv_have___ss_family_in_struct_ss="yes"
14366else
14367 ac_cv_have___ss_family_in_struct_ss="no"
14368
14369fi
14370rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
14371
14372fi
14373{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have___ss_family_in_struct_ss" >&5
14374$as_echo "$ac_cv_have___ss_family_in_struct_ss" >&6; }
14375if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
14376
14377$as_echo "#define HAVE___SS_FAMILY_IN_SS 1" >>confdefs.h
14378
14379fi
14380
14381{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for pw_class field in struct passwd" >&5
14382$as_echo_n "checking for pw_class field in struct passwd... " >&6; }
14383if ${ac_cv_have_pw_class_in_struct_passwd+:} false; then :
14384 $as_echo_n "(cached) " >&6
14385else
14386
14387 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14388/* end confdefs.h. */
14389 #include <pwd.h>
14390int
14391main ()
14392{
14393 struct passwd p; p.pw_class = 0;
14394 ;
14395 return 0;
14396}
14397_ACEOF
14398if ac_fn_c_try_compile "$LINENO"; then :
14399 ac_cv_have_pw_class_in_struct_passwd="yes"
14400else
14401 ac_cv_have_pw_class_in_struct_passwd="no"
14402
14403fi
14404rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
14405
14406fi
14407{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_pw_class_in_struct_passwd" >&5
14408$as_echo "$ac_cv_have_pw_class_in_struct_passwd" >&6; }
14409if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
14410
14411$as_echo "#define HAVE_PW_CLASS_IN_PASSWD 1" >>confdefs.h
14412
14413fi
14414
14415{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for pw_expire field in struct passwd" >&5
14416$as_echo_n "checking for pw_expire field in struct passwd... " >&6; }
14417if ${ac_cv_have_pw_expire_in_struct_passwd+:} false; then :
14418 $as_echo_n "(cached) " >&6
14419else
14420
14421 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14422/* end confdefs.h. */
14423 #include <pwd.h>
14424int
14425main ()
14426{
14427 struct passwd p; p.pw_expire = 0;
14428 ;
14429 return 0;
14430}
14431_ACEOF
14432if ac_fn_c_try_compile "$LINENO"; then :
14433 ac_cv_have_pw_expire_in_struct_passwd="yes"
14434else
14435 ac_cv_have_pw_expire_in_struct_passwd="no"
14436
14437fi
14438rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
14439
14440fi
14441{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_pw_expire_in_struct_passwd" >&5
14442$as_echo "$ac_cv_have_pw_expire_in_struct_passwd" >&6; }
14443if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
14444
14445$as_echo "#define HAVE_PW_EXPIRE_IN_PASSWD 1" >>confdefs.h
14446
14447fi
14448
14449{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for pw_change field in struct passwd" >&5
14450$as_echo_n "checking for pw_change field in struct passwd... " >&6; }
14451if ${ac_cv_have_pw_change_in_struct_passwd+:} false; then :
14452 $as_echo_n "(cached) " >&6
14453else
14454
14455 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14456/* end confdefs.h. */
14457 #include <pwd.h>
14458int
14459main ()
14460{
14461 struct passwd p; p.pw_change = 0;
14462 ;
14463 return 0;
14464}
14465_ACEOF
14466if ac_fn_c_try_compile "$LINENO"; then :
14467 ac_cv_have_pw_change_in_struct_passwd="yes"
14468else
14469 ac_cv_have_pw_change_in_struct_passwd="no"
14470
14471fi
14472rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
14473
14474fi
14475{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_pw_change_in_struct_passwd" >&5
14476$as_echo "$ac_cv_have_pw_change_in_struct_passwd" >&6; }
14477if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
14478
14479$as_echo "#define HAVE_PW_CHANGE_IN_PASSWD 1" >>confdefs.h
14480
14481fi
14482
14483{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for msg_accrights field in struct msghdr" >&5
14484$as_echo_n "checking for msg_accrights field in struct msghdr... " >&6; }
14485if ${ac_cv_have_accrights_in_msghdr+:} false; then :
14486 $as_echo_n "(cached) " >&6
14487else
14488
14489 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14490/* end confdefs.h. */
14491
14492#include <sys/types.h>
14493#include <sys/socket.h>
14494#include <sys/uio.h>
14495
14496int
14497main ()
14498{
14499
14500#ifdef msg_accrights
14501#error "msg_accrights is a macro"
14502exit(1);
14503#endif
14504struct msghdr m;
14505m.msg_accrights = 0;
14506exit(0);
14507
14508 ;
14509 return 0;
14510}
14511_ACEOF
14512if ac_fn_c_try_compile "$LINENO"; then :
14513 ac_cv_have_accrights_in_msghdr="yes"
14514else
14515 ac_cv_have_accrights_in_msghdr="no"
14516
14517fi
14518rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
14519
14520fi
14521{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_accrights_in_msghdr" >&5
14522$as_echo "$ac_cv_have_accrights_in_msghdr" >&6; }
14523if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
14524
14525$as_echo "#define HAVE_ACCRIGHTS_IN_MSGHDR 1" >>confdefs.h
14526
14527fi
14528
14529{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if struct statvfs.f_fsid is integral type" >&5
14530$as_echo_n "checking if struct statvfs.f_fsid is integral type... " >&6; }
14531cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14532/* end confdefs.h. */
14533
14534#include <sys/param.h>
14535#include <sys/stat.h>
14536#ifdef HAVE_SYS_TIME_H
14537# include <sys/time.h>
14538#endif
14539#ifdef HAVE_SYS_MOUNT_H
14540#include <sys/mount.h>
14541#endif
14542#ifdef HAVE_SYS_STATVFS_H
14543#include <sys/statvfs.h>
14544#endif
14545
14546int
14547main ()
14548{
14549 struct statvfs s; s.f_fsid = 0;
14550 ;
14551 return 0;
14552}
14553_ACEOF
14554if ac_fn_c_try_compile "$LINENO"; then :
14555 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
14556$as_echo "yes" >&6; }
14557else
14558 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
14559$as_echo "no" >&6; }
14560
14561 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if fsid_t has member val" >&5
14562$as_echo_n "checking if fsid_t has member val... " >&6; }
14563 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14564/* end confdefs.h. */
14565
14566#include <sys/types.h>
14567#include <sys/statvfs.h>
14568
14569int
14570main ()
14571{
14572 fsid_t t; t.val[0] = 0;
14573 ;
14574 return 0;
14575}
14576_ACEOF
14577if ac_fn_c_try_compile "$LINENO"; then :
14578 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
14579$as_echo "yes" >&6; }
14580
14581$as_echo "#define FSID_HAS_VAL 1" >>confdefs.h
14582
14583else
14584 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
14585$as_echo "no" >&6; }
14586fi
14587rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
14588
14589 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if f_fsid has member __val" >&5
14590$as_echo_n "checking if f_fsid has member __val... " >&6; }
14591 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14592/* end confdefs.h. */
14593
14594#include <sys/types.h>
14595#include <sys/statvfs.h>
14596
14597int
14598main ()
14599{
14600 fsid_t t; t.__val[0] = 0;
14601 ;
14602 return 0;
14603}
14604_ACEOF
14605if ac_fn_c_try_compile "$LINENO"; then :
14606 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
14607$as_echo "yes" >&6; }
14608
14609$as_echo "#define FSID_HAS___VAL 1" >>confdefs.h
14610
14611else
14612 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
14613$as_echo "no" >&6; }
14614fi
14615rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
14616
14617fi
14618rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
14619
14620{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for msg_control field in struct msghdr" >&5
14621$as_echo_n "checking for msg_control field in struct msghdr... " >&6; }
14622if ${ac_cv_have_control_in_msghdr+:} false; then :
14623 $as_echo_n "(cached) " >&6
14624else
14625
14626 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14627/* end confdefs.h. */
14628
14629#include <sys/types.h>
14630#include <sys/socket.h>
14631#include <sys/uio.h>
14632
14633int
14634main ()
14635{
14636
14637#ifdef msg_control
14638#error "msg_control is a macro"
14639exit(1);
14640#endif
14641struct msghdr m;
14642m.msg_control = 0;
14643exit(0);
14644
14645 ;
14646 return 0;
14647}
14648_ACEOF
14649if ac_fn_c_try_compile "$LINENO"; then :
14650 ac_cv_have_control_in_msghdr="yes"
14651else
14652 ac_cv_have_control_in_msghdr="no"
14653
14654fi
14655rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
14656
14657fi
14658{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_control_in_msghdr" >&5
14659$as_echo "$ac_cv_have_control_in_msghdr" >&6; }
14660if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
14661
14662$as_echo "#define HAVE_CONTROL_IN_MSGHDR 1" >>confdefs.h
14663
14664fi
14665
14666{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if libc defines __progname" >&5
14667$as_echo_n "checking if libc defines __progname... " >&6; }
14668if ${ac_cv_libc_defines___progname+:} false; then :
14669 $as_echo_n "(cached) " >&6
14670else
14671
14672 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14673/* end confdefs.h. */
14674
14675int
14676main ()
14677{
14678 extern char *__progname; printf("%s", __progname);
14679 ;
14680 return 0;
14681}
14682_ACEOF
14683if ac_fn_c_try_link "$LINENO"; then :
14684 ac_cv_libc_defines___progname="yes"
14685else
14686 ac_cv_libc_defines___progname="no"
14687
14688fi
14689rm -f core conftest.err conftest.$ac_objext \
14690 conftest$ac_exeext conftest.$ac_ext
14691
14692fi
14693{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_libc_defines___progname" >&5
14694$as_echo "$ac_cv_libc_defines___progname" >&6; }
14695if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
14696
14697$as_echo "#define HAVE___PROGNAME 1" >>confdefs.h
14698
14699fi
14700
14701{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC implements __FUNCTION__" >&5
14702$as_echo_n "checking whether $CC implements __FUNCTION__... " >&6; }
14703if ${ac_cv_cc_implements___FUNCTION__+:} false; then :
14704 $as_echo_n "(cached) " >&6
14705else
14706
14707 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14708/* end confdefs.h. */
14709 #include <stdio.h>
14710int
14711main ()
14712{
14713 printf("%s", __FUNCTION__);
14714 ;
14715 return 0;
14716}
14717_ACEOF
14718if ac_fn_c_try_link "$LINENO"; then :
14719 ac_cv_cc_implements___FUNCTION__="yes"
14720else
14721 ac_cv_cc_implements___FUNCTION__="no"
14722
14723fi
14724rm -f core conftest.err conftest.$ac_objext \
14725 conftest$ac_exeext conftest.$ac_ext
14726
14727fi
14728{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_cc_implements___FUNCTION__" >&5
14729$as_echo "$ac_cv_cc_implements___FUNCTION__" >&6; }
14730if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
14731
14732$as_echo "#define HAVE___FUNCTION__ 1" >>confdefs.h
14733
14734fi
14735
14736{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC implements __func__" >&5
14737$as_echo_n "checking whether $CC implements __func__... " >&6; }
14738if ${ac_cv_cc_implements___func__+:} false; then :
14739 $as_echo_n "(cached) " >&6
14740else
14741
14742 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14743/* end confdefs.h. */
14744 #include <stdio.h>
14745int
14746main ()
14747{
14748 printf("%s", __func__);
14749 ;
14750 return 0;
14751}
14752_ACEOF
14753if ac_fn_c_try_link "$LINENO"; then :
14754 ac_cv_cc_implements___func__="yes"
14755else
14756 ac_cv_cc_implements___func__="no"
14757
14758fi
14759rm -f core conftest.err conftest.$ac_objext \
14760 conftest$ac_exeext conftest.$ac_ext
14761
14762fi
14763{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_cc_implements___func__" >&5
14764$as_echo "$ac_cv_cc_implements___func__" >&6; }
14765if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
14766
14767$as_echo "#define HAVE___func__ 1" >>confdefs.h
14768
14769fi
14770
14771{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether va_copy exists" >&5
14772$as_echo_n "checking whether va_copy exists... " >&6; }
14773if ${ac_cv_have_va_copy+:} false; then :
14774 $as_echo_n "(cached) " >&6
14775else
14776
14777 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14778/* end confdefs.h. */
14779
14780#include <stdarg.h>
14781va_list x,y;
14782
14783int
14784main ()
14785{
14786 va_copy(x,y);
14787 ;
14788 return 0;
14789}
14790_ACEOF
14791if ac_fn_c_try_link "$LINENO"; then :
14792 ac_cv_have_va_copy="yes"
14793else
14794 ac_cv_have_va_copy="no"
14795
14796fi
14797rm -f core conftest.err conftest.$ac_objext \
14798 conftest$ac_exeext conftest.$ac_ext
14799
14800fi
14801{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_va_copy" >&5
14802$as_echo "$ac_cv_have_va_copy" >&6; }
14803if test "x$ac_cv_have_va_copy" = "xyes" ; then
14804
14805$as_echo "#define HAVE_VA_COPY 1" >>confdefs.h
14806
14807fi
14808
14809{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether __va_copy exists" >&5
14810$as_echo_n "checking whether __va_copy exists... " >&6; }
14811if ${ac_cv_have___va_copy+:} false; then :
14812 $as_echo_n "(cached) " >&6
14813else
14814
14815 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14816/* end confdefs.h. */
14817
14818#include <stdarg.h>
14819va_list x,y;
14820
14821int
14822main ()
14823{
14824 __va_copy(x,y);
14825 ;
14826 return 0;
14827}
14828_ACEOF
14829if ac_fn_c_try_link "$LINENO"; then :
14830 ac_cv_have___va_copy="yes"
14831else
14832 ac_cv_have___va_copy="no"
14833
14834fi
14835rm -f core conftest.err conftest.$ac_objext \
14836 conftest$ac_exeext conftest.$ac_ext
14837
14838fi
14839{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have___va_copy" >&5
14840$as_echo "$ac_cv_have___va_copy" >&6; }
14841if test "x$ac_cv_have___va_copy" = "xyes" ; then
14842
14843$as_echo "#define HAVE___VA_COPY 1" >>confdefs.h
14844
14845fi
14846
14847{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether getopt has optreset support" >&5
14848$as_echo_n "checking whether getopt has optreset support... " >&6; }
14849if ${ac_cv_have_getopt_optreset+:} false; then :
14850 $as_echo_n "(cached) " >&6
14851else
14852
14853 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14854/* end confdefs.h. */
14855 #include <getopt.h>
14856int
14857main ()
14858{
14859 extern int optreset; optreset = 0;
14860 ;
14861 return 0;
14862}
14863_ACEOF
14864if ac_fn_c_try_link "$LINENO"; then :
14865 ac_cv_have_getopt_optreset="yes"
14866else
14867 ac_cv_have_getopt_optreset="no"
14868
14869fi
14870rm -f core conftest.err conftest.$ac_objext \
14871 conftest$ac_exeext conftest.$ac_ext
14872
14873fi
14874{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_getopt_optreset" >&5
14875$as_echo "$ac_cv_have_getopt_optreset" >&6; }
14876if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
14877
14878$as_echo "#define HAVE_GETOPT_OPTRESET 1" >>confdefs.h
14879
14880fi
14881
14882{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if libc defines sys_errlist" >&5
14883$as_echo_n "checking if libc defines sys_errlist... " >&6; }
14884if ${ac_cv_libc_defines_sys_errlist+:} false; then :
14885 $as_echo_n "(cached) " >&6
14886else
14887
14888 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14889/* end confdefs.h. */
14890
14891int
14892main ()
14893{
14894 extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);
14895 ;
14896 return 0;
14897}
14898_ACEOF
14899if ac_fn_c_try_link "$LINENO"; then :
14900 ac_cv_libc_defines_sys_errlist="yes"
14901else
14902 ac_cv_libc_defines_sys_errlist="no"
14903
14904fi
14905rm -f core conftest.err conftest.$ac_objext \
14906 conftest$ac_exeext conftest.$ac_ext
14907
14908fi
14909{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_libc_defines_sys_errlist" >&5
14910$as_echo "$ac_cv_libc_defines_sys_errlist" >&6; }
14911if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
14912
14913$as_echo "#define HAVE_SYS_ERRLIST 1" >>confdefs.h
14914
14915fi
14916
14917
14918{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if libc defines sys_nerr" >&5
14919$as_echo_n "checking if libc defines sys_nerr... " >&6; }
14920if ${ac_cv_libc_defines_sys_nerr+:} false; then :
14921 $as_echo_n "(cached) " >&6
14922else
14923
14924 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14925/* end confdefs.h. */
14926
14927int
14928main ()
14929{
14930 extern int sys_nerr; printf("%i", sys_nerr);
14931 ;
14932 return 0;
14933}
14934_ACEOF
14935if ac_fn_c_try_link "$LINENO"; then :
14936 ac_cv_libc_defines_sys_nerr="yes"
14937else
14938 ac_cv_libc_defines_sys_nerr="no"
14939
14940fi
14941rm -f core conftest.err conftest.$ac_objext \
14942 conftest$ac_exeext conftest.$ac_ext
14943
14944fi
14945{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_libc_defines_sys_nerr" >&5
14946$as_echo "$ac_cv_libc_defines_sys_nerr" >&6; }
14947if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
14948
14949$as_echo "#define HAVE_SYS_NERR 1" >>confdefs.h
14950
14951fi
14952
14953# Check libraries needed by DNS fingerprint support
14954{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing getrrsetbyname" >&5
14955$as_echo_n "checking for library containing getrrsetbyname... " >&6; }
14956if ${ac_cv_search_getrrsetbyname+:} false; then :
14957 $as_echo_n "(cached) " >&6
14958else
14959 ac_func_search_save_LIBS=$LIBS
14960cat confdefs.h - <<_ACEOF >conftest.$ac_ext
14961/* end confdefs.h. */
14962
14963/* Override any GCC internal prototype to avoid an error.
14964 Use char because int might match the return type of a GCC
14965 builtin and then its argument prototype would still apply. */
14966#ifdef __cplusplus
14967extern "C"
14968#endif
14969char getrrsetbyname ();
14970int
14971main ()
14972{
14973return getrrsetbyname ();
14974 ;
14975 return 0;
14976}
14977_ACEOF
14978for ac_lib in '' resolv; do
14979 if test -z "$ac_lib"; then
14980 ac_res="none required"
14981 else
14982 ac_res=-l$ac_lib
14983 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
14984 fi
14985 if ac_fn_c_try_link "$LINENO"; then :
14986 ac_cv_search_getrrsetbyname=$ac_res
14987fi
14988rm -f core conftest.err conftest.$ac_objext \
14989 conftest$ac_exeext
14990 if ${ac_cv_search_getrrsetbyname+:} false; then :
14991 break
14992fi
14993done
14994if ${ac_cv_search_getrrsetbyname+:} false; then :
14995
14996else
14997 ac_cv_search_getrrsetbyname=no
14998fi
14999rm conftest.$ac_ext
15000LIBS=$ac_func_search_save_LIBS
15001fi
15002{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_getrrsetbyname" >&5
15003$as_echo "$ac_cv_search_getrrsetbyname" >&6; }
15004ac_res=$ac_cv_search_getrrsetbyname
15005if test "$ac_res" != no; then :
15006 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
15007
15008$as_echo "#define HAVE_GETRRSETBYNAME 1" >>confdefs.h
15009
15010else
15011
15012 # Needed by our getrrsetbyname()
15013 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing res_query" >&5
15014$as_echo_n "checking for library containing res_query... " >&6; }
15015if ${ac_cv_search_res_query+:} false; then :
15016 $as_echo_n "(cached) " >&6
15017else
15018 ac_func_search_save_LIBS=$LIBS
15019cat confdefs.h - <<_ACEOF >conftest.$ac_ext
15020/* end confdefs.h. */
15021
15022/* Override any GCC internal prototype to avoid an error.
15023 Use char because int might match the return type of a GCC
15024 builtin and then its argument prototype would still apply. */
15025#ifdef __cplusplus
15026extern "C"
15027#endif
15028char res_query ();
15029int
15030main ()
15031{
15032return res_query ();
15033 ;
15034 return 0;
15035}
15036_ACEOF
15037for ac_lib in '' resolv; do
15038 if test -z "$ac_lib"; then
15039 ac_res="none required"
15040 else
15041 ac_res=-l$ac_lib
15042 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
15043 fi
15044 if ac_fn_c_try_link "$LINENO"; then :
15045 ac_cv_search_res_query=$ac_res
15046fi
15047rm -f core conftest.err conftest.$ac_objext \
15048 conftest$ac_exeext
15049 if ${ac_cv_search_res_query+:} false; then :
15050 break
15051fi
15052done
15053if ${ac_cv_search_res_query+:} false; then :
15054
15055else
15056 ac_cv_search_res_query=no
15057fi
15058rm conftest.$ac_ext
15059LIBS=$ac_func_search_save_LIBS
15060fi
15061{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_res_query" >&5
15062$as_echo "$ac_cv_search_res_query" >&6; }
15063ac_res=$ac_cv_search_res_query
15064if test "$ac_res" != no; then :
15065 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
15066
15067fi
15068
15069 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing dn_expand" >&5
15070$as_echo_n "checking for library containing dn_expand... " >&6; }
15071if ${ac_cv_search_dn_expand+:} false; then :
15072 $as_echo_n "(cached) " >&6
15073else
15074 ac_func_search_save_LIBS=$LIBS
15075cat confdefs.h - <<_ACEOF >conftest.$ac_ext
15076/* end confdefs.h. */
15077
15078/* Override any GCC internal prototype to avoid an error.
15079 Use char because int might match the return type of a GCC
15080 builtin and then its argument prototype would still apply. */
15081#ifdef __cplusplus
15082extern "C"
15083#endif
15084char dn_expand ();
15085int
15086main ()
15087{
15088return dn_expand ();
15089 ;
15090 return 0;
15091}
15092_ACEOF
15093for ac_lib in '' resolv; do
15094 if test -z "$ac_lib"; then
15095 ac_res="none required"
15096 else
15097 ac_res=-l$ac_lib
15098 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
15099 fi
15100 if ac_fn_c_try_link "$LINENO"; then :
15101 ac_cv_search_dn_expand=$ac_res
15102fi
15103rm -f core conftest.err conftest.$ac_objext \
15104 conftest$ac_exeext
15105 if ${ac_cv_search_dn_expand+:} false; then :
15106 break
15107fi
15108done
15109if ${ac_cv_search_dn_expand+:} false; then :
15110
15111else
15112 ac_cv_search_dn_expand=no
15113fi
15114rm conftest.$ac_ext
15115LIBS=$ac_func_search_save_LIBS
15116fi
15117{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_dn_expand" >&5
15118$as_echo "$ac_cv_search_dn_expand" >&6; }
15119ac_res=$ac_cv_search_dn_expand
15120if test "$ac_res" != no; then :
15121 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
15122
15123fi
15124
15125 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if res_query will link" >&5
15126$as_echo_n "checking if res_query will link... " >&6; }
15127 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
15128/* end confdefs.h. */
15129
15130#include <sys/types.h>
15131#include <netinet/in.h>
15132#include <arpa/nameser.h>
15133#include <netdb.h>
15134#include <resolv.h>
15135
15136int
15137main ()
15138{
15139
15140 res_query (0, 0, 0, 0, 0);
15141
15142 ;
15143 return 0;
15144}
15145_ACEOF
15146if ac_fn_c_try_link "$LINENO"; then :
15147 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
15148$as_echo "yes" >&6; }
15149else
15150 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
15151$as_echo "no" >&6; }
15152 saved_LIBS="$LIBS"
15153 LIBS="$LIBS -lresolv"
15154 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for res_query in -lresolv" >&5
15155$as_echo_n "checking for res_query in -lresolv... " >&6; }
15156 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
15157/* end confdefs.h. */
15158
15159#include <sys/types.h>
15160#include <netinet/in.h>
15161#include <arpa/nameser.h>
15162#include <netdb.h>
15163#include <resolv.h>
15164
15165int
15166main ()
15167{
15168
15169 res_query (0, 0, 0, 0, 0);
15170
15171 ;
15172 return 0;
15173}
15174_ACEOF
15175if ac_fn_c_try_link "$LINENO"; then :
15176 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
15177$as_echo "yes" >&6; }
15178else
15179 LIBS="$saved_LIBS"
15180 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
15181$as_echo "no" >&6; }
15182fi
15183rm -f core conftest.err conftest.$ac_objext \
15184 conftest$ac_exeext conftest.$ac_ext
15185
15186fi
15187rm -f core conftest.err conftest.$ac_objext \
15188 conftest$ac_exeext conftest.$ac_ext
15189 for ac_func in _getshort _getlong
15190do :
15191 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
15192ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
15193if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
15194 cat >>confdefs.h <<_ACEOF
15195#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
15196_ACEOF
15197
15198fi
15199done
15200
15201 ac_fn_c_check_decl "$LINENO" "_getshort" "ac_cv_have_decl__getshort" "#include <sys/types.h>
15202 #include <arpa/nameser.h>
15203"
15204if test "x$ac_cv_have_decl__getshort" = xyes; then :
15205 ac_have_decl=1
15206else
15207 ac_have_decl=0
15208fi
15209
15210cat >>confdefs.h <<_ACEOF
15211#define HAVE_DECL__GETSHORT $ac_have_decl
15212_ACEOF
15213ac_fn_c_check_decl "$LINENO" "_getlong" "ac_cv_have_decl__getlong" "#include <sys/types.h>
15214 #include <arpa/nameser.h>
15215"
15216if test "x$ac_cv_have_decl__getlong" = xyes; then :
15217 ac_have_decl=1
15218else
15219 ac_have_decl=0
15220fi
15221
15222cat >>confdefs.h <<_ACEOF
15223#define HAVE_DECL__GETLONG $ac_have_decl
15224_ACEOF
15225
15226 ac_fn_c_check_member "$LINENO" "HEADER" "ad" "ac_cv_member_HEADER_ad" "#include <arpa/nameser.h>
15227"
15228if test "x$ac_cv_member_HEADER_ad" = xyes; then :
15229
15230$as_echo "#define HAVE_HEADER_AD 1" >>confdefs.h
15231
15232fi
15233
15234
15235fi
15236
15237
15238{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if struct __res_state _res is an extern" >&5
15239$as_echo_n "checking if struct __res_state _res is an extern... " >&6; }
15240cat confdefs.h - <<_ACEOF >conftest.$ac_ext
15241/* end confdefs.h. */
15242
15243#include <stdio.h>
15244#if HAVE_SYS_TYPES_H
15245# include <sys/types.h>
15246#endif
15247#include <netinet/in.h>
15248#include <arpa/nameser.h>
15249#include <resolv.h>
15250extern struct __res_state _res;
15251
15252int
15253main ()
15254{
15255
15256 ;
15257 return 0;
15258}
15259_ACEOF
15260if ac_fn_c_try_link "$LINENO"; then :
15261 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
15262$as_echo "yes" >&6; }
15263
15264$as_echo "#define HAVE__RES_EXTERN 1" >>confdefs.h
15265
15266
15267else
15268 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
15269$as_echo "no" >&6; }
15270
15271fi
15272rm -f core conftest.err conftest.$ac_objext \
15273 conftest$ac_exeext conftest.$ac_ext
15274
15275# Check whether user wants SELinux support
15276SELINUX_MSG="no"
15277LIBSELINUX=""
15278
15279# Check whether --with-selinux was given.
15280if test "${with_selinux+set}" = set; then :
15281 withval=$with_selinux; if test "x$withval" != "xno" ; then
15282 save_LIBS="$LIBS"
15283
15284$as_echo "#define WITH_SELINUX 1" >>confdefs.h
15285
15286 SELINUX_MSG="yes"
15287 ac_fn_c_check_header_mongrel "$LINENO" "selinux/selinux.h" "ac_cv_header_selinux_selinux_h" "$ac_includes_default"
15288if test "x$ac_cv_header_selinux_selinux_h" = xyes; then :
15289
15290else
15291 as_fn_error $? "SELinux support requires selinux.h header" "$LINENO" 5
15292fi
15293
15294
15295 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for setexeccon in -lselinux" >&5
15296$as_echo_n "checking for setexeccon in -lselinux... " >&6; }
15297if ${ac_cv_lib_selinux_setexeccon+:} false; then :
15298 $as_echo_n "(cached) " >&6
15299else
15300 ac_check_lib_save_LIBS=$LIBS
15301LIBS="-lselinux $LIBS"
15302cat confdefs.h - <<_ACEOF >conftest.$ac_ext
15303/* end confdefs.h. */
15304
15305/* Override any GCC internal prototype to avoid an error.
15306 Use char because int might match the return type of a GCC
15307 builtin and then its argument prototype would still apply. */
15308#ifdef __cplusplus
15309extern "C"
15310#endif
15311char setexeccon ();
15312int
15313main ()
15314{
15315return setexeccon ();
15316 ;
15317 return 0;
15318}
15319_ACEOF
15320if ac_fn_c_try_link "$LINENO"; then :
15321 ac_cv_lib_selinux_setexeccon=yes
15322else
15323 ac_cv_lib_selinux_setexeccon=no
15324fi
15325rm -f core conftest.err conftest.$ac_objext \
15326 conftest$ac_exeext conftest.$ac_ext
15327LIBS=$ac_check_lib_save_LIBS
15328fi
15329{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_selinux_setexeccon" >&5
15330$as_echo "$ac_cv_lib_selinux_setexeccon" >&6; }
15331if test "x$ac_cv_lib_selinux_setexeccon" = xyes; then :
15332 LIBSELINUX="-lselinux"
15333 LIBS="$LIBS -lselinux"
15334
15335else
15336 as_fn_error $? "SELinux support requires libselinux library" "$LINENO" 5
15337fi
15338
15339 SSHLIBS="$SSHLIBS $LIBSELINUX"
15340 SSHDLIBS="$SSHDLIBS $LIBSELINUX"
15341 for ac_func in getseuserbyname get_default_context_with_level
15342do :
15343 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
15344ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
15345if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
15346 cat >>confdefs.h <<_ACEOF
15347#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
15348_ACEOF
15349
15350fi
15351done
15352
15353 LIBS="$save_LIBS"
15354 fi
15355
15356fi
15357
15358
15359
15360
15361# Check whether user wants Kerberos 5 support
15362KRB5_MSG="no"
15363
15364# Check whether --with-kerberos5 was given.
15365if test "${with_kerberos5+set}" = set; then :
15366 withval=$with_kerberos5; if test "x$withval" != "xno" ; then
15367 if test "x$withval" = "xyes" ; then
15368 KRB5ROOT="/usr/local"
15369 else
15370 KRB5ROOT=${withval}
15371 fi
15372
15373
15374$as_echo "#define KRB5 1" >>confdefs.h
15375
15376 KRB5_MSG="yes"
15377
15378 # Extract the first word of "krb5-config", so it can be a program name with args.
15379set dummy krb5-config; ac_word=$2
15380{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
15381$as_echo_n "checking for $ac_word... " >&6; }
15382if ${ac_cv_path_KRB5CONF+:} false; then :
15383 $as_echo_n "(cached) " >&6
15384else
15385 case $KRB5CONF in
15386 [\\/]* | ?:[\\/]*)
15387 ac_cv_path_KRB5CONF="$KRB5CONF" # Let the user override the test with a path.
15388 ;;
15389 *)
15390 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
15391as_dummy="$KRB5ROOT/bin:$PATH"
15392for as_dir in $as_dummy
15393do
15394 IFS=$as_save_IFS
15395 test -z "$as_dir" && as_dir=.
15396 for ac_exec_ext in '' $ac_executable_extensions; do
15397 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
15398 ac_cv_path_KRB5CONF="$as_dir/$ac_word$ac_exec_ext"
15399 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
15400 break 2
15401 fi
15402done
15403 done
15404IFS=$as_save_IFS
15405
15406 test -z "$ac_cv_path_KRB5CONF" && ac_cv_path_KRB5CONF="$KRB5ROOT/bin/krb5-config"
15407 ;;
15408esac
15409fi
15410KRB5CONF=$ac_cv_path_KRB5CONF
15411if test -n "$KRB5CONF"; then
15412 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $KRB5CONF" >&5
15413$as_echo "$KRB5CONF" >&6; }
15414else
15415 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
15416$as_echo "no" >&6; }
15417fi
15418
15419
15420 if test -x $KRB5CONF ; then
15421 K5CFLAGS="`$KRB5CONF --cflags`"
15422 K5LIBS="`$KRB5CONF --libs`"
15423 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
15424
15425 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for gssapi support" >&5
15426$as_echo_n "checking for gssapi support... " >&6; }
15427 if $KRB5CONF | grep gssapi >/dev/null ; then
15428 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
15429$as_echo "yes" >&6; }
15430
15431$as_echo "#define GSSAPI 1" >>confdefs.h
15432
15433 GSSCFLAGS="`$KRB5CONF --cflags gssapi`"
15434 GSSLIBS="`$KRB5CONF --libs gssapi`"
15435 CPPFLAGS="$CPPFLAGS $GSSCFLAGS"
15436 else
15437 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
15438$as_echo "no" >&6; }
15439 fi
15440 { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are using Heimdal" >&5
15441$as_echo_n "checking whether we are using Heimdal... " >&6; }
15442 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
15443/* end confdefs.h. */
15444 #include <krb5.h>
15445
15446int
15447main ()
15448{
15449 char *tmp = heimdal_version;
15450 ;
15451 return 0;
15452}
15453_ACEOF
15454if ac_fn_c_try_compile "$LINENO"; then :
15455 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
15456$as_echo "yes" >&6; }
15457
15458$as_echo "#define HEIMDAL 1" >>confdefs.h
15459
15460else
15461 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
15462$as_echo "no" >&6; }
15463
15464fi
15465rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
15466 else
15467 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
15468 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
15469 { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are using Heimdal" >&5
15470$as_echo_n "checking whether we are using Heimdal... " >&6; }
15471 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
15472/* end confdefs.h. */
15473 #include <krb5.h>
15474
15475int
15476main ()
15477{
15478 char *tmp = heimdal_version;
15479 ;
15480 return 0;
15481}
15482_ACEOF
15483if ac_fn_c_try_compile "$LINENO"; then :
15484 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
15485$as_echo "yes" >&6; }
15486 $as_echo "#define HEIMDAL 1" >>confdefs.h
15487
15488 K5LIBS="-lkrb5"
15489 K5LIBS="$K5LIBS -lcom_err -lasn1"
15490 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for net_write in -lroken" >&5
15491$as_echo_n "checking for net_write in -lroken... " >&6; }
15492if ${ac_cv_lib_roken_net_write+:} false; then :
15493 $as_echo_n "(cached) " >&6
15494else
15495 ac_check_lib_save_LIBS=$LIBS
15496LIBS="-lroken $LIBS"
15497cat confdefs.h - <<_ACEOF >conftest.$ac_ext
15498/* end confdefs.h. */
15499
15500/* Override any GCC internal prototype to avoid an error.
15501 Use char because int might match the return type of a GCC
15502 builtin and then its argument prototype would still apply. */
15503#ifdef __cplusplus
15504extern "C"
15505#endif
15506char net_write ();
15507int
15508main ()
15509{
15510return net_write ();
15511 ;
15512 return 0;
15513}
15514_ACEOF
15515if ac_fn_c_try_link "$LINENO"; then :
15516 ac_cv_lib_roken_net_write=yes
15517else
15518 ac_cv_lib_roken_net_write=no
15519fi
15520rm -f core conftest.err conftest.$ac_objext \
15521 conftest$ac_exeext conftest.$ac_ext
15522LIBS=$ac_check_lib_save_LIBS
15523fi
15524{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_roken_net_write" >&5
15525$as_echo "$ac_cv_lib_roken_net_write" >&6; }
15526if test "x$ac_cv_lib_roken_net_write" = xyes; then :
15527 K5LIBS="$K5LIBS -lroken"
15528fi
15529
15530 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for des_cbc_encrypt in -ldes" >&5
15531$as_echo_n "checking for des_cbc_encrypt in -ldes... " >&6; }
15532if ${ac_cv_lib_des_des_cbc_encrypt+:} false; then :
15533 $as_echo_n "(cached) " >&6
15534else
15535 ac_check_lib_save_LIBS=$LIBS
15536LIBS="-ldes $LIBS"
15537cat confdefs.h - <<_ACEOF >conftest.$ac_ext
15538/* end confdefs.h. */
15539
15540/* Override any GCC internal prototype to avoid an error.
15541 Use char because int might match the return type of a GCC
15542 builtin and then its argument prototype would still apply. */
15543#ifdef __cplusplus
15544extern "C"
15545#endif
15546char des_cbc_encrypt ();
15547int
15548main ()
15549{
15550return des_cbc_encrypt ();
15551 ;
15552 return 0;
15553}
15554_ACEOF
15555if ac_fn_c_try_link "$LINENO"; then :
15556 ac_cv_lib_des_des_cbc_encrypt=yes
15557else
15558 ac_cv_lib_des_des_cbc_encrypt=no
15559fi
15560rm -f core conftest.err conftest.$ac_objext \
15561 conftest$ac_exeext conftest.$ac_ext
15562LIBS=$ac_check_lib_save_LIBS
15563fi
15564{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_des_des_cbc_encrypt" >&5
15565$as_echo "$ac_cv_lib_des_des_cbc_encrypt" >&6; }
15566if test "x$ac_cv_lib_des_des_cbc_encrypt" = xyes; then :
15567 K5LIBS="$K5LIBS -ldes"
15568fi
15569
15570
15571else
15572 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
15573$as_echo "no" >&6; }
15574 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
15575
15576
15577fi
15578rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
15579 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing dn_expand" >&5
15580$as_echo_n "checking for library containing dn_expand... " >&6; }
15581if ${ac_cv_search_dn_expand+:} false; then :
15582 $as_echo_n "(cached) " >&6
15583else
15584 ac_func_search_save_LIBS=$LIBS
15585cat confdefs.h - <<_ACEOF >conftest.$ac_ext
15586/* end confdefs.h. */
15587
15588/* Override any GCC internal prototype to avoid an error.
15589 Use char because int might match the return type of a GCC
15590 builtin and then its argument prototype would still apply. */
15591#ifdef __cplusplus
15592extern "C"
15593#endif
15594char dn_expand ();
15595int
15596main ()
15597{
15598return dn_expand ();
15599 ;
15600 return 0;
15601}
15602_ACEOF
15603for ac_lib in '' resolv; do
15604 if test -z "$ac_lib"; then
15605 ac_res="none required"
15606 else
15607 ac_res=-l$ac_lib
15608 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
15609 fi
15610 if ac_fn_c_try_link "$LINENO"; then :
15611 ac_cv_search_dn_expand=$ac_res
15612fi
15613rm -f core conftest.err conftest.$ac_objext \
15614 conftest$ac_exeext
15615 if ${ac_cv_search_dn_expand+:} false; then :
15616 break
15617fi
15618done
15619if ${ac_cv_search_dn_expand+:} false; then :
15620
15621else
15622 ac_cv_search_dn_expand=no
15623fi
15624rm conftest.$ac_ext
15625LIBS=$ac_func_search_save_LIBS
15626fi
15627{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_dn_expand" >&5
15628$as_echo "$ac_cv_search_dn_expand" >&6; }
15629ac_res=$ac_cv_search_dn_expand
15630if test "$ac_res" != no; then :
15631 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
15632
15633fi
15634
15635
15636 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for gss_init_sec_context in -lgssapi_krb5" >&5
15637$as_echo_n "checking for gss_init_sec_context in -lgssapi_krb5... " >&6; }
15638if ${ac_cv_lib_gssapi_krb5_gss_init_sec_context+:} false; then :
15639 $as_echo_n "(cached) " >&6
15640else
15641 ac_check_lib_save_LIBS=$LIBS
15642LIBS="-lgssapi_krb5 $LIBS"
15643cat confdefs.h - <<_ACEOF >conftest.$ac_ext
15644/* end confdefs.h. */
15645
15646/* Override any GCC internal prototype to avoid an error.
15647 Use char because int might match the return type of a GCC
15648 builtin and then its argument prototype would still apply. */
15649#ifdef __cplusplus
15650extern "C"
15651#endif
15652char gss_init_sec_context ();
15653int
15654main ()
15655{
15656return gss_init_sec_context ();
15657 ;
15658 return 0;
15659}
15660_ACEOF
15661if ac_fn_c_try_link "$LINENO"; then :
15662 ac_cv_lib_gssapi_krb5_gss_init_sec_context=yes
15663else
15664 ac_cv_lib_gssapi_krb5_gss_init_sec_context=no
15665fi
15666rm -f core conftest.err conftest.$ac_objext \
15667 conftest$ac_exeext conftest.$ac_ext
15668LIBS=$ac_check_lib_save_LIBS
15669fi
15670{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_gssapi_krb5_gss_init_sec_context" >&5
15671$as_echo "$ac_cv_lib_gssapi_krb5_gss_init_sec_context" >&6; }
15672if test "x$ac_cv_lib_gssapi_krb5_gss_init_sec_context" = xyes; then :
15673 $as_echo "#define GSSAPI 1" >>confdefs.h
15674
15675 GSSLIBS="-lgssapi_krb5"
15676else
15677 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for gss_init_sec_context in -lgssapi" >&5
15678$as_echo_n "checking for gss_init_sec_context in -lgssapi... " >&6; }
15679if ${ac_cv_lib_gssapi_gss_init_sec_context+:} false; then :
15680 $as_echo_n "(cached) " >&6
15681else
15682 ac_check_lib_save_LIBS=$LIBS
15683LIBS="-lgssapi $LIBS"
15684cat confdefs.h - <<_ACEOF >conftest.$ac_ext
15685/* end confdefs.h. */
15686
15687/* Override any GCC internal prototype to avoid an error.
15688 Use char because int might match the return type of a GCC
15689 builtin and then its argument prototype would still apply. */
15690#ifdef __cplusplus
15691extern "C"
15692#endif
15693char gss_init_sec_context ();
15694int
15695main ()
15696{
15697return gss_init_sec_context ();
15698 ;
15699 return 0;
15700}
15701_ACEOF
15702if ac_fn_c_try_link "$LINENO"; then :
15703 ac_cv_lib_gssapi_gss_init_sec_context=yes
15704else
15705 ac_cv_lib_gssapi_gss_init_sec_context=no
15706fi
15707rm -f core conftest.err conftest.$ac_objext \
15708 conftest$ac_exeext conftest.$ac_ext
15709LIBS=$ac_check_lib_save_LIBS
15710fi
15711{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_gssapi_gss_init_sec_context" >&5
15712$as_echo "$ac_cv_lib_gssapi_gss_init_sec_context" >&6; }
15713if test "x$ac_cv_lib_gssapi_gss_init_sec_context" = xyes; then :
15714 $as_echo "#define GSSAPI 1" >>confdefs.h
15715
15716 GSSLIBS="-lgssapi"
15717else
15718 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for gss_init_sec_context in -lgss" >&5
15719$as_echo_n "checking for gss_init_sec_context in -lgss... " >&6; }
15720if ${ac_cv_lib_gss_gss_init_sec_context+:} false; then :
15721 $as_echo_n "(cached) " >&6
15722else
15723 ac_check_lib_save_LIBS=$LIBS
15724LIBS="-lgss $LIBS"
15725cat confdefs.h - <<_ACEOF >conftest.$ac_ext
15726/* end confdefs.h. */
15727
15728/* Override any GCC internal prototype to avoid an error.
15729 Use char because int might match the return type of a GCC
15730 builtin and then its argument prototype would still apply. */
15731#ifdef __cplusplus
15732extern "C"
15733#endif
15734char gss_init_sec_context ();
15735int
15736main ()
15737{
15738return gss_init_sec_context ();
15739 ;
15740 return 0;
15741}
15742_ACEOF
15743if ac_fn_c_try_link "$LINENO"; then :
15744 ac_cv_lib_gss_gss_init_sec_context=yes
15745else
15746 ac_cv_lib_gss_gss_init_sec_context=no
15747fi
15748rm -f core conftest.err conftest.$ac_objext \
15749 conftest$ac_exeext conftest.$ac_ext
15750LIBS=$ac_check_lib_save_LIBS
15751fi
15752{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_gss_gss_init_sec_context" >&5
15753$as_echo "$ac_cv_lib_gss_gss_init_sec_context" >&6; }
15754if test "x$ac_cv_lib_gss_gss_init_sec_context" = xyes; then :
15755 $as_echo "#define GSSAPI 1" >>confdefs.h
15756
15757 GSSLIBS="-lgss"
15758else
15759 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Cannot find any suitable gss-api library - build may fail" >&5
15760$as_echo "$as_me: WARNING: Cannot find any suitable gss-api library - build may fail" >&2;}
15761fi
15762
15763
15764fi
15765
15766
15767fi
15768
15769
15770 ac_fn_c_check_header_mongrel "$LINENO" "gssapi.h" "ac_cv_header_gssapi_h" "$ac_includes_default"
15771if test "x$ac_cv_header_gssapi_h" = xyes; then :
15772
15773else
15774 unset ac_cv_header_gssapi_h
15775 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
15776 for ac_header in gssapi.h
15777do :
15778 ac_fn_c_check_header_mongrel "$LINENO" "gssapi.h" "ac_cv_header_gssapi_h" "$ac_includes_default"
15779if test "x$ac_cv_header_gssapi_h" = xyes; then :
15780 cat >>confdefs.h <<_ACEOF
15781#define HAVE_GSSAPI_H 1
15782_ACEOF
15783
15784else
15785 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Cannot find any suitable gss-api header - build may fail" >&5
15786$as_echo "$as_me: WARNING: Cannot find any suitable gss-api header - build may fail" >&2;}
15787
15788fi
15789
15790done
15791
15792
15793
15794fi
15795
15796
15797
15798 oldCPP="$CPPFLAGS"
15799 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
15800 ac_fn_c_check_header_mongrel "$LINENO" "gssapi_krb5.h" "ac_cv_header_gssapi_krb5_h" "$ac_includes_default"
15801if test "x$ac_cv_header_gssapi_krb5_h" = xyes; then :
15802
15803else
15804 CPPFLAGS="$oldCPP"
15805fi
15806
15807
15808
15809 fi
15810 if test ! -z "$need_dash_r" ; then
15811 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
15812 fi
15813 if test ! -z "$blibpath" ; then
15814 blibpath="$blibpath:${KRB5ROOT}/lib"
15815 fi
15816
15817 for ac_header in gssapi.h gssapi/gssapi.h
15818do :
15819 as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
15820ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
15821if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
15822 cat >>confdefs.h <<_ACEOF
15823#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
15824_ACEOF
15825
15826fi
15827
15828done
15829
15830 for ac_header in gssapi_krb5.h gssapi/gssapi_krb5.h
15831do :
15832 as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
15833ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
15834if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
15835 cat >>confdefs.h <<_ACEOF
15836#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
15837_ACEOF
15838
15839fi
15840
15841done
15842
15843 for ac_header in gssapi_generic.h gssapi/gssapi_generic.h
15844do :
15845 as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
15846ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
15847if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
15848 cat >>confdefs.h <<_ACEOF
15849#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
15850_ACEOF
15851
15852fi
15853
15854done
15855
15856
15857 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing k_hasafs" >&5
15858$as_echo_n "checking for library containing k_hasafs... " >&6; }
15859if ${ac_cv_search_k_hasafs+:} false; then :
15860 $as_echo_n "(cached) " >&6
15861else
15862 ac_func_search_save_LIBS=$LIBS
15863cat confdefs.h - <<_ACEOF >conftest.$ac_ext
15864/* end confdefs.h. */
15865
15866/* Override any GCC internal prototype to avoid an error.
15867 Use char because int might match the return type of a GCC
15868 builtin and then its argument prototype would still apply. */
15869#ifdef __cplusplus
15870extern "C"
15871#endif
15872char k_hasafs ();
15873int
15874main ()
15875{
15876return k_hasafs ();
15877 ;
15878 return 0;
15879}
15880_ACEOF
15881for ac_lib in '' kafs; do
15882 if test -z "$ac_lib"; then
15883 ac_res="none required"
15884 else
15885 ac_res=-l$ac_lib
15886 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
15887 fi
15888 if ac_fn_c_try_link "$LINENO"; then :
15889 ac_cv_search_k_hasafs=$ac_res
15890fi
15891rm -f core conftest.err conftest.$ac_objext \
15892 conftest$ac_exeext
15893 if ${ac_cv_search_k_hasafs+:} false; then :
15894 break
15895fi
15896done
15897if ${ac_cv_search_k_hasafs+:} false; then :
15898
15899else
15900 ac_cv_search_k_hasafs=no
15901fi
15902rm conftest.$ac_ext
15903LIBS=$ac_func_search_save_LIBS
15904fi
15905{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_k_hasafs" >&5
15906$as_echo "$ac_cv_search_k_hasafs" >&6; }
15907ac_res=$ac_cv_search_k_hasafs
15908if test "$ac_res" != no; then :
15909 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
15910
15911$as_echo "#define USE_AFS 1" >>confdefs.h
15912
15913fi
15914
15915
15916 ac_fn_c_check_decl "$LINENO" "GSS_C_NT_HOSTBASED_SERVICE" "ac_cv_have_decl_GSS_C_NT_HOSTBASED_SERVICE" "
15917#ifdef HAVE_GSSAPI_H
15918# include <gssapi.h>
15919#elif defined(HAVE_GSSAPI_GSSAPI_H)
15920# include <gssapi/gssapi.h>
15921#endif
15922
15923#ifdef HAVE_GSSAPI_GENERIC_H
15924# include <gssapi_generic.h>
15925#elif defined(HAVE_GSSAPI_GSSAPI_GENERIC_H)
15926# include <gssapi/gssapi_generic.h>
15927#endif
15928
15929"
15930if test "x$ac_cv_have_decl_GSS_C_NT_HOSTBASED_SERVICE" = xyes; then :
15931 ac_have_decl=1
15932else
15933 ac_have_decl=0
15934fi
15935
15936cat >>confdefs.h <<_ACEOF
15937#define HAVE_DECL_GSS_C_NT_HOSTBASED_SERVICE $ac_have_decl
15938_ACEOF
15939
15940 fi
15941
15942
15943fi
15944
15945
15946
15947
15948# Looking for programs, paths and files
15949
15950PRIVSEP_PATH=/var/empty
15951
15952# Check whether --with-privsep-path was given.
15953if test "${with_privsep_path+set}" = set; then :
15954 withval=$with_privsep_path;
15955 if test -n "$withval" && test "x$withval" != "xno" && \
15956 test "x${withval}" != "xyes"; then
15957 PRIVSEP_PATH=$withval
15958 fi
15959
15960
15961fi
15962
15963
15964
15965
15966# Check whether --with-xauth was given.
15967if test "${with_xauth+set}" = set; then :
15968 withval=$with_xauth;
15969 if test -n "$withval" && test "x$withval" != "xno" && \
15970 test "x${withval}" != "xyes"; then
15971 xauth_path=$withval
15972 fi
15973
15974else
15975
15976 TestPath="$PATH"
15977 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
15978 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
15979 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
15980 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
15981 # Extract the first word of "xauth", so it can be a program name with args.
15982set dummy xauth; ac_word=$2
15983{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
15984$as_echo_n "checking for $ac_word... " >&6; }
15985if ${ac_cv_path_xauth_path+:} false; then :
15986 $as_echo_n "(cached) " >&6
15987else
15988 case $xauth_path in
15989 [\\/]* | ?:[\\/]*)
15990 ac_cv_path_xauth_path="$xauth_path" # Let the user override the test with a path.
15991 ;;
15992 *)
15993 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
15994for as_dir in $TestPath
15995do
15996 IFS=$as_save_IFS
15997 test -z "$as_dir" && as_dir=.
15998 for ac_exec_ext in '' $ac_executable_extensions; do
15999 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
16000 ac_cv_path_xauth_path="$as_dir/$ac_word$ac_exec_ext"
16001 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
16002 break 2
16003 fi
16004done
16005 done
16006IFS=$as_save_IFS
16007
16008 ;;
16009esac
16010fi
16011xauth_path=$ac_cv_path_xauth_path
16012if test -n "$xauth_path"; then
16013 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $xauth_path" >&5
16014$as_echo "$xauth_path" >&6; }
16015else
16016 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
16017$as_echo "no" >&6; }
16018fi
16019
16020
16021 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
16022 xauth_path="/usr/openwin/bin/xauth"
16023 fi
16024
16025
16026fi
16027
16028
16029STRIP_OPT=-s
16030# Check whether --enable-strip was given.
16031if test "${enable_strip+set}" = set; then :
16032 enableval=$enable_strip;
16033 if test "x$enableval" = "xno" ; then
16034 STRIP_OPT=
16035 fi
16036
16037
16038fi
16039
16040
16041
16042if test -z "$xauth_path" ; then
16043 XAUTH_PATH="undefined"
16044
16045else
16046
16047cat >>confdefs.h <<_ACEOF
16048#define XAUTH_PATH "$xauth_path"
16049_ACEOF
16050
16051 XAUTH_PATH=$xauth_path
16052
16053fi
16054
16055# Check for mail directory
16056
16057# Check whether --with-maildir was given.
16058if test "${with_maildir+set}" = set; then :
16059 withval=$with_maildir;
16060 if test "X$withval" != X && test "x$withval" != xno && \
16061 test "x${withval}" != xyes; then
16062
16063cat >>confdefs.h <<_ACEOF
16064#define MAIL_DIRECTORY "$withval"
16065_ACEOF
16066
16067 fi
16068
16069else
16070
16071 if test "X$maildir" != "X"; then
16072 cat >>confdefs.h <<_ACEOF
16073#define MAIL_DIRECTORY "$maildir"
16074_ACEOF
16075
16076 else
16077 { $as_echo "$as_me:${as_lineno-$LINENO}: checking Discovering system mail directory" >&5
16078$as_echo_n "checking Discovering system mail directory... " >&6; }
16079 if test "$cross_compiling" = yes; then :
16080
16081 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: use --with-maildir=/path/to/mail" >&5
16082$as_echo "$as_me: WARNING: cross compiling: use --with-maildir=/path/to/mail" >&2;}
16083
16084
16085else
16086 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
16087/* end confdefs.h. */
16088
16089#include <stdio.h>
16090#include <string.h>
16091#ifdef HAVE_PATHS_H
16092#include <paths.h>
16093#endif
16094#ifdef HAVE_MAILLOCK_H
16095#include <maillock.h>
16096#endif
16097#define DATA "conftest.maildir"
16098
16099int
16100main ()
16101{
16102
16103 FILE *fd;
16104 int rc;
16105
16106 fd = fopen(DATA,"w");
16107 if(fd == NULL)
16108 exit(1);
16109
16110#if defined (_PATH_MAILDIR)
16111 if ((rc = fprintf(fd ,"_PATH_MAILDIR:%s\n", _PATH_MAILDIR)) <0)
16112 exit(1);
16113#elif defined (MAILDIR)
16114 if ((rc = fprintf(fd ,"MAILDIR:%s\n", MAILDIR)) <0)
16115 exit(1);
16116#elif defined (_PATH_MAIL)
16117 if ((rc = fprintf(fd ,"_PATH_MAIL:%s\n", _PATH_MAIL)) <0)
16118 exit(1);
16119#else
16120 exit (2);
16121#endif
16122
16123 exit(0);
16124
16125 ;
16126 return 0;
16127}
16128_ACEOF
16129if ac_fn_c_try_run "$LINENO"; then :
16130
16131 maildir_what=`awk -F: '{print $1}' conftest.maildir`
16132 maildir=`awk -F: '{print $2}' conftest.maildir \
16133 | sed 's|/$||'`
16134 { $as_echo "$as_me:${as_lineno-$LINENO}: result: Using: $maildir from $maildir_what" >&5
16135$as_echo "Using: $maildir from $maildir_what" >&6; }
16136 if test "x$maildir_what" != "x_PATH_MAILDIR"; then
16137 cat >>confdefs.h <<_ACEOF
16138#define MAIL_DIRECTORY "$maildir"
16139_ACEOF
16140
16141 fi
16142
16143else
16144
16145 if test "X$ac_status" = "X2";then
16146# our test program didn't find it. Default to /var/spool/mail
16147 { $as_echo "$as_me:${as_lineno-$LINENO}: result: Using: default value of /var/spool/mail" >&5
16148$as_echo "Using: default value of /var/spool/mail" >&6; }
16149 cat >>confdefs.h <<_ACEOF
16150#define MAIL_DIRECTORY "/var/spool/mail"
16151_ACEOF
16152
16153 else
16154 { $as_echo "$as_me:${as_lineno-$LINENO}: result: *** not found ***" >&5
16155$as_echo "*** not found ***" >&6; }
16156 fi
16157
16158fi
16159rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
16160 conftest.$ac_objext conftest.beam conftest.$ac_ext
16161fi
16162
16163 fi
16164
16165
16166fi
16167 # maildir
16168
16169if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
16170 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: Disabling /dev/ptmx test" >&5
16171$as_echo "$as_me: WARNING: cross compiling: Disabling /dev/ptmx test" >&2;}
16172 disable_ptmx_check=yes
16173fi
16174if test -z "$no_dev_ptmx" ; then
16175 if test "x$disable_ptmx_check" != "xyes" ; then
16176 as_ac_File=`$as_echo "ac_cv_file_"/dev/ptmx"" | $as_tr_sh`
16177{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for \"/dev/ptmx\"" >&5
16178$as_echo_n "checking for \"/dev/ptmx\"... " >&6; }
16179if eval \${$as_ac_File+:} false; then :
16180 $as_echo_n "(cached) " >&6
16181else
16182 test "$cross_compiling" = yes &&
16183 as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5
16184if test -r ""/dev/ptmx""; then
16185 eval "$as_ac_File=yes"
16186else
16187 eval "$as_ac_File=no"
16188fi
16189fi
16190eval ac_res=\$$as_ac_File
16191 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
16192$as_echo "$ac_res" >&6; }
16193if eval test \"x\$"$as_ac_File"\" = x"yes"; then :
16194
16195
16196cat >>confdefs.h <<_ACEOF
16197#define HAVE_DEV_PTMX 1
16198_ACEOF
16199
16200 have_dev_ptmx=1
16201
16202
16203fi
16204
16205 fi
16206fi
16207
16208if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
16209 as_ac_File=`$as_echo "ac_cv_file_"/dev/ptc"" | $as_tr_sh`
16210{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for \"/dev/ptc\"" >&5
16211$as_echo_n "checking for \"/dev/ptc\"... " >&6; }
16212if eval \${$as_ac_File+:} false; then :
16213 $as_echo_n "(cached) " >&6
16214else
16215 test "$cross_compiling" = yes &&
16216 as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5
16217if test -r ""/dev/ptc""; then
16218 eval "$as_ac_File=yes"
16219else
16220 eval "$as_ac_File=no"
16221fi
16222fi
16223eval ac_res=\$$as_ac_File
16224 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
16225$as_echo "$ac_res" >&6; }
16226if eval test \"x\$"$as_ac_File"\" = x"yes"; then :
16227
16228
16229cat >>confdefs.h <<_ACEOF
16230#define HAVE_DEV_PTS_AND_PTC 1
16231_ACEOF
16232
16233 have_dev_ptc=1
16234
16235
16236fi
16237
16238else
16239 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: Disabling /dev/ptc test" >&5
16240$as_echo "$as_me: WARNING: cross compiling: Disabling /dev/ptc test" >&2;}
16241fi
16242
16243# Options from here on. Some of these are preset by platform above
16244
16245# Check whether --with-mantype was given.
16246if test "${with_mantype+set}" = set; then :
16247 withval=$with_mantype;
16248 case "$withval" in
16249 man|cat|doc)
16250 MANTYPE=$withval
16251 ;;
16252 *)
16253 as_fn_error $? "invalid man type: $withval" "$LINENO" 5
16254 ;;
16255 esac
16256
16257
16258fi
16259
16260if test -z "$MANTYPE"; then
16261 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
16262 for ac_prog in nroff awf
16263do
16264 # Extract the first word of "$ac_prog", so it can be a program name with args.
16265set dummy $ac_prog; ac_word=$2
16266{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
16267$as_echo_n "checking for $ac_word... " >&6; }
16268if ${ac_cv_path_NROFF+:} false; then :
16269 $as_echo_n "(cached) " >&6
16270else
16271 case $NROFF in
16272 [\\/]* | ?:[\\/]*)
16273 ac_cv_path_NROFF="$NROFF" # Let the user override the test with a path.
16274 ;;
16275 *)
16276 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
16277for as_dir in $TestPath
16278do
16279 IFS=$as_save_IFS
16280 test -z "$as_dir" && as_dir=.
16281 for ac_exec_ext in '' $ac_executable_extensions; do
16282 if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
16283 ac_cv_path_NROFF="$as_dir/$ac_word$ac_exec_ext"
16284 $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
16285 break 2
16286 fi
16287done
16288 done
16289IFS=$as_save_IFS
16290
16291 ;;
16292esac
16293fi
16294NROFF=$ac_cv_path_NROFF
16295if test -n "$NROFF"; then
16296 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $NROFF" >&5
16297$as_echo "$NROFF" >&6; }
16298else
16299 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
16300$as_echo "no" >&6; }
16301fi
16302
16303
16304 test -n "$NROFF" && break
16305done
16306test -n "$NROFF" || NROFF="/bin/false"
16307
16308 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
16309 MANTYPE=doc
16310 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
16311 MANTYPE=man
16312 else
16313 MANTYPE=cat
16314 fi
16315fi
16316
16317if test "$MANTYPE" = "doc"; then
16318 mansubdir=man;
16319else
16320 mansubdir=$MANTYPE;
16321fi
16322
16323
16324# Check whether to enable MD5 passwords
16325MD5_MSG="no"
16326
16327# Check whether --with-md5-passwords was given.
16328if test "${with_md5_passwords+set}" = set; then :
16329 withval=$with_md5_passwords;
16330 if test "x$withval" != "xno" ; then
16331
16332$as_echo "#define HAVE_MD5_PASSWORDS 1" >>confdefs.h
16333
16334 MD5_MSG="yes"
16335 fi
16336
16337
16338fi
16339
16340
16341# Whether to disable shadow password support
16342
16343# Check whether --with-shadow was given.
16344if test "${with_shadow+set}" = set; then :
16345 withval=$with_shadow;
16346 if test "x$withval" = "xno" ; then
16347 $as_echo "#define DISABLE_SHADOW 1" >>confdefs.h
16348
16349 disable_shadow=yes
16350 fi
16351
16352
16353fi
16354
16355
16356if test -z "$disable_shadow" ; then
16357 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if the systems has expire shadow information" >&5
16358$as_echo_n "checking if the systems has expire shadow information... " >&6; }
16359 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
16360/* end confdefs.h. */
16361
16362#include <sys/types.h>
16363#include <shadow.h>
16364struct spwd sp;
16365
16366int
16367main ()
16368{
16369 sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0;
16370 ;
16371 return 0;
16372}
16373_ACEOF
16374if ac_fn_c_try_compile "$LINENO"; then :
16375 sp_expire_available=yes
16376fi
16377rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
16378
16379 if test "x$sp_expire_available" = "xyes" ; then
16380 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
16381$as_echo "yes" >&6; }
16382
16383$as_echo "#define HAS_SHADOW_EXPIRE 1" >>confdefs.h
16384
16385 else
16386 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
16387$as_echo "no" >&6; }
16388 fi
16389fi
16390
16391# Use ip address instead of hostname in $DISPLAY
16392if test ! -z "$IPADDR_IN_DISPLAY" ; then
16393 DISPLAY_HACK_MSG="yes"
16394
16395$as_echo "#define IPADDR_IN_DISPLAY 1" >>confdefs.h
16396
16397else
16398 DISPLAY_HACK_MSG="no"
16399
16400# Check whether --with-ipaddr-display was given.
16401if test "${with_ipaddr_display+set}" = set; then :
16402 withval=$with_ipaddr_display;
16403 if test "x$withval" != "xno" ; then
16404 $as_echo "#define IPADDR_IN_DISPLAY 1" >>confdefs.h
16405
16406 DISPLAY_HACK_MSG="yes"
16407 fi
16408
16409
16410fi
16411
16412fi
16413
16414# check for /etc/default/login and use it if present.
16415# Check whether --enable-etc-default-login was given.
16416if test "${enable_etc_default_login+set}" = set; then :
16417 enableval=$enable_etc_default_login; if test "x$enableval" = "xno"; then
16418 { $as_echo "$as_me:${as_lineno-$LINENO}: /etc/default/login handling disabled" >&5
16419$as_echo "$as_me: /etc/default/login handling disabled" >&6;}
16420 etc_default_login=no
16421 else
16422 etc_default_login=yes
16423 fi
16424else
16425 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
16426 then
16427 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking /etc/default/login" >&5
16428$as_echo "$as_me: WARNING: cross compiling: not checking /etc/default/login" >&2;}
16429 etc_default_login=no
16430 else
16431 etc_default_login=yes
16432 fi
16433
16434fi
16435
16436
16437if test "x$etc_default_login" != "xno"; then
16438 as_ac_File=`$as_echo "ac_cv_file_"/etc/default/login"" | $as_tr_sh`
16439{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for \"/etc/default/login\"" >&5
16440$as_echo_n "checking for \"/etc/default/login\"... " >&6; }
16441if eval \${$as_ac_File+:} false; then :
16442 $as_echo_n "(cached) " >&6
16443else
16444 test "$cross_compiling" = yes &&
16445 as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5
16446if test -r ""/etc/default/login""; then
16447 eval "$as_ac_File=yes"
16448else
16449 eval "$as_ac_File=no"
16450fi
16451fi
16452eval ac_res=\$$as_ac_File
16453 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
16454$as_echo "$ac_res" >&6; }
16455if eval test \"x\$"$as_ac_File"\" = x"yes"; then :
16456 external_path_file=/etc/default/login
16457fi
16458
16459 if test "x$external_path_file" = "x/etc/default/login"; then
16460
16461$as_echo "#define HAVE_ETC_DEFAULT_LOGIN 1" >>confdefs.h
16462
16463 fi
16464fi
16465
16466if test $ac_cv_func_login_getcapbool = "yes" && \
16467 test $ac_cv_header_login_cap_h = "yes" ; then
16468 external_path_file=/etc/login.conf
16469fi
16470
16471# Whether to mess with the default path
16472SERVER_PATH_MSG="(default)"
16473
16474# Check whether --with-default-path was given.
16475if test "${with_default_path+set}" = set; then :
16476 withval=$with_default_path;
16477 if test "x$external_path_file" = "x/etc/login.conf" ; then
16478 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING:
16479--with-default-path=PATH has no effect on this system.
16480Edit /etc/login.conf instead." >&5
16481$as_echo "$as_me: WARNING:
16482--with-default-path=PATH has no effect on this system.
16483Edit /etc/login.conf instead." >&2;}
16484 elif test "x$withval" != "xno" ; then
16485 if test ! -z "$external_path_file" ; then
16486 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING:
16487--with-default-path=PATH will only be used if PATH is not defined in
16488$external_path_file ." >&5
16489$as_echo "$as_me: WARNING:
16490--with-default-path=PATH will only be used if PATH is not defined in
16491$external_path_file ." >&2;}
16492 fi
16493 user_path="$withval"
16494 SERVER_PATH_MSG="$withval"
16495 fi
16496
16497else
16498 if test "x$external_path_file" = "x/etc/login.conf" ; then
16499 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Make sure the path to scp is in /etc/login.conf" >&5
16500$as_echo "$as_me: WARNING: Make sure the path to scp is in /etc/login.conf" >&2;}
16501 else
16502 if test ! -z "$external_path_file" ; then
16503 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING:
16504If PATH is defined in $external_path_file, ensure the path to scp is included,
16505otherwise scp will not work." >&5
16506$as_echo "$as_me: WARNING:
16507If PATH is defined in $external_path_file, ensure the path to scp is included,
16508otherwise scp will not work." >&2;}
16509 fi
16510 if test "$cross_compiling" = yes; then :
16511 user_path="/usr/bin:/bin:/usr/sbin:/sbin"
16512
16513else
16514 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
16515/* end confdefs.h. */
16516
16517/* find out what STDPATH is */
16518#include <stdio.h>
16519#ifdef HAVE_PATHS_H
16520# include <paths.h>
16521#endif
16522#ifndef _PATH_STDPATH
16523# ifdef _PATH_USERPATH /* Irix */
16524# define _PATH_STDPATH _PATH_USERPATH
16525# else
16526# define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
16527# endif
16528#endif
16529#include <sys/types.h>
16530#include <sys/stat.h>
16531#include <fcntl.h>
16532#define DATA "conftest.stdpath"
16533
16534int
16535main ()
16536{
16537
16538 FILE *fd;
16539 int rc;
16540
16541 fd = fopen(DATA,"w");
16542 if(fd == NULL)
16543 exit(1);
16544
16545 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
16546 exit(1);
16547
16548 exit(0);
16549
16550 ;
16551 return 0;
16552}
16553_ACEOF
16554if ac_fn_c_try_run "$LINENO"; then :
16555 user_path=`cat conftest.stdpath`
16556else
16557 user_path="/usr/bin:/bin:/usr/sbin:/sbin"
16558fi
16559rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
16560 conftest.$ac_objext conftest.beam conftest.$ac_ext
16561fi
16562
16563# make sure $bindir is in USER_PATH so scp will work
16564 t_bindir="${bindir}"
16565 while echo "${t_bindir}" | egrep '\$\{|NONE/' >/dev/null 2>&1; do
16566 t_bindir=`eval echo ${t_bindir}`
16567 case $t_bindir in
16568 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
16569 esac
16570 case $t_bindir in
16571 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
16572 esac
16573 done
16574 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
16575 if test $? -ne 0 ; then
16576 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
16577 if test $? -ne 0 ; then
16578 user_path=$user_path:$t_bindir
16579 { $as_echo "$as_me:${as_lineno-$LINENO}: result: Adding $t_bindir to USER_PATH so scp will work" >&5
16580$as_echo "Adding $t_bindir to USER_PATH so scp will work" >&6; }
16581 fi
16582 fi
16583 fi
16584
16585fi
16586
16587if test "x$external_path_file" != "x/etc/login.conf" ; then
16588
16589cat >>confdefs.h <<_ACEOF
16590#define USER_PATH "$user_path"
16591_ACEOF
16592
16593
16594fi
16595
16596# Set superuser path separately to user path
16597
16598# Check whether --with-superuser-path was given.
16599if test "${with_superuser_path+set}" = set; then :
16600 withval=$with_superuser_path;
16601 if test -n "$withval" && test "x$withval" != "xno" && \
16602 test "x${withval}" != "xyes"; then
16603
16604cat >>confdefs.h <<_ACEOF
16605#define SUPERUSER_PATH "$withval"
16606_ACEOF
16607
16608 superuser_path=$withval
16609 fi
16610
16611
16612fi
16613
16614
16615
16616{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if we need to convert IPv4 in IPv6-mapped addresses" >&5
16617$as_echo_n "checking if we need to convert IPv4 in IPv6-mapped addresses... " >&6; }
16618IPV4_IN6_HACK_MSG="no"
16619
16620# Check whether --with-4in6 was given.
16621if test "${with_4in6+set}" = set; then :
16622 withval=$with_4in6;
16623 if test "x$withval" != "xno" ; then
16624 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
16625$as_echo "yes" >&6; }
16626
16627$as_echo "#define IPV4_IN_IPV6 1" >>confdefs.h
16628
16629 IPV4_IN6_HACK_MSG="yes"
16630 else
16631 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
16632$as_echo "no" >&6; }
16633 fi
16634
16635else
16636
16637 if test "x$inet6_default_4in6" = "xyes"; then
16638 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes (default)" >&5
16639$as_echo "yes (default)" >&6; }
16640 $as_echo "#define IPV4_IN_IPV6 1" >>confdefs.h
16641
16642 IPV4_IN6_HACK_MSG="yes"
16643 else
16644 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no (default)" >&5
16645$as_echo "no (default)" >&6; }
16646 fi
16647
16648
16649fi
16650
16651
16652# Whether to enable BSD auth support
16653BSD_AUTH_MSG=no
16654
16655# Check whether --with-bsd-auth was given.
16656if test "${with_bsd_auth+set}" = set; then :
16657 withval=$with_bsd_auth;
16658 if test "x$withval" != "xno" ; then
16659
16660$as_echo "#define BSD_AUTH 1" >>confdefs.h
16661
16662 BSD_AUTH_MSG=yes
16663 fi
16664
16665
16666fi
16667
16668
16669# Where to place sshd.pid
16670piddir=/var/run
16671# make sure the directory exists
16672if test ! -d $piddir ; then
16673 piddir=`eval echo ${sysconfdir}`
16674 case $piddir in
16675 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
16676 esac
16677fi
16678
16679
16680# Check whether --with-pid-dir was given.
16681if test "${with_pid_dir+set}" = set; then :
16682 withval=$with_pid_dir;
16683 if test -n "$withval" && test "x$withval" != "xno" && \
16684 test "x${withval}" != "xyes"; then
16685 piddir=$withval
16686 if test ! -d $piddir ; then
16687 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: ** no $piddir directory on this system **" >&5
16688$as_echo "$as_me: WARNING: ** no $piddir directory on this system **" >&2;}
16689 fi
16690 fi
16691
16692
16693fi
16694
16695
16696
16697cat >>confdefs.h <<_ACEOF
16698#define _PATH_SSH_PIDDIR "$piddir"
16699_ACEOF
16700
16701
16702
16703# Check whether --enable-lastlog was given.
16704if test "${enable_lastlog+set}" = set; then :
16705 enableval=$enable_lastlog;
16706 if test "x$enableval" = "xno" ; then
16707 $as_echo "#define DISABLE_LASTLOG 1" >>confdefs.h
16708
16709 fi
16710
16711
16712fi
16713
16714# Check whether --enable-utmp was given.
16715if test "${enable_utmp+set}" = set; then :
16716 enableval=$enable_utmp;
16717 if test "x$enableval" = "xno" ; then
16718 $as_echo "#define DISABLE_UTMP 1" >>confdefs.h
16719
16720 fi
16721
16722
16723fi
16724
16725# Check whether --enable-utmpx was given.
16726if test "${enable_utmpx+set}" = set; then :
16727 enableval=$enable_utmpx;
16728 if test "x$enableval" = "xno" ; then
16729
16730$as_echo "#define DISABLE_UTMPX 1" >>confdefs.h
16731
16732 fi
16733
16734
16735fi
16736
16737# Check whether --enable-wtmp was given.
16738if test "${enable_wtmp+set}" = set; then :
16739 enableval=$enable_wtmp;
16740 if test "x$enableval" = "xno" ; then
16741 $as_echo "#define DISABLE_WTMP 1" >>confdefs.h
16742
16743 fi
16744
16745
16746fi
16747
16748# Check whether --enable-wtmpx was given.
16749if test "${enable_wtmpx+set}" = set; then :
16750 enableval=$enable_wtmpx;
16751 if test "x$enableval" = "xno" ; then
16752
16753$as_echo "#define DISABLE_WTMPX 1" >>confdefs.h
16754
16755 fi
16756
16757
16758fi
16759
16760# Check whether --enable-libutil was given.
16761if test "${enable_libutil+set}" = set; then :
16762 enableval=$enable_libutil;
16763 if test "x$enableval" = "xno" ; then
16764 $as_echo "#define DISABLE_LOGIN 1" >>confdefs.h
16765
16766 fi
16767
16768
16769fi
16770
16771# Check whether --enable-pututline was given.
16772if test "${enable_pututline+set}" = set; then :
16773 enableval=$enable_pututline;
16774 if test "x$enableval" = "xno" ; then
16775
16776$as_echo "#define DISABLE_PUTUTLINE 1" >>confdefs.h
16777
16778 fi
16779
16780
16781fi
16782
16783# Check whether --enable-pututxline was given.
16784if test "${enable_pututxline+set}" = set; then :
16785 enableval=$enable_pututxline;
16786 if test "x$enableval" = "xno" ; then
16787
16788$as_echo "#define DISABLE_PUTUTXLINE 1" >>confdefs.h
16789
16790 fi
16791
16792
16793fi
16794
16795
16796# Check whether --with-lastlog was given.
16797if test "${with_lastlog+set}" = set; then :
16798 withval=$with_lastlog;
16799 if test "x$withval" = "xno" ; then
16800 $as_echo "#define DISABLE_LASTLOG 1" >>confdefs.h
16801
16802 elif test -n "$withval" && test "x${withval}" != "xyes"; then
16803 conf_lastlog_location=$withval
16804 fi
16805
16806
16807fi
16808
16809
16810
16811{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if your system defines LASTLOG_FILE" >&5
16812$as_echo_n "checking if your system defines LASTLOG_FILE... " >&6; }
16813cat confdefs.h - <<_ACEOF >conftest.$ac_ext
16814/* end confdefs.h. */
16815
16816#include <sys/types.h>
16817#include <utmp.h>
16818#ifdef HAVE_LASTLOG_H
16819# include <lastlog.h>
16820#endif
16821#ifdef HAVE_PATHS_H
16822# include <paths.h>
16823#endif
16824#ifdef HAVE_LOGIN_H
16825# include <login.h>
16826#endif
16827
16828int
16829main ()
16830{
16831 char *lastlog = LASTLOG_FILE;
16832 ;
16833 return 0;
16834}
16835_ACEOF
16836if ac_fn_c_try_compile "$LINENO"; then :
16837 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
16838$as_echo "yes" >&6; }
16839else
16840
16841 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
16842$as_echo "no" >&6; }
16843 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if your system defines _PATH_LASTLOG" >&5
16844$as_echo_n "checking if your system defines _PATH_LASTLOG... " >&6; }
16845 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
16846/* end confdefs.h. */
16847
16848#include <sys/types.h>
16849#include <utmp.h>
16850#ifdef HAVE_LASTLOG_H
16851# include <lastlog.h>
16852#endif
16853#ifdef HAVE_PATHS_H
16854# include <paths.h>
16855#endif
16856
16857int
16858main ()
16859{
16860 char *lastlog = _PATH_LASTLOG;
16861 ;
16862 return 0;
16863}
16864_ACEOF
16865if ac_fn_c_try_compile "$LINENO"; then :
16866 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
16867$as_echo "yes" >&6; }
16868else
16869
16870 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
16871$as_echo "no" >&6; }
16872 system_lastlog_path=no
16873
16874fi
16875rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
16876
16877fi
16878rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
16879
16880if test -z "$conf_lastlog_location"; then
16881 if test x"$system_lastlog_path" = x"no" ; then
16882 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
16883 if (test -d "$f" || test -f "$f") ; then
16884 conf_lastlog_location=$f
16885 fi
16886 done
16887 if test -z "$conf_lastlog_location"; then
16888 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: ** Cannot find lastlog **" >&5
16889$as_echo "$as_me: WARNING: ** Cannot find lastlog **" >&2;}
16890 fi
16891 fi
16892fi
16893
16894if test -n "$conf_lastlog_location"; then
16895
16896cat >>confdefs.h <<_ACEOF
16897#define CONF_LASTLOG_FILE "$conf_lastlog_location"
16898_ACEOF
16899
16900fi
16901
16902{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if your system defines UTMP_FILE" >&5
16903$as_echo_n "checking if your system defines UTMP_FILE... " >&6; }
16904cat confdefs.h - <<_ACEOF >conftest.$ac_ext
16905/* end confdefs.h. */
16906
16907#include <sys/types.h>
16908#include <utmp.h>
16909#ifdef HAVE_PATHS_H
16910# include <paths.h>
16911#endif
16912
16913int
16914main ()
16915{
16916 char *utmp = UTMP_FILE;
16917 ;
16918 return 0;
16919}
16920_ACEOF
16921if ac_fn_c_try_compile "$LINENO"; then :
16922 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
16923$as_echo "yes" >&6; }
16924else
16925 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
16926$as_echo "no" >&6; }
16927 system_utmp_path=no
16928
16929fi
16930rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
16931if test -z "$conf_utmp_location"; then
16932 if test x"$system_utmp_path" = x"no" ; then
16933 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
16934 if test -f $f ; then
16935 conf_utmp_location=$f
16936 fi
16937 done
16938 if test -z "$conf_utmp_location"; then
16939 $as_echo "#define DISABLE_UTMP 1" >>confdefs.h
16940
16941 fi
16942 fi
16943fi
16944if test -n "$conf_utmp_location"; then
16945
16946cat >>confdefs.h <<_ACEOF
16947#define CONF_UTMP_FILE "$conf_utmp_location"
16948_ACEOF
16949
16950fi
16951
16952{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if your system defines WTMP_FILE" >&5
16953$as_echo_n "checking if your system defines WTMP_FILE... " >&6; }
16954cat confdefs.h - <<_ACEOF >conftest.$ac_ext
16955/* end confdefs.h. */
16956
16957#include <sys/types.h>
16958#include <utmp.h>
16959#ifdef HAVE_PATHS_H
16960# include <paths.h>
16961#endif
16962
16963int
16964main ()
16965{
16966 char *wtmp = WTMP_FILE;
16967 ;
16968 return 0;
16969}
16970_ACEOF
16971if ac_fn_c_try_compile "$LINENO"; then :
16972 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
16973$as_echo "yes" >&6; }
16974else
16975 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
16976$as_echo "no" >&6; }
16977 system_wtmp_path=no
16978
16979fi
16980rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
16981if test -z "$conf_wtmp_location"; then
16982 if test x"$system_wtmp_path" = x"no" ; then
16983 for f in /usr/adm/wtmp /var/log/wtmp; do
16984 if test -f $f ; then
16985 conf_wtmp_location=$f
16986 fi
16987 done
16988 if test -z "$conf_wtmp_location"; then
16989 $as_echo "#define DISABLE_WTMP 1" >>confdefs.h
16990
16991 fi
16992 fi
16993fi
16994if test -n "$conf_wtmp_location"; then
16995
16996cat >>confdefs.h <<_ACEOF
16997#define CONF_WTMP_FILE "$conf_wtmp_location"
16998_ACEOF
16999
17000fi
17001
17002{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if your system defines WTMPX_FILE" >&5
17003$as_echo_n "checking if your system defines WTMPX_FILE... " >&6; }
17004cat confdefs.h - <<_ACEOF >conftest.$ac_ext
17005/* end confdefs.h. */
17006
17007#include <sys/types.h>
17008#include <utmp.h>
17009#ifdef HAVE_UTMPX_H
17010#include <utmpx.h>
17011#endif
17012#ifdef HAVE_PATHS_H
17013# include <paths.h>
17014#endif
17015
17016int
17017main ()
17018{
17019 char *wtmpx = WTMPX_FILE;
17020 ;
17021 return 0;
17022}
17023_ACEOF
17024if ac_fn_c_try_compile "$LINENO"; then :
17025 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
17026$as_echo "yes" >&6; }
17027else
17028 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
17029$as_echo "no" >&6; }
17030 system_wtmpx_path=no
17031
17032fi
17033rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
17034if test -z "$conf_wtmpx_location"; then
17035 if test x"$system_wtmpx_path" = x"no" ; then
17036 $as_echo "#define DISABLE_WTMPX 1" >>confdefs.h
17037
17038 fi
17039else
17040
17041cat >>confdefs.h <<_ACEOF
17042#define CONF_WTMPX_FILE "$conf_wtmpx_location"
17043_ACEOF
17044
17045fi
17046
17047
17048if test ! -z "$blibpath" ; then
17049 LDFLAGS="$LDFLAGS $blibflags$blibpath"
17050 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Please check and edit blibpath in LDFLAGS in Makefile" >&5
17051$as_echo "$as_me: WARNING: Please check and edit blibpath in LDFLAGS in Makefile" >&2;}
17052fi
17053
17054ac_fn_c_check_member "$LINENO" "struct lastlog" "ll_line" "ac_cv_member_struct_lastlog_ll_line" "
17055#ifdef HAVE_SYS_TYPES_H
17056#include <sys/types.h>
17057#endif
17058#ifdef HAVE_UTMP_H
17059#include <utmp.h>
17060#endif
17061#ifdef HAVE_UTMPX_H
17062#include <utmpx.h>
17063#endif
17064#ifdef HAVE_LASTLOG_H
17065#include <lastlog.h>
17066#endif
17067
17068"
17069if test "x$ac_cv_member_struct_lastlog_ll_line" = xyes; then :
17070
17071else
17072
17073 if test x$SKIP_DISABLE_LASTLOG_DEFINE != "xyes" ; then
17074 $as_echo "#define DISABLE_LASTLOG 1" >>confdefs.h
17075
17076 fi
17077
17078fi
17079
17080
17081ac_fn_c_check_member "$LINENO" "struct utmp" "ut_line" "ac_cv_member_struct_utmp_ut_line" "
17082#ifdef HAVE_SYS_TYPES_H
17083#include <sys/types.h>
17084#endif
17085#ifdef HAVE_UTMP_H
17086#include <utmp.h>
17087#endif
17088#ifdef HAVE_UTMPX_H
17089#include <utmpx.h>
17090#endif
17091#ifdef HAVE_LASTLOG_H
17092#include <lastlog.h>
17093#endif
17094
17095"
17096if test "x$ac_cv_member_struct_utmp_ut_line" = xyes; then :
17097
17098else
17099
17100 $as_echo "#define DISABLE_UTMP 1" >>confdefs.h
17101
17102 $as_echo "#define DISABLE_WTMP 1" >>confdefs.h
17103
17104
17105fi
17106
17107
17108CFLAGS="$CFLAGS $werror_flags"
17109
17110if test "x$ac_cv_func_getaddrinfo" != "xyes" ; then
17111 TEST_SSH_IPV6=no
17112else
17113 TEST_SSH_IPV6=yes
17114fi
17115ac_fn_c_check_decl "$LINENO" "BROKEN_GETADDRINFO" "ac_cv_have_decl_BROKEN_GETADDRINFO" "$ac_includes_default"
17116if test "x$ac_cv_have_decl_BROKEN_GETADDRINFO" = xyes; then :
17117 TEST_SSH_IPV6=no
17118fi
17119
17120TEST_SSH_IPV6=$TEST_SSH_IPV6
17121
17122
17123
17124ac_config_files="$ac_config_files Makefile buildpkg.sh opensshd.init openssh.xml openbsd-compat/Makefile openbsd-compat/regress/Makefile survey.sh"
17125
17126cat >confcache <<\_ACEOF
17127# This file is a shell script that caches the results of configure
17128# tests run on this system so they can be shared between configure
17129# scripts and configure runs, see configure's option --config-cache.
17130# It is not useful on other systems. If it contains results you don't
17131# want to keep, you may remove or edit it.
17132#
17133# config.status only pays attention to the cache file if you give it
17134# the --recheck option to rerun configure.
17135#
17136# `ac_cv_env_foo' variables (set or unset) will be overridden when
17137# loading this file, other *unset* `ac_cv_foo' will be assigned the
17138# following values.
17139
17140_ACEOF
17141
17142# The following way of writing the cache mishandles newlines in values,
17143# but we know of no workaround that is simple, portable, and efficient.
17144# So, we kill variables containing newlines.
17145# Ultrix sh set writes to stderr and can't be redirected directly,
17146# and sets the high bit in the cache file unless we assign to the vars.
17147(
17148 for ac_var in `(set) 2>&1 | sed -n 's/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'`; do
17149 eval ac_val=\$$ac_var
17150 case $ac_val in #(
17151 *${as_nl}*)
17152 case $ac_var in #(
17153 *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
17154$as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
17155 esac
17156 case $ac_var in #(
17157 _ | IFS | as_nl) ;; #(
17158 BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
17159 *) { eval $ac_var=; unset $ac_var;} ;;
17160 esac ;;
17161 esac
17162 done
17163
17164 (set) 2>&1 |
17165 case $as_nl`(ac_space=' '; set) 2>&1` in #(
17166 *${as_nl}ac_space=\ *)
17167 # `set' does not quote correctly, so add quotes: double-quote
17168 # substitution turns \\\\ into \\, and sed turns \\ into \.
17169 sed -n \
17170 "s/'/'\\\\''/g;
17171 s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p"
17172 ;; #(
17173 *)
17174 # `set' quotes correctly as required by POSIX, so do not add quotes.
17175 sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p"
17176 ;;
17177 esac |
17178 sort
17179) |
17180 sed '
17181 /^ac_cv_env_/b end
17182 t clear
17183 :clear
17184 s/^\([^=]*\)=\(.*[{}].*\)$/test "${\1+set}" = set || &/
17185 t end
17186 s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/
17187 :end' >>confcache
17188if diff "$cache_file" confcache >/dev/null 2>&1; then :; else
17189 if test -w "$cache_file"; then
17190 if test "x$cache_file" != "x/dev/null"; then
17191 { $as_echo "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5
17192$as_echo "$as_me: updating cache $cache_file" >&6;}
17193 if test ! -f "$cache_file" || test -h "$cache_file"; then
17194 cat confcache >"$cache_file"
17195 else
17196 case $cache_file in #(
17197 */* | ?:*)
17198 mv -f confcache "$cache_file"$$ &&
17199 mv -f "$cache_file"$$ "$cache_file" ;; #(
17200 *)
17201 mv -f confcache "$cache_file" ;;
17202 esac
17203 fi
17204 fi
17205 else
17206 { $as_echo "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5
17207$as_echo "$as_me: not updating unwritable cache $cache_file" >&6;}
17208 fi
17209fi
17210rm -f confcache
17211
17212test "x$prefix" = xNONE && prefix=$ac_default_prefix
17213# Let make expand exec_prefix.
17214test "x$exec_prefix" = xNONE && exec_prefix='${prefix}'
17215
17216DEFS=-DHAVE_CONFIG_H
17217
17218ac_libobjs=
17219ac_ltlibobjs=
17220U=
17221for ac_i in : $LIBOBJS; do test "x$ac_i" = x: && continue
17222 # 1. Remove the extension, and $U if already installed.
17223 ac_script='s/\$U\././;s/\.o$//;s/\.obj$//'
17224 ac_i=`$as_echo "$ac_i" | sed "$ac_script"`
17225 # 2. Prepend LIBOBJDIR. When used with automake>=1.10 LIBOBJDIR
17226 # will be set to the directory where LIBOBJS objects are built.
17227 as_fn_append ac_libobjs " \${LIBOBJDIR}$ac_i\$U.$ac_objext"
17228 as_fn_append ac_ltlibobjs " \${LIBOBJDIR}$ac_i"'$U.lo'
17229done
17230LIBOBJS=$ac_libobjs
17231
17232LTLIBOBJS=$ac_ltlibobjs
17233
17234
17235
17236
17237: "${CONFIG_STATUS=./config.status}"
17238ac_write_fail=0
17239ac_clean_files_save=$ac_clean_files
17240ac_clean_files="$ac_clean_files $CONFIG_STATUS"
17241{ $as_echo "$as_me:${as_lineno-$LINENO}: creating $CONFIG_STATUS" >&5
17242$as_echo "$as_me: creating $CONFIG_STATUS" >&6;}
17243as_write_fail=0
17244cat >$CONFIG_STATUS <<_ASEOF || as_write_fail=1
17245#! $SHELL
17246# Generated by $as_me.
17247# Run this file to recreate the current configuration.
17248# Compiler output produced by configure, useful for debugging
17249# configure, is in config.log if it exists.
17250
17251debug=false
17252ac_cs_recheck=false
17253ac_cs_silent=false
17254
17255SHELL=\${CONFIG_SHELL-$SHELL}
17256export SHELL
17257_ASEOF
17258cat >>$CONFIG_STATUS <<\_ASEOF || as_write_fail=1
17259## -------------------- ##
17260## M4sh Initialization. ##
17261## -------------------- ##
17262
17263# Be more Bourne compatible
17264DUALCASE=1; export DUALCASE # for MKS sh
17265if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then :
17266 emulate sh
17267 NULLCMD=:
17268 # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
17269 # is contrary to our usage. Disable this feature.
17270 alias -g '${1+"$@"}'='"$@"'
17271 setopt NO_GLOB_SUBST
17272else
17273 case `(set -o) 2>/dev/null` in #(
17274 *posix*) :
17275 set -o posix ;; #(
17276 *) :
17277 ;;
17278esac
17279fi
17280
17281
17282as_nl='
17283'
17284export as_nl
17285# Printing a long string crashes Solaris 7 /usr/bin/printf.
17286as_echo='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
17287as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo
17288as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo$as_echo
17289# Prefer a ksh shell builtin over an external printf program on Solaris,
17290# but without wasting forks for bash or zsh.
17291if test -z "$BASH_VERSION$ZSH_VERSION" \
17292 && (test "X`print -r -- $as_echo`" = "X$as_echo") 2>/dev/null; then
17293 as_echo='print -r --'
17294 as_echo_n='print -rn --'
17295elif (test "X`printf %s $as_echo`" = "X$as_echo") 2>/dev/null; then
17296 as_echo='printf %s\n'
17297 as_echo_n='printf %s'
17298else
17299 if test "X`(/usr/ucb/echo -n -n $as_echo) 2>/dev/null`" = "X-n $as_echo"; then
17300 as_echo_body='eval /usr/ucb/echo -n "$1$as_nl"'
17301 as_echo_n='/usr/ucb/echo -n'
17302 else
17303 as_echo_body='eval expr "X$1" : "X\\(.*\\)"'
17304 as_echo_n_body='eval
17305 arg=$1;
17306 case $arg in #(
17307 *"$as_nl"*)
17308 expr "X$arg" : "X\\(.*\\)$as_nl";
17309 arg=`expr "X$arg" : ".*$as_nl\\(.*\\)"`;;
17310 esac;
17311 expr "X$arg" : "X\\(.*\\)" | tr -d "$as_nl"
17312 '
17313 export as_echo_n_body
17314 as_echo_n='sh -c $as_echo_n_body as_echo'
17315 fi
17316 export as_echo_body
17317 as_echo='sh -c $as_echo_body as_echo'
17318fi
17319
17320# The user is always right.
17321if test "${PATH_SEPARATOR+set}" != set; then
17322 PATH_SEPARATOR=:
17323 (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
17324 (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
17325 PATH_SEPARATOR=';'
17326 }
17327fi
17328
17329
17330# IFS
17331# We need space, tab and new line, in precisely that order. Quoting is
17332# there to prevent editors from complaining about space-tab.
17333# (If _AS_PATH_WALK were called with IFS unset, it would disable word
17334# splitting by setting IFS to empty value.)
17335IFS=" "" $as_nl"
17336
17337# Find who we are. Look in the path if we contain no directory separator.
17338as_myself=
17339case $0 in #((
17340 *[\\/]* ) as_myself=$0 ;;
17341 *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
17342for as_dir in $PATH
17343do
17344 IFS=$as_save_IFS
17345 test -z "$as_dir" && as_dir=.
17346 test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break
17347 done
17348IFS=$as_save_IFS
17349
17350 ;;
17351esac
17352# We did not find ourselves, most probably we were run as `sh COMMAND'
17353# in which case we are not to be found in the path.
17354if test "x$as_myself" = x; then
17355 as_myself=$0
17356fi
17357if test ! -f "$as_myself"; then
17358 $as_echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
17359 exit 1
17360fi
17361
17362# Unset variables that we do not need and which cause bugs (e.g. in
17363# pre-3.0 UWIN ksh). But do not cause bugs in bash 2.01; the "|| exit 1"
17364# suppresses any "Segmentation fault" message there. '((' could
17365# trigger a bug in pdksh 5.2.14.
17366for as_var in BASH_ENV ENV MAIL MAILPATH
17367do eval test x\${$as_var+set} = xset \
17368 && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
17369done
17370PS1='$ '
17371PS2='> '
17372PS4='+ '
17373
17374# NLS nuisances.
17375LC_ALL=C
17376export LC_ALL
17377LANGUAGE=C
17378export LANGUAGE
17379
17380# CDPATH.
17381(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
17382
17383
17384# as_fn_error STATUS ERROR [LINENO LOG_FD]
17385# ----------------------------------------
17386# Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are
17387# provided, also output the error to LOG_FD, referencing LINENO. Then exit the
17388# script with STATUS, using 1 if that was 0.
17389as_fn_error ()
17390{
17391 as_status=$1; test $as_status -eq 0 && as_status=1
17392 if test "$4"; then
17393 as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
17394 $as_echo "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
17395 fi
17396 $as_echo "$as_me: error: $2" >&2
17397 as_fn_exit $as_status
17398} # as_fn_error
17399
17400
17401# as_fn_set_status STATUS
17402# -----------------------
17403# Set $? to STATUS, without forking.
17404as_fn_set_status ()
17405{
17406 return $1
17407} # as_fn_set_status
17408
17409# as_fn_exit STATUS
17410# -----------------
17411# Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
17412as_fn_exit ()
17413{
17414 set +e
17415 as_fn_set_status $1
17416 exit $1
17417} # as_fn_exit
17418
17419# as_fn_unset VAR
17420# ---------------
17421# Portably unset VAR.
17422as_fn_unset ()
17423{
17424 { eval $1=; unset $1;}
17425}
17426as_unset=as_fn_unset
17427# as_fn_append VAR VALUE
17428# ----------------------
17429# Append the text in VALUE to the end of the definition contained in VAR. Take
17430# advantage of any shell optimizations that allow amortized linear growth over
17431# repeated appends, instead of the typical quadratic growth present in naive
17432# implementations.
17433if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null; then :
17434 eval 'as_fn_append ()
17435 {
17436 eval $1+=\$2
17437 }'
17438else
17439 as_fn_append ()
17440 {
17441 eval $1=\$$1\$2
17442 }
17443fi # as_fn_append
17444
17445# as_fn_arith ARG...
17446# ------------------
17447# Perform arithmetic evaluation on the ARGs, and store the result in the
17448# global $as_val. Take advantage of shells that can avoid forks. The arguments
17449# must be portable across $(()) and expr.
17450if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null; then :
17451 eval 'as_fn_arith ()
17452 {
17453 as_val=$(( $* ))
17454 }'
17455else
17456 as_fn_arith ()
17457 {
17458 as_val=`expr "$@" || test $? -eq 1`
17459 }
17460fi # as_fn_arith
17461
17462
17463if expr a : '\(a\)' >/dev/null 2>&1 &&
17464 test "X`expr 00001 : '.*\(...\)'`" = X001; then
17465 as_expr=expr
17466else
17467 as_expr=false
17468fi
17469
17470if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
17471 as_basename=basename
17472else
17473 as_basename=false
17474fi
17475
17476if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
17477 as_dirname=dirname
17478else
17479 as_dirname=false
17480fi
17481
17482as_me=`$as_basename -- "$0" ||
17483$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
17484 X"$0" : 'X\(//\)$' \| \
17485 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
17486$as_echo X/"$0" |
17487 sed '/^.*\/\([^/][^/]*\)\/*$/{
17488 s//\1/
17489 q
17490 }
17491 /^X\/\(\/\/\)$/{
17492 s//\1/
17493 q
17494 }
17495 /^X\/\(\/\).*/{
17496 s//\1/
17497 q
17498 }
17499 s/.*/./; q'`
17500
17501# Avoid depending upon Character Ranges.
17502as_cr_letters='abcdefghijklmnopqrstuvwxyz'
17503as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
17504as_cr_Letters=$as_cr_letters$as_cr_LETTERS
17505as_cr_digits='0123456789'
17506as_cr_alnum=$as_cr_Letters$as_cr_digits
17507
17508ECHO_C= ECHO_N= ECHO_T=
17509case `echo -n x` in #(((((
17510-n*)
17511 case `echo 'xy\c'` in
17512 *c*) ECHO_T=' ';; # ECHO_T is single tab character.
17513 xy) ECHO_C='\c';;
17514 *) echo `echo ksh88 bug on AIX 6.1` > /dev/null
17515 ECHO_T=' ';;
17516 esac;;
17517*)
17518 ECHO_N='-n';;
17519esac
17520
17521rm -f conf$$ conf$$.exe conf$$.file
17522if test -d conf$$.dir; then
17523 rm -f conf$$.dir/conf$$.file
17524else
17525 rm -f conf$$.dir
17526 mkdir conf$$.dir 2>/dev/null
17527fi
17528if (echo >conf$$.file) 2>/dev/null; then
17529 if ln -s conf$$.file conf$$ 2>/dev/null; then
17530 as_ln_s='ln -s'
17531 # ... but there are two gotchas:
17532 # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail.
17533 # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable.
17534 # In both cases, we have to default to `cp -p'.
17535 ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
17536 as_ln_s='cp -p'
17537 elif ln conf$$.file conf$$ 2>/dev/null; then
17538 as_ln_s=ln
17539 else
17540 as_ln_s='cp -p'
17541 fi
17542else
17543 as_ln_s='cp -p'
17544fi
17545rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
17546rmdir conf$$.dir 2>/dev/null
17547
17548
17549# as_fn_mkdir_p
17550# -------------
17551# Create "$as_dir" as a directory, including parents if necessary.
17552as_fn_mkdir_p ()
17553{
17554
17555 case $as_dir in #(
17556 -*) as_dir=./$as_dir;;
17557 esac
17558 test -d "$as_dir" || eval $as_mkdir_p || {
17559 as_dirs=
17560 while :; do
17561 case $as_dir in #(
17562 *\'*) as_qdir=`$as_echo "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
17563 *) as_qdir=$as_dir;;
17564 esac
17565 as_dirs="'$as_qdir' $as_dirs"
17566 as_dir=`$as_dirname -- "$as_dir" ||
17567$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
17568 X"$as_dir" : 'X\(//\)[^/]' \| \
17569 X"$as_dir" : 'X\(//\)$' \| \
17570 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
17571$as_echo X"$as_dir" |
17572 sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
17573 s//\1/
17574 q
17575 }
17576 /^X\(\/\/\)[^/].*/{
17577 s//\1/
17578 q
17579 }
17580 /^X\(\/\/\)$/{
17581 s//\1/
17582 q
17583 }
17584 /^X\(\/\).*/{
17585 s//\1/
17586 q
17587 }
17588 s/.*/./; q'`
17589 test -d "$as_dir" && break
17590 done
17591 test -z "$as_dirs" || eval "mkdir $as_dirs"
17592 } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
17593
17594
17595} # as_fn_mkdir_p
17596if mkdir -p . 2>/dev/null; then
17597 as_mkdir_p='mkdir -p "$as_dir"'
17598else
17599 test -d ./-p && rmdir ./-p
17600 as_mkdir_p=false
17601fi
17602
17603if test -x / >/dev/null 2>&1; then
17604 as_test_x='test -x'
17605else
17606 if ls -dL / >/dev/null 2>&1; then
17607 as_ls_L_option=L
17608 else
17609 as_ls_L_option=
17610 fi
17611 as_test_x='
17612 eval sh -c '\''
17613 if test -d "$1"; then
17614 test -d "$1/.";
17615 else
17616 case $1 in #(
17617 -*)set "./$1";;
17618 esac;
17619 case `ls -ld'$as_ls_L_option' "$1" 2>/dev/null` in #((
17620 ???[sx]*):;;*)false;;esac;fi
17621 '\'' sh
17622 '
17623fi
17624as_executable_p=$as_test_x
17625
17626# Sed expression to map a string onto a valid CPP name.
17627as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'"
17628
17629# Sed expression to map a string onto a valid variable name.
17630as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'"
17631
17632
17633exec 6>&1
17634## ----------------------------------- ##
17635## Main body of $CONFIG_STATUS script. ##
17636## ----------------------------------- ##
17637_ASEOF
17638test $as_write_fail = 0 && chmod +x $CONFIG_STATUS || ac_write_fail=1
17639
17640cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
17641# Save the log message, to keep $0 and so on meaningful, and to
17642# report actual input values of CONFIG_FILES etc. instead of their
17643# values after options handling.
17644ac_log="
17645This file was extended by OpenSSH $as_me Portable, which was
17646generated by GNU Autoconf 2.68. Invocation command line was
17647
17648 CONFIG_FILES = $CONFIG_FILES
17649 CONFIG_HEADERS = $CONFIG_HEADERS
17650 CONFIG_LINKS = $CONFIG_LINKS
17651 CONFIG_COMMANDS = $CONFIG_COMMANDS
17652 $ $0 $@
17653
17654on `(hostname || uname -n) 2>/dev/null | sed 1q`
17655"
17656
17657_ACEOF
17658
17659case $ac_config_files in *"
17660"*) set x $ac_config_files; shift; ac_config_files=$*;;
17661esac
17662
17663case $ac_config_headers in *"
17664"*) set x $ac_config_headers; shift; ac_config_headers=$*;;
17665esac
17666
17667
17668cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
17669# Files that config.status was made for.
17670config_files="$ac_config_files"
17671config_headers="$ac_config_headers"
17672
17673_ACEOF
17674
17675cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
17676ac_cs_usage="\
17677\`$as_me' instantiates files and other configuration actions
17678from templates according to the current configuration. Unless the files
17679and actions are specified as TAGs, all are instantiated by default.
17680
17681Usage: $0 [OPTION]... [TAG]...
17682
17683 -h, --help print this help, then exit
17684 -V, --version print version number and configuration settings, then exit
17685 --config print configuration, then exit
17686 -q, --quiet, --silent
17687 do not print progress messages
17688 -d, --debug don't remove temporary files
17689 --recheck update $as_me by reconfiguring in the same conditions
17690 --file=FILE[:TEMPLATE]
17691 instantiate the configuration file FILE
17692 --header=FILE[:TEMPLATE]
17693 instantiate the configuration header FILE
17694
17695Configuration files:
17696$config_files
17697
17698Configuration headers:
17699$config_headers
17700
17701Report bugs to <openssh-unix-dev@mindrot.org>."
17702
17703_ACEOF
17704cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
17705ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
17706ac_cs_version="\\
17707OpenSSH config.status Portable
17708configured by $0, generated by GNU Autoconf 2.68,
17709 with options \\"\$ac_cs_config\\"
17710
17711Copyright (C) 2010 Free Software Foundation, Inc.
17712This config.status script is free software; the Free Software Foundation
17713gives unlimited permission to copy, distribute and modify it."
17714
17715ac_pwd='$ac_pwd'
17716srcdir='$srcdir'
17717INSTALL='$INSTALL'
17718AWK='$AWK'
17719test -n "\$AWK" || AWK=awk
17720_ACEOF
17721
17722cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
17723# The default lists apply if the user does not specify any file.
17724ac_need_defaults=:
17725while test $# != 0
17726do
17727 case $1 in
17728 --*=?*)
17729 ac_option=`expr "X$1" : 'X\([^=]*\)='`
17730 ac_optarg=`expr "X$1" : 'X[^=]*=\(.*\)'`
17731 ac_shift=:
17732 ;;
17733 --*=)
17734 ac_option=`expr "X$1" : 'X\([^=]*\)='`
17735 ac_optarg=
17736 ac_shift=:
17737 ;;
17738 *)
17739 ac_option=$1
17740 ac_optarg=$2
17741 ac_shift=shift
17742 ;;
17743 esac
17744
17745 case $ac_option in
17746 # Handling of the options.
17747 -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r)
17748 ac_cs_recheck=: ;;
17749 --version | --versio | --versi | --vers | --ver | --ve | --v | -V )
17750 $as_echo "$ac_cs_version"; exit ;;
17751 --config | --confi | --conf | --con | --co | --c )
17752 $as_echo "$ac_cs_config"; exit ;;
17753 --debug | --debu | --deb | --de | --d | -d )
17754 debug=: ;;
17755 --file | --fil | --fi | --f )
17756 $ac_shift
17757 case $ac_optarg in
17758 *\'*) ac_optarg=`$as_echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
17759 '') as_fn_error $? "missing file argument" ;;
17760 esac
17761 as_fn_append CONFIG_FILES " '$ac_optarg'"
17762 ac_need_defaults=false;;
17763 --header | --heade | --head | --hea )
17764 $ac_shift
17765 case $ac_optarg in
17766 *\'*) ac_optarg=`$as_echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
17767 esac
17768 as_fn_append CONFIG_HEADERS " '$ac_optarg'"
17769 ac_need_defaults=false;;
17770 --he | --h)
17771 # Conflict between --help and --header
17772 as_fn_error $? "ambiguous option: \`$1'
17773Try \`$0 --help' for more information.";;
17774 --help | --hel | -h )
17775 $as_echo "$ac_cs_usage"; exit ;;
17776 -q | -quiet | --quiet | --quie | --qui | --qu | --q \
17777 | -silent | --silent | --silen | --sile | --sil | --si | --s)
17778 ac_cs_silent=: ;;
17779
17780 # This is an error.
17781 -*) as_fn_error $? "unrecognized option: \`$1'
17782Try \`$0 --help' for more information." ;;
17783
17784 *) as_fn_append ac_config_targets " $1"
17785 ac_need_defaults=false ;;
17786
17787 esac
17788 shift
17789done
17790
17791ac_configure_extra_args=
17792
17793if $ac_cs_silent; then
17794 exec 6>/dev/null
17795 ac_configure_extra_args="$ac_configure_extra_args --silent"
17796fi
17797
17798_ACEOF
17799cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
17800if \$ac_cs_recheck; then
17801 set X '$SHELL' '$0' $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion
17802 shift
17803 \$as_echo "running CONFIG_SHELL=$SHELL \$*" >&6
17804 CONFIG_SHELL='$SHELL'
17805 export CONFIG_SHELL
17806 exec "\$@"
17807fi
17808
17809_ACEOF
17810cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
17811exec 5>>config.log
17812{
17813 echo
17814 sed 'h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x' <<_ASBOX
17815## Running $as_me. ##
17816_ASBOX
17817 $as_echo "$ac_log"
17818} >&5
17819
17820_ACEOF
17821cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
17822_ACEOF
17823
17824cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
17825
17826# Handling of arguments.
17827for ac_config_target in $ac_config_targets
17828do
17829 case $ac_config_target in
17830 "config.h") CONFIG_HEADERS="$CONFIG_HEADERS config.h" ;;
17831 "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;;
17832 "buildpkg.sh") CONFIG_FILES="$CONFIG_FILES buildpkg.sh" ;;
17833 "opensshd.init") CONFIG_FILES="$CONFIG_FILES opensshd.init" ;;
17834 "openssh.xml") CONFIG_FILES="$CONFIG_FILES openssh.xml" ;;
17835 "openbsd-compat/Makefile") CONFIG_FILES="$CONFIG_FILES openbsd-compat/Makefile" ;;
17836 "openbsd-compat/regress/Makefile") CONFIG_FILES="$CONFIG_FILES openbsd-compat/regress/Makefile" ;;
17837 "survey.sh") CONFIG_FILES="$CONFIG_FILES survey.sh" ;;
17838
17839 *) as_fn_error $? "invalid argument: \`$ac_config_target'" "$LINENO" 5;;
17840 esac
17841done
17842
17843
17844# If the user did not use the arguments to specify the items to instantiate,
17845# then the envvar interface is used. Set only those that are not.
17846# We use the long form for the default assignment because of an extremely
17847# bizarre bug on SunOS 4.1.3.
17848if $ac_need_defaults; then
17849 test "${CONFIG_FILES+set}" = set || CONFIG_FILES=$config_files
17850 test "${CONFIG_HEADERS+set}" = set || CONFIG_HEADERS=$config_headers
17851fi
17852
17853# Have a temporary directory for convenience. Make it in the build tree
17854# simply because there is no reason against having it here, and in addition,
17855# creating and moving files from /tmp can sometimes cause problems.
17856# Hook for its removal unless debugging.
17857# Note that there is a small window in which the directory will not be cleaned:
17858# after its creation but before its name has been assigned to `$tmp'.
17859$debug ||
17860{
17861 tmp= ac_tmp=
17862 trap 'exit_status=$?
17863 : "${ac_tmp:=$tmp}"
17864 { test ! -d "$ac_tmp" || rm -fr "$ac_tmp"; } && exit $exit_status
17865' 0
17866 trap 'as_fn_exit 1' 1 2 13 15
17867}
17868# Create a (secure) tmp directory for tmp files.
17869
17870{
17871 tmp=`(umask 077 && mktemp -d "./confXXXXXX") 2>/dev/null` &&
17872 test -d "$tmp"
17873} ||
17874{
17875 tmp=./conf$$-$RANDOM
17876 (umask 077 && mkdir "$tmp")
17877} || as_fn_error $? "cannot create a temporary directory in ." "$LINENO" 5
17878ac_tmp=$tmp
17879
17880# Set up the scripts for CONFIG_FILES section.
17881# No need to generate them if there are no CONFIG_FILES.
17882# This happens for instance with `./config.status config.h'.
17883if test -n "$CONFIG_FILES"; then
17884
17885
17886ac_cr=`echo X | tr X '\015'`
17887# On cygwin, bash can eat \r inside `` if the user requested igncr.
17888# But we know of no other shell where ac_cr would be empty at this
17889# point, so we can use a bashism as a fallback.
17890if test "x$ac_cr" = x; then
17891 eval ac_cr=\$\'\\r\'
17892fi
17893ac_cs_awk_cr=`$AWK 'BEGIN { print "a\rb" }' </dev/null 2>/dev/null`
17894if test "$ac_cs_awk_cr" = "a${ac_cr}b"; then
17895 ac_cs_awk_cr='\\r'
17896else
17897 ac_cs_awk_cr=$ac_cr
17898fi
17899
17900echo 'BEGIN {' >"$ac_tmp/subs1.awk" &&
17901_ACEOF
17902
17903
17904{
17905 echo "cat >conf$$subs.awk <<_ACEOF" &&
17906 echo "$ac_subst_vars" | sed 's/.*/&!$&$ac_delim/' &&
17907 echo "_ACEOF"
17908} >conf$$subs.sh ||
17909 as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
17910ac_delim_num=`echo "$ac_subst_vars" | grep -c '^'`
17911ac_delim='%!_!# '
17912for ac_last_try in false false false false false :; do
17913 . ./conf$$subs.sh ||
17914 as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
17915
17916 ac_delim_n=`sed -n "s/.*$ac_delim\$/X/p" conf$$subs.awk | grep -c X`
17917 if test $ac_delim_n = $ac_delim_num; then
17918 break
17919 elif $ac_last_try; then
17920 as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
17921 else
17922 ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
17923 fi
17924done
17925rm -f conf$$subs.sh
17926
17927cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
17928cat >>"\$ac_tmp/subs1.awk" <<\\_ACAWK &&
17929_ACEOF
17930sed -n '
17931h
17932s/^/S["/; s/!.*/"]=/
17933p
17934g
17935s/^[^!]*!//
17936:repl
17937t repl
17938s/'"$ac_delim"'$//
17939t delim
17940:nl
17941h
17942s/\(.\{148\}\)..*/\1/
17943t more1
17944s/["\\]/\\&/g; s/^/"/; s/$/\\n"\\/
17945p
17946n
17947b repl
17948:more1
17949s/["\\]/\\&/g; s/^/"/; s/$/"\\/
17950p
17951g
17952s/.\{148\}//
17953t nl
17954:delim
17955h
17956s/\(.\{148\}\)..*/\1/
17957t more2
17958s/["\\]/\\&/g; s/^/"/; s/$/"/
17959p
17960b
17961:more2
17962s/["\\]/\\&/g; s/^/"/; s/$/"\\/
17963p
17964g
17965s/.\{148\}//
17966t delim
17967' <conf$$subs.awk | sed '
17968/^[^""]/{
17969 N
17970 s/\n//
17971}
17972' >>$CONFIG_STATUS || ac_write_fail=1
17973rm -f conf$$subs.awk
17974cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
17975_ACAWK
17976cat >>"\$ac_tmp/subs1.awk" <<_ACAWK &&
17977 for (key in S) S_is_set[key] = 1
17978 FS = ""
17979
17980}
17981{
17982 line = $ 0
17983 nfields = split(line, field, "@")
17984 substed = 0
17985 len = length(field[1])
17986 for (i = 2; i < nfields; i++) {
17987 key = field[i]
17988 keylen = length(key)
17989 if (S_is_set[key]) {
17990 value = S[key]
17991 line = substr(line, 1, len) "" value "" substr(line, len + keylen + 3)
17992 len += length(value) + length(field[++i])
17993 substed = 1
17994 } else
17995 len += 1 + keylen
17996 }
17997
17998 print line
17999}
18000
18001_ACAWK
18002_ACEOF
18003cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
18004if sed "s/$ac_cr//" < /dev/null > /dev/null 2>&1; then
18005 sed "s/$ac_cr\$//; s/$ac_cr/$ac_cs_awk_cr/g"
18006else
18007 cat
18008fi < "$ac_tmp/subs1.awk" > "$ac_tmp/subs.awk" \
18009 || as_fn_error $? "could not setup config files machinery" "$LINENO" 5
18010_ACEOF
18011
18012# VPATH may cause trouble with some makes, so we remove sole $(srcdir),
18013# ${srcdir} and @srcdir@ entries from VPATH if srcdir is ".", strip leading and
18014# trailing colons and then remove the whole line if VPATH becomes empty
18015# (actually we leave an empty line to preserve line numbers).
18016if test "x$srcdir" = x.; then
18017 ac_vpsub='/^[ ]*VPATH[ ]*=[ ]*/{
18018h
18019s///
18020s/^/:/
18021s/[ ]*$/:/
18022s/:\$(srcdir):/:/g
18023s/:\${srcdir}:/:/g
18024s/:@srcdir@:/:/g
18025s/^:*//
18026s/:*$//
18027x
18028s/\(=[ ]*\).*/\1/
18029G
18030s/\n//
18031s/^[^=]*=[ ]*$//
18032}'
18033fi
18034
18035cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
18036fi # test -n "$CONFIG_FILES"
18037
18038# Set up the scripts for CONFIG_HEADERS section.
18039# No need to generate them if there are no CONFIG_HEADERS.
18040# This happens for instance with `./config.status Makefile'.
18041if test -n "$CONFIG_HEADERS"; then
18042cat >"$ac_tmp/defines.awk" <<\_ACAWK ||
18043BEGIN {
18044_ACEOF
18045
18046# Transform confdefs.h into an awk script `defines.awk', embedded as
18047# here-document in config.status, that substitutes the proper values into
18048# config.h.in to produce config.h.
18049
18050# Create a delimiter string that does not exist in confdefs.h, to ease
18051# handling of long lines.
18052ac_delim='%!_!# '
18053for ac_last_try in false false :; do
18054 ac_tt=`sed -n "/$ac_delim/p" confdefs.h`
18055 if test -z "$ac_tt"; then
18056 break
18057 elif $ac_last_try; then
18058 as_fn_error $? "could not make $CONFIG_HEADERS" "$LINENO" 5
18059 else
18060 ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
18061 fi
18062done
18063
18064# For the awk script, D is an array of macro values keyed by name,
18065# likewise P contains macro parameters if any. Preserve backslash
18066# newline sequences.
18067
18068ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]*
18069sed -n '
18070s/.\{148\}/&'"$ac_delim"'/g
18071t rset
18072:rset
18073s/^[ ]*#[ ]*define[ ][ ]*/ /
18074t def
18075d
18076:def
18077s/\\$//
18078t bsnl
18079s/["\\]/\\&/g
18080s/^ \('"$ac_word_re"'\)\(([^()]*)\)[ ]*\(.*\)/P["\1"]="\2"\
18081D["\1"]=" \3"/p
18082s/^ \('"$ac_word_re"'\)[ ]*\(.*\)/D["\1"]=" \2"/p
18083d
18084:bsnl
18085s/["\\]/\\&/g
18086s/^ \('"$ac_word_re"'\)\(([^()]*)\)[ ]*\(.*\)/P["\1"]="\2"\
18087D["\1"]=" \3\\\\\\n"\\/p
18088t cont
18089s/^ \('"$ac_word_re"'\)[ ]*\(.*\)/D["\1"]=" \2\\\\\\n"\\/p
18090t cont
18091d
18092:cont
18093n
18094s/.\{148\}/&'"$ac_delim"'/g
18095t clear
18096:clear
18097s/\\$//
18098t bsnlc
18099s/["\\]/\\&/g; s/^/"/; s/$/"/p
18100d
18101:bsnlc
18102s/["\\]/\\&/g; s/^/"/; s/$/\\\\\\n"\\/p
18103b cont
18104' <confdefs.h | sed '
18105s/'"$ac_delim"'/"\\\
18106"/g' >>$CONFIG_STATUS || ac_write_fail=1
18107
18108cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
18109 for (key in D) D_is_set[key] = 1
18110 FS = ""
18111}
18112/^[\t ]*#[\t ]*(define|undef)[\t ]+$ac_word_re([\t (]|\$)/ {
18113 line = \$ 0
18114 split(line, arg, " ")
18115 if (arg[1] == "#") {
18116 defundef = arg[2]
18117 mac1 = arg[3]
18118 } else {
18119 defundef = substr(arg[1], 2)
18120 mac1 = arg[2]
18121 }
18122 split(mac1, mac2, "(") #)
18123 macro = mac2[1]
18124 prefix = substr(line, 1, index(line, defundef) - 1)
18125 if (D_is_set[macro]) {
18126 # Preserve the white space surrounding the "#".
18127 print prefix "define", macro P[macro] D[macro]
18128 next
18129 } else {
18130 # Replace #undef with comments. This is necessary, for example,
18131 # in the case of _POSIX_SOURCE, which is predefined and required
18132 # on some systems where configure will not decide to define it.
18133 if (defundef == "undef") {
18134 print "/*", prefix defundef, macro, "*/"
18135 next
18136 }
18137 }
18138}
18139{ print }
18140_ACAWK
18141_ACEOF
18142cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
18143 as_fn_error $? "could not setup config headers machinery" "$LINENO" 5
18144fi # test -n "$CONFIG_HEADERS"
18145
18146
18147eval set X " :F $CONFIG_FILES :H $CONFIG_HEADERS "
18148shift
18149for ac_tag
18150do
18151 case $ac_tag in
18152 :[FHLC]) ac_mode=$ac_tag; continue;;
18153 esac
18154 case $ac_mode$ac_tag in
18155 :[FHL]*:*);;
18156 :L* | :C*:*) as_fn_error $? "invalid tag \`$ac_tag'" "$LINENO" 5;;
18157 :[FH]-) ac_tag=-:-;;
18158 :[FH]*) ac_tag=$ac_tag:$ac_tag.in;;
18159 esac
18160 ac_save_IFS=$IFS
18161 IFS=:
18162 set x $ac_tag
18163 IFS=$ac_save_IFS
18164 shift
18165 ac_file=$1
18166 shift
18167
18168 case $ac_mode in
18169 :L) ac_source=$1;;
18170 :[FH])
18171 ac_file_inputs=
18172 for ac_f
18173 do
18174 case $ac_f in
18175 -) ac_f="$ac_tmp/stdin";;
18176 *) # Look for the file first in the build tree, then in the source tree
18177 # (if the path is not absolute). The absolute path cannot be DOS-style,
18178 # because $ac_f cannot contain `:'.
18179 test -f "$ac_f" ||
18180 case $ac_f in
18181 [\\/$]*) false;;
18182 *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";;
18183 esac ||
18184 as_fn_error 1 "cannot find input file: \`$ac_f'" "$LINENO" 5;;
18185 esac
18186 case $ac_f in *\'*) ac_f=`$as_echo "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac
18187 as_fn_append ac_file_inputs " '$ac_f'"
18188 done
18189
18190 # Let's still pretend it is `configure' which instantiates (i.e., don't
18191 # use $as_me), people would be surprised to read:
18192 # /* config.h. Generated by config.status. */
18193 configure_input='Generated from '`
18194 $as_echo "$*" | sed 's|^[^:]*/||;s|:[^:]*/|, |g'
18195 `' by configure.'
18196 if test x"$ac_file" != x-; then
18197 configure_input="$ac_file. $configure_input"
18198 { $as_echo "$as_me:${as_lineno-$LINENO}: creating $ac_file" >&5
18199$as_echo "$as_me: creating $ac_file" >&6;}
18200 fi
18201 # Neutralize special characters interpreted by sed in replacement strings.
18202 case $configure_input in #(
18203 *\&* | *\|* | *\\* )
18204 ac_sed_conf_input=`$as_echo "$configure_input" |
18205 sed 's/[\\\\&|]/\\\\&/g'`;; #(
18206 *) ac_sed_conf_input=$configure_input;;
18207 esac
18208
18209 case $ac_tag in
18210 *:-:* | *:-) cat >"$ac_tmp/stdin" \
18211 || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;;
18212 esac
18213 ;;
18214 esac
18215
18216 ac_dir=`$as_dirname -- "$ac_file" ||
18217$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
18218 X"$ac_file" : 'X\(//\)[^/]' \| \
18219 X"$ac_file" : 'X\(//\)$' \| \
18220 X"$ac_file" : 'X\(/\)' \| . 2>/dev/null ||
18221$as_echo X"$ac_file" |
18222 sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
18223 s//\1/
18224 q
18225 }
18226 /^X\(\/\/\)[^/].*/{
18227 s//\1/
18228 q
18229 }
18230 /^X\(\/\/\)$/{
18231 s//\1/
18232 q
18233 }
18234 /^X\(\/\).*/{
18235 s//\1/
18236 q
18237 }
18238 s/.*/./; q'`
18239 as_dir="$ac_dir"; as_fn_mkdir_p
18240 ac_builddir=.
18241
18242case "$ac_dir" in
18243.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
18244*)
18245 ac_dir_suffix=/`$as_echo "$ac_dir" | sed 's|^\.[\\/]||'`
18246 # A ".." for each directory in $ac_dir_suffix.
18247 ac_top_builddir_sub=`$as_echo "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
18248 case $ac_top_builddir_sub in
18249 "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
18250 *) ac_top_build_prefix=$ac_top_builddir_sub/ ;;
18251 esac ;;
18252esac
18253ac_abs_top_builddir=$ac_pwd
18254ac_abs_builddir=$ac_pwd$ac_dir_suffix
18255# for backward compatibility:
18256ac_top_builddir=$ac_top_build_prefix
18257
18258case $srcdir in
18259 .) # We are building in place.
18260 ac_srcdir=.
18261 ac_top_srcdir=$ac_top_builddir_sub
18262 ac_abs_top_srcdir=$ac_pwd ;;
18263 [\\/]* | ?:[\\/]* ) # Absolute name.
18264 ac_srcdir=$srcdir$ac_dir_suffix;
18265 ac_top_srcdir=$srcdir
18266 ac_abs_top_srcdir=$srcdir ;;
18267 *) # Relative name.
18268 ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
18269 ac_top_srcdir=$ac_top_build_prefix$srcdir
18270 ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
18271esac
18272ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
18273
18274
18275 case $ac_mode in
18276 :F)
18277 #
18278 # CONFIG_FILE
18279 #
18280
18281 case $INSTALL in
18282 [\\/$]* | ?:[\\/]* ) ac_INSTALL=$INSTALL ;;
18283 *) ac_INSTALL=$ac_top_build_prefix$INSTALL ;;
18284 esac
18285_ACEOF
18286
18287cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
18288# If the template does not know about datarootdir, expand it.
18289# FIXME: This hack should be removed a few years after 2.60.
18290ac_datarootdir_hack=; ac_datarootdir_seen=
18291ac_sed_dataroot='
18292/datarootdir/ {
18293 p
18294 q
18295}
18296/@datadir@/p
18297/@docdir@/p
18298/@infodir@/p
18299/@localedir@/p
18300/@mandir@/p'
18301case `eval "sed -n \"\$ac_sed_dataroot\" $ac_file_inputs"` in
18302*datarootdir*) ac_datarootdir_seen=yes;;
18303*@datadir@*|*@docdir@*|*@infodir@*|*@localedir@*|*@mandir@*)
18304 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5
18305$as_echo "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;}
18306_ACEOF
18307cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
18308 ac_datarootdir_hack='
18309 s&@datadir@&$datadir&g
18310 s&@docdir@&$docdir&g
18311 s&@infodir@&$infodir&g
18312 s&@localedir@&$localedir&g
18313 s&@mandir@&$mandir&g
18314 s&\\\${datarootdir}&$datarootdir&g' ;;
18315esac
18316_ACEOF
18317
18318# Neutralize VPATH when `$srcdir' = `.'.
18319# Shell code in configure.ac might set extrasub.
18320# FIXME: do we really want to maintain this feature?
18321cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
18322ac_sed_extra="$ac_vpsub
18323$extrasub
18324_ACEOF
18325cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
18326:t
18327/@[a-zA-Z_][a-zA-Z_0-9]*@/!b
18328s|@configure_input@|$ac_sed_conf_input|;t t
18329s&@top_builddir@&$ac_top_builddir_sub&;t t
18330s&@top_build_prefix@&$ac_top_build_prefix&;t t
18331s&@srcdir@&$ac_srcdir&;t t
18332s&@abs_srcdir@&$ac_abs_srcdir&;t t
18333s&@top_srcdir@&$ac_top_srcdir&;t t
18334s&@abs_top_srcdir@&$ac_abs_top_srcdir&;t t
18335s&@builddir@&$ac_builddir&;t t
18336s&@abs_builddir@&$ac_abs_builddir&;t t
18337s&@abs_top_builddir@&$ac_abs_top_builddir&;t t
18338s&@INSTALL@&$ac_INSTALL&;t t
18339$ac_datarootdir_hack
18340"
18341eval sed \"\$ac_sed_extra\" "$ac_file_inputs" | $AWK -f "$ac_tmp/subs.awk" \
18342 >$ac_tmp/out || as_fn_error $? "could not create $ac_file" "$LINENO" 5
18343
18344test -z "$ac_datarootdir_hack$ac_datarootdir_seen" &&
18345 { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } &&
18346 { ac_out=`sed -n '/^[ ]*datarootdir[ ]*:*=/p' \
18347 "$ac_tmp/out"`; test -z "$ac_out"; } &&
18348 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable \`datarootdir'
18349which seems to be undefined. Please make sure it is defined" >&5
18350$as_echo "$as_me: WARNING: $ac_file contains a reference to the variable \`datarootdir'
18351which seems to be undefined. Please make sure it is defined" >&2;}
18352
18353 rm -f "$ac_tmp/stdin"
18354 case $ac_file in
18355 -) cat "$ac_tmp/out" && rm -f "$ac_tmp/out";;
18356 *) rm -f "$ac_file" && mv "$ac_tmp/out" "$ac_file";;
18357 esac \
18358 || as_fn_error $? "could not create $ac_file" "$LINENO" 5
18359 ;;
18360 :H)
18361 #
18362 # CONFIG_HEADER
18363 #
18364 if test x"$ac_file" != x-; then
18365 {
18366 $as_echo "/* $configure_input */" \
18367 && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs"
18368 } >"$ac_tmp/config.h" \
18369 || as_fn_error $? "could not create $ac_file" "$LINENO" 5
18370 if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then
18371 { $as_echo "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5
18372$as_echo "$as_me: $ac_file is unchanged" >&6;}
18373 else
18374 rm -f "$ac_file"
18375 mv "$ac_tmp/config.h" "$ac_file" \
18376 || as_fn_error $? "could not create $ac_file" "$LINENO" 5
18377 fi
18378 else
18379 $as_echo "/* $configure_input */" \
18380 && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \
18381 || as_fn_error $? "could not create -" "$LINENO" 5
18382 fi
18383 ;;
18384
18385
18386 esac
18387
18388done # for ac_tag
18389
18390
18391as_fn_exit 0
18392_ACEOF
18393ac_clean_files=$ac_clean_files_save
18394
18395test $ac_write_fail = 0 ||
18396 as_fn_error $? "write failure creating $CONFIG_STATUS" "$LINENO" 5
18397
18398
18399# configure is writing to config.log, and then calls config.status.
18400# config.status does its own redirection, appending to config.log.
18401# Unfortunately, on DOS this fails, as config.log is still kept open
18402# by configure, so config.status won't be able to write to it; its
18403# output is simply discarded. So we exec the FD to /dev/null,
18404# effectively closing config.log, so it can be properly (re)opened and
18405# appended to by config.status. When coming back to configure, we
18406# need to make the FD available again.
18407if test "$no_create" != yes; then
18408 ac_cs_success=:
18409 ac_config_status_args=
18410 test "$silent" = yes &&
18411 ac_config_status_args="$ac_config_status_args --quiet"
18412 exec 5>/dev/null
18413 $SHELL $CONFIG_STATUS $ac_config_status_args || ac_cs_success=false
18414 exec 5>>config.log
18415 # Use ||, not &&, to avoid exiting from the if with $? = 1, which
18416 # would make configure fail if this is the last instruction.
18417 $ac_cs_success || as_fn_exit 1
18418fi
18419if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then
18420 { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: unrecognized options: $ac_unrecognized_opts" >&5
18421$as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;}
18422fi
18423
18424
18425# Print summary of options
18426
18427# Someone please show me a better way :)
18428A=`eval echo ${prefix}` ; A=`eval echo ${A}`
18429B=`eval echo ${bindir}` ; B=`eval echo ${B}`
18430C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
18431D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
18432E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
18433F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
18434G=`eval echo ${piddir}` ; G=`eval echo ${G}`
18435H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
18436I=`eval echo ${user_path}` ; I=`eval echo ${I}`
18437J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
18438
18439echo ""
18440echo "OpenSSH has been configured with the following options:"
18441echo " User binaries: $B"
18442echo " System binaries: $C"
18443echo " Configuration files: $D"
18444echo " Askpass program: $E"
18445echo " Manual pages: $F"
18446echo " PID file: $G"
18447echo " Privilege separation chroot path: $H"
18448if test "x$external_path_file" = "x/etc/login.conf" ; then
18449echo " At runtime, sshd will use the path defined in $external_path_file"
18450echo " Make sure the path to scp is present, otherwise scp will not work"
18451else
18452echo " sshd default user PATH: $I"
18453 if test ! -z "$external_path_file"; then
18454echo " (If PATH is set in $external_path_file it will be used instead. If"
18455echo " used, ensure the path to scp is present, otherwise scp will not work.)"
18456 fi
18457fi
18458if test ! -z "$superuser_path" ; then
18459echo " sshd superuser user PATH: $J"
18460fi
18461echo " Manpage format: $MANTYPE"
18462echo " PAM support: $PAM_MSG"
18463echo " OSF SIA support: $SIA_MSG"
18464echo " KerberosV support: $KRB5_MSG"
18465echo " SELinux support: $SELINUX_MSG"
18466echo " Smartcard support: $SCARD_MSG"
18467echo " S/KEY support: $SKEY_MSG"
18468echo " TCP Wrappers support: $TCPW_MSG"
18469echo " MD5 password support: $MD5_MSG"
18470echo " libedit support: $LIBEDIT_MSG"
18471echo " Solaris process contract support: $SPC_MSG"
18472echo " Solaris project support: $SP_MSG"
18473echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
18474echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
18475echo " BSD Auth support: $BSD_AUTH_MSG"
18476echo " Random number source: $RAND_MSG"
18477echo " Privsep sandbox style: $SANDBOX_STYLE"
18478
18479echo ""
18480
18481echo " Host: ${host}"
18482echo " Compiler: ${CC}"
18483echo " Compiler flags: ${CFLAGS}"
18484echo "Preprocessor flags: ${CPPFLAGS}"
18485echo " Linker flags: ${LDFLAGS}"
18486echo " Libraries: ${LIBS}"
18487if test ! -z "${SSHDLIBS}"; then
18488echo " +for sshd: ${SSHDLIBS}"
18489fi
18490if test ! -z "${SSHLIBS}"; then
18491echo " +for ssh: ${SSHLIBS}"
18492fi
18493
18494echo ""
18495
18496if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
18497 echo "SVR4 style packages are supported with \"make package\""
18498 echo ""
18499fi
18500
18501if test "x$PAM_MSG" = "xyes" ; then
18502 echo "PAM is enabled. You may need to install a PAM control file "
18503 echo "for sshd, otherwise password authentication may fail. "
18504 echo "Example PAM control files can be found in the contrib/ "
18505 echo "subdirectory"
18506 echo ""
18507fi
18508
18509if test ! -z "$NO_PEERCHECK" ; then
18510 echo "WARNING: the operating system that you are using does not"
18511 echo "appear to support getpeereid(), getpeerucred() or the"
18512 echo "SO_PEERCRED getsockopt() option. These facilities are used to"
18513 echo "enforce security checks to prevent unauthorised connections to"
18514 echo "ssh-agent. Their absence increases the risk that a malicious"
18515 echo "user can connect to your agent."
18516 echo ""
18517fi
18518
18519if test "$AUDIT_MODULE" = "bsm" ; then
18520 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
18521 echo "See the Solaris section in README.platform for details."
18522fi
diff --git a/moduli.0 b/moduli.0
new file mode 100644
index 000000000..77dfa4295
--- /dev/null
+++ b/moduli.0
@@ -0,0 +1,74 @@
1MODULI(5) OpenBSD Programmer's Manual MODULI(5)
2
3NAME
4 moduli - Diffie-Hellman moduli
5
6DESCRIPTION
7 The /etc/moduli file contains prime numbers and generators for use by
8 sshd(8) in the Diffie-Hellman Group Exchange key exchange method.
9
10 New moduli may be generated with ssh-keygen(1) using a two-step process.
11 An initial candidate generation pass, using ssh-keygen -G, calculates
12 numbers that are likely to be useful. A second primality testing pass,
13 using ssh-keygen -T, provides a high degree of assurance that the numbers
14 are prime and are safe for use in Diffie-Hellman operations by sshd(8).
15 This moduli format is used as the output from each pass.
16
17 The file consists of newline-separated records, one per modulus,
18 containing seven space-separated fields. These fields are as follows:
19
20 timestamp The time that the modulus was last processed as
21 YYYYMMDDHHMMSS.
22
23 type Decimal number specifying the internal structure of
24 the prime modulus. Supported types are:
25
26 0 Unknown, not tested.
27 2 "Safe" prime; (p-1)/2 is also prime.
28 4 Sophie Germain; 2p+1 is also prime.
29
30 Moduli candidates initially produced by ssh-keygen(1)
31 are Sophie Germain primes (type 4). Further primality
32 testing with ssh-keygen(1) produces safe prime moduli
33 (type 2) that are ready for use in sshd(8). Other
34 types are not used by OpenSSH.
35
36 tests Decimal number indicating the type of primality tests
37 that the number has been subjected to represented as a
38 bitmask of the following values:
39
40 0x00 Not tested.
41 0x01 Composite number - not prime.
42 0x02 Sieve of Eratosthenes.
43 0x04 Probabilistic Miller-Rabin primality tests.
44
45 The ssh-keygen(1) moduli candidate generation uses the
46 Sieve of Eratosthenes (flag 0x02). Subsequent
47 ssh-keygen(1) primality tests are Miller-Rabin tests
48 (flag 0x04).
49
50 trials Decimal number indicating the number of primality
51 trials that have been performed on the modulus.
52
53 size Decimal number indicating the size of the prime in
54 bits.
55
56 generator The recommended generator for use with this modulus
57 (hexadecimal).
58
59 modulus The modulus itself in hexadecimal.
60
61 When performing Diffie-Hellman Group Exchange, sshd(8) first estimates
62 the size of the modulus required to produce enough Diffie-Hellman output
63 to sufficiently key the selected symmetric cipher. sshd(8) then randomly
64 selects a modulus from /etc/moduli that best meets the size requirement.
65
66SEE ALSO
67 ssh-keygen(1), sshd(8)
68
69STANDARDS
70 M. Friedl, N. Provos, and W. Simpson, Diffie-Hellman Group Exchange for
71 the Secure Shell (SSH) Transport Layer Protocol, RFC 4419, March 2006,
72 2006.
73
74OpenBSD 5.3 September 26, 2012 OpenBSD 5.3
diff --git a/openbsd-compat/.cvsignore b/openbsd-compat/.cvsignore
deleted file mode 100644
index f3c7a7c5d..000000000
--- a/openbsd-compat/.cvsignore
+++ /dev/null
@@ -1 +0,0 @@
1Makefile
diff --git a/openbsd-compat/regress/.cvsignore b/openbsd-compat/regress/.cvsignore
deleted file mode 100644
index afbf7cc3f..000000000
--- a/openbsd-compat/regress/.cvsignore
+++ /dev/null
@@ -1,5 +0,0 @@
1Makefile
2snprintftest
3strduptest
4strtonumtest
5
diff --git a/regress/.cvsignore b/regress/.cvsignore
deleted file mode 100644
index f3c7a7c5d..000000000
--- a/regress/.cvsignore
+++ /dev/null
@@ -1 +0,0 @@
1Makefile
diff --git a/scard/.cvsignore b/scard/.cvsignore
deleted file mode 100644
index 5349d34ae..000000000
--- a/scard/.cvsignore
+++ /dev/null
@@ -1,2 +0,0 @@
1Makefile
2Ssh.bin
diff --git a/scp.0 b/scp.0
new file mode 100644
index 000000000..119d9293b
--- /dev/null
+++ b/scp.0
@@ -0,0 +1,158 @@
1SCP(1) OpenBSD Reference Manual SCP(1)
2
3NAME
4 scp - secure copy (remote file copy program)
5
6SYNOPSIS
7 scp [-12346BCpqrv] [-c cipher] [-F ssh_config] [-i identity_file]
8 [-l limit] [-o ssh_option] [-P port] [-S program]
9 [[user@]host1:]file1 ... [[user@]host2:]file2
10
11DESCRIPTION
12 scp copies files between hosts on a network. It uses ssh(1) for data
13 transfer, and uses the same authentication and provides the same security
14 as ssh(1). Unlike rcp(1), scp will ask for passwords or passphrases if
15 they are needed for authentication.
16
17 File names may contain a user and host specification to indicate that the
18 file is to be copied to/from that host. Local file names can be made
19 explicit using absolute or relative pathnames to avoid scp treating file
20 names containing `:' as host specifiers. Copies between two remote hosts
21 are also permitted.
22
23 The options are as follows:
24
25 -1 Forces scp to use protocol 1.
26
27 -2 Forces scp to use protocol 2.
28
29 -3 Copies between two remote hosts are transferred through the local
30 host. Without this option the data is copied directly between
31 the two remote hosts. Note that this option disables the
32 progress meter.
33
34 -4 Forces scp to use IPv4 addresses only.
35
36 -6 Forces scp to use IPv6 addresses only.
37
38 -B Selects batch mode (prevents asking for passwords or
39 passphrases).
40
41 -C Compression enable. Passes the -C flag to ssh(1) to enable
42 compression.
43
44 -c cipher
45 Selects the cipher to use for encrypting the data transfer. This
46 option is directly passed to ssh(1).
47
48 -F ssh_config
49 Specifies an alternative per-user configuration file for ssh.
50 This option is directly passed to ssh(1).
51
52 -i identity_file
53 Selects the file from which the identity (private key) for public
54 key authentication is read. This option is directly passed to
55 ssh(1).
56
57 -l limit
58 Limits the used bandwidth, specified in Kbit/s.
59
60 -o ssh_option
61 Can be used to pass options to ssh in the format used in
62 ssh_config(5). This is useful for specifying options for which
63 there is no separate scp command-line flag. For full details of
64 the options listed below, and their possible values, see
65 ssh_config(5).
66
67 AddressFamily
68 BatchMode
69 BindAddress
70 ChallengeResponseAuthentication
71 CheckHostIP
72 Cipher
73 Ciphers
74 Compression
75 CompressionLevel
76 ConnectionAttempts
77 ConnectTimeout
78 ControlMaster
79 ControlPath
80 ControlPersist
81 GlobalKnownHostsFile
82 GSSAPIAuthentication
83 GSSAPIDelegateCredentials
84 HashKnownHosts
85 Host
86 HostbasedAuthentication
87 HostKeyAlgorithms
88 HostKeyAlias
89 HostName
90 IdentityFile
91 IdentitiesOnly
92 IPQoS
93 KbdInteractiveAuthentication
94 KbdInteractiveDevices
95 KexAlgorithms
96 LogLevel
97 MACs
98 NoHostAuthenticationForLocalhost
99 NumberOfPasswordPrompts
100 PasswordAuthentication
101 PKCS11Provider
102 Port
103 PreferredAuthentications
104 Protocol
105 ProxyCommand
106 PubkeyAuthentication
107 RekeyLimit
108 RhostsRSAAuthentication
109 RSAAuthentication
110 SendEnv
111 ServerAliveInterval
112 ServerAliveCountMax
113 StrictHostKeyChecking
114 TCPKeepAlive
115 UsePrivilegedPort
116 User
117 UserKnownHostsFile
118 VerifyHostKeyDNS
119
120 -P port
121 Specifies the port to connect to on the remote host. Note that
122 this option is written with a capital `P', because -p is already
123 reserved for preserving the times and modes of the file in
124 rcp(1).
125
126 -p Preserves modification times, access times, and modes from the
127 original file.
128
129 -q Quiet mode: disables the progress meter as well as warning and
130 diagnostic messages from ssh(1).
131
132 -r Recursively copy entire directories. Note that scp follows
133 symbolic links encountered in the tree traversal.
134
135 -S program
136 Name of program to use for the encrypted connection. The program
137 must understand ssh(1) options.
138
139 -v Verbose mode. Causes scp and ssh(1) to print debugging messages
140 about their progress. This is helpful in debugging connection,
141 authentication, and configuration problems.
142
143EXIT STATUS
144 The scp utility exits 0 on success, and >0 if an error occurs.
145
146SEE ALSO
147 rcp(1), sftp(1), ssh(1), ssh-add(1), ssh-agent(1), ssh-keygen(1),
148 ssh_config(5), sshd(8)
149
150HISTORY
151 scp is based on the rcp(1) program in BSD source code from the Regents of
152 the University of California.
153
154AUTHORS
155 Timo Rinne <tri@iki.fi>
156 Tatu Ylonen <ylo@cs.hut.fi>
157
158OpenBSD 5.3 September 5, 2011 OpenBSD 5.3
diff --git a/sftp-server.0 b/sftp-server.0
new file mode 100644
index 000000000..6beddcc13
--- /dev/null
+++ b/sftp-server.0
@@ -0,0 +1,74 @@
1SFTP-SERVER(8) OpenBSD System Manager's Manual SFTP-SERVER(8)
2
3NAME
4 sftp-server - SFTP server subsystem
5
6SYNOPSIS
7 sftp-server [-ehR] [-d start_directory] [-f log_facility] [-l log_level]
8 [-u umask]
9
10DESCRIPTION
11 sftp-server is a program that speaks the server side of SFTP protocol to
12 stdout and expects client requests from stdin. sftp-server is not
13 intended to be called directly, but from sshd(8) using the Subsystem
14 option.
15
16 Command-line flags to sftp-server should be specified in the Subsystem
17 declaration. See sshd_config(5) for more information.
18
19 Valid options are:
20
21 -d start_directory
22 specifies an alternate starting directory for users. The
23 pathname may contain the following tokens that are expanded at
24 runtime: %% is replaced by a literal '%', %h is replaced by the
25 home directory of the user being authenticated, and %u is
26 replaced by the username of that user. The default is to use the
27 user's home directory. This option is useful in conjunction with
28 the sshd_config(5) ChrootDirectory option.
29
30 -e Causes sftp-server to print logging information to stderr instead
31 of syslog for debugging.
32
33 -f log_facility
34 Specifies the facility code that is used when logging messages
35 from sftp-server. The possible values are: DAEMON, USER, AUTH,
36 LOCAL0, LOCAL1, LOCAL2, LOCAL3, LOCAL4, LOCAL5, LOCAL6, LOCAL7.
37 The default is AUTH.
38
39 -h Displays sftp-server usage information.
40
41 -l log_level
42 Specifies which messages will be logged by sftp-server. The
43 possible values are: QUIET, FATAL, ERROR, INFO, VERBOSE, DEBUG,
44 DEBUG1, DEBUG2, and DEBUG3. INFO and VERBOSE log transactions
45 that sftp-server performs on behalf of the client. DEBUG and
46 DEBUG1 are equivalent. DEBUG2 and DEBUG3 each specify higher
47 levels of debugging output. The default is ERROR.
48
49 -R Places this instance of sftp-server into a read-only mode.
50 Attempts to open files for writing, as well as other operations
51 that change the state of the filesystem, will be denied.
52
53 -u umask
54 Sets an explicit umask(2) to be applied to newly-created files
55 and directories, instead of the user's default mask.
56
57 For logging to work, sftp-server must be able to access /dev/log. Use of
58 sftp-server in a chroot configuration therefore requires that syslogd(8)
59 establish a logging socket inside the chroot directory.
60
61SEE ALSO
62 sftp(1), ssh(1), sshd_config(5), sshd(8)
63
64 T. Ylonen and S. Lehtinen, SSH File Transfer Protocol,
65 draft-ietf-secsh-filexfer-00.txt, January 2001, work in progress
66 material.
67
68HISTORY
69 sftp-server first appeared in OpenBSD 2.8.
70
71AUTHORS
72 Markus Friedl <markus@openbsd.org>
73
74OpenBSD 5.3 January 4, 2013 OpenBSD 5.3
diff --git a/sftp.0 b/sftp.0
new file mode 100644
index 000000000..dd1da5241
--- /dev/null
+++ b/sftp.0
@@ -0,0 +1,339 @@
1SFTP(1) OpenBSD Reference Manual SFTP(1)
2
3NAME
4 sftp - secure file transfer program
5
6SYNOPSIS
7 sftp [-1246Cpqrv] [-B buffer_size] [-b batchfile] [-c cipher]
8 [-D sftp_server_path] [-F ssh_config] [-i identity_file] [-l limit]
9 [-o ssh_option] [-P port] [-R num_requests] [-S program]
10 [-s subsystem | sftp_server] host
11 sftp [user@]host[:file ...]
12 sftp [user@]host[:dir[/]]
13 sftp -b batchfile [user@]host
14
15DESCRIPTION
16 sftp is an interactive file transfer program, similar to ftp(1), which
17 performs all operations over an encrypted ssh(1) transport. It may also
18 use many features of ssh, such as public key authentication and
19 compression. sftp connects and logs into the specified host, then enters
20 an interactive command mode.
21
22 The second usage format will retrieve files automatically if a non-
23 interactive authentication method is used; otherwise it will do so after
24 successful interactive authentication.
25
26 The third usage format allows sftp to start in a remote directory.
27
28 The final usage format allows for automated sessions using the -b option.
29 In such cases, it is necessary to configure non-interactive
30 authentication to obviate the need to enter a password at connection time
31 (see sshd(8) and ssh-keygen(1) for details).
32
33 Since some usage formats use colon characters to delimit host names from
34 path names, IPv6 addresses must be enclosed in square brackets to avoid
35 ambiguity.
36
37 The options are as follows:
38
39 -1 Specify the use of protocol version 1.
40
41 -2 Specify the use of protocol version 2.
42
43 -4 Forces sftp to use IPv4 addresses only.
44
45 -6 Forces sftp to use IPv6 addresses only.
46
47 -B buffer_size
48 Specify the size of the buffer that sftp uses when transferring
49 files. Larger buffers require fewer round trips at the cost of
50 higher memory consumption. The default is 32768 bytes.
51
52 -b batchfile
53 Batch mode reads a series of commands from an input batchfile
54 instead of stdin. Since it lacks user interaction it should be
55 used in conjunction with non-interactive authentication. A
56 batchfile of `-' may be used to indicate standard input. sftp
57 will abort if any of the following commands fail: get, put,
58 rename, ln, rm, mkdir, chdir, ls, lchdir, chmod, chown, chgrp,
59 lpwd, df, symlink, and lmkdir. Termination on error can be
60 suppressed on a command by command basis by prefixing the command
61 with a `-' character (for example, -rm /tmp/blah*).
62
63 -C Enables compression (via ssh's -C flag).
64
65 -c cipher
66 Selects the cipher to use for encrypting the data transfers.
67 This option is directly passed to ssh(1).
68
69 -D sftp_server_path
70 Connect directly to a local sftp server (rather than via ssh(1)).
71 This option may be useful in debugging the client and server.
72
73 -F ssh_config
74 Specifies an alternative per-user configuration file for ssh(1).
75 This option is directly passed to ssh(1).
76
77 -i identity_file
78 Selects the file from which the identity (private key) for public
79 key authentication is read. This option is directly passed to
80 ssh(1).
81
82 -l limit
83 Limits the used bandwidth, specified in Kbit/s.
84
85 -o ssh_option
86 Can be used to pass options to ssh in the format used in
87 ssh_config(5). This is useful for specifying options for which
88 there is no separate sftp command-line flag. For example, to
89 specify an alternate port use: sftp -oPort=24. For full details
90 of the options listed below, and their possible values, see
91 ssh_config(5).
92
93 AddressFamily
94 BatchMode
95 BindAddress
96 ChallengeResponseAuthentication
97 CheckHostIP
98 Cipher
99 Ciphers
100 Compression
101 CompressionLevel
102 ConnectionAttempts
103 ConnectTimeout
104 ControlMaster
105 ControlPath
106 ControlPersist
107 GlobalKnownHostsFile
108 GSSAPIAuthentication
109 GSSAPIDelegateCredentials
110 HashKnownHosts
111 Host
112 HostbasedAuthentication
113 HostKeyAlgorithms
114 HostKeyAlias
115 HostName
116 IdentityFile
117 IdentitiesOnly
118 IPQoS
119 KbdInteractiveAuthentication
120 KbdInteractiveDevices
121 KexAlgorithms
122 LogLevel
123 MACs
124 NoHostAuthenticationForLocalhost
125 NumberOfPasswordPrompts
126 PasswordAuthentication
127 PKCS11Provider
128 Port
129 PreferredAuthentications
130 Protocol
131 ProxyCommand
132 PubkeyAuthentication
133 RekeyLimit
134 RhostsRSAAuthentication
135 RSAAuthentication
136 SendEnv
137 ServerAliveInterval
138 ServerAliveCountMax
139 StrictHostKeyChecking
140 TCPKeepAlive
141 UsePrivilegedPort
142 User
143 UserKnownHostsFile
144 VerifyHostKeyDNS
145
146 -P port
147 Specifies the port to connect to on the remote host.
148
149 -p Preserves modification times, access times, and modes from the
150 original files transferred.
151
152 -q Quiet mode: disables the progress meter as well as warning and
153 diagnostic messages from ssh(1).
154
155 -R num_requests
156 Specify how many requests may be outstanding at any one time.
157 Increasing this may slightly improve file transfer speed but will
158 increase memory usage. The default is 64 outstanding requests.
159
160 -r Recursively copy entire directories when uploading and
161 downloading. Note that sftp does not follow symbolic links
162 encountered in the tree traversal.
163
164 -S program
165 Name of the program to use for the encrypted connection. The
166 program must understand ssh(1) options.
167
168 -s subsystem | sftp_server
169 Specifies the SSH2 subsystem or the path for an sftp server on
170 the remote host. A path is useful for using sftp over protocol
171 version 1, or when the remote sshd(8) does not have an sftp
172 subsystem configured.
173
174 -v Raise logging level. This option is also passed to ssh.
175
176INTERACTIVE COMMANDS
177 Once in interactive mode, sftp understands a set of commands similar to
178 those of ftp(1). Commands are case insensitive. Pathnames that contain
179 spaces must be enclosed in quotes. Any special characters contained
180 within pathnames that are recognized by glob(3) must be escaped with
181 backslashes (`\').
182
183 bye Quit sftp.
184
185 cd path
186 Change remote directory to path.
187
188 chgrp grp path
189 Change group of file path to grp. path may contain glob(3)
190 characters and may match multiple files. grp must be a numeric
191 GID.
192
193 chmod mode path
194 Change permissions of file path to mode. path may contain
195 glob(3) characters and may match multiple files.
196
197 chown own path
198 Change owner of file path to own. path may contain glob(3)
199 characters and may match multiple files. own must be a numeric
200 UID.
201
202 df [-hi] [path]
203 Display usage information for the filesystem holding the current
204 directory (or path if specified). If the -h flag is specified,
205 the capacity information will be displayed using "human-readable"
206 suffixes. The -i flag requests display of inode information in
207 addition to capacity information. This command is only supported
208 on servers that implement the ``statvfs@openssh.com'' extension.
209
210 exit Quit sftp.
211
212 get [-Ppr] remote-path [local-path]
213 Retrieve the remote-path and store it on the local machine. If
214 the local path name is not specified, it is given the same name
215 it has on the remote machine. remote-path may contain glob(3)
216 characters and may match multiple files. If it does and
217 local-path is specified, then local-path must specify a
218 directory.
219
220 If either the -P or -p flag is specified, then full file
221 permissions and access times are copied too.
222
223 If the -r flag is specified then directories will be copied
224 recursively. Note that sftp does not follow symbolic links when
225 performing recursive transfers.
226
227 help Display help text.
228
229 lcd path
230 Change local directory to path.
231
232 lls [ls-options [path]]
233 Display local directory listing of either path or current
234 directory if path is not specified. ls-options may contain any
235 flags supported by the local system's ls(1) command. path may
236 contain glob(3) characters and may match multiple files.
237
238 lmkdir path
239 Create local directory specified by path.
240
241 ln [-s] oldpath newpath
242 Create a link from oldpath to newpath. If the -s flag is
243 specified the created link is a symbolic link, otherwise it is a
244 hard link.
245
246 lpwd Print local working directory.
247
248 ls [-1afhlnrSt] [path]
249 Display a remote directory listing of either path or the current
250 directory if path is not specified. path may contain glob(3)
251 characters and may match multiple files.
252
253 The following flags are recognized and alter the behaviour of ls
254 accordingly:
255
256 -1 Produce single columnar output.
257
258 -a List files beginning with a dot (`.').
259
260 -f Do not sort the listing. The default sort order is
261 lexicographical.
262
263 -h When used with a long format option, use unit suffixes:
264 Byte, Kilobyte, Megabyte, Gigabyte, Terabyte, Petabyte,
265 and Exabyte in order to reduce the number of digits to
266 four or fewer using powers of 2 for sizes (K=1024,
267 M=1048576, etc.).
268
269 -l Display additional details including permissions and
270 ownership information.
271
272 -n Produce a long listing with user and group information
273 presented numerically.
274
275 -r Reverse the sort order of the listing.
276
277 -S Sort the listing by file size.
278
279 -t Sort the listing by last modification time.
280
281 lumask umask
282 Set local umask to umask.
283
284 mkdir path
285 Create remote directory specified by path.
286
287 progress
288 Toggle display of progress meter.
289
290 put [-Ppr] local-path [remote-path]
291 Upload local-path and store it on the remote machine. If the
292 remote path name is not specified, it is given the same name it
293 has on the local machine. local-path may contain glob(3)
294 characters and may match multiple files. If it does and
295 remote-path is specified, then remote-path must specify a
296 directory.
297
298 If either the -P or -p flag is specified, then full file
299 permissions and access times are copied too.
300
301 If the -r flag is specified then directories will be copied
302 recursively. Note that sftp does not follow symbolic links when
303 performing recursive transfers.
304
305 pwd Display remote working directory.
306
307 quit Quit sftp.
308
309 rename oldpath newpath
310 Rename remote file from oldpath to newpath.
311
312 rm path
313 Delete remote file specified by path.
314
315 rmdir path
316 Remove remote directory specified by path.
317
318 symlink oldpath newpath
319 Create a symbolic link from oldpath to newpath.
320
321 version
322 Display the sftp protocol version.
323
324 !command
325 Execute command in local shell.
326
327 ! Escape to local shell.
328
329 ? Synonym for help.
330
331SEE ALSO
332 ftp(1), ls(1), scp(1), ssh(1), ssh-add(1), ssh-keygen(1), glob(3),
333 ssh_config(5), sftp-server(8), sshd(8)
334
335 T. Ylonen and S. Lehtinen, SSH File Transfer Protocol,
336 draft-ietf-secsh-filexfer-00.txt, January 2001, work in progress
337 material.
338
339OpenBSD 5.3 September 5, 2011 OpenBSD 5.3
diff --git a/ssh-add.0 b/ssh-add.0
new file mode 100644
index 000000000..ed43dc8cc
--- /dev/null
+++ b/ssh-add.0
@@ -0,0 +1,119 @@
1SSH-ADD(1) OpenBSD Reference Manual SSH-ADD(1)
2
3NAME
4 ssh-add - adds private key identities to the authentication agent
5
6SYNOPSIS
7 ssh-add [-cDdkLlXx] [-t life] [file ...]
8 ssh-add -s pkcs11
9 ssh-add -e pkcs11
10
11DESCRIPTION
12 ssh-add adds private key identities to the authentication agent,
13 ssh-agent(1). When run without arguments, it adds the files
14 ~/.ssh/id_rsa, ~/.ssh/id_dsa, ~/.ssh/id_ecdsa and ~/.ssh/identity. After
15 loading a private key, ssh-add will try to load corresponding certificate
16 information from the filename obtained by appending -cert.pub to the name
17 of the private key file. Alternative file names can be given on the
18 command line.
19
20 If any file requires a passphrase, ssh-add asks for the passphrase from
21 the user. The passphrase is read from the user's tty. ssh-add retries
22 the last passphrase if multiple identity files are given.
23
24 The authentication agent must be running and the SSH_AUTH_SOCK
25 environment variable must contain the name of its socket for ssh-add to
26 work.
27
28 The options are as follows:
29
30 -c Indicates that added identities should be subject to confirmation
31 before being used for authentication. Confirmation is performed
32 by the SSH_ASKPASS program mentioned below. Successful
33 confirmation is signaled by a zero exit status from the
34 SSH_ASKPASS program, rather than text entered into the requester.
35
36 -D Deletes all identities from the agent.
37
38 -d Instead of adding identities, removes identities from the agent.
39 If ssh-add has been run without arguments, the keys for the
40 default identities and their corresponding certificates will be
41 removed. Otherwise, the argument list will be interpreted as a
42 list of paths to public key files to specify keys and
43 certificates to be removed from the agent. If no public key is
44 found at a given path, ssh-add will append .pub and retry.
45
46 -e pkcs11
47 Remove keys provided by the PKCS#11 shared library pkcs11.
48
49 -k When loading keys into or deleting keys from the agent, process
50 plain private keys only and skip certificates.
51
52 -L Lists public key parameters of all identities currently
53 represented by the agent.
54
55 -l Lists fingerprints of all identities currently represented by the
56 agent.
57
58 -s pkcs11
59 Add keys provided by the PKCS#11 shared library pkcs11.
60
61 -t life
62 Set a maximum lifetime when adding identities to an agent. The
63 lifetime may be specified in seconds or in a time format
64 specified in sshd_config(5).
65
66 -X Unlock the agent.
67
68 -x Lock the agent with a password.
69
70ENVIRONMENT
71 DISPLAY and SSH_ASKPASS
72 If ssh-add needs a passphrase, it will read the passphrase from
73 the current terminal if it was run from a terminal. If ssh-add
74 does not have a terminal associated with it but DISPLAY and
75 SSH_ASKPASS are set, it will execute the program specified by
76 SSH_ASKPASS and open an X11 window to read the passphrase. This
77 is particularly useful when calling ssh-add from a .xsession or
78 related script. (Note that on some machines it may be necessary
79 to redirect the input from /dev/null to make this work.)
80
81 SSH_AUTH_SOCK
82 Identifies the path of a UNIX-domain socket used to communicate
83 with the agent.
84
85FILES
86 ~/.ssh/identity
87 Contains the protocol version 1 RSA authentication identity of
88 the user.
89
90 ~/.ssh/id_dsa
91 Contains the protocol version 2 DSA authentication identity of
92 the user.
93
94 ~/.ssh/id_ecdsa
95 Contains the protocol version 2 ECDSA authentication identity of
96 the user.
97
98 ~/.ssh/id_rsa
99 Contains the protocol version 2 RSA authentication identity of
100 the user.
101
102 Identity files should not be readable by anyone but the user. Note that
103 ssh-add ignores identity files if they are accessible by others.
104
105EXIT STATUS
106 Exit status is 0 on success, 1 if the specified command fails, and 2 if
107 ssh-add is unable to contact the authentication agent.
108
109SEE ALSO
110 ssh(1), ssh-agent(1), ssh-keygen(1), sshd(8)
111
112AUTHORS
113 OpenSSH is a derivative of the original and free ssh 1.2.12 release by
114 Tatu Ylonen. Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo
115 de Raadt and Dug Song removed many bugs, re-added newer features and
116 created OpenSSH. Markus Friedl contributed the support for SSH protocol
117 versions 1.5 and 2.0.
118
119OpenBSD 5.3 December 3, 2012 OpenBSD 5.3
diff --git a/ssh-agent.0 b/ssh-agent.0
new file mode 100644
index 000000000..578984815
--- /dev/null
+++ b/ssh-agent.0
@@ -0,0 +1,123 @@
1SSH-AGENT(1) OpenBSD Reference Manual SSH-AGENT(1)
2
3NAME
4 ssh-agent - authentication agent
5
6SYNOPSIS
7 ssh-agent [-c | -s] [-d] [-a bind_address] [-t life] [command [arg ...]]
8 ssh-agent [-c | -s] -k
9
10DESCRIPTION
11 ssh-agent is a program to hold private keys used for public key
12 authentication (RSA, DSA, ECDSA). The idea is that ssh-agent is started
13 in the beginning of an X-session or a login session, and all other
14 windows or programs are started as clients to the ssh-agent program.
15 Through use of environment variables the agent can be located and
16 automatically used for authentication when logging in to other machines
17 using ssh(1).
18
19 The options are as follows:
20
21 -a bind_address
22 Bind the agent to the UNIX-domain socket bind_address. The
23 default is $TMPDIR/ssh-XXXXXXXXXX/agent.<ppid>.
24
25 -c Generate C-shell commands on stdout. This is the default if
26 SHELL looks like it's a csh style of shell.
27
28 -d Debug mode. When this option is specified ssh-agent will not
29 fork.
30
31 -k Kill the current agent (given by the SSH_AGENT_PID environment
32 variable).
33
34 -s Generate Bourne shell commands on stdout. This is the default if
35 SHELL does not look like it's a csh style of shell.
36
37 -t life
38 Set a default value for the maximum lifetime of identities added
39 to the agent. The lifetime may be specified in seconds or in a
40 time format specified in sshd_config(5). A lifetime specified
41 for an identity with ssh-add(1) overrides this value. Without
42 this option the default maximum lifetime is forever.
43
44 If a commandline is given, this is executed as a subprocess of the agent.
45 When the command dies, so does the agent.
46
47 The agent initially does not have any private keys. Keys are added using
48 ssh-add(1). When executed without arguments, ssh-add(1) adds the files
49 ~/.ssh/id_rsa, ~/.ssh/id_dsa, ~/.ssh/id_ecdsa and ~/.ssh/identity. If
50 the identity has a passphrase, ssh-add(1) asks for the passphrase on the
51 terminal if it has one or from a small X11 program if running under X11.
52 If neither of these is the case then the authentication will fail. It
53 then sends the identity to the agent. Several identities can be stored
54 in the agent; the agent can automatically use any of these identities.
55 ssh-add -l displays the identities currently held by the agent.
56
57 The idea is that the agent is run in the user's local PC, laptop, or
58 terminal. Authentication data need not be stored on any other machine,
59 and authentication passphrases never go over the network. However, the
60 connection to the agent is forwarded over SSH remote logins, and the user
61 can thus use the privileges given by the identities anywhere in the
62 network in a secure way.
63
64 There are two main ways to get an agent set up: The first is that the
65 agent starts a new subcommand into which some environment variables are
66 exported, eg ssh-agent xterm &. The second is that the agent prints the
67 needed shell commands (either sh(1) or csh(1) syntax can be generated)
68 which can be evaluated in the calling shell, eg eval `ssh-agent -s` for
69 Bourne-type shells such as sh(1) or ksh(1) and eval `ssh-agent -c` for
70 csh(1) and derivatives.
71
72 Later ssh(1) looks at these variables and uses them to establish a
73 connection to the agent.
74
75 The agent will never send a private key over its request channel.
76 Instead, operations that require a private key will be performed by the
77 agent, and the result will be returned to the requester. This way,
78 private keys are not exposed to clients using the agent.
79
80 A UNIX-domain socket is created and the name of this socket is stored in
81 the SSH_AUTH_SOCK environment variable. The socket is made accessible
82 only to the current user. This method is easily abused by root or
83 another instance of the same user.
84
85 The SSH_AGENT_PID environment variable holds the agent's process ID.
86
87 The agent exits automatically when the command given on the command line
88 terminates.
89
90FILES
91 ~/.ssh/identity
92 Contains the protocol version 1 RSA authentication identity of
93 the user.
94
95 ~/.ssh/id_dsa
96 Contains the protocol version 2 DSA authentication identity of
97 the user.
98
99 ~/.ssh/id_ecdsa
100 Contains the protocol version 2 ECDSA authentication identity of
101 the user.
102
103 ~/.ssh/id_rsa
104 Contains the protocol version 2 RSA authentication identity of
105 the user.
106
107 $TMPDIR/ssh-XXXXXXXXXX/agent.<ppid>
108 UNIX-domain sockets used to contain the connection to the
109 authentication agent. These sockets should only be readable by
110 the owner. The sockets should get automatically removed when the
111 agent exits.
112
113SEE ALSO
114 ssh(1), ssh-add(1), ssh-keygen(1), sshd(8)
115
116AUTHORS
117 OpenSSH is a derivative of the original and free ssh 1.2.12 release by
118 Tatu Ylonen. Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo
119 de Raadt and Dug Song removed many bugs, re-added newer features and
120 created OpenSSH. Markus Friedl contributed the support for SSH protocol
121 versions 1.5 and 2.0.
122
123OpenBSD 5.3 November 21, 2010 OpenBSD 5.3
diff --git a/ssh-keygen.0 b/ssh-keygen.0
new file mode 100644
index 000000000..3c7a64753
--- /dev/null
+++ b/ssh-keygen.0
@@ -0,0 +1,546 @@
1SSH-KEYGEN(1) OpenBSD Reference Manual SSH-KEYGEN(1)
2
3NAME
4 ssh-keygen - authentication key generation, management and conversion
5
6SYNOPSIS
7 ssh-keygen [-q] [-b bits] -t type [-N new_passphrase] [-C comment]
8 [-f output_keyfile]
9 ssh-keygen -p [-P old_passphrase] [-N new_passphrase] [-f keyfile]
10 ssh-keygen -i [-m key_format] [-f input_keyfile]
11 ssh-keygen -e [-m key_format] [-f input_keyfile]
12 ssh-keygen -y [-f input_keyfile]
13 ssh-keygen -c [-P passphrase] [-C comment] [-f keyfile]
14 ssh-keygen -l [-f input_keyfile]
15 ssh-keygen -B [-f input_keyfile]
16 ssh-keygen -D pkcs11
17 ssh-keygen -F hostname [-f known_hosts_file] [-l]
18 ssh-keygen -H [-f known_hosts_file]
19 ssh-keygen -R hostname [-f known_hosts_file]
20 ssh-keygen -r hostname [-f input_keyfile] [-g]
21 ssh-keygen -G output_file [-v] [-b bits] [-M memory] [-S start_point]
22 ssh-keygen -T output_file -f input_file [-v] [-a num_trials]
23 [-J num_lines] [-j start_line] [-K checkpt] [-W generator]
24 ssh-keygen -s ca_key -I certificate_identity [-h] [-n principals]
25 [-O option] [-V validity_interval] [-z serial_number] file ...
26 ssh-keygen -L [-f input_keyfile]
27 ssh-keygen -A
28 ssh-keygen -k -f krl_file [-u] [-s ca_public] [-z version_number]
29 file ...
30 ssh-keygen -Q -f krl_file file ...
31
32DESCRIPTION
33 ssh-keygen generates, manages and converts authentication keys for
34 ssh(1). ssh-keygen can create RSA keys for use by SSH protocol version 1
35 and DSA, ECDSA or RSA keys for use by SSH protocol version 2. The type
36 of key to be generated is specified with the -t option. If invoked
37 without any arguments, ssh-keygen will generate an RSA key for use in SSH
38 protocol 2 connections.
39
40 ssh-keygen is also used to generate groups for use in Diffie-Hellman
41 group exchange (DH-GEX). See the MODULI GENERATION section for details.
42
43 Finally, ssh-keygen can be used to generate and update Key Revocation
44 Lists, and to test whether given keys have been revoked by one. See the
45 KEY REVOCATION LISTS section for details.
46
47 Normally each user wishing to use SSH with public key authentication runs
48 this once to create the authentication key in ~/.ssh/identity,
49 ~/.ssh/id_ecdsa, ~/.ssh/id_dsa or ~/.ssh/id_rsa. Additionally, the
50 system administrator may use this to generate host keys, as seen in
51 /etc/rc.
52
53 Normally this program generates the key and asks for a file in which to
54 store the private key. The public key is stored in a file with the same
55 name but ``.pub'' appended. The program also asks for a passphrase. The
56 passphrase may be empty to indicate no passphrase (host keys must have an
57 empty passphrase), or it may be a string of arbitrary length. A
58 passphrase is similar to a password, except it can be a phrase with a
59 series of words, punctuation, numbers, whitespace, or any string of
60 characters you want. Good passphrases are 10-30 characters long, are not
61 simple sentences or otherwise easily guessable (English prose has only
62 1-2 bits of entropy per character, and provides very bad passphrases),
63 and contain a mix of upper and lowercase letters, numbers, and non-
64 alphanumeric characters. The passphrase can be changed later by using
65 the -p option.
66
67 There is no way to recover a lost passphrase. If the passphrase is lost
68 or forgotten, a new key must be generated and the corresponding public
69 key copied to other machines.
70
71 For RSA1 keys, there is also a comment field in the key file that is only
72 for convenience to the user to help identify the key. The comment can
73 tell what the key is for, or whatever is useful. The comment is
74 initialized to ``user@host'' when the key is created, but can be changed
75 using the -c option.
76
77 After a key is generated, instructions below detail where the keys should
78 be placed to be activated.
79
80 The options are as follows:
81
82 -A For each of the key types (rsa1, rsa, dsa and ecdsa) for which
83 host keys do not exist, generate the host keys with the default
84 key file path, an empty passphrase, default bits for the key
85 type, and default comment. This is used by /etc/rc to generate
86 new host keys.
87
88 -a trials
89 Specifies the number of primality tests to perform when screening
90 DH-GEX candidates using the -T command.
91
92 -B Show the bubblebabble digest of specified private or public key
93 file.
94
95 -b bits
96 Specifies the number of bits in the key to create. For RSA keys,
97 the minimum size is 768 bits and the default is 2048 bits.
98 Generally, 2048 bits is considered sufficient. DSA keys must be
99 exactly 1024 bits as specified by FIPS 186-2. For ECDSA keys,
100 the -b flag determines the key length by selecting from one of
101 three elliptic curve sizes: 256, 384 or 521 bits. Attempting to
102 use bit lengths other than these three values for ECDSA keys will
103 fail.
104
105 -C comment
106 Provides a new comment.
107
108 -c Requests changing the comment in the private and public key
109 files. This operation is only supported for RSA1 keys. The
110 program will prompt for the file containing the private keys, for
111 the passphrase if the key has one, and for the new comment.
112
113 -D pkcs11
114 Download the RSA public keys provided by the PKCS#11 shared
115 library pkcs11. When used in combination with -s, this option
116 indicates that a CA key resides in a PKCS#11 token (see the
117 CERTIFICATES section for details).
118
119 -e This option will read a private or public OpenSSH key file and
120 print to stdout the key in one of the formats specified by the -m
121 option. The default export format is ``RFC4716''. This option
122 allows exporting OpenSSH keys for use by other programs,
123 including several commercial SSH implementations.
124
125 -F hostname
126 Search for the specified hostname in a known_hosts file, listing
127 any occurrences found. This option is useful to find hashed host
128 names or addresses and may also be used in conjunction with the
129 -H option to print found keys in a hashed format.
130
131 -f filename
132 Specifies the filename of the key file.
133
134 -G output_file
135 Generate candidate primes for DH-GEX. These primes must be
136 screened for safety (using the -T option) before use.
137
138 -g Use generic DNS format when printing fingerprint resource records
139 using the -r command.
140
141 -H Hash a known_hosts file. This replaces all hostnames and
142 addresses with hashed representations within the specified file;
143 the original content is moved to a file with a .old suffix.
144 These hashes may be used normally by ssh and sshd, but they do
145 not reveal identifying information should the file's contents be
146 disclosed. This option will not modify existing hashed hostnames
147 and is therefore safe to use on files that mix hashed and non-
148 hashed names.
149
150 -h When signing a key, create a host certificate instead of a user
151 certificate. Please see the CERTIFICATES section for details.
152
153 -I certificate_identity
154 Specify the key identity when signing a public key. Please see
155 the CERTIFICATES section for details.
156
157 -i This option will read an unencrypted private (or public) key file
158 in the format specified by the -m option and print an OpenSSH
159 compatible private (or public) key to stdout.
160
161 -J num_lines
162 Exit after screening the specified number of lines while
163 performing DH candidate screening using the -T option.
164
165 -j start_line
166 Start screening at the specified line number while performing DH
167 candidate screening using the -T option.
168
169 -K checkpt
170 Write the last line processed to the file checkpt while
171 performing DH candidate screening using the -T option. This will
172 be used to skip lines in the input file that have already been
173 processed if the job is restarted. This option allows importing
174 keys from other software, including several commercial SSH
175 implementations. The default import format is ``RFC4716''.
176
177 -k Generate a KRL file. In this mode, ssh-keygen will generate a
178 KRL file at the location specified via the -f flag that revokes
179 every key or certificate presented on the command line.
180 Keys/certificates to be revoked may be specified by public key
181 file or using the format described in the KEY REVOCATION LISTS
182 section.
183
184 -L Prints the contents of a certificate.
185
186 -l Show fingerprint of specified public key file. Private RSA1 keys
187 are also supported. For RSA and DSA keys ssh-keygen tries to
188 find the matching public key file and prints its fingerprint. If
189 combined with -v, an ASCII art representation of the key is
190 supplied with the fingerprint.
191
192 -M memory
193 Specify the amount of memory to use (in megabytes) when
194 generating candidate moduli for DH-GEX.
195
196 -m key_format
197 Specify a key format for the -i (import) or -e (export)
198 conversion options. The supported key formats are: ``RFC4716''
199 (RFC 4716/SSH2 public or private key), ``PKCS8'' (PEM PKCS8
200 public key) or ``PEM'' (PEM public key). The default conversion
201 format is ``RFC4716''.
202
203 -N new_passphrase
204 Provides the new passphrase.
205
206 -n principals
207 Specify one or more principals (user or host names) to be
208 included in a certificate when signing a key. Multiple
209 principals may be specified, separated by commas. Please see the
210 CERTIFICATES section for details.
211
212 -O option
213 Specify a certificate option when signing a key. This option may
214 be specified multiple times. Please see the CERTIFICATES section
215 for details. The options that are valid for user certificates
216 are:
217
218 clear Clear all enabled permissions. This is useful for
219 clearing the default set of permissions so permissions
220 may be added individually.
221
222 force-command=command
223 Forces the execution of command instead of any shell or
224 command specified by the user when the certificate is
225 used for authentication.
226
227 no-agent-forwarding
228 Disable ssh-agent(1) forwarding (permitted by default).
229
230 no-port-forwarding
231 Disable port forwarding (permitted by default).
232
233 no-pty Disable PTY allocation (permitted by default).
234
235 no-user-rc
236 Disable execution of ~/.ssh/rc by sshd(8) (permitted by
237 default).
238
239 no-x11-forwarding
240 Disable X11 forwarding (permitted by default).
241
242 permit-agent-forwarding
243 Allows ssh-agent(1) forwarding.
244
245 permit-port-forwarding
246 Allows port forwarding.
247
248 permit-pty
249 Allows PTY allocation.
250
251 permit-user-rc
252 Allows execution of ~/.ssh/rc by sshd(8).
253
254 permit-x11-forwarding
255 Allows X11 forwarding.
256
257 source-address=address_list
258 Restrict the source addresses from which the certificate
259 is considered valid. The address_list is a comma-
260 separated list of one or more address/netmask pairs in
261 CIDR format.
262
263 At present, no options are valid for host keys.
264
265 -P passphrase
266 Provides the (old) passphrase.
267
268 -p Requests changing the passphrase of a private key file instead of
269 creating a new private key. The program will prompt for the file
270 containing the private key, for the old passphrase, and twice for
271 the new passphrase.
272
273 -Q Test whether keys have been revoked in a KRL.
274
275 -q Silence ssh-keygen.
276
277 -R hostname
278 Removes all keys belonging to hostname from a known_hosts file.
279 This option is useful to delete hashed hosts (see the -H option
280 above).
281
282 -r hostname
283 Print the SSHFP fingerprint resource record named hostname for
284 the specified public key file.
285
286 -S start
287 Specify start point (in hex) when generating candidate moduli for
288 DH-GEX.
289
290 -s ca_key
291 Certify (sign) a public key using the specified CA key. Please
292 see the CERTIFICATES section for details.
293
294 When generating a KRL, -s specifies a path to a CA public key
295 file used to revoke certificates directly by key ID or serial
296 number. See the KEY REVOCATION LISTS section for details.
297
298 -T output_file
299 Test DH group exchange candidate primes (generated using the -G
300 option) for safety.
301
302 -t type
303 Specifies the type of key to create. The possible values are
304 ``rsa1'' for protocol version 1 and ``dsa'', ``ecdsa'' or ``rsa''
305 for protocol version 2.
306
307 -u Update a KRL. When specified with -k, keys listed via the
308 command line are added to the existing KRL rather than a new KRL
309 being created.
310
311 -V validity_interval
312 Specify a validity interval when signing a certificate. A
313 validity interval may consist of a single time, indicating that
314 the certificate is valid beginning now and expiring at that time,
315 or may consist of two times separated by a colon to indicate an
316 explicit time interval. The start time may be specified as a
317 date in YYYYMMDD format, a time in YYYYMMDDHHMMSS format or a
318 relative time (to the current time) consisting of a minus sign
319 followed by a relative time in the format described in the TIME
320 FORMATS section of sshd_config(5). The end time may be specified
321 as a YYYYMMDD date, a YYYYMMDDHHMMSS time or a relative time
322 starting with a plus character.
323
324 For example: ``+52w1d'' (valid from now to 52 weeks and one day
325 from now), ``-4w:+4w'' (valid from four weeks ago to four weeks
326 from now), ``20100101123000:20110101123000'' (valid from 12:30
327 PM, January 1st, 2010 to 12:30 PM, January 1st, 2011),
328 ``-1d:20110101'' (valid from yesterday to midnight, January 1st,
329 2011).
330
331 -v Verbose mode. Causes ssh-keygen to print debugging messages
332 about its progress. This is helpful for debugging moduli
333 generation. Multiple -v options increase the verbosity. The
334 maximum is 3.
335
336 -W generator
337 Specify desired generator when testing candidate moduli for DH-
338 GEX.
339
340 -y This option will read a private OpenSSH format file and print an
341 OpenSSH public key to stdout.
342
343 -z serial_number
344 Specifies a serial number to be embedded in the certificate to
345 distinguish this certificate from others from the same CA. The
346 default serial number is zero.
347
348 When generating a KRL, the -z flag is used to specify a KRL
349 version number.
350
351MODULI GENERATION
352 ssh-keygen may be used to generate groups for the Diffie-Hellman Group
353 Exchange (DH-GEX) protocol. Generating these groups is a two-step
354 process: first, candidate primes are generated using a fast, but memory
355 intensive process. These candidate primes are then tested for
356 suitability (a CPU-intensive process).
357
358 Generation of primes is performed using the -G option. The desired
359 length of the primes may be specified by the -b option. For example:
360
361 # ssh-keygen -G moduli-2048.candidates -b 2048
362
363 By default, the search for primes begins at a random point in the desired
364 length range. This may be overridden using the -S option, which
365 specifies a different start point (in hex).
366
367 Once a set of candidates have been generated, they must be screened for
368 suitability. This may be performed using the -T option. In this mode
369 ssh-keygen will read candidates from standard input (or a file specified
370 using the -f option). For example:
371
372 # ssh-keygen -T moduli-2048 -f moduli-2048.candidates
373
374 By default, each candidate will be subjected to 100 primality tests.
375 This may be overridden using the -a option. The DH generator value will
376 be chosen automatically for the prime under consideration. If a specific
377 generator is desired, it may be requested using the -W option. Valid
378 generator values are 2, 3, and 5.
379
380 Screened DH groups may be installed in /etc/moduli. It is important that
381 this file contains moduli of a range of bit lengths and that both ends of
382 a connection share common moduli.
383
384CERTIFICATES
385 ssh-keygen supports signing of keys to produce certificates that may be
386 used for user or host authentication. Certificates consist of a public
387 key, some identity information, zero or more principal (user or host)
388 names and a set of options that are signed by a Certification Authority
389 (CA) key. Clients or servers may then trust only the CA key and verify
390 its signature on a certificate rather than trusting many user/host keys.
391 Note that OpenSSH certificates are a different, and much simpler, format
392 to the X.509 certificates used in ssl(8).
393
394 ssh-keygen supports two types of certificates: user and host. User
395 certificates authenticate users to servers, whereas host certificates
396 authenticate server hosts to users. To generate a user certificate:
397
398 $ ssh-keygen -s /path/to/ca_key -I key_id /path/to/user_key.pub
399
400 The resultant certificate will be placed in /path/to/user_key-cert.pub.
401 A host certificate requires the -h option:
402
403 $ ssh-keygen -s /path/to/ca_key -I key_id -h /path/to/host_key.pub
404
405 The host certificate will be output to /path/to/host_key-cert.pub.
406
407 It is possible to sign using a CA key stored in a PKCS#11 token by
408 providing the token library using -D and identifying the CA key by
409 providing its public half as an argument to -s:
410
411 $ ssh-keygen -s ca_key.pub -D libpkcs11.so -I key_id host_key.pub
412
413 In all cases, key_id is a "key identifier" that is logged by the server
414 when the certificate is used for authentication.
415
416 Certificates may be limited to be valid for a set of principal
417 (user/host) names. By default, generated certificates are valid for all
418 users or hosts. To generate a certificate for a specified set of
419 principals:
420
421 $ ssh-keygen -s ca_key -I key_id -n user1,user2 user_key.pub
422 $ ssh-keygen -s ca_key -I key_id -h -n host.domain user_key.pub
423
424 Additional limitations on the validity and use of user certificates may
425 be specified through certificate options. A certificate option may
426 disable features of the SSH session, may be valid only when presented
427 from particular source addresses or may force the use of a specific
428 command. For a list of valid certificate options, see the documentation
429 for the -O option above.
430
431 Finally, certificates may be defined with a validity lifetime. The -V
432 option allows specification of certificate start and end times. A
433 certificate that is presented at a time outside this range will not be
434 considered valid. By default, certificates are valid from UNIX Epoch to
435 the distant future.
436
437 For certificates to be used for user or host authentication, the CA
438 public key must be trusted by sshd(8) or ssh(1). Please refer to those
439 manual pages for details.
440
441KEY REVOCATION LISTS
442 ssh-keygen is able to manage OpenSSH format Key Revocation Lists (KRLs).
443 These binary files specify keys or certificates to be revoked using a
444 compact format, taking as little a one bit per certificate if they are
445 being revoked by serial number.
446
447 KRLs may be generated using the -k flag. This option reads one or more
448 files from the command line and generates a new KRL. The files may
449 either contain a KRL specification (see below) or public keys, listed one
450 per line. Plain public keys are revoked by listing their hash or
451 contents in the KRL and certificates revoked by serial number or key ID
452 (if the serial is zero or not available).
453
454 Revoking keys using a KRL specification offers explicit control over the
455 types of record used to revoke keys and may be used to directly revoke
456 certificates by serial number or key ID without having the complete
457 original certificate on hand. A KRL specification consists of lines
458 containing one of the following directives followed by a colon and some
459 directive-specific information.
460
461 serial: serial_number[-serial_number]
462 Revokes a certificate with the specified serial number. Serial
463 numbers are 64-bit values, not including zero and may be
464 expressed in decimal, hex or octal. If two serial numbers are
465 specified separated by a hyphen, then the range of serial numbers
466 including and between each is revoked. The CA key must have been
467 specified on the ssh-keygen command line using the -s option.
468
469 id: key_id
470 Revokes a certificate with the specified key ID string. The CA
471 key must have been specified on the ssh-keygen command line using
472 the -s option.
473
474 key: public_key
475 Revokes the specified key. If a certificate is listed, then it
476 is revoked as a plain public key.
477
478 sha1: public_key
479 Revokes the specified key by its SHA1 hash.
480
481 KRLs may be updated using the -u flag in addition to -k. When this
482 option is specified, keys listed via the command line are merged into the
483 KRL, adding to those already there.
484
485 It is also possible, given a KRL, to test whether it revokes a particular
486 key (or keys). The -Q flag will query an existing KRL, testing each key
487 specified on the commandline. If any key listed on the command line has
488 been revoked (or an error encountered) then ssh-keygen will exit with a
489 non-zero exit status. A zero exit status will only be returned if no key
490 was revoked.
491
492FILES
493 ~/.ssh/identity
494 Contains the protocol version 1 RSA authentication identity of
495 the user. This file should not be readable by anyone but the
496 user. It is possible to specify a passphrase when generating the
497 key; that passphrase will be used to encrypt the private part of
498 this file using 3DES. This file is not automatically accessed by
499 ssh-keygen but it is offered as the default file for the private
500 key. ssh(1) will read this file when a login attempt is made.
501
502 ~/.ssh/identity.pub
503 Contains the protocol version 1 RSA public key for
504 authentication. The contents of this file should be added to
505 ~/.ssh/authorized_keys on all machines where the user wishes to
506 log in using RSA authentication. There is no need to keep the
507 contents of this file secret.
508
509 ~/.ssh/id_dsa
510 ~/.ssh/id_ecdsa
511 ~/.ssh/id_rsa
512 Contains the protocol version 2 DSA, ECDSA or RSA authentication
513 identity of the user. This file should not be readable by anyone
514 but the user. It is possible to specify a passphrase when
515 generating the key; that passphrase will be used to encrypt the
516 private part of this file using 128-bit AES. This file is not
517 automatically accessed by ssh-keygen but it is offered as the
518 default file for the private key. ssh(1) will read this file
519 when a login attempt is made.
520
521 ~/.ssh/id_dsa.pub
522 ~/.ssh/id_ecdsa.pub
523 ~/.ssh/id_rsa.pub
524 Contains the protocol version 2 DSA, ECDSA or RSA public key for
525 authentication. The contents of this file should be added to
526 ~/.ssh/authorized_keys on all machines where the user wishes to
527 log in using public key authentication. There is no need to keep
528 the contents of this file secret.
529
530 /etc/moduli
531 Contains Diffie-Hellman groups used for DH-GEX. The file format
532 is described in moduli(5).
533
534SEE ALSO
535 ssh(1), ssh-add(1), ssh-agent(1), moduli(5), sshd(8)
536
537 The Secure Shell (SSH) Public Key File Format, RFC 4716, 2006.
538
539AUTHORS
540 OpenSSH is a derivative of the original and free ssh 1.2.12 release by
541 Tatu Ylonen. Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo
542 de Raadt and Dug Song removed many bugs, re-added newer features and
543 created OpenSSH. Markus Friedl contributed the support for SSH protocol
544 versions 1.5 and 2.0.
545
546OpenBSD 5.3 January 19, 2013 OpenBSD 5.3
diff --git a/ssh-keyscan.0 b/ssh-keyscan.0
new file mode 100644
index 000000000..559c5a1f4
--- /dev/null
+++ b/ssh-keyscan.0
@@ -0,0 +1,109 @@
1SSH-KEYSCAN(1) OpenBSD Reference Manual SSH-KEYSCAN(1)
2
3NAME
4 ssh-keyscan - gather ssh public keys
5
6SYNOPSIS
7 ssh-keyscan [-46Hv] [-f file] [-p port] [-T timeout] [-t type]
8 [host | addrlist namelist] ...
9
10DESCRIPTION
11 ssh-keyscan is a utility for gathering the public ssh host keys of a
12 number of hosts. It was designed to aid in building and verifying
13 ssh_known_hosts files. ssh-keyscan provides a minimal interface suitable
14 for use by shell and perl scripts.
15
16 ssh-keyscan uses non-blocking socket I/O to contact as many hosts as
17 possible in parallel, so it is very efficient. The keys from a domain of
18 1,000 hosts can be collected in tens of seconds, even when some of those
19 hosts are down or do not run ssh. For scanning, one does not need login
20 access to the machines that are being scanned, nor does the scanning
21 process involve any encryption.
22
23 The options are as follows:
24
25 -4 Forces ssh-keyscan to use IPv4 addresses only.
26
27 -6 Forces ssh-keyscan to use IPv6 addresses only.
28
29 -f file
30 Read hosts or addrlist namelist pairs from this file, one per
31 line. If - is supplied instead of a filename, ssh-keyscan will
32 read hosts or addrlist namelist pairs from the standard input.
33
34 -H Hash all hostnames and addresses in the output. Hashed names may
35 be used normally by ssh and sshd, but they do not reveal
36 identifying information should the file's contents be disclosed.
37
38 -p port
39 Port to connect to on the remote host.
40
41 -T timeout
42 Set the timeout for connection attempts. If timeout seconds have
43 elapsed since a connection was initiated to a host or since the
44 last time anything was read from that host, then the connection
45 is closed and the host in question considered unavailable.
46 Default is 5 seconds.
47
48 -t type
49 Specifies the type of the key to fetch from the scanned hosts.
50 The possible values are ``rsa1'' for protocol version 1 and
51 ``dsa'', ``ecdsa'' or ``rsa'' for protocol version 2. Multiple
52 values may be specified by separating them with commas. The
53 default is to fetch ``rsa'' and ``ecdsa'' keys.
54
55 -v Verbose mode. Causes ssh-keyscan to print debugging messages
56 about its progress.
57
58SECURITY
59 If an ssh_known_hosts file is constructed using ssh-keyscan without
60 verifying the keys, users will be vulnerable to man in the middle
61 attacks. On the other hand, if the security model allows such a risk,
62 ssh-keyscan can help in the detection of tampered keyfiles or man in the
63 middle attacks which have begun after the ssh_known_hosts file was
64 created.
65
66FILES
67 Input format:
68
69 1.2.3.4,1.2.4.4 name.my.domain,name,n.my.domain,n,1.2.3.4,1.2.4.4
70
71 Output format for rsa1 keys:
72
73 host-or-namelist bits exponent modulus
74
75 Output format for rsa, dsa and ecdsa keys:
76
77 host-or-namelist keytype base64-encoded-key
78
79 Where keytype is either ``ecdsa-sha2-nistp256'', ``ecdsa-sha2-nistp384'',
80 ``ecdsa-sha2-nistp521'', ``ssh-dss'' or ``ssh-rsa''.
81
82 /etc/ssh/ssh_known_hosts
83
84EXAMPLES
85 Print the rsa host key for machine hostname:
86
87 $ ssh-keyscan hostname
88
89 Find all hosts from the file ssh_hosts which have new or different keys
90 from those in the sorted file ssh_known_hosts:
91
92 $ ssh-keyscan -t rsa,dsa,ecdsa -f ssh_hosts | \
93 sort -u - ssh_known_hosts | diff ssh_known_hosts -
94
95SEE ALSO
96 ssh(1), sshd(8)
97
98AUTHORS
99 David Mazieres <dm@lcs.mit.edu> wrote the initial version, and Wayne
100 Davison <wayned@users.sourceforge.net> added support for protocol version
101 2.
102
103BUGS
104 It generates "Connection closed by remote host" messages on the consoles
105 of all the machines it scans if the server is older than version 2.9.
106 This is because it opens a connection to the ssh port, reads the public
107 key, and drops the connection as soon as it gets the key.
108
109OpenBSD 5.3 April 11, 2012 OpenBSD 5.3
diff --git a/ssh-keysign.0 b/ssh-keysign.0
new file mode 100644
index 000000000..a2e9eec2b
--- /dev/null
+++ b/ssh-keysign.0
@@ -0,0 +1,51 @@
1SSH-KEYSIGN(8) OpenBSD System Manager's Manual SSH-KEYSIGN(8)
2
3NAME
4 ssh-keysign - ssh helper program for host-based authentication
5
6SYNOPSIS
7 ssh-keysign
8
9DESCRIPTION
10 ssh-keysign is used by ssh(1) to access the local host keys and generate
11 the digital signature required during host-based authentication with SSH
12 protocol version 2.
13
14 ssh-keysign is disabled by default and can only be enabled in the global
15 client configuration file /etc/ssh/ssh_config by setting EnableSSHKeysign
16 to ``yes''.
17
18 ssh-keysign is not intended to be invoked by the user, but from ssh(1).
19 See ssh(1) and sshd(8) for more information about host-based
20 authentication.
21
22FILES
23 /etc/ssh/ssh_config
24 Controls whether ssh-keysign is enabled.
25
26 /etc/ssh/ssh_host_dsa_key
27 /etc/ssh/ssh_host_ecdsa_key
28 /etc/ssh/ssh_host_rsa_key
29 These files contain the private parts of the host keys used to
30 generate the digital signature. They should be owned by root,
31 readable only by root, and not accessible to others. Since they
32 are readable only by root, ssh-keysign must be set-uid root if
33 host-based authentication is used.
34
35 /etc/ssh/ssh_host_dsa_key-cert.pub
36 /etc/ssh/ssh_host_ecdsa_key-cert.pub
37 /etc/ssh/ssh_host_rsa_key-cert.pub
38 If these files exist they are assumed to contain public
39 certificate information corresponding with the private keys
40 above.
41
42SEE ALSO
43 ssh(1), ssh-keygen(1), ssh_config(5), sshd(8)
44
45HISTORY
46 ssh-keysign first appeared in OpenBSD 3.2.
47
48AUTHORS
49 Markus Friedl <markus@openbsd.org>
50
51OpenBSD 5.3 August 31, 2010 OpenBSD 5.3
diff --git a/ssh-pkcs11-helper.0 b/ssh-pkcs11-helper.0
new file mode 100644
index 000000000..dcfaa222a
--- /dev/null
+++ b/ssh-pkcs11-helper.0
@@ -0,0 +1,25 @@
1SSH-PKCS11-HELPER(8) OpenBSD System Manager's Manual SSH-PKCS11-HELPER(8)
2
3NAME
4 ssh-pkcs11-helper - ssh-agent helper program for PKCS#11 support
5
6SYNOPSIS
7 ssh-pkcs11-helper
8
9DESCRIPTION
10 ssh-pkcs11-helper is used by ssh-agent(1) to access keys provided by a
11 PKCS#11 token.
12
13 ssh-pkcs11-helper is not intended to be invoked by the user, but from
14 ssh-agent(1).
15
16SEE ALSO
17 ssh(1), ssh-add(1), ssh-agent(1)
18
19HISTORY
20 ssh-pkcs11-helper first appeared in OpenBSD 4.7.
21
22AUTHORS
23 Markus Friedl <markus@openbsd.org>
24
25OpenBSD 5.3 February 10, 2010 OpenBSD 5.3
diff --git a/ssh.0 b/ssh.0
new file mode 100644
index 000000000..f6b642bc8
--- /dev/null
+++ b/ssh.0
@@ -0,0 +1,922 @@
1SSH(1) OpenBSD Reference Manual SSH(1)
2
3NAME
4 ssh - OpenSSH SSH client (remote login program)
5
6SYNOPSIS
7 ssh [-1246AaCfgKkMNnqsTtVvXxYy] [-b bind_address] [-c cipher_spec]
8 [-D [bind_address:]port] [-e escape_char] [-F configfile] [-I pkcs11]
9 [-i identity_file] [-L [bind_address:]port:host:hostport]
10 [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port]
11 [-R [bind_address:]port:host:hostport] [-S ctl_path] [-W host:port]
12 [-w local_tun[:remote_tun]] [user@]hostname [command]
13
14DESCRIPTION
15 ssh (SSH client) is a program for logging into a remote machine and for
16 executing commands on a remote machine. It is intended to replace rlogin
17 and rsh, and provide secure encrypted communications between two
18 untrusted hosts over an insecure network. X11 connections and arbitrary
19 TCP ports can also be forwarded over the secure channel.
20
21 ssh connects and logs into the specified hostname (with optional user
22 name). The user must prove his/her identity to the remote machine using
23 one of several methods depending on the protocol version used (see
24 below).
25
26 If command is specified, it is executed on the remote host instead of a
27 login shell.
28
29 The options are as follows:
30
31 -1 Forces ssh to try protocol version 1 only.
32
33 -2 Forces ssh to try protocol version 2 only.
34
35 -4 Forces ssh to use IPv4 addresses only.
36
37 -6 Forces ssh to use IPv6 addresses only.
38
39 -A Enables forwarding of the authentication agent connection. This
40 can also be specified on a per-host basis in a configuration
41 file.
42
43 Agent forwarding should be enabled with caution. Users with the
44 ability to bypass file permissions on the remote host (for the
45 agent's UNIX-domain socket) can access the local agent through
46 the forwarded connection. An attacker cannot obtain key material
47 from the agent, however they can perform operations on the keys
48 that enable them to authenticate using the identities loaded into
49 the agent.
50
51 -a Disables forwarding of the authentication agent connection.
52
53 -b bind_address
54 Use bind_address on the local machine as the source address of
55 the connection. Only useful on systems with more than one
56 address.
57
58 -C Requests compression of all data (including stdin, stdout,
59 stderr, and data for forwarded X11 and TCP connections). The
60 compression algorithm is the same used by gzip(1), and the
61 ``level'' can be controlled by the CompressionLevel option for
62 protocol version 1. Compression is desirable on modem lines and
63 other slow connections, but will only slow down things on fast
64 networks. The default value can be set on a host-by-host basis
65 in the configuration files; see the Compression option.
66
67 -c cipher_spec
68 Selects the cipher specification for encrypting the session.
69
70 Protocol version 1 allows specification of a single cipher. The
71 supported values are ``3des'', ``blowfish'', and ``des''. 3des
72 (triple-des) is an encrypt-decrypt-encrypt triple with three
73 different keys. It is believed to be secure. blowfish is a fast
74 block cipher; it appears very secure and is much faster than
75 3des. des is only supported in the ssh client for
76 interoperability with legacy protocol 1 implementations that do
77 not support the 3des cipher. Its use is strongly discouraged due
78 to cryptographic weaknesses. The default is ``3des''.
79
80 For protocol version 2, cipher_spec is a comma-separated list of
81 ciphers listed in order of preference. See the Ciphers keyword
82 in ssh_config(5) for more information.
83
84 -D [bind_address:]port
85 Specifies a local ``dynamic'' application-level port forwarding.
86 This works by allocating a socket to listen to port on the local
87 side, optionally bound to the specified bind_address. Whenever a
88 connection is made to this port, the connection is forwarded over
89 the secure channel, and the application protocol is then used to
90 determine where to connect to from the remote machine. Currently
91 the SOCKS4 and SOCKS5 protocols are supported, and ssh will act
92 as a SOCKS server. Only root can forward privileged ports.
93 Dynamic port forwardings can also be specified in the
94 configuration file.
95
96 IPv6 addresses can be specified by enclosing the address in
97 square brackets. Only the superuser can forward privileged
98 ports. By default, the local port is bound in accordance with
99 the GatewayPorts setting. However, an explicit bind_address may
100 be used to bind the connection to a specific address. The
101 bind_address of ``localhost'' indicates that the listening port
102 be bound for local use only, while an empty address or `*'
103 indicates that the port should be available from all interfaces.
104
105 -e escape_char
106 Sets the escape character for sessions with a pty (default: `~').
107 The escape character is only recognized at the beginning of a
108 line. The escape character followed by a dot (`.') closes the
109 connection; followed by control-Z suspends the connection; and
110 followed by itself sends the escape character once. Setting the
111 character to ``none'' disables any escapes and makes the session
112 fully transparent.
113
114 -F configfile
115 Specifies an alternative per-user configuration file. If a
116 configuration file is given on the command line, the system-wide
117 configuration file (/etc/ssh/ssh_config) will be ignored. The
118 default for the per-user configuration file is ~/.ssh/config.
119
120 -f Requests ssh to go to background just before command execution.
121 This is useful if ssh is going to ask for passwords or
122 passphrases, but the user wants it in the background. This
123 implies -n. The recommended way to start X11 programs at a
124 remote site is with something like ssh -f host xterm.
125
126 If the ExitOnForwardFailure configuration option is set to
127 ``yes'', then a client started with -f will wait for all remote
128 port forwards to be successfully established before placing
129 itself in the background.
130
131 -g Allows remote hosts to connect to local forwarded ports.
132
133 -I pkcs11
134 Specify the PKCS#11 shared library ssh should use to communicate
135 with a PKCS#11 token providing the user's private RSA key.
136
137 -i identity_file
138 Selects a file from which the identity (private key) for public
139 key authentication is read. The default is ~/.ssh/identity for
140 protocol version 1, and ~/.ssh/id_dsa, ~/.ssh/id_ecdsa and
141 ~/.ssh/id_rsa for protocol version 2. Identity files may also be
142 specified on a per-host basis in the configuration file. It is
143 possible to have multiple -i options (and multiple identities
144 specified in configuration files). ssh will also try to load
145 certificate information from the filename obtained by appending
146 -cert.pub to identity filenames.
147
148 -K Enables GSSAPI-based authentication and forwarding (delegation)
149 of GSSAPI credentials to the server.
150
151 -k Disables forwarding (delegation) of GSSAPI credentials to the
152 server.
153
154 -L [bind_address:]port:host:hostport
155 Specifies that the given port on the local (client) host is to be
156 forwarded to the given host and port on the remote side. This
157 works by allocating a socket to listen to port on the local side,
158 optionally bound to the specified bind_address. Whenever a
159 connection is made to this port, the connection is forwarded over
160 the secure channel, and a connection is made to host port
161 hostport from the remote machine. Port forwardings can also be
162 specified in the configuration file. IPv6 addresses can be
163 specified by enclosing the address in square brackets. Only the
164 superuser can forward privileged ports. By default, the local
165 port is bound in accordance with the GatewayPorts setting.
166 However, an explicit bind_address may be used to bind the
167 connection to a specific address. The bind_address of
168 ``localhost'' indicates that the listening port be bound for
169 local use only, while an empty address or `*' indicates that the
170 port should be available from all interfaces.
171
172 -l login_name
173 Specifies the user to log in as on the remote machine. This also
174 may be specified on a per-host basis in the configuration file.
175
176 -M Places the ssh client into ``master'' mode for connection
177 sharing. Multiple -M options places ssh into ``master'' mode
178 with confirmation required before slave connections are accepted.
179 Refer to the description of ControlMaster in ssh_config(5) for
180 details.
181
182 -m mac_spec
183 Additionally, for protocol version 2 a comma-separated list of
184 MAC (message authentication code) algorithms can be specified in
185 order of preference. See the MACs keyword for more information.
186
187 -N Do not execute a remote command. This is useful for just
188 forwarding ports (protocol version 2 only).
189
190 -n Redirects stdin from /dev/null (actually, prevents reading from
191 stdin). This must be used when ssh is run in the background. A
192 common trick is to use this to run X11 programs on a remote
193 machine. For example, ssh -n shadows.cs.hut.fi emacs & will
194 start an emacs on shadows.cs.hut.fi, and the X11 connection will
195 be automatically forwarded over an encrypted channel. The ssh
196 program will be put in the background. (This does not work if
197 ssh needs to ask for a password or passphrase; see also the -f
198 option.)
199
200 -O ctl_cmd
201 Control an active connection multiplexing master process. When
202 the -O option is specified, the ctl_cmd argument is interpreted
203 and passed to the master process. Valid commands are: ``check''
204 (check that the master process is running), ``forward'' (request
205 forwardings without command execution), ``cancel'' (cancel
206 forwardings), ``exit'' (request the master to exit), and ``stop''
207 (request the master to stop accepting further multiplexing
208 requests).
209
210 -o option
211 Can be used to give options in the format used in the
212 configuration file. This is useful for specifying options for
213 which there is no separate command-line flag. For full details
214 of the options listed below, and their possible values, see
215 ssh_config(5).
216
217 AddressFamily
218 BatchMode
219 BindAddress
220 ChallengeResponseAuthentication
221 CheckHostIP
222 Cipher
223 Ciphers
224 ClearAllForwardings
225 Compression
226 CompressionLevel
227 ConnectionAttempts
228 ConnectTimeout
229 ControlMaster
230 ControlPath
231 ControlPersist
232 DynamicForward
233 EscapeChar
234 ExitOnForwardFailure
235 ForwardAgent
236 ForwardX11
237 ForwardX11Timeout
238 ForwardX11Trusted
239 GatewayPorts
240 GlobalKnownHostsFile
241 GSSAPIAuthentication
242 GSSAPIDelegateCredentials
243 HashKnownHosts
244 Host
245 HostbasedAuthentication
246 HostKeyAlgorithms
247 HostKeyAlias
248 HostName
249 IdentityFile
250 IdentitiesOnly
251 IPQoS
252 KbdInteractiveAuthentication
253 KbdInteractiveDevices
254 KexAlgorithms
255 LocalCommand
256 LocalForward
257 LogLevel
258 MACs
259 NoHostAuthenticationForLocalhost
260 NumberOfPasswordPrompts
261 PasswordAuthentication
262 PermitLocalCommand
263 PKCS11Provider
264 Port
265 PreferredAuthentications
266 Protocol
267 ProxyCommand
268 PubkeyAuthentication
269 RekeyLimit
270 RemoteForward
271 RequestTTY
272 RhostsRSAAuthentication
273 RSAAuthentication
274 SendEnv
275 ServerAliveInterval
276 ServerAliveCountMax
277 StrictHostKeyChecking
278 TCPKeepAlive
279 Tunnel
280 TunnelDevice
281 UsePrivilegedPort
282 User
283 UserKnownHostsFile
284 VerifyHostKeyDNS
285 VisualHostKey
286 XAuthLocation
287
288 -p port
289 Port to connect to on the remote host. This can be specified on
290 a per-host basis in the configuration file.
291
292 -q Quiet mode. Causes most warning and diagnostic messages to be
293 suppressed.
294
295 -R [bind_address:]port:host:hostport
296 Specifies that the given port on the remote (server) host is to
297 be forwarded to the given host and port on the local side. This
298 works by allocating a socket to listen to port on the remote
299 side, and whenever a connection is made to this port, the
300 connection is forwarded over the secure channel, and a connection
301 is made to host port hostport from the local machine.
302
303 Port forwardings can also be specified in the configuration file.
304 Privileged ports can be forwarded only when logging in as root on
305 the remote machine. IPv6 addresses can be specified by enclosing
306 the address in square brackets.
307
308 By default, the listening socket on the server will be bound to
309 the loopback interface only. This may be overridden by
310 specifying a bind_address. An empty bind_address, or the address
311 `*', indicates that the remote socket should listen on all
312 interfaces. Specifying a remote bind_address will only succeed
313 if the server's GatewayPorts option is enabled (see
314 sshd_config(5)).
315
316 If the port argument is `0', the listen port will be dynamically
317 allocated on the server and reported to the client at run time.
318 When used together with -O forward the allocated port will be
319 printed to the standard output.
320
321 -S ctl_path
322 Specifies the location of a control socket for connection
323 sharing, or the string ``none'' to disable connection sharing.
324 Refer to the description of ControlPath and ControlMaster in
325 ssh_config(5) for details.
326
327 -s May be used to request invocation of a subsystem on the remote
328 system. Subsystems are a feature of the SSH2 protocol which
329 facilitate the use of SSH as a secure transport for other
330 applications (eg. sftp(1)). The subsystem is specified as the
331 remote command.
332
333 -T Disable pseudo-tty allocation.
334
335 -t Force pseudo-tty allocation. This can be used to execute
336 arbitrary screen-based programs on a remote machine, which can be
337 very useful, e.g. when implementing menu services. Multiple -t
338 options force tty allocation, even if ssh has no local tty.
339
340 -V Display the version number and exit.
341
342 -v Verbose mode. Causes ssh to print debugging messages about its
343 progress. This is helpful in debugging connection,
344 authentication, and configuration problems. Multiple -v options
345 increase the verbosity. The maximum is 3.
346
347 -W host:port
348 Requests that standard input and output on the client be
349 forwarded to host on port over the secure channel. Implies -N,
350 -T, ExitOnForwardFailure and ClearAllForwardings. Works with
351 Protocol version 2 only.
352
353 -w local_tun[:remote_tun]
354 Requests tunnel device forwarding with the specified tun(4)
355 devices between the client (local_tun) and the server
356 (remote_tun).
357
358 The devices may be specified by numerical ID or the keyword
359 ``any'', which uses the next available tunnel device. If
360 remote_tun is not specified, it defaults to ``any''. See also
361 the Tunnel and TunnelDevice directives in ssh_config(5). If the
362 Tunnel directive is unset, it is set to the default tunnel mode,
363 which is ``point-to-point''.
364
365 -X Enables X11 forwarding. This can also be specified on a per-host
366 basis in a configuration file.
367
368 X11 forwarding should be enabled with caution. Users with the
369 ability to bypass file permissions on the remote host (for the
370 user's X authorization database) can access the local X11 display
371 through the forwarded connection. An attacker may then be able
372 to perform activities such as keystroke monitoring.
373
374 For this reason, X11 forwarding is subjected to X11 SECURITY
375 extension restrictions by default. Please refer to the ssh -Y
376 option and the ForwardX11Trusted directive in ssh_config(5) for
377 more information.
378
379 -x Disables X11 forwarding.
380
381 -Y Enables trusted X11 forwarding. Trusted X11 forwardings are not
382 subjected to the X11 SECURITY extension controls.
383
384 -y Send log information using the syslog(3) system module. By
385 default this information is sent to stderr.
386
387 ssh may additionally obtain configuration data from a per-user
388 configuration file and a system-wide configuration file. The file format
389 and configuration options are described in ssh_config(5).
390
391AUTHENTICATION
392 The OpenSSH SSH client supports SSH protocols 1 and 2. The default is to
393 use protocol 2 only, though this can be changed via the Protocol option
394 in ssh_config(5) or the -1 and -2 options (see above). Both protocols
395 support similar authentication methods, but protocol 2 is the default
396 since it provides additional mechanisms for confidentiality (the traffic
397 is encrypted using AES, 3DES, Blowfish, CAST128, or Arcfour) and
398 integrity (hmac-md5, hmac-sha1, hmac-sha2-256, hmac-sha2-512, umac-64,
399 umac-128, hmac-ripemd160). Protocol 1 lacks a strong mechanism for
400 ensuring the integrity of the connection.
401
402 The methods available for authentication are: GSSAPI-based
403 authentication, host-based authentication, public key authentication,
404 challenge-response authentication, and password authentication.
405 Authentication methods are tried in the order specified above, though
406 protocol 2 has a configuration option to change the default order:
407 PreferredAuthentications.
408
409 Host-based authentication works as follows: If the machine the user logs
410 in from is listed in /etc/hosts.equiv or /etc/shosts.equiv on the remote
411 machine, and the user names are the same on both sides, or if the files
412 ~/.rhosts or ~/.shosts exist in the user's home directory on the remote
413 machine and contain a line containing the name of the client machine and
414 the name of the user on that machine, the user is considered for login.
415 Additionally, the server must be able to verify the client's host key
416 (see the description of /etc/ssh/ssh_known_hosts and ~/.ssh/known_hosts,
417 below) for login to be permitted. This authentication method closes
418 security holes due to IP spoofing, DNS spoofing, and routing spoofing.
419 [Note to the administrator: /etc/hosts.equiv, ~/.rhosts, and the
420 rlogin/rsh protocol in general, are inherently insecure and should be
421 disabled if security is desired.]
422
423 Public key authentication works as follows: The scheme is based on
424 public-key cryptography, using cryptosystems where encryption and
425 decryption are done using separate keys, and it is unfeasible to derive
426 the decryption key from the encryption key. The idea is that each user
427 creates a public/private key pair for authentication purposes. The
428 server knows the public key, and only the user knows the private key.
429 ssh implements public key authentication protocol automatically, using
430 one of the DSA, ECDSA or RSA algorithms. Protocol 1 is restricted to
431 using only RSA keys, but protocol 2 may use any. The HISTORY section of
432 ssl(8) contains a brief discussion of the DSA and RSA algorithms.
433
434 The file ~/.ssh/authorized_keys lists the public keys that are permitted
435 for logging in. When the user logs in, the ssh program tells the server
436 which key pair it would like to use for authentication. The client
437 proves that it has access to the private key and the server checks that
438 the corresponding public key is authorized to accept the account.
439
440 The user creates his/her key pair by running ssh-keygen(1). This stores
441 the private key in ~/.ssh/identity (protocol 1), ~/.ssh/id_dsa (protocol
442 2 DSA), ~/.ssh/id_ecdsa (protocol 2 ECDSA), or ~/.ssh/id_rsa (protocol 2
443 RSA) and stores the public key in ~/.ssh/identity.pub (protocol 1),
444 ~/.ssh/id_dsa.pub (protocol 2 DSA), ~/.ssh/id_ecdsa.pub (protocol 2
445 ECDSA), or ~/.ssh/id_rsa.pub (protocol 2 RSA) in the user's home
446 directory. The user should then copy the public key to
447 ~/.ssh/authorized_keys in his/her home directory on the remote machine.
448 The authorized_keys file corresponds to the conventional ~/.rhosts file,
449 and has one key per line, though the lines can be very long. After this,
450 the user can log in without giving the password.
451
452 A variation on public key authentication is available in the form of
453 certificate authentication: instead of a set of public/private keys,
454 signed certificates are used. This has the advantage that a single
455 trusted certification authority can be used in place of many
456 public/private keys. See the CERTIFICATES section of ssh-keygen(1) for
457 more information.
458
459 The most convenient way to use public key or certificate authentication
460 may be with an authentication agent. See ssh-agent(1) for more
461 information.
462
463 Challenge-response authentication works as follows: The server sends an
464 arbitrary "challenge" text, and prompts for a response. Protocol 2
465 allows multiple challenges and responses; protocol 1 is restricted to
466 just one challenge/response. Examples of challenge-response
467 authentication include BSD Authentication (see login.conf(5)) and PAM
468 (some non-OpenBSD systems).
469
470 Finally, if other authentication methods fail, ssh prompts the user for a
471 password. The password is sent to the remote host for checking; however,
472 since all communications are encrypted, the password cannot be seen by
473 someone listening on the network.
474
475 ssh automatically maintains and checks a database containing
476 identification for all hosts it has ever been used with. Host keys are
477 stored in ~/.ssh/known_hosts in the user's home directory. Additionally,
478 the file /etc/ssh/ssh_known_hosts is automatically checked for known
479 hosts. Any new hosts are automatically added to the user's file. If a
480 host's identification ever changes, ssh warns about this and disables
481 password authentication to prevent server spoofing or man-in-the-middle
482 attacks, which could otherwise be used to circumvent the encryption. The
483 StrictHostKeyChecking option can be used to control logins to machines
484 whose host key is not known or has changed.
485
486 When the user's identity has been accepted by the server, the server
487 either executes the given command, or logs into the machine and gives the
488 user a normal shell on the remote machine. All communication with the
489 remote command or shell will be automatically encrypted.
490
491 If a pseudo-terminal has been allocated (normal login session), the user
492 may use the escape characters noted below.
493
494 If no pseudo-tty has been allocated, the session is transparent and can
495 be used to reliably transfer binary data. On most systems, setting the
496 escape character to ``none'' will also make the session transparent even
497 if a tty is used.
498
499 The session terminates when the command or shell on the remote machine
500 exits and all X11 and TCP connections have been closed.
501
502ESCAPE CHARACTERS
503 When a pseudo-terminal has been requested, ssh supports a number of
504 functions through the use of an escape character.
505
506 A single tilde character can be sent as ~~ or by following the tilde by a
507 character other than those described below. The escape character must
508 always follow a newline to be interpreted as special. The escape
509 character can be changed in configuration files using the EscapeChar
510 configuration directive or on the command line by the -e option.
511
512 The supported escapes (assuming the default `~') are:
513
514 ~. Disconnect.
515
516 ~^Z Background ssh.
517
518 ~# List forwarded connections.
519
520 ~& Background ssh at logout when waiting for forwarded connection /
521 X11 sessions to terminate.
522
523 ~? Display a list of escape characters.
524
525 ~B Send a BREAK to the remote system (only useful for SSH protocol
526 version 2 and if the peer supports it).
527
528 ~C Open command line. Currently this allows the addition of port
529 forwardings using the -L, -R and -D options (see above). It also
530 allows the cancellation of existing port-forwardings with
531 -KL[bind_address:]port for local, -KR[bind_address:]port for
532 remote and -KD[bind_address:]port for dynamic port-forwardings.
533 !command allows the user to execute a local command if the
534 PermitLocalCommand option is enabled in ssh_config(5). Basic
535 help is available, using the -h option.
536
537 ~R Request rekeying of the connection (only useful for SSH protocol
538 version 2 and if the peer supports it).
539
540 ~V Decrease the verbosity (LogLevel) when errors are being written
541 to stderr.
542
543 ~v Increase the verbosity (LogLevel) when errors are being written
544 to stderr.
545
546TCP FORWARDING
547 Forwarding of arbitrary TCP connections over the secure channel can be
548 specified either on the command line or in a configuration file. One
549 possible application of TCP forwarding is a secure connection to a mail
550 server; another is going through firewalls.
551
552 In the example below, we look at encrypting communication between an IRC
553 client and server, even though the IRC server does not directly support
554 encrypted communications. This works as follows: the user connects to
555 the remote host using ssh, specifying a port to be used to forward
556 connections to the remote server. After that it is possible to start the
557 service which is to be encrypted on the client machine, connecting to the
558 same local port, and ssh will encrypt and forward the connection.
559
560 The following example tunnels an IRC session from client machine
561 ``127.0.0.1'' (localhost) to remote server ``server.example.com'':
562
563 $ ssh -f -L 1234:localhost:6667 server.example.com sleep 10
564 $ irc -c '#users' -p 1234 pinky 127.0.0.1
565
566 This tunnels a connection to IRC server ``server.example.com'', joining
567 channel ``#users'', nickname ``pinky'', using port 1234. It doesn't
568 matter which port is used, as long as it's greater than 1023 (remember,
569 only root can open sockets on privileged ports) and doesn't conflict with
570 any ports already in use. The connection is forwarded to port 6667 on
571 the remote server, since that's the standard port for IRC services.
572
573 The -f option backgrounds ssh and the remote command ``sleep 10'' is
574 specified to allow an amount of time (10 seconds, in the example) to
575 start the service which is to be tunnelled. If no connections are made
576 within the time specified, ssh will exit.
577
578X11 FORWARDING
579 If the ForwardX11 variable is set to ``yes'' (or see the description of
580 the -X, -x, and -Y options above) and the user is using X11 (the DISPLAY
581 environment variable is set), the connection to the X11 display is
582 automatically forwarded to the remote side in such a way that any X11
583 programs started from the shell (or command) will go through the
584 encrypted channel, and the connection to the real X server will be made
585 from the local machine. The user should not manually set DISPLAY.
586 Forwarding of X11 connections can be configured on the command line or in
587 configuration files.
588
589 The DISPLAY value set by ssh will point to the server machine, but with a
590 display number greater than zero. This is normal, and happens because
591 ssh creates a ``proxy'' X server on the server machine for forwarding the
592 connections over the encrypted channel.
593
594 ssh will also automatically set up Xauthority data on the server machine.
595 For this purpose, it will generate a random authorization cookie, store
596 it in Xauthority on the server, and verify that any forwarded connections
597 carry this cookie and replace it by the real cookie when the connection
598 is opened. The real authentication cookie is never sent to the server
599 machine (and no cookies are sent in the plain).
600
601 If the ForwardAgent variable is set to ``yes'' (or see the description of
602 the -A and -a options above) and the user is using an authentication
603 agent, the connection to the agent is automatically forwarded to the
604 remote side.
605
606VERIFYING HOST KEYS
607 When connecting to a server for the first time, a fingerprint of the
608 server's public key is presented to the user (unless the option
609 StrictHostKeyChecking has been disabled). Fingerprints can be determined
610 using ssh-keygen(1):
611
612 $ ssh-keygen -l -f /etc/ssh/ssh_host_rsa_key
613
614 If the fingerprint is already known, it can be matched and the key can be
615 accepted or rejected. Because of the difficulty of comparing host keys
616 just by looking at hex strings, there is also support to compare host
617 keys visually, using random art. By setting the VisualHostKey option to
618 ``yes'', a small ASCII graphic gets displayed on every login to a server,
619 no matter if the session itself is interactive or not. By learning the
620 pattern a known server produces, a user can easily find out that the host
621 key has changed when a completely different pattern is displayed.
622 Because these patterns are not unambiguous however, a pattern that looks
623 similar to the pattern remembered only gives a good probability that the
624 host key is the same, not guaranteed proof.
625
626 To get a listing of the fingerprints along with their random art for all
627 known hosts, the following command line can be used:
628
629 $ ssh-keygen -lv -f ~/.ssh/known_hosts
630
631 If the fingerprint is unknown, an alternative method of verification is
632 available: SSH fingerprints verified by DNS. An additional resource
633 record (RR), SSHFP, is added to a zonefile and the connecting client is
634 able to match the fingerprint with that of the key presented.
635
636 In this example, we are connecting a client to a server,
637 ``host.example.com''. The SSHFP resource records should first be added
638 to the zonefile for host.example.com:
639
640 $ ssh-keygen -r host.example.com.
641
642 The output lines will have to be added to the zonefile. To check that
643 the zone is answering fingerprint queries:
644
645 $ dig -t SSHFP host.example.com
646
647 Finally the client connects:
648
649 $ ssh -o "VerifyHostKeyDNS ask" host.example.com
650 [...]
651 Matching host key fingerprint found in DNS.
652 Are you sure you want to continue connecting (yes/no)?
653
654 See the VerifyHostKeyDNS option in ssh_config(5) for more information.
655
656SSH-BASED VIRTUAL PRIVATE NETWORKS
657 ssh contains support for Virtual Private Network (VPN) tunnelling using
658 the tun(4) network pseudo-device, allowing two networks to be joined
659 securely. The sshd_config(5) configuration option PermitTunnel controls
660 whether the server supports this, and at what level (layer 2 or 3
661 traffic).
662
663 The following example would connect client network 10.0.50.0/24 with
664 remote network 10.0.99.0/24 using a point-to-point connection from
665 10.1.1.1 to 10.1.1.2, provided that the SSH server running on the gateway
666 to the remote network, at 192.168.1.15, allows it.
667
668 On the client:
669
670 # ssh -f -w 0:1 192.168.1.15 true
671 # ifconfig tun0 10.1.1.1 10.1.1.2 netmask 255.255.255.252
672 # route add 10.0.99.0/24 10.1.1.2
673
674 On the server:
675
676 # ifconfig tun1 10.1.1.2 10.1.1.1 netmask 255.255.255.252
677 # route add 10.0.50.0/24 10.1.1.1
678
679 Client access may be more finely tuned via the /root/.ssh/authorized_keys
680 file (see below) and the PermitRootLogin server option. The following
681 entry would permit connections on tun(4) device 1 from user ``jane'' and
682 on tun device 2 from user ``john'', if PermitRootLogin is set to
683 ``forced-commands-only'':
684
685 tunnel="1",command="sh /etc/netstart tun1" ssh-rsa ... jane
686 tunnel="2",command="sh /etc/netstart tun2" ssh-rsa ... john
687
688 Since an SSH-based setup entails a fair amount of overhead, it may be
689 more suited to temporary setups, such as for wireless VPNs. More
690 permanent VPNs are better provided by tools such as ipsecctl(8) and
691 isakmpd(8).
692
693ENVIRONMENT
694 ssh will normally set the following environment variables:
695
696 DISPLAY The DISPLAY variable indicates the location of the
697 X11 server. It is automatically set by ssh to
698 point to a value of the form ``hostname:n'', where
699 ``hostname'' indicates the host where the shell
700 runs, and `n' is an integer >= 1. ssh uses this
701 special value to forward X11 connections over the
702 secure channel. The user should normally not set
703 DISPLAY explicitly, as that will render the X11
704 connection insecure (and will require the user to
705 manually copy any required authorization cookies).
706
707 HOME Set to the path of the user's home directory.
708
709 LOGNAME Synonym for USER; set for compatibility with
710 systems that use this variable.
711
712 MAIL Set to the path of the user's mailbox.
713
714 PATH Set to the default PATH, as specified when
715 compiling ssh.
716
717 SSH_ASKPASS If ssh needs a passphrase, it will read the
718 passphrase from the current terminal if it was run
719 from a terminal. If ssh does not have a terminal
720 associated with it but DISPLAY and SSH_ASKPASS are
721 set, it will execute the program specified by
722 SSH_ASKPASS and open an X11 window to read the
723 passphrase. This is particularly useful when
724 calling ssh from a .xsession or related script.
725 (Note that on some machines it may be necessary to
726 redirect the input from /dev/null to make this
727 work.)
728
729 SSH_AUTH_SOCK Identifies the path of a UNIX-domain socket used to
730 communicate with the agent.
731
732 SSH_CONNECTION Identifies the client and server ends of the
733 connection. The variable contains four space-
734 separated values: client IP address, client port
735 number, server IP address, and server port number.
736
737 SSH_ORIGINAL_COMMAND This variable contains the original command line if
738 a forced command is executed. It can be used to
739 extract the original arguments.
740
741 SSH_TTY This is set to the name of the tty (path to the
742 device) associated with the current shell or
743 command. If the current session has no tty, this
744 variable is not set.
745
746 TZ This variable is set to indicate the present time
747 zone if it was set when the daemon was started
748 (i.e. the daemon passes the value on to new
749 connections).
750
751 USER Set to the name of the user logging in.
752
753 Additionally, ssh reads ~/.ssh/environment, and adds lines of the format
754 ``VARNAME=value'' to the environment if the file exists and users are
755 allowed to change their environment. For more information, see the
756 PermitUserEnvironment option in sshd_config(5).
757
758FILES
759 ~/.rhosts
760 This file is used for host-based authentication (see above). On
761 some machines this file may need to be world-readable if the
762 user's home directory is on an NFS partition, because sshd(8)
763 reads it as root. Additionally, this file must be owned by the
764 user, and must not have write permissions for anyone else. The
765 recommended permission for most machines is read/write for the
766 user, and not accessible by others.
767
768 ~/.shosts
769 This file is used in exactly the same way as .rhosts, but allows
770 host-based authentication without permitting login with
771 rlogin/rsh.
772
773 ~/.ssh/
774 This directory is the default location for all user-specific
775 configuration and authentication information. There is no
776 general requirement to keep the entire contents of this directory
777 secret, but the recommended permissions are read/write/execute
778 for the user, and not accessible by others.
779
780 ~/.ssh/authorized_keys
781 Lists the public keys (DSA/ECDSA/RSA) that can be used for
782 logging in as this user. The format of this file is described in
783 the sshd(8) manual page. This file is not highly sensitive, but
784 the recommended permissions are read/write for the user, and not
785 accessible by others.
786
787 ~/.ssh/config
788 This is the per-user configuration file. The file format and
789 configuration options are described in ssh_config(5). Because of
790 the potential for abuse, this file must have strict permissions:
791 read/write for the user, and not accessible by others.
792
793 ~/.ssh/environment
794 Contains additional definitions for environment variables; see
795 ENVIRONMENT, above.
796
797 ~/.ssh/identity
798 ~/.ssh/id_dsa
799 ~/.ssh/id_ecdsa
800 ~/.ssh/id_rsa
801 Contains the private key for authentication. These files contain
802 sensitive data and should be readable by the user but not
803 accessible by others (read/write/execute). ssh will simply
804 ignore a private key file if it is accessible by others. It is
805 possible to specify a passphrase when generating the key which
806 will be used to encrypt the sensitive part of this file using
807 3DES.
808
809 ~/.ssh/identity.pub
810 ~/.ssh/id_dsa.pub
811 ~/.ssh/id_ecdsa.pub
812 ~/.ssh/id_rsa.pub
813 Contains the public key for authentication. These files are not
814 sensitive and can (but need not) be readable by anyone.
815
816 ~/.ssh/known_hosts
817 Contains a list of host keys for all hosts the user has logged
818 into that are not already in the systemwide list of known host
819 keys. See sshd(8) for further details of the format of this
820 file.
821
822 ~/.ssh/rc
823 Commands in this file are executed by ssh when the user logs in,
824 just before the user's shell (or command) is started. See the
825 sshd(8) manual page for more information.
826
827 /etc/hosts.equiv
828 This file is for host-based authentication (see above). It
829 should only be writable by root.
830
831 /etc/shosts.equiv
832 This file is used in exactly the same way as hosts.equiv, but
833 allows host-based authentication without permitting login with
834 rlogin/rsh.
835
836 /etc/ssh/ssh_config
837 Systemwide configuration file. The file format and configuration
838 options are described in ssh_config(5).
839
840 /etc/ssh/ssh_host_key
841 /etc/ssh/ssh_host_dsa_key
842 /etc/ssh/ssh_host_ecdsa_key
843 /etc/ssh/ssh_host_rsa_key
844 These files contain the private parts of the host keys and are
845 used for host-based authentication. If protocol version 1 is
846 used, ssh must be setuid root, since the host key is readable
847 only by root. For protocol version 2, ssh uses ssh-keysign(8) to
848 access the host keys, eliminating the requirement that ssh be
849 setuid root when host-based authentication is used. By default
850 ssh is not setuid root.
851
852 /etc/ssh/ssh_known_hosts
853 Systemwide list of known host keys. This file should be prepared
854 by the system administrator to contain the public host keys of
855 all machines in the organization. It should be world-readable.
856 See sshd(8) for further details of the format of this file.
857
858 /etc/ssh/sshrc
859 Commands in this file are executed by ssh when the user logs in,
860 just before the user's shell (or command) is started. See the
861 sshd(8) manual page for more information.
862
863EXIT STATUS
864 ssh exits with the exit status of the remote command or with 255 if an
865 error occurred.
866
867SEE ALSO
868 scp(1), sftp(1), ssh-add(1), ssh-agent(1), ssh-keygen(1), ssh-keyscan(1),
869 tun(4), hosts.equiv(5), ssh_config(5), ssh-keysign(8), sshd(8)
870
871STANDARDS
872 S. Lehtinen and C. Lonvick, The Secure Shell (SSH) Protocol Assigned
873 Numbers, RFC 4250, January 2006.
874
875 T. Ylonen and C. Lonvick, The Secure Shell (SSH) Protocol Architecture,
876 RFC 4251, January 2006.
877
878 T. Ylonen and C. Lonvick, The Secure Shell (SSH) Authentication Protocol,
879 RFC 4252, January 2006.
880
881 T. Ylonen and C. Lonvick, The Secure Shell (SSH) Transport Layer
882 Protocol, RFC 4253, January 2006.
883
884 T. Ylonen and C. Lonvick, The Secure Shell (SSH) Connection Protocol, RFC
885 4254, January 2006.
886
887 J. Schlyter and W. Griffin, Using DNS to Securely Publish Secure Shell
888 (SSH) Key Fingerprints, RFC 4255, January 2006.
889
890 F. Cusack and M. Forssen, Generic Message Exchange Authentication for the
891 Secure Shell Protocol (SSH), RFC 4256, January 2006.
892
893 J. Galbraith and P. Remaker, The Secure Shell (SSH) Session Channel Break
894 Extension, RFC 4335, January 2006.
895
896 M. Bellare, T. Kohno, and C. Namprempre, The Secure Shell (SSH) Transport
897 Layer Encryption Modes, RFC 4344, January 2006.
898
899 B. Harris, Improved Arcfour Modes for the Secure Shell (SSH) Transport
900 Layer Protocol, RFC 4345, January 2006.
901
902 M. Friedl, N. Provos, and W. Simpson, Diffie-Hellman Group Exchange for
903 the Secure Shell (SSH) Transport Layer Protocol, RFC 4419, March 2006.
904
905 J. Galbraith and R. Thayer, The Secure Shell (SSH) Public Key File
906 Format, RFC 4716, November 2006.
907
908 D. Stebila and J. Green, Elliptic Curve Algorithm Integration in the
909 Secure Shell Transport Layer, RFC 5656, December 2009.
910
911 A. Perrig and D. Song, Hash Visualization: a New Technique to improve
912 Real-World Security, 1999, International Workshop on Cryptographic
913 Techniques and E-Commerce (CrypTEC '99).
914
915AUTHORS
916 OpenSSH is a derivative of the original and free ssh 1.2.12 release by
917 Tatu Ylonen. Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo
918 de Raadt and Dug Song removed many bugs, re-added newer features and
919 created OpenSSH. Markus Friedl contributed the support for SSH protocol
920 versions 1.5 and 2.0.
921
922OpenBSD 5.3 October 4, 2012 OpenBSD 5.3
diff --git a/ssh_config.0 b/ssh_config.0
new file mode 100644
index 000000000..164d11817
--- /dev/null
+++ b/ssh_config.0
@@ -0,0 +1,776 @@
1SSH_CONFIG(5) OpenBSD Programmer's Manual SSH_CONFIG(5)
2
3NAME
4 ssh_config - OpenSSH SSH client configuration files
5
6SYNOPSIS
7 ~/.ssh/config
8 /etc/ssh/ssh_config
9
10DESCRIPTION
11 ssh(1) obtains configuration data from the following sources in the
12 following order:
13
14 1. command-line options
15 2. user's configuration file (~/.ssh/config)
16 3. system-wide configuration file (/etc/ssh/ssh_config)
17
18 For each parameter, the first obtained value will be used. The
19 configuration files contain sections separated by ``Host''
20 specifications, and that section is only applied for hosts that match one
21 of the patterns given in the specification. The matched host name is the
22 one given on the command line.
23
24 Since the first obtained value for each parameter is used, more host-
25 specific declarations should be given near the beginning of the file, and
26 general defaults at the end.
27
28 The configuration file has the following format:
29
30 Empty lines and lines starting with `#' are comments. Otherwise a line
31 is of the format ``keyword arguments''. Configuration options may be
32 separated by whitespace or optional whitespace and exactly one `='; the
33 latter format is useful to avoid the need to quote whitespace when
34 specifying configuration options using the ssh, scp, and sftp -o option.
35 Arguments may optionally be enclosed in double quotes (") in order to
36 represent arguments containing spaces.
37
38 The possible keywords and their meanings are as follows (note that
39 keywords are case-insensitive and arguments are case-sensitive):
40
41 Host Restricts the following declarations (up to the next Host
42 keyword) to be only for those hosts that match one of the
43 patterns given after the keyword. If more than one pattern is
44 provided, they should be separated by whitespace. A single `*'
45 as a pattern can be used to provide global defaults for all
46 hosts. The host is the hostname argument given on the command
47 line (i.e. the name is not converted to a canonicalized host name
48 before matching).
49
50 A pattern entry may be negated by prefixing it with an
51 exclamation mark (`!'). If a negated entry is matched, then the
52 Host entry is ignored, regardless of whether any other patterns
53 on the line match. Negated matches are therefore useful to
54 provide exceptions for wildcard matches.
55
56 See PATTERNS for more information on patterns.
57
58 AddressFamily
59 Specifies which address family to use when connecting. Valid
60 arguments are ``any'', ``inet'' (use IPv4 only), or ``inet6''
61 (use IPv6 only).
62
63 BatchMode
64 If set to ``yes'', passphrase/password querying will be disabled.
65 This option is useful in scripts and other batch jobs where no
66 user is present to supply the password. The argument must be
67 ``yes'' or ``no''. The default is ``no''.
68
69 BindAddress
70 Use the specified address on the local machine as the source
71 address of the connection. Only useful on systems with more than
72 one address. Note that this option does not work if
73 UsePrivilegedPort is set to ``yes''.
74
75 ChallengeResponseAuthentication
76 Specifies whether to use challenge-response authentication. The
77 argument to this keyword must be ``yes'' or ``no''. The default
78 is ``yes''.
79
80 CheckHostIP
81 If this flag is set to ``yes'', ssh(1) will additionally check
82 the host IP address in the known_hosts file. This allows ssh to
83 detect if a host key changed due to DNS spoofing. If the option
84 is set to ``no'', the check will not be executed. The default is
85 ``yes''.
86
87 Cipher Specifies the cipher to use for encrypting the session in
88 protocol version 1. Currently, ``blowfish'', ``3des'', and
89 ``des'' are supported. des is only supported in the ssh(1)
90 client for interoperability with legacy protocol 1
91 implementations that do not support the 3des cipher. Its use is
92 strongly discouraged due to cryptographic weaknesses. The
93 default is ``3des''.
94
95 Ciphers
96 Specifies the ciphers allowed for protocol version 2 in order of
97 preference. Multiple ciphers must be comma-separated. The
98 supported ciphers are ``3des-cbc'', ``aes128-cbc'',
99 ``aes192-cbc'', ``aes256-cbc'', ``aes128-ctr'', ``aes192-ctr'',
100 ``aes256-ctr'', ``aes128-gcm@openssh.com'',
101 ``aes256-gcm@openssh.com'', ``arcfour128'', ``arcfour256'',
102 ``arcfour'', ``blowfish-cbc'', and ``cast128-cbc''. The default
103 is:
104
105 aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,
106 aes128-gcm@openssh.com,aes256-gcm@openssh.com,
107 aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,
108 aes256-cbc,arcfour
109
110 ClearAllForwardings
111 Specifies that all local, remote, and dynamic port forwardings
112 specified in the configuration files or on the command line be
113 cleared. This option is primarily useful when used from the
114 ssh(1) command line to clear port forwardings set in
115 configuration files, and is automatically set by scp(1) and
116 sftp(1). The argument must be ``yes'' or ``no''. The default is
117 ``no''.
118
119 Compression
120 Specifies whether to use compression. The argument must be
121 ``yes'' or ``no''. The default is ``no''.
122
123 CompressionLevel
124 Specifies the compression level to use if compression is enabled.
125 The argument must be an integer from 1 (fast) to 9 (slow, best).
126 The default level is 6, which is good for most applications. The
127 meaning of the values is the same as in gzip(1). Note that this
128 option applies to protocol version 1 only.
129
130 ConnectionAttempts
131 Specifies the number of tries (one per second) to make before
132 exiting. The argument must be an integer. This may be useful in
133 scripts if the connection sometimes fails. The default is 1.
134
135 ConnectTimeout
136 Specifies the timeout (in seconds) used when connecting to the
137 SSH server, instead of using the default system TCP timeout.
138 This value is used only when the target is down or really
139 unreachable, not when it refuses the connection.
140
141 ControlMaster
142 Enables the sharing of multiple sessions over a single network
143 connection. When set to ``yes'', ssh(1) will listen for
144 connections on a control socket specified using the ControlPath
145 argument. Additional sessions can connect to this socket using
146 the same ControlPath with ControlMaster set to ``no'' (the
147 default). These sessions will try to reuse the master instance's
148 network connection rather than initiating new ones, but will fall
149 back to connecting normally if the control socket does not exist,
150 or is not listening.
151
152 Setting this to ``ask'' will cause ssh to listen for control
153 connections, but require confirmation using the SSH_ASKPASS
154 program before they are accepted (see ssh-add(1) for details).
155 If the ControlPath cannot be opened, ssh will continue without
156 connecting to a master instance.
157
158 X11 and ssh-agent(1) forwarding is supported over these
159 multiplexed connections, however the display and agent forwarded
160 will be the one belonging to the master connection i.e. it is not
161 possible to forward multiple displays or agents.
162
163 Two additional options allow for opportunistic multiplexing: try
164 to use a master connection but fall back to creating a new one if
165 one does not already exist. These options are: ``auto'' and
166 ``autoask''. The latter requires confirmation like the ``ask''
167 option.
168
169 ControlPath
170 Specify the path to the control socket used for connection
171 sharing as described in the ControlMaster section above or the
172 string ``none'' to disable connection sharing. In the path, `%L'
173 will be substituted by the first component of the local host
174 name, `%l' will be substituted by the local host name (including
175 any domain name), `%h' will be substituted by the target host
176 name, `%n' will be substituted by the original target host name
177 specified on the command line, `%p' the port, `%r' by the remote
178 login username, and `%u' by the username of the user running
179 ssh(1). It is recommended that any ControlPath used for
180 opportunistic connection sharing include at least %h, %p, and %r.
181 This ensures that shared connections are uniquely identified.
182
183 ControlPersist
184 When used in conjunction with ControlMaster, specifies that the
185 master connection should remain open in the background (waiting
186 for future client connections) after the initial client
187 connection has been closed. If set to ``no'', then the master
188 connection will not be placed into the background, and will close
189 as soon as the initial client connection is closed. If set to
190 ``yes'', then the master connection will remain in the background
191 indefinitely (until killed or closed via a mechanism such as the
192 ssh(1) ``-O exit'' option). If set to a time in seconds, or a
193 time in any of the formats documented in sshd_config(5), then the
194 backgrounded master connection will automatically terminate after
195 it has remained idle (with no client connections) for the
196 specified time.
197
198 DynamicForward
199 Specifies that a TCP port on the local machine be forwarded over
200 the secure channel, and the application protocol is then used to
201 determine where to connect to from the remote machine.
202
203 The argument must be [bind_address:]port. IPv6 addresses can be
204 specified by enclosing addresses in square brackets. By default,
205 the local port is bound in accordance with the GatewayPorts
206 setting. However, an explicit bind_address may be used to bind
207 the connection to a specific address. The bind_address of
208 ``localhost'' indicates that the listening port be bound for
209 local use only, while an empty address or `*' indicates that the
210 port should be available from all interfaces.
211
212 Currently the SOCKS4 and SOCKS5 protocols are supported, and
213 ssh(1) will act as a SOCKS server. Multiple forwardings may be
214 specified, and additional forwardings can be given on the command
215 line. Only the superuser can forward privileged ports.
216
217 EnableSSHKeysign
218 Setting this option to ``yes'' in the global client configuration
219 file /etc/ssh/ssh_config enables the use of the helper program
220 ssh-keysign(8) during HostbasedAuthentication. The argument must
221 be ``yes'' or ``no''. The default is ``no''. This option should
222 be placed in the non-hostspecific section. See ssh-keysign(8)
223 for more information.
224
225 EscapeChar
226 Sets the escape character (default: `~'). The escape character
227 can also be set on the command line. The argument should be a
228 single character, `^' followed by a letter, or ``none'' to
229 disable the escape character entirely (making the connection
230 transparent for binary data).
231
232 ExitOnForwardFailure
233 Specifies whether ssh(1) should terminate the connection if it
234 cannot set up all requested dynamic, tunnel, local, and remote
235 port forwardings. The argument must be ``yes'' or ``no''. The
236 default is ``no''.
237
238 ForwardAgent
239 Specifies whether the connection to the authentication agent (if
240 any) will be forwarded to the remote machine. The argument must
241 be ``yes'' or ``no''. The default is ``no''.
242
243 Agent forwarding should be enabled with caution. Users with the
244 ability to bypass file permissions on the remote host (for the
245 agent's Unix-domain socket) can access the local agent through
246 the forwarded connection. An attacker cannot obtain key material
247 from the agent, however they can perform operations on the keys
248 that enable them to authenticate using the identities loaded into
249 the agent.
250
251 ForwardX11
252 Specifies whether X11 connections will be automatically
253 redirected over the secure channel and DISPLAY set. The argument
254 must be ``yes'' or ``no''. The default is ``no''.
255
256 X11 forwarding should be enabled with caution. Users with the
257 ability to bypass file permissions on the remote host (for the
258 user's X11 authorization database) can access the local X11
259 display through the forwarded connection. An attacker may then
260 be able to perform activities such as keystroke monitoring if the
261 ForwardX11Trusted option is also enabled.
262
263 ForwardX11Timeout
264 Specify a timeout for untrusted X11 forwarding using the format
265 described in the TIME FORMATS section of sshd_config(5). X11
266 connections received by ssh(1) after this time will be refused.
267 The default is to disable untrusted X11 forwarding after twenty
268 minutes has elapsed.
269
270 ForwardX11Trusted
271 If this option is set to ``yes'', remote X11 clients will have
272 full access to the original X11 display.
273
274 If this option is set to ``no'', remote X11 clients will be
275 considered untrusted and prevented from stealing or tampering
276 with data belonging to trusted X11 clients. Furthermore, the
277 xauth(1) token used for the session will be set to expire after
278 20 minutes. Remote clients will be refused access after this
279 time.
280
281 The default is ``no''.
282
283 See the X11 SECURITY extension specification for full details on
284 the restrictions imposed on untrusted clients.
285
286 GatewayPorts
287 Specifies whether remote hosts are allowed to connect to local
288 forwarded ports. By default, ssh(1) binds local port forwardings
289 to the loopback address. This prevents other remote hosts from
290 connecting to forwarded ports. GatewayPorts can be used to
291 specify that ssh should bind local port forwardings to the
292 wildcard address, thus allowing remote hosts to connect to
293 forwarded ports. The argument must be ``yes'' or ``no''. The
294 default is ``no''.
295
296 GlobalKnownHostsFile
297 Specifies one or more files to use for the global host key
298 database, separated by whitespace. The default is
299 /etc/ssh/ssh_known_hosts, /etc/ssh/ssh_known_hosts2.
300
301 GSSAPIAuthentication
302 Specifies whether user authentication based on GSSAPI is allowed.
303 The default is ``no''. Note that this option applies to protocol
304 version 2 only.
305
306 GSSAPIDelegateCredentials
307 Forward (delegate) credentials to the server. The default is
308 ``no''. Note that this option applies to protocol version 2
309 only.
310
311 HashKnownHosts
312 Indicates that ssh(1) should hash host names and addresses when
313 they are added to ~/.ssh/known_hosts. These hashed names may be
314 used normally by ssh(1) and sshd(8), but they do not reveal
315 identifying information should the file's contents be disclosed.
316 The default is ``no''. Note that existing names and addresses in
317 known hosts files will not be converted automatically, but may be
318 manually hashed using ssh-keygen(1).
319
320 HostbasedAuthentication
321 Specifies whether to try rhosts based authentication with public
322 key authentication. The argument must be ``yes'' or ``no''. The
323 default is ``no''. This option applies to protocol version 2
324 only and is similar to RhostsRSAAuthentication.
325
326 HostKeyAlgorithms
327 Specifies the protocol version 2 host key algorithms that the
328 client wants to use in order of preference. The default for this
329 option is:
330
331 ecdsa-sha2-nistp256-cert-v01@openssh.com,
332 ecdsa-sha2-nistp384-cert-v01@openssh.com,
333 ecdsa-sha2-nistp521-cert-v01@openssh.com,
334 ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,
335 ssh-rsa-cert-v00@openssh.com,ssh-dss-cert-v00@openssh.com,
336 ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,
337 ssh-rsa,ssh-dss
338
339 If hostkeys are known for the destination host then this default
340 is modified to prefer their algorithms.
341
342 HostKeyAlias
343 Specifies an alias that should be used instead of the real host
344 name when looking up or saving the host key in the host key
345 database files. This option is useful for tunneling SSH
346 connections or for multiple servers running on a single host.
347
348 HostName
349 Specifies the real host name to log into. This can be used to
350 specify nicknames or abbreviations for hosts. If the hostname
351 contains the character sequence `%h', then this will be replaced
352 with the host name specified on the command line (this is useful
353 for manipulating unqualified names). The default is the name
354 given on the command line. Numeric IP addresses are also
355 permitted (both on the command line and in HostName
356 specifications).
357
358 IdentitiesOnly
359 Specifies that ssh(1) should only use the authentication identity
360 files configured in the ssh_config files, even if ssh-agent(1) or
361 a PKCS11Provider offers more identities. The argument to this
362 keyword must be ``yes'' or ``no''. This option is intended for
363 situations where ssh-agent offers many different identities. The
364 default is ``no''.
365
366 IdentityFile
367 Specifies a file from which the user's DSA, ECDSA or RSA
368 authentication identity is read. The default is ~/.ssh/identity
369 for protocol version 1, and ~/.ssh/id_dsa, ~/.ssh/id_ecdsa and
370 ~/.ssh/id_rsa for protocol version 2. Additionally, any
371 identities represented by the authentication agent will be used
372 for authentication. ssh(1) will try to load certificate
373 information from the filename obtained by appending -cert.pub to
374 the path of a specified IdentityFile.
375
376 The file name may use the tilde syntax to refer to a user's home
377 directory or one of the following escape characters: `%d' (local
378 user's home directory), `%u' (local user name), `%l' (local host
379 name), `%h' (remote host name) or `%r' (remote user name).
380
381 It is possible to have multiple identity files specified in
382 configuration files; all these identities will be tried in
383 sequence. Multiple IdentityFile directives will add to the list
384 of identities tried (this behaviour differs from that of other
385 configuration directives).
386
387 IPQoS Specifies the IPv4 type-of-service or DSCP class for connections.
388 Accepted values are ``af11'', ``af12'', ``af13'', ``af21'',
389 ``af22'', ``af23'', ``af31'', ``af32'', ``af33'', ``af41'',
390 ``af42'', ``af43'', ``cs0'', ``cs1'', ``cs2'', ``cs3'', ``cs4'',
391 ``cs5'', ``cs6'', ``cs7'', ``ef'', ``lowdelay'', ``throughput'',
392 ``reliability'', or a numeric value. This option may take one or
393 two arguments, separated by whitespace. If one argument is
394 specified, it is used as the packet class unconditionally. If
395 two values are specified, the first is automatically selected for
396 interactive sessions and the second for non-interactive sessions.
397 The default is ``lowdelay'' for interactive sessions and
398 ``throughput'' for non-interactive sessions.
399
400 KbdInteractiveAuthentication
401 Specifies whether to use keyboard-interactive authentication.
402 The argument to this keyword must be ``yes'' or ``no''. The
403 default is ``yes''.
404
405 KbdInteractiveDevices
406 Specifies the list of methods to use in keyboard-interactive
407 authentication. Multiple method names must be comma-separated.
408 The default is to use the server specified list. The methods
409 available vary depending on what the server supports. For an
410 OpenSSH server, it may be zero or more of: ``bsdauth'', ``pam'',
411 and ``skey''.
412
413 KexAlgorithms
414 Specifies the available KEX (Key Exchange) algorithms. Multiple
415 algorithms must be comma-separated. The default is:
416
417 ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,
418 diffie-hellman-group-exchange-sha256,
419 diffie-hellman-group-exchange-sha1,
420 diffie-hellman-group14-sha1,
421 diffie-hellman-group1-sha1
422
423 LocalCommand
424 Specifies a command to execute on the local machine after
425 successfully connecting to the server. The command string
426 extends to the end of the line, and is executed with the user's
427 shell. The following escape character substitutions will be
428 performed: `%d' (local user's home directory), `%h' (remote host
429 name), `%l' (local host name), `%n' (host name as provided on the
430 command line), `%p' (remote port), `%r' (remote user name) or
431 `%u' (local user name).
432
433 The command is run synchronously and does not have access to the
434 session of the ssh(1) that spawned it. It should not be used for
435 interactive commands.
436
437 This directive is ignored unless PermitLocalCommand has been
438 enabled.
439
440 LocalForward
441 Specifies that a TCP port on the local machine be forwarded over
442 the secure channel to the specified host and port from the remote
443 machine. The first argument must be [bind_address:]port and the
444 second argument must be host:hostport. IPv6 addresses can be
445 specified by enclosing addresses in square brackets. Multiple
446 forwardings may be specified, and additional forwardings can be
447 given on the command line. Only the superuser can forward
448 privileged ports. By default, the local port is bound in
449 accordance with the GatewayPorts setting. However, an explicit
450 bind_address may be used to bind the connection to a specific
451 address. The bind_address of ``localhost'' indicates that the
452 listening port be bound for local use only, while an empty
453 address or `*' indicates that the port should be available from
454 all interfaces.
455
456 LogLevel
457 Gives the verbosity level that is used when logging messages from
458 ssh(1). The possible values are: QUIET, FATAL, ERROR, INFO,
459 VERBOSE, DEBUG, DEBUG1, DEBUG2, and DEBUG3. The default is INFO.
460 DEBUG and DEBUG1 are equivalent. DEBUG2 and DEBUG3 each specify
461 higher levels of verbose output.
462
463 MACs Specifies the MAC (message authentication code) algorithms in
464 order of preference. The MAC algorithm is used in protocol
465 version 2 for data integrity protection. Multiple algorithms
466 must be comma-separated. The algorithms that contain ``-etm''
467 calculate the MAC after encryption (encrypt-then-mac). These are
468 considered safer and their use recommended. The default is:
469
470 hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,
471 umac-64-etm@openssh.com,umac-128-etm@openssh.com,
472 hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,
473 hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,
474 hmac-md5-96-etm@openssh.com,
475 hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,
476 hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,
477 hmac-sha1-96,hmac-md5-96
478
479 NoHostAuthenticationForLocalhost
480 This option can be used if the home directory is shared across
481 machines. In this case localhost will refer to a different
482 machine on each of the machines and the user will get many
483 warnings about changed host keys. However, this option disables
484 host authentication for localhost. The argument to this keyword
485 must be ``yes'' or ``no''. The default is to check the host key
486 for localhost.
487
488 NumberOfPasswordPrompts
489 Specifies the number of password prompts before giving up. The
490 argument to this keyword must be an integer. The default is 3.
491
492 PasswordAuthentication
493 Specifies whether to use password authentication. The argument
494 to this keyword must be ``yes'' or ``no''. The default is
495 ``yes''.
496
497 PermitLocalCommand
498 Allow local command execution via the LocalCommand option or
499 using the !command escape sequence in ssh(1). The argument must
500 be ``yes'' or ``no''. The default is ``no''.
501
502 PKCS11Provider
503 Specifies which PKCS#11 provider to use. The argument to this
504 keyword is the PKCS#11 shared library ssh(1) should use to
505 communicate with a PKCS#11 token providing the user's private RSA
506 key.
507
508 Port Specifies the port number to connect on the remote host. The
509 default is 22.
510
511 PreferredAuthentications
512 Specifies the order in which the client should try protocol 2
513 authentication methods. This allows a client to prefer one
514 method (e.g. keyboard-interactive) over another method (e.g.
515 password). The default is:
516
517 gssapi-with-mic,hostbased,publickey,
518 keyboard-interactive,password
519
520 Protocol
521 Specifies the protocol versions ssh(1) should support in order of
522 preference. The possible values are `1' and `2'. Multiple
523 versions must be comma-separated. When this option is set to
524 ``2,1'' ssh will try version 2 and fall back to version 1 if
525 version 2 is not available. The default is `2'.
526
527 ProxyCommand
528 Specifies the command to use to connect to the server. The
529 command string extends to the end of the line, and is executed
530 with the user's shell. In the command string, any occurrence of
531 `%h' will be substituted by the host name to connect, `%p' by the
532 port, and `%r' by the remote user name. The command can be
533 basically anything, and should read from its standard input and
534 write to its standard output. It should eventually connect an
535 sshd(8) server running on some machine, or execute sshd -i
536 somewhere. Host key management will be done using the HostName
537 of the host being connected (defaulting to the name typed by the
538 user). Setting the command to ``none'' disables this option
539 entirely. Note that CheckHostIP is not available for connects
540 with a proxy command.
541
542 This directive is useful in conjunction with nc(1) and its proxy
543 support. For example, the following directive would connect via
544 an HTTP proxy at 192.0.2.0:
545
546 ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p
547
548 PubkeyAuthentication
549 Specifies whether to try public key authentication. The argument
550 to this keyword must be ``yes'' or ``no''. The default is
551 ``yes''. This option applies to protocol version 2 only.
552
553 RekeyLimit
554 Specifies the maximum amount of data that may be transmitted
555 before the session key is renegotiated. The argument is the
556 number of bytes, with an optional suffix of `K', `M', or `G' to
557 indicate Kilobytes, Megabytes, or Gigabytes, respectively. The
558 default is between `1G' and `4G', depending on the cipher. This
559 option applies to protocol version 2 only.
560
561 RemoteForward
562 Specifies that a TCP port on the remote machine be forwarded over
563 the secure channel to the specified host and port from the local
564 machine. The first argument must be [bind_address:]port and the
565 second argument must be host:hostport. IPv6 addresses can be
566 specified by enclosing addresses in square brackets. Multiple
567 forwardings may be specified, and additional forwardings can be
568 given on the command line. Privileged ports can be forwarded
569 only when logging in as root on the remote machine.
570
571 If the port argument is `0', the listen port will be dynamically
572 allocated on the server and reported to the client at run time.
573
574 If the bind_address is not specified, the default is to only bind
575 to loopback addresses. If the bind_address is `*' or an empty
576 string, then the forwarding is requested to listen on all
577 interfaces. Specifying a remote bind_address will only succeed
578 if the server's GatewayPorts option is enabled (see
579 sshd_config(5)).
580
581 RequestTTY
582 Specifies whether to request a pseudo-tty for the session. The
583 argument may be one of: ``no'' (never request a TTY), ``yes''
584 (always request a TTY when standard input is a TTY), ``force''
585 (always request a TTY) or ``auto'' (request a TTY when opening a
586 login session). This option mirrors the -t and -T flags for
587 ssh(1).
588
589 RhostsRSAAuthentication
590 Specifies whether to try rhosts based authentication with RSA
591 host authentication. The argument must be ``yes'' or ``no''.
592 The default is ``no''. This option applies to protocol version 1
593 only and requires ssh(1) to be setuid root.
594
595 RSAAuthentication
596 Specifies whether to try RSA authentication. The argument to
597 this keyword must be ``yes'' or ``no''. RSA authentication will
598 only be attempted if the identity file exists, or an
599 authentication agent is running. The default is ``yes''. Note
600 that this option applies to protocol version 1 only.
601
602 SendEnv
603 Specifies what variables from the local environ(7) should be sent
604 to the server. Note that environment passing is only supported
605 for protocol 2. The server must also support it, and the server
606 must be configured to accept these environment variables. Refer
607 to AcceptEnv in sshd_config(5) for how to configure the server.
608 Variables are specified by name, which may contain wildcard
609 characters. Multiple environment variables may be separated by
610 whitespace or spread across multiple SendEnv directives. The
611 default is not to send any environment variables.
612
613 See PATTERNS for more information on patterns.
614
615 ServerAliveCountMax
616 Sets the number of server alive messages (see below) which may be
617 sent without ssh(1) receiving any messages back from the server.
618 If this threshold is reached while server alive messages are
619 being sent, ssh will disconnect from the server, terminating the
620 session. It is important to note that the use of server alive
621 messages is very different from TCPKeepAlive (below). The server
622 alive messages are sent through the encrypted channel and
623 therefore will not be spoofable. The TCP keepalive option
624 enabled by TCPKeepAlive is spoofable. The server alive mechanism
625 is valuable when the client or server depend on knowing when a
626 connection has become inactive.
627
628 The default value is 3. If, for example, ServerAliveInterval
629 (see below) is set to 15 and ServerAliveCountMax is left at the
630 default, if the server becomes unresponsive, ssh will disconnect
631 after approximately 45 seconds. This option applies to protocol
632 version 2 only.
633
634 ServerAliveInterval
635 Sets a timeout interval in seconds after which if no data has
636 been received from the server, ssh(1) will send a message through
637 the encrypted channel to request a response from the server. The
638 default is 0, indicating that these messages will not be sent to
639 the server. This option applies to protocol version 2 only.
640
641 StrictHostKeyChecking
642 If this flag is set to ``yes'', ssh(1) will never automatically
643 add host keys to the ~/.ssh/known_hosts file, and refuses to
644 connect to hosts whose host key has changed. This provides
645 maximum protection against trojan horse attacks, though it can be
646 annoying when the /etc/ssh/ssh_known_hosts file is poorly
647 maintained or when connections to new hosts are frequently made.
648 This option forces the user to manually add all new hosts. If
649 this flag is set to ``no'', ssh will automatically add new host
650 keys to the user known hosts files. If this flag is set to
651 ``ask'', new host keys will be added to the user known host files
652 only after the user has confirmed that is what they really want
653 to do, and ssh will refuse to connect to hosts whose host key has
654 changed. The host keys of known hosts will be verified
655 automatically in all cases. The argument must be ``yes'',
656 ``no'', or ``ask''. The default is ``ask''.
657
658 TCPKeepAlive
659 Specifies whether the system should send TCP keepalive messages
660 to the other side. If they are sent, death of the connection or
661 crash of one of the machines will be properly noticed. However,
662 this means that connections will die if the route is down
663 temporarily, and some people find it annoying.
664
665 The default is ``yes'' (to send TCP keepalive messages), and the
666 client will notice if the network goes down or the remote host
667 dies. This is important in scripts, and many users want it too.
668
669 To disable TCP keepalive messages, the value should be set to
670 ``no''.
671
672 Tunnel Request tun(4) device forwarding between the client and the
673 server. The argument must be ``yes'', ``point-to-point'' (layer
674 3), ``ethernet'' (layer 2), or ``no''. Specifying ``yes''
675 requests the default tunnel mode, which is ``point-to-point''.
676 The default is ``no''.
677
678 TunnelDevice
679 Specifies the tun(4) devices to open on the client (local_tun)
680 and the server (remote_tun).
681
682 The argument must be local_tun[:remote_tun]. The devices may be
683 specified by numerical ID or the keyword ``any'', which uses the
684 next available tunnel device. If remote_tun is not specified, it
685 defaults to ``any''. The default is ``any:any''.
686
687 UsePrivilegedPort
688 Specifies whether to use a privileged port for outgoing
689 connections. The argument must be ``yes'' or ``no''. The
690 default is ``no''. If set to ``yes'', ssh(1) must be setuid
691 root. Note that this option must be set to ``yes'' for
692 RhostsRSAAuthentication with older servers.
693
694 User Specifies the user to log in as. This can be useful when a
695 different user name is used on different machines. This saves
696 the trouble of having to remember to give the user name on the
697 command line.
698
699 UserKnownHostsFile
700 Specifies one or more files to use for the user host key
701 database, separated by whitespace. The default is
702 ~/.ssh/known_hosts, ~/.ssh/known_hosts2.
703
704 VerifyHostKeyDNS
705 Specifies whether to verify the remote key using DNS and SSHFP
706 resource records. If this option is set to ``yes'', the client
707 will implicitly trust keys that match a secure fingerprint from
708 DNS. Insecure fingerprints will be handled as if this option was
709 set to ``ask''. If this option is set to ``ask'', information on
710 fingerprint match will be displayed, but the user will still need
711 to confirm new host keys according to the StrictHostKeyChecking
712 option. The argument must be ``yes'', ``no'', or ``ask''. The
713 default is ``no''. Note that this option applies to protocol
714 version 2 only.
715
716 See also VERIFYING HOST KEYS in ssh(1).
717
718 VisualHostKey
719 If this flag is set to ``yes'', an ASCII art representation of
720 the remote host key fingerprint is printed in addition to the hex
721 fingerprint string at login and for unknown host keys. If this
722 flag is set to ``no'', no fingerprint strings are printed at
723 login and only the hex fingerprint string will be printed for
724 unknown host keys. The default is ``no''.
725
726 XAuthLocation
727 Specifies the full pathname of the xauth(1) program. The default
728 is /usr/X11R6/bin/xauth.
729
730PATTERNS
731 A pattern consists of zero or more non-whitespace characters, `*' (a
732 wildcard that matches zero or more characters), or `?' (a wildcard that
733 matches exactly one character). For example, to specify a set of
734 declarations for any host in the ``.co.uk'' set of domains, the following
735 pattern could be used:
736
737 Host *.co.uk
738
739 The following pattern would match any host in the 192.168.0.[0-9] network
740 range:
741
742 Host 192.168.0.?
743
744 A pattern-list is a comma-separated list of patterns. Patterns within
745 pattern-lists may be negated by preceding them with an exclamation mark
746 (`!'). For example, to allow a key to be used from anywhere within an
747 organisation except from the ``dialup'' pool, the following entry (in
748 authorized_keys) could be used:
749
750 from="!*.dialup.example.com,*.example.com"
751
752FILES
753 ~/.ssh/config
754 This is the per-user configuration file. The format of this file
755 is described above. This file is used by the SSH client.
756 Because of the potential for abuse, this file must have strict
757 permissions: read/write for the user, and not accessible by
758 others.
759
760 /etc/ssh/ssh_config
761 Systemwide configuration file. This file provides defaults for
762 those values that are not specified in the user's configuration
763 file, and for those users who do not have a configuration file.
764 This file must be world-readable.
765
766SEE ALSO
767 ssh(1)
768
769AUTHORS
770 OpenSSH is a derivative of the original and free ssh 1.2.12 release by
771 Tatu Ylonen. Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo
772 de Raadt and Dug Song removed many bugs, re-added newer features and
773 created OpenSSH. Markus Friedl contributed the support for SSH protocol
774 versions 1.5 and 2.0.
775
776OpenBSD 5.3 January 8, 2013 OpenBSD 5.3
diff --git a/sshd.0 b/sshd.0
new file mode 100644
index 000000000..83f9a881b
--- /dev/null
+++ b/sshd.0
@@ -0,0 +1,637 @@
1SSHD(8) OpenBSD System Manager's Manual SSHD(8)
2
3NAME
4 sshd - OpenSSH SSH daemon
5
6SYNOPSIS
7 sshd [-46DdeiqTt] [-b bits] [-C connection_spec]
8 [-c host_certificate_file] [-f config_file] [-g login_grace_time]
9 [-h host_key_file] [-k key_gen_time] [-o option] [-p port] [-u len]
10
11DESCRIPTION
12 sshd (OpenSSH Daemon) is the daemon program for ssh(1). Together these
13 programs replace rlogin(1) and rsh(1), and provide secure encrypted
14 communications between two untrusted hosts over an insecure network.
15
16 sshd listens for connections from clients. It is normally started at
17 boot from /etc/rc. It forks a new daemon for each incoming connection.
18 The forked daemons handle key exchange, encryption, authentication,
19 command execution, and data exchange.
20
21 sshd can be configured using command-line options or a configuration file
22 (by default sshd_config(5)); command-line options override values
23 specified in the configuration file. sshd rereads its configuration file
24 when it receives a hangup signal, SIGHUP, by executing itself with the
25 name and options it was started with, e.g. /usr/sbin/sshd.
26
27 The options are as follows:
28
29 -4 Forces sshd to use IPv4 addresses only.
30
31 -6 Forces sshd to use IPv6 addresses only.
32
33 -b bits
34 Specifies the number of bits in the ephemeral protocol version 1
35 server key (default 1024).
36
37 -C connection_spec
38 Specify the connection parameters to use for the -T extended test
39 mode. If provided, any Match directives in the configuration
40 file that would apply to the specified user, host, and address
41 will be set before the configuration is written to standard
42 output. The connection parameters are supplied as keyword=value
43 pairs. The keywords are ``user'', ``host'', ``laddr'',
44 ``lport'', and ``addr''. All are required and may be supplied in
45 any order, either with multiple -C options or as a comma-
46 separated list.
47
48 -c host_certificate_file
49 Specifies a path to a certificate file to identify sshd during
50 key exchange. The certificate file must match a host key file
51 specified using the -h option or the HostKey configuration
52 directive.
53
54 -D When this option is specified, sshd will not detach and does not
55 become a daemon. This allows easy monitoring of sshd.
56
57 -d Debug mode. The server sends verbose debug output to standard
58 error, and does not put itself in the background. The server
59 also will not fork and will only process one connection. This
60 option is only intended for debugging for the server. Multiple
61 -d options increase the debugging level. Maximum is 3.
62
63 -e When this option is specified, sshd will send the output to the
64 standard error instead of the system log.
65
66 -f config_file
67 Specifies the name of the configuration file. The default is
68 /etc/ssh/sshd_config. sshd refuses to start if there is no
69 configuration file.
70
71 -g login_grace_time
72 Gives the grace time for clients to authenticate themselves
73 (default 120 seconds). If the client fails to authenticate the
74 user within this many seconds, the server disconnects and exits.
75 A value of zero indicates no limit.
76
77 -h host_key_file
78 Specifies a file from which a host key is read. This option must
79 be given if sshd is not run as root (as the normal host key files
80 are normally not readable by anyone but root). The default is
81 /etc/ssh/ssh_host_key for protocol version 1, and
82 /etc/ssh/ssh_host_dsa_key, /etc/ssh/ssh_host_ecdsa_key and
83 /etc/ssh/ssh_host_rsa_key for protocol version 2. It is possible
84 to have multiple host key files for the different protocol
85 versions and host key algorithms.
86
87 -i Specifies that sshd is being run from inetd(8). sshd is normally
88 not run from inetd because it needs to generate the server key
89 before it can respond to the client, and this may take tens of
90 seconds. Clients would have to wait too long if the key was
91 regenerated every time. However, with small key sizes (e.g. 512)
92 using sshd from inetd may be feasible.
93
94 -k key_gen_time
95 Specifies how often the ephemeral protocol version 1 server key
96 is regenerated (default 3600 seconds, or one hour). The
97 motivation for regenerating the key fairly often is that the key
98 is not stored anywhere, and after about an hour it becomes
99 impossible to recover the key for decrypting intercepted
100 communications even if the machine is cracked into or physically
101 seized. A value of zero indicates that the key will never be
102 regenerated.
103
104 -o option
105 Can be used to give options in the format used in the
106 configuration file. This is useful for specifying options for
107 which there is no separate command-line flag. For full details
108 of the options, and their values, see sshd_config(5).
109
110 -p port
111 Specifies the port on which the server listens for connections
112 (default 22). Multiple port options are permitted. Ports
113 specified in the configuration file with the Port option are
114 ignored when a command-line port is specified. Ports specified
115 using the ListenAddress option override command-line ports.
116
117 -q Quiet mode. Nothing is sent to the system log. Normally the
118 beginning, authentication, and termination of each connection is
119 logged.
120
121 -T Extended test mode. Check the validity of the configuration
122 file, output the effective configuration to stdout and then exit.
123 Optionally, Match rules may be applied by specifying the
124 connection parameters using one or more -C options.
125
126 -t Test mode. Only check the validity of the configuration file and
127 sanity of the keys. This is useful for updating sshd reliably as
128 configuration options may change.
129
130 -u len This option is used to specify the size of the field in the utmp
131 structure that holds the remote host name. If the resolved host
132 name is longer than len, the dotted decimal value will be used
133 instead. This allows hosts with very long host names that
134 overflow this field to still be uniquely identified. Specifying
135 -u0 indicates that only dotted decimal addresses should be put
136 into the utmp file. -u0 may also be used to prevent sshd from
137 making DNS requests unless the authentication mechanism or
138 configuration requires it. Authentication mechanisms that may
139 require DNS include RhostsRSAAuthentication,
140 HostbasedAuthentication, and using a from="pattern-list" option
141 in a key file. Configuration options that require DNS include
142 using a USER@HOST pattern in AllowUsers or DenyUsers.
143
144AUTHENTICATION
145 The OpenSSH SSH daemon supports SSH protocols 1 and 2. The default is to
146 use protocol 2 only, though this can be changed via the Protocol option
147 in sshd_config(5). Protocol 2 supports DSA, ECDSA and RSA keys; protocol
148 1 only supports RSA keys. For both protocols, each host has a host-
149 specific key, normally 2048 bits, used to identify the host.
150
151 Forward security for protocol 1 is provided through an additional server
152 key, normally 768 bits, generated when the server starts. This key is
153 normally regenerated every hour if it has been used, and is never stored
154 on disk. Whenever a client connects, the daemon responds with its public
155 host and server keys. The client compares the RSA host key against its
156 own database to verify that it has not changed. The client then
157 generates a 256-bit random number. It encrypts this random number using
158 both the host key and the server key, and sends the encrypted number to
159 the server. Both sides then use this random number as a session key
160 which is used to encrypt all further communications in the session. The
161 rest of the session is encrypted using a conventional cipher, currently
162 Blowfish or 3DES, with 3DES being used by default. The client selects
163 the encryption algorithm to use from those offered by the server.
164
165 For protocol 2, forward security is provided through a Diffie-Hellman key
166 agreement. This key agreement results in a shared session key. The rest
167 of the session is encrypted using a symmetric cipher, currently 128-bit
168 AES, Blowfish, 3DES, CAST128, Arcfour, 192-bit AES, or 256-bit AES. The
169 client selects the encryption algorithm to use from those offered by the
170 server. Additionally, session integrity is provided through a
171 cryptographic message authentication code (hmac-md5, hmac-sha1, umac-64,
172 umac-128, hmac-ripemd160, hmac-sha2-256 or hmac-sha2-512).
173
174 Finally, the server and the client enter an authentication dialog. The
175 client tries to authenticate itself using host-based authentication,
176 public key authentication, challenge-response authentication, or password
177 authentication.
178
179 Regardless of the authentication type, the account is checked to ensure
180 that it is accessible. An account is not accessible if it is locked,
181 listed in DenyUsers or its group is listed in DenyGroups . The
182 definition of a locked account is system dependant. Some platforms have
183 their own account database (eg AIX) and some modify the passwd field (
184 `*LK*' on Solaris and UnixWare, `*' on HP-UX, containing `Nologin' on
185 Tru64, a leading `*LOCKED*' on FreeBSD and a leading `!' on most
186 Linuxes). If there is a requirement to disable password authentication
187 for the account while allowing still public-key, then the passwd field
188 should be set to something other than these values (eg `NP' or `*NP*' ).
189
190 If the client successfully authenticates itself, a dialog for preparing
191 the session is entered. At this time the client may request things like
192 allocating a pseudo-tty, forwarding X11 connections, forwarding TCP
193 connections, or forwarding the authentication agent connection over the
194 secure channel.
195
196 After this, the client either requests a shell or execution of a command.
197 The sides then enter session mode. In this mode, either side may send
198 data at any time, and such data is forwarded to/from the shell or command
199 on the server side, and the user terminal in the client side.
200
201 When the user program terminates and all forwarded X11 and other
202 connections have been closed, the server sends command exit status to the
203 client, and both sides exit.
204
205LOGIN PROCESS
206 When a user successfully logs in, sshd does the following:
207
208 1. If the login is on a tty, and no command has been specified,
209 prints last login time and /etc/motd (unless prevented in the
210 configuration file or by ~/.hushlogin; see the FILES section).
211
212 2. If the login is on a tty, records login time.
213
214 3. Checks /etc/nologin; if it exists, prints contents and quits
215 (unless root).
216
217 4. Changes to run with normal user privileges.
218
219 5. Sets up basic environment.
220
221 6. Reads the file ~/.ssh/environment, if it exists, and users are
222 allowed to change their environment. See the
223 PermitUserEnvironment option in sshd_config(5).
224
225 7. Changes to user's home directory.
226
227 8. If ~/.ssh/rc exists, runs it; else if /etc/ssh/sshrc exists,
228 runs it; otherwise runs xauth. The ``rc'' files are given the
229 X11 authentication protocol and cookie in standard input. See
230 SSHRC, below.
231
232 9. Runs user's shell or command.
233
234SSHRC
235 If the file ~/.ssh/rc exists, sh(1) runs it after reading the environment
236 files but before starting the user's shell or command. It must not
237 produce any output on stdout; stderr must be used instead. If X11
238 forwarding is in use, it will receive the "proto cookie" pair in its
239 standard input (and DISPLAY in its environment). The script must call
240 xauth(1) because sshd will not run xauth automatically to add X11
241 cookies.
242
243 The primary purpose of this file is to run any initialization routines
244 which may be needed before the user's home directory becomes accessible;
245 AFS is a particular example of such an environment.
246
247 This file will probably contain some initialization code followed by
248 something similar to:
249
250 if read proto cookie && [ -n "$DISPLAY" ]; then
251 if [ `echo $DISPLAY | cut -c1-10` = 'localhost:' ]; then
252 # X11UseLocalhost=yes
253 echo add unix:`echo $DISPLAY |
254 cut -c11-` $proto $cookie
255 else
256 # X11UseLocalhost=no
257 echo add $DISPLAY $proto $cookie
258 fi | xauth -q -
259 fi
260
261 If this file does not exist, /etc/ssh/sshrc is run, and if that does not
262 exist either, xauth is used to add the cookie.
263
264AUTHORIZED_KEYS FILE FORMAT
265 AuthorizedKeysFile specifies the files containing public keys for public
266 key authentication; if none is specified, the default is
267 ~/.ssh/authorized_keys and ~/.ssh/authorized_keys2. Each line of the
268 file contains one key (empty lines and lines starting with a `#' are
269 ignored as comments). Protocol 1 public keys consist of the following
270 space-separated fields: options, bits, exponent, modulus, comment.
271 Protocol 2 public key consist of: options, keytype, base64-encoded key,
272 comment. The options field is optional; its presence is determined by
273 whether the line starts with a number or not (the options field never
274 starts with a number). The bits, exponent, modulus, and comment fields
275 give the RSA key for protocol version 1; the comment field is not used
276 for anything (but may be convenient for the user to identify the key).
277 For protocol version 2 the keytype is ``ecdsa-sha2-nistp256'',
278 ``ecdsa-sha2-nistp384'', ``ecdsa-sha2-nistp521'', ``ssh-dss'' or
279 ``ssh-rsa''.
280
281 Note that lines in this file are usually several hundred bytes long
282 (because of the size of the public key encoding) up to a limit of 8
283 kilobytes, which permits DSA keys up to 8 kilobits and RSA keys up to 16
284 kilobits. You don't want to type them in; instead, copy the
285 identity.pub, id_dsa.pub, id_ecdsa.pub, or the id_rsa.pub file and edit
286 it.
287
288 sshd enforces a minimum RSA key modulus size for protocol 1 and protocol
289 2 keys of 768 bits.
290
291 The options (if present) consist of comma-separated option
292 specifications. No spaces are permitted, except within double quotes.
293 The following option specifications are supported (note that option
294 keywords are case-insensitive):
295
296 cert-authority
297 Specifies that the listed key is a certification authority (CA)
298 that is trusted to validate signed certificates for user
299 authentication.
300
301 Certificates may encode access restrictions similar to these key
302 options. If both certificate restrictions and key options are
303 present, the most restrictive union of the two is applied.
304
305 command="command"
306 Specifies that the command is executed whenever this key is used
307 for authentication. The command supplied by the user (if any) is
308 ignored. The command is run on a pty if the client requests a
309 pty; otherwise it is run without a tty. If an 8-bit clean
310 channel is required, one must not request a pty or should specify
311 no-pty. A quote may be included in the command by quoting it
312 with a backslash. This option might be useful to restrict
313 certain public keys to perform just a specific operation. An
314 example might be a key that permits remote backups but nothing
315 else. Note that the client may specify TCP and/or X11 forwarding
316 unless they are explicitly prohibited. The command originally
317 supplied by the client is available in the SSH_ORIGINAL_COMMAND
318 environment variable. Note that this option applies to shell,
319 command or subsystem execution. Also note that this command may
320 be superseded by either a sshd_config(5) ForceCommand directive
321 or a command embedded in a certificate.
322
323 environment="NAME=value"
324 Specifies that the string is to be added to the environment when
325 logging in using this key. Environment variables set this way
326 override other default environment values. Multiple options of
327 this type are permitted. Environment processing is disabled by
328 default and is controlled via the PermitUserEnvironment option.
329 This option is automatically disabled if UseLogin is enabled.
330
331 from="pattern-list"
332 Specifies that in addition to public key authentication, either
333 the canonical name of the remote host or its IP address must be
334 present in the comma-separated list of patterns. See PATTERNS in
335 ssh_config(5) for more information on patterns.
336
337 In addition to the wildcard matching that may be applied to
338 hostnames or addresses, a from stanza may match IP addresses
339 using CIDR address/masklen notation.
340
341 The purpose of this option is to optionally increase security:
342 public key authentication by itself does not trust the network or
343 name servers or anything (but the key); however, if somebody
344 somehow steals the key, the key permits an intruder to log in
345 from anywhere in the world. This additional option makes using a
346 stolen key more difficult (name servers and/or routers would have
347 to be compromised in addition to just the key).
348
349 no-agent-forwarding
350 Forbids authentication agent forwarding when this key is used for
351 authentication.
352
353 no-port-forwarding
354 Forbids TCP forwarding when this key is used for authentication.
355 Any port forward requests by the client will return an error.
356 This might be used, e.g. in connection with the command option.
357
358 no-pty Prevents tty allocation (a request to allocate a pty will fail).
359
360 no-user-rc
361 Disables execution of ~/.ssh/rc.
362
363 no-X11-forwarding
364 Forbids X11 forwarding when this key is used for authentication.
365 Any X11 forward requests by the client will return an error.
366
367 permitopen="host:port"
368 Limit local ``ssh -L'' port forwarding such that it may only
369 connect to the specified host and port. IPv6 addresses can be
370 specified by enclosing the address in square brackets. Multiple
371 permitopen options may be applied separated by commas. No
372 pattern matching is performed on the specified hostnames, they
373 must be literal domains or addresses. A port specification of *
374 matches any port.
375
376 principals="principals"
377 On a cert-authority line, specifies allowed principals for
378 certificate authentication as a comma-separated list. At least
379 one name from the list must appear in the certificate's list of
380 principals for the certificate to be accepted. This option is
381 ignored for keys that are not marked as trusted certificate
382 signers using the cert-authority option.
383
384 tunnel="n"
385 Force a tun(4) device on the server. Without this option, the
386 next available device will be used if the client requests a
387 tunnel.
388
389 An example authorized_keys file:
390
391 # Comments allowed at start of line
392 ssh-rsa AAAAB3Nza...LiPk== user@example.net
393 from="*.sales.example.net,!pc.sales.example.net" ssh-rsa
394 AAAAB2...19Q== john@example.net
395 command="dump /home",no-pty,no-port-forwarding ssh-dss
396 AAAAC3...51R== example.net
397 permitopen="192.0.2.1:80",permitopen="192.0.2.2:25" ssh-dss
398 AAAAB5...21S==
399 tunnel="0",command="sh /etc/netstart tun0" ssh-rsa AAAA...==
400 jane@example.net
401
402SSH_KNOWN_HOSTS FILE FORMAT
403 The /etc/ssh/ssh_known_hosts and ~/.ssh/known_hosts files contain host
404 public keys for all known hosts. The global file should be prepared by
405 the administrator (optional), and the per-user file is maintained
406 automatically: whenever the user connects from an unknown host, its key
407 is added to the per-user file.
408
409 Each line in these files contains the following fields: markers
410 (optional), hostnames, bits, exponent, modulus, comment. The fields are
411 separated by spaces.
412
413 The marker is optional, but if it is present then it must be one of
414 ``@cert-authority'', to indicate that the line contains a certification
415 authority (CA) key, or ``@revoked'', to indicate that the key contained
416 on the line is revoked and must not ever be accepted. Only one marker
417 should be used on a key line.
418
419 Hostnames is a comma-separated list of patterns (`*' and `?' act as
420 wildcards); each pattern in turn is matched against the canonical host
421 name (when authenticating a client) or against the user-supplied name
422 (when authenticating a server). A pattern may also be preceded by `!' to
423 indicate negation: if the host name matches a negated pattern, it is not
424 accepted (by that line) even if it matched another pattern on the line.
425 A hostname or address may optionally be enclosed within `[' and `]'
426 brackets then followed by `:' and a non-standard port number.
427
428 Alternately, hostnames may be stored in a hashed form which hides host
429 names and addresses should the file's contents be disclosed. Hashed
430 hostnames start with a `|' character. Only one hashed hostname may
431 appear on a single line and none of the above negation or wildcard
432 operators may be applied.
433
434 Bits, exponent, and modulus are taken directly from the RSA host key;
435 they can be obtained, for example, from /etc/ssh/ssh_host_key.pub. The
436 optional comment field continues to the end of the line, and is not used.
437
438 Lines starting with `#' and empty lines are ignored as comments.
439
440 When performing host authentication, authentication is accepted if any
441 matching line has the proper key; either one that matches exactly or, if
442 the server has presented a certificate for authentication, the key of the
443 certification authority that signed the certificate. For a key to be
444 trusted as a certification authority, it must use the ``@cert-authority''
445 marker described above.
446
447 The known hosts file also provides a facility to mark keys as revoked,
448 for example when it is known that the associated private key has been
449 stolen. Revoked keys are specified by including the ``@revoked'' marker
450 at the beginning of the key line, and are never accepted for
451 authentication or as certification authorities, but instead will produce
452 a warning from ssh(1) when they are encountered.
453
454 It is permissible (but not recommended) to have several lines or
455 different host keys for the same names. This will inevitably happen when
456 short forms of host names from different domains are put in the file. It
457 is possible that the files contain conflicting information;
458 authentication is accepted if valid information can be found from either
459 file.
460
461 Note that the lines in these files are typically hundreds of characters
462 long, and you definitely don't want to type in the host keys by hand.
463 Rather, generate them by a script, ssh-keyscan(1) or by taking
464 /etc/ssh/ssh_host_key.pub and adding the host names at the front.
465 ssh-keygen(1) also offers some basic automated editing for
466 ~/.ssh/known_hosts including removing hosts matching a host name and
467 converting all host names to their hashed representations.
468
469 An example ssh_known_hosts file:
470
471 # Comments allowed at start of line
472 closenet,...,192.0.2.53 1024 37 159...93 closenet.example.net
473 cvs.example.net,192.0.2.10 ssh-rsa AAAA1234.....=
474 # A hashed hostname
475 |1|JfKTdBh7rNbXkVAQCRp4OQoPfmI=|USECr3SWf1JUPsms5AqfD5QfxkM= ssh-rsa
476 AAAA1234.....=
477 # A revoked key
478 @revoked * ssh-rsa AAAAB5W...
479 # A CA key, accepted for any host in *.mydomain.com or *.mydomain.org
480 @cert-authority *.mydomain.org,*.mydomain.com ssh-rsa AAAAB5W...
481
482FILES
483 ~/.hushlogin
484 This file is used to suppress printing the last login time and
485 /etc/motd, if PrintLastLog and PrintMotd, respectively, are
486 enabled. It does not suppress printing of the banner specified
487 by Banner.
488
489 ~/.rhosts
490 This file is used for host-based authentication (see ssh(1) for
491 more information). On some machines this file may need to be
492 world-readable if the user's home directory is on an NFS
493 partition, because sshd reads it as root. Additionally, this
494 file must be owned by the user, and must not have write
495 permissions for anyone else. The recommended permission for most
496 machines is read/write for the user, and not accessible by
497 others.
498
499 ~/.shosts
500 This file is used in exactly the same way as .rhosts, but allows
501 host-based authentication without permitting login with
502 rlogin/rsh.
503
504 ~/.ssh/
505 This directory is the default location for all user-specific
506 configuration and authentication information. There is no
507 general requirement to keep the entire contents of this directory
508 secret, but the recommended permissions are read/write/execute
509 for the user, and not accessible by others.
510
511 ~/.ssh/authorized_keys
512 Lists the public keys (DSA/ECDSA/RSA) that can be used for
513 logging in as this user. The format of this file is described
514 above. The content of the file is not highly sensitive, but the
515 recommended permissions are read/write for the user, and not
516 accessible by others.
517
518 If this file, the ~/.ssh directory, or the user's home directory
519 are writable by other users, then the file could be modified or
520 replaced by unauthorized users. In this case, sshd will not
521 allow it to be used unless the StrictModes option has been set to
522 ``no''.
523
524 ~/.ssh/environment
525 This file is read into the environment at login (if it exists).
526 It can only contain empty lines, comment lines (that start with
527 `#'), and assignment lines of the form name=value. The file
528 should be writable only by the user; it need not be readable by
529 anyone else. Environment processing is disabled by default and
530 is controlled via the PermitUserEnvironment option.
531
532 ~/.ssh/known_hosts
533 Contains a list of host keys for all hosts the user has logged
534 into that are not already in the systemwide list of known host
535 keys. The format of this file is described above. This file
536 should be writable only by root/the owner and can, but need not
537 be, world-readable.
538
539 ~/.ssh/rc
540 Contains initialization routines to be run before the user's home
541 directory becomes accessible. This file should be writable only
542 by the user, and need not be readable by anyone else.
543
544 /etc/hosts.allow
545 /etc/hosts.deny
546 Access controls that should be enforced by tcp-wrappers are
547 defined here. Further details are described in hosts_access(5).
548
549 /etc/hosts.equiv
550 This file is for host-based authentication (see ssh(1)). It
551 should only be writable by root.
552
553 /etc/moduli
554 Contains Diffie-Hellman groups used for the "Diffie-Hellman Group
555 Exchange". The file format is described in moduli(5).
556
557 /etc/motd
558 See motd(5).
559
560 /etc/nologin
561 If this file exists, sshd refuses to let anyone except root log
562 in. The contents of the file are displayed to anyone trying to
563 log in, and non-root connections are refused. The file should be
564 world-readable.
565
566 /etc/shosts.equiv
567 This file is used in exactly the same way as hosts.equiv, but
568 allows host-based authentication without permitting login with
569 rlogin/rsh.
570
571 /etc/ssh/ssh_host_key
572 /etc/ssh/ssh_host_dsa_key
573 /etc/ssh/ssh_host_ecdsa_key
574 /etc/ssh/ssh_host_rsa_key
575 These files contain the private parts of the host keys. These
576 files should only be owned by root, readable only by root, and
577 not accessible to others. Note that sshd does not start if these
578 files are group/world-accessible.
579
580 /etc/ssh/ssh_host_key.pub
581 /etc/ssh/ssh_host_dsa_key.pub
582 /etc/ssh/ssh_host_ecdsa_key.pub
583 /etc/ssh/ssh_host_rsa_key.pub
584 These files contain the public parts of the host keys. These
585 files should be world-readable but writable only by root. Their
586 contents should match the respective private parts. These files
587 are not really used for anything; they are provided for the
588 convenience of the user so their contents can be copied to known
589 hosts files. These files are created using ssh-keygen(1).
590
591 /etc/ssh/ssh_known_hosts
592 Systemwide list of known host keys. This file should be prepared
593 by the system administrator to contain the public host keys of
594 all machines in the organization. The format of this file is
595 described above. This file should be writable only by root/the
596 owner and should be world-readable.
597
598 /etc/ssh/sshd_config
599 Contains configuration data for sshd. The file format and
600 configuration options are described in sshd_config(5).
601
602 /etc/ssh/sshrc
603 Similar to ~/.ssh/rc, it can be used to specify machine-specific
604 login-time initializations globally. This file should be
605 writable only by root, and should be world-readable.
606
607 /var/empty
608 chroot(2) directory used by sshd during privilege separation in
609 the pre-authentication phase. The directory should not contain
610 any files and must be owned by root and not group or world-
611 writable.
612
613 /var/run/sshd.pid
614 Contains the process ID of the sshd listening for connections (if
615 there are several daemons running concurrently for different
616 ports, this contains the process ID of the one started last).
617 The content of this file is not sensitive; it can be world-
618 readable.
619
620SEE ALSO
621 scp(1), sftp(1), ssh(1), ssh-add(1), ssh-agent(1), ssh-keygen(1),
622 ssh-keyscan(1), chroot(2), hosts_access(5), login.conf(5), moduli(5),
623 sshd_config(5), inetd(8), sftp-server(8)
624
625AUTHORS
626 OpenSSH is a derivative of the original and free ssh 1.2.12 release by
627 Tatu Ylonen. Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo
628 de Raadt and Dug Song removed many bugs, re-added newer features and
629 created OpenSSH. Markus Friedl contributed the support for SSH protocol
630 versions 1.5 and 2.0. Niels Provos and Markus Friedl contributed support
631 for privilege separation.
632
633CAVEATS
634 System security is not improved unless rshd, rlogind, and rexecd are
635 disabled (thus completely disabling rlogin and rsh into the machine).
636
637OpenBSD 5.3 October 4, 2012 OpenBSD 5.3
diff --git a/sshd_config.0 b/sshd_config.0
new file mode 100644
index 000000000..2648db3d4
--- /dev/null
+++ b/sshd_config.0
@@ -0,0 +1,780 @@
1SSHD_CONFIG(5) OpenBSD Programmer's Manual SSHD_CONFIG(5)
2
3NAME
4 sshd_config - OpenSSH SSH daemon configuration file
5
6SYNOPSIS
7 /etc/ssh/sshd_config
8
9DESCRIPTION
10 sshd(8) reads configuration data from /etc/ssh/sshd_config (or the file
11 specified with -f on the command line). The file contains keyword-
12 argument pairs, one per line. Lines starting with `#' and empty lines
13 are interpreted as comments. Arguments may optionally be enclosed in
14 double quotes (") in order to represent arguments containing spaces.
15
16 The possible keywords and their meanings are as follows (note that
17 keywords are case-insensitive and arguments are case-sensitive):
18
19 AcceptEnv
20 Specifies what environment variables sent by the client will be
21 copied into the session's environ(7). See SendEnv in
22 ssh_config(5) for how to configure the client. Note that
23 environment passing is only supported for protocol 2. Variables
24 are specified by name, which may contain the wildcard characters
25 `*' and `?'. Multiple environment variables may be separated by
26 whitespace or spread across multiple AcceptEnv directives. Be
27 warned that some environment variables could be used to bypass
28 restricted user environments. For this reason, care should be
29 taken in the use of this directive. The default is not to accept
30 any environment variables.
31
32 AddressFamily
33 Specifies which address family should be used by sshd(8). Valid
34 arguments are ``any'', ``inet'' (use IPv4 only), or ``inet6''
35 (use IPv6 only). The default is ``any''.
36
37 AllowAgentForwarding
38 Specifies whether ssh-agent(1) forwarding is permitted. The
39 default is ``yes''. Note that disabling agent forwarding does
40 not improve security unless users are also denied shell access,
41 as they can always install their own forwarders.
42
43 AllowGroups
44 This keyword can be followed by a list of group name patterns,
45 separated by spaces. If specified, login is allowed only for
46 users whose primary group or supplementary group list matches one
47 of the patterns. Only group names are valid; a numerical group
48 ID is not recognized. By default, login is allowed for all
49 groups. The allow/deny directives are processed in the following
50 order: DenyUsers, AllowUsers, DenyGroups, and finally
51 AllowGroups.
52
53 See PATTERNS in ssh_config(5) for more information on patterns.
54
55 AllowTcpForwarding
56 Specifies whether TCP forwarding is permitted. The available
57 options are ``yes'' or ``all'' to allow TCP forwarding, ``no'' to
58 prevent all TCP forwarding, ``local'' to allow local (from the
59 perspective of ssh(1)) forwarding only or ``remote'' to allow
60 remote forwarding only. The default is ``yes''. Note that
61 disabling TCP forwarding does not improve security unless users
62 are also denied shell access, as they can always install their
63 own forwarders.
64
65 AllowUsers
66 This keyword can be followed by a list of user name patterns,
67 separated by spaces. If specified, login is allowed only for
68 user names that match one of the patterns. Only user names are
69 valid; a numerical user ID is not recognized. By default, login
70 is allowed for all users. If the pattern takes the form
71 USER@HOST then USER and HOST are separately checked, restricting
72 logins to particular users from particular hosts. The allow/deny
73 directives are processed in the following order: DenyUsers,
74 AllowUsers, DenyGroups, and finally AllowGroups.
75
76 See PATTERNS in ssh_config(5) for more information on patterns.
77
78 AuthenticationMethods
79 Specifies the authentication methods that must be successfully
80 completed for a user to be granted access. This option must be
81 followed by one or more comma-separated lists of authentication
82 method names. Successful authentication requires completion of
83 every method in at least one of these lists.
84
85 For example, an argument of ``publickey,password
86 publickey,keyboard-interactive'' would require the user to
87 complete public key authentication, followed by either password
88 or keyboard interactive authentication. Only methods that are
89 next in one or more lists are offered at each stage, so for this
90 example, it would not be possible to attempt password or
91 keyboard-interactive authentication before public key.
92
93 This option is only available for SSH protocol 2 and will yield a
94 fatal error if enabled if protocol 1 is also enabled. Note that
95 each authentication method listed should also be explicitly
96 enabled in the configuration. The default is not to require
97 multiple authentication; successful completion of a single
98 authentication method is sufficient.
99
100 AuthorizedKeysCommand
101 Specifies a program to be used to look up the user's public keys.
102 The program will be invoked with a single argument of the
103 username being authenticated, and should produce on standard
104 output zero or more lines of authorized_keys output (see
105 AUTHORIZED_KEYS in sshd(8)). If a key supplied by
106 AuthorizedKeysCommand does not successfully authenticate and
107 authorize the user then public key authentication continues using
108 the usual AuthorizedKeysFile files. By default, no
109 AuthorizedKeysCommand is run.
110
111 AuthorizedKeysCommandUser
112 Specifies the user under whose account the AuthorizedKeysCommand
113 is run. It is recommended to use a dedicated user that has no
114 other role on the host than running authorized keys commands.
115
116 AuthorizedKeysFile
117 Specifies the file that contains the public keys that can be used
118 for user authentication. The format is described in the
119 AUTHORIZED_KEYS FILE FORMAT section of sshd(8).
120 AuthorizedKeysFile may contain tokens of the form %T which are
121 substituted during connection setup. The following tokens are
122 defined: %% is replaced by a literal '%', %h is replaced by the
123 home directory of the user being authenticated, and %u is
124 replaced by the username of that user. After expansion,
125 AuthorizedKeysFile is taken to be an absolute path or one
126 relative to the user's home directory. Multiple files may be
127 listed, separated by whitespace. The default is
128 ``.ssh/authorized_keys .ssh/authorized_keys2''.
129
130 AuthorizedPrincipalsFile
131 Specifies a file that lists principal names that are accepted for
132 certificate authentication. When using certificates signed by a
133 key listed in TrustedUserCAKeys, this file lists names, one of
134 which must appear in the certificate for it to be accepted for
135 authentication. Names are listed one per line preceded by key
136 options (as described in AUTHORIZED_KEYS FILE FORMAT in sshd(8)).
137 Empty lines and comments starting with `#' are ignored.
138
139 AuthorizedPrincipalsFile may contain tokens of the form %T which
140 are substituted during connection setup. The following tokens
141 are defined: %% is replaced by a literal '%', %h is replaced by
142 the home directory of the user being authenticated, and %u is
143 replaced by the username of that user. After expansion,
144 AuthorizedPrincipalsFile is taken to be an absolute path or one
145 relative to the user's home directory.
146
147 The default is ``none'', i.e. not to use a principals file - in
148 this case, the username of the user must appear in a
149 certificate's principals list for it to be accepted. Note that
150 AuthorizedPrincipalsFile is only used when authentication
151 proceeds using a CA listed in TrustedUserCAKeys and is not
152 consulted for certification authorities trusted via
153 ~/.ssh/authorized_keys, though the principals= key option offers
154 a similar facility (see sshd(8) for details).
155
156 Banner The contents of the specified file are sent to the remote user
157 before authentication is allowed. If the argument is ``none''
158 then no banner is displayed. This option is only available for
159 protocol version 2. By default, no banner is displayed.
160
161 ChallengeResponseAuthentication
162 Specifies whether challenge-response authentication is allowed
163 (e.g. via PAM or though authentication styles supported in
164 login.conf(5)) The default is ``yes''.
165
166 ChrootDirectory
167 Specifies the pathname of a directory to chroot(2) to after
168 authentication. All components of the pathname must be root-
169 owned directories that are not writable by any other user or
170 group. After the chroot, sshd(8) changes the working directory
171 to the user's home directory.
172
173 The pathname may contain the following tokens that are expanded
174 at runtime once the connecting user has been authenticated: %% is
175 replaced by a literal '%', %h is replaced by the home directory
176 of the user being authenticated, and %u is replaced by the
177 username of that user.
178
179 The ChrootDirectory must contain the necessary files and
180 directories to support the user's session. For an interactive
181 session this requires at least a shell, typically sh(1), and
182 basic /dev nodes such as null(4), zero(4), stdin(4), stdout(4),
183 stderr(4), arandom(4) and tty(4) devices. For file transfer
184 sessions using ``sftp'', no additional configuration of the
185 environment is necessary if the in-process sftp server is used,
186 though sessions which use logging do require /dev/log inside the
187 chroot directory (see sftp-server(8) for details).
188
189 The default is not to chroot(2).
190
191 Ciphers
192 Specifies the ciphers allowed for protocol version 2. Multiple
193 ciphers must be comma-separated. The supported ciphers are
194 ``3des-cbc'', ``aes128-cbc'', ``aes192-cbc'', ``aes256-cbc'',
195 ``aes128-ctr'', ``aes192-ctr'', ``aes256-ctr'',
196 ``aes128-gcm@openssh.com'', ``aes256-gcm@openssh.com'',
197 ``arcfour128'', ``arcfour256'', ``arcfour'', ``blowfish-cbc'',
198 and ``cast128-cbc''. The default is:
199
200 aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,
201 aes128-gcm@openssh.com,aes256-gcm@openssh.com,
202 aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,
203 aes256-cbc,arcfour
204
205 ClientAliveCountMax
206 Sets the number of client alive messages (see below) which may be
207 sent without sshd(8) receiving any messages back from the client.
208 If this threshold is reached while client alive messages are
209 being sent, sshd will disconnect the client, terminating the
210 session. It is important to note that the use of client alive
211 messages is very different from TCPKeepAlive (below). The client
212 alive messages are sent through the encrypted channel and
213 therefore will not be spoofable. The TCP keepalive option
214 enabled by TCPKeepAlive is spoofable. The client alive mechanism
215 is valuable when the client or server depend on knowing when a
216 connection has become inactive.
217
218 The default value is 3. If ClientAliveInterval (see below) is
219 set to 15, and ClientAliveCountMax is left at the default,
220 unresponsive SSH clients will be disconnected after approximately
221 45 seconds. This option applies to protocol version 2 only.
222
223 ClientAliveInterval
224 Sets a timeout interval in seconds after which if no data has
225 been received from the client, sshd(8) will send a message
226 through the encrypted channel to request a response from the
227 client. The default is 0, indicating that these messages will
228 not be sent to the client. This option applies to protocol
229 version 2 only.
230
231 Compression
232 Specifies whether compression is allowed, or delayed until the
233 user has authenticated successfully. The argument must be
234 ``yes'', ``delayed'', or ``no''. The default is ``delayed''.
235
236 DenyGroups
237 This keyword can be followed by a list of group name patterns,
238 separated by spaces. Login is disallowed for users whose primary
239 group or supplementary group list matches one of the patterns.
240 Only group names are valid; a numerical group ID is not
241 recognized. By default, login is allowed for all groups. The
242 allow/deny directives are processed in the following order:
243 DenyUsers, AllowUsers, DenyGroups, and finally AllowGroups.
244
245 See PATTERNS in ssh_config(5) for more information on patterns.
246
247 DenyUsers
248 This keyword can be followed by a list of user name patterns,
249 separated by spaces. Login is disallowed for user names that
250 match one of the patterns. Only user names are valid; a
251 numerical user ID is not recognized. By default, login is
252 allowed for all users. If the pattern takes the form USER@HOST
253 then USER and HOST are separately checked, restricting logins to
254 particular users from particular hosts. The allow/deny
255 directives are processed in the following order: DenyUsers,
256 AllowUsers, DenyGroups, and finally AllowGroups.
257
258 See PATTERNS in ssh_config(5) for more information on patterns.
259
260 ForceCommand
261 Forces the execution of the command specified by ForceCommand,
262 ignoring any command supplied by the client and ~/.ssh/rc if
263 present. The command is invoked by using the user's login shell
264 with the -c option. This applies to shell, command, or subsystem
265 execution. It is most useful inside a Match block. The command
266 originally supplied by the client is available in the
267 SSH_ORIGINAL_COMMAND environment variable. Specifying a command
268 of ``internal-sftp'' will force the use of an in-process sftp
269 server that requires no support files when used with
270 ChrootDirectory.
271
272 GatewayPorts
273 Specifies whether remote hosts are allowed to connect to ports
274 forwarded for the client. By default, sshd(8) binds remote port
275 forwardings to the loopback address. This prevents other remote
276 hosts from connecting to forwarded ports. GatewayPorts can be
277 used to specify that sshd should allow remote port forwardings to
278 bind to non-loopback addresses, thus allowing other hosts to
279 connect. The argument may be ``no'' to force remote port
280 forwardings to be available to the local host only, ``yes'' to
281 force remote port forwardings to bind to the wildcard address, or
282 ``clientspecified'' to allow the client to select the address to
283 which the forwarding is bound. The default is ``no''.
284
285 GSSAPIAuthentication
286 Specifies whether user authentication based on GSSAPI is allowed.
287 The default is ``no''. Note that this option applies to protocol
288 version 2 only.
289
290 GSSAPICleanupCredentials
291 Specifies whether to automatically destroy the user's credentials
292 cache on logout. The default is ``yes''. Note that this option
293 applies to protocol version 2 only.
294
295 HostbasedAuthentication
296 Specifies whether rhosts or /etc/hosts.equiv authentication
297 together with successful public key client host authentication is
298 allowed (host-based authentication). This option is similar to
299 RhostsRSAAuthentication and applies to protocol version 2 only.
300 The default is ``no''.
301
302 HostbasedUsesNameFromPacketOnly
303 Specifies whether or not the server will attempt to perform a
304 reverse name lookup when matching the name in the ~/.shosts,
305 ~/.rhosts, and /etc/hosts.equiv files during
306 HostbasedAuthentication. A setting of ``yes'' means that sshd(8)
307 uses the name supplied by the client rather than attempting to
308 resolve the name from the TCP connection itself. The default is
309 ``no''.
310
311 HostCertificate
312 Specifies a file containing a public host certificate. The
313 certificate's public key must match a private host key already
314 specified by HostKey. The default behaviour of sshd(8) is not to
315 load any certificates.
316
317 HostKey
318 Specifies a file containing a private host key used by SSH. The
319 default is /etc/ssh/ssh_host_key for protocol version 1, and
320 /etc/ssh/ssh_host_dsa_key, /etc/ssh/ssh_host_ecdsa_key and
321 /etc/ssh/ssh_host_rsa_key for protocol version 2. Note that
322 sshd(8) will refuse to use a file if it is group/world-
323 accessible. It is possible to have multiple host key files.
324 ``rsa1'' keys are used for version 1 and ``dsa'', ``ecdsa'' or
325 ``rsa'' are used for version 2 of the SSH protocol.
326
327 IgnoreRhosts
328 Specifies that .rhosts and .shosts files will not be used in
329 RhostsRSAAuthentication or HostbasedAuthentication.
330
331 /etc/hosts.equiv and /etc/shosts.equiv are still used. The
332 default is ``yes''.
333
334 IgnoreUserKnownHosts
335 Specifies whether sshd(8) should ignore the user's
336 ~/.ssh/known_hosts during RhostsRSAAuthentication or
337 HostbasedAuthentication. The default is ``no''.
338
339 IPQoS Specifies the IPv4 type-of-service or DSCP class for the
340 connection. Accepted values are ``af11'', ``af12'', ``af13'',
341 ``af21'', ``af22'', ``af23'', ``af31'', ``af32'', ``af33'',
342 ``af41'', ``af42'', ``af43'', ``cs0'', ``cs1'', ``cs2'', ``cs3'',
343 ``cs4'', ``cs5'', ``cs6'', ``cs7'', ``ef'', ``lowdelay'',
344 ``throughput'', ``reliability'', or a numeric value. This option
345 may take one or two arguments, separated by whitespace. If one
346 argument is specified, it is used as the packet class
347 unconditionally. If two values are specified, the first is
348 automatically selected for interactive sessions and the second
349 for non-interactive sessions. The default is ``lowdelay'' for
350 interactive sessions and ``throughput'' for non-interactive
351 sessions.
352
353 KerberosAuthentication
354 Specifies whether the password provided by the user for
355 PasswordAuthentication will be validated through the Kerberos
356 KDC. To use this option, the server needs a Kerberos servtab
357 which allows the verification of the KDC's identity. The default
358 is ``no''.
359
360 KerberosGetAFSToken
361 If AFS is active and the user has a Kerberos 5 TGT, attempt to
362 acquire an AFS token before accessing the user's home directory.
363 The default is ``no''.
364
365 KerberosOrLocalPasswd
366 If password authentication through Kerberos fails then the
367 password will be validated via any additional local mechanism
368 such as /etc/passwd. The default is ``yes''.
369
370 KerberosTicketCleanup
371 Specifies whether to automatically destroy the user's ticket
372 cache file on logout. The default is ``yes''.
373
374 KexAlgorithms
375 Specifies the available KEX (Key Exchange) algorithms. Multiple
376 algorithms must be comma-separated. The default is
377 ``ecdh-sha2-nistp256'', ``ecdh-sha2-nistp384'',
378 ``ecdh-sha2-nistp521'', ``diffie-hellman-group-exchange-sha256'',
379 ``diffie-hellman-group-exchange-sha1'',
380 ``diffie-hellman-group14-sha1'', ``diffie-hellman-group1-sha1''.
381
382 KeyRegenerationInterval
383 In protocol version 1, the ephemeral server key is automatically
384 regenerated after this many seconds (if it has been used). The
385 purpose of regeneration is to prevent decrypting captured
386 sessions by later breaking into the machine and stealing the
387 keys. The key is never stored anywhere. If the value is 0, the
388 key is never regenerated. The default is 3600 (seconds).
389
390 ListenAddress
391 Specifies the local addresses sshd(8) should listen on. The
392 following forms may be used:
393
394 ListenAddress host|IPv4_addr|IPv6_addr
395 ListenAddress host|IPv4_addr:port
396 ListenAddress [host|IPv6_addr]:port
397
398 If port is not specified, sshd will listen on the address and all
399 prior Port options specified. The default is to listen on all
400 local addresses. Multiple ListenAddress options are permitted.
401 Additionally, any Port options must precede this option for non-
402 port qualified addresses.
403
404 LoginGraceTime
405 The server disconnects after this time if the user has not
406 successfully logged in. If the value is 0, there is no time
407 limit. The default is 120 seconds.
408
409 LogLevel
410 Gives the verbosity level that is used when logging messages from
411 sshd(8). The possible values are: QUIET, FATAL, ERROR, INFO,
412 VERBOSE, DEBUG, DEBUG1, DEBUG2, and DEBUG3. The default is INFO.
413 DEBUG and DEBUG1 are equivalent. DEBUG2 and DEBUG3 each specify
414 higher levels of debugging output. Logging with a DEBUG level
415 violates the privacy of users and is not recommended.
416
417 MACs Specifies the available MAC (message authentication code)
418 algorithms. The MAC algorithm is used in protocol version 2 for
419 data integrity protection. Multiple algorithms must be comma-
420 separated. The algorithms that contain ``-etm'' calculate the
421 MAC after encryption (encrypt-then-mac). These are considered
422 safer and their use recommended. The default is:
423
424 hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,
425 umac-64-etm@openssh.com,umac-128-etm@openssh.com,
426 hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,
427 hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,
428 hmac-md5-96-etm@openssh.com,
429 hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,
430 hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,
431 hmac-sha1-96,hmac-md5-96
432
433 Match Introduces a conditional block. If all of the criteria on the
434 Match line are satisfied, the keywords on the following lines
435 override those set in the global section of the config file,
436 until either another Match line or the end of the file.
437
438 The arguments to Match are one or more criteria-pattern pairs.
439 The available criteria are User, Group, Host, LocalAddress,
440 LocalPort, and Address. The match patterns may consist of single
441 entries or comma-separated lists and may use the wildcard and
442 negation operators described in the PATTERNS section of
443 ssh_config(5).
444
445 The patterns in an Address criteria may additionally contain
446 addresses to match in CIDR address/masklen format, e.g.
447 ``192.0.2.0/24'' or ``3ffe:ffff::/32''. Note that the mask
448 length provided must be consistent with the address - it is an
449 error to specify a mask length that is too long for the address
450 or one with bits set in this host portion of the address. For
451 example, ``192.0.2.0/33'' and ``192.0.2.0/8'' respectively.
452
453 Only a subset of keywords may be used on the lines following a
454 Match keyword. Available keywords are AcceptEnv,
455 AllowAgentForwarding, AllowGroups, AllowTcpForwarding,
456 AllowUsers, AuthenticationMethods, AuthorizedKeysCommand,
457 AuthorizedKeysCommandUser, AuthorizedKeysFile,
458 AuthorizedPrincipalsFile, Banner, ChrootDirectory, DenyGroups,
459 DenyUsers, ForceCommand, GatewayPorts, GSSAPIAuthentication,
460 HostbasedAuthentication, HostbasedUsesNameFromPacketOnly,
461 KbdInteractiveAuthentication, KerberosAuthentication,
462 MaxAuthTries, MaxSessions, PasswordAuthentication,
463 PermitEmptyPasswords, PermitOpen, PermitRootLogin, PermitTunnel,
464 PubkeyAuthentication, RhostsRSAAuthentication, RSAAuthentication,
465 X11DisplayOffset, X11Forwarding and X11UseLocalHost.
466
467 MaxAuthTries
468 Specifies the maximum number of authentication attempts permitted
469 per connection. Once the number of failures reaches half this
470 value, additional failures are logged. The default is 6.
471
472 MaxSessions
473 Specifies the maximum number of open sessions permitted per
474 network connection. The default is 10.
475
476 MaxStartups
477 Specifies the maximum number of concurrent unauthenticated
478 connections to the SSH daemon. Additional connections will be
479 dropped until authentication succeeds or the LoginGraceTime
480 expires for a connection. The default is 10:30:100.
481
482 Alternatively, random early drop can be enabled by specifying the
483 three colon separated values ``start:rate:full'' (e.g.
484 "10:30:60"). sshd(8) will refuse connection attempts with a
485 probability of ``rate/100'' (30%) if there are currently
486 ``start'' (10) unauthenticated connections. The probability
487 increases linearly and all connection attempts are refused if the
488 number of unauthenticated connections reaches ``full'' (60).
489
490 PasswordAuthentication
491 Specifies whether password authentication is allowed. The
492 default is ``yes''.
493
494 PermitEmptyPasswords
495 When password authentication is allowed, it specifies whether the
496 server allows login to accounts with empty password strings. The
497 default is ``no''.
498
499 PermitOpen
500 Specifies the destinations to which TCP port forwarding is
501 permitted. The forwarding specification must be one of the
502 following forms:
503
504 PermitOpen host:port
505 PermitOpen IPv4_addr:port
506 PermitOpen [IPv6_addr]:port
507
508 Multiple forwards may be specified by separating them with
509 whitespace. An argument of ``any'' can be used to remove all
510 restrictions and permit any forwarding requests. An argument of
511 ``none'' can be used to prohibit all forwarding requests. By
512 default all port forwarding requests are permitted.
513
514 PermitRootLogin
515 Specifies whether root can log in using ssh(1). The argument
516 must be ``yes'', ``without-password'', ``forced-commands-only'',
517 or ``no''. The default is ``yes''.
518
519 If this option is set to ``without-password'', password
520 authentication is disabled for root.
521
522 If this option is set to ``forced-commands-only'', root login
523 with public key authentication will be allowed, but only if the
524 command option has been specified (which may be useful for taking
525 remote backups even if root login is normally not allowed). All
526 other authentication methods are disabled for root.
527
528 If this option is set to ``no'', root is not allowed to log in.
529
530 PermitTunnel
531 Specifies whether tun(4) device forwarding is allowed. The
532 argument must be ``yes'', ``point-to-point'' (layer 3),
533 ``ethernet'' (layer 2), or ``no''. Specifying ``yes'' permits
534 both ``point-to-point'' and ``ethernet''. The default is ``no''.
535
536 PermitUserEnvironment
537 Specifies whether ~/.ssh/environment and environment= options in
538 ~/.ssh/authorized_keys are processed by sshd(8). The default is
539 ``no''. Enabling environment processing may enable users to
540 bypass access restrictions in some configurations using
541 mechanisms such as LD_PRELOAD.
542
543 PidFile
544 Specifies the file that contains the process ID of the SSH
545 daemon. The default is /var/run/sshd.pid.
546
547 Port Specifies the port number that sshd(8) listens on. The default
548 is 22. Multiple options of this type are permitted. See also
549 ListenAddress.
550
551 PrintLastLog
552 Specifies whether sshd(8) should print the date and time of the
553 last user login when a user logs in interactively. The default
554 is ``yes''.
555
556 PrintMotd
557 Specifies whether sshd(8) should print /etc/motd when a user logs
558 in interactively. (On some systems it is also printed by the
559 shell, /etc/profile, or equivalent.) The default is ``yes''.
560
561 Protocol
562 Specifies the protocol versions sshd(8) supports. The possible
563 values are `1' and `2'. Multiple versions must be comma-
564 separated. The default is `2'. Note that the order of the
565 protocol list does not indicate preference, because the client
566 selects among multiple protocol versions offered by the server.
567 Specifying ``2,1'' is identical to ``1,2''.
568
569 PubkeyAuthentication
570 Specifies whether public key authentication is allowed. The
571 default is ``yes''. Note that this option applies to protocol
572 version 2 only.
573
574 RevokedKeys
575 Specifies revoked public keys. Keys listed in this file will be
576 refused for public key authentication. Note that if this file is
577 not readable, then public key authentication will be refused for
578 all users. Keys may be specified as a text file, listing one
579 public key per line, or as an OpenSSH Key Revocation List (KRL)
580 as generated by ssh-keygen(1). For more information on KRLs, see
581 the KEY REVOCATION LISTS section in ssh-keygen(1).
582
583 RhostsRSAAuthentication
584 Specifies whether rhosts or /etc/hosts.equiv authentication
585 together with successful RSA host authentication is allowed. The
586 default is ``no''. This option applies to protocol version 1
587 only.
588
589 RSAAuthentication
590 Specifies whether pure RSA authentication is allowed. The
591 default is ``yes''. This option applies to protocol version 1
592 only.
593
594 ServerKeyBits
595 Defines the number of bits in the ephemeral protocol version 1
596 server key. The minimum value is 512, and the default is 1024.
597
598 StrictModes
599 Specifies whether sshd(8) should check file modes and ownership
600 of the user's files and home directory before accepting login.
601 This is normally desirable because novices sometimes accidentally
602 leave their directory or files world-writable. The default is
603 ``yes''. Note that this does not apply to ChrootDirectory, whose
604 permissions and ownership are checked unconditionally.
605
606 Subsystem
607 Configures an external subsystem (e.g. file transfer daemon).
608 Arguments should be a subsystem name and a command (with optional
609 arguments) to execute upon subsystem request.
610
611 The command sftp-server(8) implements the ``sftp'' file transfer
612 subsystem.
613
614 Alternately the name ``internal-sftp'' implements an in-process
615 ``sftp'' server. This may simplify configurations using
616 ChrootDirectory to force a different filesystem root on clients.
617
618 By default no subsystems are defined. Note that this option
619 applies to protocol version 2 only.
620
621 SyslogFacility
622 Gives the facility code that is used when logging messages from
623 sshd(8). The possible values are: DAEMON, USER, AUTH, LOCAL0,
624 LOCAL1, LOCAL2, LOCAL3, LOCAL4, LOCAL5, LOCAL6, LOCAL7. The
625 default is AUTH.
626
627 TCPKeepAlive
628 Specifies whether the system should send TCP keepalive messages
629 to the other side. If they are sent, death of the connection or
630 crash of one of the machines will be properly noticed. However,
631 this means that connections will die if the route is down
632 temporarily, and some people find it annoying. On the other
633 hand, if TCP keepalives are not sent, sessions may hang
634 indefinitely on the server, leaving ``ghost'' users and consuming
635 server resources.
636
637 The default is ``yes'' (to send TCP keepalive messages), and the
638 server will notice if the network goes down or the client host
639 crashes. This avoids infinitely hanging sessions.
640
641 To disable TCP keepalive messages, the value should be set to
642 ``no''.
643
644 TrustedUserCAKeys
645 Specifies a file containing public keys of certificate
646 authorities that are trusted to sign user certificates for
647 authentication. Keys are listed one per line; empty lines and
648 comments starting with `#' are allowed. If a certificate is
649 presented for authentication and has its signing CA key listed in
650 this file, then it may be used for authentication for any user
651 listed in the certificate's principals list. Note that
652 certificates that lack a list of principals will not be permitted
653 for authentication using TrustedUserCAKeys. For more details on
654 certificates, see the CERTIFICATES section in ssh-keygen(1).
655
656 UseDNS Specifies whether sshd(8) should look up the remote host name and
657 check that the resolved host name for the remote IP address maps
658 back to the very same IP address. The default is ``yes''.
659
660 UseLogin
661 Specifies whether login(1) is used for interactive login
662 sessions. The default is ``no''. Note that login(1) is never
663 used for remote command execution. Note also, that if this is
664 enabled, X11Forwarding will be disabled because login(1) does not
665 know how to handle xauth(1) cookies. If UsePrivilegeSeparation
666 is specified, it will be disabled after authentication.
667
668 UsePAM Enables the Pluggable Authentication Module interface. If set to
669 ``yes'' this will enable PAM authentication using
670 ChallengeResponseAuthentication and PasswordAuthentication in
671 addition to PAM account and session module processing for all
672 authentication types.
673
674 Because PAM challenge-response authentication usually serves an
675 equivalent role to password authentication, you should disable
676 either PasswordAuthentication or ChallengeResponseAuthentication.
677
678 If UsePAM is enabled, you will not be able to run sshd(8) as a
679 non-root user. The default is ``no''.
680
681 UsePrivilegeSeparation
682 Specifies whether sshd(8) separates privileges by creating an
683 unprivileged child process to deal with incoming network traffic.
684 After successful authentication, another process will be created
685 that has the privilege of the authenticated user. The goal of
686 privilege separation is to prevent privilege escalation by
687 containing any corruption within the unprivileged processes. The
688 default is ``yes''. If UsePrivilegeSeparation is set to
689 ``sandbox'' then the pre-authentication unprivileged process is
690 subject to additional restrictions.
691
692 VersionAddendum
693 Optionally specifies additional text to append to the SSH
694 protocol banner sent by the server upon connection. The default
695 is ``none''.
696
697 X11DisplayOffset
698 Specifies the first display number available for sshd(8)'s X11
699 forwarding. This prevents sshd from interfering with real X11
700 servers. The default is 10.
701
702 X11Forwarding
703 Specifies whether X11 forwarding is permitted. The argument must
704 be ``yes'' or ``no''. The default is ``no''.
705
706 When X11 forwarding is enabled, there may be additional exposure
707 to the server and to client displays if the sshd(8) proxy display
708 is configured to listen on the wildcard address (see
709 X11UseLocalhost below), though this is not the default.
710 Additionally, the authentication spoofing and authentication data
711 verification and substitution occur on the client side. The
712 security risk of using X11 forwarding is that the client's X11
713 display server may be exposed to attack when the SSH client
714 requests forwarding (see the warnings for ForwardX11 in
715 ssh_config(5)). A system administrator may have a stance in
716 which they want to protect clients that may expose themselves to
717 attack by unwittingly requesting X11 forwarding, which can
718 warrant a ``no'' setting.
719
720 Note that disabling X11 forwarding does not prevent users from
721 forwarding X11 traffic, as users can always install their own
722 forwarders. X11 forwarding is automatically disabled if UseLogin
723 is enabled.
724
725 X11UseLocalhost
726 Specifies whether sshd(8) should bind the X11 forwarding server
727 to the loopback address or to the wildcard address. By default,
728 sshd binds the forwarding server to the loopback address and sets
729 the hostname part of the DISPLAY environment variable to
730 ``localhost''. This prevents remote hosts from connecting to the
731 proxy display. However, some older X11 clients may not function
732 with this configuration. X11UseLocalhost may be set to ``no'' to
733 specify that the forwarding server should be bound to the
734 wildcard address. The argument must be ``yes'' or ``no''. The
735 default is ``yes''.
736
737 XAuthLocation
738 Specifies the full pathname of the xauth(1) program. The default
739 is /usr/X11R6/bin/xauth.
740
741TIME FORMATS
742 sshd(8) command-line arguments and configuration file options that
743 specify time may be expressed using a sequence of the form:
744 time[qualifier], where time is a positive integer value and qualifier is
745 one of the following:
746
747 <none> seconds
748 s | S seconds
749 m | M minutes
750 h | H hours
751 d | D days
752 w | W weeks
753
754 Each member of the sequence is added together to calculate the total time
755 value.
756
757 Time format examples:
758
759 600 600 seconds (10 minutes)
760 10m 10 minutes
761 1h30m 1 hour 30 minutes (90 minutes)
762
763FILES
764 /etc/ssh/sshd_config
765 Contains configuration data for sshd(8). This file should be
766 writable by root only, but it is recommended (though not
767 necessary) that it be world-readable.
768
769SEE ALSO
770 sshd(8)
771
772AUTHORS
773 OpenSSH is a derivative of the original and free ssh 1.2.12 release by
774 Tatu Ylonen. Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo
775 de Raadt and Dug Song removed many bugs, re-added newer features and
776 created OpenSSH. Markus Friedl contributed the support for SSH protocol
777 versions 1.5 and 2.0. Niels Provos and Markus Friedl contributed support
778 for privilege separation.
779
780OpenBSD 5.3 February 6, 2013 OpenBSD 5.3